[issue666] usb stick removal panics

["Simon 'corecode' Schubert" <sinknull@xxxxxxxxxxxxxxxxxxxxxxx>]

Simon 'corecode' Schubert <corecode@fs.ei.tum.de> added the comment:

Fresh trace:

Unread portion of the kernel message buffer:
: at uhub4 port 1 (addr 3) disconnected


Fatal trap 12: page fault while in kernel mode
mp_lock = 00000000; cpuid = 0; lapic.id = 00000000
fault virtual address   = 0x0
fault code              = supervisor write, page not present
. ..
#6  0xc027f136 in calltrap () at /usr/src/sys/platform/pc32/i386/exception.s:783
#7  0xc01984f3 in device_delete_child (dev=0xd700c048, child=0xdeadc0de)
    at /usr/src/sys/kern/subr_bus.c:604
#8  0xc01984ac in device_delete_child (dev=0xdeadc0de, child=0xd700c048)
    at /usr/src/sys/kern/subr_bus.c:595
#9  0xde56a231 in usb_disconnect_port (up=0xd700c348, parent=0xd700c2d0)
    at /usr/src/sys/bus/usb/usb/../../../bus/usb/usb_subr.c:1251
#10 0xde56829a in uhub_detach (self=0xd700c2d0)
    at /usr/src/sys/bus/usb/usb/../../../bus/usb/uhub.c:571
#11 0xc01983cd in device_detach (dev=0xd700c2d0) at device_if.h:49
#12 0xc01984c1 in device_delete_child (dev=0xd700ac50, child=0xd700c2d0)
    at /usr/src/sys/kern/subr_bus.c:600
#13 0xde56a231 in usb_disconnect_port (up=0xda02da88, parent=0xd700ac50)
    at /usr/src/sys/bus/usb/usb/../../../bus/usb/usb_subr.c:1251
#14 0xde567ffd in uhub_explore (dev=0xd6f69948)
    at /usr/src/sys/bus/usb/usb/../../../bus/usb/uhub.c:454
#15 0xde569534 in usb_discover (v=Variable "v" is not available.
) at /usr/src/sys/bus/usb/usb/../../../bus/usb/usb.c:735
#16 0xde5698d5 in usb_event_thread (arg=0xc3b8b448)
    at /usr/src/sys/bus/usb/usb/../../../bus/usb/usb.c:446

(kgdb) p *dev->subdevs[0]
$6 = {ops = 0x0, link = {tqe_next = 0xdeadc0de, tqe_prev = 0xdeadc0de}, parent =
0xdeadc0de, 
  children = {tqh_first = 0xdeadc0de, tqh_last = 0x0}, driver = 0xdeadc0de,
devclass = 0xdeadc0de, 
  unit = -559038242, nameunit = 0xdeadc0de "", desc = 0xdeadc0de "", busy =
-559038242, 
  state = 3735929054, devflags = 3735929054, flags = 49374, order = 173 '�', pad
= 222 '�, 
  ivars = 0xdeadc0de, softc = 0x0}

Who free()d the subdev structure?

_____________________________________________________
DragonFly issue tracker <bugs@lists.dragonflybsd.org>
<https://bugs.dragonflybsd.org/issue666>
_____________________________________________________