6.2-RELEASE panic - ucom, uplcom

Alexander Logvinov
2007-01-11T21:44:42Z

Hello!

 I had 100% reproducible panic on 6.2RC2 and now I have it on 6.2-RELEASE with
ucom, uplcom.

 I have USR Courier V.Everthing External Modem connected with RS232->USB
cable to box.

# dmesg | grep ucom
ucom0: Prolific Technology Inc. USB-Serial Controller, rev 1.10/3.00, addr 3

# cat /etc/ttys  | grep ttyU0
ttyU0   "/usr/libexec/getty std.57600"  dialup  on  insecure

# ps ax | grep ttyU0
 1236  ??  I      0:00,00 /usr/libexec/getty std.57600 ttyU0

# ls -l /dev/cuaU*
crw-rw----  1 uucp  dialer    0,  70 12 ??? 13:30 /dev/cuaU0
crw-rw----  1 uucp  dialer    0,  71 12 ??? 13:30 /dev/cuaU0.init
crw-rw----  1 uucp  dialer    0,  72 12 ??? 13:30 /dev/cuaU0.lock

 When I try to run minicom I get this:

# minicom
LANG/ja
LANG/ko
LANG/ru
minicom: Cannot open /dev/cuaU0: Input/output error

# dmesg
ucom0: open bulk out error (addr 2): IN_USE

 Then I try again

# minicom

 and get a panic:

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x1c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc04a6b1a
stack pointer           = 0x28:0xe714daf0
frame pointer           = 0x28:0xe714db04
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 1376 (minicom)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 9m10s
Dumping 1022 MB (4 chunks)
  chunk 0: 1MB (157 pages) ... ok
  chunk 1: 1022MB (261494 pages) 1006 990 974 958 942 926 910 894 878 862 846
830 814 798 782 766 750 734 718 702 686 670 654 638 622 606 590 574 558 542 526
510 494 478 462 446 430 414 398 382 366 350 334 318 302 286 270 254 238 222 206
190 174 158 142 126 110 94 78 62 46 30 14

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r"
(td));
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc0506ce9 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc0507307 in panic (fmt=0xc06853cb "%s") at
/usr/src/sys/kern/kern_shutdown.c:565
#3  0xc065e5b8 in trap_fatal (frame=0xe714dab0, eva=28) at
/usr/src/sys/i386/i386/trap.c:837
#4  0xc065e858 in trap_pfault (frame=0xe714dab0, usermode=0, eva=28)
    at /usr/src/sys/i386/i386/trap.c:745
#5  0xc065ec40 in trap (frame      {tf_fs = -1067122680, tf_es = 40, tf_ds =
-418119640, tf_edi = 0, tf_esi = -994371968, tf_ebp = -418063612, tf_isp =
-418063652, tf_ebx = -996246928, tf_edx = -1066708223, tf_ecx = -1068864777,
tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1068864742, tf_cs = 32,
tf_eflags = 66178, tf_esp = -418063600, tf_ss = 0}) at
/usr/src/sys/i386/i386/trap.c:435
#6  0xc064960a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc04a6b1a in uhci_softintr (v=0xc47e8000) at
/usr/src/sys/dev/usb/uhci.c:1303
#8  0xc04a723a in uhci_abort_xfer (xfer=0xc4bdc800, status=3228259073)
    at /usr/src/sys/dev/usb/uhci.c:2000
#9  0xc04b3e89 in usbd_abort_pipe (pipe=0xc4bb1680) at
/usr/src/sys/dev/usb/usbdi.c:762
#10 0xc04a2ac1 in ucomstopread (sc=0x0) at /usr/src/sys/dev/usb/ucom.c:855
#11 0xc04a2bf2 in ucomparam (tp=0xc4841400, t=0xc6bda400) at
/usr/src/sys/dev/usb/ucom.c:497
#12 0xc05420fd in ttioctl (tp=0xc4841400, cmd=2150396948, data=0xc6bda400,
flag=3)
    at /usr/src/sys/kern/tty.c:1075
#13 0xc054367b in ttyioctl (dev=0xc06b5301, cmd=2150396948, data=0xc6bda400
"\001", flag=3, td=0x0)
    at /usr/src/sys/kern/tty.c:3260
#14 0xc04d26cf in giant_ioctl (dev=0xc483f000, cmd=0, data=0x0, fflag=0, td=0x0)
    at /usr/src/sys/kern/kern_conf.c:306
#15 0xc04b7e8d in devfs_ioctl_f (fp=0xc46cd990, com=2150396948, data=0xc6bda400,
cred=0xc4f7da80,
    td=0xc49b5300) at /usr/src/sys/fs/devfs/devfs_vnops.c:479
#16 0xc0531020 in ioctl (td=0xc49b5300, uap=0xe714dd04) at file.h:264
#17 0xc065f0b8 in syscall (frame      {tf_fs = -1067188165, tf_es = 59, tf_ds =
59, tf_edi = 3, tf_esi = 0, tf_ebp = -1077943160, tf_isp = -418063004, tf_ebx =
673891360, tf_edx = -1077943136, tf_ecx = -1077943136, tf_eax = 54, tf_trapno =
12, tf_err = 2, tf_eip = 673827683, tf_cs = 51, tf_eflags = 582, tf_esp =
-1077943252, tf_ss = 59}) at /usr/src/sys/i386/i386/trap.c:983
#18 0xc064965f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#19 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)


--
WBR
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dmesg
Type: application/octet-stream
Size: 6704 bytes
Desc: not available