[Bug 295374] if_ure: lock (sleep mutex) ure0 not locked ure_miibus_readreg()

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295374

            Bug ID: 295374
           Summary: if_ure: lock (sleep mutex) ure0 not locked
                    ure_miibus_readreg()
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected]

Happens on steam deck during boot with anker usb dock (rgephy0: <RTL8251/8153
1000BASE-T media interface> PHY 0 on miibus0).

The text below is converted from an image, it may have some inconsistencies.

#8 0xffffffff88d2b8cb at ether_ifattach+8x3b #9 Bxffffffff83828436 at
ue_attach_post_task+0x2a6 #18 0xffffffff889d3da8 at usb_process+0xf0
#11 Bxffffffff88b89fc2 at fork_exit+8x82
#12 Bxffffffff811188be at fork_trampoline+0xe
uma_zalloc_debug: zone "malloc-256" with the following non-sleepable locks
held:
exclusive sleep mutex ure08 (ure8) r = 0 (0xfffff800858cb6c8) locked @
/usr/src/sys/dev/u stack backtrace:
#0 0xffffffff88c5545c at witness_debugger+8x6c
#1 0xffffffff88c56d59 at witness_warn+8x4b9 #2 Bxffffffff88fae8b4 at
uma_zalloc_debug+8x34 #3 Bxffffffff88fae487 at uma_zalloc_arg+8x27 #4
Bxffffffff88babaбd at malloc+8x7d
#5 0xffffffff88d2ec7e at 11table_allocate_htbl+8x4e #6 0xffffffff88e228e9 at
in6_ifarrival+0x1c9
#7 0xffffffff88d1f564 at if_attach_internal +8x374
#8 Bxffffffff88d2b8cb at ether_ifattach+8x3b
#9 Bxffffffff83828436 at ue_attach_post_task+0x2a6 #18 Bxffffffff889d3da8 at
usb_process+0xf0
#11 Bxffffffff88b89fc2 at fork_exit+0x82
#12 Bxffffffff811188be at fork_trampoline+0xe
panic: lock (sleep mutex) ure8 not locked @
/usr/src/sys/dev/usb/usb_request.c:468 cpuid = 4
time = 1779852295
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+8x2b/frame Bxfffffe88cd8957c8
vpanic() at vpanic+8x149/frame Bxfffffe88cd8958f8
panic() at panic+8x43/frame Bxfffffe88cd895958
witness_unlock() at witness_unlock+8x154/frame Bxfffffe88cd895988
_atx_unlock_flags() at __atx_unlock_flags+8x3f/frame 0xfffffe88cd8959a8
usbd_do_request_flags() at usbd_do_request_flags+8x128/frame Bxfffffe88cd895a38
usbd_do_request_proc() at usbd_do_request_proc+8x5e/frame 8xfffffe88cd895a88
ure niibus_readreg() at ure_miibus_readreg+8xb5/frame Bxfffffe88cd895ae8
rgephy_linkup() at rgephy_linkup+0xc3/frame 0xfffffe88cd895b18 rgephy_status()
at rgephy_status+8x28/frame Bxfffffe88cd895b58 rgephy service() at
rgephy_service+8x323/frame Bxfffffe88cd895ba8 mii_pollstat() at
mii_poll1stat+8x57/frame 0xfffffe88cd895bd8
ure ifmedia_sts() at ure_ifmedia_sts+8x184/frame Bxfffffe88cd895c28
ifmedia_ioctl() at ifmedia_ioctl+8x17e/frame Bxfffffe88cd895c58 dump_iface() at
dump_iface+8x126/frame 8xfffffe88cd895d88
rtnl_handle_ifnet_event() at rtnl_handle_ifnet_event+8x88/frame
Bxfffffe88cd895d78 do_link_state_change() at do_link_state_change+8x5b/frame
Bxfffffe88cd895dc8 taskqueue_run_locked() at taskqueue_run_locked+8x1ce/frame
Bxfffffe88cd895e48 taskqueue_run() at taskqueue_run+8x4d/frame
Bxfffffe88cd895e68 ithread_loop() at ithread_loop+8x266/frame
Bxfffffe88cd895ef8 fork_exit() at fork_exit+8x82/frame Bxfffffe88cd895f38
fork trampoline() at fork_trampoline+8xe/frame Bxfffffe88cd895f38
---trap 8x358888, rip = 8xa8488888814, rsp = 8x18888884888881, rbp =
8x1888888888888 KDB: enter: panic

-- 
You are receiving this mail because:
You are the assignee for the bug.