kern/56380: cdrecord panicks -CURRENT with ATAPI burner

Vladimir Kushnir vkushnir at Alfacom.net
Wed Sep 3 14:50:16 PDT 2003 

>Number:         56380
>Category:       kern
>Synopsis:       cdrecord panicks -CURRENT with ATAPI burner
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Sep 03 14:50:14 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Vladimir Kushnir
>Release:        FreeBSD 5.1-CURRENT i386
>Organization:
>Environment:
System: FreeBSD kushnir1.kiev.ua 5.1-CURRENT FreeBSD 5.1-CURRENT #6: Wed Sep 3 08:45:50 EEST 2003 root at kushnir1.kiev.ua:/usr/obj/usr/src/sys/KUSHNIR i386


>Description:
Any attempt to burn with cdrecord (ports/sysutils/cdrtools or 
ports/sysutils/cdrtools-devel) in real or simulation mode immediately
panics system with ATAPI burner. This happens since early August till now,
100% reproducible. DDB diagnostics for the last kernel (GENERIC + atapicam 
- ATA_STATIC_ID, compiled with default flags:

panic:	mutex vm object not owned at /usr/src/sys/vm/vm_page.c:761
Debugger("panic")
Stopped at	Debugger+0x54:	xchgl	%ebx, in_Debugger.0
db>trace
Debugger(c0532adb,c05f53a0,c053219a,cfe06b68,100) at Debugger+0x54
panic(c053219a,c0548b15,c0548ffa,2f9,42) at panic+0xd5
_mtx_assert(c219ade0,1,c0548ffa,2f9,c2198294) at _mtx_assert+0xec
vm_page_alloc(c219ade0,0,0,0,c0531f5b) at vm_page_alloc+0x59
vm_fault_copy_entry(c219de00,c219dd00,c2198294,c2088960,c048139d) at
vm_fault_copy_entry+0xab
vm_map_copy_entry(c219dd00,c219de00,c2088960,c2198294,c058882c) at
vm_map_copy_entry+0x211
vmspace_fork(c219dd00,1,c0547ddd,255,c2360618) at vmspace_fork+0x326
vm_forkproc(c21815f0,c23605ac,c2181130,14,cfe06cbc) at vm_forkproc+0xde
fork1(c21815f0,14,0,cfe06cd8,c21815f0) at fork1+0xead
fork(c21815f0,cfe06d10,c054de6a,3eb,0) at fork+0x2b
syscall(2f,2f,2f,1000,10000) at syscall+0x273
Xint0x80_syscall() at Xint0x80_syscall+0x1d
--- syscall (2, FreeBSD ELF32, fork), eip = 0x2810fd8f, esp = 0xbfbfd63c,
ebp = 0xbfbfd668

"gdb -k" output:

Script started on Wed Sep  3 23:56:36 2003
 ~> sudo gsb -k /usr/obj/usr/src/sys/KUSHNIR-TEST/kernel.debug /usr/crash/vmcore.0A> sud	 gP80`.0KA11`80`11`@d80`e.0A12`80`e
GNU gdb 5.2.1 (FreeBSD)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-undermydesk-freebsd"...
panic: mutex vm object not owned at /usr/src/sys/vm/vm_page.c:761
panic messages:
---
panic: mutex vm object not owned at /usr/src/sys/vm/vm_page.c:761
panic: from debugger
Uptime: 2m54s
Dumping 191 MB
 16 32 48 64 80 96 112 128 144 160 176
---
Reading symbols from /usr/obj/usr/src/sys/KUSHNIR-TEST/modules/usr/src/sys/modules/acpi/acpi.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KUSHNIR-TEST/modules/usr/src/sys/modules/acpi/acpi.ko.debug
Reading symbols from /boot/kernel/green_saver.ko...done.
Loaded symbols for /boot/kernel/green_saver.ko
Reading symbols from /usr/obj/usr/src/sys/KUSHNIR-TEST/modules/usr/src/sys/modules/linux/linux.ko.debug...done.
Loaded symbols for /usr/obj/usr/src/sys/KUSHNIR-TEST/modules/usr/src/sys/modules/linux/linux.ko.debug
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
240		dumping++;
(kgdb) where
#0  doadump () at /usr/src/sys/kern/kern_shutdown.c:240
#1  0xc032d981 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372
#2  0xc032dd17 in panic () at /usr/src/sys/kern/kern_shutdown.c:550
#3  0xc01640c2 in db_panic () at /usr/src/sys/ddb/db_command.c:450
#4  0xc0164022 in db_command (last_cmdp=0xc05cbd60, cmd_table=0x0, 
    aux_cmd_tablep=0xc0553258, aux_cmd_tablep_end=0xc0553270)
    at /usr/src/sys/ddb/db_command.c:346
#5  0xc0164165 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472
#6  0xc0167165 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_trap.c:73
#7  0xc04b909c in kdb_trap (type=3, code=0, regs=0xcfe06ae0)
    at /usr/src/sys/i386/i386/db_interface.c:171
#8  0xc04cab7d in trap (frame=
      {tf_fs = -1068236776, tf_es = -807403504, tf_ds = -1070268400, tf_edi = 1, tf_esi = -1068293734, tf_ebp = -807376084, tf_isp = -807376116, tf_ebx = 0, tf_edx = 0, tf_ecx = 32, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1068788908, tf_cs = 8, tf_eflags = 662, tf_esp = -1068186770, tf_ss = -1068291365})
    at /usr/src/sys/i386/i386/trap.c:577
#9  0xc04baa48 in calltrap () at {standard input}:102
#10 0xc032dca5 in panic (fmt=0xc053219a "mutex %s not owned at %s:%d")
    at /usr/src/sys/kern/kern_shutdown.c:534
#11 0xc03246bc in _mtx_assert (m=0xc219ade0, what=0, 
    file=0xc0548ffa "/usr/src/sys/vm/vm_page.c", line=761)
    at /usr/src/sys/kern/kern_mutex.c:855
#12 0xc048af79 in vm_page_alloc (object=0xc219ade0, pindex=0, req=0)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/vm/vm_page.c:761
#13 0xc047d60b in vm_fault_copy_entry (dst_map=0xc219de00, src_map=0xc219dd00, 
    dst_entry=0xc2198294, src_entry=0x0) at /usr/src/sys/vm/vm_fault.c:1073
#14 0xc0483e21 in vm_map_copy_entry (src_map=0xc219dd00, dst_map=0xc219de00, 
    src_entry=0xc2088960, dst_entry=0xc2198294)
    at /usr/src/sys/vm/vm_map.c:2376
#15 0xc0484166 in vmspace_fork (vm1=0xc219dd00)
    at /usr/src/sys/vm/vm_map.c:2491
#16 0xc047ec4e in vm_forkproc (td=0xc21815f0, p2=0xc23605ac, td2=0xc2181130, 
    flags=20) at /usr/src/sys/vm/vm_glue.c:624
#17 0xc03188dd in fork1 (td=0xc21815f0, flags=20, pages=0, procp=0xcfe06cd8)
    at /usr/src/sys/kern/kern_fork.c:654
#18 0xc031786b in fork (td=0xc21815f0, uap=0xcfe06d10)
    at /usr/src/sys/kern/kern_fork.c:102
#19 0xc04cb4b3 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 4096, tf_esi = 65536, tf_ebp = -1077946776, tf_isp = -807375500, tf_ebx = 64, tf_edx = 1307, tf_ecx = 672806144, tf_eax = 2, tf_trapno = 0, tf_err = 2, tf_eip = 672202127, tf_cs = 31, tf_eflags = 582, tf_esp = -1077946820, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1005
#20 0xc04baa9d in Xint0x80_syscall () at {standard input}:144
---Can't read userspace from dump, or kernel process---

(kgdb) q
 ~> exit
exit

Script done on Wed Sep  3 23:58:07 2003

>How-To-Repeat:
Burn (or simulate) with cdrecord and ATAPI CD-burner
>Fix:
Unknown
>Release-Note:
>Audit-Trail:
>Unformatted:

More information about the freebsd-bugs mailing list