wireless ral with bridging crashes

bazzoola bazzoola at gmail.com
Mon Mar 20 04:12:13 UTC 2006


Greetings,

*CC Me in not on the list*

I upgraded my sources yesterday because I was having trouble with WPA 
and ral0. That problem is fixed now. However, now I am getting different 
crashes and core dumps.

I wanted to run a wireless access point on freebsd and I got that 
working by itself.
On my wired network I have openVPN which uses bridging.
Using three interfaces on a bridge 
(net.link.ether.bridge.config=rl0,ral0,tap0) I am able to crash FreeBSD 
6.1-PRERELEASE with an ifconfig command only.
I'm running the default GENERIC kernel.

To reproduce this crash, all i need is to type is "ifconfig ral0 
mediaopt hostap"
I have vmcore and other useful info if requested.

Procedure:
1- load bridge and wlan_* to loader.conf
2- setup bridging between three interfaces in sysctl.conf
3- run ifconfig ral0 mediaopt hostap
4- note that i didnt try to run hostapd before running ifconfig

Settings that I think are useful to debug this:
in loader.conf I have
console="comconsole"
bridge_load="YES"
wlan_wep_load="YES"
wlan_tkip_load="YES"
wlan_ccmp_load="YES"
wlan_xauth_load="YES"
wlan_acl_load="YES"

in sysctl.conf I have:
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.ip.fw.verbose=1
net.inet.ip.fw.verbose_limit=5
net.inet.ip.forwarding=1
net.inet.ip.fastforwarding=1

# OpenVPN
net.link.ether.bridge.enable=1
net.link.ether.bridge.ipfw=1

# OpenVPN
# net.link.ether.bridge_cfg=rl0,tap0
# net.link.ether.bridge.config=rl0,tap0

# Wireless AP
# net.link.ether.bridge.config=ral0,rl0

# Wireless and OpenVPN
net.link.ether.bridge.config=rl0,ral0,tap0

in dmesg I have:
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
    The Regents of the University of California. All rights reserved.
FreeBSD 6.1-PRERELEASE #3: Sun Mar 19 15:32:41 EST 2006
    root at bazzoola.la:/usr/obj/usr/src/sys/GENERIC
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD-K6(tm) 3D processor (501.14-MHz 586-class CPU)
  Origin = "AuthenticAMD"  Id = 0x58c  Stepping = 12
  Features=0x8021bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,PGE,MMX>
  AMD Features=0x80000800<SYSCALL,3DNow>
real memory  = 266272768 (253 MB)
avail memory = 251170816 (239 MB)
wlan: mac acl policy registered
K6-family MTRR support enabled (2 registers)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <GBT AWRDACPI> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0x480-0x48f,0x5000-0x5041 
on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: no PRT entry for 0.0.INTA
agp0: <SiS 530 host to AGP bridge> mem 0xe0000000-0xe3ffffff at device 
0.0 on pci0
atapci0: <SiS 530 UDMA66 controller> port 
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x4000-0x400f irq 14 at device 0.1 
on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <unknown> at device 1.1 (no driver attached)
ohci0: <SiS 5571 USB controller> mem 0xe4904000-0xe4904fff irq 9 at 
device 1.2 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: <SiS 5571 USB controller> on ohci0
usb0: USB revision 1.0
uhub0: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
pcib1: <PCI-PCI bridge> at device 2.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
rl0: <D-Link DFE-530TX+ 10/100BaseTX> port 0xd000-0xd0ff mem 
0xe4902000-0xe49020ff irq 11 at device 9.0 on pci0
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: xx:xx:xx:xx:xx:xx
rl1: <D-Link DFE-530TX+ 10/100BaseTX> port 0xd400-0xd4ff mem 
0xe4903000-0xe49030ff irq 10 at device 11.0 on pci0
miibus1: <MII bus> on rl1
rlphy1: <RealTek internal media interface> on miibus1
rlphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl1: Ethernet address: xx:xx:xx:xx:xx:xx
ral0: <Ralink Technology RT2500> mem 0xe4900000-0xe4901fff irq 12 at 
device 13.0 on pci0
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
ral0: Ethernet address: xx:xx:xx:xx:xx:xx
pci0: <multimedia, audio> at device 15.0 (no driver attached)
fdc0: <floppy drive controller> port 0x3f2-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on 
acpi0
sio0: type 16550A, console
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
ppc0: <Standard parallel printer port> port 0x378-0x37f irq 7 on acpi0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xc7fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x100>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 501139889 Hz quality 800
Timecounters tick every 1.000 msec
ad0: FAILURE - SET_MULTI status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: 19470MB <QUANTUM FIREBALLlct20 20 APL.0900> at ata0-master UDMA66
acd0: CDRW <R/RW 4x4x32/C1.7> at ata1-master PIO4
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: mount pending error: blocks 40 files 1
interface tap0 Not found in bridge
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding 
disabled, default to deny, logging disabled


console shows this (look at the end to see the crash):
/boot/kernel/kernel text=0x4c45ac data=0x81d20+0x4d0cc 
syms=[0x4+0x62810+0x4+0x7998e]
/boot/kernel/bridge.ko text=0x3cdc data=0x5ec+0x2298 
-syms=[0x4+0xa50+0x4+0xdd3]
/boot/kernel/wlan_wep.ko text=0x1658 data=0xe0+0x4 
syms=[0x4+0x3c0+0x4+0x342]
/boot/kernel/wlan_tkip.ko text=0x2844 data=0xe0+0x4 
syms=[0x4+0x460+0x4+0x3ee]
/boot/kernel/wlan_ccmp.ko text=0x54f8 -data=0xe0+0x4 
syms=[0x4+0x510+0x4+0x42d]
/boot/kernel/wlan_xauth.ko text=0x588 data=0xe0 syms=[0x4+0x270+0x4+0x2a9]
/boot/kernel/wlan_acl.ko text=0x1318 data=0x148 syms=[0x4+0x4b0+0x4+0x491]

/boot/kernel/acpi.ko ...
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
    The Regents of the University of California. All rights reserved.
FreeBSD 6.1-PRERELEASE #3: Sun Mar 19 15:32:41 EST 2006
    root at bazooola.la:/usr/obj/usr/src/sys/GENERIC
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD-K6(tm) 3D processor (501.14-MHz 586-class CPU)
  Origin = "AuthenticAMD"  Id = 0x58c  Stepping = 12
  Features=0x8021bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,PGE,MMX>
  AMD Features=0x80000800<SYSCALL,3DNow>
real memory  = 266272768 (253 MB)
avail memory = 251170816 (239 MB)
wlan: mac acl policy registered
K6-family MTRR support enabled (2 registers)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <GBT AWRDACPI> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0x480-0x48f,0x5000-0x5041 
on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib0: no PRT entry for 0.0.INTA
agp0: <SiS 530 host to AGP bridge> mem 0xe0000000-0xe3ffffff at device 
0.0 on pci0
atapci0: <SiS 530 UDMA66 controller> port 
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x4000-0x400f irq 14 at device 0.1 
on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <unknown> at device 1.1 (no driver attached)
ohci0: <SiS 5571 USB controller> mem 0xe4904000-0xe4904fff irq 9 at 
device 1.2 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: <SiS 5571 USB controller> on ohci0
usb0: USB revision 1.0
uhub0: SiS OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
pcib1: <PCI-PCI bridge> at device 2.0 on pci0
pci1: <PCI bus> on pcib1
pci1: <display, VGA> at device 0.0 (no driver attached)
rl0: <D-Link DFE-530TX+ 10/100BaseTX> port 0xd000-0xd0ff mem 
0xe4902000-0xe49020ff irq 11 at device 9.0 on pci0
miibus0: <MII bus> on rl0
rlphy0: <RealTek internal media interface> on miibus0
rlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl0: Ethernet address: xx:xx:xx:xx:xx:xx
rl1: <D-Link DFE-530TX+ 10/100BaseTX> port 0xd400-0xd4ff mem 
0xe4903000-0xe49030ff irq 10 at device 11.0 on pci0
miibus1: <MII bus> on rl1
rlphy1: <RealTek internal media interface> on miibus1
rlphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
rl1: Ethernet address: xx:xx:xx:xx:xx:xx
ral0: <Ralink Technology RT2500> mem 0xe4900000-0xe4901fff irq 12 at 
device 13.0 on pci0
ral0: MAC/BBP RT2560 (rev 0x04), RF RT2525
ral0: Ethernet address: xx:xx:xx:xx:xx:xx
pci0: <multimedia, audio> at device 15.0 (no driver attached)
fdc0: <floppy drive controller> port 0x3f2-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on 
acpi0
sio0: type 16550A, console
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
ppc0: <Standard parallel printer port> port 0x378-0x37f irq 7 on acpi0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xc7fff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x100>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Timecounter "TSC" frequency 501139874 Hz quality 800
Timecounters tick every 1.000 msec
ad0: FAILURE - SET_MULTI status=51<READY,DSC,ERROR> error=4<ABORTED>
ad0: 19470MB <QUANTUM FIREBALLlct20 20 APL.0900> at ata0-master UDMA66
acd0: CDRW <R/RW 4x4x32/C1.7> at ata1-master PIO4
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
Loading configuration files.
kernel dumps on /dev/ad0s1b
Entropy harvesting: interrupts ethernet point_to_point kickstart.
swapon: adding /dev/ad0s1b as swap device
Starting file system checks:
/dev/ad0s1a: INCORRECT BLOCK COUNT I=49683 (4 should be 0) (CORRECTED)
/dev/ad0s1a: UNREF FILE I=49683  OWNER=root MODE=100644
/dev/ad0s1a: SIZE=0 MTIME=Mar 19 21:10 2006  (CLEARED)
/dev/ad0s1a: FREE BLK COUNT(S) WRONG IN SUPERBLK (SALVAGED)
/dev/ad0s1a: SUMMARY INFORMATION BAD (SALVAGED)
/dev/ad0s1a: BLK(S) MISSING IN BIT MAPS (SALVAGED)
/dev/ad0s1a: 1488 files, 29098 used, 224717 free (757 frags, 27995 
blocks, 0.3% fragmentation)
/dev/ad0s1e: DEFER FOR BACKGROUND CHECKING
/dev/ad0s1f: DEFER FOR BACKGROUND CHECKING
/dev/ad0s1d: DEFER FOR BACKGROUND CHECKING
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
/var: mount pending error: blocks 48 files 12
Setting hostname: bazzoola.la.
net.inet.tcp.blackhole: 0 -> 2
net.inet.udp.blackhole: 0 -> 1
net.inet.ip.forwarding: 0 -> 1
net.inet.ip.fastforwarding: 0 -> 1
net.link.ether.bridge.enable: 0 -> 1
net.link.ether.bridge.ipfw: 0 -> 1
net.link.ether.biridge.config: nterface tap0 Not found in bridge
rl0: promiscuous mode enabled
ral0: promiscuous mode enabled
rl0: link state changed to DOWN
 -> rl0,ral0,tap0
rl1: link state changed to DOWN
rl1: no link ...rl1: link state changed to UP
 got link
rl0: link state changed to UP
ral0: link state changed to UP
ral0: link state changed to DOWN
DHCPREQUEST on rl1 to 255.255.255.255 port 67
DHCPACK from xx.xx.xx.xx
bound to xx.xx.xx.xx -- renewal in 43200 seconds.
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> m
tu 16384
    inet6 ::1 prefi
xlen 128
Fatal trap 12: page fault while in kernel mode
fault virtual address    = 0x12c
fault code        = supervisor read, page not present
instruction pointer    = 0x20:0xc06ee4a9
stack pointer            = 0x28:0xcbeb9c7c
frame pointer            = 0x28:0xcbeb9c94
code segment        = base 0x0, limit 0xfffff, type 0x1b
            = DPL 0, pres 1, def32 1, gran 1
processor eflags    = interrupt enabled, resume, IOPL = 0
current process        = 27 (irq12: ral0)
trap number        = 12
panic: page fault
Uptime: 14s
Dumping 253 MB (2 chunks)
  chunk 0: 1MB (160 pages) ... ok
  chunk 1: 253MB (64752 pages) 237 221 205 189 173 157 141 125 109 93 77 
61 45 29 13 ... ok

Dump complete
Automatic reboot in 15 seconds - press a key on the console to abort
Rebooting...





More information about the freebsd-stable mailing list