[issue2092] Panic: Bad link elm 0x... next->prev != elm

[Magliano Andrea (via DragonFly issue tracker)]

Magliano Andrea <masterblaster at tiscali.it> added the comment:

Unfortunately another kdump despite callout_stop_sync() modifications (few hours
after installkernel): https://84.73.12.43/crash/core19.tar.xz

As 'crash test' i'm running a 'git svn clone' of lyx svn repo (which takes
looong time)

(kgdb) bt
#0  _get_mycpu () at ./machine/thread.h:69
#1  md_dumpsys (di=<optimized out>)
    at /usr/src/sys/platform/pc64/x86_64/dump_machdep.c:263
#2  0xffffffff802c4c75 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:925
#3  0xffffffff802c52db in boot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:387
#4  0xffffffff802c5584 in panic (
    fmt=0xffffffff817b1310 "assertion \"%s\" failed in %s at %s:%u")
    at /usr/src/sys/kern/kern_shutdown.c:831
#5  0xffffffff817ac553 in ahci_ata_cmd_done (ccb=0xffffffe01f2726e0)
    at /usr/src/sys/dev/disk/ahci/ahci.c:3561
#6  0xffffffff817af14b in ahci_port_intr (ap=0xffffffe01f25c638, 
    blockable=<optimized out>) at /usr/src/sys/dev/disk/ahci/ahci.c:3010
#7  0xffffffff817af361 in ahci_intr (arg=<optimized out>)
    at /usr/src/sys/dev/disk/ahci/ahci.c:2352
#8  0xffffffff80294c14 in ithread_handler (arg=<optimized out>)
    at /usr/src/sys/kern/kern_intr.c:837
#9  0xffffffff802d17ad in lwkt_deschedule_self (td=<unavailable>)
    at /usr/src/sys/kern/lwkt_thread.c:355
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

(kgdb) p *(struct ata_xfer *) ccb->ccb_xa
$1 = {fis = 0x4015630020618027, rfis = {type = 9 '\t', flags = 0 '\000', 
    status = 0 '\000', error = 0 '\000', lba_low = 216 '\330', 
    lba_mid = 0 '\000', lba_high = 0 '\000', device = 0 '\000', 
    lba_low_exp = 0 '\000', lba_mid_exp = 0 '\000', lba_high_exp = 0 '\000', 
    reserved0 = 0 '\000', sector_count = 0 '\000', 
    sector_count_exp = 0 '\000', reserved1 = 0 '\000', reserved2 = 0 '\000', 
    reserved3 = 0 '\000', reserved4 = 0 '\000', reserved5 = 0 '\000', 
    reserved6 = 0 '\000'}, packetcmd = 0x0, tag = 0 '\000', data = 0x0, 
  datalen = 0, resid = 0, complete = 0, timeout = 0, flags = 0, state = 0, 
  atascsi_private = 0x0, at = 0x0}

(kgdb) p *(*(struct ata_xfer *) ccb->ccb_xa).fis
Cannot access memory at address 0x4015630020618027

and fis is screwed up too...

_____________________________________________________
DragonFly issue tracker <bugs at lists.dragonflybsd.org>
<http://bugs.dragonflybsd.org/issue2092>
_____________________________________________________