panic when accessing lfs filesystem

["Chavdar Ivanov" <ci4ic4%gmail.com@localhost>]

Hi,

I got a couple of almost identical panics today on i386 -current:

NetBSD loan8 4.99.55 NetBSD 4.99.55 (GENERIC) #2: Fri Mar  7 09:45:52
GMT 2008  root@loan8:/f/obj/usr/src/sys/arch/i386/compile/GENERIC i386

(it's just GENERIC + radeondrm if that matters)

They happened when accessing an lfs filesystem on an external IEEE1394
disk - sd1 from the dmesg below:

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008
    The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 4.99.55 (GENERIC) #2: Fri Mar  7 09:45:52 GMT 2008
        root@loan8:/f/obj/usr/src/sys/arch/i386/compile/GENERIC
total memory = 511 MB
avail memory = 490 MB
timecounter: Timecounters tick every 10.000 msec
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
Hewlett-Packard HP Kayak PC Workstation (XU800/800 )
mainbus0 (root)
cpu0 at mainbus0 apid 0: (boot processor)
cpu0: Intel Pentium III (686-class), 797.50 MHz, id 0x683
cpu0: features 383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR>
cpu0: features 383fbff<PGE,MCA,CMOV,PAT,PSE36,MMX>
cpu0: features 383fbff<FXSR,SSE>
cpu0: I-cache 16 KB 32B/line 4-way, D-cache 16 KB 32B/line 4-way
cpu0: L2 cache 256 KB 32B/line 8-way
cpu0: ITLB 32 4 KB entries 4-way, 2 4 MB entries fully associative
cpu0: DTLB 64 4 KB entries 4-way, 8 4 MB entries 4-way
cpu0: Initial APIC ID 0
cpu0: Cluster/Package ID 0
cpu0: calibrating local timer
cpu0: apic clock running at 132 MHz
cpu0: 8 page colors
cpu1 at mainbus0 apid 1: (application processor)
cpu1: Intel Pentium III (686-class), 797.51 MHz, id 0x683
cpu1: features 383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR>
cpu1: features 383fbff<PGE,MCA,CMOV,PAT,PSE36,MMX>
cpu1: features 383fbff<FXSR,SSE>
cpu1: I-cache 16 KB 32B/line 4-way, D-cache 16 KB 32B/line 4-way
cpu1: L2 cache 256 KB 32B/line 8-way
cpu1: ITLB 32 4 KB entries 4-way, 2 4 MB entries fully associative
cpu1: DTLB 64 4 KB entries 4-way, 8 4 MB entries 4-way
cpu1: Initial APIC ID 0
cpu1: Cluster/Package ID 0
ioapic0 at mainbus0 apid 2: pa 0xfec00000, version 20, 24 pins
acpi0 at mainbus0: Advanced Configuration and Power Interface
acpi0: using Intel ACPI CA subsystem version 20070320
acpi0: X/RSDT: OemId <IBIS  ,HP_KAYAK,19990831>, AslId <MSFT,00000097>
acpi0: SCI interrupting at int 9
acpi0: fixed-feature power button present
timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
ACPI-Fast 24-bit timer
CPU1 (ACPI Object Type 'Processor' [0x0c]) at acpi0 not configured
CPU2 (ACPI Object Type 'Processor' [0x0c]) at acpi0 not configured
PCI0 (PNP0A03) [PCI/PCI-X Host Bridge] at acpi0 not configured
PIC (PNP0000) [AT Interrupt Controller] at acpi0 not configured
DMAD (PNP0200) [AT DMA Controller] at acpi0 not configured
attimer1 at acpi0 (TMR, PNP0100): AT Timer
attimer1: io 0x40-0x43 irq 0
RTC (PNP0B00) [AT Real-Time Clock] at acpi0 not configured
pcppi1 at acpi0 (SPKR, PNP0800)
pcppi1: io 0x61
midi0 at pcppi1: PC speaker (CPU-intensive output)
sysbeep0 at pcppi1
npx1 at acpi0 (COPR, PNP0C04)
npx1: io 0xf0-0xff irq 13
npx1: reported by CPUID; using exception 16
pckbc1 at acpi0 (PS2K, PNP0303): kbd port
pckbc1: io 0x60,0x64 irq 1
SYSR (PNP0C02) [Plug and Play motherboard register resources] at acpi0
not configured
MISC (PNP0C02) [Plug and Play motherboard register resources] at acpi0
not configured
FDC0 (PNP0700) [PC standard floppy disk controller] at acpi0 not configured
UAR1 (PNP0501) [16550A-compatible COM port] at acpi0 not configured
UAR2 (PNP0501) [16550A-compatible COM port] at acpi0 not configured
ECP (PNP0401) [ECP printer port] at acpi0 not configured
FWH (INT0800) [Intel FWH Random Number Generator] at acpi0 not configured
LNKA (PNP0C0F) [PCI interrupt link device] at acpi0 not configured
LNKB (PNP0C0F) [PCI interrupt link device] at acpi0 not configured
LNKC (PNP0C0F) [PCI interrupt link device] at acpi0 not configured
LNKD (PNP0C0F) [PCI interrupt link device] at acpi0 not configured
MEM (PNP0C01) [System Board] at acpi0 not configured
apm0 at acpi0: Power Management spec V1.2
attimer1: attached to pcppi1
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0
pchb0: Intel 82840 Host (rev. 0x01)
pchb0: random number generator enabled
agp0 at pchb0: aperture at 0xe0000000, size 0x10000000
ppb0 at pci0 dev 1 function 0: Intel 82840 AGP (rev. 0x01)
pci1 at ppb0 bus 5
pci1: i/o space, memory space enabled
vga1 at pci1 dev 0 function 0: ATI Technologies Radeon 9800SE AH (rev. 0x00)
wsdisplay0 at vga1 kbdmux 1: console (80x25, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
radeondrm0 at vga1
info: [drm] ATI Radeon AH 9800 SE (unit 0)
info: [drm] AGP at 0xe0000000 256MB
info: [drm] Initialized radeon 1.25.0 20060524
ATI Technologies product 0x4168 (miscellaneous display) at pci1 dev 0
function 1 not configured
ppb1 at pci0 dev 2 function 0: Intel 82840 PCI (rev. 0x01)
pci2 at ppb1 bus 3
pci2: i/o space, memory space enabled
ppb2 at pci2 dev 31 function 0: Intel product 0x1360 (rev. 0x02)
pci3 at ppb2 bus 4
pci3: i/o space, memory space enabled
Intel 82806AA PCI64 Hub Advanced Programmable Interrupt Controller
(interrupt system, interface 0x20, revision 0x01) at pci3 dev 0
function 0 not configured
ahc1 at pci3 dev 9 function 0: Adaptec aic7892 Ultra160 SCSI adapter
ahc1: interrupting at ioapic0 pin 18 (irq 10)
ahc1: aic7892: Ultra160 Wide Channel A, SCSI Id=7, 32/253 SCBs
scsibus0 at ahc1: 16 targets, 8 luns per target
ppb3 at pci0 dev 30 function 0: Intel 82801AA Hub-PCI Bridge (rev. 0x02)
pci4 at ppb3 bus 1
pci4: i/o space, memory space enabled
clcs0 at pci4 dev 5 function 0: Cirrus Logic CS4280 CrystalClear Audio
Interface (rev. 0x01)
clcs0: interrupting at ioapic0 pin 17 (irq 5)
clcs0: ac97: Crystal CS4297A codec; headphone, 20 bit DAC, 18 bit ADC,
Crystal Semi 3D
clcs0: ac97: ext id 200<AMAP>
audio0 at clcs0: full duplex, independent
midi1 at clcs0: CS4280 MIDI UART
fxp0 at pci4 dev 8 function 0: Intel i82557 Ethernet, rev 1
fxp0: interrupting at ioapic0 pin 16 (irq 11)
fxp0: May need receiver lock-up workaround
fxp0: Ethernet address 08:00:09:dc:f8:9c
nsphy0 at fxp0 phy 1: DP83840 10/100 media interface, rev. 0
nsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
ppb4 at pci4 dev 11 function 0: HiNT HB1 PCI-PCI Bridge (rev. 0x11)
pci5 at ppb4 bus 2
pci5: i/o space, memory space enabled
fwohci0 at pci5 dev 8 function 0: NEC product 0x00e7 (rev. 0x01)
fwohci0: interrupting at ioapic0 pin 19 (irq 9)
fwohci0: OHCI version 1.10 (ROM=1)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 00:00:4c:01:07:00:0e:bf
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
ieee1394if0 at fwohci0: IEEE1394 bus
fwip0 at ieee1394if0: IP over IEEE1394
fwohci0: Initiate bus reset
ohci0 at pci5 dev 9 function 0: NEC USB Host Controller (rev. 0x43)
ohci0: interrupting at ioapic0 pin 16 (irq 11)
ohci0: OHCI version 1.0
usb0 at ohci0: USB revision 1.0
uhub0 at usb0
uhub0: NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ohci1 at pci5 dev 9 function 1: NEC USB Host Controller (rev. 0x43)
ohci1: interrupting at ioapic0 pin 17 (irq 5)
ohci1: OHCI version 1.0
usb1 at ohci1: USB revision 1.0
uhub1 at usb1
uhub1: NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
ehci0 at pci5 dev 9 function 2: NEC USB Host Controller (rev. 0x04)
ehci0: interrupting at ioapic0 pin 18 (irq 10)
ehci0: EHCI version 1.0
ehci0: companion controllers, 2 ports each: ohci0 ohci1
usb2 at ehci0: USB revision 2.0
uhub2 at usb2
uhub2: NEC EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 4 ports with 4 removable, self powered
pcib0 at pci0 dev 31 function 0
pcib0: Intel 82801AA LPC Interface Bridge (rev. 0x02)
piixide0 at pci0 dev 31 function 1
piixide0: Intel 82801AA IDE Controller (ICH) (rev. 0x02)
piixide0: bus-master DMA support present
piixide0: primary channel wired to compatibility mode
piixide0: primary channel interrupting at ioapic0 pin 14 (irq 14)
atabus0 at piixide0 channel 0
piixide0: secondary channel wired to compatibility mode
piixide0: secondary channel interrupting at ioapic0 pin 15 (irq 15)
atabus1 at piixide0 channel 1
uhci0 at pci0 dev 31 function 2: Intel 82801AA USB Controller (rev. 0x02)
uhci0: interrupting at ioapic0 pin 19 (irq 9)
usb3 at uhci0: USB revision 1.0
uhub3 at usb3
uhub3: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ichsmb0 at pci0 dev 31 function 3: Intel 82801AA SMBus Controller (rev. 0x02)
ichsmb0: interrupting at ioapic0 pin 17 (irq 0)
iic0 at ichsmb0: I2C bus
isa0 at pcib0
lpt0 at isa0 port 0x378-0x37b irq 7
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
isapnp0 at isa0 port 0x279: ISA Plug 'n Play device support
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
isapnp0: no ISA Plug 'n Play devices found
fwohci0: BUS reset
fwohci0: node_id=0xc000ffc1, gen=1, CYCLEMASTER mode
ieee1394if0: 2 nodes, maxhop <= 1, cable IRM = 1 (me)
ieee1394if0: bus manager 1 (me)
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
scsibus0: waiting 2 seconds for devices to settle...
wd0 at atabus0 drive 0: <IC35L060AVER07-0>
wd0: drive supports 16-sector PIO transfers, LBA addressing
wd0: 58644 MB, 119150 cyl, 16 head, 63 sec, 512 bytes/sect x 120103200 sectors
wd0: 32-bit data port
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd1 at atabus0 drive 1: <WDC WD400BB-23JHA1>
wd1: drive supports 16-sector PIO transfers, LBA addressing
wd1: 38162 MB, 77536 cyl, 16 head, 63 sec, 512 bytes/sect x 78156288 sectors
wd1: 32-bit data port
wd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd0(piixide0:0:0): using PIO mode 4, Ultra-DMA mode 4 (Ultra/66) (using DMA)
wd1(piixide0:0:1): using PIO mode 4, Ultra-DMA mode 4 (Ultra/66) (using DMA)
atapibus0 at atabus1: 2 targets
cd0 at atapibus0 drive 1: <Hewlett-Packard DVD Writer 200, CN23S4590J,
1.36> cdrom removable
cd0: 32-bit data port
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
wd2 at atabus1 drive 0: <IC35L060AVER07-0>
wd2: drive supports 16-sector PIO transfers, LBA addressing
wd2: 58644 MB, 119150 cyl, 16 head, 63 sec, 512 bytes/sect x 120103200 sectors
wd2: 32-bit data port
wd2: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd2(piixide0:1:0): using PIO mode 4, Ultra-DMA mode 4 (Ultra/66) (using DMA)
cd0(piixide0:1:1): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA)
ieee1394if0: New S400 device ID:0050770e0000156e
sbp0 at ieee1394if0: SBP-2/SCSI over IEEE1394
scsibus1 at sbp0: 1 target, 0 luns per target
sd0 at scsibus0 target 0 lun 0: <FUJITSU, MAN3184MP, 5507> disk fixed
sd0: 17366 MB, 29694 cyl, 2 head, 598 sec, 512 bytes/sect x 35566478 sectors
sd0: sync (12.50ns offset 127), 16-bit (160.000MB/s) transfers, tagged queueing
fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
Kernelized RAIDframe activated
pad0: outputs: 44100Hz, 16-bit, stereo
audio1 at pad0: half duplex
boot device: sd0
root on sd0a dumps on sd0b
root file system type: ffs
sbp0:0:0 request timeout(mgm orb:0x01b2101c) ... reset start
fwohci0: txd err=14 ack busy_X
sbp0:0:0 sbp_reset_start failed: resp=16
sbp0:0:0 No ocb(1b2101c) on the queue
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 3 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
info: [drm] Setting GART location based on new memory map
info: [drm] Loading R300 Microcode
info: [drm] writeback test succeeded in 1 usecs
radeondrm0: interrupting at ioapic0 pin 16 (irq 11)
fwohci0: Initiate bus reset
fwohci0: BUS reset
fwohci0: node_id=0xc000ffc1, gen=2, CYCLEMASTER mode
ieee1394if0: 2 nodes, maxhop <= 1, cable IRM = 1 (me)
ieee1394if0: bus manager 1 (me)
sd1 at scsibus1 target 0 lun 0: <Prolific, (1394 ATAPI,Rev, 2804>
simplified direct fixed
RBC size: mode sense=80418240, get cap=120103200
sd1: 58644 MB, 58644 cyl, 64 head, 32 sec, 512 bytes/sect x 120103200 sectors
RBC size: mode sense=80418240, get cap=120103200

One was:

panic: lfs_nextseg: no clean segments
stopped in pid 0.35 (system) at netbsd:breakpoint+0x4: popl %ebp

and then gdb output:

(gdb) target kvm netbsd.11.core
#0  0xc0511df2 in cpu_reboot ()
(gdb) bt
#0  0xc0511df2 in cpu_reboot ()
#1  0xc01ae768 in db_reboot_cmd ()
#2  0xc01ae278 in db_command ()
#3  0xc01ae5bf in db_command_loop ()
#4  0xc01b14d0 in db_trap ()
#5  0xc050d080 in kdb_trap ()
#6  0xc05162e8 in trap ()
#7  0xc010cd68 in calltrap ()
#8  0xc050b75c in breakpoint ()
#9  0xc046cfea in panic ()
#10 0xc03d1861 in lfs_newseg ()
#11 0xc03d1b03 in lfs_initseg ()
#12 0xc03d24c6 in lfs_writeseg ()
#13 0xc03d2755 in lfs_acquire_finfo ()
#14 0xc03d323f in lfs_writefile ()
#15 0xc03d426d in lfs_segwrite ()
#16 0xc03d9b95 in lfs_sync ()
#17 0xc04a32fc in VFS_SYNC ()
#18 0xc04b629e in sync_fsync ()
#19 0xc04ae990 in VOP_FSYNC ()
#20 0xc04b617a in sched_sync ()
#21 0xc01002cf in lwp_trampoline ()

The second is similar:

GNU gdb 6.5
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386--netbsdelf"...
(gdb) target kvm netbsd.12.core
#0  0xc0511df2 in cpu_reboot ()
(gdb) bt
#0  0xc0511df2 in cpu_reboot ()
#1  0xc01ae768 in db_reboot_cmd ()
#2  0xc01ae278 in db_command ()
#3  0xc01ae5bf in db_command_loop ()
#4  0xc01b14d0 in db_trap ()
#5  0xc050d080 in kdb_trap ()
#6  0xc05162e8 in trap ()
#7  0xc010cd68 in calltrap ()
#8  0xc050b75c in breakpoint ()
#9  0xc046cfea in panic ()
#10 0xc03d1861 in lfs_newseg ()
#11 0xc03d1b03 in lfs_initseg ()
#12 0xc03d24c6 in lfs_writeseg ()
#13 0xc03d2f99 in lfs_gatherblock ()
#14 0xc03d31a7 in lfs_gather ()
#15 0xc03d3370 in lfs_writefile ()
#16 0xc03d425a in lfs_segwrite ()
#17 0xc03d9b95 in lfs_sync ()
#18 0xc04a32fc in VFS_SYNC ()
#19 0xc04b629e in sync_fsync ()
#20 0xc04ae990 in VOP_FSYNC ()
#21 0xc04b617a in sched_sync ()
#22 0xc01002cf in lwp_trampoline ()
(gdb)

I'll try the disk on a different system to eliminate the controller in use.

I seem to have missed something - it used to take full memory dumps
before; now I get only partial - is this some sysctl variable? On the
other hand the 'reboot 0x104' is much faster...

I can leave the dumps somewhere if they are of any use.

-- 
----------------------------------------------------------------
/dev/random says:
        People say I'm apathetic, but I don't care.
----------------------------------------------------------------
Chavdar Ivanov   | Talbot Way, Small Heath Business Park
Delcam UK        | Birmingham B10 0HJ, United Kingdom
Customer Support | (+44)121-6831014
----------------------------------------------------------------