[ros-bugs] [Bug 4279] New: BAD_POOL_CALLER bugcheck when booting with uhci and usb mouse connected

[ReactOS.Bugzilla at www.reactos.org]

http://www.reactos.org/bugzilla/show_bug.cgi?id=4279

           Summary: BAD_POOL_CALLER bugcheck when booting with uhci and usb
                    mouse connected
           Product: ReactOS
           Version: TRUNK
          Platform: QEmu
        OS/Version: ReactOS
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: Drivers
        AssignedTo: ros-bugs at reactos.org
        ReportedBy: olaf_siejka at o2.pl
         QAContact: ros-bugs at reactos.org


I enabled uhci in hives and set debug from usb driver to max detail. Tested on
real hardware, using rev 40040. At 2nd stage, but only if usb mouse is
connected (doesnt matter if ps/2 mice is connected or not, happens on 3
different mices), ROS crashes with the following log:

(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\iomgr\deviface.c:892) IoRegisterDeviceInterface(): creating
symbolic link \??\Root#*PNP0303#0000#{884b96c3-56ef-11d1-bc8c-00a0c91405dd} ->
\Device\0000000e
(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\pnpmgr\pnpmgr.c:2031) IopLoadServiceModule(usbuhci) failed with
status 0xc0000034
(ntoskrnl\io\iomgr\driver.c:1351) '\Driver\Floppy' initialization failed,
status (0xc000000e)
WARNING:  MmPageEntireDriver at ntoskrnl\mm\drvlck.c:88 is UNIMPLEMENTED!
wood_uhci: Entering DriverEntry(), RegistryPath=
    \Registry\Machine\System\CurrentControlSet\Services\usbdriver
wood_uhci: uhci_create_device(): dev=0x813a75f8
, pdev_ext= 0x813a76b0, uhci=0x813a7720, dev_mgr=0x9dd43020
wood_uhci: uhci_alloc(): padapter=0x8135c6f8
uhci_alloc(): reg_path=9DA3C9DC, 
              uhci_alloc(): PCIBus=0x5, bus=0x0, bus_addr=0xfa 
              uhci_alloc(): slot_num=0x5f, &res_list=813A76D4 
uhci_alloc(): about to assign slot res
uhci_alloc(): address space=0x1
, reg_base=0xd000
wood_uhci: uhci_init_schedule(): entering..., uhci=0x813a7720
wood_uhci: uhci_alloc(): pending_endp_list=0x813a7bec
uhci_alloc(): the int=0x37
uhci_start(): current uhci status=0x0
uhci_start(): set bus 0 data at slot 0x5f
wood_uhci: dev_mgr_event_init(): dev_mgr=0x9dd43020, event=0x1
wood_uhci: rh_driver_init(): port[ 0 ].flag=0x20000
wood_uhci: rh_driver_init(): port[ 1 ].flag=0x20000
(ntoskrnl\mm\pool.c:302) Warning: Trying to free a NULL pointer!
wood_uhci: umss_load_class_driver(): try to load class driver,
status=0xc0000034
wood_uhci: umss_if_driver_init(): umss driver is initialized
wood_uhci: Created mouse Fdo: 8138E5A8
wood_uhci: mouse_driver_init(): mouse driver is initialized
wood_uhci: Created keyboard Fdo: 8138E730
wood_uhci: kbd_driver_init(): keyboard driver is initialized
wood_uhci: DriverEntry(): exiting... (0)
WARNING:  MmPageEntireDriver at ntoskrnl\mm\drvlck.c:88 is UNIMPLEMENTED!
WARNING:  MmPageEntireDriver at ntoskrnl\mm\drvlck.c:88 is UNIMPLEMENTED!
wood_uhci: MouseDispatch(DO 8138E5A8, code 0x0) called
wood_uhci: MouseDispatch(DO 8138E5A8, code 0xf0203) called
wood_uhci: IOCTL_INTERNAL_MOUSE_CONNECT
wood_uhci: KbdDispatch(DO 8138E730, code 0x0) called
wood_uhci: KbdDispatch(DO 8138E730, code 0xb0203) called
wood_uhci: IOCTL_INTERNAL_KEYBOARD_CONNECT
(ntoskrnl\io\iomgr\file.c:414) Using IopParseDevice() hack
wood_uhci: uhci_rh_submit_urb(): get port status, wPortStatus=0x301,
wPortChange=0x3, address=0x8136bf23
wood_uhci: hub_get_port_feature_completion(): entering...
wood_uhci: hub_get_port_stataus_completion(): port_idx=0x1, hcd =0x813a7c48,   
               pdev=0x813e7f48, purb=0x8138e040, hub_ext=0x8136bdef,
portsc=0x30301 
wood_uhci: psq_enqueue(): last status=0x30301, status count=0x1,
port_flag=0x20000
wood_uhci: uhci_rh_submit_urb(): clear csc, port1=0x1a9
wood_uhci: hub_clear_port_feature_completion(): entering...
wood_uhci: uhci_rh_submit_urb(): clear pec, port1=0x1a1
wood_uhci: hub_clear_port_status_completion(): port_idx=0x1, hcd=0x813a7c48,   
                           pdev=0x813e7f48, purb=0x8138e040,
hub_ext=0x8136bdef, wPortChange=0x2 
wood_uhci: hub_clear_port_feature_completion(): entering...
wood_uhci: hub_event_examine_status_queue(): dev_addr=0x1, port=0x1,
wPortChange=0x3, wPortStatus=0x301
wood_uhci: hub_event_examine_status_queue(): new connection comes
(ntoskrnl\vdm\vdmmain.c:25) VME detected but not yet supported
wood_uhci: uhci_rh_submit_urb(): reset port, port1=0x1a1
wood_uhci: uhci_rh_reset_port(): status after written=0x1a1

*** Fatal System Error: 0x000000c2
                       (0x00000007,0x00000000,0x8110DE80,0x8110DEB8)

Entered debugger on embedded INT3 at 0x0008:0x808c1f18.
kdb:> bt
Eip:
<NTOSKRNL.EXE:c1f19 (lib\rtl\i386\debug_asm.S:42
(RtlpBreakWithStatusInstruction))>
Frames:
<NTOSKRNL.EXE:6739 (ntoskrnl/ke/bug.c:1089 (KeBugCheckWithTf at 24))>
<NTOSKRNL.EXE:69e5 (ntoskrnl/ke/bug.c:1400 (KeBugCheck at 4))>
<NTOSKRNL.EXE:81e17 (ntoskrnl/mm/npool.c:1569 (ExFreeNonPagedPool at 4))>
<NTOSKRNL.EXE:84b93 (ntoskrnl/mm/pool.c:295 (ExFreePoolWithTag at 8))>
<NTOSKRNL.EXE:84ad3 (ntoskrnl/mm/pool.c:239 (ExFreePool at 4))>
<usbdriver.sys:16d6f (drivers/usb/nt4compat/usbdriver/usb.c:47 (usb_free_mem))>
<usbdriver.sys:13c23 (drivers/usb/nt4compat/usbdriver/hub.c:1274
(hub_event_dev_stable))>
<usbdriver.sys:1cfd4 (drivers/usb/nt4compat/usbdriver/devmgr.c:386
(dev_mgr_thread at 4))>
<NTOSKRNL.EXE:afc3e (ntoskrnl/ps/thread.c:159 (PspSystemThreadStartup at 8))>
<NTOSKRNL.EXE:b9d0a (ntoskrnl\ke\i386\ctxswitch.S:306 (KiThreadStartup at 156))>
kdb:>


-- 
Configure bugmail: http://www.reactos.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.