Re: panic: ffs_blkfree: freeing free block / + UDMA ICRC error with ad0
On 19 Aug, Greg Lehey wrote:
-current as of Aug 16, ~2pm CEST:
I don't see a freeing free block in the stack trace. What is
missing from the trace below? Does the trace belong to the panic
message?
The text you quotet is the backtrace of the coredump saved by savecore.
The trace shows two panics: the first looks like a page fault kernel
To generate the backtrace I had to reboot twice, one of the reboots was
a little bit strange. I just got a black screen after issuing a shutdown
-r withhin X11... and then it rebootet. Perhaps there was another
coredump.
And here I have another one...:
---snip---
IdlePTD 4812800
initial pcb at 305f60
panicstr: bremfree: bp 0xc6a51d98 not locked
panic messages:
---
Fatal trap 12: page fault while in vm86 mode
fault virtual address = 0xc41c0
fault code = user read, page not present
instruction pointer = 0xc000:0x41c0
stack pointer = 0x0:0xfe0
frame pointer = 0x0:0x0
code segment= base 0x620016, limit 0x1, type 0x1
= DPL 3, pres 1, def32 0, gran 0
processor eflags= interrupt enabled, resume, vm86, IOPL = 0
current process = 544 (XF86_SVGA)
trap number = 12
panic: page fault
syncing disks... panic: bremfree: bp 0xc6a51d98 not locked
Uptime: 3h58m17s
dumping to dev ad0s2b, offset 20704
dump ata0: resetting devices .. done
[...]
#0 dumpsys () at ../../../kern/kern_shutdown.c:479
479 if (dumping++) {
(kgdb)
(kgdb) bt
#0 dumpsys () at ../../../kern/kern_shutdown.c:479
#1 0xc01baf11 in boot (howto=260) at ../../../kern/kern_shutdown.c:322
#2 0xc01bb32a in panic (fmt=0xc02ba51e bremfree: bp %p not locked)
at ../../../kern/kern_shutdown.c:601
#3 0xc01ed20e in bremfree (bp=0xc6a51d98) at ../../../kern/vfs_bio.c:479
#4 0xc01ee948 in vfs_bio_awrite (bp=0xc6a51d98)
at ../../../kern/vfs_bio.c:1472
#5 0xc0235f72 in ffs_fsync (ap=0xc049ae8c) at ../../../ufs/ffs/ffs_vnops.c:239
#6 0xc0233f9f in ffs_sync (mp=0xc1870400, waitfor=2, cred=0xc0e61d00,
p=0xc0337000) at vnode_if.h:441
#7 0xc01fc2e1 in sync (p=0xc0337000, uap=0x0)
at ../../../kern/vfs_syscalls.c:620
#8 0xc01baa37 in boot (howto=256) at ../../../kern/kern_shutdown.c:231
#9 0xc01bb32a in panic (fmt=0xc02cfc5e %s)
at ../../../kern/kern_shutdown.c:601
#10 0xc0276c90 in trap_fatal (frame=0xc049afa8, eva=803264)
at ../../../i386/i386/trap.c:935
#11 0xc02769c9 in trap_pfault (frame=0xc049afa8, usermode=0, eva=803264)
at ../../../i386/i386/trap.c:849
#12 0xc027615c in trap (frame={tf_fs = 0, tf_es = 0, tf_ds = 0, tf_edi = 0,
tf_esi = 12, tf_ebp = 0, tf_isp = -1068912684, tf_ebx = 31116,
tf_edx = 0, tf_ecx = 1056, tf_eax = 32868, tf_trapno = 12, tf_err = 4,
tf_eip = 16832, tf_cs = 49152, tf_eflags = 721431, tf_esp = 4064,
tf_ss = 0}) at ../../../i386/i386/trap.c:408
(kgdb)
---snip---
mode, though the backtrace address looks user mode. The second panic
is a bremfree: bp not locked in the subsequent sync. That one may
be related to some SMP stuff that has been done recently. It would be
interesting to look at the return address from the trap: the code
How (I didn't see id in the backtrace below, where do I have to
look?)?
space ID is 0xc000, which I don't recognize. What process was
running?
---snip---
(32) root@ttyp4 # ps -auxww -M /mnt/var/crash/vmcore.10 -N /mnt/var/crash/kernel.10
ps: Undefined error: 0
---snip---
Hmmm... \me is confused.
---snip---
IdlePTD 4812800
initial pcb at 305f60
panicstr: bremfree: bp 0xc69e0748 not locked
panic messages:
---
panic: ffs_blkfree: freeing free block
panic: from debugger
[...]
#0 dumpsys () at ../../../kern/kern_shutdown.c:479
#1 0xc01baf11 in boot (howto=260) at ../../../kern/kern_shutdown.c:322
#2 0xc01bb32a in panic (fmt=0xc02ba51e bremfree: bp %p not locked)
at ../../../kern/kern_shutdown.c:601
#3 0xc01ed20e in bremfree (bp=0xc69e0748) at ../../../kern/vfs_bio.c:479
#4 0xc01eeb7a in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
at ../../../kern/vfs_bio.c:1632
#5 0xc01ef8d1 in getblk (vp=0xd063eec0, blkno=64, size=8192, slpflag=0,
slptimeo=0) at ../../../kern/vfs_bio.c:2244
#6 0xc01ed2ef in breadn (vp=0xd063eec0, blkno=64, size=8192, rablkno=0x0,
rabsize=0x0, cnt=0, cred=0x0, bpp=0xc049ae10)
at ../../../kern/vfs_bio.c:537
#7 0xc01ed2b4 in bread (vp=0xd063eec0, blkno=64, size=8192, cred=0x0,
bpp=0xc049ae10) at ../../../kern/vfs_bio.c:519
#8 0xc0228650 in ffs_update (vp=0xd063eda0, waitfor=0)
at ../../../ufs/ffs/ffs_inode.c:101
#9 0xc023601f in ffs_fsync (ap=0xc049ae8c) at ../../../ufs/ffs/ffs_vnops.c:292
#10 0xc0233f9f in ffs_sync (mp=0xc1870400, waitfor=2, cred=0xc0e61d00,
p=0xc0337000) at vnode_if.h:441
#11 0xc01fc2e1 in sync (p=0xc0337000, uap=0x0)
at ../../../kern/vfs_syscalls.c:620
#12 0xc01baa37 in boot (howto=256) at ../../../kern/kern_shutdown.c:231
#13 0xc01bb32a in panic
panic: ffs_blkfree: freeing free block / + UDMA ICRC error with ad0
Hi,
-current as of Aug 16, ~2pm CEST:
---snip---
IdlePTD 4812800
initial pcb at 305f60
panicstr: bremfree: bp 0xc69e0748 not locked
panic messages:
---
panic: ffs_blkfree: freeing free block
panic: from debugger
[...]
#0 dumpsys () at ../../../kern/kern_shutdown.c:479
#1 0xc01baf11 in boot (howto=260) at ../../../kern/kern_shutdown.c:322
#2 0xc01bb32a in panic (fmt=0xc02ba51e bremfree: bp %p not locked)
at ../../../kern/kern_shutdown.c:601
#3 0xc01ed20e in bremfree (bp=0xc69e0748) at ../../../kern/vfs_bio.c:479
#4 0xc01eeb7a in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
at ../../../kern/vfs_bio.c:1632
#5 0xc01ef8d1 in getblk (vp=0xd063eec0, blkno=64, size=8192, slpflag=0,
slptimeo=0) at ../../../kern/vfs_bio.c:2244
#6 0xc01ed2ef in breadn (vp=0xd063eec0, blkno=64, size=8192, rablkno=0x0,
rabsize=0x0, cnt=0, cred=0x0, bpp=0xc049ae10)
at ../../../kern/vfs_bio.c:537
#7 0xc01ed2b4 in bread (vp=0xd063eec0, blkno=64, size=8192, cred=0x0,
bpp=0xc049ae10) at ../../../kern/vfs_bio.c:519
#8 0xc0228650 in ffs_update (vp=0xd063eda0, waitfor=0)
at ../../../ufs/ffs/ffs_inode.c:101
#9 0xc023601f in ffs_fsync (ap=0xc049ae8c) at ../../../ufs/ffs/ffs_vnops.c:292
#10 0xc0233f9f in ffs_sync (mp=0xc1870400, waitfor=2, cred=0xc0e61d00,
p=0xc0337000) at vnode_if.h:441
#11 0xc01fc2e1 in sync (p=0xc0337000, uap=0x0)
at ../../../kern/vfs_syscalls.c:620
#12 0xc01baa37 in boot (howto=256) at ../../../kern/kern_shutdown.c:231
#13 0xc01bb32a in panic (fmt=0xc02cfc5e %s)
at ../../../kern/kern_shutdown.c:601
#14 0xc0276c90 in trap_fatal (frame=0xc049afa8, eva=794529)
at ../../../i386/i386/trap.c:935
#15 0xc02769c9 in trap_pfault (frame=0xc049afa8, usermode=0, eva=794529)
at ../../../i386/i386/trap.c:849
#16 0xc027615c in trap (frame={tf_fs = 0, tf_es = 0, tf_ds = 0, tf_edi = 3557,
tf_esi = 20371, tf_ebp = 24, tf_isp = -1068912684, tf_ebx = 8,
tf_edx = 145, tf_ecx = 3, tf_eax = 1544, tf_trapno = 12, tf_err = 4,
tf_eip = 8097, tf_cs = 49152, tf_eflags = 721410, tf_esp = 4030,
tf_ss = 0}) at ../../../i386/i386/trap.c:408
#17 0x1fa1 in ?? ()
Cannot access memory at address 0x18.
---snip---
Transcript of the console message:
---snip---
ad0s2e: UDMA ICRC error: reading fsbn 61053200 of 27057504-27057535
(ad0s2e bn 61053200; cn 4037 tn 218 sn 26) retrying
dev = ad0s2e, block = 6885944, fs = /big
panic: ffs_blkfree: freeing free block
---snip---
This happened after issuing a shutdown -h now, after the
waiting 60 seconds message, before the display of the uptime.
My sysctl.conf:
---snip---
vfs.vmiodirenable=1
net.inet.tcp.slowstart_flightsize=3
---snip---
My dmesg:
---snip---
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.0-CURRENT #21: Thu Aug 16 16:01:53 CEST 2001
[EMAIL PROTECTED]:/big/usr/src/sys/i386/compile/WORK
Timecounter i8254 frequency 1193182 Hz
Timecounter TSC frequency 801838143 Hz
CPU: AMD Duron(tm) Processor (801.84-MHz 686-class CPU)
Origin = AuthenticAMD Id = 0x631 Stepping = 1
Features=0x183f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR
AMD Features=0xc044b18,AMIE,DSP,3DNow!
real memory = 268369920 (262080K bytes)
avail memory = 256524288 (250512K bytes)
Preloaded elf kernel kernel at 0xc0478000.
Preloaded elf module cd9660.ko at 0xc04780a8.
Preloaded elf module msdosfs.ko at 0xc0478148.
Preloaded elf module ntfs.ko at 0xc04781e8.
Preloaded elf module procfs.ko at 0xc0478284.
Preloaded elf module linux.ko at 0xc0478324.
Preloaded elf module miibus.ko at 0xc04783c4.
Preloaded elf module if_xl.ko at 0xc0478464.
Preloaded elf module snd_pcm.ko at 0xc0478504.
Preloaded elf module snd_es137x.ko at 0xc04785a4.
Preloaded elf module snd_via82c686.ko at 0xc0478648.
Preloaded elf module usb.ko at 0xc04786f0.
Preloaded elf module agp.ko at 0xc047878c.
Preloaded elf module accf_data.ko at 0xc0478828.
Preloaded elf module accf_http.ko at 0xc04788cc.
Preloaded elf module random.ko at 0xc0478970.
Preloaded elf module atspeaker.ko at 0xc0478a10.
Preloaded elf module joy.ko at 0xc0478ab4.
Pentium Pro MTRR support enabled
VESA: v3.0, 16384k memory, flags:0x1, mode table:0xc0319f17 (1000117)
VESA: 3dfx Interactive, Inc.
Using $PIR table, 9 entries at 0xc00fdd00
acpi0: BIOSTA AWRDACPI on motherboard
acpi0: power button is handled as a fixed feature programming model.
