kern/92171: panic unplugging Vodafone Mobile Connect (UMTS) 3G/GPRS Datacard

[Kurt Jaeger]

>Number:         92171
>Category:       kern
>Synopsis:       panic unplugging Vodafone Mobile Connect (UMTS) 3G/GPRS Datacard
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Jan 22 21:40:03 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Kurt Jaeger
>Release:        FreeBSD 6.0-RELEASE i386
>Organization:
LF.net
>Environment:
System: FreeBSD hotdog.c0mplx.org 6.0-RELEASE FreeBSD 6.0-RELEASE #1: Mon May 9 16:41:06 CEST 2005 pi at hotdog.c0mplx.org:/usr/obj/usr/src/sys/HOTDOG i386


HP nx5000, fbsd6.0-rel

>Description:
	inserting the Vodafone Mobile Connect (UMTS) 3G/GPRS Datacard
	will detect two usb devices
	unplugging the datacard will cause a panic

	for details see
	verbose dmesg output:
	http://c0mplx.org/fbsd/hotdog.dmesg
	kernel config file
	http://c0mplx.org/fbsd/HOTDOG
	kernel verbose output of card insertion
	http://c0mplx.org/fbsd/umts-karte

	kernel dump analysis:

	http://c0mplx.org/fbsd/dodeb.0
	http://c0mplx.org/fbsd/dodeb.1

	both times:
  Panic String: page fault

#7  0xc0598997 in kobj_delete (obj=0xc1d60300, mtype=0xc07c9780)
    at /usr/src/sys/kern/subr_kobj.c:323
^Z^Z/usr/src/sys/kern/subr_kobj.c:323:6506:beg:0xc0598997
(kgdb) l
318     }
319     
320     void
321     kobj_delete(kobj_t obj, struct malloc_type *mtype)
322     {
323             kobj_class_t cls = obj->ops->cls;
324             int refs;
325     
326             /*
327              * Consider freeing the compiled method table for the class
(kgdb) p *obj
$3 = {ops = 0x0}


>How-To-Repeat:
	insert the datacard, wait approx. 30 seconds,
	unplug the card again -> panic
>Fix:

	no known fix

>Release-Note:
>Audit-Trail:
>Unformatted: