freebsd stable - Apr 2009 - crash on 7.2-RC1 when inserting an empty DVD: supervisor write, page not present

Hi there,

from time to time my PC panics when I insert an empty DVD or CD-R. The
kernel locks up instantly after the DVD writer's tray is closed. It
seems burning the first DVD isn't critical but inserting the second one 
seems susceptible.

I use k3b as software, which polls the hardware while the tray is open,
maybe it's something with hald. Don't know, just use this. 

I don't think this is hardware related since I changed my mainboard
recently and had exactly the same crashes with my 2002's model MSI-mainboard
with P4/2.4 CPU running FreeBSD 7.x.

It seems to be something about ata-code, see kgdb-outbut below.

uname -a 
FreeBSD daemon.ma.sigsys.de 7.2-RC1 FreeBSD 7.2-RC1 #0: Sat Apr 18 14:57:37 CEST
2009 root@daemon.ma.sigsys.de:/usr/obj/usr/src/sys/DAEMON  i386

I use atapicam as kernel module.


DVD related lines from dmesg:
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0

pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.4 on pci0
pci2: <ACPI PCI bus> on pcib2

atapci0: <JMicron JMB368 UDMA133 controller> port
0xdc00-0xdc07,0xd880-0xd883,0xd800-0xd807,0xd480-0xd483,0xd400-0xd40f irq 16 at
device 0.0 on pci2
atapci0: [ITHREAD]
ata2: <ATA channel 0> on atapci0
ata2: [ITHREAD]

acd0: DVDR <HL-DT-STDVD-RAM GH22LP20/1.02> at ata2-master UDMA66
acd0: FAILURE - INQUIRY ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - INQUIRY ILLEGAL REQUEST asc=0x24 ascq=0x00 
cd0 at ata2 bus 0 target 0 lun 0
cd0: <HL-DT-ST DVD-RAM GH22LP20 1.02> Removable CD-ROM SCSI-0 device 
cd0: 66.000MB/s transfers
cd0: cd present [1 x 2048 byte records]
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 
acd0: FAILURE - READ_TOC ILLEGAL REQUEST asc=0x24 ascq=0x00 


rabe@daemon:~$ kldstat 
Id Refs Address    Size     Name
 1   34 0xc0400000 9f73a4   kernel
 2    1 0xc0df8000 111b8    geom_eli.ko
 3    2 0xc0e0a000 25ff8    crypto.ko
 4    2 0xc0e30000 ab40     zlib.ko
 5    1 0xc0e3b000 164e8    geom_mirror.ko
 6    1 0xc0e52000 78bc     geom_stripe.ko
 7    1 0xc0e5a000 1ae38    snd_hda.ko
 8    2 0xc0e75000 4a64c    sound.ko
 9    1 0xc0ec0000 4d84     ichsmb.ko
10    2 0xc0ec5000 1be0     smbus.ko
11    1 0xc0ec7000 4dc0     atapicam.ko
12    1 0xc0ecc000 6a45c    acpi.ko
13    1 0xc7277000 7000     linprocfs.ko
14    2 0xc727e000 22000    linux.ko
15    1 0xc72d3000 4000     nullfs.ko
16    1 0xc7825000 e000     fuse.ko
17    1 0xc79cc000 4000     fdescfs.ko
18    1 0xc7b37000 2000     rtc.ko
19    1 0xc7c15000 9000     i915.ko
20    1 0xc7c1e000 13000    drm.ko



I don't know how to get more out of the crash dump, please tell me.


root@daemon:/usr/obj/usr/src/sys/DAEMON# kgdb kernel.debug /var/crash/vmcore.5 
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0xbf5faee6
fault code              = supervisor write, page not present
instruction pointer     = 0x20:0xc0519b00
stack pointer           = 0x28:0xc6779c14
frame pointer           = 0x28:0xc6779c44
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 27 (irq16: fwohci0+++)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 5h10m20s
Physical memory: 3306 MB
Dumping 303 MB: 288 272 256 240 224 208 192 176 160 144 128 112 96 80 64 48 32
16

Reading symbols from /boot/kernel/geom_eli.ko...Reading symbols from
/boot/kernel/geom_eli.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_eli.ko
Reading symbols from /boot/kernel/crypto.ko...Reading symbols from
/boot/kernel/crypto.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/crypto.ko
Reading symbols from /boot/kernel/zlib.ko...Reading symbols from
/boot/kernel/zlib.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zlib.ko
Reading symbols from /boot/kernel/geom_mirror.ko...Reading symbols from
/boot/kernel/geom_mirror.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_mirror.ko
Reading symbols from /boot/kernel/geom_stripe.ko...Reading symbols from
/boot/kernel/geom_stripe.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_stripe.ko
Reading symbols from /boot/kernel/snd_hda.ko...Reading symbols from
/boot/kernel/snd_hda.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/snd_hda.ko
Reading symbols from /boot/kernel/sound.ko...Reading symbols from
/boot/kernel/sound.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/sound.ko
Reading symbols from /boot/kernel/ichsmb.ko...Reading symbols from
/boot/kernel/ichsmb.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ichsmb.ko
Reading symbols from /boot/kernel/smbus.ko...Reading symbols from
/boot/kernel/smbus.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/smbus.ko
Reading symbols from /boot/kernel/atapicam.ko...Reading symbols from
/boot/kernel/atapicam.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/atapicam.ko
Reading symbols from /boot/kernel/acpi.ko...Reading symbols from
/boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from
/boot/kernel/linprocfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from
/boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/nullfs.ko...Reading symbols from
/boot/kernel/nullfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nullfs.ko
Reading symbols from /usr/local/modules/fuse.ko...done.
Loaded symbols for /usr/local/modules/fuse.ko
Reading symbols from /boot/kernel/fdescfs.ko...Reading symbols from
/boot/kernel/fdescfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/fdescfs.ko
Reading symbols from /usr/local/modules/rtc.ko...done.
Loaded symbols for /usr/local/modules/rtc.ko
Reading symbols from /boot/kernel/i915.ko...Reading symbols from
/boot/kernel/i915.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/i915.ko
Reading symbols from /boot/kernel/drm.ko...Reading symbols from
/boot/kernel/drm.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/drm.ko
#0  doadump () at pcpu.h:196
196             __asm __volatile("movl %%fs:0,%0" : "=r"
(td));
(kgdb) where
#0  doadump () at pcpu.h:196
#1  0xc07df277 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc07df549 in panic (fmt=Variable "fmt" is not available.) at
/usr/src/sys/kern/kern_shutdown.c:574
#3  0xc0ae0bac in trap_fatal (frame=0xc6779bd4, eva=3210718950) at
/usr/src/sys/i386/i386/trap.c:939
#4  0xc0ae0e30 in trap_pfault (frame=0xc6779bd4, usermode=0, eva=3210718950) at
/usr/src/sys/i386/i386/trap.c:852
#5  0xc0ae17dc in trap (frame=0xc6779bd4) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc0ac5eeb in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc0519b00 in ata_pio_read (request=0xc7bedd80, length=18) at cpufunc.h:229
#8  0xc051b195 in ata_end_transaction (request=0xc7bedd80) at
/usr/src/sys/dev/ata/ata-lowlevel.c:386
#9  0xc05053f2 in ata_interrupt (data=0xc6a37c00) at
/usr/src/sys/dev/ata/ata-all.c:343
#10 0xc0506225 in ata_generic_intr (data=0xc69b9b00) at
/usr/src/sys/dev/ata/ata-chipset.c:230
#11 0xc07bd1db in ithread_loop (arg=0xc69f7a70) at
/usr/src/sys/kern/kern_intr.c:1088
#12 0xc07b9d29 in fork_exit (callout=0xc07bd020 <ithread_loop>,
arg=0xc69f7a70, frame=0xc6779d38)
    at /usr/src/sys/kern/kern_fork.c:810
#13 0xc0ac5f60 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:264

Regards
Raphael

-- 
Raphael Becker          <rabe@uugrn.org>          http://rabe.uugrn.org/
GnuPG:                E7B2 1D66 3AF2 EDC7 9828  6D7A 9CDA 3E7B 10CA 9F2D
.........|.........|.........|.........|.........|.........|.........|..
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :
http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20090419/0d9fd93b/attachment.pgp