Hallo Markus!

I'm using a Pinnacle PCTV DVB-T for several months now without serious problems.
So far I used it only with my Notebook. Now I set up a Mini-ITX Machine with
MythTV running 24/24h.

The machine freezes ~36h ... black screen, even no sysrq. (Debian etch 
2.6.18-4-k7).
So I setup kexec, kernel 2.6.21, v4l 5877:e9a7be188b2b and now I got a 
backtrace:

<1>[16645.528000] BUG: unable to handle kernel NULL pointer dereference at 
virtual address 0
0000068
[...]
[16645.528000] EIP is at end_unlink_async+0x1b/0xc5 [ehci_hcd]
[16645.528000] eax: 00000060   ebx: de4f20dc   ecx: df912020   edx: df8f0b57
[16645.528000] esi: 00000000   edi: de4f20dc   ebp: c58a9d4c   esp: c58a9d40
[16645.528000] ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0068
[16645.528000] Process mythbackend (pid: 12863, ti=c58a8000 task=dbb3d070 
task.ti=c58a8000)
[16645.528000] Stack: 00000020 00000000 de4f20dc c58a9dbc df8ed7d6 d74ba800 
de4f20dc de4f20d
c
[16645.528000]        dd9bd080 c58a9d78 df8ed22a de4f20dc 00000000 de4f20dc 
c58a9de8 df8ed7d
6
[16645.528000]        000000bc c58a9d9c 00000292 00000000 00000000 c56ce254 
de4f20dc 0000000
0
[16645.528000] Call Trace:
[16645.528000]  [<c0104a3e>] show_trace_log_lvl+0x1a/0x2f
[16645.528000]  [<c0104aee>] show_stack_log_lvl+0x9b/0xa3
[16645.528000]  [<c0104cac>] show_registers+0x1b6/0x288
[16645.528000]  [<c0104e68>] die+0xea/0x1bd
[16645.528000]  [<c0113bcf>] do_page_fault+0x435/0x506
[16645.528000]  [<c0289cbc>] error_code+0x74/0x7c
[16645.528000]  [<df8ed7d6>] ehci_work+0x22/0x64b [ehci_hcd]
[16645.528000]  [<df8f21b5>] ehci_irq+0x234/0x254 [ehci_hcd]
[16645.528000]  [<df8a83af>] usb_hcd_irq+0x24/0x51 [usbcore]
[16645.528000]  [<c013b3e2>] handle_IRQ_event+0x21/0x48
[16645.528000]  [<c013c515>] handle_level_irq+0x5f/0x96
[16645.528000]  [<c0105f8a>] do_IRQ+0x5c/0x7a
[16645.528000]  [<c010453f>] common_interrupt+0x23/0x28
[16645.528000]  [<c0140892>] free_hot_page+0xa/0xc
[16645.528000]  [<c01408ae>] __free_pages+0x1a/0x25
[16645.528000]  [<c014c0bc>] __vunmap+0xa2/0xcb
[16645.528000]  [<c014c16f>] vfree+0x25/0x27
[16645.528000]  [<dfb1e77b>] dvb_dvr_release+0x5b/0xb4 [dvb_core]
[16645.528000]  [<c0155973>] __fput+0xa9/0x153
[16645.528000]  [<c0155a33>] fput+0x16/0x18
[16645.528000]  [<c01535cf>] filp_close+0x54/0x5c
[16645.528000]  [<c0154597>] sys_close+0x57/0x8d
[16645.528000]  [<c0103b30>] sysenter_past_esp+0x5d/0x81
[16645.528000]  =======================
[16645.528000] Code: e0 89 f8 e8 4c 4c 86 e0 83 c4 2c 5b 5e 5f c9 c3 55 89 e5 
57 56 53 89 c3
 8b 70 14 0f ba b0 bc 00 00 00 01 8d 46 60 ba 57 0b 8f df <c6> 46 68 03 c7 46 
48 00 00 00 00
 e8 21 8d 8c e0 8b 7e 58 80 63
[16645.528000] EIP: [<df8ed1da>] end_unlink_async+0x1b/0xc5 [ehci_hcd]

Actually I'm not sure if it is irq gotcha of the ITX mainboard because it seems 
to 
have general timing problems. However, while crashing it passed the dvb code 
... 
I'm not sure if it crashed above or below the TODO :)

crash> l *dvb_dvr_release+0x5b
0xdfb1e77b is in dvb_dvr_release (/home/chris/Soft/v4l-5877/v4l/dmxdev.c:211).
206                             spin_unlock_irq(&dmxdev->lock);
207                             vfree(mem);
208                     }
209             }
210             /* TODO */
211             dvbdev->users--;
212             if(dvbdev->users==-1 && dmxdev->exit==1) {
213                     fops_put(file->f_op);
214                     file->f_op = NULL;
215                     mutex_unlock(&dmxdev->mutex);

What do you think about that? Whats TODO?

I attached some more information of the debugging session.

regards

chris



lsusb
Bus 002 Device 002: ID 051d:0002 American Power Conversion Back-UPS Pro 
500/1000/1500
Bus 002 Device 001: ID 0000:0000
Bus 001 Device 003: ID 086c:1003 DeTeWe - Deutsche Telephonwerke AG & Co. TA33 
ISDN TA
Bus 001 Device 001: ID 0000:0000
Bus 003 Device 001: ID 0000:0000
Bus 004 Device 005: ID 05e3:0702 Genesys Logic, Inc. USB 2.0 IDE Adapter
Bus 004 Device 004: ID eb1a:2870 eMPIA Technology, Inc.
Bus 004 Device 001: ID 0000:0000
uptime
19:00:53 up  2:56,  4 users,  load average: 0.02, 0.04, 0.03
cat /proc/interrupts
           CPU0
  0:         53    XT-PIC-XT        timer
  1:          8    XT-PIC-XT        i8042
  2:          0    XT-PIC-XT        cascade
  5:          0    XT-PIC-XT        SiS SI7012
  6:          2    XT-PIC-XT        floppy
  7:    1577871    XT-PIC-XT        ehci_hcd:usb4
  8:          1    XT-PIC-XT        rtc
  9:          1    XT-PIC-XT        acpi, ohci_hcd:usb3
 10:       8134    XT-PIC-XT        ohci_hcd:usb1, eth0, eth1
 11:     938551    XT-PIC-XT        libata, ohci_hcd:usb2, wifi0
 12:        124    XT-PIC-XT        i8042
 14:      31669    XT-PIC-XT        libata
 15:          0    XT-PIC-XT        libata
NMI:       1055
LOC:    1577802
ERR:        367
MIS:          0
<1>[16645.528000] BUG: unable to handle kernel NULL pointer dereference at 
virtual address 0
0000068
[16645.528000]  printing eip:
[16645.528000] df8ed1da
[16645.528000] *pde = 00000000
[16645.528000] Oops: 0002 [#1]
[16645.528000] Modules linked in: wlan_ccmp button ac battery act_police 
sch_ingress cls_u32
 sch_sfq sch_htb wlan_tkip wlan_xauth wlan_scan_ap ipt_REJECT xt_multiport 
ipt_LOG xt_limit
xt_tcpudp ipt_MASQUERADE iptable_nat nf_conntrack_ipv4 xt_state ip6_tables 
iptable_filter ip
_tables x_tables cpufreq_stats cpufreq_userspace powernow_k7 it87 hwmon_vid 
i2c_isa nf_nat_f
tp nf_nat nf_conntrack_ftp nf_conntrack nfnetlink loop usbhid hid qt1010 mt2060 
xc3028_tuner
 firmware_class mt352 zl10353 tuner em2880_dvb dvb_core tvp5150 usb_storage 
em28xx compat_io
ctl32 ir_common videodev v4l2_common v4l1_compat tveeprom i2c_core tsdev 
snd_intel8x0 snd_ac
97_codec ac97_bus snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd floppy 
soundcore psmouse a
th_rate_sample rtc sis900 sis_agp snd_page_alloc pcspkr serio_raw ath_pci wlan 
ath_hal(P) r8
169 mii agpgart ehci_hcd ohci_hcd shpchp pci_hotplug usbcore evdev thermal 
processor fan ata
_generic generic sis5513 ide_core sata_sis pata_sis libata sd_mod scsi_mod 
