From owner-freebsd-bugs@FreeBSD.ORG Tue Nov 25 17:40:02 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1EAEF1065670 for ; Tue, 25 Nov 2008 17:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 02BFE8FC17 for ; Tue, 25 Nov 2008 17:40:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mAPHe13s050194 for ; Tue, 25 Nov 2008 17:40:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mAPHe1fh050193; Tue, 25 Nov 2008 17:40:01 GMT (envelope-from gnats) Resent-Date: Tue, 25 Nov 2008 17:40:01 GMT Resent-Message-Id: <200811251740.mAPHe1fh050193@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ganbold Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 18D5D1065677 for ; Tue, 25 Nov 2008 17:35:31 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 0F1DC8FC1C for ; Tue, 25 Nov 2008 17:35:31 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id mAPHZUmc019780 for ; Tue, 25 Nov 2008 17:35:30 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id mAPHZUWR019779; Tue, 25 Nov 2008 17:35:30 GMT (envelope-from nobody) Message-Id: <200811251735.mAPHZUWR019779@www.freebsd.org> Date: Tue, 25 Nov 2008 17:35:30 GMT From: Ganbold To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/129187: atheros pcmcia card detach panics CURRENT X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Nov 2008 17:40:02 -0000 >Number: 129187 >Category: kern >Synopsis: atheros pcmcia card detach panics CURRENT >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Nov 25 17:40:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Ganbold >Release: CURRENT >Organization: NA >Environment: FreeBSD devil.micom.mng.net 8.0-CURRENT FreeBSD 8.0-CURRENT #8 r185293: Tue Nov 25 22:46:19 ULAT 2008 tsgan@devil.micom.mng.net:/usr/obj/usr/src/sys/DEVIL i386 >Description: After booting with plugged in atheros pcmcia card system recognizes card. However when I unplug the card system panics. devil# sysctl -a|grep cbb cbb_event_thread(c56bc800,c539ad38,c0bc108c,327,c5780538,...) at cbb_event_thread+0x15a cbb0: mem 0xe4200000-0xe4200fff irq 16 at device 4.0 on pci2 cbb0: Found memory at e4200000 cbb0: Secondary bus is 3 cardbus0: on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb0: [ITHREAD] cbb0: mem 0xe4200000-0xe4200fff irq 16 at device 4.0 on pci2 cbb0: Found memory at e4200000 cbb0: Secondary bus is 3 cardbus0: on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb0: [ITHREAD] ffs_lock(c52a7a78,c0bef4fa,c0bbfcbb,200501,c595ca78,...) at ffs_lock+0x8a VOP_CREATE_APV(c0cc6c20,f4b87acc,2,c0bbfcbb,3,...) at VOP_CREATE_APV+0xa5 cbb0: mem 0xe4200000-0xe4200fff irq 16 at device 4.0 on pci2 cbb0: Found memory at e4200000 cbb0: Secondary bus is 3 cardbus0: on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb0: [ITHREAD] cbb0: card inserted: event=0x00000000, state=30000820 cbb0: cbb_power: 3V ffs_lock(c52a7a78,c0bef4fa,c0bbfcbb,200501,c595ca78,...) at ffs_lock+0x8a VOP_CREATE_APV(c0cc6c20,f4be7acc,2,c0bbfcbb,3,...) at VOP_CREATE_APV+0xa5 "Giant","cbb" hw.cbb.debug: 1 hw.cbb.start_32_io: 4096 hw.cbb.start_16_io: 256 hw.cbb.start_memory: 2281701376 dev.cbb.0.%desc: RF5C476 PCI-CardBus Bridge dev.cbb.0.%driver: cbb dev.cbb.0.%location: slot=4 function=0 handle=\_SB_.C003.C0B0.C29E dev.cbb.0.%pnpinfo: vendor=0x1180 device=0x0476 subvendor=0x103c subdevice=0x30c0 class=0x060700 dev.cbb.0.%parent: pci2 dev.cbb.0.domain: 0 dev.cbb.0.pribus: 2 dev.cbb.0.secbus: 3 dev.cbb.0.subbus: 3 dev.cardbus.0.%parent: cbb0 dev.pccard.0.%parent: cbb0 devil# sysctl -a | grep cbb[K[Kcardbus[K[K[K[K[K[K[Kardbus cardbus0: CIS pointer is 0x5001 cardbus0: CIS in BAR 0x10 cardbus0: CIS offset is 0x5000 cardbus_detach_card(c578d280,c56188b8,c0c59418,1df,c0d18b40,...) at cardbus_detach_card+0xcd cardbus0: on cbb0 cardbus0: on cbb0 cardbus0: on cbb0 cardbus0: CIS pointer is 0x5001 cardbus0: CIS in BAR 0x10 cardbus0: CIS offset is 0x5000 cardbus0: CIS pointer is 0x5001 cardbus0: CIS in BAR 0x10 cardbus0: CIS offset is 0x5000 ath0: mem 0xe4210000-0xe421ffff irq 16 at device 0.0 on cardbus0 hw.cardbus.cis_debug: 1 hw.cardbus.debug: 1 dev.cardbus.%parent: pci dev.cardbus.0.%desc: CardBus bus dev.cardbus.0.%driver: cardbus dev.cardbus.0.%parent: cbb0 dev.ath.0.%parent: cardbus0 devil# sysctl -a | grep cardbus[K[K[K[K[K[K[Kpccard pccard0: <16-bit PCCard bus> on cbb0 pccard0: <16-bit PCCard bus> on cbb0 pccard0: <16-bit PCCard bus> on cbb0 hw.pccard.cis_debug: 1 hw.pccard.debug: 1 dev.pccard.0.%desc: 16-bit PCCard bus dev.pccard.0.%driver: pccard dev.pccard.0.%parent: cbb0 devil# .. Unread portion of the kernel message buffer: Status is 0x30000826 ath0: detached panic: WARNING: Driver mistake: destroy_dev on 0 .. (kgdb) bt #0 doadump () at pcpu.h:246 #1 0xc07fcb2e in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:420 #2 0xc07fce02 in panic (fmt=Variable "fmt" is not available. ) at /usr/src/sys/kern/kern_shutdown.c:576 #3 0xc07c72e1 in destroy_devl (dev=0xc58da000) at /usr/src/sys/kern/kern_conf.c:788 #4 0xc07c7790 in destroy_dev (dev=0xc58da000) at /usr/src/sys/kern/kern_conf.c:866 #5 0xc05a156e in cardbus_device_destroy (devi=0xc5a41000) at /usr/src/sys/dev/cardbus/cardbus_device.c:134 #6 0xc059fc96 in cardbus_detach_card (cbdev=0xc578d280) at /usr/src/sys/dev/cardbus/cardbus.c:239 #7 0xc06a55ca in cbb_event_thread (arg=0xc56bf000) at card_if.h:95 #8 0xc07db818 in fork_exit (callout=0xc06a5470 , arg=0xc56bf000, frame=0xc539ad38) at /usr/src/sys/kern/kern_fork.c:815 #9 0xc0afe3d0 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:270 (kgdb) frame 3 #3 0xc07c72e1 in destroy_devl (dev=0xc58da000) at /usr/src/sys/kern/kern_conf.c:788 788 KASSERT(dev->si_flags & SI_NAMED, (kgdb) frame 4 #4 0xc07c7790 in destroy_dev (dev=0xc58da000) at /usr/src/sys/kern/kern_conf.c:866 866 destroy_devl(dev); (kgdb) frame 5 #5 0xc05a156e in cardbus_device_destroy (devi=0xc5a41000) at /usr/src/sys/dev/cardbus/cardbus_device.c:134 134 destroy_dev(devi->sc_cisdev_compat); (kgdb) >How-To-Repeat: Plug the card and boot. Then after system is ready to use, unplug the card. >Fix: >Release-Note: >Audit-Trail: >Unformatted: