Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Sep 2007 18:02:51 +0200
From:      Fabian Keil <freebsd-listen@fabiankeil.de>
To:        freebsd-stable@freebsd.org
Subject:   Re: crash in acd_geom_detach() whilst reading vcd
Message-ID:  <20070911180251.78498c60@localhost>
In-Reply-To: <20070911074914.GA1175@turion.vk2pj.dyndns.org>
References:  <20070911074914.GA1175@turion.vk2pj.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_RIsH.tCy2SQwZRa8OBtsl/Q
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

Peter Jeremy <peterjeremy@optushome.com.au> wrote:

> I was trying to play a VCD (using mplayer) on my 6-STABLE system and
> it runs for a while and then crashes.  This is reproducable with the
> same traceback.
>=20
> kgdb reports:
> acd0: FAILURE - device detached
>=20
> Fatal trap 12: page fault while in kernel mode
> fault virtual address   =3D 0x3c8
> fault code              =3D supervisor read data, page not present
> instruction pointer     =3D 0x8:0xffffffff801b6489
> stack pointer           =3D 0x10:0xffffffffa3561ba0
> frame pointer           =3D 0x10:0xffffffffa3561bc0
> code segment            =3D base 0x0, limit 0xfffff, type 0x1b
>                         =3D DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
> current process         =3D 2 (g_event)
> trap number             =3D 12
> panic: page fault
> KDB: stack backtrace:
> panic() at panic+0x1c1
> trap_fatal() at trap_fatal+0x298
> trap_pfault() at trap_pfault+0x243
> trap() at trap+0x298
> calltrap() at calltrap+0x5
> --- trap 0xc, rip =3D 0xffffffff801b6489, rsp =3D 0xffffffffa3561ba0, rbp=
 =3D 0xffffffffa3561bc0 ---
> acd_geom_detach() at acd_geom_detach+0x19
> g_run_events() at g_run_events+0x1b7
> g_event_procbody() at g_event_procbody+0x5a
> fork_exit() at fork_exit+0x87
> fork_trampoline() at fork_trampoline+0xe
>=20
> A gdb backtrace shows:
> #6  0xffffffff803787bb in calltrap () at /usr/src/sys/amd64/amd64/excepti=
on.S:168
> #7  0xffffffff801b6489 in acd_geom_detach (arg=3D0xffffff00007e1100, flag=
=3D0x0) at /usr/src/sys/dev/ata/atapi-cd.c:194
> #8  0xffffffff8022f267 in g_run_events () at /usr/src/sys/geom/geom_event=
.c:209
> #9  0xffffffff802305ca in g_event_procbody () at /usr/src/sys/geom/geom_k=
ern.c:141
> #10 0xffffffff80254f77 in fork_exit (callout=3D0xffffffff80230570 <g_even=
t_procbody>, arg=3D0x0, frame=3D0xffffff0039dc4770)
>     at /usr/src/sys/kern/kern_fork.c:821
> #11 0xffffffff80378b1e in fork_trampoline () at /usr/src/sys/amd64/amd64/=
exception.S:394
>=20
> The argument to acd_geom_detach() does include a NULL ivars:
> (kgdb) p *(device_t)0xffffff00007e1100
> $2 =3D {
>   ops =3D 0xffffff0000825000,=20
>   link =3D {
>     tqe_next =3D 0xffffff00007c1c00,=20
>     tqe_prev =3D 0xffffff00008ea130
>   },=20
>   devlink =3D {
>     tqe_next =3D 0xffffff00007c1c00,=20
>     tqe_prev =3D 0xffffff00009f1518
>   },=20
>   parent =3D 0xffffff00008ea100,=20
>   children =3D {
>     tqh_first =3D 0x0,=20
>     tqh_last =3D 0xffffff00007e1130
>   },=20
>   driver =3D 0xffffffff80532220,=20
>   devclass =3D 0xffffff00007ebe00,=20
>   unit =3D 0x0,=20
>   nameunit =3D 0xffffff00009d19d0 "acd0",=20
>   desc =3D 0xffffff0039bd72a0 "TSSTcorpCD/DVDW TS-L532M/HR08",=20
>   busy =3D 0x0,=20
>   state =3D DS_ATTACHED,=20
>   devflags =3D 0x0,=20
>   flags =3D 0x5d,=20
>   order =3D 0x0,=20
>   pad =3D 0x0,=20
>   ivars =3D 0x0,=20
>   softc =3D 0xffffff0000acac00,=20
>   sysctl_ctx =3D {
>     tqh_first =3D 0xffffff0039bd7120,=20
>     tqh_last =3D 0xffffff0039bd7228
>   },=20
>   sysctl_tree =3D 0xffffff0000b30600
> }
> (kgdb)=20
>=20
> Is this behaviour expected?

I think you're running into the same problem I reported in
"kern/99017: [ata] [patch] FreeBSD versions above 5.3
panic if atapi drives become unresponsive":
http://www.freebsd.org/cgi/query-pr.cgi?pr=3Dkern/99017

You could try the work-around, but your drive will
probably still be lost until the next reboot.

Fabian

--Sig_RIsH.tCy2SQwZRa8OBtsl/Q
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)

iD8DBQFG5rwrBYqIVf93VJ0RAgYLAJ4v4XqLP31cv/uxsGP7xGhx9YcdJgCgiXBk
IFAHdmJsb9fNkFGAfDRxoWU=
=BKBr
-----END PGP SIGNATURE-----

--Sig_RIsH.tCy2SQwZRa8OBtsl/Q--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070911180251.78498c60>