dm_snapshot dm_mi
rror dm_mod ext3 jbd mbcache
[16645.528000] CPU:    0
[16645.528000] EIP:    0060:[<df8ed1da>]    Tainted: P       VLI
[16645.528000] EFLAGS: 00010202   (2.6.21crash #3)
[16645.528000] EIP is at end_unlink_async+0x1b/0xc5 [ehci_hcd]
[16645.528000] eax: 00000060   ebx: de4f20dc   ecx: df912020   edx: df8f0b57
[16645.528000] esi: 00000000   edi: de4f20dc   ebp: c58a9d4c   esp: c58a9d40
[16645.528000] ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0068
[16645.528000] Process mythbackend (pid: 12863, ti=c58a8000 task=dbb3d070 
task.ti=c58a8000)
[16645.528000] Stack: 00000020 00000000 de4f20dc c58a9dbc df8ed7d6 d74ba800 
de4f20dc de4f20d
c
[16645.528000]        dd9bd080 c58a9d78 df8ed22a de4f20dc 00000000 de4f20dc 
c58a9de8 df8ed7d
6
[16645.528000]        000000bc c58a9d9c 00000292 00000000 00000000 c56ce254 
de4f20dc 0000000
0
[16645.528000] Call Trace:
[16645.528000]  [<c0104a3e>] show_trace_log_lvl+0x1a/0x2f
[16645.528000]  [<c0104aee>] show_stack_log_lvl+0x9b/0xa3
[16645.528000]  [<c0104cac>] show_registers+0x1b6/0x288
[16645.528000]  [<c0104e68>] die+0xea/0x1bd
[16645.528000]  [<c0113bcf>] do_page_fault+0x435/0x506
[16645.528000]  [<c0289cbc>] error_code+0x74/0x7c
[16645.528000]  [<df8ed7d6>] ehci_work+0x22/0x64b [ehci_hcd]
[16645.528000]  [<df8f21b5>] ehci_irq+0x234/0x254 [ehci_hcd]
[16645.528000]  [<df8a83af>] usb_hcd_irq+0x24/0x51 [usbcore]
[16645.528000]  [<c013b3e2>] handle_IRQ_event+0x21/0x48
[16645.528000]  [<c013c515>] handle_level_irq+0x5f/0x96
[16645.528000]  [<c0105f8a>] do_IRQ+0x5c/0x7a
[16645.528000]  [<c010453f>] common_interrupt+0x23/0x28
[16645.528000]  [<c0140892>] free_hot_page+0xa/0xc
[16645.528000]  [<c01408ae>] __free_pages+0x1a/0x25
[16645.528000]  [<c014c0bc>] __vunmap+0xa2/0xcb
[16645.528000]  [<c014c16f>] vfree+0x25/0x27
[16645.528000]  [<dfb1e77b>] dvb_dvr_release+0x5b/0xb4 [dvb_core]
[16645.528000]  [<c0155973>] __fput+0xa9/0x153
[16645.528000]  [<c0155a33>] fput+0x16/0x18
[16645.528000]  [<c01535cf>] filp_close+0x54/0x5c
[16645.528000]  [<c0154597>] sys_close+0x57/0x8d
[16645.528000]  [<c0103b30>] sysenter_past_esp+0x5d/0x81
[16645.528000]  =======================
[16645.528000] Code: e0 89 f8 e8 4c 4c 86 e0 83 c4 2c 5b 5e 5f c9 c3 55 89 e5 
57 56 53 89 c3
 8b 70 14 0f ba b0 bc 00 00 00 01 8d 46 60 ba 57 0b 8f df <c6> 46 68 03 c7 46 
48 00 00 00 00
 e8 21 8d 8c e0 8b 7e 58 80 63
[16645.528000] EIP: [<df8ed1da>] end_unlink_async+0x1b/0xc5 [ehci_hcd] SS:ESP 
0068:c58a9d40
Value=0x0336 wIndex=0x0000 wLength=2

crash> l *end_unlink_async+0x1b
0xdf8ed1da is in end_unlink_async (ehci-q.c:974).
969             struct ehci_qh          *next;
970
971             timer_action_done (ehci, TIMER_IAA_WATCHDOG);
972
973             // qh->hw_next = cpu_to_le32 (qh->qh_dma);
974             qh->qh_state = QH_STATE_IDLE;
975             qh->qh_next.qh = NULL;
976             qh_put (qh);                    // refcount from reclaim
977
978             /* other unlink(s) may be pending (in QH_STATE_UNLINK_WAIT) */

crash> l *ehci_work+0x22
0xdf8ed7d6 is in ehci_work (drivers/usb/host/ehci-hcd.c:370).
360     static void ehci_work (struct ehci_hcd *ehci)
361     {
362             timer_action_done (ehci, TIMER_IO_WATCHDOG);
363             if (ehci->reclaim_ready)
364                     end_unlink_async (ehci);
365
366             /* another CPU may drop ehci->lock during a schedule scan while
367              * it reports urb completions.  this flag guards against bogus
368              * attempts at re-entrant schedule scanning.
369              */
370             if (ehci->scanning)
371                     return;
372             ehci->scanning = 1;

crash> l *dvb_dvr_release+0x5b
0xdfb1e77b is in dvb_dvr_release (/home/chris/Soft/v4l-5877/v4l/dmxdev.c:211).
206                             spin_unlock_irq(&dmxdev->lock);
207                             vfree(mem);
208                     }
209             }
210             /* TODO */
211             dvbdev->users--;
212             if(dvbdev->users==-1 && dmxdev->exit==1) {
213                     fops_put(file->f_op);
214                     file->f_op = NULL;
215                     mutex_unlock(&dmxdev->mutex);


crash> bt -t
PID: 12863  TASK: dbb3d070  CPU: 0   COMMAND: "mythbackend"
      START: crash_kexec at c01372cc
  [c58a9c3c] qh_destroy at df8f0b57
  [c58a9c60] end_unlink_async at df8ed1da
  [c58a9c80] die at c0104ef6
  [c58a9cc0] do_page_fault at c0113bcf
  [c58a9cfc] do_page_fault at c011379a
  [c58a9d04] error_code at c0289cbc
  [c58a9d10] qh_destroy at df8f0b57
  [c58a9d34] end_unlink_async at df8ed1da
  [c58a9d50] ehci_work at df8ed7d6
  [c58a9d68] end_unlink_async at df8ed22a
  [c58a9d7c] ehci_work at df8ed7d6
  [c58a9dc0] ehci_irq at df8f21b5
  [c58a9dec] ehci_irq at df8f21b5
  [c58a9e18] copy_from_user at c01b91a6
  [c58a9e2c] core_sys_select at c015f4ad
  [c58a9e4c] usb_hcd_irq at df8a83af
  [c58a9e58] handle_IRQ_event at c013b3e2
  [c58a9e70] handle_level_irq at c013c515
  [c58a9e80] do_IRQ at c0105f8a
  [c58a9e84] handle_IRQ_event at c013b3e2
  [c58a9ea4] common_interrupt at c010453f
  [c58a9ed4] free_hot_cold_page at c0140853
  [c58a9f00] free_hot_page at c0140892
  [c58a9f08] __free_pages at c01408ae
  [c58a9f10] __vunmap at c014c0bc
  [c58a9f34] vfree at c014c16f
  [c58a9f3c] dvb_dvr_release at dfb1e77b
  [c58a9f58] __fput at c0155973
  [c58a9f80] fput at c0155a33
  [c58a9f88] filp_close at c01535cf
  [c58a9fa0] sys_close at c0154597
  [c58a9fb4] sysenter_past_esp at c0103b30

crash> bt -f
PID: 12863  TASK: dbb3d070  CPU: 0   COMMAND: "mythbackend"
 #0 [c58a9c34] crash_kexec at c01372cc
    [RA: c0104ef6  SP: c58a9c34  FP: c58a9c80  SIZE: 80]
    c58a9c34: de4f20dc  df912020  df8f0b57  00000000
    c58a9c44: de4f20dc  c58a9d4c  00000060  0000007b
    c58a9c54: 0000007b  000000d8  ffffffff  df8ed1da
    c58a9c64: 00000060  00010202  c58a9d40  00000068
    c58a9c74: c58a9d40  00000202  c58a9cbc  c0104ef6
 #1 [c58a9c80] die at c0104ef1
    [RA: c0113bcf  SP: c58a9c84  FP: c58a9cc0  SIZE: 64]
    c58a9c84: c02c45e9  00000068  c58a9d40  00000001
    c58a9c94: c02c986a  00680000  c58a9d08  c02c986a
    c58a9ca4: 00000002  0000000e  0000000b  00000068
    c58a9cb4: 00000000  00000068  c58a9d00  c0113bcf
 #2 [c58a9cc0] do_page_fault at c0113bca
    [RA: c0289cbc  SP: c58a9cc4  FP: c58a9d04  SIZE: 68]
    c58a9cc4: c02c9848  00000000  00000002  c58a9d08
    c58a9cd4: dbb3d070  dea60d80  0000022a  c58a9d08
    c58a9ce4: c02c97a7  00000002  0000000e  0000000b
    c58a9cf4: de4f20dc  00000000  c011379a  c58a9d4c
    c58a9d04: c0289cbc
 #3 [c58a9d04] error_code (via page_fault) at c0289cba
    EAX: 00000060  EBX: de4f20dc  ECX: df912020  EDX: df8f0b57
    DS:  007b      ESI: 00000000  ES:  007b      EDI: de4f20dc
    SS:  0000      ESP: 00000020  EBP: c58a9d4c
    CS:  0060      EIP: df8ed1da  ERR: ffffffff  EFLAGS: 00010202
    [RA: ffffffff  SP: c58a9d08  FP: c58a9d38  SIZE: 52]
    c58a9d08: de4f20dc  df912020  df8f0b57  00000000
    c58a9d18: de4f20dc  c58a9d4c  00000060  0000007b
    c58a9d28: 0000007b  000000d8  ffffffff  df8ed1da
    c58a9d38: 00000060
crash>

