From heath@hershey.dyn.bar.net  Sat Oct 27 00:26:18 2001
Return-Path: <heath@hershey.dyn.bar.net>
Received: from hershey.dyn.bar.net (c1603280-a.provo1.ut.home.com [65.5.37.42])
	by hub.freebsd.org (Postfix) with ESMTP id C51A137B403
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 27 Oct 2001 00:26:13 -0700 (PDT)
Received: (from heath@localhost)
	by hershey.dyn.bar.net (8.11.6/8.11.5) id f9R7QD300756;
	Sat, 27 Oct 2001 01:26:13 -0600 (MDT)
	(envelope-from heath)
Message-Id: <200110270726.f9R7QD300756@hershey.dyn.bar.net>
Date: Sat, 27 Oct 2001 01:26:13 -0600 (MDT)
From: Heath Nielson <heath@cs.byu.edu>
Reply-To: Heath Nielson <heath@cs.byu.edu>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Fatal trap 12 when reading from DVD.
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         31530
>Category:       kern
>Synopsis:       Fatal trap 12 when reading from DVD.
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Oct 27 00:30:01 PDT 2001
>Closed-Date:    Sat May 18 18:31:33 PDT 2002
>Last-Modified:  Sat May 18 18:31:33 PDT 2002
>Originator:     Heath Nielson
>Release:        FreeBSD 4.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD hershey.dyn.bar.net 4.4-STABLE FreeBSD 4.4-STABLE #1: Fri Oct 12 22:28:00 MDT 2001 heath@hershey.dyn.bar.net:/usr/src/sys/compile/HERSHEY i386


	
>Description:
When I try to open a DVD disc for playing, the DVD-ROM drive accesses the
disc for a time, then the computer panics.  A message is logged to syslog:

hershey /kernel: ata1-master: too many segments in DMA table

The crash dump is as follows:

(kgdb) symbol-file kernel.debug
Reading symbols from kernel.debug...done.
(kgdb) exec-file /usr/crash/kernel.0
(kgdb) core-file /usr/crash/vmcore.0
IdlePTD 3805184
initial pcb at 2dae20
panicstr: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x3a
fault code		= supervisor write, page not present
instruction pointer	= 0x8:0xc021e20f
stack pointer	        = 0x10:0xc02b3d3c
frame pointer	        = 0x10:0xc02b3ddc
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= Idle
interrupt mask		= bio 
trap number		= 12
panic: page fault

syncing disks... 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
giving up on 1 buffers
Uptime: 5h12m19s

dumping to dev #ad/0x20001, offset 16512
dump ata0: resetting devices .. done
[...]
---
#0  dumpsys () at ../../kern/kern_shutdown.c:473
473		if (dumping++) {
(kgdb) set output-radix 16
Output radix now set to decimal 16, hex 10, octal 20.
(kgdb) bt
#0  dumpsys () at ../../kern/kern_shutdown.c:473
#1  0xc015a4b3 in boot (howto=0x100) at ../../kern/kern_shutdown.c:313
#2  0xc015a880 in poweroff_wait (junk=0xc02ab9ec, howto=0xc02ab50f)
    at ../../kern/kern_shutdown.c:581
#3  0xc026843a in trap_fatal (frame=0xc02b3cfc, eva=0x3a)
    at ../../i386/i386/trap.c:956
#4  0xc026810d in trap_pfault (frame=0xc02b3cfc, usermode=0x0, eva=0x3a)
    at ../../i386/i386/trap.c:849
#5  0xc0267cf7 in trap (frame={tf_fs = 0x10, tf_es = 0x10, tf_ds = 0x10, 
      tf_edi = 0xd1558000, tf_esi = 0xc02e2e0c, tf_ebp = 0xc02b3ddc, 
      tf_isp = 0xc02b3d28, tf_ebx = 0x0, tf_edx = 0x0, tf_ecx = 0xc02b3d88, 
      tf_eax = 0x1, tf_trapno = 0xc, tf_err = 0x2, tf_eip = 0xc021e20f, 
      tf_cs = 0x8, tf_eflags = 0x210286, tf_esp = 0x0, tf_ss = 0xc02e2e0c})
    at ../../i386/i386/trap.c:448
#6  0xc021e20f in vm_fault (map=0xc02e2e0c, vaddr=0xd1558000, fault_type=0x3, 
    fault_flags=0x0) at ../../vm/vm_object.h:189
#7  0xc02680ba in trap_pfault (frame=0xc02b3e50, usermode=0x0, eva=0xd1558000)
    at ../../i386/i386/trap.c:838
#8  0xc0267cf7 in trap (frame={tf_fs = 0x10, tf_es = 0x10, tf_ds = 0x10, 
      tf_edi = 0xd1558000, tf_esi = 0xd000, tf_ebp = 0xc02b3ea0, 
      tf_isp = 0xc02b3e7c, tf_ebx = 0xc245fa00, tf_edx = 0x170, 
      tf_ecx = 0x2f7f, tf_eax = 0xc135ca80, tf_trapno = 0xc, tf_err = 0x2, 
      tf_eip = 0xc02457d2, tf_cs = 0x8, tf_eflags = 0x210216,
      tf_esp = 0xc137fb20, tf_ss = 0xc245fa00}) at ../../i386/i386/trap.c:448
#9  0xc02457d2 in atapi_read (request=0xc245fa00, length=0xd000)
    at machine/cpufunc.h:225
#10 0xc0245267 in atapi_interrupt (request=0xc245fa00)
    at ../../dev/ata/atapi-all.c:391
#11 0xc023e6e2 in ata_intr (data=0xc135ca80) at ../../dev/ata/ata-all.c:1165
(kgdb) up 10
#10 0xc0245267 in atapi_interrupt (request=0xc245fa00)
    at ../../dev/ata/atapi-all.c:391
391		    atapi_read(request, length);
(kgdb) print *request
$1 = {device = 0xc137fb20, ccb = "(\000\0001o\000\000\000\000\000\000", 
  ccbsize = 0xc, bytecount = 0xfe27d000, donecount = 0x0, timeout = 0xbb8, 
  timeout_handle = {callout = 0xcba19678}, retries = 0x0, result = 0x0, 
  error = 0x0, sense = {error_code = 0x0, valid = 0x0, segment = 0x0, 
    sense_key = 0x0, reserved2_4 = 0x0, ili = 0x0, eom = 0x0, filemark = 0x0, 
    cmd_info = 0x0, sense_length = 0x0, cmd_specific_info = 0x0, asc = 0x0, 
    ascq = 0x0, replaceable_unit_code = 0x0, sk_specific = 0x0, sksv = 0x0, 
    sk_specific1 = 0x0, sk_specific2 = 0x0}, flags = 0x1, 
  data = 0xd1556dfc "", callback = 0xc0247f30 <acd_done>, dmatab = 0xc151f000, 
  driver = 0xcba3001c, chain = {tqe_next = 0x0, tqe_prev = 0xc135cae0}}
(kgdb) 
	
If I set the DVD drive to PIO mode, the panic is the same with the exception
that there is no message logged to syslog.  This happens with every DVD I've
tried and is repeatable every time.  Full dmesg is:

Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 4.4-STABLE #1: Fri Oct 12 22:28:00 MDT 2001
    heath@hershey.dyn.bar.net:/usr/src/sys/compile/HERSHEY
Timecounter "i8254"  frequency 1193182 Hz
CPU: AMD-K7(tm) Processor (704.94-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x612  Stepping = 2
  Features=0x81f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,MMX>
  AMD Features=0xc0400000<AMIE,DSP,3DNow!>
real memory  = 536805376 (524224K bytes)
avail memory = 519147520 (506980K bytes)
Preloaded elf kernel "kernel" at 0xc0382000.
Preloaded elf module "if_vr.ko" at 0xc038209c.
Preloaded elf module "miibus.ko" at 0xc038213c.
Preloaded elf module "snd_es137x.ko" at 0xc03821dc.
Preloaded elf module "snd_pcm.ko" at 0xc0382280.
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 7 entries at 0xc00f8110
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <AMD-751 host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <AMD-751 PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <NVidia Riva TNT graphics accelerator> at 5.0 irq 11
isab0: <VIA 82C686 PCI-ISA bridge> at device 4.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 82C686 ATA66 controller> port 0xffa0-0xffaf at device 4.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <VIA 83C572 USB controller> port 0xd000-0xd01f irq 9 at device 4.2 on pci0
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
ukbd0: Microsoft Natural Keyboard Elite, rev 1.00/1.04, addr 2, iclass 3/1
kbd0 at ukbd0
uhub1: Philips Semiconductors hub, class 9/0, rev 1.10/1.10, addr 3
uhub1: 5 ports with 5 removable, self powered
ugen0: Hewlett Packard HP USB CD-Writer Plus, rev 1.00/0.01, addr 4
usbd_transfer_cb: short transfer 0<8
usbd_new_device: addr=5, getting first desc failed
uhub_explore: usb_new_device failed, error=IOERROR
uhub1: device problem, disabling port 5
uhci1: <VIA 83C572 USB controller> port 0xd400-0xd41f irq 9 at device 4.3 on pci0
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
chip1: <VIA 82C686 ACPI interface> at device 4.4 on pci0
pcm0: <AudioPCI ES1370> port 0xcc00-0xcc3f irq 11 at device 13.0 on pci0
ahc0: <Adaptec 2902/04/10/15/20/30C SCSI adapter> port 0xdc00-0xdcff mem 0xeffff000-0xefffffff irq 10 at device 14.0 on pci0
aic7850: Single Channel A, SCSI Id=7, 3/255 SCBs
vr0: <VIA VT3043 Rhine I 10/100BaseTX> port 0xc800-0xc87f mem 0xefffef80-0xefffefff irq 9 at device 16.0 on pci0
vr0: Ethernet address: 00:50:ba:04:cc:81
miibus0: <MII bus> on vr0
amphy0: <DM9101 10/100 media interface> on miibus0
amphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
orm0: <Option ROM> at iomem 0xc0000-0xcbfff on isa0
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model IntelliMouse, device ID 3
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: IEEE1284 device found /NIBBLE/ECP
Probing for PnP devices on ppbus0:
ppbus0: <HEWLETT-PACKARD DESKJET 990C> PRINTER MLC,PCL,PML
ppi0: <Parallel I/O> on ppbus0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ad0: 29333MB <WDC WD307AA> [59598/16/63] at ata0-master UDMA66
acd0: DVD-ROM <DVD-ROM DDU220E> at ata1-master using WDMA2
Waiting 5 seconds for SCSI devices to settle
pass0 at ahc0 bus 0 target 5 lun 0
pass0: <UMAX Astra 1220S V1.2> Fixed Scanner SCSI-2 device 
pass0: 3.300MB/s transfers 

If there is any additional information I can provide, let me know.
	
>How-To-Repeat:
Install /usr/ports/graphics/ogle_gui.
Run ogle and open a disc with a DVD in the drive.
	
>Fix:

	
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->asmodai 
Responsible-Changed-By: asmodai 
Responsible-Changed-When: Sun Nov 4 08:25:12 PST 2001 
Responsible-Changed-Why:  
I'm looking after MFC'ing the ATA bits from CURRENT to STABLE. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=31530 
State-Changed-From-To: open->analyzed 
State-Changed-By: asmodai 
State-Changed-When: Thu Nov 15 12:48:34 PST 2001 
State-Changed-Why:  
This seems to definately be something I can fix with the MFC. 
Hope to get most done the coming weekend. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=31530 
Responsible-Changed-From-To: asmodai->freebsd-bugs 
Responsible-Changed-By: asmodai 
Responsible-Changed-When: Fri Nov 16 02:27:56 PST 2001 
Responsible-Changed-Why:  
Move back to the bugs list. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=31530 

From: Donn Miller <dmmiller@cvzoom.net>
To: freebsd-gnats-submit@FreeBSD.org, heath@cs.byu.edu
Cc:  
Subject: Re: kern/31530: Fatal trap 12 when reading from DVD.
Date: Sun, 30 Dec 2001 05:26:50 -0500

 This is a multi-part message in MIME format.
 --------------040706030009020104070201
 Content-Type: text/plain; charset=us-ascii; format=flowed
 Content-Transfer-Encoding: 7bit
 
 FWIW, I'm seeing these problems right now on 4.5-PRERELEASE.  My crash 
 dump is attached.  I also have my sources cvsupped and up-to-date as of 
 this email.
 
 Donn.
 
 --------------040706030009020104070201
 Content-Type: text/plain;
  name="crash-dump.out"
 Content-Transfer-Encoding: quoted-printable
 Content-Disposition: inline;
  filename="crash-dump.out"
 
 (kgdb) symbol-file /kernel.debug
 Reading symbols from /kernel.debug...done.
 (kgdb) exec-file kernel.2
 (kgdb) core-file vmcore.2
 IdlePTD at phsyical address 0x003bf000
 initial pcb at physical address 0x00301360
 panicstr: page fault
 panic messages:
 ---
 Fatal trap 12: page fault while in kernel mode
 fault virtual address	=3D 0x3a
 fault code		=3D supervisor write, page not present
 instruction pointer	=3D 0x8:0xc022dacc
 stack pointer	        =3D 0x10:0xc02d587c
 frame pointer	        =3D 0x10:0xc02d591c
 code segment		=3D base 0x0, limit 0xfffff, type 0x1b
 			=3D DPL 0, pres 1, def32 1, gran 1
 processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
 current process		=3D Idle
 interrupt mask		=3D bio=20
 trap number		=3D 12
 panic: page fault
 
 syncing disks...=20
 
 Fatal trap 12: page fault while in kernel mode
 fault virtual address	=3D 0x30
 fault code		=3D supervisor read, page not present
 instruction pointer	=3D 0x8:0xc021bf64
 stack pointer	        =3D 0x10:0xc02d56a0
 frame pointer	        =3D 0x10:0xc02d56a8
 code segment		=3D base 0x0, limit 0xfffff, type 0x1b
 			=3D DPL 0, pres 1, def32 1, gran 1
 processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
 current process		=3D Idle
 interrupt mask		=3D bio=20
 trap number		=3D 12
 panic: page fault
 Uptime: 4m47s
 
