From owner-freebsd-current@FreeBSD.ORG Sun Nov 13 17:42:01 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2719A16A420 for ; Sun, 13 Nov 2005 17:42:01 +0000 (GMT) (envelope-from sam@errno.com) Received: from ebb.errno.com (ebb.errno.com [69.12.149.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9990A43D8B for ; Sun, 13 Nov 2005 17:41:52 +0000 (GMT) (envelope-from sam@errno.com) Received: from [10.0.0.200] ([10.0.0.200]) (authenticated bits=0) by ebb.errno.com (8.12.9/8.12.6) with ESMTP id jADHfppU058425 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 13 Nov 2005 09:41:52 -0800 (PST) (envelope-from sam@errno.com) Message-ID: <43777AD1.8030501@errno.com> Date: Sun, 13 Nov 2005 09:41:37 -0800 From: Sam Leffler User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050927) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Dario Freni References: <20051113172710.GA87552@cvs.freesbie.org> In-Reply-To: <20051113172710.GA87552@cvs.freesbie.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: current@freebsd.org Subject: Re: ath driver panics on 6-STABLE (LOR) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Nov 2005 17:42:01 -0000 Dario Freni wrote: > I bought two atheros based card: a dlink DWL-G520 pci for my home > router (via c3) and a DWL-G650 pccard for my laptop. I use it with my > Netgear 802.11g Access Point. > > I'm having repeatedly panics, which I can't reproduce (if not waiting > a few minutes or some hours of activity), especially on the > router. I've upgraded to the latest RELENG_6 yesterday from 6-BETA > without success. Finally built kernel with debug symbols. Here's the > backtrace: > > sberta:/home/satu/debug> kgdb -d crash/ -n 0 kernel.debug > [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "i386-marcel-freebsd". > > Unread portion of the kernel message buffer: > lock order reversal: (sleepable after non-sleepable) > 1st 0xc11cf188 ath0 (xmit q) @ /usr/src/sys/modules/ath/../../dev/ath/if_ath.c:3537 > 2nd 0xc072ea24 user map (user map) @ /usr/src/sys/vm/vm_map.c:2997 > KDB: stack backtrace: > kdb_backtrace(0,ffffffff,c073e260,c073f2c8,c070a14c) at kdb_backtrace+0x29 > witness_checkorder(c072ea24,9,c06e2a28,bb5) at witness_checkorder+0x5b0 > _sx_xlock(c072ea24,c06e2a28,bb5) at _sx_xlock+0x50 > _vm_map_lock_read(c072e9e0,c06e2a28,bb5,1000016,c10d368c) at _vm_map_lock_read+0x37 > vm_map_lookup(d83db930,0,1,d83db934,d83db924) at vm_map_lookup+0x28 > vm_fault(c072e9e0,0,1,0,c10d4600) at vm_fault+0x65 > trap_pfault(d83db9f8,0,10) at trap_pfault+0xce > trap(8,28,28,0,e04bdcdc) at trap+0x319 > calltrap() at calltrap+0x5 > --- trap 0xc, eip = 0xc088bf08, esp = 0xd83dba38, ebp = 0 --- > zz0e373a4d() at zz0e373a4d+0x68 > > > Fatal trap 12: page fault while in kernel mode > fault virtual address = 0x10 > fault code = supervisor read, page not present > instruction pointer = 0x20:0xc088bf08 > stack pointer = 0x28:0xd83dba38 > frame pointer = 0x28:0x0 > code segment = base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, def32 1, gran 1 > processor eflags = interrupt enabled, resume, IOPL = 0 > current process = 28 (swi4: clock sio) > trap number = 12 > panic: page fault > Uptime: 3m3s > Dumping 223 MB (2 chunks) > chunk 0: 1MB (160 pages) ... ok > chunk 1: 223MB (57072 pages) 207 191 175 159 143 127 111 95 79 63 47 31 15 > > #0 doadump () at pcpu.h:165 > 165 pcpu.h: No such file or directory. > in pcpu.h > (kgdb) backtrace > #0 doadump () at pcpu.h:165 > #1 0xc0519ed4 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:399 > #2 0xc051a17f in panic (fmt=0xc06b50d4 "%s") > at /usr/src/sys/kern/kern_shutdown.c:555 > #3 0xc068d9a2 in trap_fatal (frame=0xd83db9f8, eva=16) > at /usr/src/sys/i386/i386/trap.c:831 > #4 0xc068d6d7 in trap_pfault (frame=0xd83db9f8, usermode=0, eva=16) > at /usr/src/sys/i386/i386/trap.c:742 > #5 0xc068d341 in trap (frame= > {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = 0, tf_esi = -531899172, tf_ebp = 0, tf_isp = -667043292, tf_ebx = -531895256, tf_edx = 787639, tf_ecx = -1073479567, tf_eax = 1, tf_trapno = 12, tf_err = 0, tf_eip = -1064780024, tf_cs = 32, tf_eflags = 66050, tf_esp = 16824924, tf_ss = 0}) > at /usr/src/sys/i386/i386/trap.c:432 > #6 0xc067d60a in calltrap () at /usr/src/sys/i386/i386/exception.s:139 > #7 0xc088bf08 in ?? () > (kgdb) > > > Let me know what further information I may provide. Disable protection or nuke the code in ath_tx_start that updates CTS when bursting. The latter is what I've done in my tree and in the next hal rev the api is removed. Sam