crash> bt -f -S c58a9d38
PID: 12863  TASK: dbb3d070  CPU: 0   COMMAND: "mythbackend"
 #0 [c58a9d38] schedule at c0288a62
    [RA: df8f21b5  SP: c58a9d38  FP: c58a9dc0  SIZE: 140]
    c58a9d38: 00000060  00010202  00000020  00000000
    c58a9d48: de4f20dc  c58a9dbc  df8ed7d6  d74ba800
    c58a9d58: de4f20dc  de4f20dc  dd9bd080  c58a9d78
    c58a9d68: df8ed22a  de4f20dc  00000000  de4f20dc
    c58a9d78: c58a9de8  df8ed7d6  000000bc  c58a9d9c
    c58a9d88: 00000292  00000000  00000000  c56ce254
    c58a9d98: de4f20dc  00000000  de4f2000  dd9bfd28
    c58a9da8: deba3d28  00000000  00000020  00000000
    c58a9db8: de4f20dc  c58a9e48  df8f21b5
 #1 [c58a9dc0] ehci_irq at df8f21b0
    [RA: df8a83af  SP: c58a9dc4  FP: c58a9e4c  SIZE: 140]
    c58a9dc4: dfb4d000  00000000  d74ba800  00000234
    c58a9dd4: 00000001  de4f2000  00000000  00000001
    c58a9de4: 00000020  c58a9e74  df8f21b5  d5a68acc
    c58a9df4: 000000bc  c58a9e1c  00000020  00000000
    c58a9e04: de4f2000  00000000  00000001  00000020
    c58a9e14: c58a9e28  c01b91a6  00000004  c58a9e48
    c58a9e24: c58a9e54  c58a9f6c  c015f4ad  00000000
    c58a9e34: aecb02a0  00000000  de4f2000  00000000
    c58a9e44: 00000000  c58a9e54  df8a83af
 #2 [c58a9e4c] usb_hcd_irq at df8a83ac
    [RA: c013b3e2  SP: c58a9e50  FP: c58a9e58  SIZE: 12]
    c58a9e50: dd8ec440  c58a9e6c  c013b3e2
 #3 [c58a9e58] handle_IRQ_event at c013b3e0
    [RA: c013c515  SP: c58a9e5c  FP: c58a9e70  SIZE: 24]
    c58a9e5c: 00000007  c031dc00  00000007  00000007
    c58a9e6c: c58a9e7c  c013c515
 #4 [c58a9e70] handle_level_irq at c013c510
    [RA: c0105f8a  SP: c58a9e74  FP: c58a9e80  SIZE: 16]
    c58a9e74: 000001c0  c031dc00  c58a9ea0  c0105f8a
 #5 [c58a9e80] do_IRQ at c0105f84
    [RA: c010453f  SP: c58a9e84  FP: c58a9ea4  SIZE: 36]
    c58a9e84: c013b3e2  00000007  c031dc00  00000000
    c58a9e94: c512fc20  c0305e14  00000282  c58a9efc
    c58a9ea4: c010453f
 #6 [c58a9ea4] common_interrupt at c010453a
    EAX: 0000009b  EBX: c512fc20  ECX: 00000000  EDX: c0305e1c
    DS:  007b      ESI: c0305e14  ES:  007b      EDI: 00000282
    SS:  0000      ESP: 00000000  EBP: c58a9efc
    CS:  0060      EIP: c0140853  ERR: fffffff8  EFLAGS: 00000282
    [RA: fffffff8  SP: c58a9ea8  FP: c58a9ee0  SIZE: 60]
    c58a9ea8: c512fc20  00000000  c0305e1c  c0305e14
    c58a9eb8: 00000282  c58a9efc  0000009b  0000007b
    c58a9ec8: 0000007b  000000d8  fffffff8  c0140853
    c58a9ed8: 00000060  00000282  00000000
crash>

crash> bt -f -S c58a9ee0
PID: 12863  TASK: dbb3d070  CPU: 0   COMMAND: "mythbackend"
 #0 [c58a9ee0] schedule at c0288a62
    [RA: c014c16f  SP: c58a9ee0  FP: c58a9f34  SIZE: 88]
    c58a9ee0: 00000000  00000000  c0305e04  c0305e1c
    c58a9ef0: 000000fe  de4fe980  00000001  c58a9f04
    c58a9f00: c0140892  c58a9f0c  c01408ae  c58a9f30
    c58a9f10: c014c0bc  00000286  c56ce234  c58a9f34
    c58a9f20: 00000286  c56ce234  de4188e0  d548c500
    c58a9f30: c58a9f38  c014c16f
 #1 [c58a9f34] vfree at c014c16a
    [RA: dfb1e77b  SP: c58a9f38  FP: c58a9f3c  SIZE: 8]
    c58a9f38: c58a9f54  dfb1e77b
 #2 [c58a9f3c] dvb_dvr_release at dfb1e776
    [RA: c0155973  SP: c58a9f40  FP: c58a9f58  SIZE: 28]
    c58a9f40: c58a9f48  c56ce270  00000010  dd6de5f8
    c58a9f50: d548c500  c58a9f7c  c0155973
 #3 [c58a9f58] __fput at c0155971
    [RA: c0155a33  SP: c58a9f5c  FP: c58a9f80  SIZE: 40]
    c58a9f5c: 00000000  00000000  dd6bb454  deee3120
    c58a9f6c: dd6de5f8  d548c500  dee97500  00000000
    c58a9f7c: c58a9f84  c0155a33
 #4 [c58a9f80] fput at c0155a2e
    [RA: c01535cf  SP: c58a9f84  FP: c58a9f88  SIZE: 8]
    c58a9f84: c58a9f9c  c01535cf
 #5 [c58a9f88] filp_close at c01535ca
    [RA: c0154597  SP: c58a9f8c  FP: c58a9fa0  SIZE: 24]
    c58a9f8c: aecb0320  dee97500  00000030  d548c500
    c58a9f9c: c58a9fb0  c0154597
 #6 [c58a9fa0] sys_close at c0154592
    [RA: c0103b30  SP: c58a9fa4  FP: c58a9fb4  SIZE: 20]
    c58a9fa4: 0000000c  00000000  aecb0320  c58a8000
    c58a9fb4: c0103b30
 #7 [c58a9fb4] sysenter_entry at c0103b29
    EAX: 00000006  EBX: 0000000c  ECX: 00000000  EDX: b7ec87c4
    DS:  007b      ESI: 00000000  ES:  007b      EDI: aecb0320
    SS:  007b      ESP: aecb021c  EBP: aecb0428
    CS:  0073      EIP: ffffe410  ERR: 00000006  EFLAGS: 00000293
    [RA: 293  SP: c58a9fb8  FP: c58a9ffc  SIZE: 72]
    c58a9fb8: 0000000c  00000000  b7ec87c4  00000000
    c58a9fc8: aecb0320  aecb0428  00000006  0000007b
    c58a9fd8: 0000007b  00000000  00000006  ffffe410
    c58a9fe8: 00000073  00000293  aecb021c  0000007b
    c58a9ff8: c61ce0c6  c8e628d4
crash>

??!?
c58a9f5c: 00000000  00000000  dd6bb454  deee3120
c58a9f6c: dd6de5f8  d548c500  dee97500  00000000

crash> struct file.f_path d548c500
  f_path = {
    mnt = 0xdeee3120,
    dentry = 0xdd6bb454
  },
crash> struct dentry.d_inode 0xdd6bb454
  d_inode = 0xdd6de5f8,

crash> struct file.f_op d548c500
  f_op = 0xc55be540,
crash> struct file_operations.release 0xc55be540
  release = 0xdfb1e720 <dvb_dvr_release>,

crash> struct file.private_data d548c500
  private_data = 0xde4188e0,
crash> struct dvb_device 0xde4188e0
struct dvb_device {
  list_head = {
    next = 0xc56ce20c,
    prev = 0xde418c20
  },
  fops = 0xc55be540,
  adapter = 0xc56ce200,
  type = 5,
  id = 0,
  readers = 1,
  writers = 0,
  users = 2,
  wait_queue = {
    lock = {
      raw_lock = <incomplete type>
    },
    task_list = {
      next = 0xde418904,
      prev = 0xde418904
    }
  },
  kernel_ioctl = 0,
  priv = 0xc56ce234
}

crash> struct dmxdev 0xc56ce234
struct dmxdev {
  dvbdev = 0xde418c20,
  dvr_dvbdev = 0xde4188e0,
  filter = 0xdfc62000,
  demux = 0xc56ce004,
  filternum = 256,
  capabilities = 0,
  exit = 0,
  dvb_lock = 0,
  dvr_orig_fe = 0x0,
  dvr_buffer = {
    data = 0x0,
    size = 1925120,
    pread = 676988,
    pwrite = 676988,
    error = 0,
    queue = {
      lock = {
        raw_lock = <incomplete type>
      },
      task_list = {
        next = 0xc56ce268,
        prev = 0xc56ce268
      }
    },
    lock = {
      raw_lock = <incomplete type>
    }
  },
  mutex = {
    count = {
      counter = 0
    },
    wait_lock = {
      raw_lock = <incomplete type>
    },
    wait_list = {
      next = 0xc56ce274,
      prev = 0xc56ce274
    }
  },
  lock = {
    raw_lock = <incomplete type>
  }
}


[c58a9d10] qh_destroy at df8f0b57
bt -f -S c58a9d10
PID: 12863  TASK: dbb3d070  CPU: 0   COMMAND: "mythbackend"
 #0 [c58a9d10] schedule at c0288a62
    [RA: df8ed22a  SP: c58a9d10  FP: c58a9d68  SIZE: 92]
    c58a9d10: df8f0b57  00000000  de4f20dc  c58a9d4c
    c58a9d20: 00000060  0000007b  0000007b  000000d8
    c58a9d30: ffffffff  df8ed1da  00000060  00010202
    c58a9d40: 00000020  00000000  de4f20dc  c58a9dbc
    c58a9d50: df8ed7d6  d74ba800  de4f20dc  de4f20dc
    c58a9d60: dd9bd080  c58a9d78  df8ed22a
 #1 [c58a9d68] end_unlink_async at df8ed225
    [RA: df8ed7d6  SP: c58a9d6c  FP: c58a9d7c  SIZE: 20]
    c58a9d6c: de4f20dc  00000000  de4f20dc  c58a9de8
    c58a9d7c: df8ed7d6
 #2 [c58a9d7c] ehci_work at df8ed7d1
    [RA: df8f21b5  SP: c58a9d80  FP: c58a9dec  SIZE: 112]
    c58a9d80: 000000bc  c58a9d9c  00000292  00000000
    c58a9d90: 00000000  c56ce254  de4f20dc  00000000
    c58a9da0: de4f2000  dd9bfd28  deba3d28  00000000
    c58a9db0: 00000020  00000000  de4f20dc  c58a9e48
    c58a9dc0: df8f21b5  dfb4d000  00000000  d74ba800
    c58a9dd0: 00000234  00000001  de4f2000  00000000
    c58a9de0: 00000001  00000020  c58a9e74  df8f21b5
 #3 [c58a9dec] ehci_irq at df8f21b0
    [RA: c013c515  SP: c58a9df0  FP: c58a9e70  SIZE: 132]
    c58a9df0: d5a68acc  000000bc  c58a9e1c  00000020
    c58a9e00: 00000000  de4f2000  00000000  00000001
    c58a9e10: 00000020  c58a9e28  c01b91a6  00000004
    c58a9e20: c58a9e48  c58a9e54  c58a9f6c  c015f4ad
    c58a9e30: 00000000  aecb02a0  00000000  de4f2000
    c58a9e40: 00000000  00000000  c58a9e54  df8a83af
    c58a9e50: dd8ec440  c58a9e6c  c013b3e2  00000007
    c58a9e60: c031dc00  00000007  00000007  c58a9e7c
    c58a9e70: c013c515
 #4 [c58a9e70] handle_level_irq at c013c510
    [RA: c0105f8a  SP: c58a9e74  FP: c58a9e80  SIZE: 16]
    c58a9e74: 000001c0  c031dc00  c58a9ea0  c0105f8a
 #5 [c58a9e80] do_IRQ at c0105f84
    [RA: c010453f  SP: c58a9e84  FP: c58a9ea4  SIZE: 36]
    c58a9e84: c013b3e2  00000007  c031dc00  00000000
    c58a9e94: c512fc20  c0305e14  00000282  c58a9efc
    c58a9ea4: c010453f
 #6 [c58a9ea4] common_interrupt at c010453a
    EAX: 0000009b  EBX: c512fc20  ECX: 00000000  EDX: c0305e1c
    DS:  007b      ESI: c0305e14  ES:  007b      EDI: 00000282
    SS:  0000      ESP: 00000000  EBP: c58a9efc
    CS:  0060      EIP: c0140853  ERR: fffffff8  EFLAGS: 00000282
    [RA: fffffff8  SP: c58a9ea8  FP: c58a9ee0  SIZE: 60]
    c58a9ea8: c512fc20  00000000  c0305e1c  c0305e14
    c58a9eb8: 00000282  c58a9efc  0000009b  0000007b
    c58a9ec8: 0000007b  000000d8  fffffff8  c0140853
    c58a9ed8: 00000060  00000282  00000000