 dumping to dev #ad/0x40001, offset 128
 dump ata0: resetting devices .. done
 255 254 253 252 251 250 249 248 247 246 245 244 243 242 241 240 239 238 2=
 37 236 235 234 233 232 231 230 229 228 227 226 225 224 223 222 221 220 21=
 9 218 217 216 215 214 213 212 211 210 209 208 207 206 205 204 203 202 201=
  200 199 198 197 196 195 194 193 192 191 190 189 188 187 186 185 184 183 =
 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 167 166 165 1=
 64 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 14=
 6 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128=
  127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 =
 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 =
 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 6=
 4 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40=
  39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 =
 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 succeeded
 Automatic reboot in 15 seconds - press a key on the console to abort
 Rebooting...
 Copyright (c) 1992-2001 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 	The Regents of the University of California. All rights reserved.
 FreeBSD 4.5-PRERELEASE #0: Sun Dec 30 03:31:49 EST 2001
     dmmiller@acs-24-154-77-238.zoominternet.net:/usr/src/sys/compile/CUST=
 OM
 Timecounter "i8254"  frequency 1193182 Hz
 CPU: Pentium III/Pentium III Xeon/Celeron (846.33-MHz 686-class CPU)
   Origin =3D "GenuineIntel"  Id =3D 0x68a  Stepping =3D 10
   Features=3D0x387f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MC=
 A,CMOV,PAT,PSE36,PN,MMX,FXSR,SSE>
 real memory  =3D 268369920 (262080K bytes)
 avail memory =3D 257630208 (251592K bytes)
 Preloaded elf kernel "kernel" at 0xc03a0000.
 Preloaded elf module "snd_maestro3.ko" at 0xc03a009c.
 Preloaded elf module "snd_pcm.ko" at 0xc03a0140.
 VESA: v2.0, 8192k memory, flags:0x0, mode table:0xc0319dc2 (1000022)
 VESA: S3 Incorporated. M7 BIOS
 Pentium Pro MTRR support enabled
 md0: Malloc disk
 Using $PIR table, 7 entries at 0xc00fdf50
 apm0: <APM BIOS> on motherboard
 apm: found APM BIOS v1.2, connected at v1.2
 npx0: <math processor> on motherboard
 npx0: INT 16 interface
 pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
 pci0: <PCI bus> on pcib0
 pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci=
 0
 pci1: <PCI bus> on pcib1
 pci1: <S3 model 8c12 graphics accelerator> at 1.0 irq 11
 pci_cfgintr_linked: linked (60) to hard-routed irq 11
 pci_cfgintr: 0:4 INTA routed to irq 11
 pcic0: <TI PCI-1420 PCI-CardBus Bridge> mem 0x44000000-0x44000fff irq 11 =
 at device 4.0 on pci0
 pcic0: TI12XX PCI Config Reg: [ring enable][speaker enable][pwr save][FUN=
 C pci int + CSC serial isa irq]
 pccard0: <PC Card bus (classic)> on pcic0
 pci_cfgintr_linked: linked (60) to hard-routed irq 11
 pci_cfgintr: 0:4 INTA routed to irq 11
 pcic1: <TI PCI-1420 PCI-CardBus Bridge> mem 0x44001000-0x44001fff irq 11 =
 at device 4.1 on pci0
 pcic1: TI12XX PCI Config Reg: [ring enable][speaker enable][pwr save][FUN=
 C pci int + CSC serial isa irq]
 pccard1: <PC Card bus (classic)> on pcic1
 isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0
 isa0: <ISA bus> on isab0
 atapci0: <Intel PIIX4 ATA33 controller> port 0x1050-0x105f at device 7.1 =
 on pci0
 ata0: at 0x1f0 irq 14 on atapci0
 ata1: at 0x170 irq 15 on atapci0
 uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0x1060-0x107f irq 5=
  at device 7.2 on pci0
 usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
 usb0: USB revision 1.0
 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
 uhub0: 2 ports with 2 removable, self powered
 chip1: <Intel 82371AB Power management controller> port 0x1040-0x104f at =
 device 7.3 on pci0
 pcm0: <ESS Technology Allegro-1> port 0x1400-0x14ff irq 5 at device 8.0 o=
 n pci0
 pci0: <unknown card> (vendor=3D0x125d, dev=3D0x1989) at 8.1 irq 5
 dc0: <Accton EN2242 MiniPCI 10/100BaseTX> port 0x1c00-0x1cff mem 0xe80000=
 00-0xe80003ff irq 11 at device 16.0 on pci0
 dc0: Ethernet address: 00:d0:59:54:d7:0f
 miibus0: <MII bus> on dc0
 ukphy0: <Generic IEEE 802.3u media interface> on miibus0
 ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
 eisa0: <EISA bus> on motherboard
 eisa0: unknown card DF@0020 (0x10c00020) at slot 1
 orm0: <Option ROMs> at iomem 0xc0000-0xcbfff,0xdc000-0xdffff on isa0
 fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0=
 
 fdc0: FIFO enabled, 8 bytes threshold
 fd0: <1440-KB 3.5" drive> on fdc0 drive 0
 atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
 atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
 kbd0 at atkbd0
 psm0: <PS/2 Mouse> irq 12 on atkbdc0
 psm0: model Generic PS/2 mouse, device ID 0
 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0=
 
 sc0: <System console> at flags 0x100 on isa0
 sc0: VGA <16 virtual consoles, flags=3D0x300>
 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
 sio0: type 16550A
 ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
 plip0: <PLIP network interface> on ppbus0
 lpt0: <Printer> on ppbus0
 lpt0: Interrupt-driven port
 ppi0: <Parallel I/O> on ppbus0
 ad0: 19077MB <TOSHIBA MK2016GAP> [38760/16/63] at ata0-master UDMA33
 acd0: DVD-ROM <TOSHIBA DVD-ROM SD-C2502> at ata1-master using PIO4
 Mounting root from ufs:/dev/ad0s3a
 WARNING: / was not properly dismounted
 ata1-master: too many segments in DMA table
 
