From owner-freebsd-stable@FreeBSD.ORG Sun Jul 19 22:19:31 2009 Return-Path: Delivered-To: freebsd-stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4EEC410656C8 for ; Sun, 19 Jul 2009 22:19:31 +0000 (UTC) (envelope-from nox@jelal.kn-bremen.de) Received: from smtp.kn-bremen.de (gelbbaer.kn-bremen.de [78.46.108.116]) by mx1.freebsd.org (Postfix) with ESMTP id EA8768FC1A for ; Sun, 19 Jul 2009 22:19:30 +0000 (UTC) (envelope-from nox@jelal.kn-bremen.de) Received: by smtp.kn-bremen.de (Postfix, from userid 10) id 57F4D1E000E5; Mon, 20 Jul 2009 00:03:56 +0200 (CEST) Received: from triton.kn-bremen.de (noident@localhost [127.0.0.1]) by triton.kn-bremen.de (8.14.3/8.14.3) with ESMTP id n6JLqOkg002283; Sun, 19 Jul 2009 23:52:24 +0200 (CEST) (envelope-from nox@triton.kn-bremen.de) Received: (from nox@localhost) by triton.kn-bremen.de (8.14.3/8.14.3/Submit) id n6JLqOAi002282; Sun, 19 Jul 2009 23:52:24 +0200 (CEST) (envelope-from nox) From: Juergen Lock Date: Sun, 19 Jul 2009 23:52:24 +0200 To: freebsd-stable@FreeBSD.org, freebsd-usb@FreeBSD.org Message-ID: <20090719215224.GA2271@triton.kn-bremen.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Mutt/1.5.20 (2009-06-14) Cc: Subject: new umass panic on 7-stable built today X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Jul 2009 22:19:31 -0000 Hi! So I wanted to use an usb key on this freshly updated 7-stable box, and got a panic just after plugging it in: :( zsh triton# kgdb /boot/kernel/kernel.symbols /var/crash/vmcore.9 =2E.. umass0: on uhub5 umass0:1:0:-1: Attached to scbus1 Fatal trap 12: page fault while in kernel mode cpuid =3D 0; apic id =3D 00 fault virtual address =3D 0x290 fault code =3D supervisor read data, page not present instruction pointer =3D 0x8:0xffffffff804d67d4 stack pointer =3D 0x10:0xffffff8085487da0 frame pointer =3D 0x10:0xffffff8085487de0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 38 (usb5) trap number =3D 12 panic: page fault cpuid =3D 0 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2a panic() at panic+0x182 trap_fatal() at trap_fatal+0x2b3 trap_pfault() at trap_pfault+0x294 trap() at trap+0x312 calltrap() at calltrap+0x8 --- trap 0xc, rip =3D 0xffffffff804d67d4, rsp =3D 0xffffff8085487da0, rbp = =3D 0xffffff8085487de0 --- usb_transfer_complete() at usb_transfer_complete+0x1d4 bus_dmamap_load() at bus_dmamap_load+0x314 usbd_transfer() at usbd_transfer+0xee usbd_do_request_flags_pipe() at usbd_do_request_flags_pipe+0x8f usbd_do_request_flags() at usbd_do_request_flags+0x25 usbd_get_string_desc() at usbd_get_string_desc+0x9b usbd_get_string() at usbd_get_string+0x83 uhub_child_pnpinfo_str() at uhub_child_pnpinfo_str+0xd9 devaddq() at devaddq+0xd5 device_attach() at device_attach+0x13a usbd_new_device() at usbd_new_device+0x821 uhub_explore() at uhub_explore+0x1bd usb_discover() at usb_discover+0x38 usb_event_thread() at usb_event_thread+0x8a fork_exit() at fork_exit+0x11f fork_trampoline() at fork_trampoline+0xe --- trap 0, rip =3D 0, rsp =3D 0xffffff8085488d30, rbp =3D 0 --- Uptime: 1m1s Physical memory: 8176 MB Dumping 4605 MB: 4590 4574 4558 4542 4526 4510 4494 4478 4462 4446 4430 441= 4 4398 4382 4366 4350 4334 4318 4302 4286 4270 4254 4238 4222 4206 4190 417= 4 4158 4142 4126 4110 4094 4078 4062 4046 4030 4014 3998 3982 3966 3950 393= 4 3918 3902 3886 3870 3854 3838 3822 3806 3790 3774 3758 3742 3726 3710 369= 4 3678 3662 3646 3630 3614 3598 3582 3566 3550 3534 3518 3502 3486 3470 345= 4 3438 3422 3406 3390 3374 3358 3342 3326 3310 3294 3278 3262 3246 3230 321= 4 3198 3182 3166 3150 3134 3118 3102 3086 3070 3054 3038 3022 3006 2990 297= 4 2958 2942 2926 2910 2894 2878 2862 2846 2830 2814 2798 2782 2766 2750 273= 4 2718 2702 2686 2670 2654 2638 2622 2606 2590 2574 2558 2542 2526 2510 249= 4 2478 2462 2446 2430 2414 2398 2382 2366 2350 2334 2318 2302 2286 2270 225= 4 2238 2222 2206 2190 2174 2158 2142 2126 2110 2094 2078 2062 2046 2030 201= 4 1998 1982 1966 1950 1934 1918 1902 1886 1870 1854 1838 1822 1806 1790 177= 4 1758 1742 1726 1710 1694 1678 1662 1646 1630 1614 1598 1582 1566 1550 153= 4 1518 1502 1486 1470 1454 1438 1422 1406 1390 1374 1358 1342 1326 1310 129= 4 1278 1262 1246 1230 1214 1198 1182 1166 1150 1134 1118 1102 1086 1070 105= 4 1038 1022 1006 990 974 958 942 926 910 894 878 862 846 830 814 798 782 76= 6 750 734 718 702 686 670 654 638 622 606 590 574 558 542 526 510 494 478 4= 62 446 430 414 398 382 366 350 334 318 302 286 270 254 238 222 206 190 174 = 158 142 126 110 94 78 62 46 30 14 Reading symbols from /boot/kernel/umass.ko...Reading symbols from /boot/ker= nel/umass.ko.symbols...done. done. Loaded symbols for /boot/kernel/umass.ko #0 doadump () at pcpu.h:195 195 __asm __volatile("movq %%gs:0,%0" : "=3Dr" (td)); (kgdb) bt #0 doadump () at pcpu.h:195 #1 0xffffffff80567248 in boot (howto=3D260) at /usr/home/nox/src72s2/src/sys/kern/kern_shutdown.c:418 #2 0xffffffff805676ac in panic (fmt=3DVariable "fmt" is not available. ) at /usr/home/nox/src72s2/src/sys/kern/kern_shutdown.c:574 #3 0xffffffff8082f953 in trap_fatal (frame=3D0xc, eva=3DVariable "eva" is = not available. ) at /usr/home/nox/src72s2/src/sys/amd64/amd64/trap.c:756 #4 0xffffffff8082fd34 in trap_pfault (frame=3D0xffffff8085487cf0, usermode= =3D0) at /usr/home/nox/src72s2/src/sys/amd64/amd64/trap.c:672 #5 0xffffffff808306e2 in trap (frame=3D0xffffff8085487cf0) at /usr/home/nox/src72s2/src/sys/amd64/amd64/trap.c:443 #6 0xffffffff80819cce in calltrap () at /usr/home/nox/src72s2/src/sys/amd64/amd64/exception.S:218 #7 0xffffffff804d67d4 in usb_transfer_complete (xfer=3D0xffffff00046b1000) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:949 #8 0xffffffff80815bf4 in bus_dmamap_load (dmat=3D0xffffff0004499880,=20 map=3D0xffffff000478ec00, buf=3D0xffffff8085487fe0, buflen=3D0,=20 callback=3D0xffffffff804d68b0 ,=20 callback_arg=3D0xffffff00046b1000, flags=3D0) at /usr/home/nox/src72s2/src/sys/amd64/amd64/busdma_machdep.c:738 #9 0xffffffff804d6f2e in usbd_transfer (xfer=3D0xffffff00046b1000) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:312 #10 0xffffffff804d717f in usbd_do_request_flags_pipe (dev=3D0xffffff0004751= 600,=20 ---Type to continue, or q to quit--- pipe=3D0xffffff000474cd80, req=3D0xffffff8085487f80, data=3D0xffffff808= 5487fe0,=20 flags=3DVariable "flags" is not available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:1100 #11 0xffffffff804d72b5 in usbd_do_request_flags (dev=3DVariable "dev" is no= t available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:1070 #12 0xffffffff804d518b in usbd_get_string_desc (dev=3D0xffffff0004751600, s= index=3DVariable "sindex" is not available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usb_subr.c:171 #13 0xffffffff804d6473 in usbd_get_string (dev=3D0xffffff0004751600, si=3D3= ,=20 buf=3D0xffffff8085488160 "", len=3D128) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:1353 #14 0xffffffff804cdb49 in uhub_child_pnpinfo_str (cbdev=3DVariable "cbdev" = is not available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/uhub.c:658 #15 0xffffffff80590ce5 in devaddq (type=3D0xffffffff8090dccf "+",=20 what=3D0xffffff00046b0000 "umass0 vendor=3D0x0325 product=3D0xac02 devc= lass=3D0x00 devsubclass=3D0x00 release=3D0x1100 sernum=3D\"AA04012700152689= \" intclass=3D0x08 intsubclass=3D0x06", dev=3D0xffffff00046c0200) at /usr/home/nox/src72s2/src/sys/kern/subr_bus.c:625 #16 0xffffffff805914ba in device_attach (dev=3D0xffffff00046c0200) at /usr/home/nox/src72s2/src/sys/kern/subr_bus.c:668 #17 0xffffffff804d5b41 in usbd_new_device (parent=3D0xffffff00044a0200,=20 bus=3D0xffffff0004472000, depth=3DVariable "depth" is not available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usb_subr.c:926 #18 0xffffffff804cd79d in uhub_explore (dev=3D0xffffff00044a0300) at /usr/home/nox/src72s2/src/sys/dev/usb/uhub.c:523 ---Type to continue, or q to quit--- #19 0xffffffff804d23e8 in usb_discover (v=3DVariable "v" is not available. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usb.c:724 #20 0xffffffff804d33aa in usb_event_thread (arg=3DVariable "arg" is not ava= ilable. ) at /usr/home/nox/src72s2/src/sys/dev/usb/usb.c:440 #21 0xffffffff8054115f in fork_exit ( callout=3D0xffffffff804d3320 , arg=3D0xffffff00044b15= 80,=20 frame=3D0xffffff8085488c80) at /usr/home/nox/src72s2/src/sys/kern/kern_fork.c:811 #22 0xffffffff8081a0ae in fork_trampoline () at /usr/home/nox/src72s2/src/sys/amd64/amd64/exception.S:554 #23 0x0000000000000000 in ?? () #24 0x0000000000000000 in ?? () #25 0x0000000000000001 in ?? () #26 0x0000000000000000 in ?? () #27 0x0000000000000000 in ?? () #28 0x0000000000000000 in ?? () #29 0x0000000000000000 in ?? () #30 0x0000000000000000 in ?? () #31 0x0000000000000000 in ?? () #32 0x0000000000000000 in ?? () #33 0x0000000000000000 in ?? () #34 0x0000000000000000 in ?? () #35 0x0000000000000000 in ?? () ---Type to continue, or q to quit--- #36 0x0000000000000000 in ?? () #37 0x0000000000000000 in ?? () #38 0x0000000000000000 in ?? () #39 0x0000000000000000 in ?? () #40 0x0000000000000000 in ?? () #41 0x0000000000000000 in ?? () #42 0x0000000000000000 in ?? () #43 0x0000000000000000 in ?? () #44 0x0000000000000000 in ?? () #45 0x0000000000000000 in ?? () #46 0x0000000000000000 in ?? () #47 0x0000000000d84000 in ?? () #48 0x0000000000000001 in ?? () #49 0xffffffff80bba848 in sleepq_chains () #50 0xffffff00044a5720 in ?? () #51 0xffffff00044a5a70 in ?? () #52 0xffffff8085487da0 in ?? () #53 0xffffff8085487d38 in ?? () #54 0xffffff00044a5720 in ?? () #55 0xffffffff8058b01e in sched_switch (td=3D0x0, newtd=3DCannot access mem= ory at address 0xffffffffffffffa8 ) at /usr/home/nox/src72s2/src/sys/kern/sched_ule.c:1938 Previous frame inner to this frame (corrupt stack?) (kgdb) fr 7 #7 0xffffffff804d67d4 in usb_transfer_complete (xfer=3D0xffffff00046b1000) at /usr/home/nox/src72s2/src/sys/dev/usb/usbdi.c:949 949 STAILQ_REMOVE_HEAD(&pipe->queue, next); (kgdb) p pipe $1 =3D 0xffffff000474cd80 (kgdb) p *pipe $2 =3D {iface =3D 0x0, device =3D 0xffffff0004751600, endpoint =3D 0xffffff= 0004751638,=20 refcnt =3D 1, running =3D 0 '\0', aborting =3D 0 '\0', queue =3D {stqh_fi= rst =3D 0x0,=20 stqh_last =3D 0xffffff000474cda0}, next =3D {le_next =3D 0x0, le_prev = =3D 0x0},=20 intrxfer =3D 0x0, repeat =3D 0 '\0', interval =3D -1, methods =3D 0xfffff= fff80afbf00} (kgdb) q zsh triton#=20 Suggestions/patches welcome... Thanx, Juergen