>Number:         12632
>Category:       kern
>Synopsis:       unplugging used usb ricochet modem panics machine
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Apr 13 10:48:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     TheMan
>Release:        -current from Apr 12 15:25:35 2001 UTC
>Organization:
none
>Environment:
	
System: NetBSD this 1.5U NetBSD 1.5U (THAT) #34: Thu Apr 12 12:20:36 EDT 2001     andrew@this:/usr/src/sys/arch/i386/compile/THAT i386

>Description:

	i was happily using my ricochet modem with my laptop as a
gateway (nat'ed) for the rest of my machines at home and i noticed
that i was not getting any traffic back (examination tcpdump indicated
an occasional packet "leaving" but nothing coming in) so i did what i
normally do: hup the pppd, and unplug the ricochet (see kern/12627 for
why i unplug it and kern/12079 because this pr might be the same
problem).

this time, instead of being happy, the laptop froze momentarily, then
the screen (running x) took a two inch jump to the left (wrapping
around quite nicely) and then it rebooted.  i got this from
/var/log/messages a little while later.  again, my msgbuf is not big
enough.

100,0) at dumpsys+0xed
cpu_reboot(100,0,c03a40c0,6,0) at cpu_reboot+0x63
panic(c034bc7b,80000000,ceb10f00,c07a9000,0) at panic+0xcd
trap() at trap+0x1dd
--- trap (number 6) ---
uhci_remove_bulk(c07a9000,ceb10f00,c085e800,c0857a80,cf35ae4c) at uhci_remove_bulk+0x4e
uhci_device_bulk_done(c085e800,80000000,7fffffff,c085e870,c085e840) at uhci_device_bulk_done+0x2e
usb_transfer_complete(c085e800) at usb_transfer_complete+0x159
uhci_abort_xfer(c085e800,6,cf35ae84,c02eb3a5,c085e800) at uhci_abort_xfer+0xac
uhci_device_bulk_abort(c085e800) at uhci_device_bulk_abort+0xd
usbd_ar_pipe(c0857a80,0,c0379f60,cf35aeb4,c02f285a) at usbd_ar_pipe+0x1d
usbd_abort_pipe(c0857a80) at usbd_abort_pipe+0x35
ucom_detach(c07a6000,1,c07a6100,0,c07a6100) at ucom_detach+0x26
config_detach(c07a6000,1,0,c037a040,cf35af14) at config_detach+0x55
umodem_detach(c07a6100,1,0,c07c3300,c078c0c0) at umodem_detach+0x1e
config_detach(c07a6100,1,c036e80a,3) at config_detach+0x55
usb_disconnect_port(c078c0c0,c0796540,c078c200,ffffffff,c078c200) at usb_disconnect_port+0x88
uhub_explore(c078c180) at uhub_explore+0x133
usb_discover(c078c200,c078c200,c02ea038,0,0) at usb_discover+0x21
usb_event_thread(c078c200) at usb_event_thread+0xa7
End traceback...

dumping to dev 0,1 offset 17063
dump device not ready


panic: wdc_exec_command: polled command not done

Begin traceback...
wdc_exec_command(c07a78f8,cf35a968) at wdc_exec_command+0xca
wd_flushcache(c0793000,10,cf35a9a4,c015b77d,c0793000) at wd_flushcache+0x4d
wd_shutdown(c0793000) at wd_shutdown+0xd
doshutdownhooks(cf35a9d8,cf35a9cc,c0164d1d,104,0) at doshutdownhooks+0x25
cpu_reboot(104,0,c0284508,c0793000,1) at cpu_reboot+0x68
panic(c034f060,2,cf35ab5c,c0284300,1) at panic+0xcd
wddump(1,a41cd7,cf35ab24,200,63ea0) at wddump+0x1f2
cpu_dump(100,c034bc7b,100,cb,30) at cpu_dump+0x101
dumpsys(cf35ad90,cf35ad84,c0164d1d,100,0) at dumpsys+0xed
cpu_reboot(100,0,c03a40c0,6,0) at cpu_reboot+0x63
panic(c034bc7b,80000000,ceb10f00,c07a9000,0) at panic+0xcd
trap() at trap+0x1dd
--- trap (number 6) ---
uhci_remove_bulk(c07a9000,ceb10f00,c085e800,c0857a80,cf35ae4c) at uhci_remove_bulk+0x4e
uhci_device_bulk_done(c085e800,80000000,7fffffff,c085e870,c085e840) at uhci_device_bulk_done+0x2e
usb_transfer_complete(c085e800) at usb_transfer_complete+0x159
uhci_abort_xfer(c085e800,6,cf35ae84,c02eb3a5,c085e800) at uhci_abort_xfer+0xac
uhci_device_bulk_abort(c085e800) at uhci_device_bulk_abort+0xd
usbd_ar_pipe(c0857a80,0,c0379f60,cf35aeb4,c02f285a) at usbd_ar_pipe+0x1d
usbd_abort_pipe(c0857a80) at usbd_abort_pipe+0x35
ucom_detach(c07a6000,1,c07a6100,0,c07a6100) at ucom_detach+0x26
config_detach(c07a6000,1,0,c037a040,cf35af14) at config_detach+0x55
umodem_detach(c07a6100,1,0,c07c3300,c078c0c0) at umodem_detach+0x1e
config_detach(c07a6100,1,c036e80a,3) at config_detach+0x55
usb_disconnect_port(c078c0c0,c0796540,c078c200,ffffffff,c078c200) at usb_disconnect_port+0x88
uhub_explore(c078c180) at uhub_explore+0x133
usb_discover(c078c200,c078c200,c02ea038,0,0) at usb_discover+0x21
usb_event_thread(c078c200) at usb_event_thread+0xa7
End traceback...

dumping to dev 0,1 offset 17063
dump device not ready

rebooting...

>How-To-Repeat:

	(1) boot 1.5U kernel.
	(2) run ppp over usb ricochet modem.
	(3) "exercise" the link by using several machines behind the
	laptop to "surf the web".
	(4) when return traffic stops, unplug the ricochet.

>Fix:

sorry...i have absolutely no clue at the present time.
>Release-Note:
>Audit-Trail:
>Unformatted: