[Bug 257298] kernel panic with kern.cam.da.enable_uma_ccbs=1

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 23 Feb 2022 10:15:09 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257298

sigsys@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sigsys@gmail.com

--- Comment #2 from sigsys@gmail.com ---
Getting those panics too (I think) with recent -CURRENT
(9ad210c15933e5a49c51fba134e77d84cfdba94f).

All relevant sysctls at their default value.

#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1  doadump (textdump=textdump@entry=0) at
/usr/src/sys/kern/kern_shutdown.c:406
#2  0xffffffff804cadda in db_dump (dummy=<optimized out>, dummy2=<unavailable>,
dummy3=<unavailable>, dummy4=<unavailable>) at
/usr/src/sys/ddb/db_command.c:575
#3  0xffffffff804cac92 in db_command (last_cmdp=<optimized out>,
cmd_table=<optimized out>, dopager=dopager@entry=1) at
/usr/src/sys/ddb/db_command.c:482
#4  0xffffffff804ca8ed in db_command_loop () at
/usr/src/sys/ddb/db_command.c:535
#5  0xffffffff804cdf26 in db_trap (type=<optimized out>, code=<optimized out>)
at /usr/src/sys/ddb/db_main.c:270
#6  0xffffffff80c5b4ab in kdb_trap (type=type@entry=3, code=code@entry=0,
tf=tf@entry=0xfffffe00c4e8d810) at /usr/src/sys/kern/subr_kdb.c:733
#7  0xffffffff810ef5ca in trap (frame=0xfffffe00c4e8d810) at
/usr/src/sys/amd64/amd64/trap.c:609
#8  <signal handler called>
#9  kdb_enter (why=0xffffffff812eeecb "panic", msg=<optimized out>) at
/usr/src/sys/kern/subr_kdb.c:506
#10 0xffffffff80c0cc90 in vpanic (fmt=0xffffffff8132fdc0 "malloc(M_WAITOK) with
sleeping prohibited", ap=ap@entry=0xfffffe00c4e8d970) at
/usr/src/sys/kern/kern_shutdown.c:953
#11 0xffffffff80c0ca23 in panic (fmt=0xffffffff81e962d0 <cnputs_mtx>
"Ҳ*\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:889
#12 0xffffffff80be0be4 in malloc_dbg (vap=<optimized out>, sizep=<optimized
out>, mtp=<optimized out>, flags=<optimized out>) at
/usr/src/sys/kern/kern_malloc.c:542
#13 0xffffffff80be0a0d in malloc (size=16, mtp=0xffffffff81b51520 <M_KMALLOC>,
flags=258) at /usr/src/sys/kern/kern_malloc.c:645
#14 0xffffffff834ab0ab in drm_crtc_helper_set_config () from
/boot/modules/drm.ko
#15 0xffffffff833db472 in radeon_crtc_set_config () from
/boot/modules/radeonkms.ko
#16 0xffffffff834a9ccd in __drm_mode_set_config_internal () from
/boot/modules/drm.ko
#17 0xffffffff834a59d0 in drm_client_modeset_commit_force () from
/boot/modules/drm.ko
#18 0xffffffff834e6d62 in drm_fb_helper_restore_fbdev_mode_unlocked () from
/boot/modules/drm.ko
#19 0xffffffff834e0cd3 in vt_kms_postswitch () from /boot/modules/drm.ko
#20 0xffffffff80a5a3ef in vt_window_switch (vw=0xfffff80067e1b600,
vw@entry=0xffffffff81aeb930 <vt_conswindow>) at
/usr/src/sys/dev/vt/vt_core.c:624
#21 0xffffffff80a57aef in vtterm_cngrab (tm=<optimized out>) at
/usr/src/sys/dev/vt/vt_core.c:1875
#22 0xffffffff80b9ec06 in cngrab () at /usr/src/sys/kern/kern_cons.c:383
#23 0xffffffff80c0cbce in vpanic (fmt=0xffffffff81296a0c "Duplicate free of %p
from zone %p(%s) slab %p(%d)", ap=ap@entry=0xfffffe00c4e8dca0) at
/usr/src/sys/kern/kern_shutdown.c:937
#24 0xffffffff80c0ca23 in panic (fmt=0xffffffff81e962d0 <cnputs_mtx>
"Ҳ*\201\377\377\377\377") at /usr/src/sys/kern/kern_shutdown.c:889
#25 0xffffffff80f800b1 in uma_dbg_free (zone=0xfffff800071ea500,
slab=0xfffff8011dd4bfd8, item=0xfffff8011dd4b000) at
/usr/src/sys/vm/uma_core.c:5749
#26 0xffffffff80f78663 in item_dtor (zone=0xfffff800071ea500,
item=0xfffff8011dd4b000, size=272, udata=0x0, skip=SKIP_NONE) at
/usr/src/sys/vm/uma_core.c:3465
#27 uma_zfree_arg (zone=0xfffff800071ea500, item=0xfffff8011dd4b000,
udata=udata@entry=0x0) at /usr/src/sys/vm/uma_core.c:4448
#28 0xffffffff80391893 in uma_zfree (zone=0xffffffff81e962d0 <cnputs_mtx>,
zone@entry=0xfffff8011dd4b000, item=0x80) at /usr/src/sys/vm/uma.h:408
#29 0xffffffff8050c2e9 in ahci_process_read_log (ch=0xfffffe00d84fa000,
ccb=0xfffff8011dd4b000) at /usr/src/sys/dev/ahci/ahci.c:2282
#30 ahci_end_transaction (slot=<optimized out>, et=<optimized out>) at
/usr/src/sys/dev/ahci/ahci.c:2104
#31 0xffffffff8050b790 in ahci_ch_intr_main (ch=<optimized out>,
ch@entry=0xfffffe00d84fa000, istatus=istatus@entry=2) at
/usr/src/sys/dev/ahci/ahci.c:1473
#32 0xffffffff8050a541 in ahci_ch_intr (arg=0xfffffe00d84fa000) at
/usr/src/sys/dev/ahci/ahci.c:1328
#33 0xffffffff80508d41 in ahci_intr (data=<optimized out>) at
/usr/src/sys/dev/ahci/ahci.c:529
#34 0xffffffff80bc74a9 in intr_event_execute_handlers (ie=0xfffff80003aa7a00,
p=<optimized out>) at /usr/src/sys/kern/kern_intr.c:1205
#35 ithread_execute_handlers (ie=0xfffff80003aa7a00, p=<optimized out>) at
/usr/src/sys/kern/kern_intr.c:1218
#36 ithread_loop (arg=<optimized out>, arg@entry=0xfffff80003ef1e00) at
/usr/src/sys/kern/kern_intr.c:1306
#37 0xffffffff80bc3b40 in fork_exit (callout=0xffffffff80bc7230 <ithread_loop>,
arg=0xfffff80003ef1e00, frame=0xfffffe00c4e8df40) at
/usr/src/sys/kern/kern_fork.c:1106
#38 <signal handler called>

That's with an SSD often giving errors like this:

(ada1:ahcich2:0:0:0): READ_FPDMA_QUEUED. ACB: 60 40 d0 8a 63 40 12 00 00 00 00
00
(ada1:ahcich2:0:0:0): CAM status: Uncorrectable parity/CRC error
(ada1:ahcich2:0:0:0): Retrying command, 3 more tries remain

I guess changing the SSD would make the problem go away but there might be a
bug there.

-- 
You are receiving this mail because:
You are the assignee for the bug.