scsipi crash

[Christoph Egger <Christoph_Egger%gmx.de@localhost>]

Hi!

On attaching an USB disk, I got this crash:


sd0(umass0:0:0:0): generic HBA error
fatal protection fault in supervisor mode
trap type 4 code 0 rip 0xffffffff806b699f cs 8 rflags 10246 cr2
0x7f7ffd710f70 c
pl 6 rsp 0xffff80004e46b758
kernel: protection fault trap, code=0
Stopped in pid 0.60 (system) at netbsd:bufq_get+0x11: jmp *%r11d
?
db{0}> bt
bufq_get+0x11
scsipi_execute_xs+0x12d
scsipi_mode_sense_big+0x6b
sd_mode_sense+0x84
sd_get_parms_page4+0x7d
sd_get_parms+0x3b1
sdattach+0x149
config_attach_loc+0x16c
scsi_probe_bus+0x4d2
scsibus_config+0x80
scsipi_completion_thread+0x23
db{0}> sh reg
[...]
r11 0xe94bad0e70d23495
[...]
db{0}>



The register r11 contains a non-canonical address that caused the
protection fault. I suppose, that this is a wild pointer.

Christoph