From mi@aldan.algebra.com  Sat Jul 26 16:07:58 2008
Return-Path: <mi@aldan.algebra.com>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 309DC106564A
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 26 Jul 2008 16:07:58 +0000 (UTC)
	(envelope-from mi@aldan.algebra.com)
Received: from aldan.algebra.com (aldan.algebra.com [216.254.65.224])
	by mx1.freebsd.org (Postfix) with ESMTP id C0B328FC16
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 26 Jul 2008 16:07:56 +0000 (UTC)
	(envelope-from mi@aldan.algebra.com)
Received: from aldan.algebra.com (localhost [127.0.0.1])
	by aldan.algebra.com (8.14.2/8.14.1) with ESMTP id m6QFv535001345
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <FreeBSD-gnats-submit@freebsd.org>; Sat, 26 Jul 2008 11:57:06 -0400 (EDT)
	(envelope-from mi@aldan.algebra.com)
Received: (from mi@localhost)
	by aldan.algebra.com (8.14.2/8.14.1/Submit) id m6QFv5gJ001344;
	Sat, 26 Jul 2008 11:57:05 -0400 (EDT)
	(envelope-from mi)
Message-Id: <200807261557.m6QFv5gJ001344@aldan.algebra.com>
Date: Sat, 26 Jul 2008 11:57:05 -0400 (EDT)
From: "Mikhail T." <mi@aldan.algebra.com>
Reply-To: "Mikhail T." <mi@aldan.algebra.com>
To: FreeBSD-gnats-submit@freebsd.org
Subject: umass - no da-device, panic upon unplugging

>Number:         125985
>Category:       kern
>Synopsis:       [umass] [panic] no da-device, panic upon unplugging
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Jul 26 16:10:03 UTC 2008
>Closed-Date:    Thu Jul 15 06:13:33 UTC 2010
>Last-Modified:  Thu Jul 15 06:13:33 UTC 2010
>Originator:     Mikhail T.
>Release:        FreeBSD 7.0-STABLE amd64
>Organization:
Virtual Estates, Inc. ( http://libpipe.com/ )
>Environment:
System: FreeBSD aldan.algebra.com 7.0-STABLE FreeBSD 7.0-STABLE #0: Sat Jul 26 10:52:20 EDT 2008 root@aldan.algebra.com:/meow/objSILVER-SMP amd64


>Description:
	The device is identified upon being plugged in as:

	umass1: <iRiver iRiver iHP-100 Series, class 0/0, rev 2.00/1.00, addr 3> on uhub4

	For some reason, NO disk-device (da*) is created.

	Upon disconnecting, the panic hits -- 100% reproducible (four
	times out of four):

	Fatal trap 12: page fault while in kernel mode
	cpuid = 0; apic id = 00
	fault virtual address   = 0x0
	fault code              = supervisor write data, page not present
	instruction pointer     = 0x8:0xffffffff8015bde1
	stack pointer           = 0x10:0xffffffffadf5e800
	frame pointer           = 0x10:0xffffff000348e000
	code segment            = base 0x0, limit 0xfffff, type 0x1b
				= DPL 0, pres 1, long 1, def32 0, gran 1
	processor eflags        = interrupt enabled, resume, IOPL = 0
	current process         = 28 (usb1)
	trap number             = 12
	panic: page fault
	[...]

[...]
#7  0xffffffff8044946e in calltrap () at amd64/amd64/exception.S:169
#8  0xffffffff8015bde1 in xpt_done (done_ccb=0xffffff000348e000) at cam/cam_xpt.c:4856
#9  0xffffffff80161c0a in probedone (periph=0xffffff0003f36100, done_ccb=Variable "done_ccb" is not available.) at cam/cam_xpt.c:6331
#10 0xffffffff8015de93 in camisr_runqueue (V_queue=Variable "V_queue" is not available.) at cam/cam_xpt.c:7255
#11 0xffffffff80162985 in xpt_bus_deregister (pathid=Variable "pathid" is not available.) at cam/cam_xpt.c:4442
#12 0xffffffff8028f117 in umass_cam_detach_sim (sc=0xffffff000372a000) at dev/usb/umass.c:2708
#13 0xffffffff8028f1f7 in umass_detach (self=Variable "self" is not available.) at dev/usb/umass.c:1556
#14 0xffffffff80314b64 in device_detach (dev=0xffffff00246ee600) at device_if.h:212
#15 0xffffffff802933c5 in usb_disconnect_port (up=0xffffff00031c6138, parent=Variable "parent" is not available.) at dev/usb/usb_subr.c:1380
#16 0xffffffff8028df5d in uhub_explore (dev=0xffffff00031c6600) at dev/usb/uhub.c:462
#17 0xffffffff8029168b in usb_discover (v=Variable "v" is not available.) at dev/usb/usb.c:724
#18 0xffffffff8029263c in usb_event_thread (arg=Variable "arg" is not available.) at dev/usb/usb.c:440
#19 0xffffffff802cf072 in fork_exit (callout=0xffffffff802925c0 <usb_event_thread>, arg=0xffffff0001204800, frame=0xffffffffadf5ec80) at kern/kern_fork.c:781
#20 0xffffffff8044983e in fork_trampoline () at amd64/amd64/exception.S:415
	(kgdb) frame 8
	#8  0xffffffff8015bde1 in xpt_done (done_ccb=0xffffff000348e000) at cam/cam_xpt.c:4856
	4856                            TAILQ_INSERT_TAIL(&sim->sim_doneq, &done_ccb->ccb_h,
	(kgdb) p sim
	$1 = (struct cam_sim *) 0xffffffff806142c0
	(kgdb) p sim->sim_doneq
	$2 = {tqh_first = 0x0, tqh_last = 0x0}

I'll keep the vmcore and the kernel.debug around for a while -- let me
know, if you need more information.

>How-To-Repeat:

	See description.

>Fix:

	None known, hence high-priority -- the mp3-player is no longer
	usable (it worked with 6.x).
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: remko 
State-Changed-When: Sat Jul 26 16:52:40 UTC 2008 
State-Changed-Why:  
I asked for additional information, denote it in the ticket. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=125985 

From: Remko Lodder <remko@FreeBSD.org>
To: "Mikhail T." <mi@aldan.algebra.com>
Cc: FreeBSD-gnats-submit@FreeBSD.org
Subject: Re: kern/125985: umass - no da-device, panic upon unplugging
Date: Sat, 26 Jul 2008 18:52:21 +0200

 Mikhail T. wrote:
 
 As a developer yourself, I would have expected the following information:
 
 Verbose Dmesg, system configuration, pciconf -vl, and any other thing 
 that you might find valuable to add to the report. If we need to stick
 in proper scsi_da support (Which this might be) then we need to know
 some more about your machine then the information you now provided.
 
 Thanks.
 
 -- 
 
 /"\   Best regards,                      | remko@FreeBSD.org
 \ /   Remko Lodder                       | remko@EFnet
   X    http://www.evilcoder.org/          |
 / \   ASCII Ribbon Campaign              | Against HTML Mail and News
State-Changed-From-To: feedback->closed 
State-Changed-By: remko 
State-Changed-When: Thu Jul 15 06:13:31 UTC 2010 
State-Changed-Why:  
I do not recall seeing feedback, and no recordings are in the ticket, -> 
feedback timeout 

http://www.freebsd.org/cgi/query-pr.cgi?pr=125985 
>Unformatted:
