i386/77751: Hard hang related to ath?

[Frank Mayhar]

>Number:         77751
>Category:       i386
>Synopsis:       Hard hang related to ath?
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Feb 19 22:50:17 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Frank Mayhar
>Release:        FreeBSD 6.0-CURRENT i386
>Organization:
Exit Consulting
>Environment:
System: FreeBSD lap 6.0-CURRENT FreeBSD 6.0-CURRENT #14: Sat Feb 19 12:04:13 PST 2005 root at lap:/home/obj/usr/src/sys/AUTON i386


	This is a Dell Inspiron 5160; I replaced the original Broadcom
minipci wireless card with an Atheros-chipset-based a/b/g card.  I run
it in 11a mode exclusively.  It has recently become very unstable,
exhibiting hard lockups nearly constantly.  I tried to go back to -current
as of around Christmas but the lockups didn't (seem to) go away.  I've
been incredibly swamped lately, wrapping up a former project and beginning
a new job, so I haven't had the time to spend on this until now.  Today I
began to diagnose the problem.

It is indeed a hard hang; the (firewire) console is unresponsive as is
the GDB link.  It seems to happen while I'm in X (using nvidia-driver from
ports, which had a bug I just fixed) although it has happened at least once
while I was using the regular non-X console.  There is nothing obvious
going on when it happens, I'm just using the system and it locks tight.

Before I begin to suspect hardware I want to try to eliminate the software
element.  I've placed relevant information at

	http://www.exit.com/Archives/FreeBSD/hang-pr-info.txt

This includes the dmesg (also appended below) as well as ath-related debug
output from 
	./athdebug 0x800d8120
dev.ath.0.debug: 0x800d8120<reset,watchdog,beacon_proc,calibrate,state,node,fatal>
	./80211debug 0x04000000
net.wlan.0.debug: 0x4000000<xrate>

I don't think it's related to the recent cpufreq changes, since the hangs
started before I picked them up and began running with them.

This problem has rendered my laptop nearly useless.  If anyone can suggest
any way I might narrow this down a little further I would be very grateful.

Dmesg follows:

Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #14: Sat Feb 19 12:04:13 PST 2005
    root at lap:/home/obj/usr/src/sys/AUTON
WARNING: WITNESS option enabled, expect reduced performance.
WARNING: DIAGNOSTIC option enabled, expect reduced performance.
WARNING: MPSAFE network stack disabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Mobile Intel(R) Pentium(R) 4 CPU 2.80GHz (2790.71-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf34  Stepping = 4
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Hyperthreading: 2 logical CPUs
real memory  = 536662016 (511 MB)
avail memory = 511664128 (487 MB)
ACPI APIC Table: <DELL   CPi R  >
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
 cpu0 (BSP): APIC ID:  0
 cpu1 (AP): APIC ID:  1
ioapic0: Changing APIC ID to 2
ioapic0 <Version 2.0> irqs 0-23 on motherboard
ichwd module loaded
ath_hal: 0.9.14.9 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <DELL CPi R  > on motherboard
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
acpi_acad0: <AC Adapter> on acpi0
acpi_cmbat0: <Control Method Battery> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
acpi_button0: <Power Button> on acpi0
acpi_button1: <Sleep Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pci0: <base peripheral> at device 0.1 (no driver attached)
pci0: <base peripheral> at device 0.3 (no driver attached)
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pci1: <ACPI PCI bus> on pcib1
nvidia0: <GeForce FX Go5200> mem 0xd0000000-0xdfffffff,0xfc000000-0xfcffffff irq 20 at device 0.0 on pci1
nvidia0: [GIANT-LOCKED]
uhci0: <Intel 82801DB (ICH4) USB controller USB-A> port 0xbf80-0xbf9f irq 16 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: <Intel 82801DB (ICH4) USB controller USB-A> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <Intel 82801DB (ICH4) USB controller USB-B> port 0xbf40-0xbf5f irq 19 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: <Intel 82801DB (ICH4) USB controller USB-B> on uhci1
usb1: USB revision 1.0
uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <Intel 82801DB (ICH4) USB controller USB-C> port 0xbf20-0xbf3f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
usb2: <Intel 82801DB (ICH4) USB controller USB-C> on uhci2
usb2: USB revision 1.0
uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
ehci0: <EHCI (generic) USB 2.0 controller> mem 0xf4fffc00-0xf4ffffff irq 23 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci_pci_attach: companion usb0
ehci_pci_attach: companion usb1
ehci_pci_attach: companion usb2
usb3: EHCI version 1.0
usb3: companion controllers, 2 ports each: usb0 usb1 usb2
usb3: <EHCI (generic) USB 2.0 controller> on ehci0
usb3: USB revision 2.0
uhub3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub3: single transaction translator
uhub3: 6 ports with 6 removable, self powered
pcib2: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci2: <ACPI PCI bus> on pcib2
bfe0: <Broadcom BCM4401-B0 Fast Ethernet> mem 0xfaffe000-0xfaffffff irq 17 at device 1.0 on pci2
miibus0: <MII bus> on bfe0
bmtphy0: <BCM4401 10/100baseTX PHY> on miibus0
bmtphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
bfe0: Ethernet address: 00:0f:1f:26:c6:65
bfe0: [GIANT-LOCKED]
ath0: <Atheros 5212> mem 0xfafe0000-0xfafeffff irq 18 at device 2.0 on pci2
ath0: [GIANT-LOCKED]
ath0: Ethernet address: 00:02:6f:21:df:fe
ath0: mac 5.9 phy 4.3 radio 3.6
cbb0: <TI4510 PCI-CardBus Bridge> at device 4.0 on pci2
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
fwohci0: <1394 Open Host Controller Interface> mem 0xfaff8000-0xfaffbfff,0xfaffd800-0xfaffdfff irq 16 at device 4.1 on pci2
fwohci0: [GIANT-LOCKED]
fwohci0: OHCI version 1.10 (ROM=0)
fwohci0: No. of Isochronous channels is 4.
fwohci0: EUI64 34:4f:c0:00:26:8f:58:a1
fwohci0: Phy 1394a available S400, 2 ports.
fwohci0: Link S400, max_rec 2048 bytes.
firewire0: <IEEE1394(FireWire) bus> on fwohci0
sbp0: <SBP-2/SCSI over FireWire> on firewire0
dcons_crom0: <dcons configuration ROM> on firewire0
dcons_crom0: bus_addr 0x1f499000
fwe0: <Ethernet over FireWire> on firewire0
if_fwe0: Fake Ethernet address: 36:4f:c0:8f:58:a1
fwe0: Ethernet address: 36:4f:c0:8f:58:a1
fwohci0: Initiate bus reset
fwohci0: node_id=0x8000ffc0, gen=1, non CYCLEMASTER mode
firewire0: 2 nodes, maxhop <= 1, cable IRM = 1
ichss: enabling SpeedStep support
ichss0: <SpeedStep ICH> on cpu0
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH4 UDMA100 controller> port 0xbfa0-0xbfaf,0x376,0x170-0x177,0x3f6,0x1f0-0x1f7 at device 31.1 on pci0
ata0: channel #0 on atapci0
ata1: channel #1 on atapci0
pcm0: <Intel ICH4 (82801DB)> port 0xbc40-0xbc7f,0xb800-0xb8ff mem 0xf4fff400-0xf4fff4ff,0xf4fff800-0xf4fff9ff irq 17 at device 31.5 on pci0
pcm0: [GIANT-LOCKED]
pcm0: <SigmaTel STAC9750/51 AC97 Codec>
acpi_tz0: <Thermal Zone> on acpi0
pci_link0: <ACPI PCI Link LNKA> irq 11 on acpi0
pci_link1: <ACPI PCI Link LNKB> irq 11 on acpi0
pci_link2: <ACPI PCI Link LNKC> irq 11 on acpi0
pci_link3: <ACPI PCI Link LNKD> irq 11 on acpi0
pci_link4: <ACPI PCI Link LNKE> irq 11 on acpi0
pci_link5: <ACPI PCI Link LNKH> irq 11 on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x66,0x62,0x64,0x60 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> flags 0x1000 irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model Generic PS/2 mouse, device ID 0
orm0: <ISA Option ROMs> at iomem 0xcf800-0xcffff,0xc0000-0xcf7ff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounters tick every 1.000 msec
Expensive timeout(9) function: 0xc0521e54(0) 0.005851860 s
firewire0: bus manager 1 
firewire0: New S400 device ID:0011060000003b31
acd0: DVDROM <TEAC DVD-ROM DV-28E-C/D.4B> at ata0-master UDMA33
ad2: 57231MB <HTS548060M9AT00/MGBOA53A> [116280/16/63] at ata1-master UDMA100
SMP: AP CPU #1 Launched!
>Description:
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: