From owner-freebsd-bugs Sat Oct 27 0:30:13 2001 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 945DD37B405 for ; Sat, 27 Oct 2001 00:30:02 -0700 (PDT) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.4/8.11.4) id f9R7U2Y66103; Sat, 27 Oct 2001 00:30:02 -0700 (PDT) (envelope-from gnats) Received: from hershey.dyn.bar.net (c1603280-a.provo1.ut.home.com [65.5.37.42]) by hub.freebsd.org (Postfix) with ESMTP id C51A137B403 for ; Sat, 27 Oct 2001 00:26:13 -0700 (PDT) Received: (from heath@localhost) by hershey.dyn.bar.net (8.11.6/8.11.5) id f9R7QD300756; Sat, 27 Oct 2001 01:26:13 -0600 (MDT) (envelope-from heath) Message-Id: <200110270726.f9R7QD300756@hershey.dyn.bar.net> Date: Sat, 27 Oct 2001 01:26:13 -0600 (MDT) From: Heath Nielson Reply-To: Heath Nielson To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.113 Subject: kern/31530: Fatal trap 12 when reading from DVD. Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 31530 >Category: kern >Synopsis: Fatal trap 12 when reading from DVD. >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Oct 27 00:30:01 PDT 2001 >Closed-Date: >Last-Modified: >Originator: Heath Nielson >Release: FreeBSD 4.4-STABLE i386 >Organization: >Environment: System: FreeBSD hershey.dyn.bar.net 4.4-STABLE FreeBSD 4.4-STABLE #1: Fri Oct 12 22:28:00 MDT 2001 heath@hershey.dyn.bar.net:/usr/src/sys/compile/HERSHEY i386 >Description: When I try to open a DVD disc for playing, the DVD-ROM drive accesses the disc for a time, then the computer panics. A message is logged to syslog: hershey /kernel: ata1-master: too many segments in DMA table The crash dump is as follows: (kgdb) symbol-file kernel.debug Reading symbols from kernel.debug...done. (kgdb) exec-file /usr/crash/kernel.0 (kgdb) core-file /usr/crash/vmcore.0 IdlePTD 3805184 initial pcb at 2dae20 panicstr: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address = 0x3a fault code = supervisor write, page not present instruction pointer = 0x8:0xc021e20f stack pointer = 0x10:0xc02b3d3c frame pointer = 0x10:0xc02b3ddc code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = Idle interrupt mask = bio trap number = 12 panic: page fault syncing disks... 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 giving up on 1 buffers Uptime: 5h12m19s dumping to dev #ad/0x20001, offset 16512 dump ata0: resetting devices .. done [...] --- #0 dumpsys () at ../../kern/kern_shutdown.c:473 473 if (dumping++) { (kgdb) set output-radix 16 Output radix now set to decimal 16, hex 10, octal 20. (kgdb) bt #0 dumpsys () at ../../kern/kern_shutdown.c:473 #1 0xc015a4b3 in boot (howto=0x100) at ../../kern/kern_shutdown.c:313 #2 0xc015a880 in poweroff_wait (junk=0xc02ab9ec, howto=0xc02ab50f) at ../../kern/kern_shutdown.c:581 #3 0xc026843a in trap_fatal (frame=0xc02b3cfc, eva=0x3a) at ../../i386/i386/trap.c:956 #4 0xc026810d in trap_pfault (frame=0xc02b3cfc, usermode=0x0, eva=0x3a) at ../../i386/i386/trap.c:849 #5 0xc0267cf7 in trap (frame={tf_fs = 0x10, tf_es = 0x10, tf_ds = 0x10, tf_edi = 0xd1558000, tf_esi = 0xc02e2e0c, tf_ebp = 0xc02b3ddc, tf_isp = 0xc02b3d28, tf_ebx = 0x0, tf_edx = 0x0, tf_ecx = 0xc02b3d88, tf_eax = 0x1, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 0xc021e20f, tf_cs = 0x8, tf_eflags = 0x210286, tf_esp = 0x0, tf_ss = 0xc02e2e0c}) at ../../i386/i386/trap.c:448 #6 0xc021e20f in vm_fault (map=0xc02e2e0c, vaddr=0xd1558000, fault_type=0x3, fault_flags=0x0) at ../../vm/vm_object.h:189 #7 0xc02680ba in trap_pfault (frame=0xc02b3e50, usermode=0x0, eva=0xd1558000) at ../../i386/i386/trap.c:838 #8 0xc0267cf7 in trap (frame={tf_fs = 0x10, tf_es = 0x10, tf_ds = 0x10, tf_edi = 0xd1558000, tf_esi = 0xd000, tf_ebp = 0xc02b3ea0, tf_isp = 0xc02b3e7c, tf_ebx = 0xc245fa00, tf_edx = 0x170, tf_ecx = 0x2f7f, tf_eax = 0xc135ca80, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 0xc02457d2, tf_cs = 0x8, tf_eflags = 0x210216, tf_esp = 0xc137fb20, tf_ss = 0xc245fa00}) at ../../i386/i386/trap.c:448 #9 0xc02457d2 in atapi_read (request=0xc245fa00, length=0xd000) at machine/cpufunc.h:225 #10 0xc0245267 in atapi_interrupt (request=0xc245fa00) at ../../dev/ata/atapi-all.c:391 #11 0xc023e6e2 in ata_intr (data=0xc135ca80) at ../../dev/ata/ata-all.c:1165 (kgdb) up 10 #10 0xc0245267 in atapi_interrupt (request=0xc245fa00) at ../../dev/ata/atapi-all.c:391 391 atapi_read(request, length); (kgdb) print *request $1 = {device = 0xc137fb20, ccb = "(\000\0001ÎoßÄú\000\000\000\000\000\000", ccbsize = 0xc, bytecount = 0xfe27d000, donecount = 0x0, timeout = 0xbb8, timeout_handle = {callout = 0xcba19678}, retries = 0x0, result = 0x0, error = 0x0, sense = {error_code = 0x0, valid = 0x0, segment = 0x0, sense_key = 0x0, reserved2_4 = 0x0, ili = 0x0, eom = 0x0, filemark = 0x0, cmd_info = 0x0, sense_length = 0x0, cmd_specific_info = 0x0, asc = 0x0, ascq = 0x0, replaceable_unit_code = 0x0, sk_specific = 0x0, sksv = 0x0, sk_specific1 = 0x0, sk_specific2 = 0x0}, flags = 0x1, data = 0xd1556dfc "", callback = 0xc0247f30 , dmatab = 0xc151f000, driver = 0xcba3001c, chain = {tqe_next = 0x0, tqe_prev = 0xc135cae0}} (kgdb) If I set the DVD drive to PIO mode, the panic is the same with the exception that there is no message logged to syslog. This happens with every DVD I've tried and is repeatable every time. Full dmesg is: Copyright (c) 1992-2001 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.4-STABLE #1: Fri Oct 12 22:28:00 MDT 2001 heath@hershey.dyn.bar.net:/usr/src/sys/compile/HERSHEY Timecounter "i8254" frequency 1193182 Hz CPU: AMD-K7(tm) Processor (704.94-MHz 686-class CPU) Origin = "AuthenticAMD" Id = 0x612 Stepping = 2 Features=0x81f9ff AMD Features=0xc0400000 real memory = 536805376 (524224K bytes) avail memory = 519147520 (506980K bytes) Preloaded elf kernel "kernel" at 0xc0382000. Preloaded elf module "if_vr.ko" at 0xc038209c. Preloaded elf module "miibus.ko" at 0xc038213c. Preloaded elf module "snd_es137x.ko" at 0xc03821dc. Preloaded elf module "snd_pcm.ko" at 0xc0382280. Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 7 entries at 0xc00f8110 npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at 5.0 irq 11 isab0: at device 4.0 on pci0 isa0: on isab0 atapci0: port 0xffa0-0xffaf at device 4.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 uhci0: port 0xd000-0xd01f irq 9 at device 4.2 on pci0 usb0: on uhci0 usb0: USB revision 1.0 uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered ukbd0: Microsoft Natural Keyboard Elite, rev 1.00/1.04, addr 2, iclass 3/1 kbd0 at ukbd0 uhub1: Philips Semiconductors hub, class 9/0, rev 1.10/1.10, addr 3 uhub1: 5 ports with 5 removable, self powered ugen0: Hewlett Packard HP USB CD-Writer Plus, rev 1.00/0.01, addr 4 usbd_transfer_cb: short transfer 0<8 usbd_new_device: addr=5, getting first desc failed uhub_explore: usb_new_device failed, error=IOERROR uhub1: device problem, disabling port 5 uhci1: port 0xd400-0xd41f irq 9 at device 4.3 on pci0 usb1: on uhci1 usb1: USB revision 1.0 uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered chip1: at device 4.4 on pci0 pcm0: port 0xcc00-0xcc3f irq 11 at device 13.0 on pci0 ahc0: port 0xdc00-0xdcff mem 0xeffff000-0xefffffff irq 10 at device 14.0 on pci0 aic7850: Single Channel A, SCSI Id=7, 3/255 SCBs vr0: port 0xc800-0xc87f mem 0xefffef80-0xefffefff irq 9 at device 16.0 on pci0 vr0: Ethernet address: 00:50:ba:04:cc:81 miibus0: on vr0 amphy0: on miibus0 amphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto orm0: