NetBSD Problem Report #53982

From Manuel.Bouyer@lip6.fr  Thu Feb 14 19:37:01 2019
Return-Path: <Manuel.Bouyer@lip6.fr>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 2F9227A16A
	for <gnats-bugs@gnats.NetBSD.org>; Thu, 14 Feb 2019 19:37:01 +0000 (UTC)
Message-Id: <20190214193656.23B8CA6C9@armandeche.soc.lip6.fr>
Date: Thu, 14 Feb 2019 20:36:55 +0100 (MET)
From: manuel.bouyer@lip6.fr
Reply-To: manuel.bouyer@lip6.fr
To: gnats-bugs@NetBSD.org
Subject: unpluging a tty/serial can panic
X-Send-Pr-Version: 3.95

>Number:         53982
>Category:       kern
>Synopsis:       unpluging a tty/serial can panic
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Feb 14 19:40:00 +0000 2019
>Last-Modified:  Sat Feb 16 19:45:00 +0000 2019
>Originator:     Manuel Bouyer
>Release:        NetBSD 8.0_STABLE
>Organization:
>Environment:
System: NetBSD armandeche.soc.lip6.fr 8.0_STABLE NetBSD 8.0_STABLE (GENERIC) #0: Mon Feb 11 13:45:33 UTC 2019 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
Architecture: x86_64
Machine: amd64
>Description:
	when a USB/serial adapter is disconnected while in use (e.g.
	by cu(1)), the system may panic:
ucom3: detached
umodem2: detached
umodem2: at uhub6 port 3 (addr 8) disconnected
fatal page fault in supervisor mode
trap type 6 code 0 rip 0xffffffff80460681 cs 0x8 rflags 0x10202 cr2 0x200000004 
ilevel 0x5 rsp 0xffff8000ae306fb0
curlwp 0xfffffe821f5fa440 pid 0.6 lowest kstack 0xffff8000ae3042c0
panic: trap
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x15d
snprintf() at netbsd:snprintf
trap() at netbsd:trap+0xa00
--- trap (number 6) ---
usb_transfer_complete() at netbsd:usb_transfer_complete+0x86
ehci_softintr() at netbsd:ehci_softintr+0x159
usb_soft_intr() at netbsd:usb_soft_intr+0x38
softint_dispatch() at netbsd:softint_dispatch+0x91
DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff8000ae3070f0
Xsoftintr() at netbsd:Xsoftintr+0x4f
--- interrupt ---
0:
cpu0: End traceback...

	unfortunably this happens quite often for me ...
>How-To-Repeat:
	plug in a USB/serial adapter, open the device, unplug it
>Fix:
	please

>Audit-Trail:
From: Martin Husemann <martin@duskware.de>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/53982: unpluging a tty/serial can panic
Date: Thu, 14 Feb 2019 20:44:37 +0100

 I think this is fixed in -current (but I don't recall the exact change).

 Martin

From: Manuel Bouyer <manuel.bouyer@lip6.fr>
To: gnats-bugs@NetBSD.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
Subject: Re: kern/53982: unpluging a tty/serial can panic
Date: Fri, 15 Feb 2019 11:57:01 +0100

 On Thu, Feb 14, 2019 at 07:50:01PM +0000, Martin Husemann wrote:
 >  I think this is fixed in -current (but I don't recall the exact change).

 I get a different panic with -current:
 [ 1108.3787634] ucom0: detached                                        [26/1974]
 [ 1108.3787634] umodem0: detached
 [ 1108.3787634] umodem0: at uhub1 port 1 (addr 2) disconnected
 [ 1108.3787634] panic: kernel diagnostic assertion "maxp != 0" failed: file "/dsk/l1/misc/bouyer/HEAD/clean/src/sys/dev/usb/uhci.c", line 2080
 [ 1108.3787634] cpu0: Begin traceback...
 [ 1108.3787634] vpanic() at netbsd:vpanic+0x143
 [ 1108.3787634] kern_assert() at netbsd:kern_assert+0x48
 [ 1108.3787634] uhci_reset_std_chain() at netbsd:uhci_reset_std_chain+0x582
 [ 1108.3787634] uhci_device_intr_start() at netbsd:uhci_device_intr_start+0xbb
 [ 1108.3787634] usbd_start_next() at netbsd:usbd_start_next+0x226
 [ 1108.3787634] uhci_softintr() at netbsd:uhci_softintr+0x87
 [ 1108.3787634] usb_soft_intr() at netbsd:usb_soft_intr+0x1f
 [ 1108.3887539] softint_thread() at netbsd:softint_thread+0xa4
 [ 1108.3887539] cpu0: End traceback...

