kern/86417: Panic when doing massive i/o operations on an ATA-Raid (Promise TX2 ATA100 controller)

[Imri Zvik]

>Number:         86417
>Category:       kern
>Synopsis:       Panic when doing massive i/o operations on an ATA-Raid (Promise TX2 ATA100 controller)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Sep 21 15:10:00 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Imri Zvik
>Release:        FreeBSD 4.11
>Organization:
Internet Gold
>Environment:
FreeBSD XXXXXXXX.inter.net.il 4.11-RELEASE-p12 FreeBSD 4.11-RELEASE-p12 #6: Tue Sep 20 23:09:33 IDT 2005     root at XXXXXXXX.inter.net.il:/usr/obj/usr/src/sys/IGLD  i386

>Description:
the machines panics when you do massive i/o operations (such as syncing your FreeBSD mirror :) )

core dump is avb. at http://mariska.inter.net.il/~imriz/crash.tar.bz2

backtrace:

(kgdb) bt
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0xc01841e1 in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:316
#2  0xc0184608 in poweroff_wait (junk=0xc030e6ec, howto=-1070538257) at /usr/src/sys/kern/kern_shutdown.c:595
#3  0xc02ba9e2 in trap_fatal (frame=0xdb5aab44, eva=16) at /usr/src/sys/i386/i386/trap.c:974
#4  0xc02ba6c1 in trap_pfault (frame=0xdb5aab44, usermode=0, eva=16) at /usr/src/sys/i386/i386/trap.c:867
#5  0xc02ba24f in trap (frame={tf_fs = -1072496624, tf_es = 16, tf_ds = -1041432560, tf_edi = -1041355776,
      tf_esi = -1041373160, tf_ebp = -614814720, tf_isp = -614814864, tf_ebx = 63, tf_edx = 4, tf_ecx = 625163490,
      tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1072421066, tf_cs = 8, tf_eflags = 66050, tf_esp = -1041372704,
      tf_ss = -867661324}) at /usr/src/sys/i386/i386/trap.c:466
#6  0xc0142736 in arstrategy (bp=0xcc4889f4) at /usr/src/sys/dev/ata/ata-raid.c:512
#7  0xc018e5c5 in diskstrategy (bp=0xcc4889f4) at /usr/src/sys/kern/subr_disk.c:251
#8  0xc01c1a38 in spec_strategy (ap=0xdb5aac5c) at /usr/src/sys/miscfs/specfs/spec_vnops.c:479
#9  0xc01c146d in spec_vnoperate (ap=0xdb5aac5c) at /usr/src/sys/miscfs/specfs/spec_vnops.c:119
#10 0xc0266941 in ufs_vnoperatespec (ap=0xdb5aac5c) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2394
#11 0xc0266251 in ufs_strategy (ap=0xdb5aaca0) at vnode_if.h:944
#12 0xc0266911 in ufs_vnoperate (ap=0xdb5aaca0) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376
#13 0xc01acbaa in bwrite (bp=0xcc4889f4) at vnode_if.h:944
#14 0xc01b3332 in vop_stdbwrite (ap=0xdb5aacdc) at /usr/src/sys/kern/vfs_default.c:344
#15 0xc01b317d in vop_defaultop (ap=0xdb5aacdc) at /usr/src/sys/kern/vfs_default.c:152
#16 0xc0266911 in ufs_vnoperate (ap=0xdb5aacdc) at /usr/src/sys/ufs/ufs/ufs_vnops.c:2376
#17 0xc01acf0a in bawrite (bp=0xcc4889f4) at vnode_if.h:1193
#18 0xc01b27d0 in cluster_wbuild (vp=0xdb0b5a80, size=16384, start_lbn=263, len=8) at /usr/src/sys/kern/vfs_cluster.c:945
#19 0xc01b22b3 in cluster_write (bp=0xcc5a9420, filesize=4308992, seqcount=127) at /usr/src/sys/kern/vfs_cluster.c:576
#20 0xc025f176 in ffs_write (ap=0xdb5aae5c) at /usr/src/sys/ufs/ufs/ufs_readwrite.c:572
#21 0xc01bd523 in vn_write (fp=0xc2f3b400, uio=0xdb5aaecc, cred=0xc2066380, flags=0, p=0xdaf4b0c0) at vnode_if.h:363
#22 0xc0194608 in dofilewrite (p=0xdaf4b0c0, fp=0xc2f3b400, fd=4, buf=0xcf3d000, nbyte=262144, offset=-1, flags=0)
    at /usr/src/sys/sys/file.h:163
#23 0xc01944ba in write (p=0xdaf4b0c0, uap=0xdb5aaf80) at /usr/src/sys/kern/sys_generic.c:329
#24 0xc02bac7e in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = -1078001617, tf_edi = 4, tf_esi = 217305088,
      tf_ebp = -1077942064, tf_isp = -614813740, tf_ebx = 0, tf_edx = 32768, tf_ecx = 0, tf_eax = 4, tf_trapno = 22,
      tf_err = 2, tf_eip = 672229424, tf_cs = 31, tf_eflags = 663, tf_esp = -1077942108, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1175
#25 0xc02a9a45 in Xint0x80_syscall ()

>How-To-Repeat:
      
>Fix:
      
>Release-Note:
>Audit-Trail:
>Unformatted: