Unplugging an USB mouse yields a panic on latest git -master

[Rumko <rumcic@xxxxxxxxx>]

The core is available at leaf:~rumko/crash/usb/*.7

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
mp_lock = 00000000; cpuid = 0; lapic.id = 00000000
fault virtual address   = 0xf0697024
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc01e2df9
stack pointer           = 0x10:0xdae53984
frame pointer           = 0x10:0xdae539ac
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = Idle
current thread          = pri 44 (CRIT)
 <- SMP: XXX
trap number             = 12
panic: page fault
mp_lock = 00000000; cpuid = 0
Trace beginning at frame 0xdae53888
panic(dae538ac,10,dae5393c,c,dae538cc) at panic+0x14d
panic(c0437c40,c0454e43,0,0,fffff) at panic+0x14d
trap_fatal(f0697024,0,dae5393c,c0537fa0,da3bac70) at trap_fatal+0x31d
trap_pfault(2c,c0537fa0,f0640e88,da3bac70,0) at trap_pfault+0x131
trap(dae5393c) at trap+0x776
calltrap() at calltrap+0xd
--- trap 0, eip = 0, esp = 0xdae53980, ebp = 0xc04b42a0 ---
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(528,0,0,0,0) at 0x20
gd_cnt(a0,0,0,0,0) at 0x3e8
gd_reqflags(50,0,0,0,0) at 0x60
gd_reqflags(0,0,0,0,0) at 0x28
gd_curthread(0,0,0,0,0) at 0x8
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x20
(null)(2d8,0,0,0,0) at 0
gd_cnt(145000,0,0,0,0) at 0x278
gd_ss_eflags(80,0,0,0,0) at 0x186000
gd_reqflags(0,0,0,0,0) at 0x100
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x100
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x80000
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x10
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_savefpu(2c00,0,0,0,0) at 0x9c8
gd_ss_eflags(0,0,0,0,0) at 0x1c80
gd_ss_eflags(0,0,0,0,0) at 0x3000
(null)(4b18,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x3528
gd_cnt(0,0,0,0,0) at 0x640
gd_reqflags(0,0,0,0,0) at 0x10
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x68
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x18
gd_cnt(0,0,0,0,0) at 0x640
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_cnt(0,0,0,0,0) at 0x340
gd_reqflags(32188,0,0,0,0) at 0x20
gd_cnt(5858,0,0,0,0) at 0x638
gd_ss_eflags(0,0,0,0,0) at 0xa088
(null)(0,0,0,0,0) at 0
(null)(210,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x1470
gd_cnt(0,0,0,0,0) at 0x300
gd_cnt(0,0,0,0,0) at 0x200
(null)(0,0,0,0,0) at 0
gd_cnt(1000,0,0,0,0) at 0x200
gd_ss_eflags(370,0,0,0,0) at 0x2010
gd_ss_eflags(0,0,0,0,0) at 0x3088
gd_ss_eflags(18,0,0,0,0) at 0xaf0
gd_reqflags(0,0,0,0,0) at 0x90
gd_ss_eflags(0,0,0,0,0) at 0x80000
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(10,0,0,0,0) at 0
gd_reqflags(65b80,0,0,0,0) at 0x20
gd_ss_eflags(0,0,0,0,0) at 0x50780
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_ss_eflags(1800,0,0,0,0) at 0x1560
gd_ss_eflags(0,0,0,0,0) at 0x2000
gd_ss_eflags(0,0,0,0,0) at 0x1440
(null)(31ba0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x219a58
(null)(280,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x1220
(null)(e0,0,0,0,0) at 0
gd_ss_eflags(8500,0,0,0,0) at 0x2a90
gd_ss_eflags(128,0,0,0,0) at 0x1b20
gd_cnt(10,0,0,0,0) at 0x1b8
gd_ss_eflags(0,0,0,0,0) at 0x1fb48
(null)(11800,0,0,0,0) at 0
gd_ss_eflags(a800,0,0,0,0) at 0x2cc00
gd_ss_eflags(a8,0,0,0,0) at 0xd9000
gd_ss_eflags(1758,0,0,0,0) at 0xd90
gd_cnt(0,0,0,0,0) at 0x6a8
(null)(160,0,0,0,0) at 0
gd_ss_eflags(12d20,0,0,0,0) at 0x16000
gd_ss_eflags(0,0,0,0,0) at 0x10d20
gd_ss_eflags(0,0,0,0,0) at 0x2400
gd_cnt(0,0,0,0,0) at 0x2a0
gd_cnt(5ac0,0,0,0,0) at 0x360
gd_ss_eflags(14580,0,0,0,0) at 0xe00
gd_ss_eflags(0,0,0,0,0) at 0x10180
gd_ss_eflags(0,0,0,0,0) at 0x5f40
gd_ss_eflags(0,0,0,0,0) at 0x1040
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0x100
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x80000
(null)(0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x5fe0
(null)(148,0,0,0,0) at 0
gd_cnt(0,0,0,0,0) at 0x148
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_cnt(0,0,0,0,0) at 0x380
gd_ss_eflags(720,0,0,0,0) at 0x1580
gd_ss_eflags(0,0,0,0,0) at 0xdc0
(null)(10,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_reqflags(0,0,0,0,0) at 0xd0
(null)(19a020,0,0,0,0) at 0
(null)(0,0,0,0,0) at 0
gd_cnt(0,0,0,0,0) at 0x288
gd_ss_eflags(0,0,0,0,0) at 0x24d80
(null)(30,0,0,0,0) at 0
gd_cnt(150,0,0,0,0) at 0x438
gd_reqflags(0,0,0,0,0) at 0x118
(null)(0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x16a10
gd_cnt(0,0,0,0,0) at 0x200
(null)(0,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x200000
(null)(6a8,0,0,0,0) at 0
gd_ss_eflags(0,0,0,0,0) at 0x3058
gd_ss_eflags(0,0,0,0,0) at 0x2000
(null)(0,0,0,0,0) at 0
boot() called on cpu#0
Uptime: 16m46s
Physical memory: 3065 MB
Dumping 227 MB: 212 196 180 164 148 132 116 100 (CTRL-C to abort)  (CTRL-C to
abort)  (CTRL-C to abort)  84 (CTRL-C to abort)  (CTRL-C to abort)  (CTRL-C to
abort)  68 52 36 20 4

Reading symbols from /boot/modules/if_nfe.ko...done.
Loaded symbols for /boot/modules/if_nfe.ko
Reading symbols from /boot/modules/powernow.ko...done.
Loaded symbols for /boot/modules/powernow.ko
Reading symbols from /boot/modules/linprocfs.ko...done.
Loaded symbols for /boot/modules/linprocfs.ko
Reading symbols from /boot/modules/if_bridge.ko...done.
Loaded symbols for /boot/modules/if_bridge.ko
Reading symbols from /boot/modules/linux.ko...done.
Loaded symbols for /boot/modules/linux.ko
_get_mycpu (di=0xc04dcec0) at ./machine/thread.h:83
83          __asm ("movl %%fs:globaldata,%0" : "=r"
(gd) : "m"(__mycpu__dummy));
(kgdb) bt
#0  _get_mycpu (di=0xc04dcec0) at ./machine/thread.h:83
#1  md_dumpsys (di=0xc04dcec0)
at /usr/src/sys/platform/pc32/i386/dump_machdep.c:264
#2  0xc01e49d6 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:838
#3  0xc01e4fa8 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:387
#4  0xc01e5506 in panic (fmt=0xc0437c40 "%s")
at /usr/src/sys/kern/kern_shutdown.c:744
#5  0xc0404e19 in trap_fatal (frame=0xdae5393c, eva=<value optimized out>)
at /usr/src/sys/platform/pc32/i386/trap.c:1134
#6  0xc0404f5c in trap_pfault (frame=0xdae5393c, usermode=0, eva=4033441828)
at /usr/src/sys/platform/pc32/i386/trap.c:1035
#7  0xc0405cac in trap (frame=0xdae5393c)
at /usr/src/sys/platform/pc32/i386/trap.c:707
#8  0xc03f1c87 in calltrap ()
at /usr/src/sys/platform/pc32/i386/exception.s:785
#9  0xc01e2df9 in kmalloc (size=112, type=0xc04b42a0, flags=<value optimized
out>) at /usr/src/sys/kern/kern_slaballoc.c:542
#10 0xc030b7cf in softdep_setup_freeblocks (ip=0xf028d200, length=3661343856)
at /usr/src/sys/vfs/ufs/ffs_softdep.c:1829
#11 0xc0305e79 in ffs_truncate (vp=0xf01bcf68, length=0, flags=0, cred=0x0)
at /usr/src/sys/vfs/ufs/ffs_inode.c:202
#12 0xc0310efa in ufs_inactive (ap=0xdae53b78)
at /usr/src/sys/vfs/ufs/ufs_inode.c:90
#13 0xc0313922 in ufs_vnoperate (ap=0xdae53b78)
at /usr/src/sys/vfs/ufs/ufs_vnops.c:2292
#14 0xc024e95a in vop_inactive (ops=0xda3bb9f0, vp=0xf01bcf68)
at /usr/src/sys/kern/vfs_vopops.c:755
#15 0xc0240db7 in vnode_terminate (vp=0xf01bcf68)
at /usr/src/sys/kern/vfs_lock.c:371
#16 0xc01bf800 in _sysref_put (sr=0xf01bcf78)
at /usr/src/sys/kern/kern_sysref.c:320
#17 0xc023fe43 in sysref_put (vp=0xff800000) at /usr/src/sys/sys/sysref2.h:85
#18 vrele (vp=0xff800000) at /usr/src/sys/kern/vfs_lock.c:265
#19 0xc023fe60 in vput (vp=0xf01bcf68) at /usr/src/sys/kern/vfs_lock.c:565
#20 0xc030906b in handle_workitem_remove (dirrem=0xd2882cd0)
at /usr/src/sys/vfs/ufs/ffs_softdep.c:2959
#21 0xc0308563 in process_worklist_item (matchmnt=0x0, flags=<value optimized
out>) at /usr/src/sys/vfs/ufs/ffs_softdep.c:714
#22 0xc030a0f4 in softdep_process_worklist (matchmnt=0x0)
at /usr/src/sys/vfs/ufs/ffs_softdep.c:622
#23 0xc0241007 in bio_ops_sync (mp=0xda3bac70)
at /usr/src/sys/kern/vfs_mount.c:1314
#24 0xc0242b07 in sched_sync () at /usr/src/sys/kern/vfs_sync.c:253
#25 0xc01d6607 in suspend_kproc (td=Cannot access memory at address 0x8
) at /usr/src/sys/kern/kern_kthread.c:158
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
-- 
Regards,
Rumko