FreeBSD 5.2-BETA: GEOM/CDROM Related Panic

Hello:

I have been getting reproducable panics with most CDROM related actions
including mounting CDROMs and playing audio CDs. IIRC, this has been
happening since the statfs changes a week earlier.

Can provide more information if required. Kernel has been compiled with
"device atapicam". I am rebuilding the kernel w/o "atapicam" ATM.

Thank you for your time.

-- Shanu
http://shankerbalan.com/



[godzilla] ~> uname -a
FreeBSD godzilla.exocore.com 5.2-BETA FreeBSD 5.2-BETA #0: Tue Nov 25
15:34:37 IST 2003
root_at_godzilla.exocore.com:/usr/obj/usr/src/sys/MYKERNEL  i386

[godzilla] ~> dmesg | egrep -i 'geom|cd0'
GEOM: create disk ad0 dp=0xc2da0360
GEOM: create disk ad2 dp=0xc2d9fe60
acd0: CDROM <SAMSUNG CD-ROM SC-152C> at ata1-slave PIO4
GEOM: create disk cd0 dp=0xc2d8ce00
cd0 at ata1 bus 0 target 1 lun 0
cd0: <SAMSUNG CD-ROM SC-152C CS05> Removable CD-ROM SCSI-0 device 
cd0: 16.000MB/s transfers
cd0: Attempt to query device size failed: NOT READY, Medium not present

[godzilla] ~> sudo gdb -k /usr/obj/usr/src/sys/MYKERNEL/kernel.debug /usr/crash/vmcore.0
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: from debugger
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x1c
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc05d65d8
stack pointer           = 0x10:0xce6e1c88
frame pointer           = 0x10:0xce6e1c9c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2 (g_event)
panic: from debugger


Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer     = 0x8:0xc078570d
stack pointer           = 0x10:0xce6e1a34
frame pointer           = 0x10:0xce6e1a40
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = IOPL = 0
current process         = 2 (g_event)
panic: from debugger
Uptime: 3m28s
Dumping 255 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
---
Reading symbols from /boot/kernel/snd_via82c686.ko...done.
Loaded symbols for /boot/kernel/snd_via82c686.ko
Reading symbols from /boot/kernel/snd_pcm.ko...done.
Loaded symbols for /boot/kernel/snd_pcm.ko
Reading symbols from /usr/obj/usr/src/sys/MYKERNEL/modules/usr/src/sys/modules/l inprocfs/linprocfs.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MYKERNEL/modules/usr/src/sys/modules/lin procfs/linprocfs.ko.debug
Reading symbols from /usr/obj/usr/src/sys/MYKERNEL/modules/usr/src/sys/modules/l inux/linux.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/MYKERNEL/modules/usr/src/sys/modules/lin ux/linux.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240             dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc05ba724 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc05baac8 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc0478a72 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4  0xc04789ea in db_command (last_cmdp=0xc0880de0, cmd_table=0x0, 
    aux_cmd_tablep=0xc080f0cc, aux_cmd_tablep_end=0xc080f0d0)
    at /usr/src/sys/ddb/db_command.c:346
#5  0xc0478af8 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
#6  0xc047b879 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:73
#7  0xc0785472 in kdb_trap (type=12, code=0, regs=0xce6e1c48)
    at /usr/src/sys/i386/i386/db_interface.c:171
#8  0xc07958f8 in trap_fatal (frame=0xce6e1c48, eva=0)
    at /usr/src/sys/i386/i386/trap.c:816
#9  0xc0795613 in trap_pfault (frame=0xce6e1c48, usermode=0, eva=28)
    at /usr/src/sys/i386/i386/trap.c:735
#10 0xc0795198 in trap (frame=
      {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = 0, tf_esi = -1025102336, tf_
ebp = -831644516, tf_isp = -831644556, tf_ebx = -1025082800, tf_edx = 0, tf_ecx 
= -1064771836, tf_eax = 1, tf_trapno = 12, tf_err = 0, tf_eip = -1067620904, tf_
cs = 8, tf_eflags = 66051, tf_esp = -1068020078, tf_ss = -1023775616})
    at /usr/src/sys/i386/i386/trap.c:420
#11 0xc0786d48 in calltrap () at {standard input}:94
#12 0xc05795a8 in g_destroy_provider (pp=0xc2e67a50)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/geom/geom_subr.c:426
#13 0xc057670d in g_orphan_register (pp=0xc2e62e00)
    at /usr/src/sys/geom/geom_event.c:143
#14 0xc057681c in one_event () at /usr/src/sys/geom/geom_event.c:169
#15 0xc0576a38 in g_run_events () at /usr/src/sys/geom/geom_event.c:202
#16 0xc05779c5 in g_event_procbody () at /usr/src/sys/geom/geom_kern.c:134
#17 0xc05a442f in fork_exit (callout=0xc05779a0 <g_event_procbody>, arg=0x0, 
    frame=0x0) at /usr/src/sys/kern/kern_fork.c:793

-- 
Toilet Toup'ee, n.:
	Any shag carpet that causes the lid to become top-heavy, thus
creating endless annoyance to male users.
		-- Rich Hall, "Sniglets"