cardbus panic

Ejecting a D-Link DWL-G630 AirPlus G NIC leads to

panic: mutex Giant not owned at /usr/src/sys/kern/subr_bus.c:3001
cpuid = 1
time = 1614400775
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0062fc3b40
vpanic() at vpanic+0x181/frame 0xfffffe0062fc3b90
panic() at panic+0x43/frame 0xfffffe0062fc3bf0
__mtx_assert() at __mtx_assert+0xb0/frame 0xfffffe0062fc3c00
device_detach() at device_detach+0x2e/frame 0xfffffe0062fc3c40
bus_generic_detach() at bus_generic_detach+0x38/frame 0xfffffe0062fc3c60
cardbus_detach_card() at cardbus_detach_card+0xf/frame 0xfffffe0062fc3c80
cbb_event_thread() at cbb_event_thread+0x1be/frame 0xfffffe0062fc3cf0
fork_exit() at fork_exit+0x80/frame 0xfffffe0062fc3d30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0062fc3d30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic

__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
55              __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (offsetof(struct pcpu,
(kgdb) #0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1  doadump (textdump=-1772142592) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80438f9e in db_fncall_generic (addr=<optimized out>, 
    rv=<optimized out>, nargs=0, args=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:610
#3  db_fncall (dummy1=<optimized out>, dummy2=<optimized out>, 
    dummy3=<optimized out>, dummy4=<optimized out>)
    at /usr/src/sys/ddb/db_command.c:658
#4  0xffffffff80438ab0 in db_command (last_cmdp=<optimized out>, 
    cmd_table=<optimized out>, dopager=dopager_at_entry=1)
    at /usr/src/sys/ddb/db_command.c:482
#5  0xffffffff8043880d in db_command_loop ()
    at /usr/src/sys/ddb/db_command.c:535
#6  0xffffffff8043bb76 in db_trap (type=<optimized out>, code=<optimized out>)
    at /usr/src/sys/ddb/db_main.c:270
#7  0xffffffff80750714 in kdb_trap (type=type_at_entry=3, code=code_at_entry=0, 
    tf=<optimized out>, tf_at_entry=0xfffffe0062fc3a70)
    at /usr/src/sys/kern/subr_kdb.c:727
#8  0xffffffff80a7af3e in trap (frame=0xfffffe0062fc3a70)
    at /usr/src/sys/amd64/amd64/trap.c:576
#9  <signal handler called>
#10 kdb_enter (why=0xffffffff80b4ad3c "panic", msg=<optimized out>)
    at /usr/src/sys/kern/subr_kdb.c:506
#11 0xffffffff80704682 in vpanic (fmt=<optimized out>, ap=<optimized out>, 
    ap_at_entry=0xfffffe0062fc3bd0) at /usr/src/sys/kern/kern_shutdown.c:907
#12 0xffffffff80704413 in panic (
    fmt=0xffffffff80eb3230 <lock_class_mtx_spin> "\vb\254\200\377\377\377\377\n") at /usr/src/sys/kern/kern_shutdown.c:843
#13 0xffffffff806e14d0 in __mtx_assert (c=<optimized out>, 
    what=<optimized out>, file=0xfffffe0062fc3a30 "", line=-2135709212)
    at /usr/src/sys/kern/kern_mutex.c:1086
#14 0xffffffff8073cc8e in device_detach (dev=dev_at_entry=0xfffff8000540a500)
    at /usr/src/sys/kern/subr_bus.c:3001
#15 0xffffffff8073f9e8 in bus_generic_detach (dev=<optimized out>)
    at /usr/src/sys/kern/subr_bus.c:3761
#16 0xffffffff8050e6ef in cardbus_detach_card (cbdev=0xfffff80003021e00)
    at /usr/src/sys/dev/cardbus/cardbus.c:259
#17 0xffffffff80555eae in CARD_DETACH_CARD (dev=0xfffff80003021e00)
    at ./card_if.h:106
#18 cbb_removal (sc=0xfffff8000305d400) at /usr/src/sys/dev/pccbb/pccbb.c:581
#19 cbb_event_thread (arg=arg_at_entry=0xfffff8000305d400)
    at /usr/src/sys/dev/pccbb/pccbb.c:474
#20 0xffffffff806bfc60 in fork_exit (
    callout=0xffffffff80555cf0 <cbb_event_thread>, arg=0xfffff8000305d400, 
    frame=0xfffffe0062fc3d40) at /usr/src/sys/kern/kern_fork.c:1069
#21 <signal handler called>

-- 
Steve