NetBSD Problem Report #42560

From dogcow@babymeat.com  Fri Jan  1 12:39:12 2010
Return-Path: <dogcow@babymeat.com>
Received: from mail.netbsd.org (mail.netbsd.org [204.152.190.11])
	by www.NetBSD.org (Postfix) with ESMTP id D48D763B844
	for <gnats-bugs@gnats.NetBSD.org>; Fri,  1 Jan 2010 12:39:12 +0000 (UTC)
Message-Id: <20100101123912.458131CC27@veal.babymeat.com>
Date: Fri,  1 Jan 2010 04:39:12 -0800 (PST)
From: dogcow@babymeat.com
Reply-To: dogcow@babymeat.com
To: gnats-bugs@gnats.NetBSD.org
Subject: usb transfers can induce panic in usb_allocmem
X-Send-Pr-Version: 3.95

>Number:         42560
>Category:       kern
>Synopsis:       usb transfers can induce panic in usb_allocmem
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jan 01 12:40:00 +0000 2010
>Closed-Date:    Tue Sep 18 02:40:39 +0000 2018
>Last-Modified:  Tue Sep 18 02:40:39 +0000 2018
>Originator:     moof
>Release:        NetBSD 5.0_STABLE
>Organization:
>Environment:
System: NetBSD burai.babymeat.com 5.0_STABLE NetBSD 5.0_STABLE (BRAID) #0: Fri Jan 1 19:00:36 JST 2010 dogcow@burai.babymeat.com:/crap/obj/obj/usr/src/sys/arch/i386/compile/BRAID i386
Architecture: i386
Machine: i386
>Description:
Some USB->HD adapters can evoke the following bug in umass/bbb transfers:
#7  0xc02a70b5 in panic (fmt=0xc04809ab "trap")
    at /usr/src/sys/kern/subr_prf.c:242
#8  0xc034795b in trap (frame=0xcd33fae4)
    at /usr/src/sys/arch/i386/i386/trap.c:367
#9  0xc010ccd7 in calltrap ()
#10 0xc03b1ad2 in usb_allocmem (bus=0xccfde008, size=31, align=0, p=0xc196af3c)
    at /usr/src/sys/dev/usb/usb_mem.c:243
#11 0xc018c0c3 in ehci_allocm (bus=0xccfde008, dma=0xc196af3c, size=31)
    at /usr/src/sys/dev/usb/ehci.c:1259
#12 0xc03af95b in usbd_transfer (xfer=0xc196af00)
    at /usr/src/sys/dev/usb/usbdi.c:280
#13 0xc03c2d34 in umass_setup_transfer (sc=0xcd38ec10, pipe=0xc19bd800, 
    buffer=0xcd38ec48, buflen=31, flags=0, xfer=0xc196af00)
    at /usr/src/sys/dev/usb/umass.c:760
#14 0xc03c40dd in umass_bbb_transfer (sc=0xcd38ec10, 
    lun=<value optimized out>, cmd=0xc18e6f50, cmdlen=10, data=0xcac70000, 
    datalen=65536, dir=1, timeout=60000, cb=0xc03c6490 <umass_scsipi_cb>, 
    priv=0xc18e6ebc) at /usr/src/sys/dev/usb/umass.c:985

in particular:
(gdb) down
#10 0xc03b1ad2 in usb_allocmem (bus=0xccfde008, size=31, align=0, p=0xc196af3c)
    at /usr/src/sys/dev/usb/usb_mem.c:243
243                     if (f->block->tag == tag)
(gdb) print f->block
$3 = (usb_dma_block_t *) 0x0


>How-To-Repeat:

This seems to be exacerbated when transfers fail, perhaps?
>Fix:

Unknown.

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: gnats-admin->kern-bug-people
Responsible-Changed-By: dholland@NetBSD.org
Responsible-Changed-When: Fri, 01 Jan 2010 19:43:47 +0000
Responsible-Changed-Why:
Fix mangled PR.


State-Changed-From-To: open->feedback
State-Changed-By: skrll@NetBSD.org
State-Changed-When: Mon, 03 Oct 2016 06:36:05 +0000
State-Changed-Why:
Is this still a problem with HEAD?


State-Changed-From-To: feedback->closed
State-Changed-By: mrg@NetBSD.org
State-Changed-When: Tue, 18 Sep 2018 02:40:39 +0000
State-Changed-Why:
feedback timeout


>Unformatted:

Home	PR Database Search