[Panic] Removing of the Palm during select syscall causes panic

[Kostik Belousov]

On Sat, Mar 08, 2008 at 02:01:51AM +0300, Oleg Sidorkin wrote:
> Hello,
> 
> I'm running 7.0-Stable on the ASUS P5K-VM + Intel Q6600 box.
> If Palm device is disconnected after synchronization, system crashes with 
> following stacktrace:
> 
> #0  doadump () at pcpu.h:194
> #1  0x0000000000000004 in ?? ()
> #2  0xffffffff802bea49 in boot (howto=260) 
> at /usr/src/sys/kern/kern_shutdown.c:409
> #3  0xffffffff802bee4d in panic (fmt=0x104 <Address 0x104 out of bounds>) 
> at /usr/src/sys/kern/kern_shutdown.c:563
> #4  0xffffffff804ccc84 in trap_fatal (frame=0xffffff0041595350, 
> eva=18446742974491038824) at /usr/src/sys/amd64/amd64/trap.c:724
> #5  0xffffffff804cd055 in trap_pfault (frame=0xffffffffaf7607d0, usermode=0) 
> at /usr/src/sys/amd64/amd64/trap.c:641
> #6  0xffffffff804cd998 in trap (frame=0xffffffffaf7607d0) 
> at /usr/src/sys/amd64/amd64/trap.c:410
> #7  0xffffffff804b35fe in calltrap () 
> at /usr/src/sys/amd64/amd64/exception.S:169
> #8  0xffffffff8028d842 in giant_poll (dev=0xffffff000ddf6600, events=64, 
> td=0xffffff0041595350) at /usr/src/sys/kern/kern_conf.c:385
> #9  0xffffffff8025474e in devfs_poll_f (fp=Variable "fp" is not available.
> ) at /usr/src/sys/fs/devfs/devfs_vnops.c:845
> #10 0xffffffff802f61f6 in kern_select (td=0xffffff0041595350, nd=11, 
> fd_in=0x7fffffbfea90, fd_ou=0x0, fd_ex=0x0, tvp=Variable "tvp" is not 
> available.
> ) at file.h:277
> #11 0xffffffff802f6611 in select (td=0xffffff0041595350, 
> uap=0xffffffffaf760be0) at /usr/src/sys/kern/sys_generic.c:663
> #12 0xffffffff804cd2d7 in syscall (frame=0xffffffffaf760c70) 
> at /usr/src/sys/amd64/amd64/trap.c:852
> #13 0xffffffff804b380b in Xfast_syscall () 
> at /usr/src/sys/amd64/amd64/exception.S:290
> #14 0x0000000804579d6c in ?? ()
> Previous frame inner to this frame (corrupt stack?)
> 
> Does anyone have any ideas?

I posted the patch several days ago, see
http://lists.freebsd.org/pipermail/freebsd-current/2008-March/084076.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20080308/bc43d87d/attachment.pgp