Page fault / ata panic with VLC and kernel from 1.5~2 weeks ago [backtrace]

[Garrett Cooper]

Hi guys,
    When executing VLC with a DVD my machine would lockup whenever the
drive was spun up (VLC would lock up with SIGSTOP, then all of X11
would lock up). I am using vesa with a 9600GT card on Xorg.
    Here's the panic backtrace:

[root at orangebox /scratch/crash]# kgdb /boot/kernel.old/kernel vmcore.2
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
acd0: WARNING - TEST_UNIT_READY taskqueue timeout - completing request directly
acd0: WARNING - TEST_UNIT_READY freeing taskqueue zombie request
acd0: WARNING - TEST_UNIT_READY freeing taskqueue zombie request
GEOM_LABEL: Lab
el
 Fiastoa9l6 6t0r/aTpE K1_20:0 6p argeem ofvaeudl.t
while in kernel mode
cpuid = 2; apic id = 02
fault virtual address	= 0x5f790e1c
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc0643889
stack pointer	        = 0x28:0xc6391b6c
frame pointer	        = 0x28:0xc6391b6c
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12 (swi6: task queue)
trap number		= 12
panic: page fault
cpuid = 2
Uptime: 3d2h13m1s
Physical memory: 3318 MB
Dumping 304 MB: 289 273 257 241 225 209 193 177 161 145 129 113 97 81
65 49 33 17 1

Reading symbols from /boot/kernel/vesa.ko...Reading symbols from
/boot/kernel/vesa.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/vesa.ko
#0  doadump () at pcpu.h:246
246	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:246
#1  0xc061f758 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:420
#2  0xc061fa3e in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:576
#3  0xc083f93a in trap_fatal (frame=0xc6391b2c, eva=1601768988)
    at /usr/src/sys/i386/i386/trap.c:929
#4  0xc083fb0a in trap_pfault (frame=0xc6391b2c, usermode=0, eva=1601768988)
    at /usr/src/sys/i386/i386/trap.c:842
#5  0xc0840415 in trap (frame=0xc6391b2c) at /usr/src/sys/i386/i386/trap.c:522
#6  0xc0825edb in calltrap () at refcount.h:64
#7  0xc0643889 in device_get_softc (dev=0x5f790dd4)
    at /usr/src/sys/kern/subr_bus.c:2118
#8  0xc04b5165 in ata_ahci_begin_transaction (request=0xc8954190)
    at /usr/src/sys/dev/ata/chipsets/ata-ahci.c:315
#9  0xc04af614 in ata_start (dev=0xc67c0700)
    at /usr/src/sys/dev/ata/ata-queue.c:212
#10 0xc04accf2 in ata_reinit (dev=0xc67c0700)
    at /usr/src/sys/dev/ata/ata-all.c:300
#11 0xc04afd98 in ata_completed (context=0xccb13960, dummy=1)
    at /usr/src/sys/dev/ata/ata-queue.c:294
#12 0xc0655cd4 in taskqueue_run (queue=0xc668a580)
    at /usr/src/sys/kern/subr_taskqueue.c:282
#13 0xc0655eef in taskqueue_swi_run (dummy=0x0)
    at /usr/src/sys/kern/subr_taskqueue.c:324
#14 0xc06006bf in intr_event_execute_handlers (p=0xc65357ec, ie=0xc66c1100)
    at /usr/src/sys/kern/kern_intr.c:1134
#15 0xc0601299 in ithread_loop (arg=0xc66be440)
    at /usr/src/sys/kern/kern_intr.c:1147
#16 0xc05fe541 in fork_exit (callout=0xc0601201 <ithread_loop>,
    arg=0xc66be440, frame=0xc6391d38) at /usr/src/sys/kern/kern_fork.c:821
#17 0xc0825f50 in fork_trampoline () at refcount.h:64

    I have the debugger session still up if someone wants me to jump
to a specific spot in the panic (to look at the ATA related state for
instance).
Thanks!
-Garrett