From nobody@FreeBSD.org  Sat Aug  9 15:13:29 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C3117106567D
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  9 Aug 2008 15:13:29 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id AF79B8FC12
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  9 Aug 2008 15:13:29 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m79FDS8K082916
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 9 Aug 2008 15:13:28 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m79FDSGP082915;
	Sat, 9 Aug 2008 15:13:28 GMT
	(envelope-from nobody)
Message-Id: <200808091513.m79FDSGP082915@www.freebsd.org>
Date: Sat, 9 Aug 2008 15:13:28 GMT
From: Alex Keda <admin@lissyara.su>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernel panic after unplug USB Bluetooth device
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         126396
>Category:       kern
>Synopsis:       [panic] kernel panic after unplug USB Bluetooth device [regression]
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-usb
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Aug 09 15:20:02 UTC 2008
>Closed-Date:    
>Last-Modified:  Wed Oct 05 10:44:44 UTC 2011
>Originator:     Alex Keda
>Release:        8-CURRENT
>Organization:
USSR
>Environment:
FreeBSD acer.lissyara.int.otradno.ru 8.0-CURRENT FreeBSD 8.0-CURRENT #0: Sat Aug  9 04:18:50 MSD 2008     root@acer.lissyara.int.otradno.ru:/var/tmp/obj/usr/src/sys/main-color-console  amd64

>Description:
today, I update source and rebuild kernel and world
and see new behavior - 
kernel panic after unplug USB Bluetooth device
previous, I have source ~20 days oldest - and unplug not cause panic
===========
ubt0: at uhub0 port 1 (addr 3) desconnected
ubt0: detached

after 3-4 seconds - kernel panic:

Fatal trap 12: page fault while in kernel mode
fault virtual address = 0x468
fault code = supervisor read data, page not present
instruction pointer = 0x8: 0xffffffff802ebt0e
stack pointer = 0x10: 0xfffffffe40091at0
frame pointer = 0x10: 0xfffffffe40091b30
code segment = base 0x0, limit 0xfffff, type 0x1b
              = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 11 (irq19: ohci0 ohci+)
trap number = 12
panic: page fault

=======
kernel config
acer$ cat /usr/src/sys/amd64/conf/main-color-console | grep -v ^# | grep -v ^\$
include         GENERIC
options         SC_NORM_ATTR=(FG_GREEN|BG_BLACK)
options         SC_KERNEL_CONS_ATTR=(FG_RED|BG_BLACK)
options         SC_HISTORY_SIZE=2022
nooptions         KDB                     # Enable kernel debugger support.
nooptions         DDB                     # Support DDB.
nooptions         GDB                     # Support remote GDB.
nooptions         INVARIANTS              # Enable calls of extra sanity checking
nooptions         INVARIANT_SUPPORT       # Extra sanity checks of internal structures, required by INVARIANTS
nooptions         WITNESS                 # Enable checks to detect deadlocks and cycles
nooptions         WITNESS_SKIPSPIN        # Don't run witness on spinlocks for speed
options         VGA_WIDTH90
options         INCLUDE_CONFIG_FILE
nooptions       SMP
nodevice        atapifd
nodevice        atapist
nodevice        kbdmux
nodevice        splash
nooptions       INET6
nooptions       SCTP
nooptions       UFS_GJOURNAL
nooptions       MD_ROOT
nooptions       NFS_ROOT
nooptions       GEOM_PART_GPT
nooptions       GEOM_LABEL
nooptions       COMPAT_FREEBSD4
nooptions       COMPAT_FREEBSD5
nooptions       COMPAT_FREEBSD6
nooptions       COMPAT_FREEBSD7
nooptions       SCSI_DELAY
nooptions       KTRACE
nooptions       STACK
nooptions       AUDIT
nodevice        de
nodevice        em
nodevice        ixgb
nodevice        le
nodevice        ti
nodevice        txp
nodevice        vx
nodevice        age
nodevice        bce
nodevice        bfe
nodevice        bge
nodevice        dc
nodevice        et
nodevice        jme
nodevice        fxp
nodevice        lge
device          wlan_acl
device          wlan_xauth
device          smbus
device          ichsmb
device          smb
nodevice        sio
nodevice        ppc
nodevice        ppbus
nodevice        lpt
nodevice        plip
nodevice        ppi
nodevice        iwi
nodevice        ipf
nodevice        nfe
nodevice        nve
nodevice        arcmsr
nodevice        twa
nodevice        ncv
nodevice        nsp
nodevice        stg
nodevice        aac
nodevice        aacp
nodevice        hptmv
nodevice        htprr
nodevice        hptiop
nodevice        ips
nodevice        ahc
nodevice        ahd
nodevice        amd
nodevice        isp
nodevice        mpt
nodevice        sym
nodevice        trm
nodevice        adv
nodevice        adw
nodevice        aic
nodevice        bt
nodevice        sa
nodevice        amr
nodevice        ciss
nodevice        dpt
nodevice        iir
nodevice        mly
nodevice        ida
nodevice        mfi
nodevice        mlx
nodevice        twe

