kern/158197: [geom] geom_cache with size> 1000 leads to panics

[Pavel Polyakov]

The following reply was made to PR kern/158197; it has been noted by GNATS.

From: "Pavel Polyakov" <bsd at kobyla.org>
To: bug-followup at freebsd.org, bsd at kobyla.org
Cc:  
Subject: Re: kern/158197: [geom] geom_cache with size&gt;1000 leads to panics
Date: Thu, 08 Sep 2011 11:57:57 -0000

 Still affects on BETA1.
 
 Thu Sep  8 13:58:49 EEST 2011
 
 FreeBSD pp.fss.sunpp 9.0-BETA1 FreeBSD 9.0-BETA1 #0 r224843: Fri Aug 26
 16:53:42 EEST 2011     root at pp.fss.sunpp:/usr/obj/usr/src/sys/PDC90  amd64
 
 panic:
 
 Unread portion of the kernel message buffer:
 
 Fatal trap 9: general protection fault while in kernel mode
 cpuid = 0; apic id = 00
 instruction pointer	= 0x20:0xffffffff8110a130
 stack pointer	        = 0x28:0xffffff800024db40
 frame pointer	        = 0x28:0xffffff800024db80
 code segment		= base 0x0, limit 0xfffff, type 0x1b
 			= DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags	= interrupt enabled, resume, IOPL = 0
 current process		= 13 (g_down)
 Dumping 1080 out of 4079
 MB:..2%..11%..21%..32%..42%..51%..61%..72%..82%..91%
 
 
 #6  0xffffffff807ee40d in trap_fatal (frame=0xffffff800024da90,
 eva=Variable "eva" is not available.
 )
        at /usr/src/sys/amd64/amd64/trap.c:800
 #7  0xffffffff807ee9d5 in trap (frame=0xffffff800024da90)
        at /usr/src/sys/amd64/amd64/trap.c:616
 #8  0xffffffff807d93bf in calltrap ()
        at /usr/src/sys/amd64/amd64/exception.S:228
 
 #9  0xffffffff8110a130 in g_cache_read (sc=0xfffffe00097c7200,
        bp=0xfffffe00c5f75570)
        at
 /usr/src/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:117
 
 (kgdb) fr 9
 #9  0xffffffff8110a130 in g_cache_read (sc=0xfffffe00097c7200,
 bp=0xfffffe00c5f75570)
        at
 /usr/src/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:117
 117                     TAILQ_REMOVE(&sc->sc_usedlist, dp, d_used);
 
 (kgdb) p sc->sc_usedlist
 $2 = {tqh_first = 0xfffffe0083a7b980, tqh_last = 0xfffffe0083a7b9b8}
 
 (kgdb) p *(struct g_cache_desc *) dp
 $6 = {d_bno = -2401050962867404578, d_data = 0xdeadc0dedeadc0de <Address
 0xdeadc0dedeadc0de out of bounds>, d_biolist = 0xdeadc0dedeadc0de,
      d_atime = -2401050962867404578, d_flags = -559038242, d_next = {le_next
 = 0xdeadc0dedeadc0de, le_prev = 0xdeadc0dedeadc0de}, d_used = {
        tqe_next = 0xdeadc0dedeadc0de, tqe_prev = 0xdeadc0dedeadc0de}}
 
 (kgdb) p d_used
 No symbol "d_used" in current context.
 
 
 
 
 #10 0xffffffff8110a6f2 in g_cache_start (bp=0xfffffe00c5f75570)
        at
 /usr/src/sys/modules/geom/geom_cache/../../../geom/cache/g_cache.c:378
 
 #11 0xffffffff804c6d43 in g_io_schedule_down (tp=Variable "tp" is not
 available.
 )
        at /usr/src/sys/geom/geom_io.c:632
 
 #12 0xffffffff804c71d2 in g_down_procbody (arg=Variable "arg" is not
 available.
 )
        at /usr/src/sys/geom/geom_kern.c:110
 #13 0xffffffff804fe685 in fork_exit (
        callout=0xffffffff804c7160 <g_down_procbody>, arg=0x0,
        frame=0xffffff800024dc50) at /usr/src/sys/kern/kern_fork.c:941
 #14 0xffffffff807d98ee in fork_trampoline ()
        at /usr/src/sys/amd64/amd64/exception.S:603
 
 ----
 
 More detailed core.txt available at
 http://bak.sg01.com/tmp/panic55a.txt