Re: kern/52569 (Entering ddb using USB keyboard panics with "locking against myself")

[Andreas Gustafsson <gson%gson.org@localhost>]

The following reply was made to PR kern/52569; it has been noted by GNATS.

From: Andreas Gustafsson <gson%gson.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: kern/52569 (Entering ddb using USB keyboard panics with "locking against myself")
Date: Fri, 21 Sep 2018 15:30:17 +0300

 mrg%NetBSD.org@localhost wrote:
 > this should be fixed in -current now.  can you check?
 
 I was finally able to work around all of 53621, 41780, and 53599
 by adding "userconf=disable sb0" to /boot.cfg.
 
 Running the "while true; do ifconfig athn0 down; ifconfig athn0 up; done"
 loop from PR 52553 and hitting ctrl-alt-esc on the USB keyboard still
 causes a panic, but the panic message is now "mutex_owned(&sc->sc_lock)"
 rather than "locking against myself":
 
 test# gdb /netbsd
 GNU gdb (GDB) 7.12
 Copyright (C) 2016 Free Software Foundation, Inc.
 License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
 This is free software: you are free to change and redistribute it.
 There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
 and "show warranty" for details.
 This GDB was configured as "i486--netbsdelf".
 Type "show configuration" for configuration details.
 For bug reporting instructions, please see:
 <http://www.gnu.org/software/gdb/bugs/>.
 Find the GDB manual and other documentation resources online at:
 <http://www.gnu.org/software/gdb/documentation/>.
 For help, type "help".
 Type "apropos word" to search for commands related to "word"...
 Reading symbols from /netbsd...done.
 (gdb) target kvm netbsd.8.core
 0xc011b2b5 in cpu_reboot ()
 (gdb) bt
 #0  0xc011b2b5 in cpu_reboot ()
 #1  0xc0937140 in vpanic ()
 #2  0xc0d64c5f in kern_assert ()
 #3  0xc0596be6 in uhci_device_bulk_done ()
 #4  0xc039a357 in usb_transfer_complete ()
 #5  0xc059504c in uhci_softintr ()
 #6  0xc05976b1 in uhci_intr1 ()
 #7  0xc0597879 in uhci_poll ()
 #8  0xc03ae888 in ukbd_cngetc ()
 #9  0xc07a2377 in wskbd_cngetc ()
 #10 0xc0798f1f in wsdisplay_getc ()
 #11 0xc011dcf2 in cngetc ()
 #12 0xc06c51eb in db_readline ()
 #13 0xc06c5abf in db_read_line ()
 #14 0xc06c429e in db_command_loop ()
 #15 0xc06c7b2d in db_trap ()
 #16 0xc01172c6 in kdb_trap ()
 #17 0xc011cee3 in trap ()
 #18 0xc0114532 in alltraps ()
 #19 0xd85a0a70 in ?? ()
 #20 0xc07a2118 in wskbd_translate ()
 #21 0xc07a2549 in wskbd_input ()
 #22 0xc03aedfc in ukbd_decode ()
 #23 0xc091ae64 in callout_softclock ()
 #24 0xc090ea81 in softint_dispatch ()
 #25 0xc0100f2b in Xsoftintr ()
 #26 0xc1edcd20 in ?? ()
 Backtrace stopped: previous frame inner to this frame (corrupt stack?)
 (gdb) 
 
 test# crash -M netbsd.8.core
 Crash version 8.99.2, image version 8.99.25.
 WARNING: versions differ, you may not be able to examine this image.
 System panicked: kernel diagnostic assertion "mutex_owned(&sc->sc_lock)" failed: file "/tmp/bracket/build/2018.09.20.06.54.36-i386/src/sys/dev/usb/uhci.c", line 3332 
 Backtrace from time of crash is available.
 crash> bt
 _KERNEL_OPT_NARCNET(8,104,c011b2b5,8,c10e5959,0,104,c10543a4,d85a0740,d85a0724) at 0
 __kernel_end(104,0,c10543a4,d85a0740,c214a4c8,c2045008,c204526c,d85a0734,c0d64c5f,c10543a4) at d85a0740
 vpanic(c10543a4,d85a0740,d85a0764,c0596be6,c10543a4,c10542e3,c1098caa,c10ce6ac,d04,40016b4) at vpanic+0x142
 __x86_indirect_thunk_edx(c10543a4,c10542e3,c1098caa,c10ce6ac,d04,40016b4,4,c2128d00,0,10) at __x86_indirect_thunk_edx
 uhci_device_bulk_done(c2128d00,c214a608,1,10,d85a07a4,c03992d4,c2128dd0,5a0002,1,c214a4c8) at uhci_device_bulk_done+0x262
 usb_transfer_complete(c2128d00,1710,10,a,20,d85a07df,73,0,10,3131205b) at usb_transfer_complete+0xce
 uhci_softintr(c204500c,2020,2,1,3,c2045008,c2045270,d85a0894,d85a0854,c0597879) at uhci_softintr+0x282
 uhci_intr1(c2045270,2020,2,20,3,c209e000,d85a0890,d85a087c,c03ae888,c204500c) at uhci_intr1+0x1d3
 uhci_poll(c204500c,2,d85a087c,c1629000,0,d85a0890,d85a0894,d85a09c4,d85a08a0,c07a2377) at uhci_poll+0x7f
 ukbd_cngetc(c209e000,d85a0890,d85a0894,122e,7020,8,6,d85a08b0,c0798f1f,2f00) at ukbd_cngetc+0x10b
 wskbd_cngetc(2f00,0,d85a08c8,c011dcf2,2f00,0,c13d8f80,c13d8f80,d85a08fc,c06c51eb) at wskbd_cngetc+0xae
 wsdisplay_getc(2f00,0,c13d8f80,c13d8f80,d85a08fc,c06c51eb,c10e57d7,0,0,0) at wsdisplay_getc+0x27
 cngetc(c10e57d7,0,0,0,0,7,2,0,0,6) at cngetc+0x40
 db_readline(c13d8f80,78,d85a0940,c06c429e,1,868847dd,0,0,0,d85a0910) at db_readline+0x4e
 db_read_line(1,868847dd,0,0,0,d85a0910,d85a0940,6,d85a09c4,c06c426c) at db_read_line+0x1a
 db_command_loop(c0115b64,0,5,c134c8c1,1,d85a0a70,d85a09d0,c01172c6,1,0) at db_command_loop+0x86
 db_trap(1,0,0,d85a097c,0,c0590010,c13c0030,10,c0590010,c213f1a6) at db_trap+0xe0
 kdb_trap(1,0,d85a0a70,5,d859e2c0,202,b6bb466d,6,d85a0af0,c1304580) at kdb_trap+0xd4
 trap() at trap+0x495
 --- trap (number 1) ---
 breakpoint(c201d188,0,0,c091af2a,c202bca8,c091b645,c1eb001b,c08f9087,c0921df2,c2155888) at breakpoint+0x4
 wskbd_translate(c2155888,1,c2398e00,d85a0b40,c0143fa9,8,200007,d85a0b4a,d85a0b4a,c209e000) at wskbd_translate+0xb12
 wskbd_input(c2155888,2,29,c201401c,c2014008,c209e000,c209ee28,2,1e10029,d83b002c) at wskbd_input+0x4f
 ukbd_decode(c209e000,0,2,c2031e48,3,c1446184,c209e000,0,c14461e0,d8590074) at ukbd_decode+0x1b1
 callout_softclock(0,c090df50,d8590074,c0100400,1606000,1610010,30,c0100010,c1edc540,0) at callout_softclock+0x344
 softint_dispatch(c1edcd20,2,c87,5a061084,7fbfdfe7,eebffff1,d85a3ff0,d85a3f98,c1edc2a0,80050033) at softint_dispatch+0xc9
 Bad frame pointer: 0xc2031208
 
 -- 
 Andreas Gustafsson, gson%gson.org@localhost