Timecounter ACPI frequency 3579545 Hz
acpi_timer0: 24-bit timer at 3.579545MHz port 0x4008-0x400b on acpi0
acpi_cpu0: CPU on acpi0
acpi_button0: Power Button on acpi0
acpi_button1: Sleep Button on acpi0
acpi_pcib0: Host-PCI bridge on acpi0
pci0: PCI bus on acpi_pcib0
agp0: VIA Generic host to PCI bridge mem 0xd000-0xd3ff at device 0.0 on pci0
pcib1: PCI-PCI bridge at device 1.0 on pci0
pci1: PCI bus on pcib1
pci1: display, VGA at 0.0 (no driver attached)
isab0:
Re: panic: ffs_blkfree: freeing free block / + UDMA ICRC error with ad0
On Saturday, 18 August 2001 at 14:56:10 +0200, Alexander Leidinger wrote:
Hi,
-current as of Aug 16, ~2pm CEST:
I don't see a freeing free block in the stack trace. What is
missing from the trace below? Does the trace belong to the panic
message?
The trace shows two panics: the first looks like a page fault kernel
mode, though the backtrace address looks user mode. The second panic
is a bremfree: bp not locked in the subsequent sync. That one may
be related to some SMP stuff that has been done recently. It would be
interesting to look at the return address from the trap: the code
space ID is 0xc000, which I don't recognize. What process was
running?
---snip---
IdlePTD 4812800
initial pcb at 305f60
panicstr: bremfree: bp 0xc69e0748 not locked
panic messages:
---
panic: ffs_blkfree: freeing free block
panic: from debugger
[...]
#0 dumpsys () at ../../../kern/kern_shutdown.c:479
#1 0xc01baf11 in boot (howto=260) at ../../../kern/kern_shutdown.c:322
#2 0xc01bb32a in panic (fmt=0xc02ba51e bremfree: bp %p not locked)
at ../../../kern/kern_shutdown.c:601
#3 0xc01ed20e in bremfree (bp=0xc69e0748) at ../../../kern/vfs_bio.c:479
#4 0xc01eeb7a in getnewbuf (slpflag=0, slptimeo=0, size=8192, maxsize=8192)
at ../../../kern/vfs_bio.c:1632
#5 0xc01ef8d1 in getblk (vp=0xd063eec0, blkno=64, size=8192, slpflag=0,
slptimeo=0) at ../../../kern/vfs_bio.c:2244
#6 0xc01ed2ef in breadn (vp=0xd063eec0, blkno=64, size=8192, rablkno=0x0,
rabsize=0x0, cnt=0, cred=0x0, bpp=0xc049ae10)
at ../../../kern/vfs_bio.c:537
#7 0xc01ed2b4 in bread (vp=0xd063eec0, blkno=64, size=8192, cred=0x0,
bpp=0xc049ae10) at ../../../kern/vfs_bio.c:519
#8 0xc0228650 in ffs_update (vp=0xd063eda0, waitfor=0)
at ../../../ufs/ffs/ffs_inode.c:101
#9 0xc023601f in ffs_fsync (ap=0xc049ae8c) at ../../../ufs/ffs/ffs_vnops.c:292
#10 0xc0233f9f in ffs_sync (mp=0xc1870400, waitfor=2, cred=0xc0e61d00,
p=0xc0337000) at vnode_if.h:441
#11 0xc01fc2e1 in sync (p=0xc0337000, uap=0x0)
at ../../../kern/vfs_syscalls.c:620
#12 0xc01baa37 in boot (howto=256) at ../../../kern/kern_shutdown.c:231
#13 0xc01bb32a in panic (fmt=0xc02cfc5e %s)
at ../../../kern/kern_shutdown.c:601
#14 0xc0276c90 in trap_fatal (frame=0xc049afa8, eva=794529)
at ../../../i386/i386/trap.c:935
#15 0xc02769c9 in trap_pfault (frame=0xc049afa8, usermode=0, eva=794529)
at ../../../i386/i386/trap.c:849
#16 0xc027615c in trap (frame={tf_fs = 0, tf_es = 0, tf_ds = 0, tf_edi = 3557,
tf_esi = 20371, tf_ebp = 24, tf_isp = -1068912684, tf_ebx = 8,
tf_edx = 145, tf_ecx = 3, tf_eax = 1544, tf_trapno = 12, tf_err = 4,
tf_eip = 8097, tf_cs = 49152, tf_eflags = 721410, tf_esp = 4030,
tf_ss = 0}) at ../../../i386/i386/trap.c:408
#17 0x1fa1 in ?? ()
Cannot access memory at address 0x18.
Greg
--
See complete headers for address and phone numbers
To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-current in the body of the message
