Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Nov 2003 03:18:55 +0100
From:      Pav Lucistnik <pav@FreeBSD.org>
To:        freebsd-current@FreeBSD.org
Subject:   GEOM CD panic reloaded
Message-ID:  <1069294734.717.5.camel@hood.oook.cz>

next in thread | raw e-mail | index | archive | help

--=-0+i/+HQ4QbJkD/HORQo6
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hi, GEOM still panics when you insert second CD with non-data tracks,
even with phk's and sos's fixes. Both kernel and world are from Nov 20
0100 UTC

uname -a
FreeBSD hood.oook.cz 5.1-CURRENT FreeBSD 5.1-CURRENT #1: Thu Nov 20
02:59:56 CET 2003    =20

Fatal trap 12: page fault while in kernel mode
cpuid =3D 0; apic id =3D 00
fault virtual address   =3D 0x1c
fault code              =3D supervisor read, page not present
instruction pointer     =3D 0x8:0xc05a5e53
stack pointer           =3D 0x10:0xde007c68
frame pointer           =3D 0x10:0xde007c80
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, def32 1, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 2 (g_event)
trap number             =3D 12
panic: page fault
cpuid =3D 0;=20


(kgdb) bt
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc05886d1 in boot (howto=3D256) at /usr/src/sys/kern/kern_shutdown.c:3=
72
#2  0xc0588b1f in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc070b846 in trap_fatal (frame=3D0xde007c28, eva=3D0) at /usr/src/sys/=
i386/i386/trap.c:821
#4  0xc070b4c2 in trap_pfault (frame=3D0xde007c28, usermode=3D0, eva=3D28) =
at /usr/src/sys/i386/i386/trap.c:735
#5  0xc070b01d in trap (frame=3D
      {tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D 0, tf_esi =3D -=
969426560, tf_ebp =3D -570393472, tf_isp =3D -570393516, tf_ebx =3D -970579=
488, tf_edx =3D 0, tf_ecx =3D -1065553212, tf_eax =3D 1, tf_trapno =3D 12, =
tf_err =3D 0, tf_eip =3D -1067819437, tf_cs =3D 8, tf_eflags =3D 66051, tf_=
esp =3D -968736384, tf_ss =3D -570393448}) at /usr/src/sys/i386/i386/trap.c=
:420
#6  0xc06f6ff8 in calltrap () at {standard input}:94
#7  0xc054ece8 in g_destroy_provider (pp=3D0xc62621e0) at /usr/src/sys/geom=
/geom_subr.c:426
#8  0xc054bc95 in g_orphan_register (pp=3D0xc637b980) at /usr/src/sys/geom/=
geom_event.c:143
#9  0xc054bdbc in one_event () at /usr/src/sys/geom/geom_event.c:169
#10 0xc054bfe5 in g_run_events () at /usr/src/sys/geom/geom_event.c:202
#11 0xc054d015 in g_event_procbody () at /usr/src/sys/geom/geom_kern.c:134
#12 0xc0570f60 in fork_exit (callout=3D0xc054cff0 <g_event_procbody>, arg=
=3D0x0, frame=3D0x0) at /usr/src/sys/kern/kern_fork.c:793


(kgdb) up 7
#7  0xc054ece8 in g_destroy_provider (pp=3D0xc62621e0) at /usr/src/sys/geom=
/geom_subr.c:426
426             devstat_remove_entry(pp->stat);
(kgdb) print *pp
$1 =3D {name =3D 0x0, provider =3D {le_next =3D 0x0, le_prev =3D 0x0}, geom=
 =3D 0x0, consumers =3D {lh_first =3D 0x0}, acr =3D 0, acw =3D 0, ace =3D 0=
, error =3D 0, orphan =3D {tqe_next =3D 0x0, tqe_prev =3D 0x0}, index =3D 0=
,=20
  mediasize =3D 0, sectorsize =3D 0, stripesize =3D 0, stripeoffset =3D 0, =
stat =3D 0x0, nstart =3D 0, nend =3D 0, flags =3D 0}

(kgdb) print *gp
$4 =3D {name =3D 0xc6219af0 "acd0", class =3D 0xc077aaa0, geom =3D {le_next=
 =3D 0x0, le_prev =3D 0xc077aac4}, consumer =3D {lh_first =3D 0x0}, provide=
r =3D {lh_first =3D 0xc6424580}, geoms =3D {tqe_next =3D 0xc637bc00,=20
    tqe_prev =3D 0xc236bc98}, rank =3D 1, start =3D 0xc0494fb0 <acd_geom_st=
art>, spoiled =3D 0, dumpconf =3D 0, access =3D 0xc0493fc0 <acd_geom_access=
>, orphan =3D 0, ioctl =3D 0xc0494230 <acd_geom_ioctl>,=20
  softc =3D 0xc6253800, flags =3D 0}

(kgdb) up
#8  0xc054bc95 in g_orphan_register (pp=3D0xc637b980) at /usr/src/sys/geom/=
geom_event.c:143
143                     g_destroy_provider(pp);
(kgdb) print *pp
$5 =3D {name =3D 0xc6219af0 "acd0", provider =3D {le_next =3D 0xc077aaa0, l=
e_prev =3D 0x0}, geom =3D 0xc077aac4, consumers =3D {lh_first =3D 0x0}, acr=
 =3D -968735360, acw =3D -969425920, ace =3D -1036600168, error =3D 1,=20
  orphan =3D {tqe_next =3D 0xc0494fb0, tqe_prev =3D 0x0}, index =3D 0, medi=
asize =3D 3226025920, sectorsize =3D 3226026544, stripesize =3D 3324327936,=
 stripeoffset =3D 0, stat =3D 0x0, nstart =3D 0, nend =3D 0, flags =3D 0}


This looks painfully similar to panic I was reporting on Nov 10.

How to reproduce:
1. Insert non-data CD like VideoCD
2. cdcontrol -f /dev/acd0 info
3. Play it (mplayer -vcd 2)
4. Insert ordinary data CD
5. cdcontrol -f /dev/acd0 info

It prints correct information of new CD and instantly panics.

--=20
Pav Lucistnik <pav@FreeBSD.org>
              <pav@oook.cz>

--=-0+i/+HQ4QbJkD/HORQo6
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Toto je =?iso-8859-2?Q?digit=E1ln=EC?=
	=?ISO-8859-1?Q?_podepsan=E1?= =?iso-8859-2?Q?_=E8=E1st?=
	=?ISO-8859-1?Q?_zpr=E1vy?=

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQA/vCSOntdYP8FOsoIRAiCbAJ91vWcebx6S1f2DjjlTjPjQk6P2hQCeP0JD
aPGiccFsm8SG2QbcTuOfbAk=
=fc3X
-----END PGP SIGNATURE-----

--=-0+i/+HQ4QbJkD/HORQo6--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1069294734.717.5.camel>