From owner-freebsd-wireless@FreeBSD.ORG  Mon Aug 12 17:23:40 2013
Return-Path: <owner-freebsd-wireless@FreeBSD.ORG>
Delivered-To: freebsd-wireless@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id C444C5CD
 for <freebsd-wireless@freebsd.org>; Mon, 12 Aug 2013 17:23:40 +0000 (UTC)
 (envelope-from lev@FreeBSD.org)
Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru
 [46.4.40.135]) by mx1.freebsd.org (Postfix) with ESMTP id 87C712E5C
 for <freebsd-wireless@freebsd.org>; Mon, 12 Aug 2013 17:23:40 +0000 (UTC)
Received: from lion.home.serebryakov.spb.ru (unknown
 [IPv6:2001:470:923f:1:acaf:d9db:8ffe:1642])
 (Authenticated sender: lev@serebryakov.spb.ru)
 by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPSA id D75954AC1C
 for <freebsd-wireless@freebsd.org>; Mon, 12 Aug 2013 21:23:32 +0400 (MSK)
Date: Mon, 12 Aug 2013 21:23:28 +0400
From: Lev Serebryakov <lev@FreeBSD.org>
X-Priority: 3 (Normal)
Message-ID: <238348209.20130812212328@serebryakov.spb.ru>
To: freebsd-wireless@freebsd.org
Subject: ath as AP panics
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-wireless@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Discussions of 802.11 stack,
 tools device driver development." <freebsd-wireless.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-wireless>
List-Post: <mailto:freebsd-wireless@freebsd.org>
List-Help: <mailto:freebsd-wireless-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-wireless>, 
 <mailto:freebsd-wireless-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 12 Aug 2013 17:23:40 -0000

Hello, Freebsd-wireless.

 r254238 with ath used as AP panics in fragment processing. This patch from
 adrian:

Index: ieee80211_output.c
===================================================================
--- ieee80211_output.c  (revision 254224)
+++ ieee80211_output.c  (working copy)
@@ -458,6 +458,16 @@
        m->m_flags &= ~(M_80211_TX - M_PWR_SAV - M_MORE_DATA);

        /*
+        * Complain if m->m_nextpkt is set.
+        *
+        * The caller should've pulled this apart for us.
+        */
+       if (m->m_nextpkt != NULL) {
+               printf("%s: m_nextpkt not NULL?!\n", __func__);
+               m->m_nextpkt = NULL;
+       }
+
+       /*
         * Bump to the packet transmission path.
         * The mbuf will be consumed here.
         */


 replaces panic with lot of debug output and looks like not a solution, but
dirty hack. Now I'm trying r254250 with this patch, but it looks like it
should be same as r254238, as nothing 802.11-related was changed in-between.

-- 
// Black Lion AKA Lev Serebryakov <lev@FreeBSD.org>