From owner-freebsd-bugs  Wed Nov 15 02:06:24 1995
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id CAA14060
          for bugs-outgoing; Wed, 15 Nov 1995 02:06:24 -0800
Received: from Root.COM (implode.Root.COM [198.145.90.17])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id CAA14049
          for <bugs@freebsd.org>; Wed, 15 Nov 1995 02:06:19 -0800
Received: from corbin.Root.COM (corbin [198.145.90.50]) by Root.COM (8.6.12/8.6.5) with ESMTP id CAA02276; Wed, 15 Nov 1995 02:06:18 -0800
Received: from localhost (localhost [127.0.0.1]) by corbin.Root.COM (8.6.12/8.6.5) with SMTP id CAA00434; Wed, 15 Nov 1995 02:06:01 -0800
Message-Id: <199511151006.CAA00434@corbin.Root.COM>
To: Stephen Hocking <sysseh@devetir.qld.gov.au>
cc: bugs@freebsd.org
Subject: Re: ejecting & replacing a tape while rwt0 is open will cause a crash. 
In-reply-to: Your message of "Wed, 15 Nov 95 19:34:01 +1000."
             <199511150934.JAA17101@netfl15a.devetir.qld.gov.au> 
From: David Greenman <davidg@Root.COM>
Reply-To: davidg@Root.COM
Date: Wed, 15 Nov 1995 02:05:57 -0800
Sender: owner-bugs@freebsd.org
Precedence: bulk

>4) Watch the machine die - getting the core with savecore and weilding gdb -k 
>reveals the following.
>
>
>IdlePTD 1cc000
>current pcb at 1c0d6c
>panic: page fault
>#0  0xf0177c1d in boot ()
>(kgdb) bt
>#0  0xf0177c1d in boot ()
>#1  0xf0110e1b in panic ()
>#2  0xf017d53f in trap_fatal ()
>#3  0xf017d099 in trap_pfault ()
>#4  0xf017ccdb in trap ()
>#5  0xf01752ad in calltrap ()
>#6  0xf010c85d in tsleep ()
>#7  0xf01a7962 in wtpoll ()
>#8  0xf01a7f38 in wtstatus ()
>#9  0xf01a7dd7 in wtsense ()
>#10 0xf01a767c in wtintr ()
>#11 0xf01a7c54 in wtimer ()
>#12 0xf0102bb4 in softclock ()
>#13 0xf01765c7 in doreti_swi ()
>#14 0xf017c278 in cpu_switch ()

   wtpoll() shouldn't be calling tsleep in an interrupt context...definately
bad news to do that. I can't say any more without looking at the code, but
it's an obvious bug.

-DG