NetBSD Problem Report #43247

From njoly@lanfeust.sis.pasteur.fr  Tue May  4 11:20:30 2010
Return-Path: <njoly@lanfeust.sis.pasteur.fr>
Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by www.NetBSD.org (Postfix) with ESMTP id 2816A63B8FE
	for <gnats-bugs@gnats.NetBSD.org>; Tue,  4 May 2010 11:20:30 +0000 (UTC)
Message-Id: <20100504112027.3ACD4DC9B9@lanfeust.sis.pasteur.fr>
Date: Tue,  4 May 2010 13:20:27 +0200 (CEST)
From: njoly@pasteur.fr
Reply-To: njoly@pasteur.fr
To: gnats-bugs@gnats.NetBSD.org
Subject: KASSERT while copying 32GB file from NFS to TMPFS
X-Send-Pr-Version: 3.95

>Number:         43247
>Category:       kern
>Synopsis:       KASSERT while copying 32GB file from NFS to TMPFS
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue May 04 11:25:00 +0000 2010
>Closed-Date:    
>Last-Modified:  Fri Oct 02 10:15:01 +0000 2020
>Originator:     Nicolas Joly
>Release:        NetBSD 5.99.29
>Organization:
Intitut Pasteur
>Environment:
System: NetBSD kiri-001.cluster.pasteur.fr 5.99.29 NetBSD 5.99.29 (KIRI001) #10: Mon May  3 16:38:11 CEST 2010  njoly@lanfeust.sis.pasteur.fr:/local/src/NetBSD/obj.amd64/sys/arch/amd64/compile/KIRI001 amd64
Architecture: x86_64
Machine: amd64
>Description:
While stress testing a new amd64 machine with 64GB ram, i hit a KASSERT while
copying (with dd) a 32GB file from NFS to a big TMPFS filesystem.

njoly@kiri-001 [/mnt]> ls -lh /local/gensoft/tmp/nico/netbsd.1.core
-rw-r--r--  1 njoly  sis   32G Apr 16 11:32 /local/gensoft/tmp/nico/netbsd.1.core
njoly@kiri-001 [/mnt]> df -h .
Filesystem        Size       Used      Avail %Cap Mounted on
tmpfs             126G       4.0K       126G   0% /mnt
njoly@kiri-001 [/mnt]> while :
while> do
while> dd if=/local/gensoft/tmp/nico/netbsd.1.core of=netbsd.1.core
while> done
67107561+1 records in
67107561+1 records out
34359071256 bytes transferred in 888.801 secs (38657777 bytes/sec)
67107561+1 records in
67107561+1 records out
34359071256 bytes transferred in 1957.106 secs (17556060 bytes/sec)
[...PANIC...]

panic: kernel diagnostic assertion "uvm_pagelookup(&aobj->u_obj, (UAO_SWHASH_ELT_PAGEIDX_BASE(elt) + j) << PAGE_SHIFT) == NULL" failed: file "/loc
al/src/NetBSD/src/sys/uvm/uvm_aobj.c", line 1544
fatal breakpoint trap in supervisor mode
trap type 1 code 0 rip ffffffff80229d35 cs 8 rflags 246 cr2  7f7ffd7212d8 cpl 0 
rsp ffff8000d1bf2720
Stopped in pid 1593.1 (dd) at   netbsd:breakpoint+0x5:  leave
db{0}> bt
breakpoint() at netbsd:breakpoint+0x5
panic() at netbsd:panic+0x2ba
kern_assert() at netbsd:kern_assert+0x2d
uao_dropswap_range1() at netbsd:uao_dropswap_range1+0x2ac
tmpfs_reg_resize() at netbsd:tmpfs_reg_resize+0x1de
tmpfs_truncate() at netbsd:tmpfs_truncate+0x42
tmpfs_chsize() at netbsd:tmpfs_chsize+0xbe
tmpfs_setattr() at netbsd:tmpfs_setattr+0x10c

Full dmesg available at :
http://mail-index.netbsd.org/current-users/2010/04/30/msg013247.html

>How-To-Repeat:
Copy a 32GB into a big TMPFS in a loop.
>Fix:

>Release-Note:

>Audit-Trail:

State-Changed-From-To: open->feedback
State-Changed-By: rmind@NetBSD.org
State-Changed-When: Fri, 06 Dec 2013 14:23:38 +0000
State-Changed-Why:
This seems like a problem in UVM side to me.  Can you easily reproduce it?


From: Reinoud Zandijk <reinoud@NetBSD.org>
To: gnats-bugs@NetBSD.org
Cc: kern-bug-people@netbsd.org, netbsd-bugs@netbsd.org,
	gnats-admin@netbsd.org, rmind@NetBSD.org, njoly@pasteur.fr
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Sat, 7 Dec 2013 12:56:01 +0100

 Hi,

 On Fri, Dec 06, 2013 at 02:23:38PM +0000, rmind@NetBSD.org wrote:
 > Synopsis: KASSERT while copying 32GB file from NFS to TMPFS
 > 
 > State-Changed-From-To: open->feedback
 > State-Changed-By: rmind@NetBSD.org
 > State-Changed-When: Fri, 06 Dec 2013 14:23:38 +0000
 > State-Changed-Why:
 > This seems like a problem in UVM side to me.  Can you easily reproduce it?

 I *presume* that you have 32+ gigabyte ram in the box? Is it a parse file you
 are copying?

 Reinoud

From: Nicolas Joly <njoly@pasteur.fr>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Sat, 7 Dec 2013 15:47:20 +0100

 On Fri, Dec 06, 2013 at 02:23:38PM +0000, Mindaugas Rasiukevicius wrote:
 > Synopsis: KASSERT while copying 32GB file from NFS to TMPFS
 > 
 > State-Changed-From-To: open->feedback
 > State-Changed-By: rmind@NetBSD.org
 > State-Changed-When: Fri, 06 Dec 2013 14:23:38 +0000
 > State-Changed-Why:
 > This seems like a problem in UVM side to me.  Can you easily reproduce it?

 I don't have this machine anymore ... But we, at work, just shutdown a
 similar one; i'll try to pick it, install -current and redo the tests.
 This may take a few days.

 -- 
 Nicolas Joly

 Biology IT Center
 Institut Pasteur, Paris.

From: Nicolas Joly <njoly@pasteur.fr>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Sat, 7 Dec 2013 15:53:39 +0100

 --XsQoSWH+UP9D9v3l
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline

 On Sat, Dec 07, 2013 at 12:00:00PM +0000, Reinoud Zandijk wrote:
 > The following reply was made to PR kern/43247; it has been noted by GNATS.
 > 
 > From: Reinoud Zandijk <reinoud@NetBSD.org>
 > To: gnats-bugs@NetBSD.org
 > Cc: kern-bug-people@netbsd.org, netbsd-bugs@netbsd.org,
 > 	gnats-admin@netbsd.org, rmind@NetBSD.org, njoly@pasteur.fr
 > Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
 > Date: Sat, 7 Dec 2013 12:56:01 +0100
 > 
 >  Hi,
 >  
 >  On Fri, Dec 06, 2013 at 02:23:38PM +0000, rmind@NetBSD.org wrote:
 >  > Synopsis: KASSERT while copying 32GB file from NFS to TMPFS
 >  > 
 >  > State-Changed-From-To: open->feedback
 >  > State-Changed-By: rmind@NetBSD.org
 >  > State-Changed-When: Fri, 06 Dec 2013 14:23:38 +0000
 >  > State-Changed-Why:
 >  > This seems like a problem in UVM side to me.  Can you easily reproduce it?
 > 
 > I *presume* that you have 32+ gigabyte ram in the box?

 Yes it had 64GB RAM. Attached a dmesg output from that time.

 >Is it a parse file you are copying?

 Not sure,it was a 32GB amd64 kernel crash dump from 2010.

 -- 
 Nicolas Joly

 Biology IT Center
 Institut Pasteur, Paris.

 --XsQoSWH+UP9D9v3l
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: attachment; filename="dmesg.20100430"

 Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
     2006, 2007, 2008, 2009, 2010
     The NetBSD Foundation, Inc.  All rights reserved.
 Copyright (c) 1982, 1986, 1989, 1991, 1993
     The Regents of the University of California.  All rights reserved.

 NetBSD 5.99.28 (KIRI001) #5: Thu Apr 29 14:10:50 CEST 2010
 	njoly@lanfeust.sis.pasteur.fr:/local/src/NetBSD/obj.amd64/sys/arch/amd64/compile/KIRI001
 total memory = 65535 MB
 avail memory = 63528 MB
 timecounter: Timecounters tick every 10.000 msec
 timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
 Supermicro H8DM8-2 (1234567890)
 mainbus0 (root)
 cpu0 at mainbus0 apid 0: AMD 686-class, 2412MHz, id 0x100f42
 cpu1 at mainbus0 apid 1: AMD 686-class, 2412MHz, id 0x100f42
 cpu2 at mainbus0 apid 2: AMD 686-class, 2412MHz, id 0x100f42
 cpu3 at mainbus0 apid 3: AMD 686-class, 2412MHz, id 0x100f42
 cpu4 at mainbus0 apid 4: AMD 686-class, 2412MHz, id 0x100f42
 cpu5 at mainbus0 apid 5: AMD 686-class, 2412MHz, id 0x100f42
 cpu6 at mainbus0 apid 6: AMD 686-class, 2412MHz, id 0x100f42
 cpu7 at mainbus0 apid 7: AMD 686-class, 2412MHz, id 0x100f42
 ioapic0 at mainbus0 apid 8: pa 0xfec00000, version 11, 24 pins
 acpi0 at mainbus0: Intel ACPICA 20100121
 acpi0: X/RSDT: OemId <S M C ,OEMRSDT ,10000922>, AslId <MSFT,00000097>
 acpi0: SCI interrupting at int 9
 timecounter: Timecounter "ACPI-Fast" frequency 3579545 Hz quality 1000
 ACPI-Fast 24-bit timer
 pcppi1 at acpi0 (SPKR, PNP0800): io 0x61
 midi0 at pcppi1: PC speaker
 sysbeep0 at pcppi1
 UAR1 (PNP0501) at acpi0 not configured
 UAR2 (PNP0501) at acpi0 not configured
 attimer1 at acpi0 (TMR, PNP0100): io 0x40-0x43 irq 0
 pckbc1 at acpi0 (PS2K, PNP0303) (kbd port): io 0x60,0x64 irq 1
 acpibut0 at acpi0 (PWRB, PNP0C0C-170): ACPI Power Button
 attimer1: attached to pcppi1
 pckbd0 at pckbc1 (kbd slot)
 pckbc1: using irq 1 for kbd slot
 wskbd0 at pckbd0 mux 1
 ipmi: bus_space_map(..., 0, 2, 0, 0xffffffff80f1fb38) failed
 pci0 at mainbus0 bus 0: configuration mode 1
 pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
 NVIDIA nForce MCP55 Memory Controller (RAM memory, revision 0xa2) at pci0 dev 0 function 0 not configured
 pcib0 at pci0 dev 1 function 0: NVIDIA product 0x0364 (rev. 0xa3)
 nfsmbc0 at pci0 dev 1 function 1: NVIDIA nForce MCP55 SMBus Controller (rev. 0xa3)
 nfsmb0 at nfsmbc0 SMBus 1
 iic0 at nfsmb0: I2C bus
 iic0: devices at 0x50 0x51 0x52 0x53 0x54 0x55 0x56 0x57
 spdmem0 at iic0 addr 0x50
 spdmem0: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 667MHz (PC2-5300)
 spdmem0: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 3.00ns cycle time
 spdmem0: tAA-tRCD-tRP-tRAS: 5-5-5-15
 spdmem0: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem1 at iic0 addr 0x51
 spdmem1: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 667MHz (PC2-5300)
 spdmem1: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 3.00ns cycle time
 spdmem1: tAA-tRCD-tRP-tRAS: 5-5-5-15
 spdmem1: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem2 at iic0 addr 0x52
 spdmem2: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 667MHz (PC2-5300)
 spdmem2: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 3.00ns cycle time
 spdmem2: tAA-tRCD-tRP-tRAS: 5-5-5-15
 spdmem2: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem3 at iic0 addr 0x53
 spdmem3: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 667MHz (PC2-5300)
 spdmem3: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 3.00ns cycle time
 spdmem3: tAA-tRCD-tRP-tRAS: 5-5-5-15
 spdmem3: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem4 at iic0 addr 0x54
 spdmem4: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 800MHz (PC2-6400)
 spdmem4: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 2.50ns cycle time
 spdmem4: tAA-tRCD-tRP-tRAS: 6-6-6-18
 spdmem4: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem5 at iic0 addr 0x55
 spdmem5: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 800MHz (PC2-6400)
 spdmem5: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 2.50ns cycle time
 spdmem5: tAA-tRCD-tRP-tRAS: 6-6-6-18
 spdmem5: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem6 at iic0 addr 0x56
 spdmem6: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 800MHz (PC2-6400)
 spdmem6: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 2.50ns cycle time
 spdmem6: tAA-tRCD-tRP-tRAS: 6-6-6-18
 spdmem6: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 spdmem7 at iic0 addr 0x57
 spdmem7: DDR2 SDRAM (registered), cmd/addr parity, data ECC, 4GB, 800MHz (PC2-6400)
 spdmem7: 14 rows, 11 cols, 2 ranks, 8 banks/chip, 2.50ns cycle time
 spdmem7: tAA-tRCD-tRP-tRAS: 6-6-6-18
 spdmem7: voltage SSTL 1.8V, refresh time 7.8us (self-refreshing)
 nfsmb1 at nfsmbc0 SMBus 2
 iic1 at nfsmb1: I2C bus
 iic1: devices at 0x2c 0x2d 0x4c
 lm0 at iic1 addr 0x2d
 lm0: Using default temp sensors
 lm0: Winbond W83627HF Hardware monitor
 ohci0 at pci0 dev 2 function 0: NVIDIA nForce MCP55 OHCI USB Controller (rev. 0xa1)
 LUB0: Picked IRQ 21 with weight 0
 ohci0: interrupting at ioapic0 pin 21
 ohci0: OHCI version 1.0, legacy support
 usb0 at ohci0: USB revision 1.0
 ehci0 at pci0 dev 2 function 1: NVIDIA nForce MCP55 EHCI USB Controller (rev. 0xa2)
 LUB2: Picked IRQ 22 with weight 0
 ehci0: interrupting at ioapic0 pin 22
 ehci0: EHCI version 1.0
 ehci0: companion controller, 10 ports each: ohci0
 usb1 at ehci0: USB revision 2.0
 viaide0 at pci0 dev 4 function 0: NVIDIA MCP55 IDE Controller (rev. 0xa1)
 viaide0: bus-master DMA support present
 viaide0: primary channel configured to compatibility mode
 viaide0: primary channel interrupting at ioapic0 pin 14
 atabus0 at viaide0 channel 0
 viaide0: secondary channel configured to compatibility mode
 viaide0: secondary channel ignored (disabled)
 viaide1 at pci0 dev 5 function 0: NVIDIA MCP55 Serial ATA Controller (rev. 0xa3)
 viaide1: bus-master DMA support present
 viaide1: primary channel wired to native-PCI mode
 LSA0: Picked IRQ 23 with weight 0
 viaide1: using ioapic0 pin 23 for native-PCI interrupt
 atabus1 at viaide1 channel 0
 viaide1: secondary channel wired to native-PCI mode
 atabus2 at viaide1 channel 1
 viaide2 at pci0 dev 5 function 1: NVIDIA MCP55 Serial ATA Controller (rev. 0xa3)
 viaide2: bus-master DMA support present
 viaide2: primary channel wired to native-PCI mode
 LSA1: Picked IRQ 21 with weight 1
 viaide2: using ioapic0 pin 21 for native-PCI interrupt
 atabus3 at viaide2 channel 0
 viaide2: secondary channel wired to native-PCI mode
 atabus4 at viaide2 channel 1
 viaide3 at pci0 dev 5 function 2: NVIDIA MCP55 Serial ATA Controller (rev. 0xa3)
 viaide3: bus-master DMA support present
 viaide3: primary channel wired to native-PCI mode
 LSA2: Picked IRQ 22 with weight 1
 viaide3: using ioapic0 pin 22 for native-PCI interrupt
 atabus5 at viaide3 channel 0
 viaide3: secondary channel wired to native-PCI mode
 atabus6 at viaide3 channel 1
 ppb0 at pci0 dev 6 function 0: NVIDIA nForce MCP55 PCI-PCI Bridge (rev. 0xa2)
 pci1 at ppb0 bus 1
 pci1: i/o space, memory space enabled
 vga0 at pci1 dev 5 function 0: ATI Technologies ES1000 (rev. 0x02)
 wsdisplay0 at vga0 kbdmux 1
 wsmux1: connecting to wsdisplay0
 wskbd0: connecting to wsdisplay0
 radeondrm0 at vga0: ATI ES1000 RN50
 radeondrm0: Initialized radeon 1.29.0 20080613
 nfe0 at pci0 dev 8 function 0: NVIDIA nForce MCP55 Gigabit Ethernet Controller (rev. 0xa3)
 LMAC: Picked IRQ 20 with weight 0
 nfe0: interrupting at ioapic0 pin 20
 nfe0: Ethernet address 00:30:48:cd:bf:0a
 makphy0 at nfe0 phy 2: Marvell 88E1149 Gigabit PHY, rev. 3
 makphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
 nfe1 at pci0 dev 9 function 0: NVIDIA nForce MCP55 Gigabit Ethernet Controller (rev. 0xa3)
 LMAD: Picked IRQ 20 with weight 1
 nfe1: interrupting at ioapic0 pin 20
 nfe1: Ethernet address 00:30:48:cd:bf:0b
 makphy1 at nfe1 phy 3: Marvell 88E1149 Gigabit PHY, rev. 3
 makphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
 ppb1 at pci0 dev 10 function 0: NVIDIA product 0x0376 (rev. 0xa3)
 pci2 at ppb1 bus 2
 pci2: no spaces enabled!
 ppb2 at pci0 dev 13 function 0: NVIDIA product 0x0378 (rev. 0xa3)
 pci3 at ppb2 bus 5
 pci3: no spaces enabled!
 ppb3 at pci0 dev 14 function 0: NVIDIA product 0x0375 (rev. 0xa3)
 pci4 at ppb3 bus 6
 pci4: no spaces enabled!
 ppb4 at pci0 dev 15 function 0: NVIDIA nForce MCP55 PCI-Express 16x Port (rev. 0xa3)
 pci5 at ppb4 bus 7
 pci5: no spaces enabled!
 pchb0 at pci0 dev 24 function 0: AMD AMD64 Family10h HyperTransport Configuration (rev. 0x00)
 pchb1 at pci0 dev 24 function 1: AMD AMD64 Family10h Address Map Configuration (rev. 0x00)
 pchb2 at pci0 dev 24 function 2: AMD AMD64 Family10h DRAM Configuration (rev. 0x00)
 amdtemp0 at pci0 dev 24 function 3: AMD CPU Temperature Sensors (Family10h / Family11h)
 pchb3 at pci0 dev 24 function 4: AMD AMD64 Family10h Link Configuration (rev. 0x00)
 pchb4 at pci0 dev 25 function 0: AMD AMD64 Family10h HyperTransport Configuration (rev. 0x00)
 pchb5 at pci0 dev 25 function 1: AMD AMD64 Family10h Address Map Configuration (rev. 0x00)
 pchb6 at pci0 dev 25 function 2: AMD AMD64 Family10h DRAM Configuration (rev. 0x00)
 amdtemp1 at pci0 dev 25 function 3: AMD CPU Temperature Sensors (Family10h / Family11h)
 pchb7 at pci0 dev 25 function 4: AMD AMD64 Family10h Link Configuration (rev. 0x00)
 isa0 at pcib0
 lm1 at isa0 port 0x290-0x297
 lm1: Using default temp sensors
 lm1: Winbond W83627HF Hardware monitor
 com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
 com0: console
 com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
 pci6 at mainbus0 bus 3
 pci6: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
 pci7 at mainbus0 bus 4
 pci7: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
 timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
 timecounter: Timecounter "TSC" frequency 2412510930 Hz quality 3000
 atapibus0 at atabus0: 2 targets
 uhub0 at usb0: NVIDIA OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub0: 10 ports with 10 removable, self powered
 uhub1 at usb1: NVIDIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
 uhub1: 10 ports with 10 removable, self powered
 cd0 at atapibus0 drive 0: <DVD-ROM UJDA780, , 1.50> cdrom removable
 viaide1 port 0: device present, speed: 3.0Gb/s
 cd0: 32-bit data port
 cd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 2 (Ultra/33)
 cd0(viaide0:0:0): using PIO mode 4, Ultra-DMA mode 2 (Ultra/33) (using DMA)
 wd0 at atabus1 drive 0: <MAXTOR STM380215AS>
 wd0: drive supports 16-sector PIO transfers, LBA48 addressing
 wd0: 76319 MB, 155061 cyl, 16 head, 63 sec, 512 bytes/sect x 156301488 sectors
 wd0: 32-bit data port
 wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133)
 wd0(viaide1:0:0): using PIO mode 4, Ultra-DMA mode 6 (Ultra/133) (using DMA)
 Kernelized RAIDframe activated
 pad0: outputs: 44100Hz, 16-bit, stereo
 audio0 at pad0: half duplex, playback, capture
 boot device: wd0
 root on wd0a dumps on wd0b
 root file system type: ffs
 wsdisplay0: screen 1 added (80x25, vt100 emulation)
 wsdisplay0: screen 2 added (80x25, vt100 emulation)
 wsdisplay0: screen 3 added (80x25, vt100 emulation)
 wsdisplay0: screen 4 added (80x25, vt100 emulation)

 --XsQoSWH+UP9D9v3l--

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Sat, 21 Dec 2013 18:23:56 +0000

 (not sent to gnats)

    ------

 From: Nicolas Joly <njoly@pasteur.fr>
 To: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org,
 	njoly@pasteur.fr
 Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
 Date: Wed, 18 Dec 2013 17:30:45 +0100

 On Sat, Dec 07, 2013 at 02:50:01PM +0000, Nicolas Joly wrote:
 > The following reply was made to PR kern/43247; it has been noted by GNATS.
 > 
 > From: Nicolas Joly <njoly@pasteur.fr>
 > To: gnats-bugs@NetBSD.org
 > Cc: 
 > Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
 > Date: Sat, 7 Dec 2013 15:47:20 +0100
 > 
 >  On Fri, Dec 06, 2013 at 02:23:38PM +0000, Mindaugas Rasiukevicius wrote:
 >  > Synopsis: KASSERT while copying 32GB file from NFS to TMPFS
 >  > 
 >  > State-Changed-From-To: open->feedback
 >  > State-Changed-By: rmind@NetBSD.org
 >  > State-Changed-When: Fri, 06 Dec 2013 14:23:38 +0000
 >  > State-Changed-Why:
 >  > This seems like a problem in UVM side to me.  Can you easily reproduce it?
 >  
 >  I don't have this machine anymore ... But we, at work, just shutdown a
 >  similar one; i'll try to pick it, install -current and redo the tests.
 >  This may take a few days.

 Finally got some spare time today to setup the machine, and run the
 testcase. I had no problem with 32GB file ... but as the new machine
 has twice memory than the previous one (128GB was 64GB), i tried with
 a 64GB file, and it failed the very same way :

 panic: kernel diagnostic assertion "uvm_pagelookup(&aobj->u_obj,(UAO_SWHASH_ELT_PAGEIDX_BASE(elt) + j) << PAGE_SHIFT) == NULL" failed: file "/local/src/NetBSD/src/sys/uvm/uvm_aobj.c",line 1407
 cpu6: Begin traceback...
 vpanic() at netbsd:vpanic+0x136
 kern_assert() at netbsd:kern_assert+0x48
 uao_dropswap_range() at netbsd:uao_dropswap_range+0x2bb
 tmpfs_reg_resize() at netbsd:tmpfs_reg_resize+0xfe
 tmpfs_chsize() at netbsd:tmpfs_chsize+0xa5
 tmpfs_setattr() at netbsd:tmpfs_setattr+0x149
 VOP_SETATTR() at netbsd:VOP_SETATTR+0x34
 vn_open() at netbsd:vn_open+0x190
 do_open() at netbsd:do_open+0x102
 do_sys_openat() at netbsd:do_sys_openat+0x68
 sys_open() at netbsd:sys_open+0x24
 syscall() at netbsd:syscall+0x9a
 --- syscall (number 5) ---
 7f7ff703b07a:
 cpu6: End traceback...

 -- 
 Nicolas Joly

 Biology IT Center
 Institut Pasteur, Paris.

From: Nicolas Joly <njoly@pasteur.fr>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Mon, 23 Dec 2013 19:02:38 +0100

 On Wed, Dec 18, 2013 at 08:10:23PM +0200, Mindaugas Rasiukevicius wrote:
 > Hi,
 > 
 > Nicolas Joly <njoly@pasteur.fr> wrote:
 > > Finally got some spare time today to setup the machine, and run the
 > > testcase. I had no problem with 32GB file ... but as the new machine
 > > has twice memory than the previous one (128GB was 64GB), i tried with
 > > a 64GB file, and it failed the very same way :
 > > 
 > > panic: kernel diagnostic assertion "uvm_pagelookup(&aobj->u_obj,
 > > (UAO_SWHASH_ELT_PAGEIDX_BASE(elt) + j) << PAGE_SHIFT) == NULL" failed:
 > > file "/local/src/NetBSD/src/sys/uvm/uvm_aobj.c",line 1407 cpu6: Begin
 > > traceback... vpanic() at netbsd:vpanic+0x136 kern_assert() at
 > > netbsd:kern_assert+0x48 uao_dropswap_range() at netbsd:uao_dropswap_range
 > > +0x2bb tmpfs_reg_resize() at netbsd:tmpfs_reg_resize+0xfe
 > > tmpfs_chsize() at netbsd:tmpfs_chsize+0xa5
 > > tmpfs_setattr() at netbsd:tmpfs_setattr+0x149
 > > VOP_SETATTR() at netbsd:VOP_SETATTR+0x34
 > > vn_open() at netbsd:vn_open+0x190
 > > do_open() at netbsd:do_open+0x102
 > > do_sys_openat() at netbsd:do_sys_openat+0x68
 > > sys_open() at netbsd:sys_open+0x24
 > > syscall() at netbsd:syscall+0x9a
 > > --- syscall (number 5) ---
 > > 7f7ff703b07a:
 > > cpu6: End traceback...
 > 
 > http://www.netbsd.org/~rmind/uvm_aobj_bugtrap.diff
 > 
 > If it is easy to reproduce, can you just get this debug info?

 uao_dropswap_range: s 0, e 16777216, elt->tag 36608, j 0, vaddr = 2399141888; 2399141888

 After that, only j and vaddr values changes :

       j 0   vaddr = 2399141888
       j 1   vaddr = 2399145984
       j 2   vaddr = 2399150080
       j 3   vaddr = 2399154176
       j 4   vaddr = 2399158272
       j 5   vaddr = 2399162368
       j 6   vaddr = 2399166464

 At that time, i hit another panic which prevented further values.

 Thanks.

 -- 
 Nicolas Joly

 Biology IT Center
 Institut Pasteur, Paris.

State-Changed-From-To: feedback->open
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Fri, 30 Sep 2016 08:19:12 +0000
State-Changed-Why:
feedback happened in 2013


From: Patrick Welche <prlw1@cam.ac.uk>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Fri, 2 Oct 2020 11:06:53 +0100

 I just hit a panic with a very similar stack trace with 29 Sep 2020
 NetBSD-9.99.73/amd64:

 # crash -N netbsd.0 -M netbsd.0.core 
 Crash version 9.99.73, image version 9.99.73.
 crash: _kvm_kvatop(0)
 Kernel compiled without options LOCKDEBUG.
 System panicked: kernel diagnostic assertion "uvm_pagelookup(&aobj->u_obj, (UAO_SWHASH_ELT_PAGEIDX_BASE(elt) + j) << PAGE_SHIFT) == NULL" failed: file "../../../../uvm/uvm_aobj.c", line 1353 
 Backtrace from time of crash is available.
 crash> bt
 _KERNEL_OPT_NAGR() at 0
 _KERNEL_OPT_ACPI_SCANPCI() at _KERNEL_OPT_ACPI_SCANPCI+0xb
 sys_reboot() at sys_reboot
 vpanic() at vpanic+0x160
 __x86_indirect_thunk_rax() at __x86_indirect_thunk_rax
 uao_dropswap_range() at uao_dropswap_range+0x244
 tmpfs_reg_resize() at tmpfs_reg_resize+0x196
 tmpfs_inactive() at tmpfs_inactive+0x8e
 VOP_INACTIVE() at VOP_INACTIVE+0x3c
 vrelel() at vrelel+0x146
 tmpfs_remove() at tmpfs_remove+0x1ba
 VOP_REMOVE() at VOP_REMOVE+0x40
 do_sys_unlinkat() at do_sys_unlinkat+0x211
 syscall() at syscall+0xa1
 --- syscall (number 10) ---

 The box has 32GB ram + 2x32=64GB swap. It had been several builds, so
 tmpfs /tmp was quite full. The panic happened on shutdown. shutdown
 was stuck in "swapctl -U -t blk". swapctl -lh, and  top hung. 
 rm /tmp/obj "caused" the panic.

From: Patrick Welche <prlw1@cam.ac.uk>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/43247 (KASSERT while copying 32GB file from NFS to TMPFS)
Date: Fri, 2 Oct 2020 11:12:03 +0100

 (No NFS involved here)

>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.46 2020/01/03 16:35:01 leot Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2020 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.