[Fwd: Re: bin/109760: [acpi]: [modules] kldunload acpi_video - crash]

[Johannes Totz]

Oops, sent to John only previously. Here it comes for the mailing list.


-------- Original Message --------
Message-ID: <4AB0148A.5090007 at jo-t.de>
Date: Tue, 15 Sep 2009 23:26:18 +0100
From: Johannes Totz <johannes at jo-t.de>
To: John Baldwin <jhb at freebsd.org>
Subject: Re: bin/109760: [acpi]: [modules] kldunload acpi_video - crash

John Baldwin wrote:
> [snip]
> 
> - go to the frame of acpi_video_vo_destroy
> - "p *vo"
> - "p voqh"
> - "p *voqh"

See kgdb.log

> Also, if you can obtain an acpidump that might be useful, too.

Attached as p35-acpidump.txt.gz


Thanks!

Johannes

-------------- next part --------------
Script started on Tue Sep 15 21:53:16 2009
21:53 root at bernd:/usr/obj/usr/src/sys/P35#kgdb kernel /var/crash/vmcore.6 

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x10
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0x83a7c889
stack pointer	        = 0x28:0xacd4ab50
frame pointer	        = 0x28:0xacd4ab5c
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1002 (kldunload)
trap number		= 12
panic: page fault
Uptime: 1m50s
Physical memory: 502 MB
Dumping 55 MB: 40 24 8

[snip]

#0  doadump () at pcpu.h:196
196		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:196
#1  0x80518013 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0x80518221 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0x8069760c in trap_fatal (frame=0xacd4ab10, eva=16)
    at /usr/src/sys/i386/i386/trap.c:943
#4  0x8069786f in trap_pfault (frame=0xacd4ab10, usermode=0, eva=16)
    at /usr/src/sys/i386/i386/trap.c:856
#5  0x80698202 in trap (frame=0xacd4ab10) at /usr/src/sys/i386/i386/trap.c:534
#6  0x8068084b in calltrap () at /usr/src/sys/i386/i386/exception.s:166
#7  0x83a7c889 in acpi_video_vo_destroy (vo=0x839e64c0)
    at /usr/src/sys/modules/acpi/acpi_video/../../../dev/acpica/acpi_video.c:599
#8  0x83a7c978 in acpi_video_detach (dev=0x83615b80)
    at /usr/src/sys/modules/acpi/acpi_video/../../../dev/acpica/acpi_video.c:286
#9  0x8053cc98 in device_detach (dev=0x83615b80) at device_if.h:212
#10 0x8053cff1 in devclass_delete_driver (busclass=0x82c33340, 
    driver=0x83a7f328) at /usr/src/sys/kern/subr_bus.c:957
#11 0x8053d155 in driver_module_handler (mod=0x83441780, what=1, 
    arg=0x83a7f314) at /usr/src/sys/kern/subr_bus.c:3883
#12 0x805075c7 in module_unload (mod=0x83441780)
    at /usr/src/sys/kern/kern_module.c:266
#13 0x804fed88 in linker_file_unload (file=0x837b5d00, flags=0)
    at /usr/src/sys/kern/kern_linker.c:623
#14 0x80500ced in kern_kldunload (td=0x83426d80, fileid=33, flags=0)
    at /usr/src/sys/kern/kern_linker.c:1074
#15 0x80500e2b in kldunloadf (td=0x83426d80, uap=0xacd4acfc)
    at /usr/src/sys/kern/kern_linker.c:1103
#16 0x80697bb5 in syscall (frame=0xacd4ad38)
    at /usr/src/sys/i386/i386/trap.c:1094
#17 0x806808b0 in Xint0x80_syscall ()
    at /usr/src/sys/i386/i386/exception.s:262
#18 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) frame 7
#7  0x83a7c889 in acpi_video_vo_destroy (vo=0x839e64c0)
    at /usr/src/sys/modules/acpi/acpi_video/../../../dev/acpica/acpi_video.c:599
599		STAILQ_REMOVE(voqh, vo, acpi_video_output, vo_unit.next);
(kgdb) p *vo
$1 = {handle = 0x82cf2aa0, adr = 65808, vo_next = {stqe_next = 0x837aa980}, 
  vo_unit = {num = 0, next = {stqe_next = 0x0}}, vo_brightness = -1, 
  vo_fullpower = -1, vo_economy = -1, vo_numlevels = -1, vo_levels = 0x0, 
  vo_sysctl_ctx = {tqh_first = 0x82dd2190, tqh_last = 0x82ec1364}, 
  vo_sysctl_tree = 0x0}
(kgdb) p voqh
$2 = (struct acpi_video_output_queue *) 0x83a7f400
(kgdb) p *voqh
$3 = {stqh_first = 0x0, stqh_last = 0x83a7f400}
(kgdb) q