I recently built an INVARIANTS kernel (in order to debug some issue where removing a SCSI device caused a devfs list corruption). Every now and then, when booting, I get the following panic in the re(4) driver: re0: <RealTek 8168/8111 B/C/CP/D/DP/E PCIe Gigabit Ethernet> port 0xd800-0xd8ff mem 0xfe9ff000-0xfe9fffff irq 19 at device 0.0 on pci3 re0: Using 1 MSI message re0: Chip rev. 0x38000000 re0: MAC rev. 0x00000000 Memory modified after free 0xc6eec000(4092) val=7403c042 @ 0xc6eec000 panic: Most recently used by none cpuid = 0 KDB: enter: panic Usually, the next reboot works again. Note that this hardware does not zero out the memory at boot by itself (can be seen by monitoring old panic messages after a reboot), so this is likely an uninitialized variable or such. How-To-Repeat: Build an INVARIANTS kernel, and run it on a machine with re(4) hardware.
Responsible Changed From-To: freebsd-bugs->freebsd-net Over to maintainer(s).
----- Forwarded message from YongHyeon PYUN <pyunyh@gmail.com> ----- Date: Tue, 24 May 2011 12:11:08 -0700 From: YongHyeon PYUN <pyunyh@gmail.com> To: linimon@freebsd.org Cc: freebsd-net@freebsd.org, freebsd-bugs@freebsd.org Subject: Re: kern/157287: [re] re0: INVARIANTS panic (Memory modified after free) User-Agent: Mutt/1.4.2.3i Because the size is 4092 I vaguely guess it was not caused by re(4). re(4) just uses either 2K or 9K clusters. Of course that does mean re(4) is bug free here. Given that submitter can see panic during booting which in turn means re(4) has little chance to run, it might not be re(4)'s fault. ----- End forwarded message -----
Here's a stack trace: db> bt Tracing pid 0 tid 100000 td 0xc088c130 kdb_enter(c07f7e81,c07f7e81,c08173ce,c0c206f8,0,...) at kdb_enter+0x3a panic(c08173ce,c07ef54a,ffc,3403c04e,c6eec880,...) at panic+0x134 mtrash_ctor(c6eec000,1000,0,102,c6f10700,...) at mtrash_ctor+0x77 uma_zalloc_arg(c118a700,0,102,2,102,...) at uma_zalloc_arg+0x109 malloc(1000,c0849170,102,c077cabc,44,...) at malloc+0xe4 bus_dmamem_alloc(c6f10700,c6f230c8,c,c6f230c4,ffffffff,...) at bus_dmamem_alloc+0x8a re_attach(c6f10c00,c6e04860,c0842288,c07faafa,80000000,...) at re_attach+0x118a device_attach(c6f10c00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6f10c00,c6e5cb00,c0c20900,c0b57614,c6f10c80,...) at device_probe_and_attach+0x4e bus_generic_attach(c6f10c80,c6e2f160,1,c0b57050,0,...) at bus_generic_attach+0x19 acpi_pci_attach(c6f10c80,c6f10c80,ffffffff,c07faafa,80000000,...) at acpi_pci_attach+0x194 device_attach(c6f10c80,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6f10c80,c6e4c380,c0c20998,c0b57944,c6e5cb00,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e5cb00,c0b73688,3,c0c20988,c6e2f160,...) at bus_generic_attach+0x19 acpi_pcib_attach(c6e5cb00,c6f10dd0,3,c0c209b0,c6e2f160,...) at acpi_pcib_attach+0x194 acpi_pcib_pci_attach(c6e5cb00,c6e5cb00,ffffffff,c07faafa,80000000,...) at acpi_pcib_pci_attach+0x9d device_attach(c6e5cb00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e5cb00,c6e42680,c0c20a64,c0b57614,c6e4c380,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e4c380,c6e29900,1,c0b57050,0,...) at bus_generic_attach+0x19 acpi_pci_attach(c6e4c380,c6dfe860,c0842288,c07faafa,80000000,...) at acpi_pci_attach+0x194 device_attach(c6e4c380,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e4c380,c6dae600,c0c20afc,c0b57944,c6e42680,...) at device_probe_and_attach+0x4e bus_generic_attach(c6e42680,c0b73688,0,c0c20aec,c6e29900,...) at bus_generic_attach+0x19 acpi_pcib_attach(c6e42680,c6e544b4,0,c0c20b1c,2,...) at acpi_pcib_attach+0x194 acpi_pcib_acpi_attach(c6e42680,c6e0c860,c0842288,c07faafa,80000000,...) at acpi_pcib_acpi_attach+0x246 device_attach(c6e42680,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6e42680,3,c0c20c18,c0b550d7,c6dae600,...) at device_probe_and_attach+0x4e bus_generic_attach(c6dae600,c0b72e09,100000,dff00000,3,...) at bus_generic_attach+0x19 acpi_attach(c6dae600,c6e00860,c0842288,c07faafa,80000000,...) at acpi_attach+0xc87 device_attach(c6dae600,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6dae600,c6daec00,c0c20ca4,c0b6821e,c6daec00,...) at device_probe_and_attach+0x4e bus_generic_attach(c6daec00,a,c0b730be,0,c6cff435,...) at bus_generic_attach+0x19 nexus_acpi_attach(c6daec00,c6e1e060,c0842288,c07faafa,80000000,...) at nexus_acpi_attach+0x7e device_attach(c6daec00,4,c07fa9dc,a79) at device_attach+0x36f device_probe_and_attach(c6daec00,c6d2a600,c6d2a600,c6d00520,c6d2a600,...) at device_probe_and_attach+0x4e bus_generic_new_pass(c6d2a600,c6dad000,c08421b8,c6cdfd74,fffffff,...) at bus_generic_new_pass+0xc5 bus_set_pass(7fffffff,c0c20d5c,c077a80c,c07f9ced,c0c20d78,...) at bus_set_pass+0x81 root_bus_configure(c07f9ced,c0c20d78,c053425c,0,c1ec00,...) at root_bus_configure+0x12 configure(0,c1ec00,c1ec00,c1e000,c25000,...) at configure+0xc mi_startup() at mi_startup+0xac begin() at begin+0x2c (Taking a coredump for analysis in kgdb is not possible as the dump device has not been configured yet at that point.) -- cheers, J"org .-.-. --... ...-- -.. . DL8DTL http://www.sax.de/~joerg/ NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)
Some more analysis on the stack trace: re_attach+0x118a corresponds to re_allocmem(), line 1085: /* Allocate DMA'able memory for the RX ring */ error = bus_dmamem_alloc(sc->rl_ldata.rl_rx_list_tag, (void **)&sc->rl_ldata.rl_rx_list, BUS_DMA_WAITOK | BUS_DMA_COHERENT | BUS_DMA_ZERO, &sc->rl_ldata.rl_rx_list_map); callee bus_dmamem_alloc+0x8a is i386/i386/busdma_machdep.c, bus_dmamem_alloc() line 526: /* * XXX: * (dmat->alignment < dmat->maxsize) is just a quick hack; the exact * alignment guarantees of malloc need to be nailed down, and the * code below should be rewritten to take that into account. * * In the meantime, we'll warn the user if malloc gets it wrong. */ if ((dmat->maxsize <= PAGE_SIZE) && (dmat->alignment < dmat->maxsize) && dmat->lowaddr >= ptoa((vm_paddr_t)Maxmem)) { *vaddr = malloc(dmat->maxsize, M_DEVBUF, mflags); } else { I could not spot anything obvious though. -- cheers, J"org .-.-. --... ...-- -.. . DL8DTL http://www.sax.de/~joerg/ NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)
As it turns out this might be related to something else that has been using that piece of memory before re(4) is activated, here are the boot messages for reference. Copyright (c) 1992-2011 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.2-STABLE #7: Wed May 25 08:21:28 MET DST 2011 j@uriah.heep.sax.de:/usr/obj/usr/src/sys/URIAH i386 Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ (1989.88-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x40f32 Family = f Model = 43 Stepping = 2 Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT> Features2=0x2001<SSE3,CX16> AMD Features=0xea500800<SYSCALL,NX,MMX+,FFXSR,RDTSCP,LM,3DNow!+,3DNow!> AMD Features2=0x1f<LAHF,CMP,SVM,ExtAPIC,CR8> real memory = 4294967296 (4096 MB) avail memory = 3677511680 (3507 MB) ACPI APIC Table: <112007 APIC1437> FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 2 core(s) cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 ioapic0 <Version 1.1> irqs 0-23 on motherboard kbd0 at kbdmux0 acpi0: <112007 RSDT1437> on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) acpi0: reservation of fec00000, fed40000 (3) failed acpi0: reservation of 0, a0000 (3) failed acpi0: reservation of 100000, dff00000 (3) failed Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x2008-0x200b on acpi0 cpu0: <ACPI CPU> on acpi0 cpu1: <ACPI CPU> on acpi0 pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0 pci0: <ACPI PCI bus> on pcib0 pci0: <memory, RAM> at device 0.0 (no driver attached) isab0: <PCI-ISA bridge> port 0x2f00-0x2fff at device 1.0 on pci0 isa0: <ISA bus> on isab0 pci0: <serial bus, SMBus> at device 1.1 (no driver attached) pci0: <memory, RAM> at device 1.2 (no driver attached) ohci0: <OHCI (generic) USB controller> mem 0xfdfff000-0xfdffffff irq 21 at device 2.0 on pci0 ohci0: [ITHREAD] usbus0: <OHCI (generic) USB controller> on ohci0 ehci0: <EHCI (generic) USB 2.0 controller> mem 0xfdffec00-0xfdffecff irq 22 at device 2.1 on pci0 ehci0: [ITHREAD] usbus1: EHCI version 1.0 usbus1: <EHCI (generic) USB 2.0 controller> on ehci0 hdac0: <NVidia MCP65 High Definition Audio Controller> mem 0xfdff8000-0xfdffbfff irq 23 at device 7.0 on pci0 hdac0: HDA Driver Revision: 20100226_0142 hdac0: [ITHREAD] pcib1: <ACPI PCI-PCI bridge> at device 8.0 on pci0 pci1: <ACPI PCI bus> on pcib1 sym0: <875> port 0xc000-0xc0ff mem 0xfe8ff800-0xfe8ff8ff,0xfe8fe000-0xfe8fefff irq 16 at device 8.0 on pci1 sym0: Symbios NVRAM, ID 7, Fast-20, SE, parity checking sym0: open drain IRQ line driver, using on-chip SRAM sym0: using LOAD/STORE-based firmware. sym0: [ITHREAD] sym1: <875> port 0xb000-0xb0ff mem 0xfe8ff000-0xfe8ff0ff,0xfe8fd000-0xfe8fdfff irq 17 at device 8.1 on pci1 sym1: Symbios NVRAM, ID 7, Fast-20, SE, parity checking sym1: open drain IRQ line driver, using on-chip SRAM sym1: using LOAD/STORE-based firmware. sym1: [ITHREAD] puc0: <Titan VScom PCI-800L> port 0xcc00-0xcc07,0xc880-0xc887,0xc800-0xc807,0xbc00-0xbc07,0xb880-0xb8bf irq 17 at device 9.0 on pci1 puc0: [FILTER] uart2: <16550 or compatible> on puc0 uart2: [FILTER] uart3: <16550 or compatible> on puc0 uart3: [FILTER] uart4: <16550 or compatible> on puc0 uart4: [FILTER] uart5: <16550 or compatible> on puc0 uart5: [FILTER] uart6: <16550 or compatible> on puc0 uart6: [FILTER] uart7: <16550 or compatible> on puc0 uart7: [FILTER] uart8: <16550 or compatible> on puc0 uart8: [FILTER] uart9: <16550 or compatible> on puc0 uart9: [FILTER] vgapci0: <VGA-compatible display> mem 0xfe8f8000-0xfe8fbfff,0xfc800000-0xfcffffff irq 18 at device 10.0 on pci1 atapci0: <nVidia nForce MCP65 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xffa0-0xffaf at device 9.0 on pci0 ata0: <ATA channel 0> on atapci0 ata0: [ITHREAD] ata1: <ATA channel 1> on atapci0 ata1: [ITHREAD] atapci1: <nVidia nForce MCP65 SATA300 controller> port 0xf80-0xf87,0xf00-0xf03,0xe80-0xe87,0xe00-0xe03,0x9800-0x980f mem 0xfdffc000-0xfdffdfff irq 20 at device 10.0 on pci0 atapci1: [ITHREAD] atapci1: AHCI v1.10 controller with 4 3Gbps ports, PM supported ata2: <ATA channel 0> on atapci1 ata2: [ITHREAD] ata3: <ATA channel 1> on atapci1 ata3: [ITHREAD] ata4: <ATA channel 2> on atapci1 ata4: [ITHREAD] ata5: <ATA channel 3> on atapci1 ata5: [ITHREAD] pcib2: <ACPI PCI-PCI bridge> at device 11.0 on pci0 pci2: <ACPI PCI bus> on pcib2 pcib3: <ACPI PCI-PCI bridge> at device 12.0 on pci0 pci3: <ACPI PCI bus> on pcib3 re0: <RealTek 8168/8111 B/C/CP/D/DP/E PCIe Gigabit Ethernet> port 0xd800-0xd8ff mem 0xfe9ff000-0xfe9fffff irq 19 at device 0.0 on pci3 re0: Using 1 MSI message re0: Chip rev. 0x38000000 re0: MAC rev. 0x00000000 miibus0: <MII bus> on re0 rgephy0: <RTL8169S/8110S/8211B media interface> PHY 1 on miibus0 rgephy0: 10baseT, 10baseT-FDX, 10baseT-FDX-flow, 100baseTX, 100baseTX-FDX, 100baseTX-FDX-flow, 1000baseT, 1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, 1000baseT-FDX-flow, 1000baseT-FDX-flow-master, auto, auto-flow re0: Ethernet address: 00:1d:92:89:9f:a3 re0: [ITHREAD] pcib4: <ACPI PCI-PCI bridge> at device 13.0 on pci0 pci4: <ACPI PCI bus> on pcib4 pcib5: <ACPI PCI-PCI bridge> at device 14.0 on pci0 pci5: <ACPI PCI bus> on pcib5 pcib6: <PCI-PCI bridge> mem 0xfeafe000-0xfeafffff irq 16 at device 0.0 on pci5 pci6: <PCI bus> on pcib6 ahd0: <Adaptec 39320LPE Ultra320 SCSI adapter> port 0xe800-0xe8ff,0xe400-0xe4ff mem 0xfebfe000-0xfebfffff irq 16 at device 4.0 on pci6 ahd0: [ITHREAD] aic7902: Ultra320 Wide Channel A, SCSI Id=7, PCI-X 101-133MHz, 512 SCBs acpi_button0: <Power Button> on acpi0 fdc0: <floppy drive controller (FDE)> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FILTER] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed00fff irq 0,8 on acpi0 Timecounter "HPET" frequency 25000000 Hz quality 900 atrtc0: <AT realtime clock> port 0x70-0x71 on acpi0 orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xd1000-0xd17ff pnpid ORM0000 on isa0 sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x100> vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode ppc0: [ITHREAD] ppbus0: <Parallel port bus> on ppc0 plip0: <PLIP network interface> on ppbus0 plip0: [ITHREAD] lpt0: <Printer> on ppbus0 lpt0: [ITHREAD] lpt0: Interrupt-driven port ppi0: <Parallel I/O> on ppbus0 uart0: <16550 or compatible> at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 uart0: [FILTER] uart0: console (9600,n,8,1) powernow0: <PowerNow! K8> on cpu0 powernow1: <PowerNow! K8> on cpu1 Timecounters tick every 1.000 msec usbus0: 12Mbps Full Speed USB v1.0 usbus1: 480Mbps High Speed USB v2.0 ugen0.1: <nVidia> at usbus0 uhub0: <nVidia OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0 ugen1.1: <nVidia> at usbus1 uhub1: <nVidia EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1 acd0: DVDR <TSSTcorp CDDVDW SH-S202H/SB00> at ata0-master UDMA66 ad4: 152627MB <Hitachi HDS721616PLA380 P22OABEA> at ata2-master UDMA100 SATA 3Gb/s hdac0: HDA Codec #0: Realtek ALC888 pcm0: <HDA Realtek ALC888 PCM #0 Analog> at cad 0 nid 1 on hdac0 pcm1: <HDA Realtek ALC888 PCM #1 Analog> at cad 0 nid 1 on hdac0 pcm2: <HDA Realtek ALC888 PCM #2 Digital> at cad 0 nid 1 on hdac0 (noperiph:sym0:0:-1:-1): SCSI BUS reset delivered. (noperiph:sym1:0:-1:-1): SCSI BUS reset delivered. acd0: FAILURE - INQUIRY ILLEGAL REQUEST asc=0x24 ascq=0x00 uhub0: 10 ports with 10 removable, self powered uhub1: 10 ports with 10 removable, self powered ugen1.2: <vendor 0x0409> at usbus1 uhub2: <vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2> on usbus1 da1 at ahd0 bus 0 scbus0 target 4 lun 0 da1: <SEAGATE ST336607LW 0007> Fixed Direct Access SCSI-3 device da1: 320.000MB/s transfers (160.000MHz DT, offset 63, 16bit) da1: Command Queueing enabled da1: 35003MB (71687372 512 byte sectors: 255H 63S/T 4462C) da0 at ahd0 bus 0 scbus0 target 2 lun 0 da0: <SEAGATE ST336706LW 010A> Fixed Direct Access SCSI-3 device da0: 160.000MB/s transfers (80.000MHz DT, offset 63, 16bit) da0: Command Queueing enabled da0: 35003MB (71687370 512 byte sectors: 255H 63S/T 4462C) SMP: AP CPU #1 Launched! cd0 at ata0 bus 0 scbus3 target 0 lun 0 cd0: <TSSTcorp CDDVDW SH-S202H SBu0h0u>b 2R:e m4o vpaobrltes CwDi-tRhO M4 SrCeSmIo-v0a bdleev,i csee l fc dp0o:w e6r6e.d00 0MB/s transfers cd0: cd present [345505 x 2048 byte records] ugen0.2: <ALCOR> at usbus0 uhub3: <ALCOR Generic USB Hub, class 9/0, rev 1.10/3.12, addr 2> on usbus0 uhub3: 4 ports with 4 removable, self powered ugen0.3: <vendor 0x0430> at usbus0 ukbd0: <vendor 0x0430 product 0x0005, class 0/0, rev 1.00/1.02, addr 3> on usbus0 kbd1 at ukbd0 ugen0.4: <vendor 0x1241> at usbus0 ums0: <vendor 0x1241 product 0x1166, class 0/0, rev 1.10/2.70, addr 4> on usbus0 ums0: 5 buttons and [XYZ] coordinates ID=0 ugen0.5: <vendor 0x0409> at usbus0 uhub4: <vendor 0x0409 product 0x0059, class 9/0, rev 2.00/1.00, addr 5> on usbus0 uhub4: 4 ports with 4 removable, self powered ugen0.6: <ATMEL> at usbus0 acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 1 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 0 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 5 45 a0 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 20 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 4 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 0 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 80 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 20 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 4 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 0 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 80 0 0 4 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 10 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 0 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 4 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 20 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back acd0: FAILURE - READ_BIG ILLEGAL REQUEST asc=0x64 ascq=0x00 (cd0:ata0:0:0:0): READ(10). CDB: 28 0 0 0 0 0 0 0 1 0 (cd0:ata0:0:0:0): CAM status: SCSI Status Error (cd0:ata0:0:0:0): SCSI status: Check Condition (cd0:ata0:0:0:0): SCSI sense: ILLEGAL REQUEST asc:64,0 (Illegal mode for this track) (cd0:ata0:0:0:0): cddone: got error 0x6 back Trying to mount root from ufs:/dev/gvinum/root -- cheers, J"org .-.-. --... ...-- -.. . DL8DTL http://www.sax.de/~joerg/ NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)
On Thu, May 26, 2011 at 05:54:24PM +0200, Joerg Wunsch wrote: J> As it turns out this might be related to something else that has been J> using that piece of memory before re(4) is activated, here are the J> boot messages for reference. You can try to add 'options DEBUG_MEMGUARD' to your kernel config, and add the 'vm.memguard.desc=devbuf' to your /boot/loader.conf. This may help to find place where memory is tampered after free. -- Totus tuus, Glebius.
The respective system has been decommisioned recently.