ral(4) cardbus crash

[Max Herrgård <herrgard@xxxxxxxxx>]

Hi,

I get this crash when plugging in my ral(4) cardbus card.


DragonFly 2.7-DEVELOPMENT DragonFly v2.7.3.198.gba9d3-DEVELOPMENT #4: Sun Jun 20 09:03:45 CEST 2010   root@bender.luxh.ath.cx:/usr/obj/usr/src/sys/GENERIC  i386

GNU gdb (GDB) 7.0
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i386-dragonfly".
For bug reporting instructions, please see:
<http://bugs.dragonflybsd.org/>...
Reading symbols from /usr/home/crash/kern.0...done.

Unread portion of the kernel message buffer:
cardbus0: Expecting link target, got 0x0
ral0: <Ralink Technology RT2561S> mem 0x88008000-0x8800ffff irq 10 at device 0.0 on cardbus0
ral0: MAC/BBP RT2561C, RF RT2527


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x1f0
fault code		= supervisor read, page not present
instruction pointer	= 0x8:0xc0296ccb
stack pointer	        = 0x10:0xc7058cb0
frame pointer	        = 0x10:0xc7058cd0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= Idle
current thread          = pri 12 

kernel: type 12 trap, code=0
panic: from debugger


Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer	= 0x8:0xc054ff58
stack pointer	        = 0x10:0xc7058ac0
frame pointer	        = 0x10:0xc7058ac8
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, IOPL = 0
current process		= Idle
current thread          = pri 44 (CRIT)

panic: from debugger
Uptime: 49s
Physical memory: 215 MB
Dumping 48 MB: 33 17 1

Reading symbols from /boot/modules/vesa.ko...done.
Loaded symbols for /boot/modules/vesa.ko
Reading symbols from /boot/modules/acpi.ko...done.
Loaded symbols for /boot/modules/acpi.ko
_get_mycpu (di=0xc06d6380) at ./machine/thread.h:83
83	    __asm ("movl %%fs:globaldata,%0" : "=r" (gd) : "m"(__mycpu__dummy));
(kgdb) bt
#0  _get_mycpu (di=0xc06d6380) at ./machine/thread.h:83
#1  md_dumpsys (di=0xc06d6380) at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
#2  0xc0319ca5 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:839
#3  0xc031a220 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
#4  0xc031a346 in panic (fmt=0xc05acc8a "from debugger") at /usr/src/sys/kern/kern_shutdown.c:745
#5  0xc0178989 in db_panic (addr=-1071026997, have_addr=0, count=-1, modif=0xc7058b28 "") at /usr/src/sys/ddb/db_command.c:448
#6  0xc0178ffe in db_command () at /usr/src/sys/ddb/db_command.c:344
#7  db_command_loop () at /usr/src/sys/ddb/db_command.c:470
#8  0xc017b60c in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:71
#9  0xc05500c4 in kdb_trap (type=12, code=0, regs=0xc7058c68) at /usr/src/sys/platform/pc32/i386/db_interface.c:152
#10 0xc0561e54 in trap_fatal (frame=0xc7058c68, eva=<value optimized out>) at /usr/src/sys/platform/pc32/i386/trap.c:1120
#11 0xc0561fb6 in trap_pfault (frame=0xc7058c68, usermode=0, eva=496) at /usr/src/sys/platform/pc32/i386/trap.c:1026
#12 0xc0562488 in trap (frame=0xc7058c68) at /usr/src/sys/platform/pc32/i386/trap.c:713
#13 0xc0551497 in calltrap () at /usr/src/sys/platform/pc32/i386/exception.s:785
#14 0xc0296ccb in ral_pci_attach (dev=0xc14d3a58) at /usr/src/sys/dev/netif/ral/if_ral_pci.c:209
#15 0xc0330953 in DEVICE_ATTACH (dev=0xc14d3a58) at ./device_if.h:40
#16 device_doattach (dev=0xc14d3a58) at /usr/src/sys/kern/subr_bus.c:1662
#17 0xc03312c0 in device_probe_and_attach (dev=0xc14d3a58) at /usr/src/sys/kern/subr_bus.c:1622
#18 0xc0184cf9 in cardbus_attach_card (cbdev=0xc14c60d8) at /usr/src/sys/dev/pccard/cardbus/cardbus.c:208
#19 0xc018195d in CARD_ATTACH_CARD (arg=0xc6fe5400) at ./card_if.h:67
#20 cbb_insert (arg=0xc6fe5400) at /usr/src/sys/dev/pccard/pccbb/pccbb.c:526
#21 cbb_event_thread (arg=0xc6fe5400) at /usr/src/sys/dev/pccard/pccbb/pccbb.c:469
#22 0xc030d1ff in suspend_kproc (td=) at /usr/src/sys/kern/kern_kthread.c:158
Backtrace stopped: previous frame inner to this frame (corrupt stack?)


Core and kernel are available in leaf~mh/crash


Max