I get panics for about 2 weeks (last tested with todays current - it's
more unstable than friday's build - it crashed only when boot_verbose was
set, now it sometimes crashes several times in a row).

The panics occur on 2 places - on detection/insertion in
device_get_parent() or bus_deactivate_resource() and on removal in
bus_deactivate_resource().

I can provide more info as needed (don't know what to look for and don't
want to make the mail even longer).

Sorry for inappropriate linewrap and long email.

Trimmed dmesg output (without the card in slot):
-----
Preloaded elf kernel "/boot/kernel/kernel" at 0xc043f000.
Preloaded elf module "/boot/kernel/acpi.ko" at 0xc043f0a8.
Calibrating clock(s) ... TSC clock: 365868380 Hz, i8254 clock: 1193211 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter "i8254"  frequency 1193182 Hz
CLK_USE_TSC_CALIBRATION not specified - using old calibration method
Timecounter "TSC"  frequency 365861690 Hz
CPU: Pentium II/Pentium II Xeon/Celeron (365.86-MHz 686-class CPU)
Origin = "GenuineIntel"  Id = 0x66a  Stepping = 10
Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR>
real memory  = 134152192 (131008K bytes)
Physical memory chunk(s):
0x00001000 - 0x0009efff, 647168 bytes (158 pages)
0x00466000 - 0x07fe7fff, 129507328 bytes (31618 pages)
avail memory = 125992960 (123040K bytes)
bios32: Found BIOS32 Service Directory header at 0xc00fa000
bios32: Entry = 0xf0000 (c00f0000)  Rev = 0  Len = 1
pcibios: PCI BIOS entry at 0xf0000+0x478
pnpbios: Found PnP BIOS data at 0xc00f5a70
pnpbios: Entry = f0000:5a9e  Rev = 1.0
pnpbios: Event flag at f5a96
pnpbios: OEM ID 30b1110e
Other BIOS signatures found:
null: <null device, zero device>
random: <entropy source>
mem: <memory & I/O>
Pentium Pro MTRR support enabled
VESA: information block
56 45 53 41 00 02 00 01 00 01 00 00 00 00 22 00
00 01 7f 00 00 01 0b 01 00 01 21 01 00 01 2a 01
00 01 00 01 01 01 10 01 11 01 12 01 03 01 13 01
14 01 15 01 05 01 16 01 17 01 18 01 07 01 19 01
VESA: 40 mode(s) found
VESA: v2.0, 8128k memory, flags:0x0, mode table:0xc038a662 (1000022)
VESA: ATI MACH64
VESA: ATI Technologies Inc. MACH64RM 01.00
pci_open(1):    mode 1 addr port (0x0cf8) is 0x8000005c
pci_open(1a):   mode1res=0x80000000 (0x80000000)
pci_cfgcheck:   device 0 [class=060000] [hdr=00] is there (id=71908086)
Using $PIR table, 268435454 entries at 0xc00f0970
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <COMPAQ RSDB130 > on motherboard
acpi0: power button is handled as a fixed feature programming model.
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 2, max = 6, width = 5
ACPI timer looks BAD  min = 1, max = 6, width = 6
ACPI timer looks BAD  min = 2, max = 16777187, width = 16777186
ACPI timer looks BAD  min = 2, max = 16777197, width = 16777196
ACPI timer looks BAD  min = 1, max = 16777214, width = 16777214
Timecounter "ACPI-safe"  frequency 3579545 Hz
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x5008-0x500b on acpi0
acpi_cpu0: <CPU> on acpi0
acpi_tz0: <thermal zone> on acpi0
acpi_acad0: <AC adapter> on acpi0
unknown: not probed (disabled)
sage repeated 19 times
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> at pcibus 0 on
motherboard
pci0: physical bus=0
map[10]: type 3, range 32, base 50000000, size 26, enabled
found-> vendor=0x8086, dev=0x7190, revid=0x03
bus=0, slot=0, func=0
class=06-00-00, hdrtype=0x00, mfdev=0
found-> vendor=0x8086, dev=0x7191, revid=0x03
bus=0, slot=1, func=0
class=06-04-00, hdrtype=0x01, mfdev=0
map[10]: type 1, range 32, base 7fffe000, size 12, enabled
found-> vendor=0x104c, dev=0xac1b, revid=0x03
bus=0, slot=4, func=0
class=06-07-00, hdrtype=0x02, mfdev=1
intpin=a, irq=11
powerspec 1  supports D0 D1 D2 D3  current D0
map[10]: type 1, range 32, base 7ffff000, size 12, enabled
found-> vendor=0x104c, dev=0xac1b, revid=0x03
bus=0, slot=4, func=1
class=06-07-00, hdrtype=0x02, mfdev=1
intpin=a, irq=11
powerspec 1  supports D0 D1 D2 D3  current D0
found-> vendor=0x8086, dev=0x7110, revid=0x02
bus=0, slot=7, func=0
class=06-80-00, hdrtype=0x00, mfdev=1
map[20]: type 4, range 32, base 00003820, size  4, enabled
found-> vendor=0x8086, dev=0x7111, revid=0x01
bus=0, slot=7, func=1
class=01-01-80, hdrtype=0x00, mfdev=0
map[20]: type 4, range 32, base 00003800, size  5, enabled
found-> vendor=0x8086, dev=0x7112, revid=0x01
bus=0, slot=7, func=2
class=0c-03-00, hdrtype=0x00, mfdev=0
intpin=d, irq=11
map[90]: type 4, range 32, base 00004000, size  4, enabled
found-> vendor=0x8086, dev=0x7113, revid=0x02
bus=0, slot=7, func=3
class=06-80-00, hdrtype=0x00, mfdev=0
map[10]: type 4, range 32, base 00003000, size  8, enabled
found-> vendor=0x125d, dev=0x1978, revid=0x10
bus=0, slot=8, func=0
class=04-01-00, hdrtype=0x00, mfdev=0
intpin=a, irq=11
powerspec 2  supports D0 D1 D2 D3  current D0
pci0: <PCI bus> on pcib0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pcib1:   secondary bus     1
pcib1:   subordinate bus   1
pcib1:   I/O decode        0x2000-0x2fff
pcib1:   memory decode     0x40000000-0x410fffff
pcib1:   prefetched decode 0xfff00000-0xfffff
pci1: physical bus=1
map[10]: type 1, range 32, base 40000000, size 24, enabled
map[14]: type 4, range 32, base 00002000, size  8, enabled
map[18]: type 1, range 32, base 41000000, size 12, enabled
found-> vendor=0x1002, dev=0x4c4d, revid=0x64
bus=1, slot=0, func=0
class=03-00-00, hdrtype=0x00, mfdev=0
intpin=a, irq=11
powerspec 1  supports D0 D1 D2 D3  current D0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
pccbb0: <TI1450 PCI-CardBus Bridge> mem 0x7fffe000-0x7fffefff irq 11 at
device 4.0 on pci0
cardbus0: <CardBus bus> on pccbb0
pccard0: <16-bit PCCard bus> on pccbb0
pccbb1: <TI1450 PCI-CardBus Bridge> mem 0x7ffff000-0x7fffffff irq 11 at
device 4.1 on pci0
cardbus1: <CardBus bus> on pccbb1
pccard1: <16-bit PCCard bus> on pccbb1
PCI-ISA bridge with incorrect subclass 0x80
PCI-ISA bridge with incorrect subclass 0x80
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0x3820-0x382f at device 7.1
on pci0
ata0: iobase=0x01f0 altiobase=0x03f6 bmaddr=0x3820
ata0: mask=03 ostat0=50 ostat2=00
ata0-slave: ATAPI 14 eb
ata0-master: ATAPI 00 00
ata0: mask=03 stat0=50 stat1=00
ata0-master: ATA 01 a5
ata0: devices=09
ata0: at 0x1f0 irq 14 on atapci0
ata1: iobase=0x0170 altiobase=0x0376 bmaddr=0x3828
ata1: at 0x170 irq 15 on atapci0
pci0: <serial bus, USB> at device 7.2 (no driver attached)
pci0: <bridge, PCI-unknown> at device 7.3 (no driver attached)
pcm0: <ESS Technology Maestro-2E> port 0x3000-0x30ff irq 11 at device 8.0
on pci0
setmap (4cb000, 4000), nseg=1, error=0
pcm0: Maestro DMA base: 0x4cb000
pcm0: ac97 codec id 0x83847609 (SigmaTel STAC9721/9723)
pcm0: ac97 codec features 18 bit DAC, 18 bit ADC, 5 bit master volume,
SigmaTel 3D Enhancement
pcm0: ac97 primary codec extended features AMAP
setmap (4e9000, 4000), nseg=1, error=0
pcm0: pch[0].offset = 0x1e000
setmap (4ed000, 4000), nseg=1, error=0
pcm0: pch[1].offset = 0x22000
setmap (4f1000, 4000), nseg=1, error=0
pcm0: pch[2].offset = 0x26000
setmap (508000, 4000), nseg=1, error=0
pcm0: pch[3].offset = 0x3d000
ata: ata0 already exists; skipping it
ata: ata1 already exists; skipping it
Trying Read_Port at 203
Trying Read_Port at 243
Trying Read_Port at 283
Trying Read_Port at 2c3
Trying Read_Port at 303
Trying Read_Port at 343
Trying Read_Port at 383
Trying Read_Port at 3c3
sc: sc0 already exists; skipping it
vga: vga0 already exists; skipping it
isa_probe_children: disabling PnP devices
isa_probe_children: probing non-PnP devices
orm0: <Option ROM> at iomem 0xc0000-0xcffff on isa0
adv0 failed to probe on isa0
aha0 failed to probe on isa0
aic0 failed to probe on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> flags 0x3 irq 1 on atkbdc0
atkbd: the current kbd controller command byte 0065
atkbd: keyboard ID 0x41ab (2)
kbd0 at atkbd0
kbd0: atkbd0, AT 101/102 (2), config:0x3, flags:0x3d0000
psm0: current command byte:0065
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: model MouseMan+, device ID 0-51, 3 buttons
psm0: config:00000000, flags:00000000, packet size:3
psm0: syncmask:08, syncbits:08
bt0 failed to probe on isa0
cs0 failed to probe at port 0x300 on isa0
ed0 failed to probe at port 0x280 iomem 0xd8000 irq 10 on isa0
fdc0: <enhanced floppy controller (i82077, NE72065 or clone)> at port
0x3f7,0x3f0-0x3f5 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
fe0 failed to probe at port 0x300 on isa0
ie0 failed to probe at port 0x300 iomem 0xd0000 irq 10 on isa0
le0 failed to probe at port 0x300 iomem 0xd0000 irq 5 on isa0
lnc0 failed to probe at port 0x280 irq 10 drq 0 on isa0
pcic0 failed to probe at port 0x3e0 iomem 0xd0000 on isa0
pcic1: not probed (disabled)
pmtimer0 failed to probe on isa0
ppc0: parallel port found at 0x378
ppc0: using extended I/O port range
ppc0: EPP SPP
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode
plip0: <PLIP network interface> on ppbus0
bpf: lp0 attached
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sc0: fb0, kbd0, terminal emulator: sc (syscons terminal)
sio0: irq maps: 0x1 0x11 0x1 0x1
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1: irq maps: 0x1 0x1 0x1 0x1
sio1: probe failed test(s): 0 1 2 4 6 7 9
sio1 failed to probe at port 0x2f8-0x2ff irq 3 on isa0
sio2: not probed (disabled)
sio3: not probed (disabled)
sn0 failed to probe at port 0x300 irq 10 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
fb0: vga0, vga, type:VGA (5), flags:0x700ff
fb0: port:0x3c0-0x3df, crtc:0x3d4, mem:0xa0000 0x20000
fb0: init mode:24, bios mode:3, current mode:24
fb0: window:0xc00b8000 size:32k gran:32k, buf:0 size:32k
vga0: vga: WARNING: video mode switching is not fully supported on this
adapter
VGA parameters upon power-up
50 18 10 00 00 00 03 00 02 e7 73 4f 4f 97 52 83
b4 1f 00 4f 0d 0e 00 00 07 80 91 87 8f 28 1f 8f
b5 a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
VGA parameters in BIOS for mode 24
50 18 10 00 10 00 03 00 02 67 5f 4f 50 82 55 81
bf 1f 00 4f 0d 0e 00 00 00 00 9c 8e 8f 28 1f 96
b9 a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
EGA/VGA parameters to be used for mode 24
50 18 10 00 00 00 03 00 02 e7 73 4f 4f 97 52 83
b4 1f 00 4f 0d 0e 00 00 07 80 91 87 8f 28 1f 8f
b5 a3 ff 00 01 02 03 04 05 14 07 38 39 3a 3b 3c
3d 3e 3f 0c 00 0f 08 00 00 00 00 00 10 0e 00 ff
vt0 failed to probe on isa0
isa_probe_children: probing PnP devices
BIOS Geometries:
0:0344ef3f 0..836=837 cylinders, 0..239=240 heads, 1..63=63 sectors
0 accounted for
Device configuration finished.
procfs registered
bpf: lo0 attached
IP packet filtering initialized, divert disabled, rule-based forwarding
disabled, default to accept, logging limited to 100 packets/entry by
default
DUMMYNET initialized (011031)
IPsec: Initialized Security Association Processing.
IP Filter: v3.4.20 initialized.  Default = pass all, Logging = enabled
acpi_cpu0: set speed to 100.0%
acpi_cpu: CPU throttling enabled, 8 steps from 100% to 12.5%
acpi_acad0: On Line
ad0: success setting WDMA2 on Intel chip
Creating DISK ad0
ad0: <IBM-DBCA-206480/BC4OA8GF> ATA-4 disk at ata0-master
ad0: 6194MB (12685680 sectors), 13424 C, 15 H, 63 S, 512 B
ad0: 16 secs/int, 1 depth queue, WDMA2
ad0: piomode=4 dmamode=2 udmamode=1 cblid=0
ata0-slave: piomode=4 dmamode=2 udmamode=-1 dmaflag=1
ata0-slave: success setting PIO4 on generic chip
acd0: <CD-224E/9.0B> CDROM drive at ata0 as slave
acd0: read 4134KB/s (34515KB/s), 512KB buffer, PIO4
acd0: Reads: CD-R, CD-DA stream
acd0: Writes:
acd0: Audio: play, 256 volume levels
acd0: Mechanism: ejectable tray, unlocked
acd0: Medium: no/blank disc
Mounting root from ufs:/dev/ad0s3a
ad0s1: type 0x7, start 63, end = 4097519, size 4097457 : OK
ad0s2: type 0x5, start 4097520, end = 8709119, size 4611600 : OK
ad0s3: type 0xa5, start 8709120, end = 12685679, size 3976560 : OK
ad0s5: type 0x7, start 4097583, end = 8709119, size 4611537 : OK
-------------

Kernel config:
-----------
machine         i386
cpu             I686_CPU
ident           NOTAS
maxusers        0

# Debugging for use in -current
makeoptions     DEBUG=-g                #Build kernel with gdb(1) debug
symbols
options         DDB                     #Enable the kernel debugger
#options        DDB_UNATTENDED
options         INVARIANTS              #Enable calls of extra sanity
checking
options         INVARIANT_SUPPORT       #Extra sanity checks of internal
structures, required by INVARIANTS
options         WITNESS                 #Enable mutex checks to detects
deadlocks and cycles

options         INET                    #InterNETworking
options         FFS                     #Berkeley Fast Filesystem
options         UFS_DIRHASH
options         SOFTUPDATES             #Enable FFS soft updates support
options         CD9660                  #ISO 9660 Filesystem
options         COMPAT_43               #Compatible with BSD 4.3 [KEEP
THIS!]
options         SCSI_DELAY=5000         #Delay (in ms) before probing SCSI
options         UCONSOLE                #Allow users to grab the console
options         KTRACE                  #ktrace(1) support
options         SYSVSHM                 #SYSV-style shared memory
options         SYSVMSG                 #SYSV-style message queues
options         SYSVSEM                 #SYSV-style semaphores
options         P1003_1B                #Posix P1003_1B real-time
extensions
options         _KPOSIX_PRIORITY_SCHEDULING
options         KBD_INSTALL_CDEV        # install a CDEV entry in /dev

options         PSEUDOFS
options         PROCFS

options         NTFS

options         IPFILTER
options         IPFILTER_LOG
#options        IPFILTER_DEFAULT_BLOCK

options         IPFIREWALL              #firewall
options         IPFIREWALL_VERBOSE      #enable logging to syslogd(8)
options         IPFIREWALL_VERBOSE_LIMIT=100    #limit verbosity
options         IPFIREWALL_DEFAULT_TO_ACCEPT    #allow everything by
default
options         DUMMYNET

options         IPSEC
options         IPSEC_ESP
#options                IPSEC_DEBUG

options         QUOTA

device          isa
device          eisa
device          pci
#options        PCI_ENABLE_IO_MODES     # Enable pci resources left off by
a "lazy BIOS"

device          pcm

# Floppy drives
device          fdc

# ATA and ATAPI devices
device          ata
device          atadisk                 # ATA disk drives
device          atapicd                 # ATAPI CDROM drives
device          atapifd                 # ATAPI floppy drives
device          atapist                 # ATAPI tape drives
options         ATA_STATIC_ID           #Static device numbering

device          atkbdc  1       # At keyboard controller
device          atkbd           # at keyboard
device          psm             # psm mouse

options         VESA
#options                VESA_DEBUG=2
device          vga             # VGA screen

# splash screen/screen saver
device          splash

# syscons is the default console driver, resembling an SCO console
device          sc      1
#options                SC_DISABLE_REBOOT
options         SC_HISTORY_SIZE=500

device          npx

device          pccbb
device          pccard
device          cardbus

device          sio             # 8250, 16[45]50 based serial ports

device          ppc
device          ppbus           # Parallel port bus (required)
device          lpt             # Printer
device          plip            # TCP/IP over parallel
device          ppi             # Parallel port interface device
#device         vpo             # Requires scbus and da

device          miibus          # MII bus support
device          dc              # DEC/Intel 21143 and various workalikes

device          random          # Entropy device
device          vlan
device          loop            # Network loopback
device          ether           # Ethernet support
device          pty             # Pseudo-ttys (telnet etc)
device          tun
device          md              # Memory "disks"

device          bpf             # Berkeley packet filter
------------


Message when inserting the card (no crash - boot_verbose unset)
/boot/loader.conf contains
hint.atkbd.0.flags="0x3"
hw.ata.wc=1
hw.cbb.debug=1
hw.cardbus.debug=1
hw.cardbus.cis_debug=1
hw.pccard.debug=1
hw.pccard.cis_debug=1
-------------
pccbb0: card inserted: event=0x00000000, state=30000820
pccbb0: pccbb_power: CARD_VCC_0V and CARD_VPP_0V [44]
pccbb0: pccbb_power: CARD_VCC_0V and CARD_VPP_0V [44]
pccbb0: pccbb_power: CARD_VCC_3V and CARD_VPP_VCC [11]
Product version: 5.0
Product name: Xircom | CardBus Ethernet 10/100 + Modem 56 | CBEM56G | 1.03
|
Manufacturer ID: 0501030181
Functions: Network Adaptor, Multi-Functioned
Function Extension: 04060010a4e63cef
Function Extension: 0102
Function Extension: 0280969800
Function Extension: 0200e1f505
Function Extension: 0301
Function Extension: 0303
Function Extension: 0501
cardbus0: Opening BAR: type=IO, bar=10, len=0080
cardbus0: Opening BAR: type=MEM, bar=14, len=0080
cardbus0: Opening BAR: type=MEM, bar=18, len=0100
cardbus0: Invalid BAR number: 27(06)
CIS reading done
cardbus0: Non-prefetchable memory at 84000000-8400017f
cardbus0: Non-prefetchable memory rid=18 at 84000000-840000ff (100)
cardbus0: Non-prefetchable memory rid=14 at 84000000-8400007f (80)
cardbus0: IO port at 1000-107f
cardbus0: IO port rid=10 at 1000-107f
dc0: <Xircom X3201 10/100BaseTX> port 0x1000-0x107f mem
0x84000000-0x840000ff,0x84000000-0x8400007f irq 11 at device 0.0 on
cardbus0
dc0: Ethernet address: 5c:27:21:02:06:00
miibus0: <MII bus> on dc0
tdkphy0: <TDK 78Q2120 media interface> on miibus0
tdkphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Product version: 5.0
Product name: Xircom | CardBus Ethernet 10/100 + Modem 56 | CBEM56G | 1.03
|
Manufacturer ID: 0501001081
Functions: Serial Port, Multi-Functioned
Function Extension: 00020f5c
Function Extension: 0206003f1c03030f070001b5
Function Extension: 1306000b000200b5
cardbus0: Opening BAR: type=IO, bar=10, len=0002
cardbus0: Opening BAR: type=MEM, bar=14, len=0002
cardbus0: Opening BAR: type=MEM, bar=18, len=0100
cardbus0: Invalid BAR number: 27(06)
CIS reading done
cardbus0: Non-prefetchable memory at 84000000-84000101
cardbus0: Non-prefetchable memory rid=18 at 84000000-840000ff (100)
cardbus0: Non-prefetchable memory rid=14 at 84000000-84000001 (2)
cardbus0: IO port at 1080-1081
cardbus0: IO port rid=10 at 1080-1081
cardbus0: <simple comms, UART> at device 0.1 (no driver attached)
--------------


Panic on removal:
---------
cardbus0: release_all_resource: Resource still owned by child, oops.
(type=3, rid=24, addr=deadc0de)


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0xdeadc0f2
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc01d54e9
stack pointer           = 0x10:0xc8d99c2c
frame pointer           = 0x10:0xc8d99c38
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2 (pccbb0)

(kgdb) back
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:505
#1  0xc01c790c in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:337
#2  0xc01c7dab in panic (fmt=0xc02b4bca "from debugger") at
/usr/src/sys/kern/kern_shutdown.c:647
#3  0xc0134d0d in db_panic (addr=-1071819543, have_addr=0, count=-1,
modif=0xc8d99a9c "")
    at /usr/src/sys/ddb/db_command.c:452
#4  0xc0134cad in db_command (last_cmdp=0xc02fcc44, cmd_table=0xc02fca64,
aux_cmd_tablep=0xc02f5974,
    aux_cmd_tablep_end=0xc02f5978) at /usr/src/sys/ddb/db_command.c:348
#5  0xc0134d77 in db_command_loop () at /usr/src/sys/ddb/db_command.c:474
#6  0xc01371b3 in db_trap (type=12, code=0) at
/usr/src/sys/ddb/db_trap.c:72
#7  0xc028fe6c in kdb_trap (type=12, code=0, regs=0xc8d99bec) at
/usr/src/sys/i386/i386/db_interface.c:161
#8  0xc029c9e8 in trap_fatal (frame=0xc8d99bec, eva=3735929074) at
/usr/src/sys/i386/i386/trap.c:846
#9  0xc029c73d in trap_pfault (frame=0xc8d99bec, usermode=0,
eva=3735929074) at /usr/src/sys/i386/i386/trap.c:765
#10 0xc029c2eb in trap (frame={tf_fs = 24, tf_es = -1070923760, tf_ds =
16, tf_edi = -559038242, tf_esi = -1048350336,
      tf_ebp = -925262792, tf_isp = -925262824, tf_ebx = -1061881344,
tf_edx = 3, tf_ecx = -1070621976,
      tf_eax = -559038242, tf_trapno = 12, tf_err = 0, tf_eip =
-1071819543, tf_cs = 8, tf_eflags = 66050,
      tf_esp = -1061881344, tf_ss = -1048350336}) at
/usr/src/sys/i386/i386/trap.c:433
#11 0xc01d54e9 in bus_deactivate_resource (dev=0xdeadc0de, type=3, rid=24,
r=0xc1927240)
    at /usr/src/sys/kern/subr_bus.c:1611
#12 0xc0163c17 in pccbb_cardbus_release_resource (brdev=0xc1837180,
child=0xdeadc0de, type=3, rid=24, res=0xc1927240)
    at /usr/src/sys/dev/pccbb/pccbb.c:1466
#13 0xc0164351 in pccbb_release_resource (brdev=0xc1837180,
child=0xdeadc0de, type=3, rid=24, r=0xc1927240)
    at /usr/src/sys/dev/pccbb/pccbb.c:1748
#14 0xc014d78a in cardbus_release_all_resources (cbdev=0xc1839980,
dinfo=0xc1920d80) at bus_if.h:132
#15 0xc014d4c6 in cardbus_detach_card (cbdev=0xc1839980, flags=1) at
/usr/src/sys/dev/cardbus/cardbus.c:243
#16 0xc0162bec in pccbb_removal (sc=0xc0b4fa00) at card_if.h:76
#17 0xc0162962 in pccbb_event_thread (arg=0xc0b4fa00) at
/usr/src/sys/dev/pccbb/pccbb.c:869
#18 0xc01b97aa in fork_exit (callout=0xc01628fc <pccbb_event_thread>,
arg=0xc0b4fa00, frame=0xc8d99d48)
    at /usr/src/sys/kern/kern_fork.c:799

(kgdb) up 13
#13 0xc0164351 in pccbb_release_resource (brdev=0xc1837180,
child=0xdeadc0de, type=3, rid=24, r=0xc1927240)
    at /usr/src/sys/dev/pccbb/pccbb.c:1748
1748                    return (pccbb_cardbus_release_resource(brdev,
child, type,
(kgdb) print *brdev
$4 = {ops = 0xc17c1000, link = {tqe_next = 0xc1837080, tqe_prev =
0xc1837284}, devlink = {tqe_next = 0xc1837080,
    tqe_prev = 0xc183728c}, parent = 0xc1837480, children = {tqh_first =
0xc1839980, tqh_last = 0xc1839904},
  driver = 0xc02ff95c, devclass = 0xc17aadc0, unit = 0, nameunit =
0xc1838ee0 "pccbb0",
  desc = 0xc02bd233 "TI1450 PCI-CardBus Bridge", busy = 0, state =
DS_ATTACHED, devflags = 0, flags = 5, order = 0 '\000',
  pad = 0 '\000', ivars = 0xc1837200, softc = 0xc0b4fa00}



---------
Panic on insertion
---------

found-> vendor=0x115d, dev=0x0003, revid=0x03
        bus=2, slot=0, func=0
        class=02-00-00, hdrtype=0x00, mfdev=1
        intpin=a, irq=128


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x14
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0xc01d3f92
stack pointer           = 0x10:0xc8d99c7c
frame pointer           = 0x10:0xc8d99c7c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2 (pccbb0)


#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:505
#1  0xc01c790c in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:337
#2  0xc01c7dab in panic (fmt=0xc02b4bca "from debugger") at
/usr/src/sys/kern/kern_shutdown.c:647
#3  0xc0134d0d in db_panic (addr=-1071825006, have_addr=0, count=1,
modif=0xc8d99aec "")
    at /usr/src/sys/ddb/db_command.c:452
#4  0xc0134cad in db_command (last_cmdp=0xc02fcc44, cmd_table=0xc02fca64,
aux_cmd_tablep=0xc02f5974,
    aux_cmd_tablep_end=0xc02f5978) at /usr/src/sys/ddb/db_command.c:348
#5  0xc0134d77 in db_command_loop () at /usr/src/sys/ddb/db_command.c:474
#6  0xc01371b3 in db_trap (type=12, code=0) at
/usr/src/sys/ddb/db_trap.c:72
#7  0xc028fe6c in kdb_trap (type=12, code=0, regs=0xc8d99c3c) at
/usr/src/sys/i386/i386/db_interface.c:161
#8  0xc029c9e8 in trap_fatal (frame=0xc8d99c3c, eva=20) at
/usr/src/sys/i386/i386/trap.c:846
#9  0xc029c73d in trap_pfault (frame=0xc8d99c3c, usermode=0, eva=20) at
/usr/src/sys/i386/i386/trap.c:765
#10 0xc029c2eb in trap (frame={tf_fs = -925302760, tf_es = -1071841264,
tf_ds = -1070923760, tf_edi = -1048350336,
      tf_esi = -1047779064, tf_ebp = -925262724, tf_isp = -925262744,
tf_ebx = -1047779072, tf_edx = 224, tf_ecx = 32,
      tf_eax = 0, tf_trapno = 12, tf_err = 0, tf_eip = -1071825006, tf_cs
= 8, tf_eflags = 66182, tf_esp = -925262692,
      tf_ss = -1072275396}) at /usr/src/sys/i386/i386/trap.c:433
#11 0xc01d3f92 in device_get_parent (dev=0x0) at
/usr/src/sys/kern/subr_bus.c:709
#12 0xc016603c in pci_print_verbose (dinfo=0xc18c2900) at
/usr/src/sys/dev/pci/pcivar.h:211
#13 0xc014d2e1 in cardbus_attach_card (cbdev=0xc1839980) at
/usr/src/sys/dev/cardbus/cardbus.c:192
#14 0xc0162b42 in pccbb_insert (sc=0xc0b4fa00) at card_if.h:67
#15 0xc0162959 in pccbb_event_thread (arg=0xc0b4fa00) at
/usr/src/sys/dev/pccbb/pccbb.c:867
#16 0xc01b97aa in fork_exit (callout=0xc01628fc <pccbb_event_thread>,
arg=0xc0b4fa00, frame=0xc8d99d48)
    at /usr/src/sys/kern/kern_fork.c:799

(kgdb) up 12
#12 0xc016603c in pci_print_verbose (dinfo=0xc18c2900) at
/usr/src/sys/dev/pci/pcivar.h:211
211         return PCI_READ_CONFIG(device_get_parent(dev), dev, reg,
width);
(kgdb) print *dinfo
$2 = {pci_links = {stqe_next = 0x0}, resources = {slh_first = 0x0}, cfg =
{dev = 0x0, subvendor = 4445, subdevice = 4481,
    vendor = 4445, device = 3, cmdreg = 0, statreg = 528, baseclass = 2
'\002', subclass = 0 '\000', progif = 0 '\000',
    revid = 3 '\003', hdrtype = 0 '\000', cachelnsz = 8 '\b', intpin = 1
'\001', intline = 128 '\200', mingnt = 20 '\024',
    maxlat = 40 '(', lattimer = 168 '¨', mfdev = 1 '\001', nummaps = 6
'\006', bus = 2 '\002', slot = 0 '\000',
    func = 0 '\000', pp_cap = 65041, pp_status = 224 'ŕ', pp_pmcsr = 226
'â', pp_data = 0 '\000'}, conf = {pc_sel = {
      pc_bus = 2 '\002', pc_dev = 0 '\000', pc_func = 0 '\000'}, pc_hdr =
0 '\000', pc_subvendor = 4445,
    pc_subdevice = 4481, pc_vendor = 4445, pc_device = 3, pc_class = 2
'\002', pc_subclass = 0 '\000',
    pc_progif = 0 '\000', pc_revid = 3 '\003', pd_name = '\000' <repeats
16 times>, pd_unit = 0}}



-- 
Michal Mertl
[EMAIL PROTECTED]








To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to