>Number:         31925
>Category:       port-sparc64
>Synopsis:       smartd panics NetBSD 2.0.2_STABLE on sparc64
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    port-sparc64-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Oct 27 02:16:01 +0000 2005
>Originator:     Johan A. van Zanten
>Release:        NetBSD 2.0.2_STABLE
>Organization:
>Environment:
NetBSD 2.0.2_STABLE (GENERIC) #0: Thu Oct  6 22:22:33 CDT 2005
        toor@sarasvati:/local/NetBSD/src/NetBSD-2.0/src/sys/arch/sparc64/compile/obj.sparc64/GENERIC
	sparc64
>Description:
	running smartd immediately crashes (panics) the kernel. 100% reproducable.

 -------
Console at time of crash:

extent `psycho0 dvma' (0xc0000000 - 0xdfffe000), flags = 0x0
     0xc0000000 - 0xc006dfff
     0xc0078000 - 0xc0079fff
extent_free: start 0xc0000000, end 0xbfffffff
panic: extent_free: region not found
kdb breakpoint at 13559c0
Stopped in pid 9.1 (aiodoned) at        netbsd:cpu_Debugger+0x4:        nop
db> tr
extent_free(24c1d80, c0000000, bfffffff, 26b01e0, 2, 2) at netbsd:extent_free+0x1b8
iommu_dvmamap_unload(5, 24d5b00, 2704e00, 0, 2, a) at netbsd:iommu_dvmamap_unload+0x54
esiop_scsicmd_end(2700cc0, 24d5080, 16d8, ac, a, 435db748) at netbsd:esiop_scsicmd_end+0xc4
esiop_checkdone(26bbc00, 0, e0017ed0, 2700cc0, 13494c0, 1ff00001000) at netbsd:esiop_checkdone+0x274
esiop_intr(0, 2700cc0, 16d8, ac, 5, 301) at netbsd:esiop_intr+0x60
intr_list_handler(24c18c0, 0, e0017ed0, 7, 13494c0, ca5e000) at netbsd:intr_list_handler+0x10
sparc_interrupt(2475e08, c689b7c, 20, 0, 40500, 80000000092df436) at netbsd:sparc_interrupt+0x1d4
lockmgr(2475e08, 20, 2475f04, 6, 4, 496f) at netbsd:lockmgr+0x438
uvm_pagermapout(a474000, c000, 2000, d, 1, 2000) at netbsd:uvm_pagermapout+0x14c

uvm_aio_aiodone(27ad930, 204, 0, 0, c689491, 0) at netbsd:uvm_aio_aiodone+0xa8
uvm_aiodone_daemon(c65e800, 0, 0, 0, a, 435db748) at netbsd:uvm_aiodone_daemon+0
xac
proc_trampoline(0, 0, 0, 0, 0, 0) at netbsd:proc_trampoline+0x4
db> 

 -------
OpenBoot banner:

SPARCengine(tm)Ultra(tm) AXi (UltraSPARC-IIi 300MHz), No Keyboard OpenBoot
3.10.4 SME, 512 MB memory installed, Serial #10402750.  Ethernet address
8:0:20:9e:bb:be, Host ID: 809ebbbe.

 -------

ganesha:/root # dmesg
console is /pci@1f,0/pci@1,1/ebus@1/se@14,400000:a
Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 2.0.2_STABLE (GENERIC) #0: Thu Oct  6 22:22:33 CDT 2005
        toor@sarasvati:/local/NetBSD/src/NetBSD-2.0/src/sys/arch/sparc64/compile/obj.sparc64/GENERIC
total memory = 512 MB
avail memory = 489 MB
bootpath: /pci@1f,0/pci@1,0/scsi@1,0/disk@0,0
mainbus0 (root): SUNW,UltraSPARC-IIi-Engine: hostid 809ebbbe
cpu0 at mainbus0: SUNW,UltraSPARC-IIi @ 300.016 MHz, version 0 FPU
cpu0: 32K instruction (32 b/l), 16K data (32 b/l), 512K external (64 b/l)
psycho0 at mainbus0 addr 0xfffc4000
SUNW,sabre: impl 0, version 0: ign 7c0 bus range 0 to 128; PCI bus 0
DVMA map: c0000000 to e0000000
IOTSB: dc4000 to e44000
pci0 at psycho0
pci0: i/o space, memory space enabled
ppb0 at pci0 dev 1 function 1: Sun Microsystems, Inc. Simba PCI bridge (rev. 0x11)
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled
ebus0 at pci1 dev 1 function 0
ebus0: Sun Microsystems, Inc. PCIO Ebus2, revision 0x01
auxio0 at ebus0 addr 726000-726003, 728000-728003, 72a000-72a003, 72c000-72c003, 72f000-72f003
power at ebus0 addr 724000-724003 ipl 37 not configured
SUNW,pll at ebus0 addr 504000-504002 not configured
sab0 at ebus0 addr 400000-40007f ipl 43: rev 3.2
sabtty0 at sab0 port 0: console i/o
sabtty1 at sab0 port 1
com0 at ebus0 addr 3803f8-3803ff ipl 41: ns16550a, working fifo
kbd0 at com0
com1 at ebus0 addr 3602f8-3602ff ipl 42: ns16550a, working fifo
ms0 at com1
lpt0 at ebus0 addr 340278-340287, 30015c-30015d, 700000-70000f ipl 34
fdthree at ebus0 addr 3203f0-3203f7, 706000-70600f, 720000-720003 ipl 39 not configured
clock0 at ebus0 addr 0-1fff: mk48t59
flashprom at ebus0 addr 0-fffff not configured
beeper at ebus0 addr 722000-722003 not configured
hme0 at pci1 dev 1 function 1: Sun Happy Meal Ethernet, rev. 1
hme0: interrupting at ivec 3021
hme0: Ethernet address 08:00:20:9e:bb:be
nsphy0 at hme0 phy 1: DP83840 10/100 media interface, rev. 1
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ATI Technologies 3D Rage II+ (VGA display, revision 0x9a) at pci1 dev 4 function 0 not configured
ppb1 at pci0 dev 1 function 0: Sun Microsystems, Inc. Simba PCI bridge (rev. 0x11)
pci2 at ppb1 bus 128
pci2: i/o space, memory space enabled
esiop0 at pci2 dev 1 function 0: Symbios Logic 53c875 (ultra-wide scsi)
esiop0: using on-board RAM
esiop0: interrupting at ivec 20
scsibus0 at esiop0: 16 targets, 8 luns per target
esiop1 at pci2 dev 1 function 1: Symbios Logic 53c875 (ultra-wide scsi)
esiop1: using on-board RAM
esiop1: interrupting at ivec 20
scsibus1 at esiop1: 16 targets, 8 luns per target
pcons at mainbus0 not configured
No counter-timer -- using %tick at 300MHz as system clock.
Kernelized RAIDframe activated
scsibus0: waiting 2 seconds for devices to settle...
scsibus1: waiting 2 seconds for devices to settle...
sd0 at scsibus0 target 0 lun 0: <IBM, DDYS-T09170N, S93E> disk fixed
sd0: 8748 MB, 15110 cyl, 3 head, 395 sec, 512 bytes/sect x 17916240 sectors
sd0: sync (50.00ns offset 16), 16-bit (40.000MB/s) transfers, tagged queueing
cd0 at scsibus0 target 6 lun 0: <TOSHIBA, XM6201TASUN32XCD, 1103> cdrom removable
cd0: sync (100.00ns offset 16), 8-bit (10.000MB/s) transfers
root on sd0a dumps on sd0b
root file system type: ffs
kbd0: reset failed

>How-To-Repeat:
	cd /usr/pkgsrc/sysutils/smartmontools
	make install
	/usr/pkg/sbin/smartd
>Fix:

>Unformatted: