Date: Mon, 30 Jul 2007 18:20:27 +0200 From: Henrik Brix Andersen <henrik@brixandersen.dk> To: current@freebsd.org Subject: Panic on CardBus card eject (ubsa(4)) Message-ID: <20070730162026.GB8231@tirith.brixandersen.dk>
next in thread | raw e-mail | index | archive | help
--pf9I7BMVVzbSWLtt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Hi,
I got a new CardBus 3G modem today, a Huawei E620, which is supported
by the ubsa(4) driver. However, ejecting the card produces the
following panic:
Script started on Mon Jul 30 17:48:49 2007
lothlorien# kgdb kernel /var/crash/vmcore.3
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so:=
Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
Unread portion of the kernel message buffer:
ucom0: detached
(null): at uhub5 port 1 (addr 2) disconnected
Fatal trap 12: page fault while in kernel mode
cpuid =3D 0; apic id =3D 00
fault virtual address =3D 0x400
fault code =3D supervisor read, page not present
instruction pointer =3D 0x20:0xc0634c08
stack pointer =3D 0x28:0xe3f4fb48
frame pointer =3D 0x28:0xe3f4fb68
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, def32 1, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 0
current process =3D 37 (cbb0 event thread)
trap number =3D 12
panic: page fault
cpuid =3D 1
Uptime: 28m23s
Physical memory: 1006 MB
Dumping 83 MB: 68 52 36 20 4
#0 doadump () at pcpu.h:195
195 __asm __volatile("movl %%fs:0,%0" : "=3Dr" (td));
(kgdb) bt
#0 doadump () at pcpu.h:195
#1 0xc060e59a in boot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:4=
09
#2 0xc060e86d in panic (fmt=3DVariable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:563
#3 0xc07e8f5e in trap_fatal (frame=3D0xe3f4fb08, eva=3DVariable "eva" is n=
ot available.
) at /usr/src/sys/i386/i386/trap.c:870
#4 0xc07e91ae in trap_pfault (frame=3D0xe3f4fb08, usermode=3D0, eva=3D1024=
) at /usr/src/sys/i386/i386/trap.c:784
#5 0xc07e9a98 in trap (frame=3D0xe3f4fb08) at /usr/src/sys/i386/i386/trap.=
c:462
#6 0xc07d1d3b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7 0xc0634c08 in kobj_delete (obj=3D0xc4547e00, mtype=3D0xc0894320) at /us=
r/src/sys/kern/subr_kobj.c:332
#8 0xc062f122 in device_delete_child (dev=3D0xc4559180, child=3D0xc4547e00=
) at /usr/src/sys/kern/subr_bus.c:1617
#9 0xc059ea7c in usb_disconnect_port (up=3D0xc4559430, parent=3D0xc4559180=
) at /usr/src/sys/dev/usb/usb_subr.c:1382
#10 0xc0594d84 in uhub_detach (self=3D0xc4559180) at /usr/src/sys/dev/usb/u=
hub.c:575
#11 0xc062eedc in device_detach (dev=3D0xc4559180) at device_if.h:212
#12 0xc062f0bf in device_delete_child (dev=3D0xc4194080, child=3D0xc4559180=
) at /usr/src/sys/kern/subr_bus.c:1611
#13 0xc062f0aa in device_delete_child (dev=3D0xc454da80, child=3D0xc4194080=
) at /usr/src/sys/kern/subr_bus.c:1606
#14 0xc058be62 in ohci_pci_detach (self=3D0xc454da80) at /usr/src/sys/dev/u=
sb/ohci_pci.c:371
#15 0xc062eedc in device_detach (dev=3D0xc454da80) at device_if.h:212
#16 0xc04eb32b in cardbus_detach_card (cbdev=3D0xc3c4b600) at /usr/src/sys/=
dev/cardbus/cardbus.c:235
#17 0xc0537f95 in cbb_event_thread (arg=3D0xc3b79000) at card_if.h:95
#18 0xc05effd1 in fork_exit (callout=3D0xc0537df0 <cbb_event_thread>, arg=
=3D0xc3b79000, frame=3D0xe3f4fd38)
at /usr/src/sys/kern/kern_fork.c:797
#19 0xc07d1db0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:=
205
(kgdb) up 7
#7 0xc0634c08 in kobj_delete (obj=3D0xc4547e00, mtype=3D0xc0894320) at /us=
r/src/sys/kern/subr_kobj.c:332
332 kobj_class_t cls =3D obj->ops->cls;
(kgdb) print obj->ops
$1 =3D 0x0
(kgdb) quit
lothlorien# exit
Script done on Mon Jul 30 17:49:36 2007
Anybody seen this before?
This is with -current from yesterday:
$ uname -a
FreeBSD lothlorien.brixandersen.dk 7.0-CURRENT FreeBSD 7.0-CURRENT #59: Sun=
Jul 29 13:32:00 CEST 2007 root@lothlorien.brixandersen.dk:/usr/obj/usr=
/src/sys/LOTHLORIEN i386
Regards,
Brix
--=20
Henrik Brix Andersen <henrik@brixandersen.dk>
--pf9I7BMVVzbSWLtt
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)
Comment: GnuPG signed
iD8DBQFGrg/Kv+Q4flTiePgRAj4zAJ4iPboD/G1Ll7b7hHRmqIDxnkb19ACdEefm
nJBL3oXzpluVqLSYfgm4ba0=
=eeNc
-----END PGP SIGNATURE-----
--pf9I7BMVVzbSWLtt--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070730162026.GB8231>