The following reply was made to PR kern/158197; it has been noted by GNATS.
From: "Pavel Polyakov" <pdc at kobyla.org>
To: bug-followup at freebsd.org, bsd at kobyla.org
Cc:
Subject: Re: amd64/158197: geom_cache with size>1000 leads to panics
Date: Thu, 23 Jun 2011 10:11:08 -0000
------------7QYvsDfCNo1cZZUH0FwJVm
Content-Type: text/plain; charset=windows-1251; format=flowed; delsp=yes
Content-Transfer-Encoding: 8bit
Trace from older revision (with full vmcore)
Dump header from device /dev/ad4s1b
Architecture: amd64
Architecture Version: 2
Dump Length: 2973687808B (2835 MB)
Blocksize: 512
Dumptime: Wed Mar 16 03:33:59 2011
Hostname: cel.home
Magic: FreeBSD Kernel Dump
Version String: FreeBSD 9.0-CURRENT #0 r219141: Thu Mar 3 06:07:03 EET 2011
root at cel.home:/usr/obj/var/src9/sys/PDC90
Panic String:
Dump Parity: 2510468568
Bounds: 32
Dump Status: good
Fatal trap 9: general protection fault while in kernel mode
cpuid = 2; apic id = 02
instruction pointer = 0x20:0xffffffff8135924e
stack pointer = 0x28:0xffffff800007ab30
frame pointer = 0x28:0xffffff800007ab70
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 4 (g_down)
Physical memory: 8175 MB
Dumping 2835 MB: 2820 2804 2788 2772 ...
(kgdb) #0 doadump () at /var/src9/sys/kern/kern_shutdown.c:250
#1 0xffffffff802cb7fc in db_fncall (dummy1=Variable "dummy1" is not
available.
)
at /var/src9/sys/ddb/db_command.c:548
#2 0xffffffff802cbb31 in db_command (last_cmdp=0xffffffff80bc5340,
cmd_table=Variable "cmd_table" is not available.
) at /var/src9/sys/ddb/db_command.c:445
#3 0xffffffff802cbd80 in db_command_loop ()
at /var/src9/sys/ddb/db_command.c:498
#4 0xffffffff802cddf9 in db_trap (type=Variable "type" is not available.
) at /var/src9/sys/ddb/db_main.c:229
#5 0xffffffff8054e5b1 in kdb_trap (type=9, code=0, tf=0xffffff800007aa80)
at /var/src9/sys/kern/subr_kdb.c:533
#6 0xffffffff807cd88d in trap_fatal (frame=0xffffff800007aa80,
eva=Variable "eva" is not available.
)
at /var/src9/sys/amd64/amd64/trap.c:798
#7 0xffffffff807cde5c in trap (frame=0xffffff800007aa80)
at /var/src9/sys/amd64/amd64/trap.c:614
#8 0xffffffff807b86ff in calltrap ()
at /var/src9/sys/amd64/amd64/exception.S:228
#9 0xffffffff8135924e in g_cache_read (sc=0xfffffe0008851800,
bp=0xfffffe019f8e2488)
at /var/src9/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:116
#10 0xffffffff813597f2 in g_cache_start (bp=0xfffffe019f8e2488)
at /var/src9/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:377
#11 0xffffffff804b82c4 in g_io_schedule_down (tp=Variable "tp" is not
available.
)
at /var/src9/sys/geom/geom_io.c:632
#12 0xffffffff804b86af in g_down_procbody ()
at /var/src9/sys/geom/geom_kern.c:118
#13 0xffffffff804ee58a in fork_exit (
callout=0xffffffff804b8640 <g_down_procbody>, arg=0x0,
frame=0xffffff800007ac50) at /var/src9/sys/kern/kern_fork.c:885
#14 0xffffffff807b8bae in fork_trampoline ()
at /var/src9/sys/amd64/amd64/exception.S:569
#15 0x0000000000000000 in ?? ()
#16 0x0000000000000000 in ?? ()
#17 0x0000000000000001 in ?? ()
#18 0x0000000000000000 in ?? ()
#19 0x0000000000000000 in ?? ()
(kgdb) fr 9
#9 0xffffffff8135924e in g_cache_read (sc=0xfffffe0008851800,
bp=0xfffffe019f8e2488) at
/var/src9/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:116
116 TAILQ_REMOVE(&sc->sc_usedlist, dp, d_used);
(kgdb) p sc->sc_usedlist
$1 = {tqh_first = 0xfffffe00a451e680, tqh_last = 0xfffffe00a451e6b8}
(kgdb) p dp
$2 = (struct g_cache_desc *) 0xfffffe00a451e680
(kgdb) p d_used
No symbol "d_used" in current context.
(kgdb) x 0xfffffe00a451e680
0xfffffe00a451e680: 0xdeadc0de
(kgdb) x 0xfffffe00a451e6b8
0xfffffe00a451e6b8: 0xdeadc0de
(kgdb) x dp
0xfffffe0008851800: 0x069cd300
(kgdb) x 0xfffffe019f8e2488
0xfffffe019f8e2488: 0x00000001
------------7QYvsDfCNo1cZZUH0FwJVm
Content-Type: multipart/related; boundary=----------7QYvsDfCNo1cZZ5J1il0ZP
------------7QYvsDfCNo1cZZ5J1il0ZP
Content-Type: text/html; charset=windows-1251
Content-ID: <op.1308823867996.e0759d546d5c31cb at 172.25.10.177>
Content-Transfer-Encoding: Quoted-Printable
<!DOCTYPE html><html><head><style type=3D"text/css">body { font-family:'=
Andale Mono'; font-size:12px}</style></head><body><div>Trace from older =
revision (with full vmcore)<br><br></div><div><br></div><div><br>Dump he=
ader from device /dev/ad4s1b<br> Architecture: amd64<br> Architecture =
Version: 2<br> Dump Length: 2973687808B (2835 MB)<br> Blocksize: 512<b=
r> Dumptime: Wed Mar 16 03:33:59 2011<br> Hostname: cel.home<br> Magi=
c: FreeBSD Kernel Dump<br> Version String: FreeBSD 9.0-CURRENT #0 r2191=
41: Thu Mar 3 06:07:03 EET 2011<br> root at cel.home:/usr/obj/var/src9/=
sys/PDC90<br> Panic String: <br> Dump Parity: 2510468568<br> Bounds: =
32<br> Dump Status: good<br></div><div><br></div><div><br></div><div><b=
r><br>Fatal trap 9: general protection fault while in kernel mode<br>cpu=
id =3D 2; apic id =3D 02 =
=
=
<br>instruction pointer =3D 0x20:0xffffffff813=
5924e<br>stack pointer =3D 0x28:0xffffff800007ab30<br>frame po=
inter =3D 0x28:0xffffff800007ab70 =
=
=
<br>code segment =3D base 0x0, limit 0xfffff, =
type 0x1b<br> =3D DPL 0, pres 1, long 1, def32 0,=
gran 1<br>processor eflags =3D interrupt enabled, resume, IOPL =3D=
0 =
=
<br>current process =3D 4 (g_d=
own)<br>Physical memory: 8175 MB =
=
=
<br>Dumping 2835 MB: 2820 2804 2788 2772 ..=
.<br><br><br><br><br><br>(kgdb) #0 doadump () at /var/src9/sys/kern/ker=
n_shutdown.c:250 =
=
<br>#1 0xffffffff802cb7fc=
in db_fncall (dummy1=3DVariable "dummy1" is not available. =
=
=
<br>) =
=
=
<br> at /var/src9/sys/ddb/db_command.c:548 =
=
=
<br>#2 0xffffffff802=
cbb31 in db_command (last_cmdp=3D0xffffffff80bc5340, cmd_table=3DVariabl=
e "cmd_table" is not available. =
=
<br> =
=
=
<br>) at /var/src9/sys/ddb/db_command.c=
:445 =
=
<br>#3 0xffff=
ffff802cbd80 in db_command_loop () =
=
=
<br> at /var/src9/sys/ddb/db_command.c:498 =
=
=
<br>#4 0xffffffff802cddf9 in db_tra=
p (type=3DVariable "type" is not available. =
=
<br>) at =
/var/src9/sys/ddb/db_main.c:229 =
=
=
<br>#5 0xffffffff8054e5b1 in kdb_trap (type=3D9, code=3D=
0, tf=3D0xffffff800007aa80) =
=
<br> at /var/src9/sys/k=
ern/subr_kdb.c:533 =
=
<=
br>#6 0xffffffff807cd88d in trap_fatal (frame=3D0xffffff800007aa80, eva=
=3DVariable "eva" is not available. =
=
<br>) =
=
=
<br> at /var/src=
9/sys/amd64/amd64/trap.c:798 =
=
=
<br>#7 0xffffffff807cde5c in trap (frame=3D0xffffff800007aa80) =
=
=
<br> at /var/src9/sys/amd64/amd64/tr=
ap.c:614 =
=
<br>#8 0xffff=
ffff807b86ff in calltrap () =
=
=
<br> at /var/src9/sys/amd64/amd64/exception.S:228 =
=
=
<br>#9 0xffffffff8135924e in g_cach=
e_read (sc=3D0xfffffe0008851800, =
=
<br> b=
p=3D0xfffffe019f8e2488) =
=
=
<br> at /var/src9/sys/modules/geom/geom_cache/../..=
/../geom/cache/g_cache.c:116 =
=
<br>#10 0xffffffff813597f2 in=
g_cache_start (bp=3D0xfffffe019f8e2488)<br> at /var/src9/sys/modules=
/geom/geom_cache/../../../geom/cache/g_cache.c:377 =
=
<br>#11=
0xffffffff804b82c4 in g_io_schedule_down (tp=3DVariable "tp" is not ava=
ilable. =
=
<br>) =
=
=
<br> at /var/src9/sys/ge=
om/geom_io.c:632 =
=
<b=
r>#12 0xffffffff804b86af in g_down_procbody () =
=
=
<br> at /var/src9/sys/geom/geom_kern.c:118 =
=
=
<br>#13 0xffffffff804ee5=
8a in fork_exit ( =
=
=
<br> callout=3D0xffffffff804b8640 <g_down_procbody>, arg=3D0x0=
, =
=
<br> frame=3D0xffffff800007ac50) =
at /var/src9/sys/kern/kern_fork.c:885<br>#14 0xffffffff807b8bae in fork_=
trampoline ()<br> at /var/src9/sys/amd64/amd64/exception.S:569<br>#15=
0x0000000000000000 in ?? ()<br>#16 0x0000000000000000 in ?? ()<br>#17 0=
x0000000000000001 in ?? ()<br>#18 0x0000000000000000 in ?? ()<br>#19 0x0=
000000000000000 in ?? ()<br><br><br><br></div><div> =
=
<=
br> =
=
<br>(kgdb) fr 9 =
=
<br>#9 0xffffffff8135924=
e in g_cache_read (sc=3D0xfffffe0008851800, bp=3D0xfffffe019f8e2488) at =
/var/src9/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:116<=
br>116 TAILQ_REMOVE(&sc->sc_usedlist, dp, d_u=
sed);<br>(kgdb) p sc->sc_usedlist =
=
<br>$1 =3D {tqh_first =3D 0xfffffe00a451=
e680, tqh_last =3D 0xfffffe00a451e6b8}<br>(kgdb) p dp =
=
<br>$2 =3D=
(struct g_cache_desc *) 0xfffffe00a451e680 =
=
<br>(kgdb) p d_used<br>No symbol "d_used" in current con=
text. =
<br> =
=
=
<br>(kgdb) x 0xfffffe00a451e680<br>0xfffffe00a451e680: 0x=
deadc0de =
<br>(k=
gdb) x 0xfffffe00a451e6b8 =
=
<br>0xfffffe00a451e6b8: 0xdeadc0de<br>(kgdb) x dp =
=
=
<br>0xfffffe0008851800: 0x069cd300 =
=
<br>(kgdb) x 0xfffffe019f8e2488<br>0xfff=
ffe019f8e2488: 0x00000001 =
=
<br> =
=
<br><br></div></body></html>
------------7QYvsDfCNo1cZZ5J1il0ZP--
------------7QYvsDfCNo1cZZUH0FwJVm--