kern/51227: Machine is panicy time bomb after disconnecting USB in the middle dd(1)

To: kern-bug-people%netbsd.org@localhost,gnats-admin%netbsd.org@localhost,netbsd-bugs%netbsd.org@localhost
Subject: kern/51227: Machine is panicy time bomb after disconnecting USB in the middle dd(1)
From: coypu%sdf.org@localhost
Date: Wed, 8 Jun 2016 15:45:00 +0000 (UTC)

>Number:         51227
>Category:       kern
>Synopsis:       Machine is panicy time bomb after disconnecting USB in the middle dd(1)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jun 08 15:45:00 +0000 2016
>Originator:     coypu
>Release:        NetBSD-7.99.30
>Organization:
>Environment:
NetBSD net.Home 7.99.30 NetBSD 7.99.30 (GENERIC) #2: Tue Jun  7 04:32:16 IDT 2016  fly%net.Home@localhost:/usr/obj/sys/arch/amd64/compile/GENERIC amd64
>Description:
dd to USB stick (e.g. dd if=file.img of=/dev/rsd0d bs=16k)
disconnect USB stick.

cannot stop this process now. it is in physio state.

machine is now a 'time bomb', after a long amount of time (several hours),
it will panic (something got deallocated?).

crash dump:
http://coypu.sdf.org/netbsd.usb.core.xz

Backtrace and some of dmesg:

umass1: detached
umass1: at uhub0 port 5 (addr 7) disconnected
umass1 at uhub0 port 1 configuration 1 interface 0
umass1: SanDisk Cruzer Blade, rev 2.00/1.03, addr 8
umass1: using SCSI over Bulk-Only
scsibus1 at umass1: 2 targets, 1 lun per target
sd2 at scsibus1 target 0 lun 0: <SanDisk, Cruzer Blade, 1.18> disk removable
sd2: 3819 MB, 7759 cyl, 16 head, 63 sec, 512 bytes/sect x 7821312 sectors
dk0 at sd2: "EFI", 2071 blocks at 43, type: hfs
sd2: wedge named 'EFI' already exists, manual intervention required
umass1: BBB bulk-out stall clear failed, IOERROR
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
sd2: cache synchronization failed
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
umass1: BBB reset failed, TIMEOUT
umass1: BBB bulk-in clear stall failed, TIMEOUT
umass1: BBB bulk-out clear stall failed, TIMEOUT
dk0 at sd2 (EFI) deleted
sd2: detached
uvm_fault(0xfffffe8423ee7a40, 0x0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff808206b4 cs 8 rflags 10286 cr2 8 ilevel 0 rsp fffffe811f958a50
curlwp 0xfffffe839d770580 pid 3930.1 lowest kstack 0xfffffe811f9552c0
panic: trap
cpu9: Begin traceback...
vpanic() at netbsd:vpanic+0x140
snprintf() at netbsd:snprintf
trap() at netbsd:trap+0xc4b
--- trap (number 6) ---
mutex_oncpu() at netbsd:mutex_oncpu+0x1e
mutex_vector_enter() at netbsd:mutex_vector_enter+0xad
sdclose() at netbsd:sdclose+0x45
cdev_close() at netbsd:cdev_close+0x80
spec_close() at netbsd:spec_close+0x11a
VOP_CLOSE() at netbsd:VOP_CLOSE+0x33
vn_close() at netbsd:vn_close+0x36
closef() at netbsd:closef+0x54
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 6584 16 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 1824 16 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 0 16 EXIT 50bffee0 6
WARNING: SPL NOT LOWERED ON SYSCALL 0 16 EXIT 50bffee0 6
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 1 1647624320 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 2432 16 EXIT 5da0f950 7
fd_free(W)A RaNtI NG: SPL NOT LOWERED ON SYSCALL 0 16 EXIT 50bffee0 6
WARNING: SPL NOT LOWERED ON SYSCALL 0 16 EXIT 50bffee0 6
WARNING: SPL NOT LOWERED ON SYSCALL 35 16 EXIT 5da0f950 7
WARNING: SPL NOT LOWERED ON SYSCALL 0 16 EXIT 50bffee0 6
WARNING: SPL NOT LOWERED ON SYSCALL 35 16 EXIT 5da0f950 7
netbsd:fd_free+0xcb
exit1() at netbsd:exit1+0x11d
sigexit() at netbsd:sigexit+0x13c
sendsig() at netbsd:sendsig
lwp_userret() at netbsd:lwp_userret+0x1be
syscall() at netbsd:syscall+0x208
--- syscall (number 0) ---
74702583d4fa:
cpu9: End traceback...

dumping to dev 0,1 (offset=1514, size=4150227):
dump


(gdb) bt
#0  0xffffffff80119975 in cpu_reboot (howto=howto@entry=260, bootstr=bootstr@entry=0x0) at /usr/src/sys/arch/amd64/amd64/machdep.c:671
#1  0xffffffff8086064c in vpanic (fmt=fmt@entry=0xffffffff80ecf5e3 "trap", ap=ap@entry=0xfffffe811f958828) at /usr/src/sys/kern/subr_prf.c:342
#2  0xffffffff80860700 in panic (fmt=fmt@entry=0xffffffff80ecf5e3 "trap") at /usr/src/sys/kern/subr_prf.c:258
#3  0xffffffff8011b5f6 in trap (frame=0xfffffe811f958960) at /usr/src/sys/arch/amd64/amd64/trap.c:298
#4  0xffffffff8010114e in alltraps ()
#5  0xffffffff808206b4 in mutex_oncpu (owner=18446744073709551600) at /usr/src/sys/kern/kern_mutex.c:417
#6  0xffffffff808208b8 in mutex_vector_enter (mtx=0xfffffe842b950da0) at /usr/src/sys/kern/kern_mutex.c:549
#7  0xffffffff8015d536 in sdclose (dev=<optimized out>, flag=<optimized out>, fmt=8192, l=<optimized out>) at /usr/src/sys/dev/scsipi/sd.c:643
#8  0xffffffff808505ae in cdev_close (dev=3363, flag=1052675, devtype=8192, l=0xfffffe839d770580) at /usr/src/sys/kern/subr_devsw.c:880
#9  0xffffffff808ccc5a in spec_close (v=<optimized out>) at /usr/src/sys/miscfs/specfs/spec_vnops.c:1245
#10 0xffffffff808c09e4 in VOP_CLOSE (vp=vp@entry=0xfffffe84699323f8, fflag=fflag@entry=1052675, cred=cred@entry=0xfffffe83d897f780) at /usr/src/sys/kern/vnode_if.c:266
#11 0xffffffff808b9a8e in vn_close (vp=0xfffffe84699323f8, flags=1052675, cred=0xfffffe83d897f780) at /usr/src/sys/kern/vfs_vnops.c:384
#12 0xffffffff80809d8b in closef (fp=0xfffffe82ee0d1980) at /usr/src/sys/kern/kern_descrip.c:831
#13 0xffffffff8080c9aa in fd_free () at /usr/src/sys/kern/kern_descrip.c:1561
#14 0xffffffff80813b05 in exit1 (l=l@entry=0xfffffe839d770580, exitcode=exitcode@entry=0, signo=signo@entry=2) at /usr/src/sys/kern/kern_exit.c:286
#15 0xffffffff808364a8 in sigexit (l=l@entry=0xfffffe839d770580, signo=signo@entry=2) at /usr/src/sys/kern/kern_sig.c:2055
#16 0xffffffff808368da in postsig (signo=2) at /usr/src/sys/kern/kern_sig.c:1854
#17 0xffffffff8081d61d in lwp_userret (l=l@entry=0xfffffe839d770580) at /usr/src/sys/kern/kern_lwp.c:1523
#18 0xffffffff8013e3e9 in mi_userret (l=0xfffffe839d770580) at /usr/src/sys/sys/userret.h:94
#19 userret (l=0xfffffe839d770580) at ./machine/userret.h:82
#20 syscall (frame=0xfffffe811f958f00) at /usr/src/sys/arch/x86/x86/syscall.c:184
#21 0xffffffff80100751 in Xsyscall ()

>How-To-Repeat:

>Fix:

Prev by Date: port-hpcmips/51226: Install bug for hpcmips NetBSD V7 using FTP Full installation
Next by Date: Re: kern/51227: Machine is panicy time bomb after disconnecting USB in the middle dd(1)
Previous by Thread: port-hpcmips/51226: Install bug for hpcmips NetBSD V7 using FTP Full installation
Next by Thread: Re: kern/51227: Machine is panicy time bomb after disconnecting USB in the middle dd(1)
Indexes:

Home | Main Index | Thread Index | Old Index