kern/57174: [ata] 4.9-PRERELEASE panic: ata_dmasetup: transfer active on this device!

Svyaz Service JSC
 

System: FreeBSD grosbein.pp.ru 4.9-PRERELEASE FreeBSD 4.9-PRERELEASE #20: Wed Sep 24 21:03:53 KRAST 2003 eu@grosbein.pp.ru:/usr/local/obj/usr/local/src/sys/DADV i386
CPUTYPE=i686 and no other optimizations

Today I've upgraded my early 4.9-PRERELEASE to RELENG_4,
after I've received 4.9-BETA announcement.
Full cycle was completed: make builworld, make kernel,
make installworld, mergemaster.

I decided to make index of my local copy of Maxim Moshkow
library (4.6Gb of texts) using following command:

glimpseindex -H /home/moshkow/.g -B -b -f -M 256 -n -t /home/moshkow

I use glimpse-4.12.6 that was built 17 Jun 2002 using ports.
It started to work making heavy load to my system,
both of CPU and hard drive. Meantime I went online
using pppd and started to surf the web using lynx.

Suddenly my previously rock-stable system crashed.
Here comes GDB backtrace.

GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read called at /usr/local/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 2627 in elfstab_build_psymtabs
Deprecated bfd_read called at /usr/local/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf

IdlePTD at phsyical address 0x003c5000
initial pcb at physical address 0x0031baa0
panicstr: ata_dmasetup: transfer active on this device!
panic messages:
---
panic: ata_dmasetup: transfer active on this device!

syncing disks... ad2: WRITE command timeout tag=1 serv=0 - resetting
ad2: invalidating queued requests
ata1: resetting devices .. ad2: invalidating queued requests
done
ad2: no request for tag=2
ad2: invalidating queued requests
67 43 43 43 43 43 43 43 59 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 43 ad2: READ command timeout tag=2 serv=0 - resetting
ad2: invalidating queued requests
ata1: resetting devices .. ad2: invalidating queued requests
done
43 ad2: no request for tag=2
ad2: invalidating queued requests

0xc7c562f8 1: dev:#ad/0x20017, flags:20000000, blkno:27213840, lblkno:27213840
0xc7c3d388 2: dev:#ad/0x20017, flags:20000000, blkno:27249392, lblkno:27249392
0xc7c3bc30 3: dev:#ad/0x20017, flags:20000000, blkno:26315504, lblkno:26315504
0xc7c2810c 4: dev:#ad/0x20017, flags:20000000, blkno:26402832, lblkno:26402832
0xc7c260a0 5: dev:#ad/0x20017, flags:20000000, blkno:27123728, lblkno:27123728
0xc7c1cb7c 6: dev:#ad/0x20017, flags:20000000, blkno:26697168, lblkno:26697168
0xc7c0ef04 7: dev:#ad/0x20017, flags:20000000, blkno:26729952, lblkno:26729952
0xc7c0d8f8 8: dev:#ad/0x20017, flags:20000000, blkno:26348288, lblkno:26348288
0xc7c09588 9: dev:#ad/0x20017, flags:20000000, blkno:16605456, lblkno:16605456
0xc7c00978 10: dev:#ad/0x20017, flags:20000000, blkno:26312720, lblkno:26312720
0xc7bfe674 11: dev:#ad/0x20017, flags:20000000, blkno:27310672, lblkno:27310672
0xc7bd2cbc 12: dev:#ad/0x20017, flags:21021024, blkno:16580688, lblkno:16580688
0xc7bd1be0 13: dev:#ad/0x20017, flags:20000000, blkno:27037472, lblkno:27037472
0xc7b98d78 14: dev:#ad/0x20017, flags:20000000, blkno:26763280, lblkno:26763280
giving up on 14 buffers
Uptime: 18m25s
/dev/vmmon: Module vmmon: unloaded

dumping to dev #ad/0x20011, offset 128
dump ata1: resetting devices .. ad2: invalidating queued requests
done
319 318 317 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301 300 299 298 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 282 281 280 279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 263 262 261 260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 244 243 242 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226 225 224 223 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 207 206 205 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 188 187 186 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 6!
3 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
---
#0 dumpsys () at /usr/local/src/sys/kern/kern_shutdown.c:487
487 if (dumping++) {
(kgdb) bt
#0 dumpsys () at /usr/local/src/sys/kern/kern_shutdown.c:487
#1 0xc0161278 in boot (howto=256)
at /usr/local/src/sys/kern/kern_shutdown.c:316
#2 0xc01616c5 in panic (
fmt=0xc0291120 "ata_dmasetup: transfer active on this device!")
at /usr/local/src/sys/kern/kern_shutdown.c:595
#3 0xc01335fc in ata_dmastart (atadev=0xc13e5530,
data=0xcc5da000 <Address 0xcc5da000 out of bounds>, count=131072, dir=1)
at /usr/local/src/sys/dev/ata/ata-dma.c:1374
#4 0xc013556f in ad_service (adp=0xc1402400, change=1)
at /usr/local/src/sys/dev/ata/ata-disk.c:787
#5 0xc0134c6f in ad_transfer (request=0xc20b4f80)
at /usr/local/src/sys/dev/ata/ata-disk.c:499
#6 0xc012bda7 in ata_start (ch=0xc13e5500)
at /usr/local/src/sys/dev/ata/ata-all.c:681
#7 0xc01346c8 in adstrategy (bp=0xc7b91b58)
at /usr/local/src/sys/dev/ata/ata-disk.c:307
#8 0xc016b501 in diskstrategy (bp=0xc7b91b58)
at /usr/local/src/sys/kern/subr_disk.c:251
#9 0xc019ce4f in spec_strategy (ap=0xcf70acb4)
at /usr/local/src/sys/miscfs/specfs/spec_vnops.c:479
#10 0xc019c7f5 in spec_vnoperate (ap=0xcf70acb4)
at /usr/local/src/sys/miscfs/specfs/spec_vnops.c:119
#11 0xc0202e3d in ufs_vnoperatespec (ap=0xcf70acb4)
---Type <return> to continue, or q <return> to quit---
at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2394
#12 0xc020270d in ufs_strategy (ap=0xcf70acf8) at vnode_if.h:944
#13 0xc0202e05 in ufs_vnoperate (ap=0xcf70acf8)
at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2376
#14 0xc0188c07 in bwrite (bp=0xc7b91b58) at vnode_if.h:944
#15 0xc018e95b in vop_stdbwrite (ap=0xcf70ad34)
at /usr/local/src/sys/kern/vfs_default.c:344
#16 0xc018e771 in vop_defaultop (ap=0xcf70ad34)
at /usr/local/src/sys/kern/vfs_default.c:152
#17 0xc0202e05 in ufs_vnoperate (ap=0xcf70ad34)
at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2376
#18 0xc0188fa6 in bawrite (bp=0xc7b91b58) at vnode_if.h:1193
#19 0xc018df77 in cluster_wbuild (vp=0xcfa43cc0, size=8192, start_lbn=23452,
len=16) at /usr/local/src/sys/kern/vfs_cluster.c:945
#20 0xc018da92 in cluster_write (bp=0xc7c67c64, filesize=192118784,
seqcount=127) at /usr/local/src/sys/kern/vfs_cluster.c:576
#21 0xc01fc33f in ffs_write (ap=0xcf70ae74)
at /usr/local/src/sys/ufs/ufs/ufs_readwrite.c:570
#22 0xc0198c42 in vn_write (fp=0xc1f65c80, uio=0xcf70aee0, cred=0xc195b700,
flags=0, p=0xcf63f220) at vnode_if.h:363
#23 0xc0171096 in dofilewrite (p=0xcf63f220, fp=0xc1f65c80, fd=11,
buf=0x18570000, nbyte=8192, offset=-1, flags=0)
at /usr/local/src/sys/sys/file.h:163
#24 0xc0170f47 in write (p=0xcf63f220, uap=0xcf70af80)
---Type <return> to continue, or q <return> to quit---
at /usr/local/src/sys/kern/sys_generic.c:329
#25 0xc0272301 in syscall2 (frame={tf_fs = 408354863, tf_es = 672333871,
tf_ds = -1078001617, tf_edi = 408354816, tf_esi = 672345944,
tf_ebp = -1077958108, tf_isp = -814698540, tf_ebx = 672270316,
tf_edx = 672345944, tf_ecx = 0, tf_eax = 4, tf_trapno = 0, tf_err = 2,
tf_eip = 672229000, tf_cs = 31, tf_eflags = 659, tf_esp = -1077958152,
tf_ss = 47}) at /usr/local/src/sys/i386/i386/trap.c:1175
#26 0xc0265345 in Xint0x80_syscall ()
#27 0x2811432d in ?? ()
#28 0x28114295 in ?? ()
#29 0x281110a6 in ?? ()
#30 0x280fbcb5 in ?? ()
#31 0x8055146 in ?? ()
#32 0x8051b68 in ?? ()
#33 0x8052603 in ?? ()
#34 0x8050510 in ?? ()
#35 0x804ad64 in ?? ()
#36 0x8049361 in ?? ()
(kgdb) q

Here comes /var/run/dmesg.boot

Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 4.9-PRERELEASE #20: Wed Sep 24 21:03:53 KRAST 2003
eu@grosbein.pp.ru:/usr/local/obj/usr/local/src/sys/DADV
Timecounter "i8254" frequency 1193165 Hz
CPU: Intel Celeron (902.03-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x68a Stepping = 10
Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory = 335478784 (327616K bytes)
config> flags atkbd 0x0
config> quit
avail memory = 322236416 (314684K bytes)
Preloaded elf kernel "kernel" at 0xc03a6000.
Preloaded userconfig_script "/boot/kernel.conf" at 0xc03a609c.
VESA: v2.0, 4096k memory, flags:0x1, mode table:0xc00c0e38 (c0000e38)
VESA: S3 Incorporated Trio3D.
Pentium Pro MTRR support enabled
Using $PIR table, 8 entries at 0xc00fdef0
apm0: <APM BIOS> on motherboard
apm0: found APM BIOS v1.2, connected at v1.2
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <S3 Trio3D graphics accelerator> at 0.0
isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0xf000-0xf00f at device 7.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xe000-0xe01f irq 11 at device 7.2 on pci0
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uscanner0: Hewlett-Packard HP ScanJet 2200C, rev 1.10/1.00, addr 2
uhid0: American Power Conversion Back-UPS 500 FW: 6.5.I USB FW: c1 , rev 1.10/1.00, addr 3, iclass 3/0
intpm0: <Intel 82371AB Power management controller> port 0x5000-0x500f irq 9 at device 7.3 on pci0
intpm0: I/O mapped 5000
intpm0: intr IRQ 9 enabled revision 0
smbus0: <System Management Bus> on intsmb0
smb0: <SMBus general purpose I/O> on smbus0
intpm0: PM I/O mapped 4000
fxp0: <Intel 82559 Pro/100 Ethernet> port 0xe400-0xe43f mem 0xe5000000-0xe50fffff,0xe5100000-0xe5100fff irq 10 at device 15.0 on pci0
fxp0: Ethernet address 00:90:27:a7:5c:72
inphy0: <i82555 10/100 media interface> on miibus0
inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
orm0: <Option ROM> at iomem 0xc0000-0xc7fff on isa0
pmtimer0 on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model NetMouse/NetScroll Optical, device ID 0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> on isa0
sc0: VGA <24 virtual consoles, flags=0x200>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/16 bytes threshold
ppbus0: IEEE1284 device found /NIBBLE/ECP
Probing for PnP devices on ppbus0:
ppbus0: <HEWLETT-PACKARD DESKJET 610C> MLC,PCL,PML
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
pcm0: <Yamaha OPL-SAx> at port 0x220-0x22f,0x530-0x537,0x388-0x38f,0x330-0x331,0x370-0x371 irq 5 drq 0,1 on isa0
DUMMYNET initialized (011031)
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to deny, unlimited logging
IPsec: Initialized Security Association Processing.
ad0: 6149MB <WDC AC26400B> [13328/15/63] at ata0-master UDMA33
ad2: 39266MB <IC35L040AVER07-0> [79780/16/63] at ata1-master tagged UDMA33
acd0: CD-RW <SONY CD-RW CRX140E> at ata0-slave UDMA33
Mounting root from ufs:/dev/ad2s1a
WARNING: / was not properly dismounted

Now kernel config file:

#for strings -n 3 /kernel | grep ^___ | sed -e 's/^___//' > MYKERNEL
options INCLUDE_CONFIG_FILE

machine i386
#cpu I386_CPU
#cpu I486_CPU
#cpu I586_CPU
cpu I686_CPU
options CPU_ENABLE_SSE #enables SSE/MMX2 instructions support.
ident DADV
maxusers 128

makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols

#options MATH_EMULATE #Support for x87 emulation
options CLK_CALIBRATION_LOOP
options "CLK_USE_I8254_CALIBRATION"
options CLK_USE_TSC_CALIBRATION

options INET #InterNETworking
#options INET6 #IPv6 communications protocols
options FFS #Berkeley Fast Filesystem
options FFS_ROOT #FFS usable as root device [keep this!]
#options MFS #Memory Filesystem
#options MD_ROOT #MD is a potential root device
#options NFS #Network Filesystem
#options NFS_ROOT #NFS usable as root device, NFS required
options MSDOSFS #MSDOS Filesystem
#options CD9660 #ISO 9660 Filesystem
#options CD9660_ROOT #CD-ROM usable as root, CD9660 required
options PROCFS #Process filesystem
#options EXT2FS #Linux ext2 filesystem
options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!]
options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI
options UCONSOLE #Allow users to grab the console
options USERCONFIG #boot -c editor
options VISUAL_USERCONFIG #visual boot -c editor
options KTRACE #ktrace(1) support
options CPU_SUSP_HLT
#options "NO_F00F_HACK"
options USER_LDT
options PPP_BSDCOMP
options PPP_DEFLATE
options PPP_FILTER

options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores

options SHMALL=4097
options SHMMAXPGS=4097
options SHMMAX=(SHMMAXPGS*PAGE_SIZE+1)
options SEMMAP=255
options SEMMNI=235
options SEMMNS=255
options SEMMNU=235
options SEMMSL=255
options SEMOPM=201
options SEMUME=201

options P1003_1B #Posix P1003_1B real-time extensions
options _KPOSIX_PRIORITY_SCHEDULING
options _KPOSIX_VERSION=199309L
options ICMP_BANDLIM #Rate limit bad replies

#options FDESC
options NSWAPDEV=4

device isa
device eisa
device pci
options AUTO_EOI_1

# Floppy drives
device fdc0 at isa? port IO_FD1 irq 6 drq 2
device fd0 at fdc0 drive 0
#device fd1 at fdc0 drive 1

# ATA and ATAPI devices
#device ata0 at isa? port IO_WD1 irq 14 flags 0xb0ffb0ff
#device ata1 at isa? port IO_WD2 irq 15 flags 0xb0ffb0ff
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
#device atapifd # ATAPI floppy drives
#device atapist # ATAPI tape drives
options ATA_STATIC_ID #Static device numbering

# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc0 at isa? port IO_KBD
device atkbd0 at atkbdc? irq 1

# Options for atkbd:
options ATKBD_DFLT_KEYMAP # specify the built-in keymap
makeoptions ATKBD_DFLT_KEYMAP="ru.koi8-r.pdwn"

device psm0 at atkbdc? irq 12

device vga0 at isa?
options VESA
options VGA_WIDTH90

# splash screen/screen saver
pseudo-device splash

# syscons is the default console driver, resembling an SCO console
device sc0 at isa?
options SC_DFLT_FONT # compile font in
makeoptions SC_DFLT_FONT=cp866

options MAXCONS=24
options SC_HISTORY_SIZE=1000
options SC_MOUSE_CHAR=0x03
#options SC_TWOBUTTON_MOUSE
options SC_PIXEL_MODE

# Floating point support - do not disable.
device npx0 at nexus? port IO_NPX irq 13

# Power management support (see LINT for more options)
#device apm0 at nexus? flags 0x31 # Advanced Power Management
device apm0 at nexus? # Advanced Power Management

# Serial (COM) ports
device sio0 at isa? port IO_COM1 flags 0x10 irq 4
device sio1 at isa? port IO_COM2 irq 3

device miibus
device fxp

# Parallel port
device ppc0 at isa? irq 7
device ppbus # Parallel port bus (required)
device lpt # Printer
#device plip # TCP/IP over parallel
device ppi # Parallel port interface device

#device joy0 at isa? port IO_GAME

# Pseudo devices - the number indicates how many units to allocated.
pseudo-device loop # Network loopback
pseudo-device ether # Ethernet support
pseudo-device sl 2 # Kernel SLIP
pseudo-device ppp 2 # Kernel PPP
pseudo-device tun # Packet tunnel.
pseudo-device pty 16 # Pseudo-ttys (telnet etc)
#pseudo-device md # Memory "disks"
pseudo-device gif 4 # IPv6 and IPv4 tunneling
pseudo-device faith 1 # IPv6-to-IPv4 relaying (translation)
pseudo-device snp
#pseudo-device vn
pseudo-device gzip # Exec gzipped a.out's
pseudo-device speaker

# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device bpf #Berkeley packet filter
options MSGBUF_SIZE=40960

device pcm

#options QUOTA
options IPFIREWALL
options IPFIREWALL_VERBOSE
#options "IPFIREWALL_VERBOSE_LIMIT=100"
options IPDIVERT
options IPSTEALTH

options DUMMYNET
options SOFTUPDATES

#device smbus0
#device iicbus0
#device iicbb0
#device intpm0
#device smb0 at smbus?

device smbus
#device iicbus
#device iicbb
device intpm
#device alpm
#device ichsmb
device smb

#device ic
#device iic
#device iicsmb

options DDB
options DDB_UNATTENDED

#options LIBMCHAIN
#options LIBICONV
#options NETSMB
#options NETSMBCRYPTO

options RANDOM_IP_ID
#options SMBFS

options UFS_DIRHASH
options PQ_CACHESIZE=128 # color for 128k/16k cache
options SHOW_BUSYBUFS

device uhci
#device ohci
device usb
device uscanner
device ugen
device uhid
device ucom
device tap

#options SHUTDOWN_BEEP

options IPSEC #IP security
options IPSEC_ESP #IP security (crypto; define w/ IPSEC)

options INVARIANTS
options INVARIANT_SUPPORT

Here is /boot/loader.conf

hw.ata.wc=1
hw.ata.ata_dma=1
hw.ata.tags=1
hw.ata.atapi_dma=1
userconfig_script_load="YES"
#uscanner_load="YES"
autoboot_delay=2
rootdevname="/dev/ad0a" # why is it here? do not remember
#if_fxp_load="YES"

I'll try to reproduce this after PR will be sent successfully.
 

Unknown for me.

