Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 01 Mar 2006 20:14:02 -0600
From:      Patrick Bowen <pbowen@fastmail.fm>
To:        freebsd-current@freebsd.org
Subject:   Re: -current panics when usb device is detached
Message-ID:  <440654EA.7020207@fastmail.fm>
In-Reply-To: <20060228.201210.62398416.imp@bsdimp.com>
References:  <4404AAF1.6090009@savvis.net> <20060228.201210.62398416.imp@bsdimp.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------070806030806020001090400
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

M. Warner Losh wrote:

>In message: <4404AAF1.6090009@savvis.net>
>            Maksim Yevmenkin <maksim.yevmenkin@savvis.net> writes:
>: is usb in -current broken? my laptop panics when i detach usb device.
>
>I'll take a look into this, since I think I may have broken this...
>
>Warner
>_______________________________________________
>freebsd-current@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-current
>To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
>
>  
>
Mr. Losh;

Had the same thing happen on my machine;

FreeBSD sg1.sgc.org 7.0-CURRENT FreeBSD 7.0-CURRENT #0: Wed Mar  1 
19:18:18 CST 2006     pbowen@sg1.sgc.org:/usr/obj/usr/src/sys/GENERIC  i386

I don't remember if you got a backtrace from the OP, so I'm attaching 
that and a dmesg. Hope it helps.

Thanks,
Patrick

--------------070806030806020001090400
Content-Type: text/plain;
 name="vmcore5.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="vmcore5.txt"

Script started on Wed Mar  1 20:04:43 2006
sg1# exitless sysctl.conf[7`scd /etc[6`kldload if_ath[6`mailexitmailkldload if_ath[6`cd /etc[6`lsess sysctl.conf[6`exitexitless sysctl.conf[7`scd /etc[6`kldload if_ath[6`mailexitvtcldiff pkginfo.34 pkginfo.35[7`f >>[22`[6`[5@pkg_info [27`[6`rm *~[6`pkg_info > pkginfo.35[6`df >[22`[7`[10@iff pkginfo.34[32`[6`vtclexitmailkldload if_ath[6`cd /etc[6`lsess sysctl.conf[6`exitkgdb kernel.debug /var/crash/vmcore.5

[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
umass0: at uhub0 port 1 (addr 2) disconnected
(da0:umass-sim0:0:0:0): lost device
(da0:umass-sim0:0:0:0): removing device entry
umass0: detached
panic: free: address 0xd449784c(0xd4497000) has not been allocated.

cpuid = 0
KDB: enter: panic
panic: from debugger
cpuid = 0
Uptime: 2m0s
Dumping 511 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 511MB (130779 pages) 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:166
166		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) list
161	static __inline struct thread *
162	__curthread(void)
163	{
164		struct thread *td;
165	
166		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
167		return (td);
168	}
169	#define	curthread (__curthread())
170	
(kgdb) bt
#0  doadump () at pcpu.h:166
#1  0xc065fa88 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:402
#2  0xc065fd9d in panic (fmt=0xc0850bbb "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:558
#3  0xc046ba9d in db_panic (addr=-1066950085, have_addr=0, count=-1, 
    modif=0xd4497a80 "") at /usr/src/sys/ddb/db_command.c:435
#4  0xc046ba34 in db_command (last_cmdp=0xc093c364, cmd_table=0x0, 
    aux_cmd_tablep=0xc08b58c4, aux_cmd_tablep_end=0xc08b58e0)
    at /usr/src/sys/ddb/db_command.c:404
#5  0xc046bafc in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
#6  0xc046d715 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
#7  0xc067a534 in kdb_trap (type=3, code=0, tf=0xd4497c14)
    at /usr/src/sys/kern/subr_kdb.c:485
#8  0xc081a87c in trap (frame=
      {tf_fs = -733413368, tf_es = -1066991576, tf_ds = -1064828888, tf_edi = -1064800276, tf_esi = 1, tf_ebp = -733381548, tf_isp = -733381568, tf_ebx = -733381504, tf_edx = 0, tf_ecx = -1056755712, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1066950085, tf_cs = 32, tf_eflags = 524946, tf_esp = -733381516, tf_ss = -1067057841}) at /usr/src/sys/i386/i386/trap.c:622
#9  0xc0806daa in calltrap () at /usr/src/sys/i386/i386/exception.s:137
#10 0xc067a23b in kdb_enter (msg=0x12 <Address 0x12 out of bounds>)
    at cpufunc.h:60
#11 0xc065fd4f in panic (
    fmt=0xc0886fec "free: address %p(%p) has not been allocated.\n")
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/kern/kern_shutdown.c:542
#12 0xc0655886 in free (addr=0xd449784c, mtp=0xc090e9e0)
    at /usr/src/sys/kern/kern_malloc.c:382
#13 0xc0600bcc in usb_disconnect_port (up=0xc341e530, parent=0xc341e480)
    at /usr/src/sys/dev/usb/usb_subr.c:1458
#14 0xc05f7ceb in uhub_explore (dev=0xc341e000)
    at /usr/src/sys/dev/usb/uhub.c:465
#15 0xc05fe4bb in usb_discover (v=0xc34202c0)
    at /usr/src/sys/dev/usb/usb.c:747
#16 0xc05fdf8a in usb_event_thread (arg=0xc34202c0)
    at /usr/src/sys/dev/usb/usb.c:433
#17 0xc064b730 in fork_exit (callout=0xc05fdf40 <usb_event_thread>, 
    arg=0xc34202c0, frame=0xd4497d38) at /usr/src/sys/kern/kern_fork.c:802
#18 0xc0806e0c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:198
(kgdb) q
sg1# ^Dexit

Script done on Wed Mar  1 20:05:43 2006

--------------070806030806020001090400
Content-Type: text/plain;
 name="dmesg.txt"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="dmesg.txt"

Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #0: Wed Mar  1 19:18:18 CST 2006
    pbowen@sg1.sgc.org:/usr/obj/usr/src/sys/GENERIC
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel Pentium III (751.71-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x68a  Stepping = 10
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
real memory  = 536719360 (511 MB)
avail memory = 515604480 (491 MB)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <DELL CPi R  > on motherboard
Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_acad0: <AC Adapter> on acpi0
battery0: <ACPI Control Method Battery> on acpi0
battery1: <ACPI Control Method Battery> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <Intel 82443BX (440 BX) host to PCI bridge> on hostb0
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> port 0xec00-0xecff mem 0xf8000000-0xfbffffff,0xfdffc000-0xfdffffff irq 11 at device 0.0 on pci1
cbb0: <TI1420 PCI-CardBus Bridge> at device 3.0 on pci0
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
cbb1: <TI1420 PCI-CardBus Bridge> at device 3.1 on pci0
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 UDMA33 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x860-0x86f at device 7.1 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xdce0-0xdcff irq 11 at device 7.2 on pci0
uhci0: [GIANT-LOCKED]
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
pci0: <bridge> at device 7.3 (no driver attached)
pcm0: <ESS Technology Maestro3> port 0xd800-0xd8ff mem 0xf3ffe000-0xf3ffffff irq 5 at device 8.0 on pci0
pcm0: <SigmaTel STAC9721/23 AC97 Codec>
xl0: <3Com 3c556 Fast Etherlink XL> port 0xd400-0xd4ff mem 0xf3ffdc00-0xf3ffdc7f,0xf3ffd800-0xf3ffd87f irq 11 at device 16.0 on pci0
miibus0: <MII bus> on xl0
tdkphy0: <TDK 78Q2120 media interface> on miibus0
tdkphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl0: Ethernet address: 00:04:76:48:c7:b2
pci0: <simple comms> at device 16.1 (no driver attached)
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model Generic PS/2 mouse, device ID 0
fdc0: <floppy drive controller (FDE)> port 0x3f2-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio0: [FAST]
ppc0: <ECP parallel printer port> port 0x378-0x37f,0x778-0x77b irq 7 drq 3 on acpi0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ppc0: [GIANT-LOCKED]
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcffff pnpid ORM0000 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 751707523 Hz quality 800
Timecounters tick every 1.000 msec
ad0: 19077MB <FUJITSU MHS2020AT E 8307> at ata0-master UDMA33
cardbus1: <network, ethernet> at device 0.0 (no driver attached)
acd0: CDRW <HL-DT-ST CD-RW GCE-8080N/2.06> at ata1-master PIO4
Trying to mount root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: mount pending error: blocks 4 files 1
cpu0: too many short sleeps, backing off to C1
ath_hal: 0.9.16.16 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
ath0: <Atheros 5212> mem 0x88000000-0x8800ffff at device 0.0 on cardbus1
ath0: Ethernet address: 00:13:46:b6:19:ea
ath0: mac 7.8 phy 4.5 radio 5.6
ath0: link state changed to UP

--------------070806030806020001090400--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?440654EA.7020207>