From owner-freebsd-current@FreeBSD.ORG Fri Mar 20 05:59:49 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2EBD31065672 for ; Fri, 20 Mar 2009 05:59:49 +0000 (UTC) (envelope-from weongyo.jeong@gmail.com) Received: from rv-out-0506.google.com (rv-out-0506.google.com [209.85.198.233]) by mx1.freebsd.org (Postfix) with ESMTP id E94BB8FC08 for ; Fri, 20 Mar 2009 05:59:48 +0000 (UTC) (envelope-from weongyo.jeong@gmail.com) Received: by rv-out-0506.google.com with SMTP id l9so927193rvb.43 for ; Thu, 19 Mar 2009 22:59:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:received:from:date:to:cc :subject:message-id:reply-to:mail-followup-to:references :mime-version:content-type:content-disposition:in-reply-to :user-agent:organization:x-operation-sytem; bh=dJFDNwV9aWlyHAWbk+8srVMs5y8K5zLtN2Hizz2LoqY=; b=ZMK1yeudX0psJAB11vhduvfviH5Y3N7uDHvVnkEv4p5TqFSp864MQRi90G5ykUaEBV jDpMwVdPiqaFzcUk53ZgWzQ4MHf6phn9DjYq8rOF6jyHmZgOc91sgGIJdY7aVQpa3iyv FvH+EL26eCdU4Iu0Z6sBbJSn5eol7YtR4mVh4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:date:to:cc:subject:message-id:reply-to:mail-followup-to :references:mime-version:content-type:content-disposition :in-reply-to:user-agent:organization:x-operation-sytem; b=KoCte1QYBI3nSACWKuFZCXAHrCDPUKVSurrFfC+Y4PCTEGjrL1kSIL+NVOvLOD86Q9 hFOHpTRTSnNT4btm7xhkvVRtlnN0eljT7/iuvsbCfFqiZBrqRxPMDsJFgPzpmLlDCLAD tTFgW1YLrIK73T4pjBfpNg8ZWW1vDkoduS9hs= Received: by 10.141.29.8 with SMTP id g8mr1168157rvj.283.1237528787701; Thu, 19 Mar 2009 22:59:47 -0700 (PDT) Received: from weongyo ([114.111.62.249]) by mx.google.com with ESMTPS id g14sm4037538rvb.49.2009.03.19.22.59.46 (version=SSLv3 cipher=RC4-MD5); Thu, 19 Mar 2009 22:59:47 -0700 (PDT) Received: by weongyo (sSMTP sendmail emulation); Fri, 20 Mar 2009 14:59:44 +0900 From: Weongyo Jeong Date: Fri, 20 Mar 2009 14:59:44 +0900 To: Ganbold Message-ID: <20090320055944.GB22527@weongyo.cdnetworks.kr> Mail-Followup-To: Ganbold , "freebsd-current@freebsd.org" References: <49C273C2.9000808@micom.mng.net> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="IrhDeMKUP4DT/M7F" Content-Disposition: inline In-Reply-To: <49C273C2.9000808@micom.mng.net> User-Agent: Mutt/1.4.2.3i Organization: CDNetworks. X-Operation-Sytem: FreeBSD Cc: "freebsd-current@freebsd.org" Subject: Re: ndis related panic in CURRENT X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Weongyo Jeong List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Mar 2009 05:59:49 -0000 --IrhDeMKUP4DT/M7F Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Fri, Mar 20, 2009 at 12:33:06AM +0800, Ganbold wrote: > Hi, > > When I tried to make wlan0 down (ndis driver for Intel 5100AGN) got > panic: > ... > Slab at 0x8cdd7cb8, freei 86 = 0. > panic: Duplicate free of item 0x8cdd7560 from zone 0x8148c380(16) > > cpuid = 0 > KDB: stack backtrace: > db_trace_self_wrapper(80a5d82b,84e06ba0,80729ff9,80a8d790,0,...) at > db_trace_self_wrapper+0x26 > kdb_backtrace(80a8d790,0,80a810e5,84e06bac,0,...) at kdb_backtrace+0x29 > panic(80a810e5,8cdd7560,8148c380,80a2c3b6,8,...) at panic+0x119 > uma_dbg_free(8148c380,8cdd7cb8,8cdd7560,9dc,8574286c,...) at > uma_dbg_free+0x17b > uma_zfree_arg(8148c380,8cdd7560,8cdd7cb8,24,85742800,...) at > uma_zfree_arg+0x6e > free(8cdd7560,80b2c4e0,88c3a1ec,cb3,854e8800,...) at free+0xca > ndis_stop(84e06c80,80cc13d8,85176964,80cc13d8,80b2e344,...) at > ndis_stop+0xe6 > ndis_ioctl_80211(854e8800,80206910,0,84e06cd4,807623cb,...) at > ndis_ioctl_80211+0x388 > parent_updown(854e8800,1,80a5ef36,54,85247b9c,...) at parent_updown+0x22 > taskqueue_run(85247b80,85247b9c,0,80a511b5,0,...) at taskqueue_run+0x10b > taskqueue_thread_loop(80b94068,84e06d38,80a56585,32d,80b7f400,...) at > taskqueue_thread_loop+0x68 > fork_exit(807624c0,80b94068,84e06d38) at fork_exit+0xb8 > fork_trampoline() at fork_trampoline+0x8 > --- trap 0, eip = 0, esp = 0x84e06d70, ebp = 0 --- > Uptime: 2h9m2s > Physical memory: 1979 MB > Dumping 400 MB: 385 369 353 337 321 305 289 273 257 241 225 209 193 177 > 161 145 129 113 97 81 65 49 33 17 1 > ... > > I'm running: > beastie# uname -an > FreeBSD beastie.micom.mng.net 8.0-CURRENT FreeBSD 8.0-CURRENT #5 > r190040M: Thu Mar 19 21:45:37 ULAT 2009 > tsgan@beastie.micom.mng.net:/usr/obj/usr/src/sys/DEVIL_WITNESS i386 > > Please let me know if you need more info. > > thanks, Just for preventing a panic could you please try to test attached patch though I'm not sure the patch is helpful? regards, Weongyo Jeong --IrhDeMKUP4DT/M7F Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="patch_ndis_20090320_5100agn.diff" ==== //depot/user/weongyo/wireless/src/sys/dev/if_ndis/if_ndis.c#14 - /mnt/l223/sys/dev/if_ndis/if_ndis.c ==== @@ -3250,8 +3250,10 @@ NDIS_LOCK(sc); for (i = 0; i < NDIS_EVENTS; i++) { - if (sc->ndis_evt[i].ne_sts && sc->ndis_evt[i].ne_buf != NULL) + if (sc->ndis_evt[i].ne_sts && sc->ndis_evt[i].ne_buf != NULL) { free(sc->ndis_evt[i].ne_buf, M_TEMP); + sc->ndis_evt[i].ne_buf = NULL; + } sc->ndis_evt[i].ne_sts = 0; sc->ndis_evt[i].ne_len = 0; } --IrhDeMKUP4DT/M7F--