--
...
--

try&error ...
struct usb_hcd 0xde4f2000 

struct usb_hcd {
  self = {
    controller = 0xc54ef048,
    busnum = 4,
    bus_name = 0xc54ef0ec "0000:00:03.3",
    uses_dma = 1 '\001',
    otg_port = 0 '\0',
    is_b_host = 0,
    b_hnp_enable = 0,
    devnum_next = 6,
    devmap = {
      devicemap = {50, 0, 0, 0}
    },
    root_hub = 0xddef9400,
    bus_list = {
      next = 0xddef9c28,
      prev = 0xdf8c32ec
    },
    bandwidth_allocated = 0,
    bandwidth_int_reqs = 0,
    bandwidth_isoc_reqs = 0,
    usbfs_dentry = 0xde3970d4,
    class_dev = 0xde3d9860,
    mon_bus = 0x0,
    monitored = 0
  },
  kref = {
    refcount = {
      counter = 4
    }
  },
  product_desc = 0xdf8f3816 "EHCI Host Controller",
  irq_descr = "ehci_hcd:usb4\000\000\000\000\000\000\000\000\000\000",
  rh_timer = {
    entry = {
      next = 0x0,
      prev = 0x200200
    },
    expires = 4294896141,
    function = 0xdf8a834c <rh_timer_func>,
    data = 3729727488,
    base = 0xc0373980,
    start_site = 0xdf8a895b,
    start_comm = "modprobe\000\000\000\000\000\000\000",
    start_pid = 1259
  },
  status_urb = 0xddefaac0,
  driver = 0xdf8f2960,
  flags = 6,
  rh_registered = 1,
  uses_new_polling = 1,
  poll_rh = 0,
  poll_pending = 0,
  wireless = 0,
  irq = 7,
  regs = 0xdf912000,
  rsrc_start = 3960672256,
  rsrc_len = 4096,
  power_budget = 0,
  pool = {0xdea06da0, 0xddefad40, 0xdea06ea0, 0xddefadc0},
  state = 1,
  hcd_priv = 0xde4f20dc
}


struct ehci_hcd 0xde4f20dc
struct ehci_hcd {
  caps = 0xdf912000,
  regs = 0xdf912020,
  debug = 0x0,
  hcs_params = 1061640,
  lock = {
    raw_lock = <incomplete type>
  },
  async = 0xdd9bd000,
  reclaim = 0x0,
  reclaim_ready = 1,
  scanning = 0,
  periodic_size = 1024,
  periodic = 0xdd9bf000,
  periodic_dma = 496758784,
  i_thresh = 9,
  pshadow = 0xdeba3000,
  next_uframe = 6737,
  periodic_sched = 0,
  reset_done = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0},
  bus_suspended = 0,
  companion_ports = 0,
  qh_pool = 0xdea062a0,
  qtd_pool = 0xdecc90e0,
  itd_pool = 0xddefac40,
  sitd_pool = 0xddefabc0,
  watchdog = {
    entry = {
      next = 0xc0373d00,
      prev = 0xc6305b3c
    },
    expires = 4086383,
    function = 0xdf8f1b52 <ehci_watchdog>,
    data = 3729727708,
    base = 0xc0373980,
    start_site = 0xdf8ed8f1,
    start_comm = "ps\000.agent\000\000\000\000\000\000",
    start_pid = 1459
  },
  actions = 8,
  stamp = 2793170,
  next_statechange = 4294896115,
  command = 65537,
  is_tdi_rh_tt = 0,
  no_selective_suspend = 0,
  has_fsl_port_bug = 0,
  big_endian_mmio = 0,
  sbrn = 32 ' ',
  stats = {
    normal = 2307669,
    error = 2,
    reclaim = 169285,
    lost_iaa = 59,
    complete = 2319737,
    unlink = 175
  }
}

_______________________________________________
Em28xx mailing list
[email protected]
http://mcentral.de/mailman/listinfo/em28xx

Reply via email to