kern/92083: [ural] [panic] panic using WPA on ural NIC in 6.2-RELEASE

Sun Feb 11 20:10:17 UTC 2007

The following reply was made to PR kern/92083; it has been noted by GNATS.

From: Anders Nordby <anders at FreeBSD.org>
To: bug-followup at FreeBSD.org, Jonathan Fosburgh <jonathan at fosburgh.org>,
	Sam Leffler <sam at errno.com>
Cc:  
Subject: Re: kern/92083: [ural] [panic] panic using WPA on ural NIC in 6.2-RELEASE
Date: Sun, 11 Feb 2007 20:36:39 +0100

 Hi,

 Just been trying the same thing in 6.2-RELEASE, with the same hardware.

 It seems the same bug still occurs, the stack trace looks very similar.
 Everytime I try do do a cvsup of the ports tree, the system panics.

 stream#        uname -a
 FreeBSD stream.localnet 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Tue Feb  6
 22:09:01 CET 2007     root at stream.localnet:/usr/obj/usr/src/sys/STREAM
 i386

 stream# kgdb /usr/obj/usr/src/sys/STREAM/kernel.debug
 /var/crash/vmcore.0 
 kgdb: kvm_nlist(_stopped_cpus): 
 kgdb: kvm_nlist(_stoppcbs): 
 [GDB will not be able to debug user-mode threads:
 /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you
 are
 welcome to change it and/or distribute copies of it under certain
 conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for
 details.
 This GDB was configured as "i386-marcel-freebsd".

 Unread portion of the kernel message buffer:
 ural0: could not transmit buffer: SHORT_XFER

 Fatal trap 12: page fault while in kernel mode
 fault virtual address   = 0x4
 fault code              = supervisor read, page not present
 instruction pointer     = 0x20:0xc070a305
 stack pointer           = 0x28:0xd5693be4
 frame pointer           = 0x28:0xd5693bf0
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, def32 1, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 21 (irq5: uhci0 uhci1)
 trap number             = 12
 panic: page fault
 KDB: stack backtrace:
 kdb_backtrace(100,c33a0780,28,d5693ba4,c,...) at kdb_backtrace+0x29
 panic(c08cecee,c0923d2a,0,fffff,c339f49b,...) at panic+0xa8
 trap_fatal(d5693ba4,4,c33a0780,0,c,...) at trap_fatal+0x2a6
 trap_pfault(d5693ba4,0,4) at trap_pfault+0x1f3
 trap(8,28,28,c33e2000,0,...) at trap+0x325
 calltrap() at calltrap+0x5
 --- trap 0xc, eip = 0xc070a305, esp = 0xd5693be4, ebp = 0xd5693bf0 ---
 ieee80211_free_node(0,0,c35c0700,c3563a80,0,...) at
 ieee80211_free_node+0x9
 ural_txeof(c35c0700,c33e2cd4,0) at ural_txeof+0x83
 usb_transfer_complete(c35c0700,c33a0780,c35c0754,a8,c3563a80,...) at
 usb_transfer_complete+0x14e
 uhci_idone(c35c0770,c33fb400,c35c0788,c35c0754,0,...) at
 uhci_idone+0x11b
 uhci_check_intr(c3389000,c35c0770) at uhci_check_intr+0x98
 uhci_softintr(c3389000,d5693cc4,c060a82a,c3389000,c33bca80,...) at
 uhci_softintr+0x22
 usb_schedsoftintr(c3389000,c33bca80,4,c32bfa80,d5693cd0,...) at
 usb_schedsoftintr+0xd
 uhci_intr1(c3389000,d5693cec,c0663f61,c3389000,c33ca740,...) at
 uhci_intr1+0x1ce
 uhci_intr(c3389000) at uhci_intr+0x28
 ithread_execute_handlers(c339f430,c32bfa80) at
 ithread_execute_handlers+0x121
 ithread_loop(c33bd340,d5693d38) at ithread_loop+0x54
 fork_exit(c0664018,c33bd340,d5693d38) at fork_exit+0x70
 fork_trampoline() at fork_trampoline+0x8
 --- trap 0x1, eip = 0, esp = 0xd5693d6c, ebp = 0 ---
 Uptime: 12m23s
 Dumping 511 MB (2 chunks)
   chunk 0: 1MB (160 pages) ... ok
   chunk 1: 511MB (130800 pages) 495 479 463 447 431 415 399 383 367 351
 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47
 31 15

 #0  doadump () at pcpu.h:165
 165     pcpu.h: No such file or directory.
         in pcpu.h
 (kgdb) bt
 #0  doadump () at pcpu.h:165
 #1  0xc0679632 in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:409
 #2  0xc06798f8 in panic (fmt=0xc08cecee "%s")
     at /usr/src/sys/kern/kern_shutdown.c:565
 #3  0xc089043e in trap_fatal (frame=0xd5693ba4, eva=4)
     at /usr/src/sys/i386/i386/trap.c:837
 #4  0xc089016f in trap_pfault (frame=0xd5693ba4, usermode=0, eva=4)
     at /usr/src/sys/i386/i386/trap.c:745
 #5  0xc088fd69 in trap (frame=
       {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -1019338752, tf_esi =
 0, tf_ebp = -714523664, tf_isp = -714523696, tf_ebx = -1019335468,
 tf_edx = -1019454592, tf_ecx = -1019703296, tf_eax = 0, tf_trapno = 12,
 tf_err = 0, tf_eip = -1066360059, tf_cs = 32, tf_eflags = 590406, tf_esp
 = -1019335468, tf_ss = -1019205632}) at
 /usr/src/sys/i386/i386/trap.c:435
 #6  0xc087dc8a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc070a305 in ieee80211_free_node (ni=0x0)
     at /usr/src/sys/net80211/ieee80211_node.c:1605
 #8  0xc060016f in ural_txeof (xfer=0xc35c0700, priv=0xc33e2cd4, 
     status=USBD_NORMAL_COMPLETION) at /usr/src/sys/dev/usb/if_ural.c:888
 #9  0xc0618326 in usb_transfer_complete (xfer=0xc35c0700)
     at /usr/src/sys/dev/usb/usbdi.c:863
 #10 0xc060aa2f in uhci_idone (ii=0x0) at
 /usr/src/sys/dev/usb/uhci.c:1499
 #11 0xc060a90c in uhci_check_intr (sc=0xc3389000, ii=0xc35c0770)
     at /usr/src/sys/dev/usb/uhci.c:1374
 #12 0xc060a85e in uhci_softintr (v=0xc3389000)
     at /usr/src/sys/dev/usb/uhci.c:1304
 #13 0xc061566d in usb_schedsoftintr (bus=0x0) at
 /usr/src/sys/dev/usb/usb.c:871
 #14 0xc060a82a in uhci_intr1 (sc=0xc3389000)
     at /usr/src/sys/dev/usb/uhci.c:1274
 #15 0xc060a658 in uhci_intr (arg=0xc3389000)
     at /usr/src/sys/dev/usb/uhci.c:1189
 #16 0xc0663f61 in ithread_execute_handlers (p=0xc339f430, ie=0xc32bfa80)
     at /usr/src/sys/kern/kern_intr.c:682
 #17 0xc066406c in ithread_loop (arg=0xc33bd340)
     at /usr/src/sys/kern/kern_intr.c:765
 #18 0xc0662ee8 in fork_exit (callout=0xc0664018 <ithread_loop>, 
     arg=0xc33bd340, frame=0xd5693d38) at
 /usr/src/sys/kern/kern_fork.c:821
 #19 0xc087dcec in fork_trampoline () at
 /usr/src/sys/i386/i386/exception.s:208
 (kgdb) 

 About my ural adapter:

 stream# dmesg | grep ural
 ural0: ANI 802.11g WLAN Adapter, rev 2.00/0.01, addr 2
 ural0: MAC/BBP RT2570 (rev 0x03), RF RT2526
 ural0: Ethernet address: 00:11:95:da:fe:e6
 ural0: if_start running deferred for Giant
 ural0: link state changed to UP

 stream# usbdevs -a 2 -f /dev/usb0 -v
 Controller /dev/usb0:
 addr 2: full speed, power 300 mA, config 1, 802.11g WLAN
 Adapter(0x3c00), ANI(0x2001), rev 0.01

 Let me know if there is anything more I can do to help debug the
 problem.

 Regards,

 -- 
 Anders.