From owner-freebsd-current Sun Jun 17 13:33:38 2001 Delivered-To: freebsd-current@freebsd.org Received: from mailgate.rz.uni-karlsruhe.de (mailgate.rz.uni-karlsruhe.de [129.13.64.97]) by hub.freebsd.org (Postfix) with ESMTP id 2F92237B403; Sun, 17 Jun 2001 13:33:35 -0700 (PDT) (envelope-from un1i@rz.uni-karlsruhe.de) Received: from rzstud1.rz.uni-karlsruhe.de (rzstud1.rz.uni-karlsruhe.de [193.196.41.33]) by mailgate.rz.uni-karlsruhe.de with esmtp (Exim 3.16 #1) id 15BjEh-0002Xd-00; Sun, 17 Jun 2001 22:33:31 +0200 Received: from un1i by rzstud1.rz.uni-karlsruhe.de with local (Exim 2.12 #1) id 15BjEr-0005Ht-00; Sun, 17 Jun 2001 22:33:41 +0200 Date: Sun, 17 Jun 2001 22:33:41 +0200 From: Philipp Mergenthaler To: David Wolfskill Cc: cg@freebsd.org, current@freebsd.org Subject: Re: panic for today -- dsp_clone+0xee after moused started Message-ID: <20010617223340.A18997@rz.uni-karlsruhe.de> References: <200106171949.f5HJnY605482@bunrab.catwhisker.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200106171949.f5HJnY605482@bunrab.catwhisker.org>; from david@catwhisker.org on Sun, Jun 17, 2001 at 12:49:34PM -0700 Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, Jun 17, 2001 at 12:49:34PM -0700, David Wolfskill wrote: > Fatal trap 12: page fault while in kernel mode > fault virtual address = 0xc > fault code = supervisor read, page not present > instruction pointer = 0x8:0xc018fe1a > stack pointer = 0x10:0xce5a4d40 > frame pointer = 0x10:0xce5a4d5c > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, def32 1, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 363 (ln) > kernel: type 12 trap, code =0 > Stopped at dsp_clone+0xee: movl 0xc(%ebx),%edx > db> trace > dsp_clone(0,ce5a4dc4,3,ce5a44a8,c17ae818) at dsp_clone+0xee > devfs_lookupx(ce5a4e24,c17ae018,1,0,cc36c760) at devfs_lookupx+0x2b1 > devfs_lookup(ce5a4e24,cd233da0,ce5a4ed0,ce5a4ea8,cc36c760) at devfs_lookup+0x31 > lookup(ce5a4ea8,cc36c87c,cc36c760,cc36c760,cc36c760) at lookup+0x291 > namei(ce5a4ea8,cc36c87c,cc36c760,2,bfbffe65) at namei+0x177 > lstat(cc36c760,ce5a4f80,bfbffdc4,bfbffe65,bfbffe5b) at lstat+0x41 > syscall(2f,2f,2f,bfbffe5b,bfbffe65) at syscall+0x71d > syscall_with_err_pushed() at syscall_with_err_pushed+0x1b > db> show locks > exclusive (sleep mutex) Giant (0xc047eb20) locked @ /usr/src/sys/vm/vm_fault.c:213 > db> I see that, too. It happens when /dev/dsp is accessed ("touch /dev/dsp" is sufficient). I couldn't get a dump, but from looking at it in ddb and snd_pcm.ko, it is the first line in this code: 00009e70 : [...] 9f59: 0f b6 47 0c movzbl 0xc(%edi),%eax 9f5d: c1 e0 10 shl $0x10,%eax 9f60: 83 e2 0f and $0xf,%edx 9f63: c1 e2 04 shl $0x4,%edx 9f66: 09 d0 or %edx,%eax 9f68: 0b 45 f8 or 0xfffffff8(%ebp),%eax which correspondends to src/sys/dev/sound/pcm/dsp.c:1031 : pdev = makedev(SND_CDEV_MAJOR, PCMMKMINOR(unit, devtype, d->defaultchan++)); specifically, the d->defaultchan. When this panic occurs, both edi and eax are zero. Bye, Philipp -- http://www.uni-karlsruhe.de/~un1i/ (,.) \\\@@ ) \= ) cc_|\_,^ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message