 
 Fatal trap 12: page fault while in kernel mode
 fault virtual address	=3D 0x3a
 fault code		=3D supervisor write, page not present
 instruction pointer	=3D 0x8:0xc022dacc
 stack pointer	        =3D 0x10:0xc02d587c
 frame pointer	        =3D 0x10:0xc02d591c
 code segment		=3D base 0x0, limit 0xfffff, type 0x1b
 			=3D DPL 0, pres 1, def32 1, gran 1
 processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
 current process		=3D Idle
 interrupt mask		=3D bio=20
 trap number		=3D 12
 panic: page fault
 
 syncing disks...=20
 
 Fatal trap 12: page fault while in kernel mode
 fault virtual address	=3D 0x30
 fault code		=3D supervisor read, page not present
 instruction pointer	=3D 0x8:0xc021bf64
 stack pointer	        =3D 0x10:0xc02d56a0
 frame pointer	        =3D 0x10:0xc02d56a8
 code segment		=3D base 0x0, limit 0xfffff, type 0x1b
 			=3D DPL 0, pres 1, def32 1, gran 1
 processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
 current process		=3D Idle
 interrupt mask		=3D bio=20
 trap number		=3D 12
 panic: page fault
 Uptime: 50m47s
 
 dumping to dev #ad/0x40001, offset 128
 dump ata0: resetting devices .. done
 255 254 253 252 251 250 249 248 247 246 245 244 243 242 241 240 239 238 2=
 37 236 235 234 233 232 231 230 229 228 227 226 225 224 223 222 221 220 21=
 9 218 217 216 215 214 213 212 211 210 209 208 207 206 205 204 203 202 201=
  200 199 198 197 196 195 194 193 192 191 190 189 188 187 186 185 184 183 =
 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 167 166 165 1=
 64 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 14=
 6 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128=
  127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 =
 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 =
 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 6=
 4 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40=
  39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 =
 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0=20
 ---
 #0  dumpsys () at ../../kern/kern_shutdown.c:473
 473		if (dumping++) {
 (kgdb) where
 #0  dumpsys () at ../../kern/kern_shutdown.c:473
 #1  0xc0152730 in boot (howto=3D260) at ../../kern/kern_shutdown.c:313
 #2  0xc0152b2d in panic (fmt=3D0xc02cd18c "%s") at ../../kern/kern_shutdo=
 wn.c:581
 #3  0xc02845bc in trap_fatal (frame=3D0xc02d5660, eva=3D48) at ../../i386=
 /i386/trap.c:956
 #4  0xc0284251 in trap_pfault (frame=3D0xc02d5660, usermode=3D0, eva=3D48=
 )
     at ../../i386/i386/trap.c:849
 #5  0xc0283de3 in trap (frame=3D{tf_fs =3D -1072234480, tf_es =3D 6815760=
 , tf_ds =3D -1070792688,=20
       tf_edi =3D 0, tf_esi =3D -1058840064, tf_ebp =3D -1070770520, tf_is=
 p =3D -1070770548,=20
       tf_ebx =3D -1070683620, tf_edx =3D 6864992, tf_ecx =3D -867660992, =
 tf_eax =3D 0,=20
       tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1071530140, tf_cs =3D 8=
 , tf_eflags =3D 66054,=20
       tf_esp =3D -1058840064, tf_ss =3D -1058840064}) at ../../i386/i386/=
 trap.c:448
 #6  0xc021bf64 in acquire_lock (lk=3D0xc02eaa1c) at ../../ufs/ffs/ffs_sof=
 tdep.c:271
 #7  0xc02200d8 in softdep_update_inodeblock (ip=3D0xc0e36200, bp=3D0xc607=
 1fb8, waitfor=3D0)
     at ../../ufs/ffs/ffs_softdep.c:3775
 #8  0xc021b072 in ffs_update (vp=3D0xcc488b40, waitfor=3D0) at ../../ufs/=
 ffs/ffs_inode.c:106
 #9  0xc0223616 in ffs_sync (mp=3D0xc0deac00, waitfor=3D2, cred=3D0xc0a3b6=
 80, p=3D0xc031a760)
     at ../../ufs/ffs/ffs_vfsops.c:1014
 #10 0xc018309f in sync (p=3D0xc031a760, uap=3D0x0) at ../../kern/vfs_sysc=
 alls.c:547
 #11 0xc0152503 in boot (howto=3D256) at ../../kern/kern_shutdown.c:234
 #12 0xc0152b2d in panic (fmt=3D0xc02cd18c "%s") at ../../kern/kern_shutdo=
 wn.c:581
 #13 0xc02845bc in trap_fatal (frame=3D0xc02d583c, eva=3D58) at ../../i386=
 /i386/trap.c:956
 #14 0xc0284251 in trap_pfault (frame=3D0xc02d583c, usermode=3D0, eva=3D58=
 )
     at ../../i386/i386/trap.c:849
 #15 0xc0283de3 in trap (frame=3D{tf_fs =3D -1070596080, tf_es =3D -903610=
 352, tf_ds =3D 7274512,=20
       tf_edi =3D -903553024, tf_esi =3D -1070553076, tf_ebp =3D -10707698=
 92,=20
       tf_isp =3D -1070770072, tf_ebx =3D 0, tf_edx =3D 0, tf_ecx =3D -107=
 0769976, tf_eax =3D 1,=20
       tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D -1071457588, tf_cs =3D 8=
 , tf_eflags =3D 66178,=20
       tf_esp =3D 0, tf_ss =3D -1070553076}) at ../../i386/i386/trap.c:448=
 
