On Wed, Apr 16, 2008 at 09:10:23AM -0700, Steve Franks wrote:> > freebsd-stable: as you can see, Roland has been teaching me about > crashdumps since my umass brought down one system, and is rather > unusable on another. Here's the kgdb output: > > Best, > Steve > > [steve@dystant /usr/obj/usr/src/sys/GENERIC]$ sudo kgdb kernel.debug > /var/crash/vmcore.3 > [GDB will not be able to debug user-mode threads: > /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "amd64-marcel-freebsd". > > Unread portion of the kernel message buffer: > > > Fatal trap 12: page fault while in kernel mode > cpuid = 0; apic id = 00 > fault virtual address = 0x0 > fault code = supervisor read instruction, page not present > instruction pointer = 0x8:0x0 > stack pointer = 0x10:0xffffffffa0208570 > frame pointer = 0x10:0xffffff0001e1ca00 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, long 1, def32 0, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 12 (swi4: clock sio)Odd. This doesn't seem to have anything to do with usb. It is in a kernel thread that runs the clock and serial port.> trap number = 12 > panic: page fault > cpuid = 0 > Uptime: 32s > Physical memory: 1002 MB > Dumping 96 MB: 81 65 49 33 17 > > #0 doadump () at pcpu.h:194 > 194 __asm __volatile("movq %%gs:0,%0" : "=r" (td)); > (kgdb)If you give the 'bt' command (backtrace) here, what does it say? Roland -- R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 195 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20080416/f0c0dd6b/attachment.pgp
On Tue, Apr 15, 2008 at 12:20 PM, Roland Smith <rsmith@xs4all.nl> wrote:> On Tue, Apr 15, 2008 at 11:34:31AM -0700, Steve Franks wrote: > > Being a naturally curious guy, with your pointers, I've located the following: > > > > [steve@dystant /var/crash]$ sudo cat info.2 > > Yep. This is what you need. > > > > Dump header from device /dev/ad4s1b > > Architecture: amd64 > > Architecture Version: 2 > > Dump Length: 211496960B (201 MB) > > Blocksize: 512 > > Dumptime: Fri Apr 11 11:02:40 2008 > > As you can see it went wrong _just_ after you plugged in the olympus. > > > > Hostname: dystant.franks-development.dyndns.biz > > Magic: FreeBSD Kernel Dump > > Version String: FreeBSD 7.0-STABLE #14: Mon Mar 10 16:35:38 MST 2008 > > steve@dystant.franks-development.dyndns.biz:/usr/obj/usr/src/sys/GENERIC > > Panic String: page fault > > This is what caused the crash. The system was trying to access memory > that it shouldn't. The question is where did it happen. > > > > Dump Parity: 2580707083 > > Bounds: 2 > > Dump Status: good > > The developers' handbook* will show you how to debug the crashdump. The > developers will be interested in the cause of the crash and the stack > backtrace. See ?10.2 of the developers' handbook. > > With that info you could post a question on the -amd64 or -stable list. > > (* if installed you should be able to find it at > file:///usr/share/doc/en_US.ISO8859-1/books/developers-handbook/index.html) > > > > [steve@dystant /var/log]$ cat messages.0 | grep umass > > Apr 11 11:02:39 dystant kernel: umass0: <OLYMPUS C-700 Ultra Zoom, > > I presume that the next line is 'Copyright (c) 1992-2008 The FreeBSD Project.'? > That would indicate that the systems crashes before it gets to assign a > da device to the umass device. > > If it is something like 'da0 at umass-sim0 bus 0 target 0 lun 0' it is > interesting as well, because it can show _where_ things go wrong. > > Try something like "grep -A 1 'umass0: <' /var/log/messages.0" > > By the way, can you reproduce the crash with another umass device? > > > > It could be hardware-related, I guess - the crash is rather faster if > > I plug into the front of the case vs. directly into the motherboard in > > the back. > > That could be interesting. But it could also be caused by the topology > of the usb bus. I'm not an expert on this issue. :-) > > > > The interesting thing is that it is only umass, not ucom, > > ugen, or ums (they all play fine). > > Well, they are different drivers using different code paths through the > kernel. But it will help in narrowing down the cause of the crash. > > My guesstimate would be that it bombs in trying to assign a da device to > the umass device. But I could be wrong. > > BTW, if you post a followup to one of the mailing lists, don't forget to > mention what usb controller you're using. You can easily find that out > with 'dmesg|grep "^usb"'. This will show you how many usb controllers > you have and what type of controller chip they use. > > > > Roland > -- > R.F.Smith http://www.xs4all.nl/~rsmith/ > [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] > pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) >freebsd-stable: as you can see, Roland has been teaching me about crashdumps since my umass brought down one system, and is rather unusable on another. Here's the kgdb output: Best, Steve [steve@dystant /usr/obj/usr/src/sys/GENERIC]$ sudo kgdb kernel.debug /var/crash/vmcore.3 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd". Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read instruction, page not present instruction pointer = 0x8:0x0 stack pointer = 0x10:0xffffffffa0208570 frame pointer = 0x10:0xffffff0001e1ca00 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 12 (swi4: clock sio) trap number = 12 panic: page fault cpuid = 0 Uptime: 32s Physical memory: 1002 MB Dumping 96 MB: 81 65 49 33 17 #0 doadump () at pcpu.h:194 194 __asm __volatile("movq %%gs:0,%0" : "=r" (td)); (kgdb)
on 16/04/2008 19:19 Roland Smith said the following:> On Wed, Apr 16, 2008 at 09:10:23AM -0700, Steve Franks wrote: >> Fatal trap 12: page fault while in kernel mode >> cpuid = 0; apic id = 00 >> fault virtual address = 0x0 >> fault code = supervisor read instruction, page not present >> instruction pointer = 0x8:0x0 >> stack pointer = 0x10:0xffffffffa0208570 >> frame pointer = 0x10:0xffffff0001e1ca00 >> code segment = base 0x0, limit 0xfffff, type 0x1b >> = DPL 0, pres 1, long 1, def32 0, gran 1 >> processor eflags = interrupt enabled, resume, IOPL = 0 >> current process = 12 (swi4: clock sio) > > Odd. This doesn't seem to have anything to do with usb. It is in a > kernel thread that runs the clock and serial port.It is not as odd if you consider that "clock" is actually softclock that executes timeouts/callouts and I have no doubts that we do use those in USB subsystem.> > If you give the 'bt' command (backtrace) here, what does it say?I think 'bt' should be a default command in kgdb init or at least there should be a big advice to the users: "if you managed to run kgdb on a core file, then at the very least execute bt command" :-) -- Andriy Gapon
I have added options USB DEBUG to my kernconf file ("DYSTANT"). Here
is the backtrace:
Steve
[steve@dystant /usr/obj/usr/src/sys/DYSTANT]$ sudo kgdb kernel.debug
/var/crash/vmcore.6
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for
details.
This GDB was configured as "amd64-marcel-freebsd".
Unread portion of the kernel message buffer:
umass0: <OLYMPUS C-700 Ultra Zoom, class 0/0, rev 1.10/1.00, addr 3> on
uhub2
umass0: SCSI over (unknown 0x00); quirks = 0x0100
panic: /usr/src/sys/dev/usb/umass.c:1453: Unknown proto 0x100
cpuid = 0
Uptime: 3m1s
Physical memory: 1002 MB
Dumping 97 MB: 82 66 50 34 18 2
#0 doadump () at pcpu.h:194
194 __asm __volatile("movq %%gs:0,%0" : "=r"
(td));
(kgdb) bt
#0 doadump () at pcpu.h:194
#1 0x0000000000000004 in ?? ()
#2 0xffffffff8049d169 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:409
#3 0xffffffff8049d56d in panic (fmt=0x104 <Address 0x104 out of
bounds>) at /usr/src/sys/kern/kern_shutdown.c:563
#4 0xffffffff80412ee7 in umass_attach (self=0xffffff00014ae300) at
/usr/src/sys/dev/usb/umass.c:1452
#5 0xffffffff804bf9c4 in device_attach (dev=0xffffff00014ae300) at
device_if.h:178
#6 0xffffffff8041b8e1 in usbd_new_device (parent=0xffffff0001246000,
bus=0xffffffff80e49000, depth=Variable "depth" is not available.
)
at /usr/src/sys/dev/usb/usb_subr.c:932
#7 0xffffffff8040ebb2 in uhub_explore (dev=0xffffff0001245c00) at
/usr/src/sys/dev/usb/uhub.c:523
#8 0xffffffff804177da in usb_discover (v=0xffffff000126e680) at
/usr/src/sys/dev/usb/usb.c:724
#9 0xffffffff80418990 in usb_event_thread (arg=Variable "arg" is not
available.
) at /usr/src/sys/dev/usb/usb.c:440
#10 0xffffffff8047e883 in fork_exit (callout=0xffffffff80418880
<usb_event_thread>, arg=0xffffff000126e680,
frame=0xffffffffa035ac80) at /usr/src/sys/kern/kern_fork.c:781
#11 0xffffffff8073b4ae in fork_trampoline () at
/usr/src/sys/amd64/amd64/exception.S:415
#12 0x0000000000000000 in ?? ()
#13 0x0000000000000000 in ?? ()
#14 0x0000000000000001 in ?? ()
#15 0x0000000000000000 in ?? ()
#16 0x0000000000000000 in ?? ()
#17 0x0000000000000000 in ?? ()
#18 0x0000000000000000 in ?? ()
#19 0x0000000000000000 in ?? ()
#20 0x0000000000000000 in ?? ()
#21 0x0000000000000000 in ?? ()
#22 0x0000000000000000 in ?? ()
#23 0x0000000000000000 in ?? ()
#24 0x0000000000000000 in ?? ()
#25 0x0000000000000000 in ?? ()
#26 0x0000000000000000 in ?? ()
#27 0x0000000000000000 in ?? ()
#28 0x0000000000000000 in ?? ()
#29 0x0000000000000000 in ?? ()
#30 0x0000000000000000 in ?? ()
#31 0x0000000000000000 in ?? ()
#32 0x0000000000000000 in ?? ()
#33 0x0000000000000000 in ?? ()
#34 0x0000000000000000 in ?? ()
#35 0x0000000000000000 in ?? ()
#36 0x0000000000dd8000 in ?? ()
#37 0x0000000000000000 in ?? ()
#38 0x0000000000000004 in ?? ()
#39 0xffffff00012788d0 in ?? ()
#40 0xffffff0001087340 in ?? ()
#41 0xffffff0001258680 in ?? ()
#42 0xffffffffa0359c48 in ?? ()
#43 0xffffff0001258680 in ?? ()
#44 0xffffffff804bae29 in sched_switch (td=0xffffff000126e680,
newtd=0xffffffff80418880, flags=0)
at /usr/src/sys/kern/sched_4bsd.c:905
#45 0x0000000000000000 in ?? ()
#46 0x0000000000000000 in ?? ()
#47 0x0000000000000000 in ?? ()
#48 0x0000000000000000 in ?? ()
#49 0x0000000000000000 in ?? ()
#50 0x0000000000000000 in ?? ()
#51 0x0000000000000000 in ?? ()
#52 0x0000000000000000 in ?? ()
#53 0x0000000000000000 in ?? ()
#54 0x0000000000000000 in ?? ()
#55 0x0000000000000000 in ?? ()
#56 0x0000000000000000 in ?? ()
#57 0x0000000000000000 in ?? ()
#58 0x0000000000000000 in ?? ()
#59 0x0000000000000000 in ?? ()
#60 0x0000000000000000 in ?? ()
#61 0x0000000000000000 in ?? ()
#62 0x0000000000000000 in ?? ()
#63 0x0000000000000000 in ?? ()
#64 0x0000000000000000 in ?? ()
#65 0x0000000000000000 in ?? ()
#66 0x0000000000000000 in ?? ()
#67 0x0000000000000000 in ?? ()
#68 0x0000000000000000 in ?? ()
#69 0x0000000000000000 in ?? ()
#70 0x0000000000000000 in ?? ()
#71 0x0000000000000000 in ?? ()
---Type <return> to continue, or q <return> to quit---
#72 0x0000000000000000 in ?? ()
#73 0x0000000000000000 in ?? ()
#74 0x0000000000000000 in ?? ()
#75 0x0000000000000000 in ?? ()
#76 0x0000000000000000 in ?? ()
#77 0x0000000000000000 in ?? ()
#78 0x0000000000000000 in ?? ()
#79 0x0000000000000000 in ?? ()
#80 0x0000000000000000 in ?? ()
#81 0x0000000000000000 in ?? ()
#82 0x0000000000000000 in ?? ()
#83 0x0000000000000000 in ?? ()
#84 0x0000000000000000 in ?? ()
#85 0x0000000000000000 in ?? ()
#86 0x0000000000000000 in ?? ()
#87 0x0000000000000000 in ?? ()
#88 0x0000000000000000 in ?? ()
#89 0x0000000000000000 in ?? ()
#90 0x0000000000000000 in ?? ()
#91 0x0000000000000000 in ?? ()
#92 0x0000000000000000 in ?? ()
#93 0x0000000000000000 in ?? ()
#94 0x0000000000000000 in ?? ()
#95 0x0000000000000000 in ?? ()
#96 0x0000000000000000 in ?? ()
#97 0x0000000000000000 in ?? ()
#98 0x0000000000000000 in ?? ()
#99 0x0000000000000000 in ?? ()
#100 0x0000000000000000 in ?? ()
#101 0x0000000000000000 in ?? ()
#102 0x0000000000000000 in ?? ()
#103 0x0000000000000000 in ?? ()
#104 0x0000000000000000 in ?? ()
#105 0x0000000000000000 in ?? ()
#106 0x0000000000000000 in ?? ()
#107 0x0000000000000000 in ?? ()
#108 0x0000000000000000 in ?? ()
#109 0x0000000000000000 in ?? ()
#110 0x0000000000000000 in ?? ()
#111 0x0000000000000000 in ?? ()
#112 0x0000000000000000 in ?? ()
#113 0x0000000000000000 in ?? ()
#114 0x0000000000000000 in ?? ()
#115 0x0000000000000000 in ?? ()
#116 0x0000000000000000 in ?? ()
#117 0x01263f4001263f80 in ?? ()
#118 0x01263ec001263f00 in ?? ()
#119 0x01263e4001263e80 in ?? ()
#120 0x01263dc001263e00 in ?? ()
#121 0x01263d4001263d80 in ?? ()
#122 0x01263cc001263d00 in ?? ()
#123 0x01263c4001263c80 in ?? ()
#124 0x01263bc001263c00 in ?? ()
#125 0x01263b4001263b80 in ?? ()
#126 0x01263ac001263b00 in ?? ()
#127 0x01263a4001263a80 in ?? ()
#128 0x012639c001263a00 in ?? ()
#129 0x0126394001263980 in ?? ()
#130 0x012638c001263900 in ?? ()
#131 0x0126384001263880 in ?? ()
#132 0x012637c001263800 in ?? ()
#133 0x0126374001263780 in ?? ()
#134 0x012636c001263700 in ?? ()
#135 0x0126364001263680 in ?? ()
#136 0x012635c001263600 in ?? ()
#137 0x0126354001263580 in ?? ()
#138 0x012634c001263500 in ?? ()
#139 0x0126344001263480 in ?? ()
#140 0x012633c001263400 in ?? ()
#141 0x0126334001263380 in ?? ()
#142 0x012632c001263300 in ?? ()
#143 0x0126324001263280 in ?? ()
#144 0x012631c001263200 in ?? ()
#145 0x0126314001263180 in ?? ()
#146 0x012630c001263100 in ?? ()
---Type <return> to continue, or q <return> to quit---
#147 0x0126304001263080 in ?? ()
#148 0x01265fc001263000 in ?? ()
#149 0x01265f4001265f80 in ?? ()
#150 0x01265ec001265f00 in ?? ()
#151 0x01265e4001265e80 in ?? ()
#152 0x01265dc001265e00 in ?? ()
#153 0x01265d4001265d80 in ?? ()
#154 0x01265cc001265d00 in ?? ()
#155 0x01265c4001265c80 in ?? ()
#156 0x01265bc001265c00 in ?? ()
#157 0x01265b4001265b80 in ?? ()
#158 0x01265ac001265b00 in ?? ()
#159 0x01265a4001265a80 in ?? ()
#160 0x012659c001265a00 in ?? ()
#161 0x0126594001265980 in ?? ()
#162 0x012658c001265900 in ?? ()
#163 0x0126584001265880 in ?? ()
#164 0x012657c001265800 in ?? ()
#165 0x0126574001265780 in ?? ()
#166 0x012656c001265700 in ?? ()
#167 0x0126564001265680 in ?? ()
#168 0x012655c001265600 in ?? ()
#169 0x0126554001265580 in ?? ()
#170 0x012654c001265500 in ?? ()
#171 0x0126544001265480 in ?? ()
#172 0x012653c001265400 in ?? ()
#173 0x0126534001265380 in ?? ()
#174 0x012652c001265300 in ?? ()
#175 0x0126524001265280 in ?? ()
#176 0x012651c001265200 in ?? ()
#177 0x0126514001265180 in ?? ()
#178 0x012650c001265100 in ?? ()
#179 0x0126504001265080 in ?? ()
#180 0x01267fc001265000 in ?? ()
#181 0x01263f4001263f80 in ?? ()
#182 0x01263ec001263f00 in ?? ()
#183 0x01263e4001263e80 in ?? ()
#184 0x01263dc001263e00 in ?? ()
#185 0x01263d4001263d80 in ?? ()
#186 0x01263cc001263d00 in ?? ()
#187 0x01263c4001263c80 in ?? ()
#188 0x01263bc001263c00 in ?? ()
#189 0x01263b4001263b80 in ?? ()
#190 0x01263ac001263b00 in ?? ()
#191 0x01263a4001263a80 in ?? ()
#192 0x012639c001263a00 in ?? ()
#193 0x0126394001263980 in ?? ()
#194 0x012638c001263900 in ?? ()
#195 0x0126384001263880 in ?? ()
#196 0x012637c001263800 in ?? ()
#197 0x0126374001263780 in ?? ()
#198 0x012636c001263700 in ?? ()
#199 0x0126364001263680 in ?? ()
#200 0x012635c001263600 in ?? ()
#201 0x0126354001263580 in ?? ()
#202 0x012634c001263500 in ?? ()
#203 0x0126344001263480 in ?? ()
#204 0x012633c001263400 in ?? ()
#205 0x0126334001263380 in ?? ()
#206 0x012632c001263300 in ?? ()
#207 0x0126324001263280 in ?? ()
#208 0x012631c001263200 in ?? ()
#209 0x0126314001263180 in ?? ()
#210 0x012630c001263100 in ?? ()
#211 0x0126304001263080 in ?? ()
#212 0x01265fc001263000 in ?? ()
#213 0x01265f4001265f80 in ?? ()
#214 0x01265ec001265f00 in ?? ()
#215 0x01265e4001265e80 in ?? ()
#216 0x01265dc001265e00 in ?? ()
On Mon, May 12, 2008 at 01:38:51PM -0700, Steve Franks wrote:> I have added options USB DEBUG to my kernconf file ("DYSTANT"). Here > is the backtrace: > > Steve > > [steve@dystant /usr/obj/usr/src/sys/DYSTANT]$ sudo kgdb kernel.debug > /var/crash/vmcore.6 > [GDB will not be able to debug user-mode threads: > /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "amd64-marcel-freebsd". > > Unread portion of the kernel message buffer: > umass0: <OLYMPUS C-700 Ultra Zoom, class 0/0, rev 1.10/1.00, addr 3> on uhub2 > umass0: SCSI over (unknown 0x00); quirks = 0x0100 > panic: /usr/src/sys/dev/usb/umass.c:1453: Unknown proto 0x100It looks like the camera is not returning a wire protocol. You definitely need to take this to the -usb list. Roland -- R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 195 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20080512/95aaffb5/attachment.pgp
Reasonably Related Threads
- usb port issue in 9.1-Prerelease (Possibly Cam related)
- HEADSUP: USB da(4) quirks disabled for 4.9 and 5.2
- umass0 problems, with Sony USB Memory Stick
- XHCI umass support breaks between r248085 and r252560 on 9-STABLE
- umass device support...how generic is it?