From owner-freebsd-stable@FreeBSD.ORG  Mon Jul 30 18:04:44 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id AEFC510657B6;
	Mon, 30 Jul 2012 18:04:44 +0000 (UTC) (envelope-from jhb@freebsd.org)
Received: from bigwig.baldwin.cx (bigknife-pt.tunnel.tserv9.chi1.ipv6.he.net
	[IPv6:2001:470:1f10:75::2])
	by mx1.freebsd.org (Postfix) with ESMTP id 7FF758FC1E;
	Mon, 30 Jul 2012 18:04:44 +0000 (UTC)
Received: from jhbbsd.localnet (unknown [209.249.190.124])
	by bigwig.baldwin.cx (Postfix) with ESMTPSA id CCB52B9BA;
	Mon, 30 Jul 2012 14:04:43 -0400 (EDT)
From: John Baldwin <jhb@freebsd.org>
To: Andriy Gapon <avg@freebsd.org>
Date: Mon, 30 Jul 2012 12:32:25 -0400
User-Agent: KMail/1.13.5 (FreeBSD/8.2-CBSD-20110714-p17; KDE/4.5.5; amd64; ; )
References: <1342197082.2664.4.camel@powernoodle.corp.yahoo.com>
	<5003E14E.5020302@FreeBSD.org>
In-Reply-To: <5003E14E.5020302@FreeBSD.org>
MIME-Version: 1.0
Content-Type: Text/Plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <201207301232.25147.jhb@freebsd.org>
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7
	(bigwig.baldwin.cx); Mon, 30 Jul 2012 14:04:43 -0400 (EDT)
Cc: "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org>,
	Sean Bruno <seanbru@yahoo-inc.com>
Subject: Re: stable/9 panic Bad tailq NEXT(0xffffffff80e52660->tqh_last) !=
	NULL
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 18:04:44 -0000

On Monday, July 16, 2012 5:39:26 am Andriy Gapon wrote:
> on 13/07/2012 19:31 Sean Bruno said the following:
> > pcib7: <ACPI PCI-PCI bridge> at device 28.0 on pci0
> > pcib7:   domain            0
> > pcib7:   secondary bus     7
> > pcib7:   subordinate bus   7
> > pcib7:   no prefetched decode
> > device_attach: pcib7 attach returned 6
> 
> It seems that the following panic is caused by the above attach failure.
> Namely, it seems that there are rman members in pcib_softc via pcib_window fields.
> Those members are passed to rman_init during attach attempt, but they are not
> passed to rman_fini if the attach fails (no attach failure cleanup).
> After newbus code deallocates pcib_softc the global rman list (rman_head) becomes
> corrupted.

Oof.  None of the pcib(4) drivers really support detach or cleanup yet.

-- 
John Baldwin