Re: panic while resuming with connected ucom

2013-06-22 Thread Tobias Ulmer
On Fri, Jun 21, 2013 at 10:01:48PM +0200, Otto Moerbeek wrote:
 Hi,
 
 I have a Thinkpad T430 with an internal 3G modem that shows up as a
 (couple of) umodem. If I have a connection to the corresponding ucom
 active (with cu or pppd) and suspend the machine followed by a resume,
 it panics (or rather gets a trap) during resume; hand typed:
 
 kernel: protection fault trap, code=0
 Stopped atehci_check_intr+0xe:movbzl  0x3(%rax),%eax
 dddb{0} trace
 ehci_check_intr at ehci_check_int+0xe
 ehci_softintr() at ehci_softint+0x35
 softintr_dispatch at softintr_dispatch+0x5d
 Xsoftnet() at Xsoftnet+0x2d
 
 rax holds 0xdead0065deadbeef
 
 This is 100% reproducable. If I do not have an active connection to
 cuaU0 at the moment of suspend all is fine and the machine resumes ok.
 
 Could it be the refcounting is still rong in some cases?
 

Likely, but not the same ucom refcounting problem I hit.  movbzl
0x3(%rax),%eax is trying to deref bmAttributes, so edesc is freed most
likely. Maybe add some debug printfs to keep track of (de)allocation of
that struct?



panic while resuming with connected ucom

2013-06-21 Thread Otto Moerbeek
Hi,

I have a Thinkpad T430 with an internal 3G modem that shows up as a
(couple of) umodem. If I have a connection to the corresponding ucom
active (with cu or pppd) and suspend the machine followed by a resume,
it panics (or rather gets a trap) during resume; hand typed:

kernel: protection fault trap, code=0
Stopped at  ehci_check_intr+0xe:movbzl  0x3(%rax),%eax
dddb{0} trace
ehci_check_intr at ehci_check_int+0xe
ehci_softintr() at ehci_softint+0x35
softintr_dispatch at softintr_dispatch+0x5d
Xsoftnet() at Xsoftnet+0x2d

rax holds 0xdead0065deadbeef

This is 100% reproducable. If I do not have an active connection to
cuaU0 at the moment of suspend all is fine and the machine resumes ok.

Could it be the refcounting is still rong in some cases?

What might matter: the detach messages for the various usb devices
show up after resume, and then the panic happens. If I did not have a
connection at the moment of suspend, I see the detach messages followed
by attach messages during resume. 

You might try to reproduce this using a USB serial dongle, although
the umodem might also play a role here?

I do not use the modem very often, so it's hard for me to tell when
this started to happen. But it is relatively recent (say a few weeks).

-Otto

OpenBSD 5.3-current (GENERIC.MP) #21: Fri Jun 21 18:16:54 CEST 2013
o...@tp.intra.drijf.net:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8256528384 (7874MB)
avail mem = 8029011968 (7657MB)
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0xdae9d000 (71 entries)
bios0: vendor LENOVO version G1ET91WW (2.51 ) date 01/09/2013
bios0: LENOVO 2347CTO
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP TCPA SSDT SSDT SSDT HPET APIC MCFG ECDT FPDT ASF! UEFI 
UEFI MSDM SSDT SSDT UEFI DBG2
acpi0: wakeup devices LID_(S4) SLPB(S3) IGBE(S4) EXP3(S4) XHCI(S3) EHC1(S3) 
EHC2(S3) HDEF(S4)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 1197.50 MHz
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
cpu0: apic clock running at 99MHz
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 1197.29 MHz
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 1, core 0, package 0
cpu2 at mainbus0: apid 2 (application processor)
cpu2: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 1197.29 MHz
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 1, package 0
cpu3 at mainbus0: apid 3 (application processor)
cpu3: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, 1197.29 MHz
cpu3: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 1, core 1, package 0
ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins
acpimcfg0 at acpi0 addr 0xf800, bus 0-63
acpiec0 at acpi0
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (PEG_)
acpiprt2 at acpi0: bus 2 (EXP1)
acpiprt3 at acpi0: bus 3 (EXP2)
acpiprt4 at acpi0: bus 4 (EXP3)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpicpu2 at acpi0: C3, C2, C1, PSS
acpicpu3 at acpi0: C3, C2, C1, PSS
acpipwrres0 at acpi0: PUBS
acpitz0 at acpi0: critical temperature is 200 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model 45N1001 serial  5140 type LION oem SANYO
acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit offline
acpithinkpad0 at acpi0
cpu0: Enhanced SpeedStep 1197 MHz: speeds: 2601, 2600, 2500, 2400, 2300, 2200, 
2100, 2000, 1900, 1800, 1700, 1600, 1500, 1400, 1300, 1200 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 Intel Core 3G Host rev 0x09
vga1 at pci0 dev 2 function 0 Intel HD Graphics 4000 rev 0x09
intagp0 at vga1
agp0