Date: Sat, 12 Nov 2005 16:34:03 +0300 From: Alex Pivovarov <apivovarov@gmail.com> To: freebsd-usb@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hardware@freebsd.org, freebsd-bugs@freebsd.org Subject: (backtrace) cat /dev/ulpt0 -- causes fatal trap 12 Message-ID: <426b510c0511120534v65d07591j28e51290bf6aa0f8@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
running
#cat /dev/ulpt0
causes fatal trap 12
and system begins dumping.
printer HP LaserJet 1010 USB
-----------------------------------------------------------
Script started on Sat Nov 12 16:10:02 2005
alex@st1$ dmesg
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
=09The Regents of the University of California. All rights reserved.
FreeBSD 6.0-RELEASE #0: Sat Nov 12 15:02:22 MSK 2005
root@st1.fqdn:/usr/src/sys/i386/compile/st1deb
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) XP 1800+ (1531.02-MHz 686-class CPU)
Origin =3D "AuthenticAMD" Id =3D 0x681 Stepping =3D 1
Features=3D0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE=
,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
AMD Features=3D0xc0400800<SYSCALL,MMX+,3DNow+,3DNow>
real memory =3D 536805376 (511 MB)
avail memory =3D 520167424 (496 MB)
mptable_probe: MP Config Table has bad signature:
ACPI APIC Table: <Nvidia AWRDACPI>
ioapic0 <Version 1.1> irqs 0-23 on motherboard
acpi0: <Nvidia AWRDACPI> on motherboard
acpi0: Power Button (fixed)
pci_link0: <ACPI PCI Link LNK1> on acpi0
pci_link1: <ACPI PCI Link LNK2> irq 11 on acpi0
pci_link2: <ACPI PCI Link LNK3> on acpi0
pci_link3: <ACPI PCI Link LNK4> irq 12 on acpi0
pci_link4: <ACPI PCI Link LNK5> on acpi0
pci_link5: <ACPI PCI Link LUBA> irq 11 on acpi0
pci_link6: <ACPI PCI Link LUBB> irq 9 on acpi0
pci_link7: <ACPI PCI Link LMAC> on acpi0
pci_link8: <ACPI PCI Link LAPU> on acpi0
pci_link9: <ACPI PCI Link LACI> on acpi0
pci_link10: <ACPI PCI Link LMCI> on acpi0
pci_link11: <ACPI PCI Link LSMB> irq 12 on acpi0
pci_link12: <ACPI PCI Link LUB2> irq 5 on acpi0
pci_link13: <ACPI PCI Link LFIR> on acpi0
pci_link14: <ACPI PCI Link L3CM> on acpi0
pci_link15: <ACPI PCI Link LIDE> on acpi0
pci_link16: <ACPI PCI Link APC1> irq 16 on acpi0
pci_link17: <ACPI PCI Link APC2> irq 17 on acpi0
pci_link18: <ACPI PCI Link APC3> irq 18 on acpi0
pci_link19: <ACPI PCI Link APC4> irq 19 on acpi0
pci_link20: <ACPI PCI Link APC5> irq 16 on acpi0
pci_link21: <ACPI PCI Link APCF> irq 0 on acpi0
pci_link22: <ACPI PCI Link APCG> irq 0 on acpi0
pci_link23: <ACPI PCI Link APCH> irq 0 on acpi0
pci_link24: <ACPI PCI Link APCI> irq 0 on acpi0
pci_link25: <ACPI PCI Link APCJ> irq 0 on acpi0
pci_link26: <ACPI PCI Link APCK> irq 0 on acpi0
pci_link27: <ACPI PCI Link APCS> irq 23 on acpi0
pci_link28: <ACPI PCI Link APCL> irq 0 on acpi0
pci_link29: <ACPI PCI Link APCM> irq 0 on acpi0
pci_link30: <ACPI PCI Link AP3C> irq 0 on acpi0
pci_link31: <ACPI PCI Link APCZ> irq 0 on acpi0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <NVIDIA nForce2 AGP Controller> mem 0xd8000000-0xdbffffff at
device 0.0 on pci0
pci0: <memory, RAM> at device 0.1 (no driver attached)
pci0: <memory, RAM> at device 0.2 (no driver attached)
pci0: <memory, RAM> at device 0.3 (no driver attached)
pci0: <memory, RAM> at device 0.4 (no driver attached)
pci0: <memory, RAM> at device 0.5 (no driver attached)
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
ohci0: <OHCI (generic) USB controller> mem 0xe0001000-0xe0001fff irq
20 at device 2.0 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: SMM does not respond, resetting
usb0: <OHCI (generic) USB controller> on ohci0
usb0: USB revision 1.0
uhub0: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ohci1: <OHCI (generic) USB controller> mem 0xe0002000-0xe0002fff irq
21 at device 2.1 on pci0
ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: SMM does not respond, resetting
usb1: <OHCI (generic) USB controller> on ohci1
usb1: USB revision 1.0
uhub1: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 3 ports with 3 removable, self powered
ehci0: <EHCI (generic) USB 2.0 controller> mem 0xe0003000-0xe00030ff
irq 22 at device 2.2 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 4 ports each: usb0 usb1
usb2: <EHCI (generic) USB 2.0 controller> on ehci0
usb2: USB revision 2.0
uhub2: nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 6 ports with 6 removable, self powered
pcib1: <ACPI PCI-PCI bridge> at device 8.0 on pci0
pci1: <ACPI PCI bus> on pcib1
emu10kx0: <Creative SBLive! 5.1 [SB0100]> port 0xd000-0xd01f irq 19 at
device 9.0 on pci1
pcm0: <EMU10Kx PCM Interface> on emu10kx0
pcm0: <eMicro EM28028 AC97 Codec>
pci1: <input device> at device 9.1 (no driver attached)
rl0: <RealTek 8139 10/100BaseTX> port 0xd800-0xd8ff mem
0xdf000000-0xdf0000ff irq 17 at device 11.0 on pci1
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: 00:50:70:25:19:13
atapci0: <nVidia nForce2 UDMA133 controller> port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 9.0 on
pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
pcib2: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci2: <ACPI PCI bus> on pcib2
pci2: <display, VGA> at device 0.0 (no driver attached)
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ppc0: <Standard parallel printer port> port 0x378-0x37f irq 7 on acpi0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xd0000-0xd3fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=3D0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ums0: Logitech USB Receiver, rev 1.10/9.10, addr 2, iclass 3/1
ums0: 5 buttons and Z dir.
ulpt0: Hewlett-Packard hp LaserJet 1010, rev 1.10/1.00, addr 2, iclass 7/1
ulpt0: using bi-directional mode
Timecounter "TSC" frequency 1531023026 Hz quality 800
Timecounters tick every 1.000 msec
ad0: 190782MB <Seagate ST3200822A 3.01> at ata0-master UDMA100
ad1: 58644MB <IC35L060AVER07 0 ER6OA46A> at ata0-slave UDMA100
acd0: DVDR <LITE-ON DVDRW LDW-851S/GS0H> at ata1-master UDMA33
acd1: DVDROM <DVD-ROM DDU1621/VER S3.5> at ata1-slave UDMA33
WARNING: Expected rawoffset 78332940, found 88582410
Trying to mount root from ufs:/dev/ad1s3a
rl0: link state changed to UP
alex@st1$ exit
exit
Script done on Sat Nov 12 16:10:09 2005
----------------------------------------------------------------
alex@st1$ uname -a
FreeBSD st1.fqdn 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Sat Nov 12
15:02:22 MSK 2005 root@st1.fqdn:/usr/src/sys/i386/compile/st1deb=20
i386
----------------------------------------------------------------
Script started on Sat Nov 12 15:32:53 2005
You have mail.
st1# kgdb kernel.debug /usr/crash/vmcore.0
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you ar=
e
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
Fatal trap 12: page fault while in kernel mode
fault virtual address=09=3D 0x24
fault code=09=09=3D supervisor read, page not present
instruction pointer=09=3D 0x20:0xc04c133f
stack pointer=09 =3D 0x28:0xda74eb00
frame pointer=09 =3D 0x28:0xda74eb30
code segment=09=09=3D base 0x0, limit 0xfffff, type 0x1b
=09=09=09=3D DPL 0, pres 1, def32 1, gran 1
processor eflags=09=3D interrupt enabled, resume, IOPL =3D 0
current process=09=09=3D 559 (cat)
trap number=09=09=3D 12
panic: page fault
Uptime: 35s
Dumping 511 MB (2 chunks)
chunk 0: 1MB (160 pages) ... ok
chunk 1: 511MB (130800 pages) 495 479 (CTRL-C to abort) 463 447 431
415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159
143 127 111 95 79 63 47 31 15
#0 doadump () at pcpu.h:165
165=09=09__asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));
(kgdb) list *0xc04c133f
0xc04c133f is in ohci_abort_xfer (../../../dev/usb/ohci.c:2351).
2346=09=09=09ohci_dump_tds(p);
2347=09=09}
2348=09#endif
2349=09=09headp =3D le32toh(sed->ed.ed_headp) & OHCI_HEADMASK;
2350=09=09hit =3D 0;
2351=09=09for (; p->xfer =3D=3D xfer; p =3D n) {
2352=09=09=09hit |=3D headp =3D=3D p->physaddr;
2353=09=09=09n =3D p->nexttd;
2354=09=09=09ohci_free_std(sc, p);
2355=09=09}
(kgdb) list *0xc=08=1B[Kda74eb00
No source file for address 0xda74eb00.
(kgdb) list *0xda74eb30
No source file for address 0xda74eb30.
(kgdb) backtrace
#0 doadump () at pcpu.h:165
#1 0xc052fe88 in boot (howto=3D260) at ../../../kern/kern_shutdown.c:399
#2 0xc05301b6 in panic (fmt=3D0xc0697870 "%s")
at ../../../kern/kern_shutdown.c:555
#3 0xc0673c3c in trap_fatal (frame=3D0xda74eac0, eva=3D0)
at ../../../i386/i386/trap.c:831
#4 0xc0673952 in trap_pfault (frame=3D0xda74eac0, usermode=3D0, eva=3D36)
at ../../../i386/i386/trap.c:742
#5 0xc067351d in trap (frame=3D
{tf_fs =3D 8, tf_es =3D 40, tf_ds =3D 40, tf_edi =3D -1046371584, tf_=
esi
=3D -1046371584, tf_ebp =3D -629871824, tf_isp =3D -629871892, tf_ebx =3D
-1045769856, tf_edx =3D 0, tf_ecx =3D -1050048672, tf_eax =3D 2469776,
tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1068756161, tf_cs =3D 32,
tf_eflags =3D 590342, tf_esp =3D -1050042368, tf_ss =3D 20}) at
../../../i386/i386/trap.c:432
#6 0xc0660dea in calltrap () at ../../../i386/i386/exception.s:139
#7 0xc04c133f in ohci_abort_xfer (xfer=3D0xc1a1a300, status=3DUSBD_CANCELL=
ED)
at ../../../dev/usb/ohci.c:2350
#8 0xc04c2259 in ohci_device_bulk_abort (xfer=3D0x25af90)
at ../../../dev/usb/ohci.c:3049
#9 0xc04d06e9 in usbd_ar_pipe (pipe=3D0xc1aad180)
at ../../../dev/usb/usbdi.c:762
#10 0xc04d0391 in usbd_abort_pipe (pipe=3D0x25af90)
at ../../../dev/usb/usbdi.c:556
#11 0xc04d18a3 in usbd_bulk_transfer (xfer=3D0xc1a1a300, pipe=3D0xc1aad180,
---Type <return> to continue, or q <return> to quit---
flags=3D5, timeout=3D2469776, buf=3D0x25af90, size=3D0xda74ebbc,
lbl=3D0x25af90 <Address 0x25af90 out of bounds>)
at ../../../dev/usb/usbdi_util.c:458
#12 0xc04c8378 in ulpt_do_read (sc=3D0xc16c9880, uio=3D0xda74ecb0, flags=3D=
0)
at ../../../dev/usb/ulpt.c:765
#13 0xc04c841d in ulptread (dev=3D0x25af90, uio=3D0x25af90, flags=3D2469776=
)
at ../../../dev/usb/ulpt.c:795
#14 0xc04fe23a in giant_read (dev=3D0xc16d9600, uio=3D0x25af90, ioflag=3D24=
69776)
at ../../../kern/kern_conf.c:301
#15 0xc04d5899 in devfs_read_f (fp=3D0xc17c2b88, uio=3D0xda74ecb0,
cred=3D0xc1aacb80, flags=3D0, td=3D0xc1a154b0)
at ../../../fs/devfs/devfs_vnops.c:779
#16 0xc05581ec in dofileread (td=3D0xc1a154b0, fd=3D2469776, fp=3D0xc17c2b8=
8,
auio=3D0xda74ecb0, offset=3DUnhandled dwarf expression opcode 0x93
) at file.h:234
#17 0xc0558000 in kern_readv (td=3D0xc1a154b0, fd=3D3, auio=3D0x25af90)
at ../../../kern/sys_generic.c:192
#18 0xc0557ebf in read (td=3D0x25af90, uap=3D0xc1698760)
at ../../../kern/sys_generic.c:116
#19 0xc0674012 in syscall (frame=3D
{tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59, tf_edi =3D 1, tf_esi =3D
-1077940763, tf_ebp =3D -1077941144, tf_isp =3D -629871260, tf_ebx =3D 3,
tf_edx =3D 134529024, tf_ecx =3D 1, tf_eax =3D 3, tf_trapno =3D 12, tf_err =
=3D
2, tf_eip =3D 671913855, tf_cs =3D 51, tf_eflags =3D 518, tf_esp =3D
-1077941284, tf_ss =3D 59})
at ../../../i386/i386/trap.c:976
---Type <return> to continue, or q <return> to quit---
#20 0xc0660e3f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
#21 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) where
#0 doadump () at pcpu.h:165
#1 0xc052fe88 in boot (howto=3D260) at ../../../kern/kern_shutdown.c:399
#2 0xc05301b6 in panic (fmt=3D0xc0697870 "%s")
at ../../../kern/kern_shutdown.c:555
#3 0xc0673c3c in trap_fatal (frame=3D0xda74eac0, eva=3D0)
at ../../../i386/i386/trap.c:831
#4 0xc0673952 in trap_pfault (frame=3D0xda74eac0, usermode=3D0, eva=3D36)
at ../../../i386/i386/trap.c:742
#5 0xc067351d in trap (frame=3D
{tf_fs =3D 8, tf_es =3D 40, tf_ds =3D 40, tf_edi =3D -1046371584, tf_=
esi
=3D -1046371584, tf_ebp =3D -629871824, tf_isp =3D -629871892, tf_ebx =3D
-1045769856, tf_edx =3D 0, tf_ecx =3D -1050048672, tf_eax =3D 2469776,
tf_trapno =3D 12, tf_err =3D 0, tf_eip =3D -1068756161, tf_cs =3D 32,
tf_eflags =3D 590342, tf_esp =3D -1050042368, tf_ss =3D 20}) at
../../../i386/i386/trap.c:432
#6 0xc0660dea in calltrap () at ../../../i386/i386/exception.s:139
#7 0xc04c133f in ohci_abort_xfer (xfer=3D0xc1a1a300, status=3DUSBD_CANCELL=
ED)
at ../../../dev/usb/ohci.c:2350
#8 0xc04c2259 in ohci_device_bulk_abort (xfer=3D0x25af90)
at ../../../dev/usb/ohci.c:3049
#9 0xc04d06e9 in usbd_ar_pipe (pipe=3D0xc1aad180)
at ../../../dev/usb/usbdi.c:762
#10 0xc04d0391 in usbd_abort_pipe (pipe=3D0x25af90)
at ../../../dev/usb/usbdi.c:556
#11 0xc04d18a3 in usbd_bulk_transfer (xfer=3D0xc1a1a300, pipe=3D0xc1aad180,
---Type <return> to continue, or q <return> to quit---
flags=3D5, timeout=3D2469776, buf=3D0x25af90, size=3D0xda74ebbc,
lbl=3D0x25af90 <Address 0x25af90 out of bounds>)
at ../../../dev/usb/usbdi_util.c:458
#12 0xc04c8378 in ulpt_do_read (sc=3D0xc16c9880, uio=3D0xda74ecb0, flags=3D=
0)
at ../../../dev/usb/ulpt.c:765
#13 0xc04c841d in ulptread (dev=3D0x25af90, uio=3D0x25af90, flags=3D2469776=
)
at ../../../dev/usb/ulpt.c:795
#14 0xc04fe23a in giant_read (dev=3D0xc16d9600, uio=3D0x25af90, ioflag=3D24=
69776)
at ../../../kern/kern_conf.c:301
#15 0xc04d5899 in devfs_read_f (fp=3D0xc17c2b88, uio=3D0xda74ecb0,
cred=3D0xc1aacb80, flags=3D0, td=3D0xc1a154b0)
at ../../../fs/devfs/devfs_vnops.c:779
#16 0xc05581ec in dofileread (td=3D0xc1a154b0, fd=3D2469776, fp=3D0xc17c2b8=
8,
auio=3D0xda74ecb0, offset=3DUnhandled dwarf expression opcode 0x93
) at file.h:234
#17 0xc0558000 in kern_readv (td=3D0xc1a154b0, fd=3D3, auio=3D0x25af90)
at ../../../kern/sys_generic.c:192
#18 0xc0557ebf in read (td=3D0x25af90, uap=3D0xc1698760)
at ../../../kern/sys_generic.c:116
#19 0xc0674012 in syscall (frame=3D
{tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59, tf_edi =3D 1, tf_esi =3D
-1077940763, tf_ebp =3D -1077941144, tf_isp =3D -629871260, tf_ebx =3D 3,
tf_edx =3D 134529024, tf_ecx =3D 1, tf_eax =3D 3, tf_trapno =3D 12, tf_err =
=3D
2, tf_eip =3D 671913855, tf_cs =3D 51, tf_eflags =3D 518, tf_esp =3D
-1077941284, tf_ss =3D 59})
at ../../../i386/i386/trap.c:976
---Type <return> to continue, or q <return> to quit---
#20 0xc0660e3f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
#21 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) quit
st1# exit
exit
Script done on Sat Nov 12 15:42:19 2005
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?426b510c0511120534v65d07591j28e51290bf6aa0f8>