Re: ral(4) problems.

[Joe Talbott <josepht@xxxxxxxxxx>]

On Sun, Jul 25, 2010 at 04:59:55PM +0200, Max Herrg?rd wrote:
> This is a continuation of issue 1785: http://bugs.dragonflybsd.org/issue1785
> 
> I'm now running with BUS_DMA_NOWAIT as Joe Talbott told me. See attached patch.
> 
> My problem right now is when I fool around with wpa_supplicant. On a second use it panics. 
> 
> zoidberg# ifconfig wlan0 create wlandev ral0 up
> ral0: need multicast update callback
> zoidberg# wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf 
> Trying to associate with 00:1d:7e:f0:fd:1f (SSID='moh' freq=2422 MHz)
> Associated with 00:1d:7e:f0:fd:1f
> WPA: Key negotiation completed with 00:1d:7e:f0:fd:1f [PTK=CCMP GTK=CCMP]
> CTRL-EVENT-CONNECTED - Connection to 00:1d:7e:f0:fd:1f completed (auth) [id=0 id_str=]
> ^C
> CTRL-EVENT-TERMINATING - signal 2 received
> ioctl[SIOCS80211, op 20, len 7]: Can't assign requested address
> ioctl[SIOCS80211, op 26, arg 0x0]: Operation not supported
> Failed to disable WPA in the driver.
> ioctl[SIOCS80211, op 26, arg 0x0]: Operation not supported
> ELOOP: remaining socket: sock=4 eloop_data=0x283c0080 user_data=0x28400070 handler=0x806518b
> zoidberg# wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf
> *panic*
> 
> Same if I set it up in rc.conf and do a 'rcrestart netif'
> 
> The panic looks like this:
> 
> Unread portion of the kernel message buffer:
> 
> 
> Fatal trap 12: page fault while in kernel mode
> fault virtual address	= 0
> fault code		= supervisor read, page not present
> instruction pointer	= 0x8:0xc029fcfc
> stack pointer	        = 0x10:0xd7c78cb8
> frame pointer	        = 0x10:0xd7c78d08
> code segment		= base 0x0, limit 0xfffff, type 0x1b
> 			= DPL 0, pres 1, def32 1, gran 1
> processor eflags	= interrupt enabled, resume, IOPL = 0
> current process		= Idle
> current thread          = pri 60 (CRIT)
> 
> kernel: type 12 trap, code=0
> panic: from debugger
> 
> 
> Fatal trap 3: breakpoint instruction fault while in kernel mode
> instruction pointer	= 0x8:0xc05517f8
> stack pointer	        = 0x10:0xd7c78ac8
> frame pointer	        = 0x10:0xd7c78ad0
> code segment		= base 0x0, limit 0xfffff, type 0x1b
> 			= DPL 0, pres 1, def32 1, gran 1
> processor eflags	= interrupt enabled, IOPL = 0
> current process		= Idle
> current thread          = pri 92 (CRIT)
> 
> panic: from debugger
> Uptime: 3m49s
> Physical memory: 2038 MB
> Dumping 159 MB: 144 128 112 96 80 64 48 32 16
> 
> Reading symbols from /boot/modules/vesa.ko...done.
> Loaded symbols for /boot/modules/vesa.ko
> Reading symbols from /boot/modules/snd_emu10k1.ko...done.
> Loaded symbols for /boot/modules/snd_emu10k1.ko
> Reading symbols from /boot/modules/sound.ko...done.
> Loaded symbols for /boot/modules/sound.ko
> Reading symbols from /boot/modules/dsched_fq.ko...done.
> Loaded symbols for /boot/modules/dsched_fq.ko
> Reading symbols from /boot/modules/acpi.ko...done.
> Loaded symbols for /boot/modules/acpi.ko
> Reading symbols from /boot/modules/ehci.ko...done.
> Loaded symbols for /boot/modules/ehci.ko
> _get_mycpu (di=0xc06d8280) at ./machine/thread.h:83
> 83	    __asm ("movl %%fs:globaldata,%0" : "=r" (gd) : "m"(__mycpu__dummy));
> (kgdb) bt
> #0  _get_mycpu (di=0xc06d8280) at ./machine/thread.h:83
> #1  md_dumpsys (di=0xc06d8280) at /usr/src/sys/platform/pc32/i386/dump_machdep.c:263
> #2  0xc031a259 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:839
> #3  0xc031a7d4 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:388
> #4  0xc031a8fa in panic (fmt=0xc05ae872 "from debugger") at /usr/src/sys/kern/kern_shutdown.c:745
> #5  0xc0178965 in db_panic (addr=-1070990084, have_addr=0, count=-1, modif=0xd7c78b30 "") at /usr/src/sys/ddb/db_command.c:448
> #6  0xc0178fda in db_command () at /usr/src/sys/ddb/db_command.c:344
> #7  db_command_loop () at /usr/src/sys/ddb/db_command.c:470
> #8  0xc017b5e8 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:71
> #9  0xc0551964 in kdb_trap (type=12, code=0, regs=0xd7c78c70) at /usr/src/sys/platform/pc32/i386/db_interface.c:152
> #10 0xc05637a0 in trap_fatal (frame=0xd7c78c70, eva=<value optimized out>) at /usr/src/sys/platform/pc32/i386/trap.c:1120
> #11 0xc0563902 in trap_pfault (frame=0xd7c78c70, usermode=0, eva=0) at /usr/src/sys/platform/pc32/i386/trap.c:1026
> #12 0xc0563dd4 in trap (frame=0xd7c78c70) at /usr/src/sys/platform/pc32/i386/trap.c:713
> #13 0xc0552d37 in calltrap () at /usr/src/sys/platform/pc32/i386/exception.s:785
> #14 0xc029fcfc in rt2661_tx_intr (arg=0xd7bfc748) at /usr/src/sys/dev/netif/ral/rt2661.c:902
> #15 rt2661_intr (arg=0xd7bfc748) at /usr/src/sys/dev/netif/ral/rt2661.c:1204
> #16 0xc03251db in lwkt_serialize_handler_call (s=0xc48e95e4, func=0xc029f765 <rt2661_intr>, arg=0xd7bfc748, frame=0x0) at /usr/src/sys/kern/lwkt_serialize.c:228
> #17 0xc02fb49e in ithread_handler (arg=0xb) at /usr/src/sys/kern/kern_intr.c:814
> #18 0xc0322b2f in lwkt_deschedule_self (td=Cannot access memory at address 0x8) at /usr/src/sys/kern/lwkt_thread.c:250
> Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Max,

Can you upload your kernel image and core to leaf so I can take a
look?

Thanks,
Joe
> 
> 
> Max