From owner-freebsd-usb@FreeBSD.ORG  Fri Oct  3 11:38:47 2014
Return-Path: <owner-freebsd-usb@FreeBSD.ORG>
Delivered-To: freebsd-usb@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id CB8B38EA
 for <freebsd-usb@freebsd.org>; Fri,  3 Oct 2014 11:38:47 +0000 (UTC)
Received: from cain.gsoft.com.au (cain.gsoft.com.au [203.31.81.10])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 3A649EAB
 for <freebsd-usb@freebsd.org>; Fri,  3 Oct 2014 11:38:46 +0000 (UTC)
Received: from [10.0.2.95] (ppp118-210-223-248.lns20.adl6.internode.on.net
 [118.210.223.248]) (authenticated bits=0)
 by cain.gsoft.com.au (8.14.4/8.14.3) with ESMTP id s93BJnhS048205
 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO);
 Fri, 3 Oct 2014 20:50:03 +0930 (CST)
 (envelope-from doconnor@gsoft.com.au)
Content-Type: text/plain; charset=windows-1252
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Subject: Panic in usb_unref_device
From: "Daniel O'Connor" <doconnor@gsoft.com.au>
Date: Fri, 3 Oct 2014 20:49:48 +0930
Content-Transfer-Encoding: quoted-printable
Message-Id: <8B31CE4F-F310-49E7-8316-22D6170BF6C6@gsoft.com.au>
To: freebsd-usb@freebsd.org
X-Mailer: Apple Mail (2.1878.6)
X-Spam-Score: 1.163 (*) BAYES_00,HELO_MISC_IP,RDNS_DYNAMIC
X-Scanned-By: MIMEDefang 2.67 on 203.31.81.10
X-BeenThere: freebsd-usb@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: FreeBSD support for USB <freebsd-usb.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-usb>,
 <mailto:freebsd-usb-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-usb/>
List-Post: <mailto:freebsd-usb@freebsd.org>
List-Help: <mailto:freebsd-usb-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-usb>,
 <mailto:freebsd-usb-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Oct 2014 11:38:47 -0000

Hi,
I have a custom USB device based on the Cypress FX2 and we are finding =
that with some older kernels it hangs - this was fixed in =
https://svnweb.freebsd.org/base?view=3Drevision&revision=3D267240 but =
now it panics with=85

#7  0xffffffff80745a07 in usb_unref_device (cpd=3D0xfffffe0004b30680, =
crd=3D0xffffff812b6af860) at /usr/src/sys/dev/usb/usb_dev.c:348
#8  0xffffffff80748cbd in usb_ioctl (dev=3D<value optimized out>, =
cmd=3D3222040644, addr=3D0xfffffe0026380000 "\002", fflag=3D<value =
optimized out>, td=3D0xffffffff81819850)
   at /usr/src/sys/dev/usb/usb_dev.c:1127
#9  0xffffffff807d05cb in devfs_ioctl_f (fp=3D0xfffffe0061d59190, =
com=3D3222040644, data=3D<value optimized out>, cred=3D<value optimized =
out>, td=3D0xfffffe0004e37920)
   at /usr/src/sys/fs/devfs/devfs_vnops.c:758
#10 0xffffffff80938456 in kern_ioctl (td=3D0xfffffe0004e37920, fd=3D3, =
com=3D3222040644, data=3D0xfffffe0026380000 "\002") at file.h:311
#11 0xffffffff8093869d in sys_ioctl (td=3D0xfffffe0004e37920, =
uap=3D0xffffff812b6afa70) at /usr/src/sys/kern/sys_generic.c:696

And crd->rxfifo is NULL.

I haven=92t looked very hard at this yet, but it is quite easy to =
reproduce.

--
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C