 

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Thu, 25 Sep 2003 01:01:12 +0800
This is reproducable. Here is the second crashdump, its nearly the same as the first. GNU gdb 4.18 (FreeBSD) Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read cal= led at /usr/local/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/= dbxread.c line 2627 in elfstab_build_psymtabs Deprecated bfd_read called at /usr/local/src/gnu/usr.bin/binutils/gdb/../..= /../../contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf IdlePTD at phsyical address 0x003c5000 initial pcb at physical address 0x0031baa0 panicstr: ata_dmasetup: transfer active on this device! panic messages: --- panic: ata_dmasetup: transfer active on this device! syncing disks... ad2: WRITE command timeout tag=3D1 serv=3D0 - resetting ad2: invalidating queued requests ata1: resetting devices .. ad2: invalidating queued requests done ad2: no request for tag=3D2 ad2: invalidating queued requests 72 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48 48=20 0xc7c5cc04 1: dev:#ad/0x20017, flags:20000000, blkno:28601072, lblkno:28601= 072 0xc7c501b4 2: dev:#ad/0x20017, flags:20000000, blkno:28658416, lblkno:28658= 416 0xc7c4aeb4 3: dev:#ad/0x20017, flags:20000000, blkno:27937536, lblkno:27937= 536 0xc7c344e0 4: dev:#ad/0x20017, flags:20000000, blkno:28655632, lblkno:28655= 632 0xc7c224f8 5: dev:#ad/0x20017, flags:20000000, blkno:28565520, lblkno:28565= 520 0xc7c1f8e0 6: dev:#ad/0x20017, flags:20000000, blkno:27881968, lblkno:27881= 968 0xc7c0c438 7: dev:#ad/0x20017, flags:20000000, blkno:28297968, lblkno:28297= 968 0xc7c0b210 8: dev:#ad/0x20017, flags:200212a0, blkno:27758480, lblkno:-24588 0xc7c09058 9: dev:#ad/0x20017, flags:20000000, blkno:27758320, lblkno:27758= 320 0xc7c07a4c 10: dev:#ad/0x20017, flags:20000000, blkno:26373504, lblkno:2637= 3504 0xc7bec3f4 11: dev:#ad/0x20017, flags:20000000, blkno:26402832, lblkno:2640= 2832 0xc7bea23c 12: dev:#ad/0x20017, flags:20000000, blkno:28181504, lblkno:2818= 1504 0xc7bc0a3c 13: dev:#ad/0x20017, flags:20000000, blkno:27844624, lblkno:2784= 4624 0xc7bbcbfc 14: dev:#ad/0x20017, flags:20000000, blkno:28633856, lblkno:2863= 3856 0xc7bb2f10 15: dev:#ad/0x20017, flags:20000000, blkno:26136384, lblkno:2613= 6384 0xc7baf600 16: dev:#ad/0x20017, flags:20000000, blkno:26222608, lblkno:2622= 2608 0xc7ba0230 17: dev:#ad/0x20017, flags:20000000, blkno:27758480, lblkno:2775= 8480 giving up on 17 buffers Uptime: 1h38m43s /dev/vmmon: Module vmmon: unloaded dumping to dev #ad/0x20011, offset 128 dump ata1: resetting devices .. ad2: invalidating queued requests done 319 318 317 316 315 314 313 312 311 310 309 308 307 306 305 304 303 302 301= 300 299 298 297 296 295 294 293 292 291 290 289 288 287 286 285 284 283 28= 2 281 280 279 278 277 276 275 274 273 272 271 270 269 268 267 266 265 264 2= 63 262 261 260 259 258 257 256 255 254 253 252 251 250 249 248 247 246 245 = 244 243 242 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226= 225 224 223 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 20= 7 206 205 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 1= 88 187 186 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 = 169 168 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151= 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 13= 2 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 1= 13 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93= 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68= 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43= 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18= 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0=20 --- #0 dumpsys () at /usr/local/src/sys/kern/kern_shutdown.c:487 487 if (dumping++) { (kgdb) bt #0 dumpsys () at /usr/local/src/sys/kern/kern_shutdown.c:487 #1 0xc0161278 in boot (howto=3D256) at /usr/local/src/sys/kern/kern_shutdown.c:316 #2 0xc01616c5 in panic ( fmt=3D0xc0291120 "ata_dmasetup: transfer active on this device!") at /usr/local/src/sys/kern/kern_shutdown.c:595 #3 0xc01335fc in ata_dmastart (atadev=3D0xc13e5530,=20 data=3D0xcc31a000 <Address 0xcc31a000 out of bounds>, count=3D131072, d= ir=3D1) at /usr/local/src/sys/dev/ata/ata-dma.c:1374 #4 0xc013556f in ad_service (adp=3D0xc1402400, change=3D1) at /usr/local/src/sys/dev/ata/ata-disk.c:787 #5 0xc0134c6f in ad_transfer (request=3D0xc1f84100) at /usr/local/src/sys/dev/ata/ata-disk.c:499 #6 0xc012bda7 in ata_start (ch=3D0xc13e5500) at /usr/local/src/sys/dev/ata/ata-all.c:681 #7 0xc01346c8 in adstrategy (bp=3D0xc7b91774) at /usr/local/src/sys/dev/ata/ata-disk.c:307 #8 0xc016b501 in diskstrategy (bp=3D0xc7b91774) at /usr/local/src/sys/kern/subr_disk.c:251 #9 0xc019ce4f in spec_strategy (ap=3D0xcf85dcb4) at /usr/local/src/sys/miscfs/specfs/spec_vnops.c:479 #10 0xc019c7f5 in spec_vnoperate (ap=3D0xcf85dcb4) at /usr/local/src/sys/miscfs/specfs/spec_vnops.c:119 #11 0xc0202e3d in ufs_vnoperatespec (ap=3D0xcf85dcb4) ---Type <return> to continue, or q <return> to quit--- at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2394 #12 0xc020270d in ufs_strategy (ap=3D0xcf85dcf8) at vnode_if.h:944 #13 0xc0202e05 in ufs_vnoperate (ap=3D0xcf85dcf8) at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2376 #14 0xc0188c07 in bwrite (bp=3D0xc7b91774) at vnode_if.h:944 #15 0xc018e95b in vop_stdbwrite (ap=3D0xcf85dd34) at /usr/local/src/sys/kern/vfs_default.c:344 #16 0xc018e771 in vop_defaultop (ap=3D0xcf85dd34) at /usr/local/src/sys/kern/vfs_default.c:152 #17 0xc0202e05 in ufs_vnoperate (ap=3D0xcf85dd34) at /usr/local/src/sys/ufs/ufs/ufs_vnops.c:2376 #18 0xc0188fa6 in bawrite (bp=3D0xc7b91774) at vnode_if.h:1193 #19 0xc018df77 in cluster_wbuild (vp=3D0xcf9b2380, size=3D8192, start_lbn= =3D54076,=20 len=3D16) at /usr/local/src/sys/kern/vfs_cluster.c:945 #20 0xc018da92 in cluster_write (bp=3D0xc7c46760, filesize=3D442990592,=20 seqcount=3D127) at /usr/local/src/sys/kern/vfs_cluster.c:576 #21 0xc01fc33f in ffs_write (ap=3D0xcf85de74) at /usr/local/src/sys/ufs/ufs/ufs_readwrite.c:570 #22 0xc0198c42 in vn_write (fp=3D0xc1f041c0, uio=3D0xcf85dee0, cred=3D0xc18= e2800,=20 flags=3D0, p=3D0xcf65d700) at vnode_if.h:363 #23 0xc0171096 in dofilewrite (p=3D0xcf65d700, fp=3D0xc1f041c0, fd=3D11,=20 buf=3D0x18570000, nbyte=3D8192, offset=3D-1, flags=3D0) at /usr/local/src/sys/sys/file.h:163 #24 0xc0170f47 in write (p=3D0xcf65d700, uap=3D0xcf85df80) ---Type <return> to continue, or q <return> to quit--- at /usr/local/src/sys/kern/sys_generic.c:329 #25 0xc0272301 in syscall2 (frame=3D{tf_fs =3D -1078001617, tf_es =3D -8133= 67249,=20 tf_ds =3D 672268335, tf_edi =3D 408354816, tf_esi =3D 672345944,=20 tf_ebp =3D -1077958112, tf_isp =3D -813309996, tf_ebx =3D 672270316,= =20 tf_edx =3D 672345944, tf_ecx =3D 0, tf_eax =3D 4, tf_trapno =3D 0, tf= _err =3D 2,=20 tf_eip =3D 672229000, tf_cs =3D 31, tf_eflags =3D 659, tf_esp =3D -10= 77958156,=20 tf_ss =3D 47}) at /usr/local/src/sys/i386/i386/trap.c:1175 #26 0xc0265345 in Xint0x80_syscall () #27 0x2811432d in ?? () #28 0x28114295 in ?? () #29 0x281110a6 in ?? () #30 0x280fbcb5 in ?? () #31 0x8053ffa in ?? () #32 0x8051b68 in ?? () #33 0x8052603 in ?? () #34 0x8050510 in ?? () #35 0x804ad64 in ?? () Cannot access memory at address 0xbfbffab0. (kgdb) q Eugene Grosbein

Responsible Changed
From-To:	freebsd-bugs->sos
By:	kris
When:	Fri Oct 10 22:31:47 PDT 2003
Why:	Assign to ata maintainer

Reply via E-mail
From:	dmitry@atlantis.dp.ua
Date:	Tue, 21 Oct 2003 10:45:09 +0300 (EEST)
Hello! I'm curious whether this issue would be critical for ANY ata(4)-system. So (to the PR originator): Eugene, could you try your experiment with tagged queueing turned off (hw.ata.tags=0)? Sincerely, Dmitry -- Atlantis ISP, System Administrator e-mail: dmitry@atlantis.dp.ua nic-hdl: LYNX-RIPE

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Tue, 21 Oct 2003 15:57:57 +0800
dmitry@atlantis.dp.ua wrote: > > Hello! > > I'm curious whether this issue would be critical for ANY ata(4)-system. > So (to the PR originator): Eugene, could you try your experiment with > tagged queueing turned off (hw.ata.tags=0)? I will tonight. Eugene Grosbein

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Tue, 21 Oct 2003 16:03:20 +0800
dmitry@atlantis.dp.ua wrote: > > Hello! > > I'm curious whether this issue would be critical for ANY ata(4)-system. > So (to the PR originator): Eugene, could you try your experiment with > tagged queueing turned off (hw.ata.tags=0)? Btw, I wonder why I did not any feedback from ATA maintainer or RE yet. OTOH, they may be having hard time. Eugene

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Wed, 22 Oct 2003 10:16:53 +0800
dmitry@atlantis.dp.ua wrote: > > Hello! > > I'm curious whether this issue would be critical for ANY ata(4)-system. > So (to the PR originator): Eugene, could you try your experiment with > tagged queueing turned off (hw.ata.tags=0)? I've tried. It does not panic with hw.ata.tags=0, glimpseindex took more than a hour to complete. This time CPU utilization was about 50% only and 'systat -vm 3' have shown 100% of hard drive usage. So Tagged Queueing may be guilty (again). Eugene Grosbein

Reply via E-mail
From:	Doug White <dwhite@gumbysoft.com>
Date:	Wed, 22 Oct 2003 15:33:59 -0700 (PDT)
On Wed, 22 Oct 2003, Eugene Grosbein wrote: > dmitry@atlantis.dp.ua wrote: > > > > Hello! > > > > I'm curious whether this issue would be critical for ANY ata(4)-system. > > So (to the PR originator): Eugene, could you try your experiment with > > tagged queueing turned off (hw.ata.tags=0)? > > I've tried. It does not panic with hw.ata.tags=0, > glimpseindex took more than a hour to complete. > This time CPU utilization was about 50% only > and 'systat -vm 3' have shown 100% of hard drive usage. > > So Tagged Queueing may be guilty (again). Why do you have ATA tagging turned on in the first place? It's known to not work with 99% of the hardware out there; only a couple of models of IBM drives having working tagging. This is not turned on by default on purpose.... -- Doug White | FreeBSD: The Power to Serve dwhite@gumbysoft.com | www.FreeBSD.org

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Thu, 23 Oct 2003 11:34:39 +0800
Doug White wrote: > > So Tagged Queueing may be guilty (again). > > Why do you have ATA tagging turned on in the first place? It's known to > not work with 99% of the hardware out there; only a couple of models of > IBM drives having working tagging. I use it because: 1. Man 4 ata says it will work with my HDD. 2. It really worked after ata(4) bug was fixed shortly after 4.5-RELEASE. Yes, it did not work with 4.5-PRERELEASE due to ata(4) famous bug. Now it work fine even with presence of massive I/O activity when this activity does not continue for very long time (half an hour and more) uninterruptedly. It panices reproducibly and crashdumps are pretty same. Eugene Grosbein

State Changed
From-To:	open->suspended
By:	sos
When:	Sat Oct 25 12:52:01 PDT 2003
Why:	Dont use tags, its broken short and simple.

Reply via E-mail
From:	Pavel Gubin <pg@ie.tusur.ru>
Date:	Thu, 13 Nov 2003 22:34:18 +0600
Hello, A couple days ago I faced with a problem similar to described in PR kern/57174 (see subject). But there are some differences: 1) hw.ata.tags=0 on my system 2) problem appeared when i replaced a Seagate Barracuda 30G with Maxtor DiamondMax Plus 9 200G, attached to CMD648-based PCI adapter. 3) system is 4.9-RELEASE Note that: 1) Maxtor is the only drive attached to CMD 2) When I tried to attach Maxtor to the free channel of Promise U66 controller, the kernel just panics at ATA-probe (very similar to PR kern/57369) 3) BIOS on CMD648 is obsolete (sees only 64G of 200), but removing BIOS chip does not change things - and I know that this controller works fine without BIOS under FreeBSD 4.8 with 2*Maxtors 80G. Workaround is to disable UDMA on this drive (atacontrol mode 4 pio4 pio4), but this significantly slows down system, and another errors continue to appear (ad8: READ command timeout...) Below is a /var/run/dmesg.boot for this system. I can also make a backtrace of chashdump if needed. ==== Copyright (c) 1992-2003 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.9-RELEASE #6: Tue Nov 11 11:07:07 TSK 2003 pg@rainbow.ie.tusur.ru:/usr/obj/usr/src/sys/Shadow Timecounter "i8254" frequency 1193182 Hz Timecounter "TSC" frequency 757459741 Hz CPU: AMD Athlon(tm) Processor (757.46-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x622 Stepping = 2 Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR> AMD Features=0xc0400000<AMIE,DSP,3DNow!> real memory = 268369920 (262080K bytes) avail memory = 257961984 (251916K bytes) Preloaded elf kernel "kernel" at 0xc02d2000. Pentium Pro MTRR support enabled Using $PIR table, 7 entries at 0xc00f7950 npx0: <math processor> on motherboard npx0: INT 16 interface pcib0: <AMD-751 host to PCI bridge> on motherboard pci0: <PCI bus> on pcib0 pcib1: <AMD-751 PCI-PCI (1x/2x AGP) bridge> at device 1.0 on pci0 pci1: <PCI bus> on pcib1 pci1: <ATI Mach64-GZ graphics accelerator> at 5.0 irq 11 isab0: <PCI to ISA bridge (vendor=1022 device=7408)> at device 7.0 on pci0 isa0: <ISA bus> on isab0 atapci0: <AMD 756 ATA66 controller> port 0xf000-0xf00f at device 7.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 chip1: <PCI to Other bridge (vendor=1022 device=740b)> at device 7.3 on pci0 fxp0: <Intel 82557 Pro/100 Ethernet> port 0xc800-0xc81f mem 0xefc00000-0xefcfffff,0xef4fe000-0xef4fefff irq 10 at device 8.0 on pci0 fxp0: Ethernet address 00:a0:c9:42:cc:c2 inphy0: <i82555 10/100 media interface> on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto dc0: <Macronix 98713 10/100BaseTX> port 0xca00-0xcaff mem 0xeff4ff00-0xeff4ffff irq 11 at device 9.0 on pci0 dc0: Ethernet address: 08:00:a0:10:01:b6 miibus1: <MII bus> on dc0 ukphy0: <Generic IEEE 802.3u media interface> on miibus1 ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto atapci1: <Promise ATA66 controller> port 0xcc00-0xcc3f,0xce00-0xce03,0xd000-0xd007,0xd200-0xd203,0xd400-0xd407 mem 0xeff60000-0xeff7ffff irq 12 at device 11.0 on pci0 ata2: at 0xd400 on atapci1 ata3: at 0xd000 on atapci1 atapci2: <CMD 648 ATA66 controller> port 0xd600-0xd60f,0xd800-0xd803,0xda00-0xda07,0xdc00-0xdc03,0xde00-0xde07 irq 10 at device 12.0 on pci0 ata4: at 0xde00 on atapci2 ata5: at 0xda00 on atapci2 orm0: <Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xcbfff on isa0 pmtimer0 on isa0 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 atkbd0: <AT Keyboard> irq 1 on atkbdc0 kbd0 at atkbd0 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A ipfw2 initialized, divert enabled, rule-based forwarding enabled, default to deny, logging disabled ad0: 42934MB <WDC WD450AA-00BAA0> [87233/16/63] at ata0-master UDMA66 ad1: 42934MB <WDC WD450AA-00BAA0> [87233/16/63] at ata0-slave UDMA66 ad2: 42934MB <WDC WD450AA-00BAA0> [87233/16/63] at ata1-master UDMA66 ad3: 42934MB <WDC WD450AA-00BAA0> [87233/16/63] at ata1-slave UDMA66 ad4: 76319MB <ST380021A> [155061/16/63] at ata2-master UDMA66 ad5: 76319MB <ST380021A> [155061/16/63] at ata2-slave UDMA66 ad8: 194481MB <Maxtor 6Y200P0> [395136/16/63] at ata4-master UDMA66 Mounting root from ufs:/dev/ad0s1a WARNING: / was not properly dismounted === -- Pavel Gubin TUSC&R / Industrial Electronics dept / System Administrator 2:5005/14@fidonet / Phone +7-3822-423067 / ICQ 28835566

Reply via E-mail
From:	dada@sbox.tugraz.at
Date:	Wed, 9 Jun 2004 09:42:12 +0200
I'm seeing this panic since upgrading to 4.10-release. Seems to be related with access to a ATAPI burner. Details (backtrace etc.) are available on request.

State Changed
From-To:	suspended->closed
By:	sos
When:	Wed Jan 4 22:11:18 UTC 2006
Why:	Abandoned, upgrade to 6.0 or later and this is no longer valid.

Reply via E-mail
From:	Eugene Grosbein <eugen@kuzbass.ru>
Date:	Fri, 06 Jan 2006 12:20:19 +0700
"Søren Schmidt" wrote: > > Synopsis: [ata] 4.9-PRERELEASE panic: ata_dmasetup: transfer active on this device! > > State-Changed-From-To: suspended->closed > State-Changed-By: sos > State-Changed-When: Wed Jan 4 22:11:18 UTC 2006 > State-Changed-Why: > Abandoned, upgrade to 6.0 or later and this is no longer valid. > > http://www.freebsd.org/cgi/query-pr.cgi?pr=57174 I cannot completly move to 6.0 until kern/80815 is resolved: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=kern/80815 Please look at this discussion in acpi@ about problems with ata(4) in 6.0-RELEASE, this problem is observed with or without ACPI enabled. http://freebsd.rambler.ru/bsdmail/freebsd-acpi_2005/msg01174.html Should I make new PR for this? Eugene Grosbein