 -- 
 Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
      NetBSD: 26 ans d'experience feront toujours la difference
 --

From: David Holland <dholland-bugs@netbsd.org>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/53982: unpluging a tty/serial can panic
Date: Sat, 16 Feb 2019 19:43:52 +0000

 not sent to gnats
 (when replying to your own postings it's often necessary to edit To:)

    -----

 From: Manuel Bouyer <bouyer@antioche.eu.org>
 To: kern-bug-people@netbsd.org, gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
 Subject: Re: kern/53982: unpluging a tty/serial can panic
 Date: Thu, 14 Feb 2019 20:45:20 +0100

 On Thu, Feb 14, 2019 at 07:40:00PM +0000, manuel.bouyer@lip6.fr wrote:
 > ucom3: detached
 > umodem2: detached
 > umodem2: at uhub6 port 3 (addr 8) disconnected
 > fatal page fault in supervisor mode
 > trap type 6 code 0 rip 0xffffffff80460681 cs 0x8 rflags 0x10202 cr2 0x200000004 
 > ilevel 0x5 rsp 0xffff8000ae306fb0
 > curlwp 0xfffffe821f5fa440 pid 0.6 lowest kstack 0xffff8000ae3042c0
 > panic: trap
 > cpu0: Begin traceback...
 > vpanic() at netbsd:vpanic+0x15d
 > snprintf() at netbsd:snprintf
 > trap() at netbsd:trap+0xa00
 > --- trap (number 6) ---
 > usb_transfer_complete() at netbsd:usb_transfer_complete+0x86
 > ehci_softintr() at netbsd:ehci_softintr+0x159
 > usb_soft_intr() at netbsd:usb_soft_intr+0x38
 > softint_dispatch() at netbsd:softint_dispatch+0x91
 > DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff8000ae3070f0
 > Xsoftintr() at netbsd:Xsoftintr+0x4f
 > --- interrupt ---
 > 0:
 > cpu0: End traceback...

 Here's a variant:
 fatal integer divide fault in supervisor mode
 trap type 8 code 0 rip 0xffffffff8063b2cc cs 0x8 rflags 0x10246 cr2 0x77df15b085
 d4 ilevel 0x5 rsp 0xffff8000ae306eb0
 curlwp 0xfffffe821f5fa440 pid 0.6 lowest kstack 0xffff8000ae3042c0
 panic: trap
 cpu0: Begin traceback...
 vpanic() at netbsd:vpanic+0x15d
 snprintf() at netbsd:snprintf
 trap() at netbsd:trap+0xa00
 --- trap (number 8) ---
 ehci_reset_sqtd_chain.isra.1() at netbsd:ehci_reset_sqtd_chain.isra.1+0x210
 ehci_device_intr_start() at netbsd:ehci_device_intr_start+0x84
 usbd_start_next() at netbsd:usbd_start_next+0x90
 ehci_softintr() at netbsd:ehci_softintr+0x159
 usb_soft_intr() at netbsd:usb_soft_intr+0x38
 softint_dispatch() at netbsd:softint_dispatch+0x91
 DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff8000ae3070f0
 Xsoftintr() at netbsd:Xsoftintr+0x4f
 --- interrupt ---
 0:
 cpu0: End traceback...

 -- 
 Manuel Bouyer <bouyer@antioche.eu.org>
      NetBSD: 26 ans d'experience feront toujours la difference
 --

Home	PR Database Search