 #16 0xc022dacc in vm_fault (map=3D0xc030a80c, vaddr=3D3391414272, fault_t=
 ype=3D3 '\003',=20
     fault_flags=3D0) at ../../vm/vm_object.h:189
 #17 0xc02841fe in trap_pfault (frame=3D0xc02d5990, usermode=3D0, eva=3D33=
 91414272)
     at ../../i386/i386/trap.c:838
 #18 0xc0283de3 in trap (frame=3D{tf_fs =3D -1072365552, tf_es =3D -65520,=
  tf_ds =3D -973012976,=20
       tf_edi =3D -903553024, tf_esi =3D 2048, tf_ebp =3D -1070769696, tf_=
 isp =3D -1070769732,=20
       tf_ebx =3D -1057688576, tf_edx =3D 368, tf_ecx =3D 373, tf_eax =3D =
 -1059785984,=20
       tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D -1071256718, tf_cs =3D 8=
 , tf_eflags =3D 66054,=20
       tf_esp =3D -1059152064, tf_ss =3D -1057688576}) at ../../i386/i386/=
 trap.c:448
 #19 0xc025eb72 in atapi_read (request=3D0xc0f4f400, length=3D2048) at mac=
 hine/cpufunc.h:225
 #20 0xc025e5e3 in atapi_interrupt (request=3D0xc0f4f400) at ../../dev/ata=
 /atapi-all.c:391
 #21 0xc025747f in ata_intr (data=3D0xc0d4f300) at ../../dev/ata/ata-all.c=
 :1181
 
 --------------040706030009020104070201--
 
State-Changed-From-To: analyzed->closed 
State-Changed-By: brian 
State-Changed-When: Sat May 18 18:29:45 PDT 2002 
State-Changed-Why:  
In a message from Heath: 

: Subject: Re: kern/31530: Fatal trap 12 when reading from DVD. 
: From: Heath Nielson <heath@poseidon.cs.byu.edu> 
: Date: Sat, 18 May 2002 17:22:01 -0600 (MDT) (Sun 00:22 BST) 
: To: gnats-admin@FreeBSD.ORG, <freebsd-bugs@FreeBSD.ORG> 
: Cc: Heath Nielson <heath@cs.byu.edu> 
:  
: This problem has been fixed (I can no longer reproduce the problem) as of 
: FreeBSD 4.5 with an MFC of the ATA code.  (I can't recall the exact 
: version of the code that fixed the problem.) 
: 
: Heath 

http://www.freebsd.org/cgi/query-pr.cgi?pr=31530 
>Unformatted:
