kern/159326: kernel panics when accessing spindowned HDDs

[Masanao Goto]

>Number:         159326
>Category:       kern
>Synopsis:       kernel panics when accessing spindowned HDDs
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jul 31 07:20:02 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Masanao Goto
>Release:        FreeBSD 9-CURRENT
>Organization:
>Environment:
FreeBSD copper.smectic.com 9.0-BETA1 FreeBSD 9.0-BETA1 #2: Sat Jul 30 15:10:28 JST 2011     root at copper.smectic.com:/usr/obj/usr/src/sys/GENERIC  amd64
>Description:
When you access SATA HDDs, which has been spindowned by '/sbin/camcontrol stop /dev/da0', the kernel panics showing the message below.  
>How-To-Repeat:
1. spindown all the HDDs using camcontrol command
/sbin/camcontrol stop /dev/da0
/sbin/camcontrol stop /dev/da1
/sbin/camcontrol stop /dev/da2
/sbin/camcontrol stop /dev/da3
/sbin/camcontrol stop /dev/da4
/sbin/camcontrol stop /dev/da5

2. write substantial amount of file to raidz pool
dd if=/dev/null of=/raidz_pool_name/test_file_name count=20 bs=1g
To surely cause a kernel-panic, you have to write data more than memory capacity, in my case 16GB.  

3. kernel always panics
>Fix:
Sorry I don't know.  
At least, when HDDs were connected to usual SATA buses on M/B, I didn't encountered such problem.  


>Release-Note:
>Audit-Trail:
>Unformatted:
 >>
 panic: Bad link elm oxfffffe0008c77800 prev->next != elm
 cpuid = 1
 KDB: enter: panic
 [ thread pid 12 tid 100021 ]
 Stopped at       kdb_enter+0x3b: movq     $0, 0x912652(%rip)
 db>
 <<
 
 the machine setup is as follows
 [cpu]  Pentium G620
 [M/B]  H67MA-E45 v1.8 (FreeBSD can not boot up with SMP on v1.7 BIOS)
 [HDD]       SHD-NSUM60G, WD30EZRS*3,WD30EZRX*3
 [memory]  DDR3 1333 2GB*4
 [SATA interface] LSI SAS 9211-8i
 
 All SATA HDDs are connected through 9211-9i HBA, then assembled into a single raidz pool.  
 SATA HDDs are identified as /dev/da[0-5]