From owner-freebsd-bugs@FreeBSD.ORG Fri Nov 10 08:00:44 2006 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DFC5B16A4AB for ; Fri, 10 Nov 2006 08:00:43 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 96B0F43D4C for ; Fri, 10 Nov 2006 08:00:42 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id kAA80gig049430 for ; Fri, 10 Nov 2006 08:00:42 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.4/8.13.4/Submit) id kAA80gsj049427; Fri, 10 Nov 2006 08:00:42 GMT (envelope-from gnats) Resent-Date: Fri, 10 Nov 2006 08:00:42 GMT Resent-Message-Id: <200611100800.kAA80gsj049427@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Alexey Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4A79116A407 for ; Fri, 10 Nov 2006 07:56:08 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 002E643D46 for ; Fri, 10 Nov 2006 07:56:07 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id kAA7u5x6052737 for ; Fri, 10 Nov 2006 07:56:05 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id kAA7u5xB052736; Fri, 10 Nov 2006 07:56:05 GMT (envelope-from nobody) Message-Id: <200611100756.kAA7u5xB052736@www.freebsd.org> Date: Fri, 10 Nov 2006 07:56:05 GMT From: Alexey To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.0 Cc: Subject: kern/105361: Kernel panic during unmounting mass storage (Creative mp3 player) X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Nov 2006 08:00:44 -0000 >Number: 105361 >Category: kern >Synopsis: Kernel panic during unmounting mass storage (Creative mp3 player) >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Nov 10 08:00:41 GMT 2006 >Closed-Date: >Last-Modified: >Originator: Alexey >Release: FreeBSD 6.2 PRERELEASE >Organization: >Environment: FreeBSD pstation.swizard.beercan.ru 6.2-PRERELEASE FreeBSD 6.2-PRERELEASE #0: Wed Oct 25 01:10:14 MSD 2006 root@pstation.swizard.beercan.ru:/usr/obj/usr/src/sys/PSTATION62 i386 >Description: Kernel panic and reboot if trying to unmount usb mass storage: Creative Rhomba mp3 flash player 256mb. The vmcore backtrace shows corrupt stack: pstation% sudo kgdb /boot/kernel/kernel vmcore.9 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". (no debugging symbols found)...Attempt to extract a component of a value that is not a structure pointer. (kgdb) bt #0 0xc0657979 in doadump () #1 0xc065810e in boot () #2 0xc065858b in panic () #3 0xc08a75bf in trap_fatal () #4 0xc08a7171 in trap_pfault () #5 0xc08a6bf2 in trap () #6 0xc088b42a in calltrap () #7 0xc061a745 in devtoname () #8 0xc05f5e1b in msdosfs_print () #9 0xc08bee95 in VOP_PRINT_APV () #10 0xc06dd0dd in VOP_PRINT () #11 0xc06dd0af in vn_printf () #12 0xc06cd3f3 in vop_stdfsync () #13 0xc05f41b9 in msdosfs_fsync () #14 0xc08be60c in VOP_FSYNC_APV () #15 0xc05f23ba in VOP_FSYNC () #16 0xc05f2223 in msdosfs_sync () #17 0xc06d49c2 in dounmount () #18 0xc06d44fc in unmount () #19 0xc08a7abd in syscall () #20 0xc088b47f in Xint0x80_syscall () #21 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) >How-To-Repeat: Attach player to usb and make sure it has been detected (dmesg) # sudo mount_msdosfs -u /dev/da4s1 /mnt # cp -Rv /mnt/ # sudo umount /mnt ^^^^^^ kernel panic here >Fix: >Release-Note: >Audit-Trail: >Unformatted: