From owner-freebsd-bugs@FreeBSD.ORG Sat Jul 26 16:10:04 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 146FC106566B for ; Sat, 26 Jul 2008 16:10:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id E56BA8FC16 for ; Sat, 26 Jul 2008 16:10:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m6QGA3ox085047 for ; Sat, 26 Jul 2008 16:10:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m6QGA35F085044; Sat, 26 Jul 2008 16:10:03 GMT (envelope-from gnats) Resent-Date: Sat, 26 Jul 2008 16:10:03 GMT Resent-Message-Id: <200807261610.m6QGA35F085044@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Mikhail T." Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 309DC106564A for ; Sat, 26 Jul 2008 16:07:58 +0000 (UTC) (envelope-from mi@aldan.algebra.com) Received: from aldan.algebra.com (aldan.algebra.com [216.254.65.224]) by mx1.freebsd.org (Postfix) with ESMTP id C0B328FC16 for ; Sat, 26 Jul 2008 16:07:56 +0000 (UTC) (envelope-from mi@aldan.algebra.com) Received: from aldan.algebra.com (localhost [127.0.0.1]) by aldan.algebra.com (8.14.2/8.14.1) with ESMTP id m6QFv535001345 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sat, 26 Jul 2008 11:57:06 -0400 (EDT) (envelope-from mi@aldan.algebra.com) Received: (from mi@localhost) by aldan.algebra.com (8.14.2/8.14.1/Submit) id m6QFv5gJ001344; Sat, 26 Jul 2008 11:57:05 -0400 (EDT) (envelope-from mi) Message-Id: <200807261557.m6QFv5gJ001344@aldan.algebra.com> Date: Sat, 26 Jul 2008 11:57:05 -0400 (EDT) From: "Mikhail T." To: FreeBSD-gnats-submit@FreeBSD.org Cc: Subject: kern/125985: umass - no da-device, panic upon unplugging X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: "Mikhail T." List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Jul 2008 16:10:04 -0000 >Number: 125985 >Category: kern >Synopsis: umass - no da-device, panic upon unplugging >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Jul 26 16:10:03 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Mikhail T. >Release: FreeBSD 7.0-STABLE amd64 >Organization: Virtual Estates, Inc. ( http://libpipe.com/ ) >Environment: System: FreeBSD aldan.algebra.com 7.0-STABLE FreeBSD 7.0-STABLE #0: Sat Jul 26 10:52:20 EDT 2008 root@aldan.algebra.com:/meow/objSILVER-SMP amd64 >Description: The device is identified upon being plugged in as: umass1: on uhub4 For some reason, NO disk-device (da*) is created. Upon disconnecting, the panic hits -- 100% reproducible (four times out of four): Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor write data, page not present instruction pointer = 0x8:0xffffffff8015bde1 stack pointer = 0x10:0xffffffffadf5e800 frame pointer = 0x10:0xffffff000348e000 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 28 (usb1) trap number = 12 panic: page fault [...] [...] #7 0xffffffff8044946e in calltrap () at amd64/amd64/exception.S:169 #8 0xffffffff8015bde1 in xpt_done (done_ccb=0xffffff000348e000) at cam/cam_xpt.c:4856 #9 0xffffffff80161c0a in probedone (periph=0xffffff0003f36100, done_ccb=Variable "done_ccb" is not available.) at cam/cam_xpt.c:6331 #10 0xffffffff8015de93 in camisr_runqueue (V_queue=Variable "V_queue" is not available.) at cam/cam_xpt.c:7255 #11 0xffffffff80162985 in xpt_bus_deregister (pathid=Variable "pathid" is not available.) at cam/cam_xpt.c:4442 #12 0xffffffff8028f117 in umass_cam_detach_sim (sc=0xffffff000372a000) at dev/usb/umass.c:2708 #13 0xffffffff8028f1f7 in umass_detach (self=Variable "self" is not available.) at dev/usb/umass.c:1556 #14 0xffffffff80314b64 in device_detach (dev=0xffffff00246ee600) at device_if.h:212 #15 0xffffffff802933c5 in usb_disconnect_port (up=0xffffff00031c6138, parent=Variable "parent" is not available.) at dev/usb/usb_subr.c:1380 #16 0xffffffff8028df5d in uhub_explore (dev=0xffffff00031c6600) at dev/usb/uhub.c:462 #17 0xffffffff8029168b in usb_discover (v=Variable "v" is not available.) at dev/usb/usb.c:724 #18 0xffffffff8029263c in usb_event_thread (arg=Variable "arg" is not available.) at dev/usb/usb.c:440 #19 0xffffffff802cf072 in fork_exit (callout=0xffffffff802925c0 , arg=0xffffff0001204800, frame=0xffffffffadf5ec80) at kern/kern_fork.c:781 #20 0xffffffff8044983e in fork_trampoline () at amd64/amd64/exception.S:415 (kgdb) frame 8 #8 0xffffffff8015bde1 in xpt_done (done_ccb=0xffffff000348e000) at cam/cam_xpt.c:4856 4856 TAILQ_INSERT_TAIL(&sim->sim_doneq, &done_ccb->ccb_h, (kgdb) p sim $1 = (struct cam_sim *) 0xffffffff806142c0 (kgdb) p sim->sim_doneq $2 = {tqh_first = 0x0, tqh_last = 0x0} I'll keep the vmcore and the kernel.debug around for a while -- let me know, if you need more information. >How-To-Repeat: See description. >Fix: None known, hence high-priority -- the mp3-player is no longer usable (it worked with 6.x). >Release-Note: >Audit-Trail: >Unformatted: