(backtrace) cat /dev/ulpt0 -- causes fatal trap 12

From: Alex Pivovarov (apivovarov_at_gmail.com)
Date: 11/12/05

  • Next message: albi: "Re: SSH From within a Jail"
    Date: Sat, 12 Nov 2005 16:34:03 +0300
    To: freebsd-usb@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hardware@freebsd.org, freebsd-bugs@freebsd.org
    
    

    running
    #cat /dev/ulpt0

    causes fatal trap 12
    and system begins dumping.

    printer HP LaserJet 1010 USB

    -----------------------------------------------------------
    Script started on Sat Nov 12 16:10:02 2005
    alex@st1$ dmesg
    Copyright (c) 1992-2005 The FreeBSD Project.
    Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
            The Regents of the University of California. All rights reserved.
    FreeBSD 6.0-RELEASE #0: Sat Nov 12 15:02:22 MSK 2005
        root@st1.fqdn:/usr/src/sys/i386/compile/st1deb
    Timecounter "i8254" frequency 1193182 Hz quality 0
    CPU: AMD Athlon(tm) XP 1800+ (1531.02-MHz 686-class CPU)
      Origin = "AuthenticAMD" Id = 0x681 Stepping = 1
      Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
      AMD Features=0xc0400800<SYSCALL,MMX+,3DNow+,3DNow>
    real memory = 536805376 (511 MB)
    avail memory = 520167424 (496 MB)
    mptable_probe: MP Config Table has bad signature:
    ACPI APIC Table: <Nvidia AWRDACPI>
    ioapic0 <Version 1.1> irqs 0-23 on motherboard
    acpi0: <Nvidia AWRDACPI> on motherboard
    acpi0: Power Button (fixed)
    pci_link0: <ACPI PCI Link LNK1> on acpi0
    pci_link1: <ACPI PCI Link LNK2> irq 11 on acpi0
    pci_link2: <ACPI PCI Link LNK3> on acpi0
    pci_link3: <ACPI PCI Link LNK4> irq 12 on acpi0
    pci_link4: <ACPI PCI Link LNK5> on acpi0
    pci_link5: <ACPI PCI Link LUBA> irq 11 on acpi0
    pci_link6: <ACPI PCI Link LUBB> irq 9 on acpi0
    pci_link7: <ACPI PCI Link LMAC> on acpi0
    pci_link8: <ACPI PCI Link LAPU> on acpi0
    pci_link9: <ACPI PCI Link LACI> on acpi0
    pci_link10: <ACPI PCI Link LMCI> on acpi0
    pci_link11: <ACPI PCI Link LSMB> irq 12 on acpi0
    pci_link12: <ACPI PCI Link LUB2> irq 5 on acpi0
    pci_link13: <ACPI PCI Link LFIR> on acpi0
    pci_link14: <ACPI PCI Link L3CM> on acpi0
    pci_link15: <ACPI PCI Link LIDE> on acpi0
    pci_link16: <ACPI PCI Link APC1> irq 16 on acpi0
    pci_link17: <ACPI PCI Link APC2> irq 17 on acpi0
    pci_link18: <ACPI PCI Link APC3> irq 18 on acpi0
    pci_link19: <ACPI PCI Link APC4> irq 19 on acpi0
    pci_link20: <ACPI PCI Link APC5> irq 16 on acpi0
    pci_link21: <ACPI PCI Link APCF> irq 0 on acpi0
    pci_link22: <ACPI PCI Link APCG> irq 0 on acpi0
    pci_link23: <ACPI PCI Link APCH> irq 0 on acpi0
    pci_link24: <ACPI PCI Link APCI> irq 0 on acpi0
    pci_link25: <ACPI PCI Link APCJ> irq 0 on acpi0
    pci_link26: <ACPI PCI Link APCK> irq 0 on acpi0
    pci_link27: <ACPI PCI Link APCS> irq 23 on acpi0
    pci_link28: <ACPI PCI Link APCL> irq 0 on acpi0
    pci_link29: <ACPI PCI Link APCM> irq 0 on acpi0
    pci_link30: <ACPI PCI Link AP3C> irq 0 on acpi0
    pci_link31: <ACPI PCI Link APCZ> irq 0 on acpi0
    Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
    acpi_timer0: <24-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
    cpu0: <ACPI CPU> on acpi0
    acpi_button0: <Power Button> on acpi0
    acpi_button1: <Sleep Button> on acpi0
    pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0
    pci0: <ACPI PCI bus> on pcib0
    agp0: <NVIDIA nForce2 AGP Controller> mem 0xd8000000-0xdbffffff at
    device 0.0 on pci0
    pci0: <memory, RAM> at device 0.1 (no driver attached)
    pci0: <memory, RAM> at device 0.2 (no driver attached)
    pci0: <memory, RAM> at device 0.3 (no driver attached)
    pci0: <memory, RAM> at device 0.4 (no driver attached)
    pci0: <memory, RAM> at device 0.5 (no driver attached)
    isab0: <PCI-ISA bridge> at device 1.0 on pci0
    isa0: <ISA bus> on isab0
    pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
    ohci0: <OHCI (generic) USB controller> mem 0xe0001000-0xe0001fff irq
    20 at device 2.0 on pci0
    ohci0: [GIANT-LOCKED]
    usb0: OHCI version 1.0, legacy support
    usb0: SMM does not respond, resetting
    usb0: <OHCI (generic) USB controller> on ohci0
    usb0: USB revision 1.0
    uhub0: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
    uhub0: 3 ports with 3 removable, self powered
    ohci1: <OHCI (generic) USB controller> mem 0xe0002000-0xe0002fff irq
    21 at device 2.1 on pci0
    ohci1: [GIANT-LOCKED]
    usb1: OHCI version 1.0, legacy support
    usb1: SMM does not respond, resetting
    usb1: <OHCI (generic) USB controller> on ohci1
    usb1: USB revision 1.0
    uhub1: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
    uhub1: 3 ports with 3 removable, self powered
    ehci0: <EHCI (generic) USB 2.0 controller> mem 0xe0003000-0xe00030ff
    irq 22 at device 2.2 on pci0
    ehci0: [GIANT-LOCKED]
    usb2: EHCI version 1.0
    usb2: companion controllers, 4 ports each: usb0 usb1
    usb2: <EHCI (generic) USB 2.0 controller> on ehci0
    usb2: USB revision 2.0
    uhub2: nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
    uhub2: 6 ports with 6 removable, self powered
    pcib1: <ACPI PCI-PCI bridge> at device 8.0 on pci0
    pci1: <ACPI PCI bus> on pcib1
    emu10kx0: <Creative SBLive! 5.1 [SB0100]> port 0xd000-0xd01f irq 19 at
    device 9.0 on pci1
    pcm0: <EMU10Kx PCM Interface> on emu10kx0
    pcm0: <eMicro EM28028 AC97 Codec>
    pci1: <input device> at device 9.1 (no driver attached)
    rl0: <RealTek 8139 10/100BaseTX> port 0xd800-0xd8ff mem
    0xdf000000-0xdf0000ff irq 17 at device 11.0 on pci1
    miibus0: <MII bus> on rl0
    rlphy0: <RealTek internal media interface> on miibus0
    rlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
    rl0: Ethernet address: 00:50:70:25:19:13
    atapci0: <nVidia nForce2 UDMA133 controller> port
    0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 9.0 on
    pci0
    ata0: <ATA channel 0> on atapci0
    ata1: <ATA channel 1> on atapci0
    pcib2: <ACPI PCI-PCI bridge> at device 30.0 on pci0
    pci2: <ACPI PCI bus> on pcib2
    pci2: <display, VGA> at device 0.0 (no driver attached)
    fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
    fdc0: [FAST]
    fd0: <1440-KB 3.5" drive> on fdc0 drive 0
    ppc0: <Standard parallel printer port> port 0x378-0x37f irq 7 on acpi0
    ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
    ppbus0: <Parallel port bus> on ppc0
    lpt0: <Printer> on ppbus0
    lpt0: Interrupt-driven port
    atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
    atkbd0: <AT Keyboard> irq 1 on atkbdc0
    kbd0 at atkbd0
    atkbd0: [GIANT-LOCKED]
    npx0: [FAST]
    npx0: <math processor> on motherboard
    npx0: INT 16 interface
    pmtimer0 on isa0
    orm0: <ISA Option ROM> at iomem 0xd0000-0xd3fff on isa0
    sc0: <System console> at flags 0x100 on isa0
    sc0: VGA <16 virtual consoles, flags=0x300>
    vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
    ums0: Logitech USB Receiver, rev 1.10/9.10, addr 2, iclass 3/1
    ums0: 5 buttons and Z dir.
    ulpt0: Hewlett-Packard hp LaserJet 1010, rev 1.10/1.00, addr 2, iclass 7/1
    ulpt0: using bi-directional mode
    Timecounter "TSC" frequency 1531023026 Hz quality 800
    Timecounters tick every 1.000 msec
    ad0: 190782MB <Seagate ST3200822A 3.01> at ata0-master UDMA100
    ad1: 58644MB <IC35L060AVER07 0 ER6OA46A> at ata0-slave UDMA100
    acd0: DVDR <LITE-ON DVDRW LDW-851S/GS0H> at ata1-master UDMA33
    acd1: DVDROM <DVD-ROM DDU1621/VER S3.5> at ata1-slave UDMA33
    WARNING: Expected rawoffset 78332940, found 88582410
    Trying to mount root from ufs:/dev/ad1s3a
    rl0: link state changed to UP
    alex@st1$ exit
    exit

    Script done on Sat Nov 12 16:10:09 2005
    ----------------------------------------------------------------
    alex@st1$ uname -a
    FreeBSD st1.fqdn 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Sat Nov 12
    15:02:22 MSK 2005 root@st1.fqdn:/usr/src/sys/i386/compile/st1deb
    i386

    ----------------------------------------------------------------
    Script started on Sat Nov 12 15:32:53 2005
    You have mail.
    st1# kgdb kernel.debug /usr/crash/vmcore.0

    [GDB will not be able to debug user-mode threads:
    /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
    GNU gdb 6.1.1 [FreeBSD]
    Copyright 2004 Free Software Foundation, Inc.
    GDB is free software, covered by the GNU General Public License, and you are
    welcome to change it and/or distribute copies of it under certain conditions.
    Type "show copying" to see the conditions.
    There is absolutely no warranty for GDB. Type "show warranty" for details.
    This GDB was configured as "i386-marcel-freebsd".

    Unread portion of the kernel message buffer:

    Fatal trap 12: page fault while in kernel mode
    fault virtual address = 0x24
    fault code = supervisor read, page not present
    instruction pointer = 0x20:0xc04c133f
    stack pointer = 0x28:0xda74eb00
    frame pointer = 0x28:0xda74eb30
    code segment = base 0x0, limit 0xfffff, type 0x1b
                            = DPL 0, pres 1, def32 1, gran 1
    processor eflags = interrupt enabled, resume, IOPL = 0
    current process = 559 (cat)
    trap number = 12
    panic: page fault
    Uptime: 35s
    Dumping 511 MB (2 chunks)
      chunk 0: 1MB (160 pages) ... ok
      chunk 1: 511MB (130800 pages) 495 479 (CTRL-C to abort) 463 447 431
    415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159
    143 127 111 95 79 63 47 31 15

    #0 doadump () at pcpu.h:165
    165 __asm __volatile("movl %%fs:0,%0" : "=r" (td));
    (kgdb) list *0xc04c133f
    0xc04c133f is in ohci_abort_xfer (../../../dev/usb/ohci.c:2351).
    2346 ohci_dump_tds(p);
    2347 }
    2348 #endif
    2349 headp = le32toh(sed->ed.ed_headp) & OHCI_HEADMASK;
    2350 hit = 0;
    2351 for (; p->xfer == xfer; p = n) {
    2352 hit |= headp == p->physaddr;
    2353 n = p->nexttd;
    2354 ohci_free_std(sc, p);
    2355 }
    (kgdb) list *0xcda74eb00
    No source file for address 0xda74eb00.
    (kgdb) list *0xda74eb30
    No source file for address 0xda74eb30.
    (kgdb) backtrace
    #0 doadump () at pcpu.h:165
    #1 0xc052fe88 in boot (howto=260) at ../../../kern/kern_shutdown.c:399
    #2 0xc05301b6 in panic (fmt=0xc0697870 "%s")
        at ../../../kern/kern_shutdown.c:555
    #3 0xc0673c3c in trap_fatal (frame=0xda74eac0, eva=0)
        at ../../../i386/i386/trap.c:831
    #4 0xc0673952 in trap_pfault (frame=0xda74eac0, usermode=0, eva=36)
        at ../../../i386/i386/trap.c:742
    #5 0xc067351d in trap (frame=
          {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1046371584, tf_esi
    = -1046371584, tf_ebp = -629871824, tf_isp = -629871892, tf_ebx =
    -1045769856, tf_edx = 0, tf_ecx = -1050048672, tf_eax = 2469776,
    tf_trapno = 12, tf_err = 0, tf_eip = -1068756161, tf_cs = 32,
    tf_eflags = 590342, tf_esp = -1050042368, tf_ss = 20}) at
    ../../../i386/i386/trap.c:432
    #6 0xc0660dea in calltrap () at ../../../i386/i386/exception.s:139
    #7 0xc04c133f in ohci_abort_xfer (xfer=0xc1a1a300, status=USBD_CANCELLED)
        at ../../../dev/usb/ohci.c:2350
    #8 0xc04c2259 in ohci_device_bulk_abort (xfer=0x25af90)
        at ../../../dev/usb/ohci.c:3049
    #9 0xc04d06e9 in usbd_ar_pipe (pipe=0xc1aad180)
        at ../../../dev/usb/usbdi.c:762
    #10 0xc04d0391 in usbd_abort_pipe (pipe=0x25af90)
        at ../../../dev/usb/usbdi.c:556
    #11 0xc04d18a3 in usbd_bulk_transfer (xfer=0xc1a1a300, pipe=0xc1aad180,
    ---Type <return> to continue, or q <return> to quit---
        flags=5, timeout=2469776, buf=0x25af90, size=0xda74ebbc,
        lbl=0x25af90 <Address 0x25af90 out of bounds>)
        at ../../../dev/usb/usbdi_util.c:458
    #12 0xc04c8378 in ulpt_do_read (sc=0xc16c9880, uio=0xda74ecb0, flags=0)
        at ../../../dev/usb/ulpt.c:765
    #13 0xc04c841d in ulptread (dev=0x25af90, uio=0x25af90, flags=2469776)
        at ../../../dev/usb/ulpt.c:795
    #14 0xc04fe23a in giant_read (dev=0xc16d9600, uio=0x25af90, ioflag=2469776)
        at ../../../kern/kern_conf.c:301
    #15 0xc04d5899 in devfs_read_f (fp=0xc17c2b88, uio=0xda74ecb0,
        cred=0xc1aacb80, flags=0, td=0xc1a154b0)
        at ../../../fs/devfs/devfs_vnops.c:779
    #16 0xc05581ec in dofileread (td=0xc1a154b0, fd=2469776, fp=0xc17c2b88,
        auio=0xda74ecb0, offset=Unhandled dwarf expression opcode 0x93
    ) at file.h:234
    #17 0xc0558000 in kern_readv (td=0xc1a154b0, fd=3, auio=0x25af90)
        at ../../../kern/sys_generic.c:192
    #18 0xc0557ebf in read (td=0x25af90, uap=0xc1698760)
        at ../../../kern/sys_generic.c:116
    #19 0xc0674012 in syscall (frame=
          {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 1, tf_esi =
    -1077940763, tf_ebp = -1077941144, tf_isp = -629871260, tf_ebx = 3,
    tf_edx = 134529024, tf_ecx = 1, tf_eax = 3, tf_trapno = 12, tf_err =
    2, tf_eip = 671913855, tf_cs = 51, tf_eflags = 518, tf_esp =
    -1077941284, tf_ss = 59})
        at ../../../i386/i386/trap.c:976
    ---Type <return> to continue, or q <return> to quit---
    #20 0xc0660e3f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
    #21 0x00000033 in ?? ()
    Previous frame inner to this frame (corrupt stack?)
    (kgdb) where
    #0 doadump () at pcpu.h:165
    #1 0xc052fe88 in boot (howto=260) at ../../../kern/kern_shutdown.c:399
    #2 0xc05301b6 in panic (fmt=0xc0697870 "%s")
        at ../../../kern/kern_shutdown.c:555
    #3 0xc0673c3c in trap_fatal (frame=0xda74eac0, eva=0)
        at ../../../i386/i386/trap.c:831
    #4 0xc0673952 in trap_pfault (frame=0xda74eac0, usermode=0, eva=36)
        at ../../../i386/i386/trap.c:742
    #5 0xc067351d in trap (frame=
          {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1046371584, tf_esi
    = -1046371584, tf_ebp = -629871824, tf_isp = -629871892, tf_ebx =
    -1045769856, tf_edx = 0, tf_ecx = -1050048672, tf_eax = 2469776,
    tf_trapno = 12, tf_err = 0, tf_eip = -1068756161, tf_cs = 32,
    tf_eflags = 590342, tf_esp = -1050042368, tf_ss = 20}) at
    ../../../i386/i386/trap.c:432
    #6 0xc0660dea in calltrap () at ../../../i386/i386/exception.s:139
    #7 0xc04c133f in ohci_abort_xfer (xfer=0xc1a1a300, status=USBD_CANCELLED)
        at ../../../dev/usb/ohci.c:2350
    #8 0xc04c2259 in ohci_device_bulk_abort (xfer=0x25af90)
        at ../../../dev/usb/ohci.c:3049
    #9 0xc04d06e9 in usbd_ar_pipe (pipe=0xc1aad180)
        at ../../../dev/usb/usbdi.c:762
    #10 0xc04d0391 in usbd_abort_pipe (pipe=0x25af90)
        at ../../../dev/usb/usbdi.c:556
    #11 0xc04d18a3 in usbd_bulk_transfer (xfer=0xc1a1a300, pipe=0xc1aad180,
    ---Type <return> to continue, or q <return> to quit---
        flags=5, timeout=2469776, buf=0x25af90, size=0xda74ebbc,
        lbl=0x25af90 <Address 0x25af90 out of bounds>)
        at ../../../dev/usb/usbdi_util.c:458
    #12 0xc04c8378 in ulpt_do_read (sc=0xc16c9880, uio=0xda74ecb0, flags=0)
        at ../../../dev/usb/ulpt.c:765
    #13 0xc04c841d in ulptread (dev=0x25af90, uio=0x25af90, flags=2469776)
        at ../../../dev/usb/ulpt.c:795
    #14 0xc04fe23a in giant_read (dev=0xc16d9600, uio=0x25af90, ioflag=2469776)
        at ../../../kern/kern_conf.c:301
    #15 0xc04d5899 in devfs_read_f (fp=0xc17c2b88, uio=0xda74ecb0,
        cred=0xc1aacb80, flags=0, td=0xc1a154b0)
        at ../../../fs/devfs/devfs_vnops.c:779
    #16 0xc05581ec in dofileread (td=0xc1a154b0, fd=2469776, fp=0xc17c2b88,
        auio=0xda74ecb0, offset=Unhandled dwarf expression opcode 0x93
    ) at file.h:234
    #17 0xc0558000 in kern_readv (td=0xc1a154b0, fd=3, auio=0x25af90)
        at ../../../kern/sys_generic.c:192
    #18 0xc0557ebf in read (td=0x25af90, uap=0xc1698760)
        at ../../../kern/sys_generic.c:116
    #19 0xc0674012 in syscall (frame=
          {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 1, tf_esi =
    -1077940763, tf_ebp = -1077941144, tf_isp = -629871260, tf_ebx = 3,
    tf_edx = 134529024, tf_ecx = 1, tf_eax = 3, tf_trapno = 12, tf_err =
    2, tf_eip = 671913855, tf_cs = 51, tf_eflags = 518, tf_esp =
    -1077941284, tf_ss = 59})
        at ../../../i386/i386/trap.c:976
    ---Type <return> to continue, or q <return> to quit---
    #20 0xc0660e3f in Xint0x80_syscall () at ../../../i386/i386/exception.s:200
    #21 0x00000033 in ?? ()
    Previous frame inner to this frame (corrupt stack?)
    (kgdb) quit
    st1# exit

    exit

    Script done on Sat Nov 12 15:42:19 2005
    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"


  • Next message: albi: "Re: SSH From within a Jail"