From owner-freebsd-bugs@FreeBSD.ORG Sat Oct 13 08:40:02 2007 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 36B8116A417 for ; Sat, 13 Oct 2007 08:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 1B22013C468 for ; Sat, 13 Oct 2007 08:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.1/8.14.1) with ESMTP id l9D8e2W4070251 for ; Sat, 13 Oct 2007 08:40:02 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.1/8.14.1/Submit) id l9D8e2b0070250; Sat, 13 Oct 2007 08:40:02 GMT (envelope-from gnats) Resent-Date: Sat, 13 Oct 2007 08:40:02 GMT Resent-Message-Id: <200710130840.l9D8e2b0070250@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "\"John Merryweather Cooper\" Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 11CAC16A420 for ; Sat, 13 Oct 2007 08:33:40 +0000 (UTC) (envelope-from john_m_cooper@yahoo.com) Received: from icarus.it.wsu.edu (icarus.it.wsu.edu [134.121.1.46]) by mx1.freebsd.org (Postfix) with ESMTP id D580913C468 for ; Sat, 13 Oct 2007 08:33:39 +0000 (UTC) (envelope-from john_m_cooper@yahoo.com) Received: from borgdemon3.temp.wsu.edu (res244074.resnet.wsu.edu [134.121.244.74]) by icarus.it.wsu.edu (8.13.6/8.13.6) with ESMTP id l9D8XdHe404955 for ; Sat, 13 Oct 2007 01:33:39 -0700 (PDT) Received: from borgdemon3.temp.wsu.edu (localhost [127.0.0.1]) by borgdemon3.temp.wsu.edu (Postfix) with ESMTP id 418DB39860 for ; Sat, 13 Oct 2007 01:33:34 -0700 (PDT) Message-Id: <1192264414.53507@borgdemon3.temp.wsu.edu> Date: Sat, 13 Oct 2007 01:33:34 -0700 From: "\"John Merryweather Cooper\" To: "FreeBSD gnats submit" X-Send-Pr-Version: gtk-send-pr 0.4.8 Cc: Subject: kern/117150: USB zyd device under moderate load panics system X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Oct 2007 08:40:02 -0000 >Number: 117150 >Category: kern >Synopsis: USB zyd device under moderate load panics system >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Oct 13 08:40:01 UTC 2007 >Closed-Date: >Last-Modified: >Originator: John Merryweather Cooper >Release: FreeBSD 7.0-PRERELEASE amd64 >Organization: >Environment: System: FreeBSD 7.0-PRERELEASE #13: Fri Oct 12 02:08:13 PDT 2007 root@borgdemon3.temp.wsu.edu:/usr/obj/usr/src/sys/TURION >Description: USB zyd device triggers core dumps reliably (every time) under moderate load. See below for details. >How-To-Repeat: 1) plug in USB zyd device; 2) run moderate traffice through it (# cd /usr/src && make update) 3) CRASH! borgdemon3# kgdb kernel.debug /var/crash/vmcore.0 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd". Cannot access memory at address 0x1030000 Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0x2734 fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff808a84fa stack pointer = 0x10:0xffffffffab8dfaf0 frame pointer = 0x10:0xffffffffab8dfb30 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 23 (irq22: ohci0 ehci0) trap number = 12 panic: page fault cpuid = 1 Uptime: 33m34s Physical memory: 1973 MB Dumping 138 MB: 123 107 91 75 59 43 27 11 #0 doadump () at pcpu.h:194 194 __asm __volatile("movq %%gs:0,%0" : "=r" (td)); (kgdb) >Fix: unknown >Release-Note: >Audit-Trail: >Unformatted: