[Bug 214250] Panic with BUF_TRACKING

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214250

            Bug ID: 214250
           Summary: Panic with BUF_TRACKING
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: trasz at FreeBSD.org

To reproduce, plug in a USB flash key and do "sg_luns /dev/da0".  It also works
with iSCSI and probably other SCSI devices.

(kgdb) where
#0  doadump (textdump=0) at pcpu.h:222
#1  0xffffffff80396b3b in db_dump (dummy=<value optimized out>, dummy2=false,
dummy3=0, dummy4=0x0) at /usr/home/trasz/svn/spare/sys/ddb/db_command.c:546
#2  0xffffffff80396939 in db_command (cmd_table=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/ddb/db_command.c:453
#3  0xffffffff80396694 in db_command_loop () at
/usr/home/trasz/svn/spare/sys/ddb/db_command.c:506
#4  0xffffffff8039974f in db_trap (type=<value optimized out>, code=<value
optimized out>) at /usr/home/trasz/svn/spare/sys/ddb/db_main.c:248
#5  0xffffffff80aa08b3 in kdb_trap (type=<value optimized out>, code=<value
optimized out>, tf=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/kern/subr_kdb.c:654
#6  0xffffffff80ed9511 in trap_fatal (frame=0xfffffe02287d2830, eva=0) at
/usr/home/trasz/svn/spare/sys/amd64/amd64/trap.c:796
#7  0xffffffff80ed91ff in trap (frame=0xfffffe02287d2830) at
/usr/home/trasz/svn/spare/sys/amd64/amd64/trap.c:198
#8  0xffffffff80eb9161 in calltrap () at
/usr/home/trasz/svn/spare/sys/amd64/amd64/exception.S:236
#9  0xffffffff8030a7c9 in xpt_done (done_ccb=0xfffff8010f690800) at
/usr/home/trasz/svn/spare/sys/cam/cam_xpt.c:4477
#10 0xffffffff808a45ac in umass_t_bbb_status_callback (xfer=<value optimized
out>, error=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/dev/usb/storage/umass.c:1151
#11 0xffffffff808c1612 in usbd_callback_wrapper (pq=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/dev/usb/usb_transfer.c:2407
#12 0xffffffff808c28e9 in usb_command_wrapper (pq=<value optimized out>,
xfer=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/dev/usb/usb_transfer.c:3061
#13 0xffffffff808c177e in usb_callback_proc (_pm=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/dev/usb/usb_transfer.c:2268
#14 0xffffffff808bc2b5 in usb_process (arg=<value optimized out>) at
/usr/home/trasz/svn/spare/sys/dev/usb/usb_process.c:176
#15 0xffffffff80a223b4 in fork_exit (callout=0xffffffff808bc1e0 <usb_process>,
arg=0xfffffe0000ebedb0, frame=0xfffffe02287d2ac0)
    at /usr/home/trasz/svn/spare/sys/kern/kern_fork.c:1038
#16 0xffffffff80eb969e in fork_trampoline () at
/usr/home/trasz/svn/spare/sys/amd64/amd64/exception.S:611
#17 0x0000000000000000 in ?? ()


[..]

(kgdb) down
#9  0xffffffff8030a7c9 in xpt_done (done_ccb=0xfffff8010f690800) at
/usr/home/trasz/svn/spare/sys/cam/cam_xpt.c:4477
4477                done_ccb->csio.bio != NULL)
(kgdb) l
4472            struct cam_doneq *queue;
4473            int     run, hash;
4474
4475    #if defined(BUF_TRACKING) || defined(FULL_BUF_TRACKING)
4476            if (done_ccb->ccb_h.func_code == XPT_SCSI_IO &&
4477                done_ccb->csio.bio != NULL)
4478                    biotrack(done_ccb->csio.bio, __func__);
4479    #endif
4480
4481            CAM_DEBUG(done_ccb->ccb_h.path, CAM_DEBUG_TRACE,
(kgdb) p done_ccb->csio.bio
$1 = (struct bio *) 0xa5a5a5a5a5a5a5a5

-- 
You are receiving this mail because:
You are the assignee for the bug.