From owner-freebsd-wireless@freebsd.org Wed Sep 16 15:58:49 2015 Return-Path: Delivered-To: freebsd-wireless@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 90BE49CD78B for ; Wed, 16 Sep 2015 15:58:49 +0000 (UTC) (envelope-from adrian.chadd@gmail.com) Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 649D81A0B for ; Wed, 16 Sep 2015 15:58:49 +0000 (UTC) (envelope-from adrian.chadd@gmail.com) Received: by iofb144 with SMTP id b144so235555622iof.1 for ; Wed, 16 Sep 2015 08:58:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=kHP9XTFiQXm+OKUJLIN0fcX2P5g/n/fl1kagEBuqxao=; b=vgW/jrLQR+MSIKybk1QC9+FDboV9i1uZQn7N4IlH4SY7zwhTMORC/8mjcneTd8eGHc x87uTeHL2YcdbmG4y/rSYHUv2mpaX4JGS6rSkIRHTx4Wlfgn3IkImn6nTkmbtRasJSnH tHoW+zpKedVzW0d5Zf2rW3ZIMxSK6qHAU31MY2esZo0cthR9/b5mG4F8yaVqs+w+Vagl k+Dq5IbYW1puLEVnoB8c7AHIrOLBoWBTZWxp7BC7Uz4L88wnVt8q1gE/mM3iGi9/Hbv9 i5HUX8LB+/h0HNFty8oqliZxknQgQ266qk1TQv2928jfAo9Dl6SOd3HOTw9I/e/rqhQn 9RBw== MIME-Version: 1.0 X-Received: by 10.107.13.75 with SMTP id 72mr43204374ion.75.1442419128744; Wed, 16 Sep 2015 08:58:48 -0700 (PDT) Received: by 10.36.28.208 with HTTP; Wed, 16 Sep 2015 08:58:48 -0700 (PDT) In-Reply-To: References: <55F90187.10809@shrew.net> <55F906CB.9030007@shrew.net> Date: Wed, 16 Sep 2015 08:58:48 -0700 Message-ID: Subject: Re: urtwn and hostap From: Adrian Chadd To: Idwer Vollering Cc: "freebsd-wireless@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Sep 2015 15:58:49 -0000 I think the net80211 beacon create routine doesn't allocate a node ref. Yeah, it doesn't. You have to do ieee80211_ref_node() after calling becaon_create(), and deref it if the tx fails. The TX success will free the node ref for you. -adrian On 16 September 2015 at 04:27, Idwer Vollering wrote: > 2015-09-16 8:06 GMT+02:00 Matthew Grooms : > >> >> It looks like my screenshot got scrubbed. Here is my hopefully faithful >> transcription ... >> >> Fatal trap 9: general protection fault while in kernel mode >> cpuid = 3; apic id = 03 >> instruction pointer = 0x20:0xffffffff80a01105 >> stack pointer = 0x28:0xfffffe0092fe86f0 >> frame pointer = 0x28:0xfffffe0092fe8740 >> code segment = base 0x0, limit 0xfffff, type 0x1b >> = DPL 0, pres 1, long 1, def32 0, gran 1 >> processor eflags = interrupt enabled, resume, IOPL = 0 >> current process = 716 (ifconfig) >> [thread pid 716 tid 100082 ] >> Stopped at __mtx_lock_flags+0x55: movq (%r13),%rax >> db> bt >> Tracing pid 716 tid 100082 td 0xffffff800512814d0 >> __mtx_lock_flags() at __mtx_lock_flags+0x55/frame 0xfffffe0092fe8740 >> ieee80211_free_node() at ieee80211_free_node()_0x38/frame 0xfffffe0092fe8780 >> ieee80211_node_vdetach() at ieee80211_node_vdetach()+0x2d/frame >> 0xfffffe0092fe87a0 >> ieee80211_vap_detach() at ieee80211_vap_detach()+0x35e/frame >> 0xfffffe0092fe87d0 >> urtwn_vap_delete() at urtwn_vap_delete()+0xe/frame 0xfffffe0092fe87f0 >> if_clone_destroyif() at if_clone_destroyif()+0x1aa/frame 0xfffffe0092fe8840 >> if_clone_destroy() at if_clone_destroy()0x8e/frame 0xfffffe0092fe8860 >> kern_ioctl() at kern_ioctl()+0x230/frame 0xfffffe0092fe88c0 >> sys_ioctl() at sys_ioctl()+0x153/frame 0xfffffe0092fe89a0 >> amd64_syscall() at amd64_syscall()+0x282/frame 0xfffffe0092fe8ab0 >> Xfast_syscall() at Xfast_syscall()+0xfb/frame 0xfffffe0092fe8ab0 >> -- syscall (54, FreeBSD ELF64, sys_ioctl), rip = 0x8011e8c8a, rsp = >> 0x7fffffffe2f8, rbp = 0x7fffffffe310 -- >> db> > > Assuming dumpdev="AUTO" is set in /etc/rc.conf, you should have > entered 'dump' at the db> blinker :) > > The trap details are found in /var/crash/, run kgdb: "kgdb > /boot/kernel/kernel /var/crash/vmcore.last", then run 'bt' and 'up' at > its prompt. > >> >> -Matthew >> _______________________________________________ >> freebsd-wireless@freebsd.org mailing list >> https://lists.freebsd.org/mailman/listinfo/freebsd-wireless >> To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org"