>How-To-Repeat:
plug device, after 3-5 seconds - unplug
>Fix:


>Release-Note:
>Audit-Trail:

From: "=?UTF-8?B?0JDQvdC00YDQtdC5INCk0LXRgdC10L3QutC+?=" <f0andrey@gmail.com>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/126396: kernel panic after unplug USB Bluetooth device
Date: Sun, 10 Aug 2008 23:07:29 +0400

 ------=_Part_48034_2983941.1218395249566
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline
 
 FreeBSD test.local 8.0-CURRENT FreeBSD 8.0-CURRENT #1: Sun Aug 10 01:50:24
 MSD 2008     andrey@test.local:/usr/obj/usr/src/sys/MY  amd64
 
 after
 ubt0: ached
 
 ubt0: <vendor 0x0a12 BT2.0, class 224/1, rev 2.00/31.64, addr 2> on uhub0
 ubt0: Interface 0 endpoints: interrupt=0x81, bulk-in=0x82, bulk-out=0x2
 ubt0: Interface 1 (alt.config 5) endpoints: isoc-in=0x83, isoc-out=0x3;
 wMaxPacketSize=49; nframes=10, buffer size=490
 WARNING: attempt to net_add_domain(bluetooth) after domainfinalize()
 hardware_error:  - hardware error 0x37
 
 after
 ubt0: detached
 
 Fatal trap 9: general protection fault while in kernel mode
 cpuid = 1; apic id = 01
 instruction pointer = 0x8: 0xffffffff8026c02b
 stack pointer = 0x10: 0xfffffffe40171b20
 frame pointer = 0x10: 0xfffffffe40171b60
 code segment = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags = interrupt enabled, resume, IOPL = 0
 current process = 12 (irq23: ohci0 ohci0)
 [thread pid12 tid 100029]
 Stopped at  uhci_transfer_complete+0x31:   movsbl  0x2(%rax),%r14d
 db>
 
 or
 
 [thread pid12 tid 100029]
 Stopped at  uhci_transfer_complete+0x31:   movsbl  0x2(%rax),%r14d
 db> bt
 Tracing pid 12 tid 100029 td 0xffffff00014d0000
 uhci_transfer_complete() at uhci_transfer_complete+0x31
 uhci_softintr() at uhci_softintr+0xd8
 uhci_intr1() at uhci_intr1+0xdf
 ithread_loop() at ithread_loop+0xda
 fork_exit() at fork_exit+0x12a
 fork_trampoline() at fork_trampoline+0xe
 --- trap 0, rip=0. rsp = 0xfffffffe40171d30, rbp = 0 ---
 
 ------=_Part_48034_2983941.1218395249566--
Responsible-Changed-From-To: freebsd-bugs->freebsd-usb 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sun Aug 10 23:57:30 UTC 2008 
Responsible-Changed-Why:  
Over to maintainer(s). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=126396 
>Unformatted:
