Bug 256673 - [panic] [usb] [if_ure] unplugging device causes panic roughly one in three times
Summary: [panic] [usb] [if_ure] unplugging device causes panic roughly one in three times
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: usb (show other bugs)
Version: 13.0-RELEASE
Hardware: amd64 Any
: --- Affects Only Me
Assignee: freebsd-usb (Nobody)
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2021-06-17 14:47 UTC by Erik Inge Bolsø
Modified: 2022-10-12 00:49 UTC (History)
1 user (show)

See Also:

Attachments
crashinfo file (456.91 KB, text/plain)
2021-06-17 14:47 UTC, Erik Inge Bolsø 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Inge Bolsø 2021-06-17 14:47:53 UTC 
Created attachment 225893 [details]
crashinfo file

A quad ethernet usb device we picked up for expanding a small-footprint firewall sometimes panics the system on unplug. RTL8153-based.

13.0-RELEASE-p1

Steps to reproduce:

Plug the device in, wait for things to settle, unplug. After three-four cycles it usually panics.

panic: page fault
cpuid = 6
time = 1623939807
KDB: stack backtrace:
#0 0xffffffff80c57515 at kdb_backtrace+0x65
#1 0xffffffff80c09ef1 at vpanic+0x181
#2 0xffffffff80c09d63 at panic+0x43
#3 0xffffffff8108b1b7 at trap_fatal+0x387
#4 0xffffffff8108b20f at trap_pfault+0x4f
#5 0xffffffff8108a86d at trap+0x27d
#6 0xffffffff81061978 at calltrap+0x8
#7 0xffffffff80a2c5b9 at usbd_do_request_flags+0x899
#8 0xffffffff80a2c690 at usbd_do_request_proc+0x60
#9 0xffffffff843c12c0 at ure_miibus_readreg+0xc0
#10 0xffffffff8071e5b7 at rgephy_status+0x227
#11 0xffffffff8071e348 at rgephy_service+0x418
#12 0xffffffff8071a7f6 at mii_pollstat+0x56
#13 0xffffffff843c4084 at ure_ifmedia_sts+0x44
#14 0xffffffff80d27f8a at ifmedia_ioctl+0x16a
#15 0xffffffff80d1d45d at ifhwioctl+0x2bd
#16 0xffffffff80d1f4dc at ifioctl+0x50c
#17 0xffffffff80c76ebd at kern_ioctl+0x26d

Looks different from #252608.
Comment 1 Hans Petter Selasky freebsd_committer freebsd_triage 2021-06-17 15:32:08 UTC 
There was a fix in 13-stable for tearing down the miibus for USB ethernet devices.

However the if_ioctl path is not yet fully clean (being worked on).

--HPS