kern/126475: ath pcmcia card inevitably panics under FreeBSD-7 STABLE

Tue Aug 12 09:40:04 UTC 2008

>Number:         126475
>Category:       kern
>Synopsis:       ath pcmcia card inevitably panics under FreeBSD-7 STABLE
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Aug 12 09:40:03 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Thomas Zander
>Release:        FreeBSD 7.0-STABLE
>Organization:
>Environment:
FreeBSD 7.0-STABLE #0: Sun Aug 10 17:52:35 WST 2008
>Description:
After upgrading my notebook to freebsd-7 last weekend, the system is completely unusable when using my ath network card. It worked flawlessly under 6.3 STABLE.

Kernel backtrace is attached. I will keep the vmcore file, so please let me know what I can do to track this further down.
>How-To-Repeat:
Just use an ath pcmcia card for a few seconds
>Fix:

Patch attached with submission follows:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:

Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x0
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09882a3
stack pointer	        = 0x28:0xccac68b0
frame pointer	        = 0x28:0xccac6920
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1205 (sshd)

Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x0
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09882a3
stack pointer	        = 0x28:0xccac68b0
frame pointer	        = 0x28:0xccac6920
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1205 (sshd)

Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x0
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc09882a3
stack pointer	        = 0x28:0xccac68b0
frame pointer	        = 0x28:0xccac6920
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1205 (sshd)
panic: from debugger
Uptime: 4m15s
Physical memory: 239 MB
Dumping 33 MB: 18 2

Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from /boot/kernel/linprocfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/nfsclient.ko...Reading symbols from /boot/kernel/nfsclient.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/nfsclient.ko
Reading symbols from /boot/kernel/geom_eli.ko...Reading symbols from /boot/kernel/geom_eli.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_eli.ko
Reading symbols from /boot/kernel/crypto.ko...Reading symbols from /boot/kernel/crypto.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/crypto.ko
Reading symbols from /boot/kernel/zlib.ko...Reading symbols from /boot/kernel/zlib.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zlib.ko
Reading symbols from /boot/kernel/pf.ko...Reading symbols from /boot/kernel/pf.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pf.ko
Reading symbols from /boot/kernel/if_ath.ko...Reading symbols from /boot/kernel/if_ath.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_ath.ko
Reading symbols from /boot/kernel/ath_hal.ko...Reading symbols from /boot/kernel/ath_hal.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ath_hal.ko
Reading symbols from /boot/kernel/wlan.ko...Reading symbols from /boot/kernel/wlan.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan.ko
Reading symbols from /boot/kernel/ath_rate.ko...Reading symbols from /boot/kernel/ath_rate.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ath_rate.ko
Reading symbols from /boot/kernel/if_rl.ko...Reading symbols from /boot/kernel/if_rl.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_rl.ko
Reading symbols from /boot/kernel/miibus.ko...Reading symbols from /boot/kernel/miibus.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/miibus.ko
Reading symbols from /boot/kernel/snd_ich.ko...Reading symbols from /boot/kernel/snd_ich.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/snd_ich.ko
Reading symbols from /boot/kernel/sound.ko...Reading symbols from /boot/kernel/sound.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/sound.ko
Reading symbols from /boot/kernel/i915.ko...Reading symbols from /boot/kernel/i915.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/i915.ko
Reading symbols from /boot/kernel/drm.ko...Reading symbols from /boot/kernel/drm.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/drm.ko
Reading symbols from /boot/kernel/wlan_wep.ko...Reading symbols from /boot/kernel/wlan_wep.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_wep.ko
Reading symbols from /boot/kernel/wlan_ccmp.ko...Reading symbols from /boot/kernel/wlan_ccmp.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_ccmp.ko
Reading symbols from /boot/kernel/wlan_tkip.ko...Reading symbols from /boot/kernel/wlan_tkip.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_tkip.ko
Reading symbols from /boot/kernel/wlan_xauth.ko...Reading symbols from /boot/kernel/wlan_xauth.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_xauth.ko
Reading symbols from /boot/kernel/wlan_acl.ko...Reading symbols from /boot/kernel/wlan_acl.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_acl.ko
Reading symbols from /boot/kernel/wlan_scan_sta.ko...Reading symbols from /boot/kernel/wlan_scan_sta.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/wlan_scan_sta.ko
Reading symbols from /boot/kernel/pflog.ko...Reading symbols from /boot/kernel/pflog.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/pflog.ko
Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/acpi.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/acpi.ko
Reading symbols from /boot/kernel/daemon_saver.ko...Reading symbols from /boot/kernel/daemon_saver.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/daemon_saver.ko
#0  doadump () at pcpu.h:195
195		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc053bc63 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc053be9a in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:572
#3  0xc04599a7 in db_panic (addr=Could not find the frame base for "db_panic".
) at /usr/src/sys/ddb/db_command.c:446
#4  0xc045a15a in db_command (last_cmdp=0xc07cba94, cmd_table=0x0, dopager=1)
    at /usr/src/sys/ddb/db_command.c:413
#5  0xc045a275 in db_command_loop () at /usr/src/sys/ddb/db_command.c:466
#6  0xc045bd9c in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:228
#7  0xc05647f3 in kdb_trap (type=12, code=0, tf=0xccac6870) at /usr/src/sys/kern/subr_kdb.c:524
#8  0xc072c9df in trap_fatal (frame=0xccac6870, eva=0) at /usr/src/sys/i386/i386/trap.c:890
#9  0xc072cc8b in trap_pfault (frame=0xccac6870, usermode=0, eva=0) at /usr/src/sys/i386/i386/trap.c:812
#10 0xc072d696 in trap (frame=0xccac6870) at /usr/src/sys/i386/i386/trap.c:490
#11 0xc0715feb in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#12 0xc09882a3 in ath_start (ifp=0xc1f8a800) at /usr/src/sys/modules/ath/../../dev/ath/if_ath.c:1747
#13 0xc05d06e9 in if_start (ifp=0xc1f8a800) at /usr/src/sys/net/if.c:2768
#14 0xc05d70fa in ether_output_frame (ifp=0xc1f8a800, m=0xc1f5e100) at /usr/src/sys/net/if_ethersubr.c:405
#15 0xc05d76b3 in ether_output (ifp=0xc1f8a800, m=0xc1f5e100, dst=0xccac6a20, rt0=0xc2020a2c)
    at /usr/src/sys/net/if_ethersubr.c:374
#16 0xc09dc49b in ieee80211_output (ifp=0xc1f8a800, m=0xc1f5e100, dst=0xccac6a20, rt0=0xc2020a2c)
    at /usr/src/sys/modules/wlan/../../net80211/ieee80211_output.c:261
#17 0xc05fb329 in ip_output (m=0xc1f5e100, opt=0x0, ro=0xccac6a1c, flags=Variable "flags" is not available.
)
    at /usr/src/sys/netinet/ip_output.c:552
#18 0xc065a233 in tcp_output (tp=0xc20f21d0) at /usr/src/sys/netinet/tcp_output.c:1135
#19 0xc06663ec in tcp_usr_send (so=0xc20e34e0, flags=0, m=0xc1f5dd00, nam=0x0, control=0x0, td=0xc20d8cc0)
    at tcp_offload.h:269
#20 0xc0593665 in sosend_generic (so=0xc20e34e0, addr=0x0, uio=0xccac6c60, top=0xc1f5dd00, control=0x0, 
    flags=0, td=0xc20d8cc0) at /usr/src/sys/kern/uipc_socket.c:1246
#21 0xc058eedf in sosend (so=0xc20e34e0, addr=0x0, uio=0xccac6c60, top=0x0, control=0x0, flags=0, 
    td=0xc20d8cc0) at /usr/src/sys/kern/uipc_socket.c:1292
#22 0xc0577dcb in soo_write (fp=0xc1fc65a0, uio=0xccac6c60, active_cred=0xc20d2c00, flags=0, td=0xc20d8cc0)
    at /usr/src/sys/kern/sys_socket.c:103
#23 0xc05714f7 in dofilewrite (td=0xc20d8cc0, fd=3, fp=0xc1fc65a0, auio=0xccac6c60, offset=-1, flags=0)
    at file.h:254
#24 0xc05717e8 in kern_writev (td=0xc20d8cc0, fd=3, auio=0xccac6c60) at /usr/src/sys/kern/sys_generic.c:401
#25 0xc057185f in write (td=0xc20d8cc0, uap=0xccac6cfc) at /usr/src/sys/kern/sys_generic.c:317
#26 0xc072d015 in syscall (frame=0xccac6d38) at /usr/src/sys/i386/i386/trap.c:1035
#27 0xc0716050 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#28 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)

>Release-Note:
>Audit-Trail:
>Unformatted: