Date: Sun, 19 Aug 2001 19:40:06 -0700 From: Sam Habash <the@llama.com> To: Jonathan Chen <jon@FreeBSD.ORG> Cc: mobile@FreeBSD.ORG, hackers@FreeBSD.ORG Subject: Re: kern/24854: NEWCARD support for aironet driver an(4) Message-ID: <20010819194006.A36256@llama.com> In-Reply-To: <20010819091452.A86632@enterprise.spock.org>; from jon@FreeBSD.ORG on Sun, Aug 19, 2001 at 09:14:52AM -0400 References: <20010817011103.A25841@llama.com> <20010818110728.A20719@enterprise.spock.org> <20010818092654.C28694@llama.com> <20010818124503.A26350@enterprise.spock.org> <20010818212011.A33879@llama.com> <20010819091452.A86632@enterprise.spock.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Aug 19, 2001 at 09:14:52AM -0400, Jonathan Chen wrote: > Are you sure there is no panic while in X? Your X server might have > futzed with the video card so you might not actually see the panic. If you > can try to reproduce this in text mode, then the panic message as well as a > traceback would be a very good start. Hmmm...what I saw appeared to be a spontaneous reboot. Forgot to mention that earlier. > But before you do that, I believe I may have found a fix for a possible > panic situation. This panic occurs in witness_destroy as a supervisor read > page not present error (I presume while trying to dereference lock). This > panic can be easily reproduced by running dhclient an0, removing and > reinserting the card, then killing dhclient. The fix appears to be > shockingly simple: > > diff -u -r1.8 if_an_pccard.c > --- sys/dev/an/if_an_pccard.c 2001/05/26 09:26:58 1.8 > +++ sys/dev/an/if_an_pccard.c 2001/08/19 12:57:14 > @@ -118,6 +118,7 @@ > sc->an_gone = 1; > bus_teardown_intr(dev, sc->irq_res, sc->irq_handle); > an_release_resources(dev); > + mtx_destroy(&sc->an_mtx); > return (0); > } > Here's the panic and traceback (typed by hand, haven't set up serial console for this). This is BEFORE applying the patch to if_an_pccard.c, as with the patch, no panic occurs. Cool. Fatal trap 12: page fault while in kernel mode fault virtual addresss = 0xc fault code = supervisor read, page not present instruction pointer = 0x8:0xc027a577 stack pointer = 0x10:0xcd861d3c frame pointer = 0x10:0xcd861d48 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IPL = 0 current process = 542 (dhclient) kernel : type 12 trap, code=0 Stopped at witness_destroy+0x237: cmpl %esi,0xc(%edx) db> trace witness_destroy(c2577a58,c2577a00,cd861d68,c02acaf4,c2577a58) at witness_destroy +0x237 mtx_destroy(c2577a58,c2577a00,cd861d7c,c02aae8a,c2577a00) at mtx_destory+0x73 bpf_freed(c2577a00,cd8a20a0,cd83db80,cd861da4,c0234e6c) at bpf_freed+0x68 bpfclose)(c2574400,3,2000,cd83db80,c2574400) at bpfclose+0x136 spec_close(cd861dc4,cd861dd8,c02a85d4,cd861dc4,c2511080) at spec_close+0x90 spec_vnoperate(cd861dc4,c2511080,c2511080,c04354a0,cd8a20a0) at spec_vnoperate+0x15 vn_close(cd8a20a0,3,c2572f00,cd83db80,cd861e38) at vn_close+0x40 vn_closefile(c2511080,cd83db80,cd83db80,c2511080,c027ba56) at vn_closefile+0x1f fdrop(c2511080,cd83db80,ffffffff,c2577b50,c027acac) at fdrop+0xaf closef(c2511080,cd83db80) at closef+0x9b fdfree(cd83db80,cd83dce8) at fdfree+0x38 exit1(cd83db80,f,0,cd83db80,ffffbfff) at exit1+0x61d sigexit(cd83db80,f,ffffffff,4,cd83db80) at sigexit+0x2f7 postsig(f) at postsig+0xec userret(cd83db80,cd861a8,51f,1b,80a9aa0) at userret+0x5b6 syscall(bfbf002f,80a002f,bfbf002f,bfbfe174,80a9aa0) at syscall+0x67b syscall_with_err_pushed() at syscall_with_err_pushed+0x1b --- syscall (81, FreeBSD ELF, getpgrp), eip = 0x8055864, esp = 0xbfbfdcd8, ebp = 0xbfbfdd04 --- --Sam To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010819194006.A36256>