port-macppc/47256: panic on 6.0 when writing to disk

[netbsd%i3enedek.neomailbox.net@localhost]

>Number:         47256
>Category:       port-macppc
>Synopsis:       panic on 6.0 when writing to disk
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    port-macppc-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Nov 27 16:55:00 +0000 2012
>Originator:     Ben Gergely
>Release:        6.0
>Organization:
>Environment:
>Description:
Hi,

I seem to be able to be able to reproducibly crash 6.0, it seems to crop up 
randomly whenever I am writing to disk.

I have tried to reproduce this on 5.2_RC1 to no avail. Only 6.0 is affected. 

I can repro. consistently by cat-ing /dev/zero to disk. I've tried it with one 
or both cpus and the result is the same. 


Nov 25 15:40:04 Smackintosh /netbsd: trap: pid 710.1 (scp): kernel MCHK trap @ 
0x23d880 (SRR1=0x20009030)
Nov 25 15:40:04 Smackintosh /netbsd: panic: trap
Nov 25 15:40:04 Smackintosh /netbsd: cpu1: Begin traceback...
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198910: at panic+0x4c
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198950: at trap+0x104
Nov 25 15:40:04 Smackintosh /netbsd: 0x101989e0: kernel MCHK trap by 
ffs_clusteracct+0x1a8: srr1=0x20009030
Nov 25 15:40:04 Smackintosh /netbsd:            r1=0x10198ab0 cr=0x28222044 
xer=0 ctr=0
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198ab0: at ipsec_buffer+0x1ec
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198ad0: at ffs_alloccgblk.clone.2+0xd0
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198b00: at ffs_alloccg+0x56c
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198b60: at ffs_hashalloc+0x44
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198b90: at ffs_alloc+0x1ac
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198bd0: at ffs_balloc+0x1820
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198d10: at ufs_gop_alloc+0xc8
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198d50: at ffs_write+0xa18
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198df0: at VOP_WRITE+0x50
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198e30: at vn_write+0x13c
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198e60: at dofilewrite+0x90
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198ec0: at syscall_plain+0x1f4
Nov 25 15:40:04 Smackintosh /netbsd: 0x10198f20: user SC trap #4 by 0xfdb80bf0: 
srr1=0xd032
Nov 25 15:40:04 Smackintosh /netbsd:            r1=0xffff9b10 cr=0x20002044 
xer=0 ctr=0xfdb80be8
Nov 25 15:40:04 Smackintosh /netbsd: cpu1: End traceback...
Nov 25 15:40:04 Smackintosh /netbsd: halting CPU 0
Nov 25 15:40:04 Smackintosh /netbsd: dumpsys: TBD
Nov 25 15:40:04 Smackintosh /netbsd: rebooting

Nov 25 15:49:35 Smackintosh /netbsd: trap: pid 228.1 (scp): kernel MCHK trap @ 
0x614624 (SRR1=0x20009030)
Nov 25 15:49:35 Smackintosh /netbsd: panic: trap
Nov 25 15:49:35 Smackintosh /netbsd: cpu1: Begin traceback...
Nov 25 15:49:35 Smackintosh /netbsd: 0x103278f0: at panic+0x4c
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327930: at trap+0x104
Nov 25 15:49:35 Smackintosh /netbsd: 0x103279c0: kernel MCHK trap by 
bremfree+0x30: srr1=0x20009030
Nov 25 15:49:35 Smackintosh /netbsd:            r1=0x10327a90 cr=0x20222024 
xer=0 ctr=0x22ef38
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327a90: at getblk+0x80
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327ac0: at bio_doread.clone.1+0x30
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327ae0: at bread+0x24
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327b00: at ffs_alloccg+0x118
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327b60: at ffs_hashalloc+0x44
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327b90: at ffs_alloc+0x1ac
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327bd0: at ffs_balloc+0x1820
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327d10: at ufs_gop_alloc+0xc8
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327d50: at ffs_write+0xa18
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327df0: at VOP_WRITE+0x50
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327e30: at vn_write+0x13c
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327e60: at dofilewrite+0x90
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327ec0: at syscall_plain+0x1f4
Nov 25 15:49:35 Smackintosh /netbsd: 0x10327f20: user SC trap #4 by 0xfdb80bf0: 
srr1=0xd032
Nov 25 15:49:35 Smackintosh /netbsd:            r1=0xffff9b00 cr=0x20002044 
xer=0 ctr=0xfdb80be8
Nov 25 15:49:35 Smackintosh /netbsd: cpu1: End traceback...
Nov 25 15:49:35 Smackintosh /netbsd: halting CPU 0
Nov 25 15:49:35 Smackintosh /netbsd: dumpsys: TBD
Nov 25 15:49:35 Smackintosh /netbsd: rebooting



Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
  2006, 2007, 2008, 2009, 2010, 2011, 2012
  The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
  The Regents of the University of California.  All rights reserved.

NetBSD 6.0 (GENERIC.MP)
total memory = 2048 MB
oea_startup: failed to allocate DEAD ZONE: error=12
avail memory = 1978 MB
timecounter: Timecounters tick every 10.000 msec
found openpic PIC at 80040000
OpenPIC Version 1.2: Supports 4 CPUs and 64 interrupt sources.
bootpath: /pci@f4000000/ata-6@d/disk@0:0/netbsd.gz
mainbus0 (root)
cpu0 at mainbus0: 7455 (Revision 3.3), ID 0 (primary)
cpu0: HID0 
0x84d0c1bc<EMCP,TBEN,HIGH_BAT_EN,NAP,DPM,ICE,DCE,XBSEN,SGE,BTIC,LRSTK,FOLD,BHT>,
 powersave: 1
cpu0: 1416.67 MHz, 256KB L2 cache no parity parity enabled, 2MB no-parity L3 
cache (DDR SRAM) at 6:1 ratio
cpu1 at mainbus0: 7455 (Revision 3.3), ID 1
cpu1: HID0 
0x84d0c1bc<EMCP,TBEN,HIGH_BAT_EN,NAP,DPM,ICE,DCE,XBSEN,SGE,BTIC,LRSTK,FOLD,BHT>,
 powersave: 1
cpu1: 1416.67 MHz, 256KB L2 cache no parity parity enabled, 2MB no-parity L3 
cache (DDR SRAM) at 6:1 ratio
memory0 at mainbus0: len=512
spdmem0 at memory0
spdmem0: DDR SDRAM, no parity or ECC, 512MB, 333MHz (PC-2700)
spdmem0: 13 rows, 11 cols, 1 ranks, 4 banks/chip, 6.0ns cycle time
spdmem0: tAA-tRCD-tRP-tRAS: 1-3-3-7
spdmem0: voltage SSTL 2.5V, refresh time 7.8us (self-refreshing)
spdmem1 at memory0
spdmem1: DDR SDRAM, no parity or ECC, 512MB, 333MHz (PC-2700)
spdmem1: 13 rows, 11 cols, 1 ranks, 4 banks/chip, 6.0ns cycle time
spdmem1: tAA-tRCD-tRP-tRAS: 1-3-3-7
spdmem1: voltage SSTL 2.5V, refresh time 7.8us (self-refreshing)
spdmem2 at memory0
spdmem2: DDR SDRAM, no parity or ECC, 512MB, 333MHz (PC-2700)
spdmem2: 13 rows, 11 cols, 1 ranks, 4 banks/chip, 6.0ns cycle time
spdmem2: tAA-tRCD-tRP-tRAS: 1-3-3-7
spdmem2: voltage SSTL 2.5V, refresh time 7.8us (self-refreshing)
spdmem3 at memory0
spdmem3: DDR SDRAM, no parity or ECC, 512MB, 333MHz (PC-2700)
spdmem3: 13 rows, 10 cols, 2 ranks, 4 banks/chip, 6.0ns cycle time
spdmem3: tAA-tRCD-tRP-tRAS: 1-3-3-7
spdmem3: voltage SSTL 2.5V, refresh time 7.8us (self-refreshing)
uni_n0 at mainbus0 address 0xf8000000
ki2c0 at uni_n0 address 0xf8001000
iic1 at ki2c0: I2C bus
dbcool0 at ki2c0
dbcool0: ADM1030 dBCool(tm) Controller (rev 0x0083)
i2c-hwclock at ki2c0 address 0xca not configured
temp-monitor at ki2c0 address 0x92 not configured
cereal at ki2c0 address 0x1c0 not configured
uninorth0 at mainbus0
pci0 at uninorth0 bus 0
pci0: i/o space, memory space enabled
pchb0 at pci0 dev 11 function 0
pchb0: Apple Computer UniNorth AGP Bridge (rev. 0x00)
genfb0 at pci0 dev 16 function 0: ATI Technologies Radeon 9000/PRO If (rev. 
0x01)
genfb0: framebuffer at 0x9c008000, size 1920x1080, depth 8, stride 2048
wsdisplay0 at genfb0 kbdmux 1: console (default, vt100 emulation)
wsmux1: connecting to wsdisplay0
drm at genfb0 not configured
uninorth1 at mainbus0
pci1 at uninorth1 bus 0
pci1: i/o space, memory space enabled
pchb1 at pci1 dev 11 function 0
pchb1: Apple Computer UniNorth Host-PCI Bridge (rev. 0x00)
VIA Technologies VT83C572 USB Controller (USB serial bus, revision 0x61) at 
pci1 dev 21 function 0 not configured
VIA Technologies VT83C572 USB Controller (USB serial bus, revision 0x61) at 
pci1 dev 21 function 1 not configured
ehci0 at pci1 dev 21 function 2: VIA Technologies VT8237 EHCI USB Controller 
(rev. 0x63)
ehci0: interrupting at irq 58
ehci0: dropped intr workaround enabled
ehci0: EHCI version 1.0
ehci0: wrong number of companions (2 != 0)
ehci0: ohci or uhci probably not configured
usb0 at ehci0: USB revision 2.0
obio0 at pci1 dev 23 function 0: addr 0x80000000
obio0: enabling KeyLargo internal modem
zsc0 at obio0 irq 22,23
zstty0 at zsc0 channel 0
zstty1 at zsc0 channel 1
snapper0 at obio0 offset 0x10000: irq 30,1,2
pmu0 at obio0 offset 0x16000 irq 47:  rev. 12
pmu0: initializing IIC bus
pmu0: initializing RTC
pmu0: power-mgt not configured
ki2c1 at obio0
iic2 at ki2c1: I2C bus
cereal at ki2c1 address 0x1c0 not configured
deq0 at ki2c1 Apple Digital Equalizer, addr 0x6a
wdc0 at obio0 offset 0x1f000 irq 19, level triggered: DMA transfer
atabus0 at wdc0 channel 0
wdc1 at obio0 offset 0x20000 irq 20, level triggered: DMA transfer
atabus1 at wdc1 channel 0
snapper0: codec: TAS3004
audio0 at snapper0: full duplex, playback, capture
ohci0 at pci1 dev 24 function 0: Apple Computer KeyLargo USB Controller (rev. 
0x00)
pci_intr_map: no mapping for pin A
ohci0: couldn't map interrupt
ohci1 at pci1 dev 25 function 0: Apple Computer KeyLargo USB Controller (rev. 
0x00)
pci_intr_map: no mapping for pin A
ohci1: couldn't map interrupt
ohci2 at pci1 dev 27 function 0: NEC USB Host Controller (rev. 0x43)
ohci2: interrupting at irq 63
ohci2: OHCI version 1.0
usb1 at ohci2: USB revision 1.0
ohci3 at pci1 dev 27 function 1: NEC USB Host Controller (rev. 0x43)
ohci3: interrupting at irq 63
ohci3: OHCI version 1.0
usb2 at ohci3: USB revision 1.0
uninorth2 at mainbus0
pci2 at uninorth2 bus 0
pci2: i/o space, memory space enabled
pchb2 at pci2 dev 11 function 0
pchb2: Apple Computer UniNorth Host-PCI Bridge (rev. 0x00)
wdc2 at pci2 dev 13 function 0: interrupting at irq 39
atabus2 at wdc2 channel 0
fwohci0 at pci2 dev 14 function 0: Apple Computer UniNorth Firewire (rev. 0x01)
fwohci0: interrupting at irq 40
fwohci0: OHCI version 1.10 (ROM=0)
fwohci0: No. of Isochronous channels is 8.
fwohci0: EUI64 00:0a:95:ff:fe:7b:8c:34
fwohci0: invalid speed 7 (fixed to 3).
fwohci0: Phy 1394a available S800, 3 ports.
fwohci0: Link S800, max_rec 4096 bytes.
ieee1394if0 at fwohci0: IEEE1394 bus
fwip0 at ieee1394if0: IP over IEEE1394
fwohci0: Initiate bus reset
gem0 at pci2 dev 15 function 0: Apple Computer GMAC Ethernet (rev. 0x00)
gem0: interrupting at irq 41
brgphy0 at gem0 phy 0: BCM5421 1000BASE-T media interface, rev. 1
brgphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 
1000baseT-FDX, auto
gem0: Ethernet address 00:0a:95:7b:8c:34, 10KB RX fifo, 4KB TX fifo
vmmask 73bc0000 schedmask 7ffc0000 highmask 7ffc0000
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "mftb" frequency 41659304 Hz quality 100
fwohci0: BUS reset
fwohci0: node_id=0xc800ffc1, gen=2, CYCLEMASTER mode
ieee1394if0: 2 nodes, maxhop <= 1 Not IRM capable irm(-1)
cpu1 started
uhub0 at usb0: VIA Technologies EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 4 ports with 4 removable, self powered
uhub1 at usb1: NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
uhub2 at usb2: NEC OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ieee1394if0: New S400 device ID:000a270002223be7
sbp0 at ieee1394if0: SBP-2/SCSI over IEEE1394
scsibus0 at sbp0: 1 target, 0 luns per target
sbp0: ordered:0 type:14 EUI:000a270002223be7 node:0 speed:2 maxrec:8
sbp0: sbp0:0:0 'Apple Computer, Inc.' 'iPod' '0a2700'
sd0 at scsibus0 target 0 lun 0: <Apple Co, iPod, 1.0a> simplified direct 
removable
sd0: 14305 MB, 14305 cyl, 64 head, 32 sec, 512 bytes/sect x 29297520 sectors
uhub3 at uhub1 port 1: Genesys Logic USB2.0 Hub, class 9/0, rev 2.00/77.64, 
addr 2
uhidev0 at uhub2 port 1 configuration 1 interface 0
uhub3: 4 ports with 4 removable, self powered
uhidev0: DELL Dell QuietKey Keyboard, rev 1.10/1.01, addr 2, iclass 3/1
ukbd0 at uhidev0
wskbd0 at ukbd0: console keyboard, using wsdisplay0
atapibus0 at atabus1: 2 targets
cd0 at atapibus0 drive 0: <TOSHIBA DVD-ROM SD-R1312, 23PC501522, 1A06> cdrom 
removable
cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
cd0(wdc1:0:0): using PIO mode 4, DMA mode 2 (using DMA)
wd0 at atabus2 drive 0
wd0: <ST3120024A>
wd0: drive supports 16-sector PIO transfers, LBA addressing
wd0: 111 GB, 232581 cyl, 16 head, 63 sec, 512 bytes/sect x 234441648 sectors
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd1 at atabus2 drive 1
wd1: <WDC WD1600BB-00GUA0>
wd1: drive supports 16-sector PIO transfers, LBA48 addressing
wd1: 149 GB, 310101 cyl, 16 head, 63 sec, 512 bytes/sect x 312581808 sectors
wd1: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100)
wd0(wdc2:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100) 
(using DMA)
wd1(wdc2:0:1): using PIO mode 4, DMA mode 2, Ultra-DMA mode 5 (Ultra/100) 
(using DMA)
uhidev1 at uhub3 port 1 configuration 1 interface 0
uhidev1: Kensington Kensington Expert Mouse, rev 1.10/1.00, addr 3, iclass 3/1
ums0 at uhidev1: 4 buttons and Z dir
wsmouse0 at ums0 mux 0
uhidev2 at uhub3 port 4 configuration 1 interface 0
uhidev2: Griffin Technology, Inc. iMate, USB To ADB Adaptor, rev 1.00/3.70, 
addr 4, iclass 3/1
ukbd1 at uhidev2
wskbd1 at ukbd1 mux 1
wskbd1: connecting to wsdisplay0
uhidev3 at uhub3 port 4 configuration 1 interface 1
uhidev3: Griffin Technology, Inc. iMate, USB To ADB Adaptor, rev 1.00/3.70, 
addr 4, iclass 3/1
ums1 at uhidev3: 3 buttons
wsmouse1 at ums1 mux 0
Kernelized RAIDframe activated
swwdog0: software watchdog initialized




>How-To-Repeat:
cat /dev/zero > /tmp/zero.out
>Fix: