kern/149185: [rum] panic in rum(4) driver on 8.1-R

[Alex Kozlov]

>Number:         149185
>Category:       kern
>Synopsis:       [rum] panic in rum(4) driver on 8.1-R
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Aug 02 00:30:06 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Alex Kozlov
>Release:        8.1-RELEASE-i386
>Organization:
private
>Environment:
>Description:
The panic happens after random period of time.

Fatal trap 18: integer divide fault while in kernel mode
instruction pointer = 0x20:0xc087ce32
stack pointer           = 0x28:0xc4e2d948
frame pointer           = 0x28:0xc4e2d958
code segment        = base 0x0, limit 0xfffff, type 0x1b
            = DPL 0, pres 1, def32 1, gran 1
processor eflags    = interrupt enabled, resume, IOPL = 0
current process     = 14 (usbus4)
trap number     = 18
panic: integer divide fault
KDB: stack backtrace:
db_trace_self_wrapper(c0669547,c06cb000,c0660c6a,c4e2d83c,c4e2d83c,...) at 0xc0436706 = db_trace_self_wrapper+0x26
panic(c0660c6a,c0680c94,c4e2d908,1,1,...) at 0xc04b898d = panic+0xed
trap_fatal(c6a438ec,ae295ce6,5a1dc54c,adea5167,c50bf2a8,...) at 0xc06474bd = trap_fatal+0x23d
trap(c4e2d908) at 0xc0647efe = trap+0xee
calltrap() at 0xc062d4ac = calltrap+0x6
--- trap 0x12, eip = 0xc087ce32, esp = 0xc4e2d948, ebp = 0xc4e2d958 ---
rum_setup_tx_desc(0,44,0,509,ff000000,...) at 0xc087ce32 = rum_setup_tx_desc+0x72
rum_start(c531d800,8f82cefe,f5192700,6087b2a,c08babbb,...) at 0xc087ecec = rum_start+0x1d4
if_transmit(c531d800,caac7100,caac7100,a4,c53f80f4,...) at 0xc055f8f9 = if_transmit+0xc9
ieee80211_start(c53f8000,c4e2da2c,c04a5c7d,3,0,...) at 0xc08a2305 = ieee80211_start+0x316
if_transmit(c53f8000,caac7100,0) at 0xc055f8f9 = if_transmit+0xc9
ether_output_frame(c53f8000,caac7100,6,1,a000,...) at 0xc05645ac = ether_output_frame+0x2c
ether_output(c53f8000,caac7100,c4e2db20,0,0,...) at 0xc0564f7d = ether_output+0x51d
arpintr(caac7100,12,c08e67a3,c50be4c8,caac7100,...) at 0xc0570759 = arpintr+0x7a9
netisr_dispatch_src(7,0,caac7100,c4e2dbb0,c05644ea,...) at 0xc0567610 = netisr_dispatch_src+0x70
netisr_dispatch(7,caac7100,0) at 0xc05678d0 = netisr_dispatch+0x20
ether_demux(c53f8000,caac7100,3,0,3,...) at 0xc05644ea = ether_demux+0x19a
ether_input(c53f8000,caac7100,caac7100,c659301c,5ed,...) at 0xc0564838 = ether_input+0x148
adhoc_input(c6593000,caac7100,37,ffffffa1,0,...) at 0xc08b0736 = adhoc_input+0x436
rum_bulk_read_callback(c535e988,0,c085c6ba,a85,c535e030,...) at 0xc087f169 = rum_bulk_read_callback+0xf6
usbd_callback_wrapper(c535e030,c5176ca4,c535e000,c4e2dcc8,c085867a,...) at 0xc085a9a7 = usbd_callback_wrapper+0xae
usb_command_wrapper(c535e030,0,c085c6ba,7d2,c535e044,...) at 0xc0858383 = usb_command_wrapper+0x6e
usb_callback_proc(c535e044,0,c085c609,6c,c5176cb4,...) at 0xc085867a = usb_callback_proc+0x98
usb_process(c5176ca4,c4e2dd38,80000000,0,40,...) at 0xc085647a = usb_process+0xaa
fork_exit(c08563d0,c5176ca4,c4e2dd38) at 0xc048e868 = fork_exit+0x88
fork_trampoline() at 0xc062d524 = fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xc4e2dd70, ebp = 0 ---
>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: