From owner-freebsd-current@FreeBSD.ORG Mon Apr 19 13:34:25 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E5E8C16A4CE; Mon, 19 Apr 2004 13:34:24 -0700 (PDT) Received: from srv1.cosmo-project.de (srv1.cosmo-project.de [213.83.6.106]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1B65443D45; Mon, 19 Apr 2004 13:34:24 -0700 (PDT) (envelope-from ticso@cicely12.cicely.de) Received: from cicely5.cicely.de (cicely5.cicely.de [IPv6:3ffe:400:8d0:301:200:92ff:fe9b:20e7]) (authenticated bits=0) i3JKYDPo022891 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=OK); Mon, 19 Apr 2004 22:34:16 +0200 (CEST) (envelope-from ticso@cicely12.cicely.de) Received: from cicely12.cicely.de (cicely12.cicely.de [IPv6:3ffe:400:8d0:301::12]) by cicely5.cicely.de (8.12.10/8.12.10) with ESMTP id i3JKXhhn030712 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 19 Apr 2004 22:33:44 +0200 (CEST) (envelope-from ticso@cicely12.cicely.de) Received: from cicely12.cicely.de (localhost [127.0.0.1]) by cicely12.cicely.de (8.12.11/8.12.11) with ESMTP id i3JKXhNp099371; Mon, 19 Apr 2004 22:33:43 +0200 (CEST) (envelope-from ticso@cicely12.cicely.de) Received: (from ticso@localhost) by cicely12.cicely.de (8.12.11/8.12.11/Submit) id i3JKXgvT099370; Mon, 19 Apr 2004 22:33:42 +0200 (CEST) (envelope-from ticso) Date: Mon, 19 Apr 2004 22:33:42 +0200 From: Bernd Walter To: John Baldwin Message-ID: <20040419203341.GV5279@cicely12.cicely.de> References: <20040417153007.GA1885@crodrigues.org> <200404191352.46793.jhb@FreeBSD.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200404191352.46793.jhb@FreeBSD.org> X-Operating-System: FreeBSD cicely12.cicely.de 5.2-CURRENT alpha User-Agent: Mutt/1.5.6i X-Spam-Status: No, hits=-4.9 required=3.0 tests=BAYES_00 autolearn=ham version=2.61 X-Spam-Report: * -4.9 BAYES_00 BODY: Bayesian spam probability is 0 to 1% * [score: 0.0000] X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on cicely5.cicely.de cc: Craig Rodrigues cc: freebsd-current@freebsd.org Subject: Re: panic booting off of a USB key X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: ticso@cicely.de List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Apr 2004 20:34:25 -0000 On Mon, Apr 19, 2004 at 01:52:46PM -0400, John Baldwin wrote: > On Saturday 17 April 2004 11:30 am, Craig Rodrigues wrote: > > Hi, > > > > I compiled a -current kernel from a few days ago. > > I put the kernel on a USB key. > > > > When I boot the kernel from the USB key, it starts > > up, but then panics sometime after the umass0 > > reports that it is attaching to the disk: > > > > > > > > > > ========================================================================= > > umass0: at uhub0 port 1 (addr 2) disconnected > > umass0: detached > > [0] f:80 typ:7 s(CHS):0/1/1 e(CHS):1023/254/63 s:63 l:117194112 > > [1] f:00 typ:0 s(CHS):0/0/0 e(CHS):0/0/0 s:0 l:0 > > [2] f:00 typ:0 s(CHS):0/0/0 e(CHS):0/0/0 s:0 l:0 > > [3] f:00 typ:0 s(CHS):0/0/0 e(CHS):0/0/0 s:0 l:0 > > GEOM: Configure ad0s1, start 32256 length 60003385344 end 60003417599 > > umass0: USB Solid state disk, rev 1.10/1.00, addr 2 > > umass0:1:0:-1: Attached to scbus1 > > > > > > Fatal trap 12: page fault while in kernel mode > > cpuid = 0; apic id = 00 > > fault virtual address = 0x0 > > fault code = supervisor read, page not present > > instruction pointer = 0x8:0xc0639e74 > > stack pointer = 0x10:0xdf4baaec > > frame pointer = 0x10:0xdf4baaf8 > > code segment = base 0x0, limit 0xfffff, type 0x1b > > = DPL 0, pres 1, def32 1, gran 1 > > processor eflags = interrupt enabled, resume, IOPL = 0 > > current process = 28 (swi8: tty:sio clock) > > kernel: type 12 trap, code=0 > > Stopped at _mtx_lock_flags+0x34: cmpl $0xc08a47bc,0(%ebx) > > db> t > > _mtx_lock_flags(0,0,c083d456,125,c08e5420,0,c083d456,124) at > > _mtx_lock_flags+0x34 vm_fault(c103b000,deadc000,1,0,c2279150) at > > vm_fault+0x20a > > trap_pfault(df4bac64,0,deadc0fe) at trap_pfault+0x104 > > trap(c08e0018,10,c0450010,c0452a18,0) at trap+0x2d9 > > calltrap() at calltrap+0x5 > > --- trap 0xc, eip = 0xc0451a02, esp = 0xdf4baca4, ebp = 0xdf4baca8 --- > > xpt_schedule_dev(deadc0f2,c64a5c18,1) at xpt_schedule_dev+0x36 > > Something accessed a free'd region of memory (see the references to 0xdeadc0de > or small offsets thereof). This function might be the place to start looking > to see which pointer is stale. It's the detaching of an scbus before cam has probed it what triggers this panic. I guess the detaching is triggered by ehci reprobe, but a detach can happen anytime with USB. Maybe some cam enlighted could tell something more about what we could do with this case. -- B.Walter BWCT http://www.bwct.de bernd@bwct.de info@bwct.de