From owner-freebsd-wireless@FreeBSD.ORG Mon Jan 27 11:06:57 2014 Return-Path: Delivered-To: freebsd-wireless@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CDF7AD50 for ; Mon, 27 Jan 2014 11:06:57 +0000 (UTC) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 9CED41A9E for ; Mon, 27 Jan 2014 11:06:57 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id s0RB6vL1013207 for ; Mon, 27 Jan 2014 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id s0RB6vCN013205 for freebsd-wireless@FreeBSD.org; Mon, 27 Jan 2014 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 27 Jan 2014 11:06:57 GMT Message-Id: <201401271106.s0RB6vCN013205@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-wireless@FreeBSD.org Subject: Current problem reports assigned to freebsd-wireless@FreeBSD.org X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2014 11:06:57 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/185478 wireless [iwi] panic in iwi0 driver o kern/185425 wireless [iwn] iwn difficulties in busy radio environments o kern/185223 wireless Intel Centrino Advanced–N + WiMAX 6250: WEP vs WPA o kern/185025 wireless [iwi] iwi driver panic on 10.0rc2 o kern/184762 wireless Wlan(Intel Centrino Wireless-N 1000) can't connect to o kern/184756 wireless [iwn] iwn(4) (5100 model) radio peridiocally gets disa o kern/184692 wireless [iwi] [panic] kernel panic in iwi0 driver o conf/184657 wireless freebsd 10 unable to connect hidden wifi o kern/184631 wireless [iwn] [patch] hook in iwn2000fw and iwn2030fw to kerne o kern/184626 wireless [wlan] wlan0 missing some ifmib(4) data o kern/183759 wireless [iwn] [wlan] Interface dies, OACTIVE set on wlan0 o kern/183727 wireless [wlan] ENOBUFFS incorrectly returned when tx packet is o kern/183644 wireless [ath] [patch] ath(4) "stops" working o kern/183430 wireless [iwn] latest change to the rate code setup uses 11n ra o kern/183428 wireless [net80211] [iwn] Some APs seem to announce HT but no H o kern/181898 wireless [iwn] [patch] Centrino Advanced-N 6235 with latest iwn o kern/181694 wireless [iwn] [patch] Initialize hardware in iwn(4) resume cod o kern/181161 wireless [wl] config a old compaq wl-110 wireless card make ker o kern/181132 wireless [iwn] stream calculation is wrong for the Intel 4965 o kern/181100 wireless [bwi] Turning up bwi0 crashes / deadlocks the kernel o kern/180816 wireless [iwl] Intel Centrino Wireless-N 2200 not supported o kern/179847 wireless [ath] [patch] Update regdomain in ath drivers includin o kern/179709 wireless [ath] Atheros 5212 does not work: stuck beacon; resett o kern/179547 wireless [ath] Add AR9485 custom board fixes (CUS198) o kern/179482 wireless [ath] [patch] Fix AR9462 external LNA configuration o kern/179269 wireless [ath] [AR9285] RX antenna diversity is not functioning o kern/179232 wireless [ath] panic in ath o kern/178986 wireless [ath] Change mac address of ath(4) is not reflected wh o kern/178492 wireless [ath] ath0 (AR9287) panic o kern/178491 wireless [ath] ath0 (AR9287) stuck beacon o kern/178477 wireless [ath] missed beacon / soft reset in STA mode results i o kern/178470 wireless [panic][ath] bss vap can and does change o kern/178411 wireless [ral] [panic] FreeBSD kernel crash in rt2860 o kern/178379 wireless [net80211] [ath] WPA rekey on the STA side fails when o kern/178378 wireless [net80211] crypto state isn't reset during a reassocia o kern/178263 wireless [ath] review the use of ic_freq / ic_ieee / ic_flags / o kern/177847 wireless [ath] With TPC enabled, TX power values aren't clamped o kern/177846 wireless [ath] [net80211] net80211 TX power limit isn't correct o conf/177688 wireless WiFi regodmains information is inconsistent between "e o kern/177530 wireless [ath] ath driver isn't 32 bit int clean o kern/177465 wireless [iwn] 20%-100% packet loss with iwn driver o kern/177451 wireless [ieee80211] page fault in ieee80211_tx_mgt_timeout o kern/176238 wireless [ath] [patch] Correct buffer size calculation and simp o kern/176201 wireless [net80211] [patch] 11n station includes unrelated ht p o kern/176104 wireless [iwn] iwn0: iwn_intr: fatal firmware error o kern/175722 wireless [ath]lot of bad seriesx hwrate in kernel messages o kern/175446 wireless [ath] high volumes of PHY errors lead to BB/MAC hangs o kern/175227 wireless [ath] beacon timers aren't necessarily reprogrammed af o kern/175183 wireless [iwn] iwn(4) becomes unresponsive during initial confi o kern/175053 wireless [iwn] iwn firmware error on 9-stable with Ultimate-N 6 o kern/174891 wireless [ieee80211] struct ieee80211_node is freed during acti o kern/174722 wireless [wlan] can't use channel 12 and 13 (14) with my wifi i o kern/174661 wireless [wlan] lost alias on wlan interface o kern/174283 wireless [net80211] panics in ieee80211_ff_age() and ieee80211_ o kern/174276 wireless [ath] if_ath memory modified after free o kern/174273 wireless [net80211] taking down a net80211 node with active fas o kern/173917 wireless [iwn] wpa-supplicant issues on iwn o kern/173898 wireless [iwn] [patch] iwn(4) DOES support 6235 chip. o kern/173883 wireless [ath] ath0: unable to attach - pci issue? o kern/173711 wireless [ath] powerd kills ath on the Asus EeePC 1005HA o kern/173342 wireless PS-Poll isn't working o kern/173336 wireless [ath] Atheros card improper device poweroff handling o o kern/172955 wireless [ath] 11n does not work in adhoc mode o kern/172706 wireless [wpi] wpi0 fails to load firmware when using country o kern/172672 wireless [ubt] Bluetooth device recognised but not working o kern/172661 wireless hostapd(8) securing wireless adapter in HostAP mode is o kern/172338 wireless [ath] [net80211] CCMP IV transmit counters are not cor o kern/171598 wireless [ath] TP-Link TL-WN951N W-LAN PCI Adapter 300 MBit stu o kern/171235 wireless [ath] ath loses connection, system freezes on netif re o kern/170889 wireless [ath] ath driver uses some uninitilized memory o kern/170620 wireless [ath] LOR and deadlock when multiple vaps are used o kern/170573 wireless [iwi] Intel 2200BG iwi NIC hangs with need multicast c o kern/170513 wireless [ath] ath logs: ath_tx_aggr_comp_aggr: AR5416 bug: o kern/170433 wireless [ath] TX hang after a stuck beacon message with active o kern/170411 wireless [ath] Uninitialized variables in if_ath.c o kern/170397 wireless [ath] [patch] Uninitialized variables in ah_eeprom_928 o kern/170302 wireless [ath] 802.11n frames are not being transmitted with mu o kern/170281 wireless [ath] 802.11n locks up on aggregation setup (ampdutx) o kern/170098 wireless [ath] [net80211] VAPs (Virtual access points) with Ath o kern/170066 wireless [ral] ral(4) rt61pci Linksys freezes the machine as so o kern/169432 wireless [ath] BAR TX hang when aggregation session is reset du p kern/169362 wireless [ath] AR5416: radar pulse PHY errors sometimes include o kern/169336 wireless [ath] ANI isn't triggering in a busy/noisy environment o kern/169199 wireless [ath] Cannot set up static ip addresses for wireless w o kern/169084 wireless [ath] suspend/resume doesn't cause a rescan; the assoc o kern/168530 wireless [ath] Broken WEP probably o kern/168393 wireless AR9285: suspend/resume sometimes fails o kern/168170 wireless [net80211] ieee80211_send_bar() doesn't complete corre o kern/167870 wireless [ath] adhoc wifi client does not join an existing IBSS o kern/167834 wireless [ath] kickpcu; 'handled 0 packets' o kern/167828 wireless [iwn] iwn(4) doesn't recover automatically after firmw o kern/167798 wireless ifconfig(8): problem with "ifconfig list scan" command o kern/167491 wireless [ath] TID != hardware queue TID in ath_tx_aggr_comp_ag o kern/167113 wireless [ath] AR5210: "stuck" TX seems to be occuring, without o kern/167080 wireless [ath] channel switch on another VAP break channel setu o kern/166684 wireless [ath] [net80211] mgmtrate/mcastrate isn't updated base p kern/166642 wireless [ieee80211] [patch] in 802.11n mode for FreeBSD AP, ha o kern/166641 wireless [ieee80211] [patch] mbuf/cluster leak in AP mode in 80 p kern/166357 wireless [ath] 802.11n TX stall when the first frame in the BAW o kern/166286 wireless [net80211] [ath] initial switch to HT40 isn't causing p kern/166190 wireless [ath] TX hangs and frames stuck in TX queue o kern/166086 wireless [Patch][ath] Reflect state of rfkill switch in a sysct o kern/165969 wireless [ath] Slower performance in adhoc mode vs Client/AP mo o kern/165966 wireless [ath] ath0: device timeout on SMP machines due to race o kern/165895 wireless [ath] overly busy cabq can tie up all tx buffers o kern/165870 wireless [bwn] bwn driver does not attach on HP Pavilion dv9420 o kern/165866 wireless [ath] TX hangs, requiring a "scan" to properly reset t o kern/165849 wireless [ath] [hang] network ath driver freeze o kern/165595 wireless [ipw] ipw(4): Can't load firmare for ipw2200bg o kern/165543 wireless [ath] ath0 endless scanning of channels without connec o kern/165517 wireless [net80211] bgscan isn't triggered when invalid beacons o kern/165475 wireless [ath] operational mode change doesn't poke the underly o kern/165382 wireless [kernel] taskqueue_unblock doesn't unblock currently q o kern/165306 wireless [ath] race conditions between scanning and beacon time o kern/165220 wireless [ath] "ath_rx_tasklet: sc_inreset_cnt > 0; skipping" m o kern/165214 wireless [ieee80211] Kernel panic in ieee80211_output.c:2505 o kern/165212 wireless [ath] No WiFi on Acer Aspire One 751h (Atheros AR5BHB6 o kern/165149 wireless [ath] [net80211] Ping with data length more than iv_fr o kern/165146 wireless [net80211] Net802.11 Fragment number is assigned 1 (sh o kern/165060 wireless [ath] vap->iv_bss race conditions causing crashes insi o kern/165021 wireless [ath] ath device timeout during scan/attach, if wlan_c o kern/164721 wireless [ath] ath device timeouts o kern/164382 wireless [ath] crash when down/deleting a vap - inside ieee8021 o kern/164365 wireless [iwi] iwi0: UP/DOWN in o bin/164102 wireless hostapd not configured for 802.11n o kern/163759 wireless [ath] ath(4) "stops working" in hostap mode o kern/163724 wireless [mwl] [patch] NULL check before dereference o kern/163719 wireless [ath] ath interface do not receive multicast o kern/163689 wireless [ath] TX timeouts when sending probe/mgmt frames durin o kern/163574 wireless [net80211] overly-frequent HT occupancy changes o kern/163573 wireless [ath] hostap mode TX buffer hang o kern/163559 wireless [ath] kernel panic AH_DEBUG o kern/163318 wireless [ath] ath(4) stops working p kern/163312 wireless [panic] [ath driver] kernel panic: page fault with ath o kern/163237 wireless [ath] AR5416 as HostAP. Delays among clients when a cl o kern/163082 wireless [ath] ar9285 diversity fixes o kern/162648 wireless [ath] AR9227 ADC DC calibration failure o kern/162647 wireless [ath] 11n TX aggregation session / TX hang o kern/161293 wireless [iwn] hang at startup when starting network o kern/161035 wireless [ieee80211] Incorrect number describing 11ng MCS rate o kern/160391 wireless [ieee80211] [patch] Panic in mesh mode o kern/160296 wireless [zyd] [panic] 802.11 usb device reboots system on 'ifc o misc/160176 wireless [mips] [panic] Kernel panic on AR7161 platform with AR o kern/157449 wireless [ath] MAC address conflict causes system to freeze o kern/157243 wireless [ath] investigate beacon TX (AP) / RX (STA) when under o kern/156904 wireless [ath] AR9285 antenna diversity algorithm is buggy and o kern/156884 wireless [ath] ath instablity o kern/156327 wireless [bwn] bwn driver causes 20%-50% packet loss o kern/156322 wireless [wpi] no ahdemo support for if_wpi o kern/156321 wireless [ath] ahdemo doesn't work with if_ath o kern/155498 wireless [ral] ral(4) needs to be resynced with OpenBSD's to ga o kern/155100 wireless [ath] ath driver on busy channel: "stuck beacon" p kern/154598 wireless [ath] Atheros 5424/2424 can't connect to WPA network o kern/154567 wireless [ath] ath(4) lot of bad series(0) o kern/154327 wireless [ath] AR5416 in station mode hangs when transmitting f o kern/154284 wireless [ath] Modern ath wifi cards (such as AR9285) have miss o kern/154153 wireless [ath] AR5213 + MIPS + WPA group key packet corruption o kern/153594 wireless [wlan] netif/devd race o kern/153448 wireless [ath] ath networking device loses association after a o kern/152750 wireless [ath] ath0 lot of bad series hwrate o kern/151198 wireless [ath] ath/5416 fails bgscan with "ath0: ath_chan_set: o kern/149786 wireless [bwn] bwn on Dell Inspiron 1150: connections stall o kern/149516 wireless [ath] ath(4) hostap with fake MAC/BSSID results in sta o kern/149373 wireless [realtek/atheros]: None of my network card working o kern/148322 wireless [ath] Triggering atheros wifi beacon misses in hostap o kern/148317 wireless [ath] FreeBSD 7.x hostap memory leak in net80211 or At o kern/148078 wireless [ath] wireless networking stops functioning o kern/146426 wireless [mwl] 802.11n rates not possible on mwl o kern/146425 wireless [mwl] mwl dropping all packets during and after high u o kern/145826 wireless [panic] [ath] Unable to configure adhoc mode on ath0/w o kern/144987 wireless [wpi] [panic] injecting packets with wlaninject using o kern/144755 wireless [wlan] netif/devd race o bin/144109 wireless hostapd(8) uses the MAC of the wireless interface, but o conf/143079 wireless hostapd(8) startup missing multi wlan functionality p kern/140567 wireless [ath] [patch] ath is not worked on my notebook PC o kern/140245 wireless [ath] [panic] Kernel panic during network activity on o kern/137592 wireless [ath] panic - 7-STABLE (Aug 7, 2009 UTC) crashes on ne o kern/136943 wireless [wpi] [lor] wpi0_com_lock / wpi0 o kern/136836 wireless [ath] atheros card stops functioning after about 12 ho o kern/132722 wireless [ath] Wifi ath0 associates fine with AP, but DHCP or I o bin/131549 wireless ifconfig(8) can't clear 'monitor' mode on the wireless o kern/126475 wireless [ath] [panic] ath pcmcia card inevitably panics under o kern/125721 wireless [ath] Terrible throughput/high ping latency with Ubiqu o kern/125617 wireless [ath] [panic] ath(4) related panic o kern/125501 wireless [ath] atheros cardbus driver hangs o kern/125332 wireless [ath] [panic] crash under any non-tiny networking unde o kern/124767 wireless [iwi] Wireless connection using iwi0 driver (Intel 220 o kern/124753 wireless [ieee80211] net80211 discards power-save queue packets o kern/121061 wireless [ath] [panic] panic while ejecting ath(4)-adapter duri o docs/120456 wireless ath(4) needs to specify requirement on wlan_scan_sta o kern/119513 wireless [ath] [irq] inserting dlink dwl-g630 wireless card res o kern/116747 wireless [ndis] FreeBSD 7.0-CURRENT crash with Dell TrueMobile f kern/105348 wireless [ath] ath device stopps TX 193 problems total. From owner-freebsd-wireless@FreeBSD.ORG Mon Jan 27 19:17:51 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F4CDE5C for ; Mon, 27 Jan 2014 19:17:51 +0000 (UTC) Received: from mail-ee0-x22c.google.com (mail-ee0-x22c.google.com [IPv6:2a00:1450:4013:c00::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 067AB17AC for ; Mon, 27 Jan 2014 19:17:50 +0000 (UTC) Received: by mail-ee0-f44.google.com with SMTP id c13so2463480eek.3 for ; Mon, 27 Jan 2014 11:17:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=H0awnsYw3Kxz7MmZmmyhlir8q0E6SbJjKpZvp87WKRs=; b=J5kOZara8harIi7wTn6xlm8TARtA6vk+rmg4RMX3o7GaaFJmqTp00mju6fnv9YNVv+ xnOuf8UMMGYLi83crdgbqCnJpg0nqdDdzdTSjdA5n3xmQxANfl9AYcT03Q3BsmeOS+zH FY1v7nrpex9F3yBxAWtTznIweP9fyP+0+79hTIBoNWqnd3XKXff/0rkG3QKsa9hTU+rq VDcUTh782DMgrdNTvaFbTjGQJpkHdrKQ5jL3//Xc3m1Kt6XDd4rvXbe+oJlwUy1OkhbC iSaQw+AbQhFhS7c9N2XmBTFpJVox9RvVu3/BcGd8Aq3onccRzSq6Dn83azpdYYOW15i5 p7kA== MIME-Version: 1.0 X-Received: by 10.14.209.129 with SMTP id s1mr26660878eeo.21.1390850269505; Mon, 27 Jan 2014 11:17:49 -0800 (PST) Received: by 10.14.2.66 with HTTP; Mon, 27 Jan 2014 11:17:49 -0800 (PST) In-Reply-To: References: Date: Mon, 27 Jan 2014 11:17:49 -0800 Message-ID: Subject: Re: Cannot get wireless to work From: hiren panchasara To: Harshad D Content-Type: text/plain; charset=UTF-8 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2014 19:17:51 -0000 On Fri, Jan 24, 2014 at 10:09 PM, Harshad D wrote: > hello! > > Hi all, first post here. > Installed FreeBSD for the first time on my laptop. Have followed the > Handbook and got most things like X, XFCE, X config etc working. > > However, I am really having trouble trying to get wireless working. I have > tried the following till now: > > This is an extract about the wireless hardware from [cmd]pciconf[/cmd]: > > vendor = 'Broadcom Corporation' > device = 'BCM4312 802.11b/g LP-PHY' > class = network > > > So, as per the Handbook, I should use the bwn (4) driver. > > i have done the following till now: > > > Installed [file]bwn-firmware-kmod[/file] from ports > Added the following to [file]/boot/loader.conf[/file] > if_bwn_load="YES" > bwn_v4__lp_ucode_load="YES" Is this just a typo in email? (the double underscores) Should be bwn_v4_lp_ucode_load="YES" Also, once you boot up, what do you see when you do "kldstat"? cheers, Hiren > # if_bwi_load="YES" > wlan_scan_ap_load="YES" > wlan_scan_sta_load="YES" > wlan_wep_load="YES" > wlan_ccmp_load="YES" > wlan_tkip_load="YES"[/code] > > added this to rc.conf > wlans_bwn0="wlan0" > ifconfig_wlan0="ssid HSD DHCP" > > ****I am not sure about the DHCP part here. just something I have tried. > > And tried all that's shown here [url] > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-wireless.html[/url] > . > > But still it doesn't work. ifconfig wlan0 up scan gives nothing: > root@BSDbox:~ # ifconfig wlan0 scan > root@BSDbox:~ # > > > dmesg output is: > > root@BSDbox:~ # dmesg|tail > bwn0: the fw file(bwn_v4_lp_ucode15) not found > bwn-open_v4_lp_ucode15: could not load firmware image, error 2 > bwn0: the fw file(bwn-open_v4_lp_ucode15) not found > ubt0: 2> on usbus0 > WARNING: attempt to domain_add(bluetooth) after domainfinalize() > WARNING: attempt to domain_add(netgraph) after domainfinalize() > bwn_v4_lp_ucode15: could not load firmware image, error 2 > bwn0: the fw file(bwn_v4_lp_ucode15) not found > bwn-open_v4_lp_ucode15: could not load firmware image, error 2 > bwn0: the fw file(bwn-open_v4_lp_ucode15) not found > > > ifconfig output: > > root@BSDbox:~ # ifconfig > bwn0: flags=8803 metric 0 mtu 2290 > ether 00:26:5e:46:3e:ba > nd6 options=29 > media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) > status: no carrier > re0: flags=8843 metric 0 mtu 1500 > options=8209b > ether 00:23:5a:c6:da:5b > inet6 fe80::223:5aff:fec6:da5b%re0 prefixlen 64 scopeid 0x2 > inet 192.168.0.104 netmask 0xffffff00 broadcast 192.168.0.255 > nd6 options=23 > media: Ethernet autoselect (100baseTX ) > status: active > lo0: flags=8049 metric 0 mtu 16384 > options=600003 > inet6 ::1 prefixlen 128 > inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3 > inet 127.0.0.1 netmask 0xff000000 > nd6 options=21 > wlan0: flags=8802 metric 0 mtu 1500 > ether 00:26:5e:46:3e:ba > nd6 options=29 > media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) > status: no carrier > ssid HSD channel 1 (2412 MHz 11b) > country US authmode WPA1+WPA2/802.11i privacy OFF txpower 30 bmiss 7 > scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 > roam:rate 1 wme bintval 0 > > > I can see that the firmware file is not being loaded. How do I get it to > load? I checked the /boot/firmware folder and it's empty. So I manually > copied.fw files from the bwn ports directory, but that didn't work either. > I tried renaming the module files (.ko) in /boot/modules to what the OS is > looking for, but that failed too. I am almost at my wit's end now, and > don't know how to go on from here. What do I need to do? > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" From owner-freebsd-wireless@FreeBSD.ORG Mon Jan 27 22:16:20 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6F47E411 for ; Mon, 27 Jan 2014 22:16:20 +0000 (UTC) Received: from mail-qc0-x236.google.com (mail-qc0-x236.google.com [IPv6:2607:f8b0:400d:c01::236]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 301DF1706 for ; Mon, 27 Jan 2014 22:16:20 +0000 (UTC) Received: by mail-qc0-f182.google.com with SMTP id c9so9108565qcz.27 for ; Mon, 27 Jan 2014 14:16:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=zVgqnT9FmxjooiBaqsHunuX3iRfY/0Fjsy+LNa1S66k=; b=uuGBBl4kpEzK0kzO3MhD1AFHTyzjjx2eEg/zQGMeUjfn/Zr1IG1hKi/bWXHJsdubhQ YZdy6iaFkgaDtfVuNhyAyKKCOVjVuwfEiZKoy3fah0T2EKNut3Ayk1/y4KxuCctAf0Sl nCwKKmBBGm+0a4D29YRVwPEIkEu1MIO1Cr9PXImJAAnr3/X2ExHCjhBIrgzLvriqU+fo uMUrjudx+SsLcYoivI5DPnjp6fpffhTe4vsG/s0C+8kqfhrkHXHaWE1TuudGqU3yGASN GIwoknk9Ylg4M3AusV7Ado2j5cSXcFWLd98dPXt5NCD3OolviPtHOl9A8S8/Z/K8oev7 jEwg== MIME-Version: 1.0 X-Received: by 10.224.156.68 with SMTP id v4mr46816166qaw.66.1390860979294; Mon, 27 Jan 2014 14:16:19 -0800 (PST) Received: by 10.140.27.151 with HTTP; Mon, 27 Jan 2014 14:16:19 -0800 (PST) Date: Mon, 27 Jan 2014 20:16:19 -0200 Message-ID: Subject: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: freebsd-wireless@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2014 22:16:20 -0000 Hi, I have a FreeBSD home router and I use a Ralink 3070 USB device (driver: run) as the WiFi interface. Everything was fine until I upgraded from 9.2 to 10.0-RELEASE (amd64) today (fresh install). I'm using the same configuration files that I was using for everything, but this time hostapd crashes the system as soon I start it (lots of kernel debug messages and "reboot in 15 seconds" message dumped to the console). Anyone has seem this same problem? Perhaps with a different WiFi device? I can provide information as needed. Thanks, pflynn From owner-freebsd-wireless@FreeBSD.ORG Mon Jan 27 22:43:18 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1DCBB918 for ; Mon, 27 Jan 2014 22:43:18 +0000 (UTC) Received: from mail-ea0-x234.google.com (mail-ea0-x234.google.com [IPv6:2a00:1450:4013:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id AB3341916 for ; Mon, 27 Jan 2014 22:43:17 +0000 (UTC) Received: by mail-ea0-f180.google.com with SMTP id o10so2045646eaj.39 for ; Mon, 27 Jan 2014 14:43:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=9Balha81LEVJLcPZa7rIFwkQVveYPqyfSD74rgH/NY0=; b=YOF5YziVtY4e5gzsHQRVW4TMntBaiULfBkxxv50x6qHny7KjySXB7wHPqtC2goqfJR ZNfzAHyx8Vgmuoxe0+mQbDUozJq3BIiakeFK9VUETBLH13iB79FR6QQNubrhJ666zNU4 kxE16LbacDDf+GWu/Os3PJeJzEx4xBeUq5igS7A6p040ucyQceElQm1dtQLGFgcXdaBm qaunynYr19FENCTMZOuNVTjNXQ7TULkYITtKbl45SZ1Are2cFi3nH7LV+Cl3kfF1abzf epfafxlbdopwex2XCg5SrYCCcpdmu7tT1lot5fGV8BkY2WiyOr6jZOTWvH6syDbEk597 tGxg== MIME-Version: 1.0 X-Received: by 10.15.110.8 with SMTP id cg8mr27390996eeb.42.1390862596183; Mon, 27 Jan 2014 14:43:16 -0800 (PST) Received: by 10.14.2.66 with HTTP; Mon, 27 Jan 2014 14:43:16 -0800 (PST) In-Reply-To: References: Date: Mon, 27 Jan 2014 14:43:16 -0800 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: hiren panchasara To: Pedro Flynn Content-Type: text/plain; charset=UTF-8 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jan 2014 22:43:18 -0000 On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn wrote: > I can provide information as needed. Sharing lots of kernel debug messages that you are seeing might be a good start :-) cheers, Hiren From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 07:16:30 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4DB55410; Tue, 28 Jan 2014 07:16:30 +0000 (UTC) Received: from mail-pd0-x236.google.com (mail-pd0-x236.google.com [IPv6:2607:f8b0:400e:c02::236]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 13D411F79; Tue, 28 Jan 2014 07:16:30 +0000 (UTC) Received: by mail-pd0-f182.google.com with SMTP id v10so6187pde.27 for ; Mon, 27 Jan 2014 23:16:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=jidnN1AOVCs5gApHG0S758txJYP83NXFxdZ2ktXNrcc=; b=rI+UjxrboKupplerj6VzQ2iqL2GlIgTb5bu2p3otJbJFWT2G1elOfYj4wwnTEOE/4b FbGyq4kUwqytUYKTbTJSl3kynG7q0GQAkqPo29uXJSJfvjGynM005liVp4SGE5ffoEOs hcl/t1Wn9fLFkz/NxAeUwQG13FzqL/Dbd4kBoPw+I1H7LiHqvG41keX41bEdLy2/L9Zt yzXMpLVIiDkfxDHV32qyj8v8efzPWiUIXhC2x32rhHPvf2gC7gVvip7O1PUMrsgozYOP IVdonCCR9X9NuWwBVor5yBk8C4oBFF/3RFVX75qajBJ+t5MRQAikwCMhLL/oJUu+WUyN TOWg== MIME-Version: 1.0 X-Received: by 10.68.17.41 with SMTP id l9mr34537285pbd.76.1390893389565; Mon, 27 Jan 2014 23:16:29 -0800 (PST) Sender: kob6558@gmail.com Received: by 10.67.30.1 with HTTP; Mon, 27 Jan 2014 23:16:29 -0800 (PST) In-Reply-To: References: Date: Mon, 27 Jan 2014 23:16:29 -0800 X-Google-Sender-Auth: jptXVLNSRrkg1vJWTsayoNjq9UY Message-ID: Subject: Re: IWN hangs periodically on 10.0RC3 From: Kevin Oberman To: Adrian Chadd Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" , FreeBSD Stable Mailing List X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 07:16:30 -0000 On Fri, Jan 10, 2014 at 9:51 PM, Kevin Oberman wrote: > On Fri, Jan 10, 2014 at 9:37 AM, Adrian Chadd wrote: > >> .. when you see it hang, does anything get logged in dmesg (eg a >> firmware panic) ? >> >> Try recompiling your kernel with: >> >> IEEE80211_DEBUG >> IWN_DEBUG >> >> That way it can be debugged :) >> >> The first thing I'd check is whether there's more fun races going on >> in the crypto code - try wlandebug +crypto . >> >> >> -a >> > > I just sent a message about issues I am seeing with my IWN to wireless@. > Then I saw these responses. Sorry. > > As far as logs go, I wee a number if cases of the following sequence: > Jan 1 18:00:12 rogue dbus[1451]: [system] Activating service > name='org.freedesktop.PackageKit' (using servicehelper) > Jan 1 18:00:12 rogue dbus[1451]: [system] Successfully activated service > 'org.freedesktop.PackageKit' > Jan 1 18:28:56 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-DISCONNECTED > bssid=00:26:b8:67:c3:2d reason=0 > Jan 1 18:28:56 rogue kernel: wlan0: link state changed to DOWN > Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Trying to associate with > 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) > Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Associated with > 00:26:b8:67:c3:2d > Jan 1 18:28:59 rogue kernel: wlan0: link state changed to UP > Jan 1 18:28:59 rogue dhclient[652]: send_packet: No buffer space available > Jan 1 18:28:59 rogue devd: Executing '/etc/rc.d/dhclient quietstart wlan0' > Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: WPA: Key negotiation > completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] > Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-CONNECTED - > Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] > Jan 1 18:29:02 rogue dhclient: New IP Address (wlan0): 192.168.1.5 > Jan 1 18:29:02 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 > Jan 1 18:29:02 rogue dhclient: New Broadcast Address (wlan0): > 192.168.1.255 > Jan 1 18:29:02 rogue dhclient: New Routers (wlan0): 192.168.1.1 > > So it seems that the bounce is happening fairly often, but the system > usually recovers. It seems to be pretty consistently 2-3 time4s a day. > Note that the dbus messages about packagekit always immediately precede > the link going down. > > Every tthe or four of these fail to recover: > Jan 3 14:09:05 rogue kernel: wlan0: link state changed to DOWN > Jan 3 14:09:56 rogue ntpd[1303]: sendto(198.129.254.218) (fd=25): Network > is down > Jan 3 14:10:15 rogue ntpd[1303]: sendto(208.79.18.86) (fd=25): Network is > down > Jan 3 14:10:29 rogue ntpd[1303]: sendto(198.124.252.90) (fd=25): Network > is down > Jan 3 14:10:49 rogue ntpd[1303]: sendto(198.55.111.5) (fd=25): Network is > down > Jan 3 14:11:00 rogue ntpd[1303]: sendto(192.95.38.104) (fd=25): Network > is down > Jan 3 14:14:02 rogue ntpd[1303]: sendto(198.129.252.38) (fd=25): Network > is down > Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, val=0, > arg_len=0]: Operation not supported > Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, val=0, > arg_len=0]: Operation not supported > Jan 3 14:14:12 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-TERMINATING > Jan 3 14:14:12 rogue dhclient[652]: connection closed > Jan 3 14:14:12 rogue dhclient[652]: exiting. > Jan 3 14:14:12 rogue wpa_supplicant[67153]: Successfully initialized > wpa_supplicant > Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Trying to associate > with 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) > Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Associated with > 00:26:b8:67:c3:2d > Jan 3 14:14:16 rogue kernel: wlan0: link state changed to UP > Jan 3 14:14:16 rogue devd: Executing '/etc/rc.d/dhclient quietstart wlan0' > Jan 3 14:14:16 rogue dhclient[67191]: send_packet: No buffer space > available > Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: WPA: Key negotiation > completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] > Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: CTRL-EVENT-CONNECTED - > Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] > Jan 3 14:14:18 rogue dhclient: New IP Address (wlan0): 192.168.1.5 > Jan 3 14:14:18 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 > Jan 3 14:14:18 rogue dhclient: New Broadcast Address (wlan0): > 192.168.1.255 > Jan 3 14:14:18 rogue dhclient: New Routers (wlan0): 192.168.1.1 > > The restart took place when I restarted the interface about 5 minutes > after it went down and, as you can see, it came up normally. I'll admit > that I am completely baffled by the dbus/packagekit tie-in as I can't see > what packagekit would do to touch the network. > > I'll be building a new kernel with debug shortly. > > In my other message (to wireless) I also mentioned the (possibly > unrelated) issue of poor performance and and periodic sub-second > connectivity drops. > > -- > R. Kevin Oberman, Network Engineer, Retired > E-mail: rkoberman@gmail.com > I was about to send a report that removing bgscan fixed the issue, but, then it happened again. Nothing new in the log from prior cases. Any other flags to I should try to set in wlandebug? state? assoc? I'll admit that I have no idea which might be helpful. One thing I seem to have failed to post is the ifconfig after the failure: wlan0: flags=8c43 metric 0 mtu 1500 ether a0:88:b4:c6:ad:28 inet 192.168.1.5 netmask 0xffffff00 broadcast 192.168.1.255 nd6 options=29 media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) status: no carrier ssid "" channel 7 (2442 MHz 11g) country US authmode WPA1+WPA2/802.11i privacy ON deftxkey UNDEF txpower 15 bmiss 10 scanvalid 60 protmode CTS wme roaming MANUAL Note: My AP is on channel 6. -- R. Kevin Oberman, Network Engineer, Retired E-mail: rkoberman@gmail.com From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 10:57:48 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2B452A30 for ; Tue, 28 Jan 2014 10:57:48 +0000 (UTC) Received: from mail-qa0-x235.google.com (mail-qa0-x235.google.com [IPv6:2607:f8b0:400d:c00::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DC28D1075 for ; Tue, 28 Jan 2014 10:57:47 +0000 (UTC) Received: by mail-qa0-f53.google.com with SMTP id cm18so231585qab.26 for ; Tue, 28 Jan 2014 02:57:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=gvM5UT9feGliL8YT2V24LkW1d2J+Eqjl0pAqHeW2K2I=; b=xNN7odzYkh42VJNx0Dp9sPSA3MqH5Ny7sPCvITA0R13jsbyiJwmOvekAbGkO/s9Dmm cJbRGQM+FTORnLVyXRFu+qm0XTte6EXTIllnchGfnRh8VjI3KzOKTzITa6srON01OvD+ eUH2bL1IYnt/feLRnm5RjwaMRTLMC8ugg1E7b9rLsy9ebmKLBpO7/eUhTMTPmLHkAQAz dJsCGKEeY1e8c7HzPHHbSu3KrREpXTqMJbAJNuG+Zms8Z4xVZtcOBzIRaBiKRwGKGrnY tJpaBZtG6VZ2jXPrXguv/1i3opkpPBEcYjNNlab1pmxQH5xJACXqCfSzu6MNbaPlKghQ 2bJQ== MIME-Version: 1.0 X-Received: by 10.229.184.69 with SMTP id cj5mr1204063qcb.8.1390906667095; Tue, 28 Jan 2014 02:57:47 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 02:57:47 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 08:57:47 -0200 Message-ID: Subject: Fwd: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: freebsd-wireless@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 10:57:48 -0000 (sorry - this reply was sent only to Hiren. Here is it for the list) Hi Hiren, this is what I get immediately after starting hostapd - via "service hostapd onestart", since I need to do it manually as the system will reboot in loop if I enable hostapd in rc.conf): KDB: stack backtrace #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 #1 0xffffffff808af8b5 at panic+0x115 #2 0xffffffff80c8e692 at trap_fatal+0x3a2 #3 0xffffffff80c8e969 at trap_pfault+0x2c9 #4 0xffffffff80c8e0f6 at trap+0x5e6 #5 0xffffffff80c75392 at calltrap+0x8 #6 0xffffffff81a158bc at run_update_beacon+0x16c #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc #11 0xffffffff8099047b at hostap_newstate+0x2eb #12 0xffffffff81a1636a at run_newstate+0x83a #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 #16 0xffffffff8088198a at fork_exit+0x9a #17 0xffffffff80c758ce at fork_trampoline+0xe Uptime: 45 s Automatic reboot in 15 seconds - press a key on the console to abort --> Press a key on the console to reboot, --> or switch off the station now. Thanks for any help or suggestion. pflynn On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < hiren.panchasara@gmail.com> wrote: > On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn > wrote: > > > I can provide information as needed. > > Sharing lots of kernel debug messages that you are seeing might be a > good start :-) > > cheers, > Hiren > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 16:11:54 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BD910214 for ; Tue, 28 Jan 2014 16:11:54 +0000 (UTC) Received: from mail-qa0-x22e.google.com (mail-qa0-x22e.google.com [IPv6:2607:f8b0:400d:c00::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 78AC61CAC for ; Tue, 28 Jan 2014 16:11:54 +0000 (UTC) Received: by mail-qa0-f46.google.com with SMTP id ii20so735045qab.33 for ; Tue, 28 Jan 2014 08:11:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=CDpvn13PPDpkMvWS95qs45gqvfga/mft5GM9NvJT3BQ=; b=szNQXJAnc0pf3/XSMQWOnsrpw7hQRMA8kMwyQpZLVTELx4tdtkmo83yJ/6LPMBZjOT B76yD+aicThyTnVYBjB2JzNZJa22v2LccMVrzL4Tf7sNTPpVnuVMxb5nj6n7PjCB5W+K gr8Mi7HxZr/WuweantMDHrvHuMx/akgMwiBlSev8xg0tMZgB2V6Oy4ChIYMDcMpOILOY 3HqAXB+C/gjsLsDXdyyluLcW8/5u+vP7Zkv9nibSugF6xN91dFPjsvUvy7Tr+DewxcNN eG5pNIYv6lDSbPCRzilDX6x598acvU8YZPpjUJCX5aBRzh4xu4mWcXPNIuI/7zRRFaAf Lwfg== MIME-Version: 1.0 X-Received: by 10.224.16.72 with SMTP id n8mr3801946qaa.76.1390925513577; Tue, 28 Jan 2014 08:11:53 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 08:11:53 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 08:11:53 -0800 X-Google-Sender-Auth: PUBN4d5rqMxxHygny2Cy2mtpfec Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 16:11:54 -0000 Do you get a crashdump that you can feed into kgdb upon reboot? If not, would you mind enabling crashdumps? -a On 28 January 2014 02:57, Pedro Flynn wrote: > (sorry - this reply was sent only to Hiren. Here is it for the list) > > > Hi Hiren, > > this is what I get immediately after starting hostapd - via "service > hostapd onestart", since I need to do it manually as the system will reboot > in loop if I enable > hostapd in rc.conf): > > KDB: stack backtrace > #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 > #1 0xffffffff808af8b5 at panic+0x115 > #2 0xffffffff80c8e692 at trap_fatal+0x3a2 > #3 0xffffffff80c8e969 at trap_pfault+0x2c9 > #4 0xffffffff80c8e0f6 at trap+0x5e6 > #5 0xffffffff80c75392 at calltrap+0x8 > #6 0xffffffff81a158bc at run_update_beacon+0x16c > #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d > #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a > #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 > #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc > #11 0xffffffff8099047b at hostap_newstate+0x2eb > #12 0xffffffff81a1636a at run_newstate+0x83a > #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f > #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 > #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 > #16 0xffffffff8088198a at fork_exit+0x9a > #17 0xffffffff80c758ce at fork_trampoline+0xe > Uptime: 45 s > Automatic reboot in 15 seconds - press a key on the console to abort > --> Press a key on the console to reboot, > --> or switch off the station now. > > Thanks for any help or suggestion. > > pflynn > > > On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < > hiren.panchasara@gmail.com> wrote: > >> On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn >> wrote: >> >> > I can provide information as needed. >> >> Sharing lots of kernel debug messages that you are seeing might be a >> good start :-) >> >> cheers, >> Hiren >> > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 16:21:58 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B54AB40A for ; Tue, 28 Jan 2014 16:21:58 +0000 (UTC) Received: from mail-qc0-x229.google.com (mail-qc0-x229.google.com [IPv6:2607:f8b0:400d:c01::229]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6F6601D70 for ; Tue, 28 Jan 2014 16:21:58 +0000 (UTC) Received: by mail-qc0-f169.google.com with SMTP id w7so864087qcr.14 for ; Tue, 28 Jan 2014 08:21:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=C7eQsLOIQpp53F73WqGHKA0LR0wvMLl+5zXscPxc6TA=; b=i9puT3ERkivXN/N8MEyp5jdkF31MmQJwiu+pJJu+HLm8PnMafYKlZ2pELHyiwlVv3o sZoraiOWjHEiW14DnzuIvFRxWwwnIKaQSGbDfkhar1ghN7OASx0VEl18ZUPAlAFS1aUu 4NneXJonA0m2vnWjYACGrs/Dr6PJ5NG6BBiXRdlHQO9C0xoF9PA1WnEFW7epMKgv4lb7 rg5kwwIyUoVgc2GI0Gra78No4QweZgDaakVGxZfpbTVtW2GaDvdr30/pxSEYYoqjJH4F MbdJE3gFRmedWlwaRGWMWJt5e/+hzpMyHUaSlR4k4uTvqT5zal3cZz17TPsyy8Fd/hPM 8g7w== MIME-Version: 1.0 X-Received: by 10.224.43.72 with SMTP id v8mr3875783qae.52.1390926117596; Tue, 28 Jan 2014 08:21:57 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 08:21:57 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 14:21:57 -0200 Message-ID: Subject: Fwd: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: freebsd-wireless@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 16:21:58 -0000 Hi Adrian, This morning I installed 10.0-RELEASE on a second machine (I had to rollback my router to 9.2) with the same hardware with dumpdev set to YES in rc.conf. I will generate the crashdump as soon as I get home. Thanks, pflynn On Tue, Jan 28, 2014 at 2:11 PM, Adrian Chadd wrote: > Do you get a crashdump that you can feed into kgdb upon reboot? If > not, would you mind enabling crashdumps? > > > > -a > > > On 28 January 2014 02:57, Pedro Flynn wrote: > > (sorry - this reply was sent only to Hiren. Here is it for the list) > > > > > > Hi Hiren, > > > > this is what I get immediately after starting hostapd - via "service > > hostapd onestart", since I need to do it manually as the system will > reboot > > in loop if I enable > > hostapd in rc.conf): > > > > KDB: stack backtrace > > #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 > > #1 0xffffffff808af8b5 at panic+0x115 > > #2 0xffffffff80c8e692 at trap_fatal+0x3a2 > > #3 0xffffffff80c8e969 at trap_pfault+0x2c9 > > #4 0xffffffff80c8e0f6 at trap+0x5e6 > > #5 0xffffffff80c75392 at calltrap+0x8 > > #6 0xffffffff81a158bc at run_update_beacon+0x16c > > #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d > > #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a > > #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 > > #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc > > #11 0xffffffff8099047b at hostap_newstate+0x2eb > > #12 0xffffffff81a1636a at run_newstate+0x83a > > #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f > > #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 > > #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 > > #16 0xffffffff8088198a at fork_exit+0x9a > > #17 0xffffffff80c758ce at fork_trampoline+0xe > > Uptime: 45 s > > Automatic reboot in 15 seconds - press a key on the console to abort > > --> Press a key on the console to reboot, > > --> or switch off the station now. > > > > Thanks for any help or suggestion. > > > > pflynn > > > > > > On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < > > hiren.panchasara@gmail.com> wrote: > > > >> On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn > >> wrote: > >> > >> > I can provide information as needed. > >> > >> Sharing lots of kernel debug messages that you are seeing might be a > >> good start :-) > >> > >> cheers, > >> Hiren > >> > > _______________________________________________ > > freebsd-wireless@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > > To unsubscribe, send any mail to " > freebsd-wireless-unsubscribe@freebsd.org" > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 21:26:42 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 79CEAC81 for ; Tue, 28 Jan 2014 21:26:42 +0000 (UTC) Received: from mail-qa0-x229.google.com (mail-qa0-x229.google.com [IPv6:2607:f8b0:400d:c00::229]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 327B71B1F for ; Tue, 28 Jan 2014 21:26:42 +0000 (UTC) Received: by mail-qa0-f41.google.com with SMTP id w8so1312738qac.14 for ; Tue, 28 Jan 2014 13:26:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Clz/J396s9ZZLvkxm5aNlAwj6n6mLoQC3YuYnogkL5M=; b=M50/+819gcYMzsjoaVps0Ghksq62megR88i2FDYqSMpVPVY6ktA2RZL5R4BjE01qMz hrho6p1lxkTYD1FZ35FTnT5N8uGXzhhVjcTv9PpkHDq0W6sq1mwN58VAnSbhQg5n53Q7 t23i4IOX/MwXxcVVIsAyQyohakD98y2wSdM6ck660r/rbNGow+Zgfb7DdGvmAw5IxQfO 9K/w4VI9IlI880oS0trG+ffOb++rlNy0izKsspWIhB8YLr/Ca54pUZ1T2PmAa/Pnz5eU g2Ib9rWxbxHexPvWEbuOAczjHRZyzPAT2SSbCiLHH+BJh22QI8Yb4ARJFO1/uA+0CsS4 OxDQ== MIME-Version: 1.0 X-Received: by 10.140.30.230 with SMTP id d93mr5922054qgd.51.1390944401212; Tue, 28 Jan 2014 13:26:41 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 13:26:41 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 19:26:41 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: freebsd-wireless@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 21:26:42 -0000 Hi! I generated the crash dump and uploaded the image to a public folder on Google Drive. This is the link to the folder: https://drive.google.com/folderview?id=0B0sVwxI7RI7oc3R2bjVQR0pXWG8&usp=sharing the image is xz compressed and the uncompressed size is 161 MB. I also put the uname -a output in the file uname-a.output. This is the uname -a: FreeBSD wormhole2 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan 16 22:34:59 UTC 2014 root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 Hope this dump will have some information. I can build a kernel with debug symbols if one think more information is better. Thanks, pflynn On Tue, Jan 28, 2014 at 2:21 PM, Pedro Flynn wrote: > Hi Adrian, > > This morning I installed 10.0-RELEASE on a second machine (I had to > rollback my router to 9.2) with the same hardware with dumpdev set to YES > in rc.conf. I will generate the crashdump as soon as I get home. > > Thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 2:11 PM, Adrian Chadd wrote: > >> Do you get a crashdump that you can feed into kgdb upon reboot? If >> not, would you mind enabling crashdumps? >> >> >> >> -a >> >> >> On 28 January 2014 02:57, Pedro Flynn wrote: >> > (sorry - this reply was sent only to Hiren. Here is it for the list) >> > >> > >> > Hi Hiren, >> > >> > this is what I get immediately after starting hostapd - via "service >> > hostapd onestart", since I need to do it manually as the system will >> reboot >> > in loop if I enable >> > hostapd in rc.conf): >> > >> > KDB: stack backtrace >> > #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 >> > #1 0xffffffff808af8b5 at panic+0x115 >> > #2 0xffffffff80c8e692 at trap_fatal+0x3a2 >> > #3 0xffffffff80c8e969 at trap_pfault+0x2c9 >> > #4 0xffffffff80c8e0f6 at trap+0x5e6 >> > #5 0xffffffff80c75392 at calltrap+0x8 >> > #6 0xffffffff81a158bc at run_update_beacon+0x16c >> > #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d >> > #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a >> > #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 >> > #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc >> > #11 0xffffffff8099047b at hostap_newstate+0x2eb >> > #12 0xffffffff81a1636a at run_newstate+0x83a >> > #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f >> > #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 >> > #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 >> > #16 0xffffffff8088198a at fork_exit+0x9a >> > #17 0xffffffff80c758ce at fork_trampoline+0xe >> > Uptime: 45 s >> > Automatic reboot in 15 seconds - press a key on the console to abort >> > --> Press a key on the console to reboot, >> > --> or switch off the station now. >> > >> > Thanks for any help or suggestion. >> > >> > pflynn >> > >> > >> > On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < >> > hiren.panchasara@gmail.com> wrote: >> > >> >> On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn >> >> wrote: >> >> >> >> > I can provide information as needed. >> >> >> >> Sharing lots of kernel debug messages that you are seeing might be a >> >> good start :-) >> >> >> >> cheers, >> >> Hiren >> >> >> > _______________________________________________ >> > freebsd-wireless@freebsd.org mailing list >> > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless >> > To unsubscribe, send any mail to " >> freebsd-wireless-unsubscribe@freebsd.org" >> > > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 22:23:44 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AD182511 for ; Tue, 28 Jan 2014 22:23:44 +0000 (UTC) Received: from mail-qa0-x231.google.com (mail-qa0-x231.google.com [IPv6:2607:f8b0:400d:c00::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 6554B1055 for ; Tue, 28 Jan 2014 22:23:44 +0000 (UTC) Received: by mail-qa0-f49.google.com with SMTP id w8so1368788qac.8 for ; Tue, 28 Jan 2014 14:23:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=RMCWZNjkPk6oxqIihTfgZ9CJva35XFMZo41JH6QaW44=; b=HPbO8j0r/9KtUjqpwJf/JAb4M3O/2JVs6loa09k9aqgGAjKiAiPs+fKdYu+nMKE/Cx tBPbBYRLNm3Ol9VDjG4iml2ZAtvDwbYtXBP3+eLLLifkuLl1GaKFuuT3mNAsiqFWdfZ5 C1/04u5asvSrTZ53QRdm6Ng0rAZ8u00qgVgZUwnUcHLAWSiCs/ja2t9A6mG38yc6Fx/T L304Um0y/bsge5ypud5rmy7puPjKFO/jSPH6QzwPwMgpzlKpak+oBOzw+UdLSpgC3gfj SsE82cZYtmImQypjeqktneP1MjwUbGGD8XsdBMmvjtfPs5rB6Hw+9z9tWLi84HP4jEEW Tj9w== MIME-Version: 1.0 X-Received: by 10.229.13.195 with SMTP id d3mr6758415qca.4.1390947823622; Tue, 28 Jan 2014 14:23:43 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 14:23:43 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 14:23:43 -0800 X-Google-Sender-Auth: hSim_l9dsEMXZsKOSmnZefSr4Rs Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:23:44 -0000 Hi, Did it create a crash .txt file? If so, that's mostly enough to go on. Can you just attach that to a post to the mailing list? -a On 28 January 2014 13:26, Pedro Flynn wrote: > Hi! > > I generated the crash dump and uploaded the image to a public folder on > Google Drive. This is the link to the folder: > > https://drive.google.com/folderview?id=0B0sVwxI7RI7oc3R2bjVQR0pXWG8&usp=sharing > > the image is xz compressed and the uncompressed size is 161 MB. I also put > the uname -a output in the file uname-a.output. This is the uname -a: > > FreeBSD wormhole2 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan > 16 22:34:59 UTC 2014 root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC > amd64 > > Hope this dump will have some information. I can build a kernel with debug > symbols if one think more information is better. > > Thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 2:21 PM, Pedro Flynn wrote: > >> Hi Adrian, >> >> This morning I installed 10.0-RELEASE on a second machine (I had to >> rollback my router to 9.2) with the same hardware with dumpdev set to YES >> in rc.conf. I will generate the crashdump as soon as I get home. >> >> Thanks, >> >> pflynn >> >> >> On Tue, Jan 28, 2014 at 2:11 PM, Adrian Chadd wrote: >> >>> Do you get a crashdump that you can feed into kgdb upon reboot? If >>> not, would you mind enabling crashdumps? >>> >>> >>> >>> -a >>> >>> >>> On 28 January 2014 02:57, Pedro Flynn wrote: >>> > (sorry - this reply was sent only to Hiren. Here is it for the list) >>> > >>> > >>> > Hi Hiren, >>> > >>> > this is what I get immediately after starting hostapd - via "service >>> > hostapd onestart", since I need to do it manually as the system will >>> reboot >>> > in loop if I enable >>> > hostapd in rc.conf): >>> > >>> > KDB: stack backtrace >>> > #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 >>> > #1 0xffffffff808af8b5 at panic+0x115 >>> > #2 0xffffffff80c8e692 at trap_fatal+0x3a2 >>> > #3 0xffffffff80c8e969 at trap_pfault+0x2c9 >>> > #4 0xffffffff80c8e0f6 at trap+0x5e6 >>> > #5 0xffffffff80c75392 at calltrap+0x8 >>> > #6 0xffffffff81a158bc at run_update_beacon+0x16c >>> > #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d >>> > #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a >>> > #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 >>> > #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc >>> > #11 0xffffffff8099047b at hostap_newstate+0x2eb >>> > #12 0xffffffff81a1636a at run_newstate+0x83a >>> > #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f >>> > #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 >>> > #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 >>> > #16 0xffffffff8088198a at fork_exit+0x9a >>> > #17 0xffffffff80c758ce at fork_trampoline+0xe >>> > Uptime: 45 s >>> > Automatic reboot in 15 seconds - press a key on the console to abort >>> > --> Press a key on the console to reboot, >>> > --> or switch off the station now. >>> > >>> > Thanks for any help or suggestion. >>> > >>> > pflynn >>> > >>> > >>> > On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < >>> > hiren.panchasara@gmail.com> wrote: >>> > >>> >> On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn >>> >> wrote: >>> >> >>> >> > I can provide information as needed. >>> >> >>> >> Sharing lots of kernel debug messages that you are seeing might be a >>> >> good start :-) >>> >> >>> >> cheers, >>> >> Hiren >>> >> >>> > _______________________________________________ >>> > freebsd-wireless@freebsd.org mailing list >>> > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless >>> > To unsubscribe, send any mail to " >>> freebsd-wireless-unsubscribe@freebsd.org" >>> >> >> >> > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 22:28:48 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4924369F for ; Tue, 28 Jan 2014 22:28:48 +0000 (UTC) Received: from mail-qc0-x234.google.com (mail-qc0-x234.google.com [IPv6:2607:f8b0:400d:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id F391C107B for ; Tue, 28 Jan 2014 22:28:47 +0000 (UTC) Received: by mail-qc0-f180.google.com with SMTP id i17so1580862qcy.39 for ; Tue, 28 Jan 2014 14:28:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=rIhhhnW3l2X1kOftEzYptDdroMyf0tlDv33dLHItYk0=; b=n7/J2oPWGqeSHbNNpq4/JMixZSAAzf3o7ieeHxyup6LFuA8WtEGno65PC3V6dGgW7T qVHDZg0vv9/j3YJYeC8QNznWevERVGjnfXY79begBF8CDL+DnwteAHUv1NhwrEjl66bF UPrE/HYm1tFV9twwmKxtQsbkGZctgj80MrulISv+KemC0VkjRHpTrY4LTtv852kpvRFA lEayXPHA8LP3GjExRYKo21D7EcmO2U8yr006qje56tUu/cgDvj8Yqu8k720a2h4RpNyk rEID8CQ+Y6PloxY6iMlcLPpr2CFe3izN4+5z/WhzP3CEw3JNoi9UOB1F+uSbworlI13L +TWQ== MIME-Version: 1.0 X-Received: by 10.140.29.38 with SMTP id a35mr6328940qga.55.1390948127215; Tue, 28 Jan 2014 14:28:47 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 14:28:47 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 20:28:47 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: "freebsd-wireless@freebsd.org" Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:28:48 -0000 Hi Adrian. Yes. There is a core.txt.0 file. I uploaded it to the folder. Thanks! pflynn On Tue, Jan 28, 2014 at 8:23 PM, Adrian Chadd wrote: > Hi, > > Did it create a crash .txt file? If so, that's mostly enough to go on. > Can you just attach that to a post to the mailing list? > > > -a > > > On 28 January 2014 13:26, Pedro Flynn wrote: > > Hi! > > > > I generated the crash dump and uploaded the image to a public folder on > > Google Drive. This is the link to the folder: > > > > > https://drive.google.com/folderview?id=0B0sVwxI7RI7oc3R2bjVQR0pXWG8&usp=sharing > > > > the image is xz compressed and the uncompressed size is 161 MB. I also > put > > the uname -a output in the file uname-a.output. This is the uname -a: > > > > FreeBSD wormhole2 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan > > 16 22:34:59 UTC 2014 root@snap.freebsd.org: > /usr/obj/usr/src/sys/GENERIC > > amd64 > > > > Hope this dump will have some information. I can build a kernel with > debug > > symbols if one think more information is better. > > > > Thanks, > > > > pflynn > > > > > > On Tue, Jan 28, 2014 at 2:21 PM, Pedro Flynn > wrote: > > > >> Hi Adrian, > >> > >> This morning I installed 10.0-RELEASE on a second machine (I had to > >> rollback my router to 9.2) with the same hardware with dumpdev set to > YES > >> in rc.conf. I will generate the crashdump as soon as I get home. > >> > >> Thanks, > >> > >> pflynn > >> > >> > >> On Tue, Jan 28, 2014 at 2:11 PM, Adrian Chadd > wrote: > >> > >>> Do you get a crashdump that you can feed into kgdb upon reboot? If > >>> not, would you mind enabling crashdumps? > >>> > >>> > >>> > >>> -a > >>> > >>> > >>> On 28 January 2014 02:57, Pedro Flynn wrote: > >>> > (sorry - this reply was sent only to Hiren. Here is it for the list) > >>> > > >>> > > >>> > Hi Hiren, > >>> > > >>> > this is what I get immediately after starting hostapd - via "service > >>> > hostapd onestart", since I need to do it manually as the system will > >>> reboot > >>> > in loop if I enable > >>> > hostapd in rc.conf): > >>> > > >>> > KDB: stack backtrace > >>> > #0 0xffffffff808e7dd0 at kbd_backtrace+0x60 > >>> > #1 0xffffffff808af8b5 at panic+0x115 > >>> > #2 0xffffffff80c8e692 at trap_fatal+0x3a2 > >>> > #3 0xffffffff80c8e969 at trap_pfault+0x2c9 > >>> > #4 0xffffffff80c8e0f6 at trap+0x5e6 > >>> > #5 0xffffffff80c75392 at calltrap+0x8 > >>> > #6 0xffffffff81a158bc at run_update_beacon+0x16c > >>> > #7 0xffffffff809b42bd at ieee80211_wme_update_params_locked+0x32d > >>> > #8 0xffffffff809b437a at ieee80211_wme_update_params+0x5a > >>> > #9 0xffffffff809bb3f43 at ieee80211_wme_init_params+0x2a3 > >>> > #10 0xffffffff809a9aec at ieee80211_sta_join1+0xdc > >>> > #11 0xffffffff8099047b at hostap_newstate+0x2eb > >>> > #12 0xffffffff81a1636a at run_newstate+0x83a > >>> > #13 0xffffffff809b2edf at ieee80211_newstate_cb+0x14f > >>> > #14 0xffffffff808f5b66 at taskqueue_run_locked+0xe6 > >>> > #15 0xffffffff808f63e8 at taskqueue_thread_loop+0xa8 > >>> > #16 0xffffffff8088198a at fork_exit+0x9a > >>> > #17 0xffffffff80c758ce at fork_trampoline+0xe > >>> > Uptime: 45 s > >>> > Automatic reboot in 15 seconds - press a key on the console to abort > >>> > --> Press a key on the console to reboot, > >>> > --> or switch off the station now. > >>> > > >>> > Thanks for any help or suggestion. > >>> > > >>> > pflynn > >>> > > >>> > > >>> > On Mon, Jan 27, 2014 at 8:43 PM, hiren panchasara < > >>> > hiren.panchasara@gmail.com> wrote: > >>> > > >>> >> On Mon, Jan 27, 2014 at 2:16 PM, Pedro Flynn > > >>> >> wrote: > >>> >> > >>> >> > I can provide information as needed. > >>> >> > >>> >> Sharing lots of kernel debug messages that you are seeing might be a > >>> >> good start :-) > >>> >> > >>> >> cheers, > >>> >> Hiren > >>> >> > >>> > _______________________________________________ > >>> > freebsd-wireless@freebsd.org mailing list > >>> > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > >>> > To unsubscribe, send any mail to " > >>> freebsd-wireless-unsubscribe@freebsd.org" > >>> > >> > >> > >> > > _______________________________________________ > > freebsd-wireless@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > > To unsubscribe, send any mail to " > freebsd-wireless-unsubscribe@freebsd.org" > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 22:34:45 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2721F7F2 for ; Tue, 28 Jan 2014 22:34:45 +0000 (UTC) Received: from mail-qc0-x22a.google.com (mail-qc0-x22a.google.com [IPv6:2607:f8b0:400d:c01::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id D2E4010FE for ; Tue, 28 Jan 2014 22:34:44 +0000 (UTC) Received: by mail-qc0-f170.google.com with SMTP id e9so1632601qcy.1 for ; Tue, 28 Jan 2014 14:34:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=nILmHddoKVdayJSgFmoaErF6+b2HGmoh/pHrm3QAcnc=; b=Fzkb1A/cLYUBQ8zqZVmZo98YqkrjtTqcyf/I4c8WCAAb6B363I19jXQXi6KjTuDdDs sLJ85D4qNQbsbolTBbENSzkv7e3hdkeldi8pmg2OWxkEIpTET/TFTKe9adsIs9q6Jueg Dnk3tQm09lg9PiJJDAJs9GDViv3FSV5DCYHZw+SrYdmylZ6Z5d2EO8lKdsTEjHv2JKGs e1O2W2AFgI2TNO/sQXnmz0vr4kHu+cIVYralYeXTBgGkwQ7LsAqNdcs/0sR9Hfz5EQrC lRHDZ+qRkDz0Pivg3JqcRMrPWDxzYht3Wy5RiA6syAwBwR3xh6O2cuKcRjf6M3blKuyF TQVQ== MIME-Version: 1.0 X-Received: by 10.224.74.129 with SMTP id u1mr6711630qaj.49.1390948483979; Tue, 28 Jan 2014 14:34:43 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 14:34:43 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 14:34:43 -0800 X-Google-Sender-Auth: HMUDftrVQt7lIYHzLyhfTj4ULPI Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:34:45 -0000 Ok, fire up kgdb # kgdb /boot/kernel/kernel /var/crash/vmcore.0 then (gdb) list * (0xffffffff809b1163) (.. that's the "instruction pointer" at the time of the panic.) I bet it's iv_bss. -a From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 22:45:25 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 61F53D43; Tue, 28 Jan 2014 22:45:25 +0000 (UTC) Received: from mail-qa0-x22a.google.com (mail-qa0-x22a.google.com [IPv6:2607:f8b0:400d:c00::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 043A611E1; Tue, 28 Jan 2014 22:45:24 +0000 (UTC) Received: by mail-qa0-f42.google.com with SMTP id k4so1436697qaq.15 for ; Tue, 28 Jan 2014 14:45:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=oX9Aa4E4teTzkySy/+RV+6Bjg1V7pHm7k6f0CwfYJws=; b=IVOIUyqEU26wW687y0cQCpwzlJcWFaGpgmvNvqt6I8asu4zMLFJYd0gv/dOANZBqxu ijRpFEBiPyxQ8M0pn4XRRCi+/f4vm22XR1rqu3OpYIdtO2A14+O9zd20T5L4N+O8M2Tx y7wLpjhN+7OqrVB7pDIlkQ9bS6wgdQ9cdS82u3TD4b6GNgW19+bG6h55CQkQF1dQ2vem L7KFfQWW2mhWozn+gKwgIaqsO0IIInz840Kn0HXhwLhhBVMDZPnVVKtMwa39XO9A9gcT nNzLDfm/+H5LzlqqvoiZk/nwzVNgOLOQGYP0Vst+ArxGhcsTVe6HJ9NOdLI9gWgtcdpB NkqA== MIME-Version: 1.0 X-Received: by 10.229.97.134 with SMTP id l6mr6778418qcn.11.1390949124227; Tue, 28 Jan 2014 14:45:24 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 14:45:24 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 20:45:24 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:45:25 -0000 OK! This is what I have: list * (0xffffffff809b1163) Undefined command: "". Try "help". (kgdb) list * (0xffffffff809b1163) 0xffffffff809b1163 is in ieee80211_beacon_update (/usr/src/sys/net80211/ieee80211_output.c:3099). 3094 /* XXX do WME aggressive mode processing? */ 3095 IEEE80211_UNLOCK(ic); 3096 return 1; /* just assume length changed */ 3097 } 3098 3099 wh = mtod(m, struct ieee80211_frame *); 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; 3101 *(uint16_t *)&wh->i_seq[0] = 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); 3103 M_SEQNO_SET(m, seqno); Current language: auto; currently minimal (kgdb) (by the way, I'm building a kernel with debug symbols) Thanks, pflynn On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd wrote: > Ok, fire up kgdb > > # kgdb /boot/kernel/kernel /var/crash/vmcore.0 > > then > > (gdb) list * (0xffffffff809b1163) > > (.. that's the "instruction pointer" at the time of the panic.) > > I bet it's iv_bss. > > > > -a > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 22:47:41 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 13F76D7B for ; Tue, 28 Jan 2014 22:47:41 +0000 (UTC) Received: from mail-qa0-x229.google.com (mail-qa0-x229.google.com [IPv6:2607:f8b0:400d:c00::229]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id BD4CF11F2 for ; Tue, 28 Jan 2014 22:47:40 +0000 (UTC) Received: by mail-qa0-f41.google.com with SMTP id w8so1437383qac.28 for ; Tue, 28 Jan 2014 14:47:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=xKKwjQo2kHvpeZ4/723E2P87KBPdfnvHNrV0l9z90lM=; b=bmhJBzOYf486zGuE9JaJfcSK3x79Wo9cvSmwegLyDXMAER3+KbdHaNBlLZ5Fb1Jvp6 vfjTbGDCWZeVaDbpKgCoiUG0zSGmwNgF310lOeIwqJmeU/4Lt1Bebw4cZdCskURPjzBL rENRUhOgZuqaCU1b/5/jlPSst18j+4xX1Ojjhs4/xZ8xbTPWfFVuPdxVEmEwxa/C1BdB AauGeQkurC8g9KuHLuscpcpIRZltdrRXfD2dD51sqfPVmwc5eGiN5yfC+WgOEYoDhrtt gSTkSyD/I6iF7mgckPI4GN0aaKPubNqJUE5Vi53XxhbGSW2i4iwv2D8CjKuMkZF8x1RD SicA== MIME-Version: 1.0 X-Received: by 10.229.13.195 with SMTP id d3mr6903082qca.4.1390949260014; Tue, 28 Jan 2014 14:47:40 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 14:47:39 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 14:47:39 -0800 X-Google-Sender-Auth: sDB9kkIYv1O8DOBoJyrnA19ollM Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 22:47:41 -0000 ok, do 'bt', and see what's being passed into ieee80211_beacon_update. Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print out the contents of the given variable name. That mbuf looks like it's NULL, which is odd. Thanks! -a On 28 January 2014 14:45, Pedro Flynn wrote: > OK! This is what I have: > > list * (0xffffffff809b1163) > Undefined command: "". Try "help". > (kgdb) list * (0xffffffff809b1163) > 0xffffffff809b1163 is in ieee80211_beacon_update > (/usr/src/sys/net80211/ieee80211_output.c:3099). > 3094 /* XXX do WME aggressive mode processing? */ > 3095 IEEE80211_UNLOCK(ic); > 3096 return 1; /* just assume length changed */ > 3097 } > 3098 > 3099 wh = mtod(m, struct ieee80211_frame *); > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; > 3101 *(uint16_t *)&wh->i_seq[0] = > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); > 3103 M_SEQNO_SET(m, seqno); > Current language: auto; currently minimal > (kgdb) > > > (by the way, I'm building a kernel with debug symbols) > > Thanks, > > pflynn > > > > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd wrote: >> >> Ok, fire up kgdb >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >> >> then >> >> (gdb) list * (0xffffffff809b1163) >> >> (.. that's the "instruction pointer" at the time of the panic.) >> >> I bet it's iv_bss. >> >> >> >> -a > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:02:37 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 329C03AB; Tue, 28 Jan 2014 23:02:37 +0000 (UTC) Received: from mail-qc0-x232.google.com (mail-qc0-x232.google.com [IPv6:2607:f8b0:400d:c01::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C73101354; Tue, 28 Jan 2014 23:02:36 +0000 (UTC) Received: by mail-qc0-f178.google.com with SMTP id m20so1619230qcx.37 for ; Tue, 28 Jan 2014 15:02:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=ZGx9NPgWpHyErFVsL+Lv546XjKGjxwp54aPsBBp3CG0=; b=HeHTokaCOBB0+Z0OPRIvUL4kUxadmxdr5m0yr6JYHp3REFKZ1juwdIZ7JP/nymrm4x ll4ZUv7AicIJn+/5OhVyECxAu/cWqAUTfRRa5VfJD4NICgl4eA6H6yCWUs857JTpdsRr bvRNHZWSD4l7QcBlcPQCCrxNEQUH/p3wkevbue1/5G3i0+tAsk4dujzfY0yRjVlPBjkT a68euOWfyQtzM4q8Meg7BPZ1avFqSIYRhFS09NaTUikNkz5kzAfDP8rHsEK+K6sMtuZD aaq1rx0rqXG2nVEELGGTLEazZiUDP1EaEFBJfIWWCPzCmgzksskBg7GxKpnwwxdQMi+e WK5Q== MIME-Version: 1.0 X-Received: by 10.229.184.69 with SMTP id cj5mr6973132qcb.8.1390950155918; Tue, 28 Jan 2014 15:02:35 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 15:02:35 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 21:02:35 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:02:37 -0000 Here we go (this output is not beautiful...). Please, let me know if I missed something or if I did something wrong: bt output: #0 doadump (textdump=) at pcpu.h:219 #1 0xffffffff808af530 in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:447 #2 0xffffffff808af8f4 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:754 #3 0xffffffff80c8e692 in trap_fatal (frame=, eva=) at /usr/src/sys/amd64/amd64/trap.c:882 #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, usermode=0) at /usr/src/sys/amd64/amd64/trap.c:699 #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) at /usr/src/sys/amd64/amd64/trap.c:463 #6 0xffffffff80c75392 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:232 #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, item=2) at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( vap=0xfffff8000e8dd000) at ieee80211_var.h:814 #10 0xffffffff809b437a in ieee80211_wme_updateparams (vap=0xfffff8000e8dd000) at /usr/src/sys/net80211/ieee80211_proto.c:1150 #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=) at /usr/src/sys/net80211/ieee80211_proto.c:955 #12 0xffffffff809a9aec in ieee80211_sta_join1 () at /usr/src/sys/net80211/ieee80211_node.c:741 #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, nstate=, arg=) at /usr/src/sys/net80211/ieee80211_hostap.c:274 #14 0xffffffff81a1a36a in run_newstate (vap=, nstate=IEEE80211_S_RUN, arg=-1) at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, npending=) at /usr/src/sys/net80211/ieee80211_proto.c:1756 #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) at /usr/src/sys/kern/subr_taskqueue.c:333 #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=) at /usr/src/sys/kern/subr_taskqueue.c:535 #18 0xffffffff8088198a in fork_exit ( callout=0xffffffff808f6340 , arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) at /usr/src/sys/kern/kern_fork.c:995 #19 0xffffffff80c758ce in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:606 #20 0x0000000000000000 in ?? () frame 0 #0 doadump (textdump=) at pcpu.h:219 219 pcpu.h: No such file or directory. in pcpu.h print doadump $1 = {int (boolean_t)} 0xffffffff808af6f0 frame 1: #1 0xffffffff808af530 in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:447 447 doadump(TRUE); print kern_reboot print kern_reboot $3 = {void (int)} 0xffffffff808aedf0 frame 2 #2 0xffffffff808af8f4 in panic (fmt=) at /usr/src/sys/kern/kern_shutdown.c:754 754 kern_reboot(bootopt); (kgdb) print panic $4 = {void (const char *)} 0xffffffff808af760 frame 3 #3 0xffffffff80c8e692 in trap_fatal (frame=, eva=) at /usr/src/sys/amd64/amd64/trap.c:882 882 panic("%s", trap_msg[type]); (kgdb) print trap_fatal $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 (kgdb) frame 4 #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, usermode=0) at /usr/src/sys/amd64/amd64/trap.c:699 699 trap_fatal(frame, eva); (kgdb) print trap_pfault $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 (kgdb) frame 5 #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) at /usr/src/sys/amd64/amd64/trap.c:463 463 (void) trap_pfault(frame, FALSE); (kgdb) print trap $7 = {void (struct trapframe *)} 0xffffffff80c8db10 frame 6 #6 0xffffffff80c75392 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:232 232 call trap Current language: auto; currently asm (kgdb) print calltrap $8 = {} 0xffffffff80c7538a (kgdb) frame 7 #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 161 atomic.h: No such file or directory. in atomic.h Current language: auto; currently minimal (kgdb) print ieee80211_beacon_update $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, struct mbuf *, int)} 0xffffffff809b1090 frame 8 #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, item=2) at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, mcast); (kgdb) print run_update_beacon $10 = {void (struct ieee80211vap *, int)} 0xffffffff81a19750 (kgdb) frame 9 #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( vap=0xfffff8000e8dd000) at ieee80211_var.h:814 814 vap->iv_update_beacon(vap, what); (kgdb) print ieee80211_wme_updateparams_locked $11 = {void (struct ieee80211vap *)} 0xffffffff809b3f90 (kgdb) frame 10 #10 0xffffffff809b437a in ieee80211_wme_updateparams (vap=0xfffff8000e8dd000) at /usr/src/sys/net80211/ieee80211_proto.c:1150 1150 ieee80211_wme_updateparams_locked(vap); (kgdb) print ieee80211_wme_updateparams $12 = {void (struct ieee80211vap *)} 0xffffffff809b4320 frame 11 #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=) at /usr/src/sys/net80211/ieee80211_proto.c:955 955 ieee80211_wme_updateparams(vap); (kgdb) print ieee80211_wme_initparams $13 = {void (struct ieee80211vap *)} 0xffffffff809b3ca0 (kgdb) frame 12 #12 0xffffffff809a9aec in ieee80211_sta_join1 () at /usr/src/sys/net80211/ieee80211_node.c:741 741 ieee80211_wme_initparams(vap); (kgdb) print ieee80211_sta_join1 $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 (kgdb) frame 13 #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, nstate=, arg=) at /usr/src/sys/net80211/ieee80211_hostap.c:274 274 ieee80211_ht_adjust_channel(ic, (kgdb) print hostap_newstate $15 = {int (struct ieee80211vap *, enum ieee80211_state, int)} 0xffffffff80990190 frame 14 #14 0xffffffff81a1a36a in run_newstate (vap=, nstate=IEEE80211_S_RUN, arg=-1) at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 1881 return(rvp->newstate(vap, nstate, arg)); (kgdb) print run_newstate $16 = {int (struct ieee80211vap *, enum ieee80211_state, int)} 0xffffffff81a19b30 (kgdb) frame 15 #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, npending=) at /usr/src/sys/net80211/ieee80211_proto.c:1756 1756 rc = vap->iv_newstate(vap, nstate, arg); (kgdb) print ieee80211_newstate_cb $17 = {void (void *, int)} 0xffffffff809b2d90 (kgdb) frame 16 #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) at /usr/src/sys/kern/subr_taskqueue.c:333 333 task->ta_func(task->ta_context, pending); (kgdb) print taskqueue_run_locked $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 frame 17 #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=) at /usr/src/sys/kern/subr_taskqueue.c:535 535 taskqueue_run_locked(tq); (kgdb) print taskqueue_thread_loop $19 = {void (void *)} 0xffffffff808f6340 (kgdb) frame 18 #18 0xffffffff8088198a in fork_exit ( callout=0xffffffff808f6340 , arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) at /usr/src/sys/kern/kern_fork.c:995 995 callout(arg, frame); (kgdb) print fork_exit $20 = {void (void (*)(void *, struct trapframe *), void *, struct trapframe *)} 0xffffffff808818f0 (kgdb) frame 19 #19 0xffffffff80c758ce in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:606 606 call fork_exit Current language: auto; currently asm (kgdb) print fork_trampoline $21 = {} 0xffffffff80c758c0 frame 20 #20 0x0000000000000000 in ?? () Thanks, pflynn On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd wrote: > ok, do 'bt', and see what's being passed into ieee80211_beacon_update. > Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print > out the contents of the given variable name. > > That mbuf looks like it's NULL, which is odd. > > Thanks! > > > -a > > > On 28 January 2014 14:45, Pedro Flynn wrote: > > OK! This is what I have: > > > > list * (0xffffffff809b1163) > > Undefined command: "". Try "help". > > (kgdb) list * (0xffffffff809b1163) > > 0xffffffff809b1163 is in ieee80211_beacon_update > > (/usr/src/sys/net80211/ieee80211_output.c:3099). > > 3094 /* XXX do WME aggressive mode processing? */ > > 3095 IEEE80211_UNLOCK(ic); > > 3096 return 1; /* just assume length changed */ > > 3097 } > > 3098 > > 3099 wh = mtod(m, struct ieee80211_frame *); > > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; > > 3101 *(uint16_t *)&wh->i_seq[0] = > > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); > > 3103 M_SEQNO_SET(m, seqno); > > Current language: auto; currently minimal > > (kgdb) > > > > > > (by the way, I'm building a kernel with debug symbols) > > > > Thanks, > > > > pflynn > > > > > > > > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd > wrote: > >> > >> Ok, fire up kgdb > >> > >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 > >> > >> then > >> > >> (gdb) list * (0xffffffff809b1163) > >> > >> (.. that's the "instruction pointer" at the time of the panic.) > >> > >> I bet it's iv_bss. > >> > >> > >> > >> -a > > > > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:04:09 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0BF83566 for ; Tue, 28 Jan 2014 23:04:09 +0000 (UTC) Received: from mail-qa0-x22b.google.com (mail-qa0-x22b.google.com [IPv6:2607:f8b0:400d:c00::22b]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id B01BF1367 for ; Tue, 28 Jan 2014 23:04:08 +0000 (UTC) Received: by mail-qa0-f43.google.com with SMTP id o15so1440858qap.16 for ; Tue, 28 Jan 2014 15:04:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=RpjL7LhPRZhrrPHylVscoehU44tlUHHcqhC1u1A/XmA=; b=VYhFerPVQA5wlhP0uCmNlWvI2M+Ki8Nbwqk+Haw+djTkTR3BZa6PKKxH3YV0Y37tJE d+W2l6j6KWFXad3GI7gEbcDajytIkBzwOBYdseOeE+l1L4KpInUGkTayO08O+XeAgGRv p7+YEGcMPcpCHZ9oedRB9Thi9zyb3y8y0IIfE+uaIxI3qk6SaF98s/9NKjSAv+ZNB+s1 FuB2JB+rJCIHycD0YzHpLaIl9X27Ri1NmzKRAfH6aonYjN7m9gEr+tqDF6nPwGgwjtUB v3i3cIHm5s5rr+/o056AHj4+2GbDT4visiID3fkYPELqXP7xd+UnBvCM58yu+AgVzE9V h08Q== MIME-Version: 1.0 X-Received: by 10.224.16.72 with SMTP id n8mr6982175qaa.76.1390950247908; Tue, 28 Jan 2014 15:04:07 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 15:04:07 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 15:04:07 -0800 X-Google-Sender-Auth: ErvOwLKJFRJfWTSmvlI7SgEYBYc Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:04:09 -0000 Right, frame 8 (the run beacon update) is passing a NULL mbuf into net80211. Why's it doing that. -a On 28 January 2014 15:02, Pedro Flynn wrote: > Here we go (this output is not beautiful...). Please, let me know if I > missed something or if I did something wrong: > > bt output: > > #0 doadump (textdump=) at pcpu.h:219 > #1 0xffffffff808af530 in kern_reboot (howto=260) > at /usr/src/sys/kern/kern_shutdown.c:447 > #2 0xffffffff808af8f4 in panic (fmt=) > at /usr/src/sys/kern/kern_shutdown.c:754 > #3 0xffffffff80c8e692 in trap_fatal (frame=, > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, usermode=0) > at /usr/src/sys/amd64/amd64/trap.c:699 > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) > at /usr/src/sys/amd64/amd64/trap.c:463 > #6 0xffffffff80c75392 in calltrap () > at /usr/src/sys/amd64/amd64/exception.S:232 > #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, item=2) > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 > #10 0xffffffff809b437a in ieee80211_wme_updateparams > (vap=0xfffff8000e8dd000) > at /usr/src/sys/net80211/ieee80211_proto.c:1150 > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap= out>) > at /usr/src/sys/net80211/ieee80211_proto.c:955 > #12 0xffffffff809a9aec in ieee80211_sta_join1 () > at /usr/src/sys/net80211/ieee80211_node.c:741 > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, > nstate=, arg=) > at /usr/src/sys/net80211/ieee80211_hostap.c:274 > #14 0xffffffff81a1a36a in run_newstate (vap=, > nstate=IEEE80211_S_RUN, arg=-1) > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 > #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, > npending=) > at /usr/src/sys/net80211/ieee80211_proto.c:1756 > #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) > at /usr/src/sys/kern/subr_taskqueue.c:333 > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=) > at /usr/src/sys/kern/subr_taskqueue.c:535 > #18 0xffffffff8088198a in fork_exit ( > callout=0xffffffff808f6340 , > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) > at /usr/src/sys/kern/kern_fork.c:995 > #19 0xffffffff80c758ce in fork_trampoline () > at /usr/src/sys/amd64/amd64/exception.S:606 > #20 0x0000000000000000 in ?? () > > frame 0 > #0 doadump (textdump=) at pcpu.h:219 > 219 pcpu.h: No such file or directory. > in pcpu.h > print doadump > $1 = {int (boolean_t)} 0xffffffff808af6f0 > > frame 1: > #1 0xffffffff808af530 in kern_reboot (howto=260) > at /usr/src/sys/kern/kern_shutdown.c:447 > 447 doadump(TRUE); > print kern_reboot > print kern_reboot > $3 = {void (int)} 0xffffffff808aedf0 > > frame 2 > #2 0xffffffff808af8f4 in panic (fmt=) > at /usr/src/sys/kern/kern_shutdown.c:754 > 754 kern_reboot(bootopt); > (kgdb) print panic > $4 = {void (const char *)} 0xffffffff808af760 > > frame 3 > #3 0xffffffff80c8e692 in trap_fatal (frame=, > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 > 882 panic("%s", trap_msg[type]); > (kgdb) print trap_fatal > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 > > (kgdb) frame 4 > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, usermode=0) > at /usr/src/sys/amd64/amd64/trap.c:699 > 699 trap_fatal(frame, eva); > (kgdb) print trap_pfault > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 > (kgdb) frame 5 > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) > at /usr/src/sys/amd64/amd64/trap.c:463 > 463 (void) trap_pfault(frame, FALSE); > (kgdb) print trap > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 > > frame 6 > #6 0xffffffff80c75392 in calltrap () > at /usr/src/sys/amd64/amd64/exception.S:232 > 232 call trap > Current language: auto; currently asm > (kgdb) print calltrap > $8 = {} 0xffffffff80c7538a > (kgdb) frame 7 > #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 > 161 atomic.h: No such file or directory. > in atomic.h > Current language: auto; currently minimal > (kgdb) print ieee80211_beacon_update > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, > struct mbuf *, int)} 0xffffffff809b1090 > > frame 8 > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, item=2) > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, > mcast); > (kgdb) print run_update_beacon > $10 = {void (struct ieee80211vap *, > int)} 0xffffffff81a19750 > (kgdb) frame 9 > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 > 814 vap->iv_update_beacon(vap, what); > (kgdb) print ieee80211_wme_updateparams_locked > $11 = {void (struct ieee80211vap > *)} 0xffffffff809b3f90 > (kgdb) frame 10 > #10 0xffffffff809b437a in ieee80211_wme_updateparams > (vap=0xfffff8000e8dd000) > at /usr/src/sys/net80211/ieee80211_proto.c:1150 > 1150 ieee80211_wme_updateparams_locked(vap); > (kgdb) print ieee80211_wme_updateparams > $12 = {void (struct ieee80211vap > *)} 0xffffffff809b4320 > > frame 11 > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap= out>) > at /usr/src/sys/net80211/ieee80211_proto.c:955 > 955 ieee80211_wme_updateparams(vap); > (kgdb) print ieee80211_wme_initparams > $13 = {void (struct ieee80211vap > *)} 0xffffffff809b3ca0 > (kgdb) frame 12 > #12 0xffffffff809a9aec in ieee80211_sta_join1 () > at /usr/src/sys/net80211/ieee80211_node.c:741 > 741 ieee80211_wme_initparams(vap); > (kgdb) print ieee80211_sta_join1 > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 > > (kgdb) frame 13 > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, > nstate=, arg=) > at /usr/src/sys/net80211/ieee80211_hostap.c:274 > 274 ieee80211_ht_adjust_channel(ic, > (kgdb) print hostap_newstate > $15 = {int (struct ieee80211vap *, enum ieee80211_state, > int)} 0xffffffff80990190 > frame 14 > #14 0xffffffff81a1a36a in run_newstate (vap=, > nstate=IEEE80211_S_RUN, arg=-1) > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 > 1881 return(rvp->newstate(vap, nstate, arg)); > (kgdb) print run_newstate > $16 = {int (struct ieee80211vap *, enum ieee80211_state, > int)} 0xffffffff81a19b30 > (kgdb) frame 15 > #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, > npending=) > at /usr/src/sys/net80211/ieee80211_proto.c:1756 > 1756 rc = vap->iv_newstate(vap, nstate, arg); > (kgdb) print ieee80211_newstate_cb > $17 = {void (void *, int)} 0xffffffff809b2d90 > (kgdb) frame 16 > #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) > at /usr/src/sys/kern/subr_taskqueue.c:333 > 333 task->ta_func(task->ta_context, pending); > (kgdb) print taskqueue_run_locked > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 > frame 17 > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=) > at /usr/src/sys/kern/subr_taskqueue.c:535 > 535 taskqueue_run_locked(tq); > (kgdb) print taskqueue_thread_loop > $19 = {void (void *)} 0xffffffff808f6340 > (kgdb) frame 18 > #18 0xffffffff8088198a in fork_exit ( > callout=0xffffffff808f6340 , > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) > at /usr/src/sys/kern/kern_fork.c:995 > 995 callout(arg, frame); > (kgdb) print fork_exit > $20 = {void (void (*)(void *, struct trapframe *), void *, struct trapframe > *)} 0xffffffff808818f0 > (kgdb) frame 19 > #19 0xffffffff80c758ce in fork_trampoline () > at /usr/src/sys/amd64/amd64/exception.S:606 > 606 call fork_exit > Current language: auto; currently asm > (kgdb) print fork_trampoline > $21 = {} 0xffffffff80c758c0 > frame 20 > #20 0x0000000000000000 in ?? () > > Thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd wrote: >> >> ok, do 'bt', and see what's being passed into ieee80211_beacon_update. >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print >> out the contents of the given variable name. >> >> That mbuf looks like it's NULL, which is odd. >> >> Thanks! >> >> >> -a >> >> >> On 28 January 2014 14:45, Pedro Flynn wrote: >> > OK! This is what I have: >> > >> > list * (0xffffffff809b1163) >> > Undefined command: "". Try "help". >> > (kgdb) list * (0xffffffff809b1163) >> > 0xffffffff809b1163 is in ieee80211_beacon_update >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). >> > 3094 /* XXX do WME aggressive mode processing? */ >> > 3095 IEEE80211_UNLOCK(ic); >> > 3096 return 1; /* just assume length changed */ >> > 3097 } >> > 3098 >> > 3099 wh = mtod(m, struct ieee80211_frame *); >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; >> > 3101 *(uint16_t *)&wh->i_seq[0] = >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); >> > 3103 M_SEQNO_SET(m, seqno); >> > Current language: auto; currently minimal >> > (kgdb) >> > >> > >> > (by the way, I'm building a kernel with debug symbols) >> > >> > Thanks, >> > >> > pflynn >> > >> > >> > >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd >> > wrote: >> >> >> >> Ok, fire up kgdb >> >> >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >> >> >> >> then >> >> >> >> (gdb) list * (0xffffffff809b1163) >> >> >> >> (.. that's the "instruction pointer" at the time of the panic.) >> >> >> >> I bet it's iv_bss. >> >> >> >> >> >> >> >> -a >> > >> > > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:06:41 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 8B8C16C0; Tue, 28 Jan 2014 23:06:41 +0000 (UTC) Received: from mail-qa0-x230.google.com (mail-qa0-x230.google.com [IPv6:2607:f8b0:400d:c00::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 299C61380; Tue, 28 Jan 2014 23:06:41 +0000 (UTC) Received: by mail-qa0-f48.google.com with SMTP id f11so1451679qae.35 for ; Tue, 28 Jan 2014 15:06:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=IA+nev6qh+DzHXIUONU6GBEGhI1dWXw/W5FqVtztEUo=; b=pMUzI9JWDr8Uc+LGqyc+OpmPHvwNOc2rgW7/hWWCZisqsAqvW+8j622suu0rSr4qO9 BLhrBX9VJXM0PYbkEx8dC38DueYNRqm09XihMoXgpR0TAGtR+X2Pe56bXei44CyXMN6V 9uNWtnFEZ+1ucvP9LifQ4+AvUCU5+CdBeXwOBQGzg9sxAtiKeGb641SvoveTbjFdBbR1 PKMyCp94xu+DIWLkgt8pAGMpn/uzsJzr0s2ZHGUm0Ms+ma3e740d6pKHyqBAZLkCOcS+ GAyhEq5RJPvBWHaOespfF++z2fWkbQuZGEJlGl9ub/8oyL5F3UtlcaSPlZS9NaZd9ltz neAQ== MIME-Version: 1.0 X-Received: by 10.140.30.230 with SMTP id d93mr6520037qgd.51.1390950399741; Tue, 28 Jan 2014 15:06:39 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 15:06:39 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 21:06:39 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:06:41 -0000 Just to bring to our attention frame 8: (kgdb) frame 8 #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, item=2) at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, mcast); Current language: auto; currently minimal (kgdb) print run_update_beacon $23 = {void (struct ieee80211vap *, int)} 0xffffffff81a19750 (kgdb) thanks, pflynn On Tue, Jan 28, 2014 at 9:04 PM, Adrian Chadd wrote: > Right, frame 8 (the run beacon update) is passing a NULL mbuf into > net80211. Why's it doing that. > > > > -a > > > On 28 January 2014 15:02, Pedro Flynn wrote: > > Here we go (this output is not beautiful...). Please, let me know if I > > missed something or if I did something wrong: > > > > bt output: > > > > #0 doadump (textdump=) at pcpu.h:219 > > #1 0xffffffff808af530 in kern_reboot (howto=260) > > at /usr/src/sys/kern/kern_shutdown.c:447 > > #2 0xffffffff808af8f4 in panic (fmt=) > > at /usr/src/sys/kern/kern_shutdown.c:754 > > #3 0xffffffff80c8e692 in trap_fatal (frame=, > > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 > > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, > usermode=0) > > at /usr/src/sys/amd64/amd64/trap.c:699 > > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) > > at /usr/src/sys/amd64/amd64/trap.c:463 > > #6 0xffffffff80c75392 in calltrap () > > at /usr/src/sys/amd64/amd64/exception.S:232 > > #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, > > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 > > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, > item=2) > > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 > > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( > > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 > > #10 0xffffffff809b437a in ieee80211_wme_updateparams > > (vap=0xfffff8000e8dd000) > > at /usr/src/sys/net80211/ieee80211_proto.c:1150 > > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap= > out>) > > at /usr/src/sys/net80211/ieee80211_proto.c:955 > > #12 0xffffffff809a9aec in ieee80211_sta_join1 () > > at /usr/src/sys/net80211/ieee80211_node.c:741 > > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, > > nstate=, arg=) > > at /usr/src/sys/net80211/ieee80211_hostap.c:274 > > #14 0xffffffff81a1a36a in run_newstate (vap=, > > nstate=IEEE80211_S_RUN, arg=-1) > > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 > > #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, > > npending=) > > at /usr/src/sys/net80211/ieee80211_proto.c:1756 > > #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) > > at /usr/src/sys/kern/subr_taskqueue.c:333 > > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg= out>) > > at /usr/src/sys/kern/subr_taskqueue.c:535 > > #18 0xffffffff8088198a in fork_exit ( > > callout=0xffffffff808f6340 , > > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) > > at /usr/src/sys/kern/kern_fork.c:995 > > #19 0xffffffff80c758ce in fork_trampoline () > > at /usr/src/sys/amd64/amd64/exception.S:606 > > #20 0x0000000000000000 in ?? () > > > > frame 0 > > #0 doadump (textdump=) at pcpu.h:219 > > 219 pcpu.h: No such file or directory. > > in pcpu.h > > print doadump > > $1 = {int (boolean_t)} 0xffffffff808af6f0 > > > > frame 1: > > #1 0xffffffff808af530 in kern_reboot (howto=260) > > at /usr/src/sys/kern/kern_shutdown.c:447 > > 447 doadump(TRUE); > > print kern_reboot > > print kern_reboot > > $3 = {void (int)} 0xffffffff808aedf0 > > > > frame 2 > > #2 0xffffffff808af8f4 in panic (fmt=) > > at /usr/src/sys/kern/kern_shutdown.c:754 > > 754 kern_reboot(bootopt); > > (kgdb) print panic > > $4 = {void (const char *)} 0xffffffff808af760 > > > > frame 3 > > #3 0xffffffff80c8e692 in trap_fatal (frame=, > > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 > > 882 panic("%s", trap_msg[type]); > > (kgdb) print trap_fatal > > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 > > > > (kgdb) frame 4 > > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, > usermode=0) > > at /usr/src/sys/amd64/amd64/trap.c:699 > > 699 trap_fatal(frame, eva); > > (kgdb) print trap_pfault > > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 > > (kgdb) frame 5 > > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) > > at /usr/src/sys/amd64/amd64/trap.c:463 > > 463 (void) trap_pfault(frame, FALSE); > > (kgdb) print trap > > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 > > > > frame 6 > > #6 0xffffffff80c75392 in calltrap () > > at /usr/src/sys/amd64/amd64/exception.S:232 > > 232 call trap > > Current language: auto; currently asm > > (kgdb) print calltrap > > $8 = {} 0xffffffff80c7538a > > (kgdb) frame 7 > > #7 0xffffffff809b1163 in ieee80211_beacon_update (ni=0xfffffe0000ffc000, > > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 > > 161 atomic.h: No such file or directory. > > in atomic.h > > Current language: auto; currently minimal > > (kgdb) print ieee80211_beacon_update > > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, > > struct mbuf *, int)} 0xffffffff809b1090 > > > > frame 8 > > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, > item=2) > > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 > > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, > > mcast); > > (kgdb) print run_update_beacon > > $10 = {void (struct ieee80211vap *, > > int)} 0xffffffff81a19750 > > (kgdb) frame 9 > > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( > > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 > > 814 vap->iv_update_beacon(vap, what); > > (kgdb) print ieee80211_wme_updateparams_locked > > $11 = {void (struct ieee80211vap > > *)} 0xffffffff809b3f90 > > (kgdb) frame 10 > > #10 0xffffffff809b437a in ieee80211_wme_updateparams > > (vap=0xfffff8000e8dd000) > > at /usr/src/sys/net80211/ieee80211_proto.c:1150 > > 1150 ieee80211_wme_updateparams_locked(vap); > > (kgdb) print ieee80211_wme_updateparams > > $12 = {void (struct ieee80211vap > > *)} 0xffffffff809b4320 > > > > frame 11 > > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap= > out>) > > at /usr/src/sys/net80211/ieee80211_proto.c:955 > > 955 ieee80211_wme_updateparams(vap); > > (kgdb) print ieee80211_wme_initparams > > $13 = {void (struct ieee80211vap > > *)} 0xffffffff809b3ca0 > > (kgdb) frame 12 > > #12 0xffffffff809a9aec in ieee80211_sta_join1 () > > at /usr/src/sys/net80211/ieee80211_node.c:741 > > 741 ieee80211_wme_initparams(vap); > > (kgdb) print ieee80211_sta_join1 > > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 > > > > (kgdb) frame 13 > > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, > > nstate=, arg=) > > at /usr/src/sys/net80211/ieee80211_hostap.c:274 > > 274 ieee80211_ht_adjust_channel(ic, > > (kgdb) print hostap_newstate > > $15 = {int (struct ieee80211vap *, enum ieee80211_state, > > int)} 0xffffffff80990190 > > frame 14 > > #14 0xffffffff81a1a36a in run_newstate (vap=, > > nstate=IEEE80211_S_RUN, arg=-1) > > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 > > 1881 return(rvp->newstate(vap, nstate, arg)); > > (kgdb) print run_newstate > > $16 = {int (struct ieee80211vap *, enum ieee80211_state, > > int)} 0xffffffff81a19b30 > > (kgdb) frame 15 > > #15 0xffffffff809b2edf in ieee80211_newstate_cb (xvap=0xfffff8000e8dd000, > > npending=) > > at /usr/src/sys/net80211/ieee80211_proto.c:1756 > > 1756 rc = vap->iv_newstate(vap, nstate, arg); > > (kgdb) print ieee80211_newstate_cb > > $17 = {void (void *, int)} 0xffffffff809b2d90 > > (kgdb) frame 16 > > #16 0xffffffff808f5b66 in taskqueue_run_locked (queue=0xfffff8000e8e4600) > > at /usr/src/sys/kern/subr_taskqueue.c:333 > > 333 task->ta_func(task->ta_context, pending); > > (kgdb) print taskqueue_run_locked > > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 > > > frame 17 > > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg= out>) > > at /usr/src/sys/kern/subr_taskqueue.c:535 > > 535 taskqueue_run_locked(tq); > > (kgdb) print taskqueue_thread_loop > > $19 = {void (void *)} 0xffffffff808f6340 > > (kgdb) frame 18 > > #18 0xffffffff8088198a in fork_exit ( > > callout=0xffffffff808f6340 , > > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) > > at /usr/src/sys/kern/kern_fork.c:995 > > 995 callout(arg, frame); > > (kgdb) print fork_exit > > $20 = {void (void (*)(void *, struct trapframe *), void *, struct > trapframe > > *)} 0xffffffff808818f0 > > (kgdb) frame 19 > > #19 0xffffffff80c758ce in fork_trampoline () > > at /usr/src/sys/amd64/amd64/exception.S:606 > > 606 call fork_exit > > Current language: auto; currently asm > > (kgdb) print fork_trampoline > > $21 = {} 0xffffffff80c758c0 > > > frame 20 > > #20 0x0000000000000000 in ?? () > > > > Thanks, > > > > pflynn > > > > > > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd > wrote: > >> > >> ok, do 'bt', and see what's being passed into ieee80211_beacon_update. > >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print > >> out the contents of the given variable name. > >> > >> That mbuf looks like it's NULL, which is odd. > >> > >> Thanks! > >> > >> > >> -a > >> > >> > >> On 28 January 2014 14:45, Pedro Flynn wrote: > >> > OK! This is what I have: > >> > > >> > list * (0xffffffff809b1163) > >> > Undefined command: "". Try "help". > >> > (kgdb) list * (0xffffffff809b1163) > >> > 0xffffffff809b1163 is in ieee80211_beacon_update > >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). > >> > 3094 /* XXX do WME aggressive mode processing? */ > >> > 3095 IEEE80211_UNLOCK(ic); > >> > 3096 return 1; /* just assume length changed */ > >> > 3097 } > >> > 3098 > >> > 3099 wh = mtod(m, struct ieee80211_frame *); > >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; > >> > 3101 *(uint16_t *)&wh->i_seq[0] = > >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); > >> > 3103 M_SEQNO_SET(m, seqno); > >> > Current language: auto; currently minimal > >> > (kgdb) > >> > > >> > > >> > (by the way, I'm building a kernel with debug symbols) > >> > > >> > Thanks, > >> > > >> > pflynn > >> > > >> > > >> > > >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd > >> > wrote: > >> >> > >> >> Ok, fire up kgdb > >> >> > >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 > >> >> > >> >> then > >> >> > >> >> (gdb) list * (0xffffffff809b1163) > >> >> > >> >> (.. that's the "instruction pointer" at the time of the panic.) > >> >> > >> >> I bet it's iv_bss. > >> >> > >> >> > >> >> > >> >> -a > >> > > >> > > > > > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:10:42 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BF8B2912; Tue, 28 Jan 2014 23:10:42 +0000 (UTC) Received: from mail-qa0-x233.google.com (mail-qa0-x233.google.com [IPv6:2607:f8b0:400d:c00::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 5DED31465; Tue, 28 Jan 2014 23:10:42 +0000 (UTC) Received: by mail-qa0-f51.google.com with SMTP id f11so1434211qae.38 for ; Tue, 28 Jan 2014 15:10:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=ZyZzSOUS8CwZWCAEKCHIrlHPzLeuWCqcWrlDG50UmCk=; b=WRVnEUz5Ij37nMSPDW0B+yFdAH7efEJDzLrDxTWLexLKU9j3yaBs9S/MzL5R7OOcTv w4YXiSPIIL26rlPUJyNEvKUZxhH/kDmGTmBC71u2DMjS7kKC/9aqVOh85SaGu78ogKW4 mLwEe08XZaLvfyHIEEyo8g2QtIGp51c6wOaWfwKBMBvrOAp9iIyDw0dE3sLyAC2kfpgW CRWr6zunR38gUax5OfWpVp4giuLchY26d4g+mcDYuYhgGfKrf3t7AaZMbggyZQ9NTgA6 X0+Ov49qe6lFvNS2dh6v4vUXjBPmK/yDL0bEin8fiJTsaMVMsz4bvnh3ZggX45KJfQ5n CDqQ== MIME-Version: 1.0 X-Received: by 10.224.43.72 with SMTP id v8mr6968204qae.52.1390950641496; Tue, 28 Jan 2014 15:10:41 -0800 (PST) Received: by 10.140.27.151 with HTTP; Tue, 28 Jan 2014 15:10:41 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 21:10:41 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:10:42 -0000 You mean rvp->beacon_mbuf is null? Thanks, pflynn On Tue, Jan 28, 2014 at 9:06 PM, Pedro Flynn wrote: > Just to bring to our attention frame 8: > > (kgdb) frame 8 > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, > item=2) > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, > mcast); > Current language: auto; currently minimal > (kgdb) print run_update_beacon > $23 = {void (struct ieee80211vap *, > int)} 0xffffffff81a19750 > (kgdb) > > thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 9:04 PM, Adrian Chadd wrote: > >> Right, frame 8 (the run beacon update) is passing a NULL mbuf into >> net80211. Why's it doing that. >> >> >> >> -a >> >> >> On 28 January 2014 15:02, Pedro Flynn wrote: >> > Here we go (this output is not beautiful...). Please, let me know if I >> > missed something or if I did something wrong: >> > >> > bt output: >> > >> > #0 doadump (textdump=) at pcpu.h:219 >> > #1 0xffffffff808af530 in kern_reboot (howto=260) >> > at /usr/src/sys/kern/kern_shutdown.c:447 >> > #2 0xffffffff808af8f4 in panic (fmt=) >> > at /usr/src/sys/kern/kern_shutdown.c:754 >> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >> usermode=0) >> > at /usr/src/sys/amd64/amd64/trap.c:699 >> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >> > at /usr/src/sys/amd64/amd64/trap.c:463 >> > #6 0xffffffff80c75392 in calltrap () >> > at /usr/src/sys/amd64/amd64/exception.S:232 >> > #7 0xffffffff809b1163 in ieee80211_beacon_update >> (ni=0xfffffe0000ffc000, >> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >> item=2) >> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >> > (vap=0xfffff8000e8dd000) >> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=> > out>) >> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >> > at /usr/src/sys/net80211/ieee80211_node.c:741 >> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >> > nstate=, arg=) >> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >> > #14 0xffffffff81a1a36a in run_newstate (vap=, >> > nstate=IEEE80211_S_RUN, arg=-1) >> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >> (xvap=0xfffff8000e8dd000, >> > npending=) >> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >> > #16 0xffffffff808f5b66 in taskqueue_run_locked >> (queue=0xfffff8000e8e4600) >> > at /usr/src/sys/kern/subr_taskqueue.c:333 >> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=> out>) >> > at /usr/src/sys/kern/subr_taskqueue.c:535 >> > #18 0xffffffff8088198a in fork_exit ( >> > callout=0xffffffff808f6340 , >> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >> > at /usr/src/sys/kern/kern_fork.c:995 >> > #19 0xffffffff80c758ce in fork_trampoline () >> > at /usr/src/sys/amd64/amd64/exception.S:606 >> > #20 0x0000000000000000 in ?? () >> > >> > frame 0 >> > #0 doadump (textdump=) at pcpu.h:219 >> > 219 pcpu.h: No such file or directory. >> > in pcpu.h >> > print doadump >> > $1 = {int (boolean_t)} 0xffffffff808af6f0 >> > >> > frame 1: >> > #1 0xffffffff808af530 in kern_reboot (howto=260) >> > at /usr/src/sys/kern/kern_shutdown.c:447 >> > 447 doadump(TRUE); >> > print kern_reboot >> > print kern_reboot >> > $3 = {void (int)} 0xffffffff808aedf0 >> > >> > frame 2 >> > #2 0xffffffff808af8f4 in panic (fmt=) >> > at /usr/src/sys/kern/kern_shutdown.c:754 >> > 754 kern_reboot(bootopt); >> > (kgdb) print panic >> > $4 = {void (const char *)} 0xffffffff808af760 >> > >> > frame 3 >> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >> > 882 panic("%s", trap_msg[type]); >> > (kgdb) print trap_fatal >> > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 >> > >> > (kgdb) frame 4 >> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >> usermode=0) >> > at /usr/src/sys/amd64/amd64/trap.c:699 >> > 699 trap_fatal(frame, eva); >> > (kgdb) print trap_pfault >> > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 >> > (kgdb) frame 5 >> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >> > at /usr/src/sys/amd64/amd64/trap.c:463 >> > 463 (void) trap_pfault(frame, FALSE); >> > (kgdb) print trap >> > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 >> > >> > frame 6 >> > #6 0xffffffff80c75392 in calltrap () >> > at /usr/src/sys/amd64/amd64/exception.S:232 >> > 232 call trap >> > Current language: auto; currently asm >> > (kgdb) print calltrap >> > $8 = {} 0xffffffff80c7538a >> > (kgdb) frame 7 >> > #7 0xffffffff809b1163 in ieee80211_beacon_update >> (ni=0xfffffe0000ffc000, >> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >> > 161 atomic.h: No such file or directory. >> > in atomic.h >> > Current language: auto; currently minimal >> > (kgdb) print ieee80211_beacon_update >> > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, >> > struct mbuf *, int)} 0xffffffff809b1090 >> > >> > frame 8 >> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >> item=2) >> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >> > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >> > mcast); >> > (kgdb) print run_update_beacon >> > $10 = {void (struct ieee80211vap *, >> > int)} 0xffffffff81a19750 >> > (kgdb) frame 9 >> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >> > 814 vap->iv_update_beacon(vap, what); >> > (kgdb) print ieee80211_wme_updateparams_locked >> > $11 = {void (struct ieee80211vap >> > *)} 0xffffffff809b3f90 >> > (kgdb) frame 10 >> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >> > (vap=0xfffff8000e8dd000) >> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >> > 1150 ieee80211_wme_updateparams_locked(vap); >> > (kgdb) print ieee80211_wme_updateparams >> > $12 = {void (struct ieee80211vap >> > *)} 0xffffffff809b4320 >> > >> > frame 11 >> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=> > out>) >> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >> > 955 ieee80211_wme_updateparams(vap); >> > (kgdb) print ieee80211_wme_initparams >> > $13 = {void (struct ieee80211vap >> > *)} 0xffffffff809b3ca0 >> > (kgdb) frame 12 >> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >> > at /usr/src/sys/net80211/ieee80211_node.c:741 >> > 741 ieee80211_wme_initparams(vap); >> > (kgdb) print ieee80211_sta_join1 >> > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 >> > >> > (kgdb) frame 13 >> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >> > nstate=, arg=) >> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >> > 274 ieee80211_ht_adjust_channel(ic, >> > (kgdb) print hostap_newstate >> > $15 = {int (struct ieee80211vap *, enum ieee80211_state, >> > int)} 0xffffffff80990190 >> > frame 14 >> > #14 0xffffffff81a1a36a in run_newstate (vap=, >> > nstate=IEEE80211_S_RUN, arg=-1) >> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >> > 1881 return(rvp->newstate(vap, nstate, arg)); >> > (kgdb) print run_newstate >> > $16 = {int (struct ieee80211vap *, enum ieee80211_state, >> > int)} 0xffffffff81a19b30 >> > (kgdb) frame 15 >> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >> (xvap=0xfffff8000e8dd000, >> > npending=) >> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >> > 1756 rc = vap->iv_newstate(vap, nstate, arg); >> > (kgdb) print ieee80211_newstate_cb >> > $17 = {void (void *, int)} 0xffffffff809b2d90 >> > (kgdb) frame 16 >> > #16 0xffffffff808f5b66 in taskqueue_run_locked >> (queue=0xfffff8000e8e4600) >> > at /usr/src/sys/kern/subr_taskqueue.c:333 >> > 333 task->ta_func(task->ta_context, pending); >> > (kgdb) print taskqueue_run_locked >> > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 >> >> > frame 17 >> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=> out>) >> > at /usr/src/sys/kern/subr_taskqueue.c:535 >> > 535 taskqueue_run_locked(tq); >> > (kgdb) print taskqueue_thread_loop >> > $19 = {void (void *)} 0xffffffff808f6340 >> > (kgdb) frame 18 >> > #18 0xffffffff8088198a in fork_exit ( >> > callout=0xffffffff808f6340 , >> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >> > at /usr/src/sys/kern/kern_fork.c:995 >> > 995 callout(arg, frame); >> > (kgdb) print fork_exit >> > $20 = {void (void (*)(void *, struct trapframe *), void *, struct >> trapframe >> > *)} 0xffffffff808818f0 >> > (kgdb) frame 19 >> > #19 0xffffffff80c758ce in fork_trampoline () >> > at /usr/src/sys/amd64/amd64/exception.S:606 >> > 606 call fork_exit >> > Current language: auto; currently asm >> > (kgdb) print fork_trampoline >> > $21 = {} 0xffffffff80c758c0 >> >> > frame 20 >> > #20 0x0000000000000000 in ?? () >> > >> > Thanks, >> > >> > pflynn >> > >> > >> > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd >> wrote: >> >> >> >> ok, do 'bt', and see what's being passed into ieee80211_beacon_update. >> >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print >> >> out the contents of the given variable name. >> >> >> >> That mbuf looks like it's NULL, which is odd. >> >> >> >> Thanks! >> >> >> >> >> >> -a >> >> >> >> >> >> On 28 January 2014 14:45, Pedro Flynn wrote: >> >> > OK! This is what I have: >> >> > >> >> > list * (0xffffffff809b1163) >> >> > Undefined command: "". Try "help". >> >> > (kgdb) list * (0xffffffff809b1163) >> >> > 0xffffffff809b1163 is in ieee80211_beacon_update >> >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). >> >> > 3094 /* XXX do WME aggressive mode processing? */ >> >> > 3095 IEEE80211_UNLOCK(ic); >> >> > 3096 return 1; /* just assume length changed */ >> >> > 3097 } >> >> > 3098 >> >> > 3099 wh = mtod(m, struct ieee80211_frame *); >> >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; >> >> > 3101 *(uint16_t *)&wh->i_seq[0] = >> >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); >> >> > 3103 M_SEQNO_SET(m, seqno); >> >> > Current language: auto; currently minimal >> >> > (kgdb) >> >> > >> >> > >> >> > (by the way, I'm building a kernel with debug symbols) >> >> > >> >> > Thanks, >> >> > >> >> > pflynn >> >> > >> >> > >> >> > >> >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd >> >> > wrote: >> >> >> >> >> >> Ok, fire up kgdb >> >> >> >> >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >> >> >> >> >> >> then >> >> >> >> >> >> (gdb) list * (0xffffffff809b1163) >> >> >> >> >> >> (.. that's the "instruction pointer" at the time of the panic.) >> >> >> >> >> >> I bet it's iv_bss. >> >> >> >> >> >> >> >> >> >> >> >> -a >> >> > >> >> > >> > >> > >> > > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:54:55 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id ADDC7BA4 for ; Tue, 28 Jan 2014 23:54:55 +0000 (UTC) Received: from mail-qa0-x230.google.com (mail-qa0-x230.google.com [IPv6:2607:f8b0:400d:c00::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 5A02D176C for ; Tue, 28 Jan 2014 23:54:55 +0000 (UTC) Received: by mail-qa0-f48.google.com with SMTP id f11so1507505qae.35 for ; Tue, 28 Jan 2014 15:54:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=esBzxYTResCntpk7H85CPBhMl72cd5YYQSEPuVFGBjk=; b=LIAHFQ1zlmpq73g76naYiwoh9f5MbgmgUcYblshuH2BkRYLRDCRRHleP93ybN/xdU9 2yFgNHJKavQ5u5TTZFr06LD9ScNHHkmFPssPqqi4ntW3C8g2prz5I+J1Kh4U1A38XRKy GvxLRdxY2YJyYdicRvKZKSe1lH5h2nFDfAE+IAWlnkj+c7PrKsRkJQCzGN0SY5h1pszQ GnH7Xu/aV7hhY855wmneG0j6I3ItVB0U2Lcx8A4sRHX0JBrCVJksyo0mjkZUIqsfVZBs AYbKw0IEHWjUIda+aTBzCN73mpRhtLZnaOC51YDM0QR54MVD9SSw3GT6fypJNkbZbALk fXqg== MIME-Version: 1.0 X-Received: by 10.224.16.72 with SMTP id n8mr7269465qaa.76.1390953294586; Tue, 28 Jan 2014 15:54:54 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 15:54:53 -0800 (PST) Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 15:54:53 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 15:54:53 -0800 X-Google-Sender-Auth: oveR163gazaMeKiIn9vPH24NTRs Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Adrian Chadd To: Pedro Flynn Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: freebsd-wireless@freebsd.org X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:54:55 -0000 Yup. Is it? Adrian On Jan 28, 2014 6:10 PM, "Pedro Flynn" wrote: > You mean rvp->beacon_mbuf is null? > > Thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 9:06 PM, Pedro Flynn wrote: > >> Just to bring to our attention frame 8: >> >> (kgdb) frame 8 >> #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >> item=2) >> at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >> 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >> mcast); >> Current language: auto; currently minimal >> (kgdb) print run_update_beacon >> $23 = {void (struct ieee80211vap *, >> int)} 0xffffffff81a19750 >> (kgdb) >> >> thanks, >> >> pflynn >> >> >> On Tue, Jan 28, 2014 at 9:04 PM, Adrian Chadd wrote: >> >>> Right, frame 8 (the run beacon update) is passing a NULL mbuf into >>> net80211. Why's it doing that. >>> >>> >>> >>> -a >>> >>> >>> On 28 January 2014 15:02, Pedro Flynn wrote: >>> > Here we go (this output is not beautiful...). Please, let me know if I >>> > missed something or if I did something wrong: >>> > >>> > bt output: >>> > >>> > #0 doadump (textdump=) at pcpu.h:219 >>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>> > #2 0xffffffff808af8f4 in panic (fmt=) >>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>> usermode=0) >>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>> > #6 0xffffffff80c75392 in calltrap () >>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>> (ni=0xfffffe0000ffc000, >>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>> item=2) >>> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>> > (vap=0xfffff8000e8dd000) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>> optimized >>> > out>) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>> > nstate=, arg=) >>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>> > nstate=IEEE80211_S_RUN, arg=-1) >>> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>> (xvap=0xfffff8000e8dd000, >>> > npending=) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>> (queue=0xfffff8000e8e4600) >>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>> out>) >>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>> > #18 0xffffffff8088198a in fork_exit ( >>> > callout=0xffffffff808f6340 , >>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>> > at /usr/src/sys/kern/kern_fork.c:995 >>> > #19 0xffffffff80c758ce in fork_trampoline () >>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>> > #20 0x0000000000000000 in ?? () >>> > >>> > frame 0 >>> > #0 doadump (textdump=) at pcpu.h:219 >>> > 219 pcpu.h: No such file or directory. >>> > in pcpu.h >>> > print doadump >>> > $1 = {int (boolean_t)} 0xffffffff808af6f0 >>> > >>> > frame 1: >>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>> > 447 doadump(TRUE); >>> > print kern_reboot >>> > print kern_reboot >>> > $3 = {void (int)} 0xffffffff808aedf0 >>> > >>> > frame 2 >>> > #2 0xffffffff808af8f4 in panic (fmt=) >>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>> > 754 kern_reboot(bootopt); >>> > (kgdb) print panic >>> > $4 = {void (const char *)} 0xffffffff808af760 >>> > >>> > frame 3 >>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>> > 882 panic("%s", trap_msg[type]); >>> > (kgdb) print trap_fatal >>> > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 >>> > >>> > (kgdb) frame 4 >>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>> usermode=0) >>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>> > 699 trap_fatal(frame, eva); >>> > (kgdb) print trap_pfault >>> > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 >>> > (kgdb) frame 5 >>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>> > 463 (void) trap_pfault(frame, FALSE); >>> > (kgdb) print trap >>> > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 >>> > >>> > frame 6 >>> > #6 0xffffffff80c75392 in calltrap () >>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>> > 232 call trap >>> > Current language: auto; currently asm >>> > (kgdb) print calltrap >>> > $8 = {} 0xffffffff80c7538a >>> > (kgdb) frame 7 >>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>> (ni=0xfffffe0000ffc000, >>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>> > 161 atomic.h: No such file or directory. >>> > in atomic.h >>> > Current language: auto; currently minimal >>> > (kgdb) print ieee80211_beacon_update >>> > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, >>> > struct mbuf *, int)} 0xffffffff809b1090 >>> > >>> > frame 8 >>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>> item=2) >>> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>> > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >>> > mcast); >>> > (kgdb) print run_update_beacon >>> > $10 = {void (struct ieee80211vap *, >>> > int)} 0xffffffff81a19750 >>> > (kgdb) frame 9 >>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>> > 814 vap->iv_update_beacon(vap, what); >>> > (kgdb) print ieee80211_wme_updateparams_locked >>> > $11 = {void (struct ieee80211vap >>> > *)} 0xffffffff809b3f90 >>> > (kgdb) frame 10 >>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>> > (vap=0xfffff8000e8dd000) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>> > 1150 ieee80211_wme_updateparams_locked(vap); >>> > (kgdb) print ieee80211_wme_updateparams >>> > $12 = {void (struct ieee80211vap >>> > *)} 0xffffffff809b4320 >>> > >>> > frame 11 >>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>> optimized >>> > out>) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>> > 955 ieee80211_wme_updateparams(vap); >>> > (kgdb) print ieee80211_wme_initparams >>> > $13 = {void (struct ieee80211vap >>> > *)} 0xffffffff809b3ca0 >>> > (kgdb) frame 12 >>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>> > 741 ieee80211_wme_initparams(vap); >>> > (kgdb) print ieee80211_sta_join1 >>> > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 >>> > >>> > (kgdb) frame 13 >>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>> > nstate=, arg=) >>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>> > 274 ieee80211_ht_adjust_channel(ic, >>> > (kgdb) print hostap_newstate >>> > $15 = {int (struct ieee80211vap *, enum ieee80211_state, >>> > int)} 0xffffffff80990190 >>> > frame 14 >>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>> > nstate=IEEE80211_S_RUN, arg=-1) >>> > at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>> > 1881 return(rvp->newstate(vap, nstate, arg)); >>> > (kgdb) print run_newstate >>> > $16 = {int (struct ieee80211vap *, enum ieee80211_state, >>> > int)} 0xffffffff81a19b30 >>> > (kgdb) frame 15 >>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>> (xvap=0xfffff8000e8dd000, >>> > npending=) >>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>> > 1756 rc = vap->iv_newstate(vap, nstate, arg); >>> > (kgdb) print ieee80211_newstate_cb >>> > $17 = {void (void *, int)} 0xffffffff809b2d90 >>> > (kgdb) frame 16 >>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>> (queue=0xfffff8000e8e4600) >>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>> > 333 task->ta_func(task->ta_context, pending); >>> > (kgdb) print taskqueue_run_locked >>> > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 >>> >>> > frame 17 >>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>> out>) >>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>> > 535 taskqueue_run_locked(tq); >>> > (kgdb) print taskqueue_thread_loop >>> > $19 = {void (void *)} 0xffffffff808f6340 >>> > (kgdb) frame 18 >>> > #18 0xffffffff8088198a in fork_exit ( >>> > callout=0xffffffff808f6340 , >>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>> > at /usr/src/sys/kern/kern_fork.c:995 >>> > 995 callout(arg, frame); >>> > (kgdb) print fork_exit >>> > $20 = {void (void (*)(void *, struct trapframe *), void *, struct >>> trapframe >>> > *)} 0xffffffff808818f0 >>> > (kgdb) frame 19 >>> > #19 0xffffffff80c758ce in fork_trampoline () >>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>> > 606 call fork_exit >>> > Current language: auto; currently asm >>> > (kgdb) print fork_trampoline >>> > $21 = {} 0xffffffff80c758c0 >>> >>> > frame 20 >>> > #20 0x0000000000000000 in ?? () >>> > >>> > Thanks, >>> > >>> > pflynn >>> > >>> > >>> > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd >>> wrote: >>> >> >>> >> ok, do 'bt', and see what's being passed into ieee80211_beacon_update. >>> >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to print >>> >> out the contents of the given variable name. >>> >> >>> >> That mbuf looks like it's NULL, which is odd. >>> >> >>> >> Thanks! >>> >> >>> >> >>> >> -a >>> >> >>> >> >>> >> On 28 January 2014 14:45, Pedro Flynn wrote: >>> >> > OK! This is what I have: >>> >> > >>> >> > list * (0xffffffff809b1163) >>> >> > Undefined command: "". Try "help". >>> >> > (kgdb) list * (0xffffffff809b1163) >>> >> > 0xffffffff809b1163 is in ieee80211_beacon_update >>> >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). >>> >> > 3094 /* XXX do WME aggressive mode processing? */ >>> >> > 3095 IEEE80211_UNLOCK(ic); >>> >> > 3096 return 1; /* just assume length changed */ >>> >> > 3097 } >>> >> > 3098 >>> >> > 3099 wh = mtod(m, struct ieee80211_frame *); >>> >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; >>> >> > 3101 *(uint16_t *)&wh->i_seq[0] = >>> >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); >>> >> > 3103 M_SEQNO_SET(m, seqno); >>> >> > Current language: auto; currently minimal >>> >> > (kgdb) >>> >> > >>> >> > >>> >> > (by the way, I'm building a kernel with debug symbols) >>> >> > >>> >> > Thanks, >>> >> > >>> >> > pflynn >>> >> > >>> >> > >>> >> > >>> >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd >>> >> > wrote: >>> >> >> >>> >> >> Ok, fire up kgdb >>> >> >> >>> >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >>> >> >> >>> >> >> then >>> >> >> >>> >> >> (gdb) list * (0xffffffff809b1163) >>> >> >> >>> >> >> (.. that's the "instruction pointer" at the time of the panic.) >>> >> >> >>> >> >> I bet it's iv_bss. >>> >> >> >>> >> >> >>> >> >> >>> >> >> -a >>> >> > >>> >> > >>> > >>> > >>> >> >> > From owner-freebsd-wireless@FreeBSD.ORG Tue Jan 28 23:57:02 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EA303C45; Tue, 28 Jan 2014 23:57:02 +0000 (UTC) Received: from mail-qc0-x234.google.com (mail-qc0-x234.google.com [IPv6:2607:f8b0:400d:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8F8361783; Tue, 28 Jan 2014 23:57:02 +0000 (UTC) Received: by mail-qc0-f180.google.com with SMTP id i17so1705097qcy.39 for ; Tue, 28 Jan 2014 15:57:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=I94BemUdRokfzDx/5l130dyyFA1Pvm/yatxS9SQmS1c=; b=Ez/l2nEv72nE9OzM0ESSx1lD8imPeNPyDF4a99JSGvIlA3c5QZu4gpyNETxF+Zc/N2 s/PIgvA0+trIwksgGvxB15rN0jeS7J8HA1rW42ILxDPaW505qcKjbDpMjd/sZ/X3uPYi X23aT1QDmBrhBigh7ke0c8mVhYzuZFl0Vwir3QFkKQuyDMJrO//pLSqjsymQVnrdXdq9 EkXHQeu6JyrewgKey6Z12cYpTcpny2wZ4T09Kz9kfnsfMietGY5BDv1iyS6zjBcAkBMm rgwy+FVdpGYdWfrv8pJKS264G8F0FTVc94Kd2Ku75LpaOuvV4yKToGj3n6k23Z7KHNwM Dezw== MIME-Version: 1.0 X-Received: by 10.224.122.208 with SMTP id m16mr7131914qar.55.1390953421727; Tue, 28 Jan 2014 15:57:01 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 15:57:01 -0800 (PST) Received: by 10.224.52.8 with HTTP; Tue, 28 Jan 2014 15:57:01 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 15:57:01 -0800 X-Google-Sender-Auth: 6TrbDJYSxfdA29JOgbel_cu9Bb8 Message-ID: Subject: Re: IWN hangs periodically on 10.0RC3 From: Adrian Chadd To: Kevin Oberman Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: freebsd-wireless@freebsd.org, FreeBSD Stable Mailing List X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jan 2014 23:57:03 -0000 What's in dmesg? Did the firmware panic? Adrian On Jan 28, 2014 2:16 AM, "Kevin Oberman" wrote: > On Fri, Jan 10, 2014 at 9:51 PM, Kevin Oberman wrote: > >> On Fri, Jan 10, 2014 at 9:37 AM, Adrian Chadd wrote: >> >>> .. when you see it hang, does anything get logged in dmesg (eg a >>> firmware panic) ? >>> >>> Try recompiling your kernel with: >>> >>> IEEE80211_DEBUG >>> IWN_DEBUG >>> >>> That way it can be debugged :) >>> >>> The first thing I'd check is whether there's more fun races going on >>> in the crypto code - try wlandebug +crypto . >>> >>> >>> -a >>> >> >> I just sent a message about issues I am seeing with my IWN to wireless@. >> Then I saw these responses. Sorry. >> >> As far as logs go, I wee a number if cases of the following sequence: >> Jan 1 18:00:12 rogue dbus[1451]: [system] Activating service >> name='org.freedesktop.PackageKit' (using servicehelper) >> Jan 1 18:00:12 rogue dbus[1451]: [system] Successfully activated service >> 'org.freedesktop.PackageKit' >> Jan 1 18:28:56 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-DISCONNECTED >> bssid=00:26:b8:67:c3:2d reason=0 >> Jan 1 18:28:56 rogue kernel: wlan0: link state changed to DOWN >> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Trying to associate >> with 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) >> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Associated with >> 00:26:b8:67:c3:2d >> Jan 1 18:28:59 rogue kernel: wlan0: link state changed to UP >> Jan 1 18:28:59 rogue dhclient[652]: send_packet: No buffer space >> available >> Jan 1 18:28:59 rogue devd: Executing '/etc/rc.d/dhclient quietstart >> wlan0' >> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: WPA: Key negotiation >> completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] >> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-CONNECTED - >> Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] >> Jan 1 18:29:02 rogue dhclient: New IP Address (wlan0): 192.168.1.5 >> Jan 1 18:29:02 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 >> Jan 1 18:29:02 rogue dhclient: New Broadcast Address (wlan0): >> 192.168.1.255 >> Jan 1 18:29:02 rogue dhclient: New Routers (wlan0): 192.168.1.1 >> >> So it seems that the bounce is happening fairly often, but the system >> usually recovers. It seems to be pretty consistently 2-3 time4s a day. >> Note that the dbus messages about packagekit always immediately precede >> the link going down. >> >> Every tthe or four of these fail to recover: >> Jan 3 14:09:05 rogue kernel: wlan0: link state changed to DOWN >> Jan 3 14:09:56 rogue ntpd[1303]: sendto(198.129.254.218) (fd=25): >> Network is down >> Jan 3 14:10:15 rogue ntpd[1303]: sendto(208.79.18.86) (fd=25): Network >> is down >> Jan 3 14:10:29 rogue ntpd[1303]: sendto(198.124.252.90) (fd=25): Network >> is down >> Jan 3 14:10:49 rogue ntpd[1303]: sendto(198.55.111.5) (fd=25): Network >> is down >> Jan 3 14:11:00 rogue ntpd[1303]: sendto(192.95.38.104) (fd=25): Network >> is down >> Jan 3 14:14:02 rogue ntpd[1303]: sendto(198.129.252.38) (fd=25): Network >> is down >> Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, >> val=0, arg_len=0]: Operation not supported >> Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, >> val=0, arg_len=0]: Operation not supported >> Jan 3 14:14:12 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-TERMINATING >> Jan 3 14:14:12 rogue dhclient[652]: connection closed >> Jan 3 14:14:12 rogue dhclient[652]: exiting. >> Jan 3 14:14:12 rogue wpa_supplicant[67153]: Successfully initialized >> wpa_supplicant >> Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Trying to associate >> with 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) >> Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Associated with >> 00:26:b8:67:c3:2d >> Jan 3 14:14:16 rogue kernel: wlan0: link state changed to UP >> Jan 3 14:14:16 rogue devd: Executing '/etc/rc.d/dhclient quietstart >> wlan0' >> Jan 3 14:14:16 rogue dhclient[67191]: send_packet: No buffer space >> available >> Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: WPA: Key negotiation >> completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] >> Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: CTRL-EVENT-CONNECTED >> - Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] >> Jan 3 14:14:18 rogue dhclient: New IP Address (wlan0): 192.168.1.5 >> Jan 3 14:14:18 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 >> Jan 3 14:14:18 rogue dhclient: New Broadcast Address (wlan0): >> 192.168.1.255 >> Jan 3 14:14:18 rogue dhclient: New Routers (wlan0): 192.168.1.1 >> >> The restart took place when I restarted the interface about 5 minutes >> after it went down and, as you can see, it came up normally. I'll admit >> that I am completely baffled by the dbus/packagekit tie-in as I can't see >> what packagekit would do to touch the network. >> >> I'll be building a new kernel with debug shortly. >> >> In my other message (to wireless) I also mentioned the (possibly >> unrelated) issue of poor performance and and periodic sub-second >> connectivity drops. >> >> -- >> R. Kevin Oberman, Network Engineer, Retired >> E-mail: rkoberman@gmail.com >> > > I was about to send a report that removing bgscan fixed the issue, but, > then it happened again. Nothing new in the log from prior cases. Any other > flags to I should try to set in wlandebug? state? assoc? I'll admit that I > have no idea which might be helpful. > > One thing I seem to have failed to post is the ifconfig after the failure: > wlan0: flags=8c43 metric 0 > mtu 1500 > ether a0:88:b4:c6:ad:28 > inet 192.168.1.5 netmask 0xffffff00 broadcast 192.168.1.255 > nd6 options=29 > media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) > status: no carrier > ssid "" channel 7 (2442 MHz 11g) > country US authmode WPA1+WPA2/802.11i privacy ON deftxkey UNDEF > txpower 15 bmiss 10 scanvalid 60 protmode CTS wme roaming MANUAL > > Note: My AP is on channel 6. > -- > R. Kevin Oberman, Network Engineer, Retired > E-mail: rkoberman@gmail.com > From owner-freebsd-wireless@FreeBSD.ORG Wed Jan 29 06:09:15 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 72EEFECF; Wed, 29 Jan 2014 06:09:15 +0000 (UTC) Received: from mail-pd0-x230.google.com (mail-pd0-x230.google.com [IPv6:2607:f8b0:400e:c02::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 373961362; Wed, 29 Jan 2014 06:09:15 +0000 (UTC) Received: by mail-pd0-f176.google.com with SMTP id w10so1309427pde.35 for ; Tue, 28 Jan 2014 22:09:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=vsIrK6vdLeM0AM+OsxBQJBkn7zdq/u9sLXueZtZhCKg=; b=F1QZOaTmgxm3hpsuN7X+4csZRA4Bt6RHTlfssB5cFIcSUYq1PtsiZ4Qz85SETNuhZs 2my2GZ336hNSde4N00fwZZTHpU5O58sF9Wi6WbyCPpxzvChkjneTZ97budWzC+qc31cw LeVBUgpFcRqIW0HDQDs7wdCtSbUV7P9oWPkbfjyvRs93MtA3NWVfOLD/kP/Au2Xyy5Oo SLGeKZDLtJXQ2SXE3rqZkaiEq54E3oZTD6dmEEw/+UptOlRUijvRGy2k+N7VmTqrDbyT 62ldk1JI8VU6j0ED7zqqwgEyfn0blSi8JVnbEdA6/94zZ9YFq695Sk2aSYOMJYpNuKR+ IYJQ== MIME-Version: 1.0 X-Received: by 10.68.218.65 with SMTP id pe1mr5971592pbc.1.1390975754801; Tue, 28 Jan 2014 22:09:14 -0800 (PST) Sender: kob6558@gmail.com Received: by 10.67.30.1 with HTTP; Tue, 28 Jan 2014 22:09:14 -0800 (PST) In-Reply-To: References: Date: Tue, 28 Jan 2014 22:09:14 -0800 X-Google-Sender-Auth: _jeyDwpqls-2VJSrr8EwwsqlXr4 Message-ID: Subject: Re: IWN hangs periodically on 10.0RC3 From: Kevin Oberman To: Adrian Chadd Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: FreeBSD Wireless , FreeBSD Stable Mailing List X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jan 2014 06:09:15 -0000 On Tue, Jan 28, 2014 at 3:57 PM, Adrian Chadd wrote: > What's in dmesg? Did the firmware panic? > > Adrian > pci3: on pcib2 iwn0: mem 0xf2400000-0xf2401fff irq 17 at device 0.0 on pci3 [...] wlan0: Ethernet address: a0:88:b4:c6:ad:28 ipfw2 (+ipv6) initialized, divert loadable, nat loadable, default to deny, logging disabled These are the only entries that look even a bit related to the wireless. Let me know if you want the whole thing. No indication I see of a firmware panic in either dmesg or var/log/messages. [EOF] > On Jan 28, 2014 2:16 AM, "Kevin Oberman" wrote: > >> On Fri, Jan 10, 2014 at 9:51 PM, Kevin Oberman wrote: >> >>> On Fri, Jan 10, 2014 at 9:37 AM, Adrian Chadd wrote: >>> >>>> .. when you see it hang, does anything get logged in dmesg (eg a >>>> firmware panic) ? >>>> >>>> Try recompiling your kernel with: >>>> >>>> IEEE80211_DEBUG >>>> IWN_DEBUG >>>> >>>> That way it can be debugged :) >>>> >>>> The first thing I'd check is whether there's more fun races going on >>>> in the crypto code - try wlandebug +crypto . >>>> >>>> >>>> -a >>>> >>> >>> I just sent a message about issues I am seeing with my IWN to wireless@. >>> Then I saw these responses. Sorry. >>> >>> As far as logs go, I wee a number if cases of the following sequence: >>> Jan 1 18:00:12 rogue dbus[1451]: [system] Activating service >>> name='org.freedesktop.PackageKit' (using servicehelper) >>> Jan 1 18:00:12 rogue dbus[1451]: [system] Successfully activated >>> service 'org.freedesktop.PackageKit' >>> Jan 1 18:28:56 rogue wpa_supplicant[620]: wlan0: >>> CTRL-EVENT-DISCONNECTED bssid=00:26:b8:67:c3:2d reason=0 >>> Jan 1 18:28:56 rogue kernel: wlan0: link state changed to DOWN >>> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Trying to associate >>> with 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) >>> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: Associated with >>> 00:26:b8:67:c3:2d >>> Jan 1 18:28:59 rogue kernel: wlan0: link state changed to UP >>> Jan 1 18:28:59 rogue dhclient[652]: send_packet: No buffer space >>> available >>> Jan 1 18:28:59 rogue devd: Executing '/etc/rc.d/dhclient quietstart >>> wlan0' >>> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: WPA: Key negotiation >>> completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] >>> Jan 1 18:28:59 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-CONNECTED - >>> Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] >>> Jan 1 18:29:02 rogue dhclient: New IP Address (wlan0): 192.168.1.5 >>> Jan 1 18:29:02 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 >>> Jan 1 18:29:02 rogue dhclient: New Broadcast Address (wlan0): >>> 192.168.1.255 >>> Jan 1 18:29:02 rogue dhclient: New Routers (wlan0): 192.168.1.1 >>> >>> So it seems that the bounce is happening fairly often, but the system >>> usually recovers. It seems to be pretty consistently 2-3 time4s a day. >>> Note that the dbus messages about packagekit always immediately precede >>> the link going down. >>> >>> Every tthe or four of these fail to recover: >>> Jan 3 14:09:05 rogue kernel: wlan0: link state changed to DOWN >>> Jan 3 14:09:56 rogue ntpd[1303]: sendto(198.129.254.218) (fd=25): >>> Network is down >>> Jan 3 14:10:15 rogue ntpd[1303]: sendto(208.79.18.86) (fd=25): Network >>> is down >>> Jan 3 14:10:29 rogue ntpd[1303]: sendto(198.124.252.90) (fd=25): >>> Network is down >>> Jan 3 14:10:49 rogue ntpd[1303]: sendto(198.55.111.5) (fd=25): Network >>> is down >>> Jan 3 14:11:00 rogue ntpd[1303]: sendto(192.95.38.104) (fd=25): Network >>> is down >>> Jan 3 14:14:02 rogue ntpd[1303]: sendto(198.129.252.38) (fd=25): >>> Network is down >>> Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, >>> val=0, arg_len=0]: Operation not supported >>> Jan 3 14:14:12 rogue wpa_supplicant[620]: ioctl[SIOCS80211, op=26, >>> val=0, arg_len=0]: Operation not supported >>> Jan 3 14:14:12 rogue wpa_supplicant[620]: wlan0: CTRL-EVENT-TERMINATING >>> Jan 3 14:14:12 rogue dhclient[652]: connection closed >>> Jan 3 14:14:12 rogue dhclient[652]: exiting. >>> Jan 3 14:14:12 rogue wpa_supplicant[67153]: Successfully initialized >>> wpa_supplicant >>> Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Trying to associate >>> with 00:26:b8:67:c3:2d (SSID='babcom' freq=2437 MHz) >>> Jan 3 14:14:16 rogue wpa_supplicant[67154]: wlan0: Associated with >>> 00:26:b8:67:c3:2d >>> Jan 3 14:14:16 rogue kernel: wlan0: link state changed to UP >>> Jan 3 14:14:16 rogue devd: Executing '/etc/rc.d/dhclient quietstart >>> wlan0' >>> Jan 3 14:14:16 rogue dhclient[67191]: send_packet: No buffer space >>> available >>> Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: WPA: Key negotiation >>> completed with 00:26:b8:67:c3:2d [PTK=CCMP GTK=CCMP] >>> Jan 3 14:14:17 rogue wpa_supplicant[67154]: wlan0: CTRL-EVENT-CONNECTED >>> - Connection to 00:26:b8:67:c3:2d completed [id=1 id_str=] >>> Jan 3 14:14:18 rogue dhclient: New IP Address (wlan0): 192.168.1.5 >>> Jan 3 14:14:18 rogue dhclient: New Subnet Mask (wlan0): 255.255.255.0 >>> Jan 3 14:14:18 rogue dhclient: New Broadcast Address (wlan0): >>> 192.168.1.255 >>> Jan 3 14:14:18 rogue dhclient: New Routers (wlan0): 192.168.1.1 >>> >>> The restart took place when I restarted the interface about 5 minutes >>> after it went down and, as you can see, it came up normally. I'll admit >>> that I am completely baffled by the dbus/packagekit tie-in as I can't see >>> what packagekit would do to touch the network. >>> >>> I'll be building a new kernel with debug shortly. >>> >>> In my other message (to wireless) I also mentioned the (possibly >>> unrelated) issue of poor performance and and periodic sub-second >>> connectivity drops. >>> >>> -- >>> R. Kevin Oberman, Network Engineer, Retired >>> E-mail: rkoberman@gmail.com >>> >> >> I was about to send a report that removing bgscan fixed the issue, but, >> then it happened again. Nothing new in the log from prior cases. Any other >> flags to I should try to set in wlandebug? state? assoc? I'll admit that I >> have no idea which might be helpful. >> >> One thing I seem to have failed to post is the ifconfig after the failure: >> wlan0: flags=8c43 metric >> 0 mtu 1500 >> ether a0:88:b4:c6:ad:28 >> inet 192.168.1.5 netmask 0xffffff00 broadcast 192.168.1.255 >> nd6 options=29 >> media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) >> status: no carrier >> ssid "" channel 7 (2442 MHz 11g) >> country US authmode WPA1+WPA2/802.11i privacy ON deftxkey UNDEF >> txpower 15 bmiss 10 scanvalid 60 protmode CTS wme roaming MANUAL >> >> Note: My AP is on channel 6. >> -- >> R. Kevin Oberman, Network Engineer, Retired >> E-mail: rkoberman@gmail.com >> > -- R. Kevin Oberman, Network Engineer, Retired E-mail: rkoberman@gmail.com From owner-freebsd-wireless@FreeBSD.ORG Wed Jan 29 10:35:43 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 38034BD0; Wed, 29 Jan 2014 10:35:43 +0000 (UTC) Received: from mail-qa0-x22f.google.com (mail-qa0-x22f.google.com [IPv6:2607:f8b0:400d:c00::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id C8F2F18CA; Wed, 29 Jan 2014 10:35:42 +0000 (UTC) Received: by mail-qa0-f47.google.com with SMTP id j5so2153160qaq.34 for ; Wed, 29 Jan 2014 02:35:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=TkLBM8OhMtQzcKUssvwoJ2SjPcIoTXL9ARXKmdmAchY=; b=ERTiQ3h402Xk+iq7uO9EwcS191Br83LIfJvlRO18hx7bE6xGLRhCrUo1PAZqpCh5wM rAjUi6+Vbs1Aj7EV55FoDil1MMaMz1rdI4pmor1qJh5w/VGJtN+afaiYx3PjFFhplqkU HYr2pRIXYzixKm0tvft9Kq/39lbuYmu5ADU9uiWXYVTb0iTsIUcLntkT1oYNm1Q7Zm/y HlwKbpR+ovsdXfaZM9smyBq377s4n5kLRZemDtuVXzw2R1NGVUMIpzNgJb3G0MlZumkd TDINnY/w1MJOesVL1yJfM6j6N+C5yySzAyg72t+fyVomw0zFIP9q+6rb5fkiUNyIUp51 avIg== MIME-Version: 1.0 X-Received: by 10.224.103.131 with SMTP id k3mr10573682qao.102.1390991741964; Wed, 29 Jan 2014 02:35:41 -0800 (PST) Received: by 10.140.27.151 with HTTP; Wed, 29 Jan 2014 02:35:41 -0800 (PST) In-Reply-To: References: Date: Wed, 29 Jan 2014 08:35:41 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jan 2014 10:35:43 -0000 Hmmm... Where did you see the NULL value? I could not figure it out. (Yesterday I built a kernel with debugging symbols enabled and I will generate a new crash dump tonight. I hope this one will have much more information). Thanks, pflynn On Tue, Jan 28, 2014 at 9:54 PM, Adrian Chadd wrote: > Yup. Is it? > > Adrian > On Jan 28, 2014 6:10 PM, "Pedro Flynn" wrote: > >> You mean rvp->beacon_mbuf is null? >> >> Thanks, >> >> pflynn >> >> >> On Tue, Jan 28, 2014 at 9:06 PM, Pedro Flynn wrote: >> >>> Just to bring to our attention frame 8: >>> >>> (kgdb) frame 8 >>> #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>> item=2) >>> at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>> 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >>> mcast); >>> Current language: auto; currently minimal >>> (kgdb) print run_update_beacon >>> $23 = {void (struct ieee80211vap *, >>> int)} 0xffffffff81a19750 >>> (kgdb) >>> >>> thanks, >>> >>> pflynn >>> >>> >>> On Tue, Jan 28, 2014 at 9:04 PM, Adrian Chadd wrote: >>> >>>> Right, frame 8 (the run beacon update) is passing a NULL mbuf into >>>> net80211. Why's it doing that. >>>> >>>> >>>> >>>> -a >>>> >>>> >>>> On 28 January 2014 15:02, Pedro Flynn wrote: >>>> > Here we go (this output is not beautiful...). Please, let me know if I >>>> > missed something or if I did something wrong: >>>> > >>>> > bt output: >>>> > >>>> > #0 doadump (textdump=) at pcpu.h:219 >>>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>>> > #2 0xffffffff808af8f4 in panic (fmt=) >>>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>>> usermode=0) >>>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>>> > #6 0xffffffff80c75392 in calltrap () >>>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>>> (ni=0xfffffe0000ffc000, >>>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>>> item=2) >>>> > at >>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>>> > (vap=0xfffff8000e8dd000) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>>> optimized >>>> > out>) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>>> > nstate=, arg=) >>>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>>> > nstate=IEEE80211_S_RUN, arg=-1) >>>> > at >>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>>> (xvap=0xfffff8000e8dd000, >>>> > npending=) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>>> (queue=0xfffff8000e8e4600) >>>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>>> out>) >>>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>>> > #18 0xffffffff8088198a in fork_exit ( >>>> > callout=0xffffffff808f6340 , >>>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>>> > at /usr/src/sys/kern/kern_fork.c:995 >>>> > #19 0xffffffff80c758ce in fork_trampoline () >>>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>>> > #20 0x0000000000000000 in ?? () >>>> > >>>> > frame 0 >>>> > #0 doadump (textdump=) at pcpu.h:219 >>>> > 219 pcpu.h: No such file or directory. >>>> > in pcpu.h >>>> > print doadump >>>> > $1 = {int (boolean_t)} 0xffffffff808af6f0 >>>> > >>>> > frame 1: >>>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>>> > 447 doadump(TRUE); >>>> > print kern_reboot >>>> > print kern_reboot >>>> > $3 = {void (int)} 0xffffffff808aedf0 >>>> > >>>> > frame 2 >>>> > #2 0xffffffff808af8f4 in panic (fmt=) >>>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>>> > 754 kern_reboot(bootopt); >>>> > (kgdb) print panic >>>> > $4 = {void (const char *)} 0xffffffff808af760 >>>> > >>>> > frame 3 >>>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>>> > 882 panic("%s", trap_msg[type]); >>>> > (kgdb) print trap_fatal >>>> > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 >>>> > >>>> > (kgdb) frame 4 >>>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>>> usermode=0) >>>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>>> > 699 trap_fatal(frame, eva); >>>> > (kgdb) print trap_pfault >>>> > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 >>>> > (kgdb) frame 5 >>>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>>> > 463 (void) trap_pfault(frame, FALSE); >>>> > (kgdb) print trap >>>> > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 >>>> > >>>> > frame 6 >>>> > #6 0xffffffff80c75392 in calltrap () >>>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>>> > 232 call trap >>>> > Current language: auto; currently asm >>>> > (kgdb) print calltrap >>>> > $8 = {} 0xffffffff80c7538a >>>> > (kgdb) frame 7 >>>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>>> (ni=0xfffffe0000ffc000, >>>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>>> > 161 atomic.h: No such file or directory. >>>> > in atomic.h >>>> > Current language: auto; currently minimal >>>> > (kgdb) print ieee80211_beacon_update >>>> > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets *, >>>> > struct mbuf *, int)} 0xffffffff809b1090 >>>> > >>>> > frame 8 >>>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>>> item=2) >>>> > at >>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>>> > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >>>> > mcast); >>>> > (kgdb) print run_update_beacon >>>> > $10 = {void (struct ieee80211vap *, >>>> > int)} 0xffffffff81a19750 >>>> > (kgdb) frame 9 >>>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>>> > 814 vap->iv_update_beacon(vap, what); >>>> > (kgdb) print ieee80211_wme_updateparams_locked >>>> > $11 = {void (struct ieee80211vap >>>> > *)} 0xffffffff809b3f90 >>>> > (kgdb) frame 10 >>>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>>> > (vap=0xfffff8000e8dd000) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>>> > 1150 ieee80211_wme_updateparams_locked(vap); >>>> > (kgdb) print ieee80211_wme_updateparams >>>> > $12 = {void (struct ieee80211vap >>>> > *)} 0xffffffff809b4320 >>>> > >>>> > frame 11 >>>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>>> optimized >>>> > out>) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>>> > 955 ieee80211_wme_updateparams(vap); >>>> > (kgdb) print ieee80211_wme_initparams >>>> > $13 = {void (struct ieee80211vap >>>> > *)} 0xffffffff809b3ca0 >>>> > (kgdb) frame 12 >>>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>>> > 741 ieee80211_wme_initparams(vap); >>>> > (kgdb) print ieee80211_sta_join1 >>>> > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 >>>> > >>>> > (kgdb) frame 13 >>>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>>> > nstate=, arg=) >>>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>>> > 274 ieee80211_ht_adjust_channel(ic, >>>> > (kgdb) print hostap_newstate >>>> > $15 = {int (struct ieee80211vap *, enum ieee80211_state, >>>> > int)} 0xffffffff80990190 >>>> > frame 14 >>>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>>> > nstate=IEEE80211_S_RUN, arg=-1) >>>> > at >>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>>> > 1881 return(rvp->newstate(vap, nstate, arg)); >>>> > (kgdb) print run_newstate >>>> > $16 = {int (struct ieee80211vap *, enum ieee80211_state, >>>> > int)} 0xffffffff81a19b30 >>>> > (kgdb) frame 15 >>>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>>> (xvap=0xfffff8000e8dd000, >>>> > npending=) >>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>>> > 1756 rc = vap->iv_newstate(vap, nstate, arg); >>>> > (kgdb) print ieee80211_newstate_cb >>>> > $17 = {void (void *, int)} 0xffffffff809b2d90 >>>> > (kgdb) frame 16 >>>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>>> (queue=0xfffff8000e8e4600) >>>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>>> > 333 task->ta_func(task->ta_context, pending); >>>> > (kgdb) print taskqueue_run_locked >>>> > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 >>>> >>>> > frame 17 >>>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>>> out>) >>>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>>> > 535 taskqueue_run_locked(tq); >>>> > (kgdb) print taskqueue_thread_loop >>>> > $19 = {void (void *)} 0xffffffff808f6340 >>>> > (kgdb) frame 18 >>>> > #18 0xffffffff8088198a in fork_exit ( >>>> > callout=0xffffffff808f6340 , >>>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>>> > at /usr/src/sys/kern/kern_fork.c:995 >>>> > 995 callout(arg, frame); >>>> > (kgdb) print fork_exit >>>> > $20 = {void (void (*)(void *, struct trapframe *), void *, struct >>>> trapframe >>>> > *)} 0xffffffff808818f0 >>>> > (kgdb) frame 19 >>>> > #19 0xffffffff80c758ce in fork_trampoline () >>>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>>> > 606 call fork_exit >>>> > Current language: auto; currently asm >>>> > (kgdb) print fork_trampoline >>>> > $21 = {} 0xffffffff80c758c0 >>>> >>>> > frame 20 >>>> > #20 0x0000000000000000 in ?? () >>>> > >>>> > Thanks, >>>> > >>>> > pflynn >>>> > >>>> > >>>> > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd >>>> wrote: >>>> >> >>>> >> ok, do 'bt', and see what's being passed into >>>> ieee80211_beacon_update. >>>> >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to >>>> print >>>> >> out the contents of the given variable name. >>>> >> >>>> >> That mbuf looks like it's NULL, which is odd. >>>> >> >>>> >> Thanks! >>>> >> >>>> >> >>>> >> -a >>>> >> >>>> >> >>>> >> On 28 January 2014 14:45, Pedro Flynn wrote: >>>> >> > OK! This is what I have: >>>> >> > >>>> >> > list * (0xffffffff809b1163) >>>> >> > Undefined command: "". Try "help". >>>> >> > (kgdb) list * (0xffffffff809b1163) >>>> >> > 0xffffffff809b1163 is in ieee80211_beacon_update >>>> >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). >>>> >> > 3094 /* XXX do WME aggressive mode processing? */ >>>> >> > 3095 IEEE80211_UNLOCK(ic); >>>> >> > 3096 return 1; /* just assume length changed */ >>>> >> > 3097 } >>>> >> > 3098 >>>> >> > 3099 wh = mtod(m, struct ieee80211_frame *); >>>> >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; >>>> >> > 3101 *(uint16_t *)&wh->i_seq[0] = >>>> >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); >>>> >> > 3103 M_SEQNO_SET(m, seqno); >>>> >> > Current language: auto; currently minimal >>>> >> > (kgdb) >>>> >> > >>>> >> > >>>> >> > (by the way, I'm building a kernel with debug symbols) >>>> >> > >>>> >> > Thanks, >>>> >> > >>>> >> > pflynn >>>> >> > >>>> >> > >>>> >> > >>>> >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd >>>> >> > wrote: >>>> >> >> >>>> >> >> Ok, fire up kgdb >>>> >> >> >>>> >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >>>> >> >> >>>> >> >> then >>>> >> >> >>>> >> >> (gdb) list * (0xffffffff809b1163) >>>> >> >> >>>> >> >> (.. that's the "instruction pointer" at the time of the panic.) >>>> >> >> >>>> >> >> I bet it's iv_bss. >>>> >> >> >>>> >> >> >>>> >> >> >>>> >> >> -a >>>> >> > >>>> >> > >>>> > >>>> > >>>> >>> >>> >> From owner-freebsd-wireless@FreeBSD.ORG Wed Jan 29 21:29:43 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 09F91E2E; Wed, 29 Jan 2014 21:29:43 +0000 (UTC) Received: from mail-qc0-x231.google.com (mail-qc0-x231.google.com [IPv6:2607:f8b0:400d:c01::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 988F5174E; Wed, 29 Jan 2014 21:29:42 +0000 (UTC) Received: by mail-qc0-f177.google.com with SMTP id i8so3643479qcq.36 for ; Wed, 29 Jan 2014 13:29:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=gc7/15eIjiN5YGODvevvmh6MwtdvfoKTABS2eehQ76c=; b=TS7Wm8m2OEgfHhVNcn3d07P+67r0djn9/XO4ePmZplbgMJXE6qr6R25tn6tTzX6cDg 015nMkUJYEIaOeczNhhIfGIPAxQ8x7SZiHrqaw9z8cv/DYEnQA/6T1sNHppoT2+kxW22 2MECUYHNTVsvJin+UfJekkrgdYHJWrr6V2rESnMQQR4kf1ZuYrigAT3vq/wquiuNJarO csrIs5hZhk6jv3m+sPkxosl+r4rqXTI0yLeQacDhcPS109FWeJVS6onCSE0RPBpiYiM5 jjFqIW5jqh6FhjfVd7vaicM5N79byPG1QSraylrl/lFkSoyT7LS7gijOm/q3lYrGiVCc 3S9A== MIME-Version: 1.0 X-Received: by 10.224.103.131 with SMTP id k3mr16096293qao.102.1391030981665; Wed, 29 Jan 2014 13:29:41 -0800 (PST) Received: by 10.140.27.151 with HTTP; Wed, 29 Jan 2014 13:29:41 -0800 (PST) In-Reply-To: References: Date: Wed, 29 Jan 2014 19:29:41 -0200 Message-ID: Subject: Re: FreeBSD 10.0: hostapd crash with Ralink 3070 From: Pedro Flynn To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jan 2014 21:29:43 -0000 Hi! As stated yesterday, I built a kernel with debug symbols and generated a second crash dump based on this kernel. Files are vmcore.1.xz and core.txt.1: https://drive.google.com/folderview?id=0B0sVwxI7RI7oc3R2bjVQR0pXWG8&usp=sharing Thanks for any suggestion, pflynn On Wed, Jan 29, 2014 at 8:35 AM, Pedro Flynn wrote: > Hmmm... > Where did you see the NULL value? I could not figure it out. > > (Yesterday I built a kernel with debugging symbols enabled and I will > generate a new crash dump tonight. I hope this one will have much more > information). > > Thanks, > > pflynn > > > On Tue, Jan 28, 2014 at 9:54 PM, Adrian Chadd wrote: > >> Yup. Is it? >> >> Adrian >> On Jan 28, 2014 6:10 PM, "Pedro Flynn" wrote: >> >>> You mean rvp->beacon_mbuf is null? >>> >>> Thanks, >>> >>> pflynn >>> >>> >>> On Tue, Jan 28, 2014 at 9:06 PM, Pedro Flynn wrote: >>> >>>> Just to bring to our attention frame 8: >>>> >>>> (kgdb) frame 8 >>>> #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>>> item=2) >>>> at /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>>> 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >>>> mcast); >>>> Current language: auto; currently minimal >>>> (kgdb) print run_update_beacon >>>> $23 = {void (struct ieee80211vap *, >>>> int)} 0xffffffff81a19750 >>>> (kgdb) >>>> >>>> thanks, >>>> >>>> pflynn >>>> >>>> >>>> On Tue, Jan 28, 2014 at 9:04 PM, Adrian Chadd wrote: >>>> >>>>> Right, frame 8 (the run beacon update) is passing a NULL mbuf into >>>>> net80211. Why's it doing that. >>>>> >>>>> >>>>> >>>>> -a >>>>> >>>>> >>>>> On 28 January 2014 15:02, Pedro Flynn wrote: >>>>> > Here we go (this output is not beautiful...). Please, let me know if >>>>> I >>>>> > missed something or if I did something wrong: >>>>> > >>>>> > bt output: >>>>> > >>>>> > #0 doadump (textdump=) at pcpu.h:219 >>>>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>>>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>>>> > #2 0xffffffff808af8f4 in panic (fmt=) >>>>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>>>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>>>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>>>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>>>> usermode=0) >>>>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>>>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>>>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>>>> > #6 0xffffffff80c75392 in calltrap () >>>>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>>>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>>>> (ni=0xfffffe0000ffc000, >>>>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>>>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>>>> item=2) >>>>> > at >>>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>>>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>>>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>>>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>>>> > (vap=0xfffff8000e8dd000) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>>>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>>>> optimized >>>>> > out>) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>>>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>>>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>>>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>>>> > nstate=, arg=) >>>>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>>>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>>>> > nstate=IEEE80211_S_RUN, arg=-1) >>>>> > at >>>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>>>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>>>> (xvap=0xfffff8000e8dd000, >>>>> > npending=) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>>>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>>>> (queue=0xfffff8000e8e4600) >>>>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>>>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>>>> optimized out>) >>>>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>>>> > #18 0xffffffff8088198a in fork_exit ( >>>>> > callout=0xffffffff808f6340 , >>>>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>>>> > at /usr/src/sys/kern/kern_fork.c:995 >>>>> > #19 0xffffffff80c758ce in fork_trampoline () >>>>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>>>> > #20 0x0000000000000000 in ?? () >>>>> > >>>>> > frame 0 >>>>> > #0 doadump (textdump=) at pcpu.h:219 >>>>> > 219 pcpu.h: No such file or directory. >>>>> > in pcpu.h >>>>> > print doadump >>>>> > $1 = {int (boolean_t)} 0xffffffff808af6f0 >>>>> > >>>>> > frame 1: >>>>> > #1 0xffffffff808af530 in kern_reboot (howto=260) >>>>> > at /usr/src/sys/kern/kern_shutdown.c:447 >>>>> > 447 doadump(TRUE); >>>>> > print kern_reboot >>>>> > print kern_reboot >>>>> > $3 = {void (int)} 0xffffffff808aedf0 >>>>> > >>>>> > frame 2 >>>>> > #2 0xffffffff808af8f4 in panic (fmt=) >>>>> > at /usr/src/sys/kern/kern_shutdown.c:754 >>>>> > 754 kern_reboot(bootopt); >>>>> > (kgdb) print panic >>>>> > $4 = {void (const char *)} 0xffffffff808af760 >>>>> > >>>>> > frame 3 >>>>> > #3 0xffffffff80c8e692 in trap_fatal (frame=, >>>>> > eva=) at /usr/src/sys/amd64/amd64/trap.c:882 >>>>> > 882 panic("%s", trap_msg[type]); >>>>> > (kgdb) print trap_fatal >>>>> > $5 = {void (struct trapframe *, vm_offset_t)} 0xffffffff80c8e2f0 >>>>> > >>>>> > (kgdb) frame 4 >>>>> > #4 0xffffffff80c8e969 in trap_pfault (frame=0xfffffe009695f720, >>>>> usermode=0) >>>>> > at /usr/src/sys/amd64/amd64/trap.c:699 >>>>> > 699 trap_fatal(frame, eva); >>>>> > (kgdb) print trap_pfault >>>>> > $6 = {int (struct trapframe *, int)} 0xffffffff80c8e6a0 >>>>> > (kgdb) frame 5 >>>>> > #5 0xffffffff80c8e0f6 in trap (frame=0xfffffe009695f720) >>>>> > at /usr/src/sys/amd64/amd64/trap.c:463 >>>>> > 463 (void) trap_pfault(frame, FALSE); >>>>> > (kgdb) print trap >>>>> > $7 = {void (struct trapframe *)} 0xffffffff80c8db10 >>>>> > >>>>> > frame 6 >>>>> > #6 0xffffffff80c75392 in calltrap () >>>>> > at /usr/src/sys/amd64/amd64/exception.S:232 >>>>> > 232 call trap >>>>> > Current language: auto; currently asm >>>>> > (kgdb) print calltrap >>>>> > $8 = {} 0xffffffff80c7538a >>>>> > (kgdb) frame 7 >>>>> > #7 0xffffffff809b1163 in ieee80211_beacon_update >>>>> (ni=0xfffffe0000ffc000, >>>>> > bo=0xfffff8000e8dd9e8, m=0x0, mcast=0) at atomic.h:161 >>>>> > 161 atomic.h: No such file or directory. >>>>> > in atomic.h >>>>> > Current language: auto; currently minimal >>>>> > (kgdb) print ieee80211_beacon_update >>>>> > $9 = {int (struct ieee80211_node *, struct ieee80211_beacon_offsets >>>>> *, >>>>> > struct mbuf *, int)} 0xffffffff809b1090 >>>>> > >>>>> > frame 8 >>>>> > #8 0xffffffff81a198bc in run_update_beacon (vap=0xfffff8000e8dd000, >>>>> item=2) >>>>> > at >>>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:3974 >>>>> > 3974 ieee80211_beacon_update(vap->iv_bss, &rvp->bo, rvp->beacon_mbuf, >>>>> > mcast); >>>>> > (kgdb) print run_update_beacon >>>>> > $10 = {void (struct ieee80211vap *, >>>>> > int)} 0xffffffff81a19750 >>>>> > (kgdb) frame 9 >>>>> > #9 0xffffffff809b42bd in ieee80211_wme_updateparams_locked ( >>>>> > vap=0xfffff8000e8dd000) at ieee80211_var.h:814 >>>>> > 814 vap->iv_update_beacon(vap, what); >>>>> > (kgdb) print ieee80211_wme_updateparams_locked >>>>> > $11 = {void (struct ieee80211vap >>>>> > *)} 0xffffffff809b3f90 >>>>> > (kgdb) frame 10 >>>>> > #10 0xffffffff809b437a in ieee80211_wme_updateparams >>>>> > (vap=0xfffff8000e8dd000) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1150 >>>>> > 1150 ieee80211_wme_updateparams_locked(vap); >>>>> > (kgdb) print ieee80211_wme_updateparams >>>>> > $12 = {void (struct ieee80211vap >>>>> > *)} 0xffffffff809b4320 >>>>> > >>>>> > frame 11 >>>>> > #11 0xffffffff809b3f43 in ieee80211_wme_initparams (vap=>>>> optimized >>>>> > out>) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:955 >>>>> > 955 ieee80211_wme_updateparams(vap); >>>>> > (kgdb) print ieee80211_wme_initparams >>>>> > $13 = {void (struct ieee80211vap >>>>> > *)} 0xffffffff809b3ca0 >>>>> > (kgdb) frame 12 >>>>> > #12 0xffffffff809a9aec in ieee80211_sta_join1 () >>>>> > at /usr/src/sys/net80211/ieee80211_node.c:741 >>>>> > 741 ieee80211_wme_initparams(vap); >>>>> > (kgdb) print ieee80211_sta_join1 >>>>> > $14 = {int (struct ieee80211_node *)} 0xffffffff809a9a10 >>>>> > >>>>> > (kgdb) frame 13 >>>>> > #13 0xffffffff8099047b in hostap_newstate (vap=0xfffff8000e8dd000, >>>>> > nstate=, arg=) >>>>> > at /usr/src/sys/net80211/ieee80211_hostap.c:274 >>>>> > 274 ieee80211_ht_adjust_channel(ic, >>>>> > (kgdb) print hostap_newstate >>>>> > $15 = {int (struct ieee80211vap *, enum ieee80211_state, >>>>> > int)} 0xffffffff80990190 >>>>> > frame 14 >>>>> > #14 0xffffffff81a1a36a in run_newstate (vap=, >>>>> > nstate=IEEE80211_S_RUN, arg=-1) >>>>> > at >>>>> /usr/src/sys/modules/usb/run/../../../dev/usb/wlan/if_run.c:1881 >>>>> > 1881 return(rvp->newstate(vap, nstate, arg)); >>>>> > (kgdb) print run_newstate >>>>> > $16 = {int (struct ieee80211vap *, enum ieee80211_state, >>>>> > int)} 0xffffffff81a19b30 >>>>> > (kgdb) frame 15 >>>>> > #15 0xffffffff809b2edf in ieee80211_newstate_cb >>>>> (xvap=0xfffff8000e8dd000, >>>>> > npending=) >>>>> > at /usr/src/sys/net80211/ieee80211_proto.c:1756 >>>>> > 1756 rc = vap->iv_newstate(vap, nstate, arg); >>>>> > (kgdb) print ieee80211_newstate_cb >>>>> > $17 = {void (void *, int)} 0xffffffff809b2d90 >>>>> > (kgdb) frame 16 >>>>> > #16 0xffffffff808f5b66 in taskqueue_run_locked >>>>> (queue=0xfffff8000e8e4600) >>>>> > at /usr/src/sys/kern/subr_taskqueue.c:333 >>>>> > 333 task->ta_func(task->ta_context, pending); >>>>> > (kgdb) print taskqueue_run_locked >>>>> > $18 = {void (struct taskqueue *)} 0xffffffff808f5a80 >>>>> >>>>> > frame 17 >>>>> > #17 0xffffffff808f63e8 in taskqueue_thread_loop (arg=>>>> optimized out>) >>>>> > at /usr/src/sys/kern/subr_taskqueue.c:535 >>>>> > 535 taskqueue_run_locked(tq); >>>>> > (kgdb) print taskqueue_thread_loop >>>>> > $19 = {void (void *)} 0xffffffff808f6340 >>>>> > (kgdb) frame 18 >>>>> > #18 0xffffffff8088198a in fork_exit ( >>>>> > callout=0xffffffff808f6340 , >>>>> > arg=0xfffffe0000ff60f0, frame=0xfffffe009695fc00) >>>>> > at /usr/src/sys/kern/kern_fork.c:995 >>>>> > 995 callout(arg, frame); >>>>> > (kgdb) print fork_exit >>>>> > $20 = {void (void (*)(void *, struct trapframe *), void *, struct >>>>> trapframe >>>>> > *)} 0xffffffff808818f0 >>>>> > (kgdb) frame 19 >>>>> > #19 0xffffffff80c758ce in fork_trampoline () >>>>> > at /usr/src/sys/amd64/amd64/exception.S:606 >>>>> > 606 call fork_exit >>>>> > Current language: auto; currently asm >>>>> > (kgdb) print fork_trampoline >>>>> > $21 = {} 0xffffffff80c758c0 >>>>> >>>>> > frame 20 >>>>> > #20 0x0000000000000000 in ?? () >>>>> > >>>>> > Thanks, >>>>> > >>>>> > pflynn >>>>> > >>>>> > >>>>> > On Tue, Jan 28, 2014 at 8:47 PM, Adrian Chadd >>>>> wrote: >>>>> >> >>>>> >> ok, do 'bt', and see what's being passed into >>>>> ieee80211_beacon_update. >>>>> >> Use 'frame X' to switch to frame X, and 'print VARIABLE_NAME' to >>>>> print >>>>> >> out the contents of the given variable name. >>>>> >> >>>>> >> That mbuf looks like it's NULL, which is odd. >>>>> >> >>>>> >> Thanks! >>>>> >> >>>>> >> >>>>> >> -a >>>>> >> >>>>> >> >>>>> >> On 28 January 2014 14:45, Pedro Flynn >>>>> wrote: >>>>> >> > OK! This is what I have: >>>>> >> > >>>>> >> > list * (0xffffffff809b1163) >>>>> >> > Undefined command: "". Try "help". >>>>> >> > (kgdb) list * (0xffffffff809b1163) >>>>> >> > 0xffffffff809b1163 is in ieee80211_beacon_update >>>>> >> > (/usr/src/sys/net80211/ieee80211_output.c:3099). >>>>> >> > 3094 /* XXX do WME aggressive mode processing? */ >>>>> >> > 3095 IEEE80211_UNLOCK(ic); >>>>> >> > 3096 return 1; /* just assume length changed */ >>>>> >> > 3097 } >>>>> >> > 3098 >>>>> >> > 3099 wh = mtod(m, struct ieee80211_frame *); >>>>> >> > 3100 seqno = ni->ni_txseqs[IEEE80211_NONQOS_TID]++; >>>>> >> > 3101 *(uint16_t *)&wh->i_seq[0] = >>>>> >> > 3102 htole16(seqno << IEEE80211_SEQ_SEQ_SHIFT); >>>>> >> > 3103 M_SEQNO_SET(m, seqno); >>>>> >> > Current language: auto; currently minimal >>>>> >> > (kgdb) >>>>> >> > >>>>> >> > >>>>> >> > (by the way, I'm building a kernel with debug symbols) >>>>> >> > >>>>> >> > Thanks, >>>>> >> > >>>>> >> > pflynn >>>>> >> > >>>>> >> > >>>>> >> > >>>>> >> > On Tue, Jan 28, 2014 at 8:34 PM, Adrian Chadd >>>> > >>>>> >> > wrote: >>>>> >> >> >>>>> >> >> Ok, fire up kgdb >>>>> >> >> >>>>> >> >> # kgdb /boot/kernel/kernel /var/crash/vmcore.0 >>>>> >> >> >>>>> >> >> then >>>>> >> >> >>>>> >> >> (gdb) list * (0xffffffff809b1163) >>>>> >> >> >>>>> >> >> (.. that's the "instruction pointer" at the time of the panic.) >>>>> >> >> >>>>> >> >> I bet it's iv_bss. >>>>> >> >> >>>>> >> >> >>>>> >> >> >>>>> >> >> -a >>>>> >> > >>>>> >> > >>>>> > >>>>> > >>>>> >>>> >>>> >>> > From owner-freebsd-wireless@FreeBSD.ORG Thu Jan 30 17:42:03 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 31FF37F0; Thu, 30 Jan 2014 17:42:03 +0000 (UTC) Received: from denrei.darkbsd.org (denrei.darkbsd.org [IPv6:2001:41d0:1:f442::1]) by mx1.freebsd.org (Postfix) with ESMTP id 977A5131E; Thu, 30 Jan 2014 17:42:02 +0000 (UTC) Received: from denrei.darkbsd.org (localhost [127.0.0.1]) by denrei.darkbsd.org (Postfix) with ESMTP id 34E922A9; Thu, 30 Jan 2014 18:41:59 +0100 (CET) X-Virus-Scanned: amavisd-new at darkbsd.org Received: from denrei.darkbsd.org ([127.0.0.1]) by denrei.darkbsd.org (denrei.darkbsd.org [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id NYYLbimhf7Wi; Thu, 30 Jan 2014 18:41:26 +0100 (CET) Received: from fusen (lns-bzn-49f-62-147-170-46.adsl.proxad.net [62.147.170.46]) (Authenticated sender: c.prevotaux@rural-networks.com) by denrei.darkbsd.org (Postfix) with ESMTPSA id 438E42A7; Thu, 30 Jan 2014 18:41:26 +0100 (CET) Date: Thu, 30 Jan 2014 18:41:25 +0100 From: Christophe Prevotaux To: Christophe Prevotaux Subject: Re: ar9580 failures [freebsd11-snapshot1930213] [2.4Ghz] Message-ID: <20140130184125.6659baf1@fusen> In-Reply-To: <20140120193101.0eef976d@fusen> References: <20140116145401.760bbb3c@fusen> <20140116201941.6df23143@fusen> <20140120193101.0eef976d@fusen> Organization: Rural Networks X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.17; x86_64-pc-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jan 2014 17:42:03 -0000 Hi Adrian, Here is the result of the same test on the freebsd11-snapshot1930213 as per your request. This is in 2.4Ghz gn mode. Jan 29 08:06:55 AP01 kernel: ACPI BIOS Error (bug): A valid RSDP was not found (20130823/tbxfroot-223) Jan 29 08:06:55 AP01 kernel: Copyright (c) 1992-2013 The FreeBSD Project. Jan 29 08:06:55 AP01 kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 Jan 29 08:06:55 AP01 kernel: The Regents of the University of California. All rights reserved. Jan 29 08:06:55 AP01 kernel: FreeBSD is a registered trademark of The FreeBSD Foundation. Jan 29 08:06:55 AP01 kernel: FreeBSD 11.0-CURRENT #0: Thu Jan 23 22:36:03 CET 2014 Jan 29 08:06:55 AP01 kernel: nighty@freebsd11-snapshot1930213:/usr/obj/usr/src/sys/NET6501 amd64 Jan 29 08:06:55 AP01 kernel: FreeBSD clang version 3.3 (tags/RELEASE_33/final 183502) 20130610 Jan 29 08:06:55 AP01 kernel: CPU: Genuine Intel(R) CPU @ 600MHz (600.01-MHz K8-class CPU) Jan 29 08:06:55 AP01 kernel: Origin = "GenuineIntel" Id = 0x20661 Family = 0x6 Model = 0x26 Stepping = 1 Jan 29 08:06:55 AP01 kernel: Features=0xbfe9fbff Jan 29 08:06:55 AP01 kernel: Features2=0x40e3bd Jan 29 08:06:55 AP01 kernel: AMD Features=0x20100800 Jan 29 08:06:55 AP01 kernel: AMD Features2=0x1 Jan 29 08:06:55 AP01 kernel: TSC: P-state invariant, performance statistics Jan 29 08:06:55 AP01 kernel: real memory = 536739840 (511 MB) Jan 29 08:06:55 AP01 kernel: avail memory = 496062464 (473 MB) Jan 29 08:06:55 AP01 kernel: MPTable: Jan 29 08:06:55 AP01 kernel: Event timer "LAPIC" quality 400 Jan 29 08:06:55 AP01 kernel: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs Jan 29 08:06:55 AP01 kernel: FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 HTT threads Jan 29 08:06:55 AP01 kernel: cpu0 (BSP): APIC ID: 0 Jan 29 08:06:55 AP01 kernel: cpu1 (AP/HT): APIC ID: 1 Jan 29 08:06:55 AP01 kernel: ioapic0: Assuming intbase of 0 Jan 29 08:06:55 AP01 kernel: ioapic0 irqs 0-23 on motherboard Jan 29 08:06:55 AP01 kernel: random: initialized Jan 29 08:06:55 AP01 kernel: kbd0 at kbdmux0 Jan 29 08:06:55 AP01 kernel: module_register_init: MOD_LOAD (vesa, 0xffffffff80ac7330, 0) error 19 Jan 29 08:06:55 AP01 kernel: netmap: loaded module Jan 29 08:06:55 AP01 kernel: ACPI BIOS Error (bug): A valid RSDP was not found (20130823/tbxfroot-223) Jan 29 08:06:55 AP01 kernel: ACPI: Table initialisation failed: AE_NOT_FOUND Jan 29 08:06:55 AP01 kernel: ACPI: Try disabling either ACPI or apic support. Jan 29 08:06:55 AP01 kernel: pcib0: pcibus 0 on motherboard Jan 29 08:06:55 AP01 kernel: pci0: on pcib0 Jan 29 08:06:55 AP01 kernel: pcib1: irq 16 at device 23.0 on pci0 Jan 29 08:06:55 AP01 kernel: pci1: on pcib1 Jan 29 08:06:55 AP01 kernel: pcib2: irq 16 at device 0.0 on pci1 Jan 29 08:06:55 AP01 kernel: pci2: on pcib2 Jan 29 08:06:55 AP01 kernel: pci2: at device 0.0 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 0.1 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 0.2 (no driver attached) Jan 29 08:06:55 AP01 kernel: ohci0: mem 0xa0000b00-0xa0000bff irq 19 at device 2.0 on pci2 Jan 29 08:06:55 AP01 kernel: usbus0 on ohci0 Jan 29 08:06:55 AP01 kernel: ohci1: mem 0xa0000c00-0xa0000cff irq 19 at device 2.1 on pci2 Jan 29 08:06:55 AP01 kernel: usbus1 on ohci1 Jan 29 08:06:55 AP01 kernel: ohci2: mem 0xa0000d00-0xa0000dff irq 19 at device 2.2 on pci2 Jan 29 08:06:55 AP01 kernel: usbus2 on ohci2 Jan 29 08:06:55 AP01 kernel: ehci0: mem 0xa0000e00-0xa0000eff irq 19 at device 2.3 on pci2 Jan 29 08:06:55 AP01 kernel: usbus3: EHCI version 1.0 Jan 29 08:06:55 AP01 kernel: usbus3 on ehci0 Jan 29 08:06:55 AP01 kernel: pci2: at device 2.4 (no driver attached) Jan 29 08:06:55 AP01 kernel: sdhci_pci0: mem 0xa0004000-0xa00041ff irq 18 at device 4.0 on pci2 Jan 29 08:06:55 AP01 kernel: sdhci_pci0: 1 slot(s) allocated Jan 29 08:06:55 AP01 kernel: sdhci_pci1: mem 0xa0004200-0xa00043ff irq 18 at device 4.1 on pci2 Jan 29 08:06:55 AP01 kernel: sdhci_pci1: 1 slot(s) allocated Jan 29 08:06:55 AP01 kernel: ahci0: port 0x1020-0x103f mem 0xa0004400-0xa00047ff irq 17 at device 6.0 on pci2 Jan 29 08:06:55 AP01 kernel: ahci0: AHCI v1.10 with 2 3Gbps ports, Port Multiplier supported Jan 29 08:06:55 AP01 kernel: ahcich0: at channel 0 on ahci0 Jan 29 08:06:55 AP01 kernel: ahcich1: at channel 1 on ahci0 Jan 29 08:06:55 AP01 kernel: ohci3: mem 0xa0004800-0xa00048ff irq 16 at device 8.0 on pci2 Jan 29 08:06:55 AP01 kernel: usbus4 on ohci3 Jan 29 08:06:55 AP01 kernel: ohci4: mem 0xa0004900-0xa00049ff irq 16 at device 8.1 on pci2 Jan 29 08:06:55 AP01 kernel: usbus5 on ohci4 Jan 29 08:06:55 AP01 kernel: ohci5: mem 0xa0004a00-0xa0004aff irq 16 at device 8.2 on pci2 Jan 29 08:06:55 AP01 kernel: usbus6 on ohci5 Jan 29 08:06:55 AP01 kernel: ehci1: mem 0xa0004b00-0xa0004bff irq 16 at device 8.3 on pci2 Jan 29 08:06:55 AP01 kernel: usbus7: EHCI version 1.0 Jan 29 08:06:55 AP01 kernel: usbus7 on ehci1 Jan 29 08:06:55 AP01 kernel: pci2: at device 10.0 (no driver attached) Jan 29 08:06:55 AP01 kernel: uart2: port 0x1040-0x1047 mem 0xa0004d00-0xa0004d0f irq 19 at device 10.1 on pci2 Jan 29 08:06:55 AP01 kernel: uart3: port 0x1048-0x104f mem 0xa0004d10-0xa0004d1f irq 19 at device 10.2 on pci2 Jan 29 08:06:55 AP01 kernel: uart4: port 0x1050-0x1057 mem 0xa0004d20-0xa0004d2f irq 19 at device 10.3 on pci2 Jan 29 08:06:55 AP01 kernel: uart5: port 0x1058-0x105f mem 0xa0004d30-0xa0004d3f irq 19 at device 10.4 on pci2 Jan 29 08:06:55 AP01 kernel: pci2: at device 12.0 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 12.1 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 12.2 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 12.3 (no driver attached) Jan 29 08:06:55 AP01 kernel: pci2: at device 12.4 (no driver attached) Jan 29 08:06:55 AP01 kernel: pcib3: irq 17 at device 24.0 on pci0 Jan 29 08:06:55 AP01 kernel: pci3: on pcib3 Jan 29 08:06:55 AP01 kernel: pcib4: at device 0.0 on pci3 Jan 29 08:06:55 AP01 kernel: pci4: on pcib4 Jan 29 08:06:55 AP01 kernel: pcib5: at device 2.0 on pci4 Jan 29 08:06:55 AP01 kernel: pci5: on pcib5 Jan 29 08:06:55 AP01 kernel: em0: port 0x2000-0x201f mem 0xa1000000-0xa101ffff,0xa1020000-0xa1023fff irq 19 at device 0.0 on pci5 Jan 29 08:06:55 AP01 kernel: em0: Using MSIX interrupts with 3 vectors Jan 29 08:06:55 AP01 kernel: em0: Ethernet address: 00:00:24:cf:05:30 Jan 29 08:06:55 AP01 kernel: 001.000008 netmap_attach [2078] getting 0xfffff800040b6200:em0 (0) Jan 29 08:06:55 AP01 kernel: 001.000009 netmap_attach [2092] success for em0 Jan 29 08:06:55 AP01 kernel: pcib6: at device 3.0 on pci4 Jan 29 08:06:55 AP01 kernel: pci6: on pcib6 Jan 29 08:06:55 AP01 kernel: em1: port 0x3000-0x301f mem 0xa2000000-0xa201ffff,0xa2020000-0xa2023fff irq 16 at device 0.0 on pci6 Jan 29 08:06:55 AP01 kernel: em1: Using MSIX interrupts with 3 vectors Jan 29 08:06:55 AP01 kernel: em1: Ethernet address: 00:00:24:cf:05:31 Jan 29 08:06:55 AP01 kernel: 001.000010 netmap_attach [2078] getting 0xfffff800040b5400:em1 (0) Jan 29 08:06:55 AP01 kernel: 001.000011 netmap_attach [2092] success for em1 Jan 29 08:06:55 AP01 kernel: pcib7: at device 4.0 on pci4 Jan 29 08:06:55 AP01 kernel: pci7: on pcib7 Jan 29 08:06:55 AP01 kernel: pcib8: irq 18 at device 25.0 on pci0 Jan 29 08:06:55 AP01 kernel: pci8: on pcib8 Jan 29 08:06:55 AP01 kernel: pcib9: at device 0.0 on pci8 Jan 29 08:06:55 AP01 kernel: pci9: on pcib9 Jan 29 08:06:55 AP01 kernel: pcib10: at device 2.0 on pci9 Jan 29 08:06:55 AP01 kernel: pci10: on pcib10 Jan 29 08:06:55 AP01 kernel: em2: port 0x4000-0x401f mem 0xa3000000-0xa301ffff,0xa3020000-0xa3023fff irq 16 at device 0.0 on pci10 Jan 29 08:06:55 AP01 kernel: em2: Using MSIX interrupts with 3 vectors Jan 29 08:06:55 AP01 kernel: em2: Ethernet address: 00:00:24:cf:05:32 Jan 29 08:06:55 AP01 kernel: 001.000012 netmap_attach [2078] getting 0xfffff8000408a800:em2 (0) Jan 29 08:06:55 AP01 kernel: 001.000013 netmap_attach [2092] success for em2 Jan 29 08:06:55 AP01 kernel: pcib11: at device 3.0 on pci9 Jan 29 08:06:55 AP01 kernel: pci11: on pcib11 Jan 29 08:06:55 AP01 kernel: em3: port 0x5000-0x501f mem 0xa4000000-0xa401ffff,0xa4020000-0xa4023fff irq 17 at device 0.0 on pci11 Jan 29 08:06:55 AP01 kernel: em3: Using MSIX interrupts with 3 vectors Jan 29 08:06:55 AP01 kernel: em3: Ethernet address: 00:00:24:cf:05:33 Jan 29 08:06:55 AP01 kernel: 001.000014 netmap_attach [2078] getting 0xfffff800040eae00:em3 (0) Jan 29 08:06:55 AP01 kernel: 001.000015 netmap_attach [2092] success for em3 Jan 29 08:06:55 AP01 kernel: pcib12: at device 4.0 on pci9 Jan 29 08:06:55 AP01 kernel: pci12: on pcib12 Jan 29 08:06:55 AP01 kernel: ath0: mem 0xa5000000-0xa501ffff irq 18 at device 0.0 on pci12 Jan 29 08:06:55 AP01 kernel: ar9300_set_stub_functions: setting stub functions Jan 29 08:06:55 AP01 kernel: ar9300_set_stub_functions: setting stub functions Jan 29 08:06:55 AP01 kernel: ar9300_attach: calling ar9300_hw_attach Jan 29 08:06:55 AP01 kernel: ar9300_hw_attach: calling ar9300_eeprom_attach Jan 29 08:06:55 AP01 kernel: ar9300_flash_map: unimplemented for now Jan 29 08:06:55 AP01 kernel: Restoring Cal data from DRAM Jan 29 08:06:55 AP01 kernel: Restoring Cal data from EEPROM Jan 29 08:06:55 AP01 kernel: ar9300_hw_attach: ar9300_eeprom_attach returned 0 Jan 29 08:06:55 AP01 kernel: ath0: RX status length: 48 Jan 29 08:06:55 AP01 kernel: ath0: RX buffer size: 4096 Jan 29 08:06:55 AP01 kernel: ath0: TX descriptor length: 128 Jan 29 08:06:55 AP01 kernel: ath0: TX status length: 36 Jan 29 08:06:55 AP01 kernel: ath0: TX buffers per descriptor: 4 Jan 29 08:06:55 AP01 kernel: ar9300_freebsd_setup_x_tx_desc: called, 0x0/0, 0x0/0, 0x0/0 Jan 29 08:06:55 AP01 kernel: ath0: ath_edma_setup_rxfifo: type=0, FIFO depth = 16 entries Jan 29 08:06:55 AP01 kernel: ath0: ath_edma_setup_rxfifo: type=1, FIFO depth = 128 entries Jan 29 08:06:55 AP01 kernel: ath0: [HT] enabling HT modes Jan 29 08:06:55 AP01 kernel: ath0: [HT] enabling short-GI in 20MHz mode Jan 29 08:06:55 AP01 kernel: ath0: [HT] 1 stream STBC receive enabled Jan 29 08:06:55 AP01 kernel: ath0: [HT] 1 stream STBC transmit enabled Jan 29 08:06:55 AP01 kernel: ath0: [HT] 3 RX streams; 3 TX streams Jan 29 08:06:55 AP01 kernel: ath0: AR9580 mac 448.4 RF5110 phy 3661.5 Jan 29 08:06:55 AP01 kernel: ath0: 2GHz radio: 0x0000; 5GHz radio: 0x0000 Jan 29 08:06:55 AP01 kernel: pcib13: irq 19 at device 26.0 on pci0 Jan 29 08:06:55 AP01 kernel: pci13: on pcib13 Jan 29 08:06:55 AP01 kernel: ath1: mem 0xa6000000-0xa601ffff irq 19 at device 0.0 on pci13 Jan 29 08:06:55 AP01 kernel: ar9300_set_stub_functions: setting stub functions Jan 29 08:06:55 AP01 kernel: ar9300_set_stub_functions: setting stub functions Jan 29 08:06:55 AP01 kernel: ar9300_attach: calling ar9300_hw_attach Jan 29 08:06:55 AP01 kernel: ar9300_hw_attach: calling ar9300_eeprom_attach Jan 29 08:06:55 AP01 kernel: ar9300_flash_map: unimplemented for now Jan 29 08:06:55 AP01 kernel: Restoring Cal data from DRAM Jan 29 08:06:55 AP01 kernel: Restoring Cal data from EEPROM Jan 29 08:06:55 AP01 kernel: ar9300_hw_attach: ar9300_eeprom_attach returned 0 Jan 29 08:06:55 AP01 kernel: ath1: RX status length: 48 Jan 29 08:06:55 AP01 kernel: ath1: RX buffer size: 4096 Jan 29 08:06:55 AP01 kernel: ath1: TX descriptor length: 128 Jan 29 08:06:55 AP01 kernel: ath1: TX status length: 36 Jan 29 08:06:55 AP01 kernel: ath1: TX buffers per descriptor: 4 Jan 29 08:06:55 AP01 kernel: ar9300_freebsd_setup_x_tx_desc: called, 0x0/0, 0x0/0, 0x0/0 Jan 29 08:06:55 AP01 kernel: ath1: ath_edma_setup_rxfifo: type=0, FIFO depth = 16 entries Jan 29 08:06:55 AP01 kernel: ath1: ath_edma_setup_rxfifo: type=1, FIFO depth = 128 entries Jan 29 08:06:55 AP01 kernel: ath1: [HT] enabling HT modes Jan 29 08:06:55 AP01 kernel: ath1: [HT] enabling short-GI in 20MHz mode Jan 29 08:06:55 AP01 kernel: ath1: [HT] 1 stream STBC receive enabled Jan 29 08:06:55 AP01 kernel: ath1: [HT] 1 stream STBC transmit enabled Jan 29 08:06:55 AP01 kernel: ath1: [HT] 3 RX streams; 3 TX streams Jan 29 08:06:55 AP01 kernel: ath1: AR9580 mac 448.4 RF5110 phy 1083.4 Jan 29 08:06:55 AP01 kernel: ath1: 2GHz radio: 0x0000; 5GHz radio: 0x0000 Jan 29 08:06:55 AP01 kernel: isab0: at device 31.0 on pci0 Jan 29 08:06:55 AP01 kernel: isa0: on isab0 Jan 29 08:06:55 AP01 kernel: cpu0 on motherboard Jan 29 08:06:55 AP01 kernel: est0: on cpu0 Jan 29 08:06:55 AP01 kernel: est: CPU supports Enhanced Speedstep, but is not recognized. Jan 29 08:06:55 AP01 kernel: est: cpu_vendor GenuineIntel, msr 607060706000607 Jan 29 08:06:55 AP01 kernel: device_attach: est0 attach returned 6 Jan 29 08:06:55 AP01 kernel: p4tcc0: on cpu0 Jan 29 08:06:55 AP01 kernel: cpu1 on motherboard Jan 29 08:06:55 AP01 kernel: est1: on cpu1 Jan 29 08:06:55 AP01 kernel: est: CPU supports Enhanced Speedstep, but is not recognized. Jan 29 08:06:55 AP01 kernel: est: cpu_vendor GenuineIntel, msr 607060706000607 Jan 29 08:06:55 AP01 kernel: device_attach: est1 attach returned 6 Jan 29 08:06:55 AP01 kernel: p4tcc1: on cpu1 Jan 29 08:06:55 AP01 kernel: atrtc0: at port 0x70 irq 8 on isa0 Jan 29 08:06:55 AP01 kernel: Event timer "RTC" frequency 32768 Hz quality 0 Jan 29 08:06:55 AP01 kernel: attimer0: at port 0x40 on isa0 Jan 29 08:06:55 AP01 kernel: Timecounter "i8254" frequency 1193182 Hz quality 0 Jan 29 08:06:55 AP01 kernel: Event timer "i8254" frequency 1193182 Hz quality 100 Jan 29 08:06:55 AP01 kernel: ppc0: cannot reserve I/O port range Jan 29 08:06:55 AP01 kernel: uart0: <16550 or compatible> at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 Jan 29 08:06:55 AP01 kernel: uart0: console (9600,n,8,1) Jan 29 08:06:55 AP01 kernel: est0: on cpu0 Jan 29 08:06:55 AP01 kernel: est: CPU supports Enhanced Speedstep, but is not recognized. Jan 29 08:06:55 AP01 kernel: est: cpu_vendor GenuineIntel, msr 607060706000607 Jan 29 08:06:55 AP01 kernel: device_attach: est0 attach returned 6 Jan 29 08:06:55 AP01 kernel: est1: on cpu1 Jan 29 08:06:55 AP01 kernel: est: CPU supports Enhanced Speedstep, but is not recognized. Jan 29 08:06:55 AP01 kernel: est: cpu_vendor GenuineIntel, msr 607060706000607 Jan 29 08:06:55 AP01 kernel: device_attach: est1 attach returned 6 Jan 29 08:06:55 AP01 kernel: Timecounters tick every 1.000 msec Jan 29 08:06:55 AP01 kernel: random: unblocking device. Jan 29 08:06:55 AP01 kernel: usbus0: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: usbus1: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: ugen0.1: <0x8086> at usbus0 Jan 29 08:06:55 AP01 kernel: uhub0: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0 Jan 29 08:06:55 AP01 kernel: ugen1.1: <0x8086> at usbus1 Jan 29 08:06:55 AP01 kernel: uhub1: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus1 Jan 29 08:06:55 AP01 kernel: usbus2: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: usbus3: 480Mbps High Speed USB v2.0 Jan 29 08:06:55 AP01 kernel: ugen2.1: <0x8086> at usbus2 Jan 29 08:06:55 AP01 kernel: uhub2: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus2 Jan 29 08:06:55 AP01 kernel: ugen3.1: at usbus3 Jan 29 08:06:55 AP01 kernel: uhub3: on usbus3 Jan 29 08:06:55 AP01 kernel: usbus4: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: uhub0: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: ugen4.1: <0x8086> at usbus4 Jan 29 08:06:55 AP01 kernel: uhub4: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus4 Jan 29 08:06:55 AP01 kernel: uhub1: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: usbus5: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: uhub2: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: ugen5.1: <0x8086> at usbus5 Jan 29 08:06:55 AP01 kernel: uhub5: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus5 Jan 29 08:06:55 AP01 kernel: usbus6: 12Mbps Full Speed USB v1.0 Jan 29 08:06:55 AP01 kernel: usbus7: 480Mbps High Speed USB v2.0 Jan 29 08:06:55 AP01 kernel: ugen6.1: <0x8086> at usbus6 Jan 29 08:06:55 AP01 kernel: uhub6: <0x8086 OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus6 Jan 29 08:06:55 AP01 kernel: uhub4: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: ugen7.1: at usbus7 Jan 29 08:06:55 AP01 kernel: uhub7: on usbus7 Jan 29 08:06:55 AP01 kernel: uhub5: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: ada0 at ahcich0 bus 0 scbus0 target 0 lun 0 Jan 29 08:06:55 AP01 kernel: ada0: uhub6: 1 port with 1 removable, self powered Jan 29 08:06:55 AP01 kernel: ATA-8 SATA 2.x device Jan 29 08:06:55 AP01 kernel: ada0: Serial Number 02512013500300001076 Jan 29 08:06:55 AP01 kernel: ada0: 300.000MB/s transfers (SATA 2.x, UDMA6, PIO 8192bytes) Jan 29 08:06:55 AP01 kernel: ada0: Command Queueing enabled Jan 29 08:06:55 AP01 kernel: ada0: 28626MB (58626288 512 byte sectors: 16H 63S/T 16383C) Jan 29 08:06:55 AP01 kernel: ada0: Previously was known as ad4 Jan 29 08:06:55 AP01 kernel: SMP: AP CPU #1 Launched! Jan 29 08:06:55 AP01 kernel: Timecounter "TSC" frequency 600012186 Hz quality 1000 Jan 29 08:06:55 AP01 kernel: Root mount waiting for: usbus7 usbus3 Jan 29 08:06:55 AP01 kernel: uhub3: 3 ports with 3 removable, self powered Jan 29 08:06:55 AP01 kernel: uhub7: 3 ports with 3 removable, self powered Jan 29 08:06:55 AP01 kernel: Trying to mount root from ufs:/dev/ada0p2 [rw]... Jan 29 08:06:55 AP01 kernel: bridge0: Ethernet address: 02:32:f6:88:4c:00 Jan 29 08:06:55 AP01 kernel: wlan0: Ethernet address: 04:f0:21:04:5d:7a Jan 29 08:06:55 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 29 08:06:55 AP01 kernel: wlan1: Ethernet address: 04:f0:21:04:5d:65 Jan 29 08:06:57 AP01 ntpd[1904]: ntpd 4.2.4p5-a (1) Jan 29 08:06:57 AP01 kernel: . Jan 29 08:07:06 AP01 ntpd[1905]: time reset +0.400620 s Jan 29 08:26:51 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 29 08:26:51 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 29 08:26:51 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 29 08:26:51 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 29 09:23:40 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 29 09:23:40 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 29 09:43:11 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 29 09:43:11 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 29 10:52:12 AP01 kernel: em3: link state changed to DOWN Jan 29 22:51:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 00:27:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 00:27:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 00:27:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 00:27:26 AP01 last message repeated 4 times Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:21 AP01 last message repeated 5 times Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:21 AP01 last message repeated 5 times Jan 30 07:44:21 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:22 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:22 AP01 last message repeated 5 times Jan 30 07:44:22 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:22 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:22 AP01 last message repeated 5 times Jan 30 07:44:22 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:22 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:23 AP01 last message repeated 5 times Jan 30 07:44:23 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:23 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:23 AP01 last message repeated 5 times Jan 30 07:44:23 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:23 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:24 AP01 last message repeated 5 times Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:24 AP01 last message repeated 5 times Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:24 AP01 last message repeated 5 times Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:24 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:25 AP01 last message repeated 5 times Jan 30 07:44:25 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:25 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:25 AP01 last message repeated 5 times Jan 30 07:44:25 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:25 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:26 AP01 last message repeated 5 times Jan 30 07:44:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:26 AP01 last message repeated 5 times Jan 30 07:44:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:26 AP01 last message repeated 5 times Jan 30 07:44:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:27 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:27 AP01 last message repeated 5 times Jan 30 07:44:27 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:27 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:27 AP01 last message repeated 5 times Jan 30 07:44:27 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:27 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:28 AP01 last message repeated 5 times Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:28 AP01 last message repeated 5 times Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:28 AP01 last message repeated 5 times Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:28 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:29 AP01 last message repeated 5 times Jan 30 07:44:29 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:29 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:29 AP01 last message repeated 5 times Jan 30 07:44:29 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:29 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:30 AP01 last message repeated 5 times Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:30 AP01 last message repeated 5 times Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:30 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:31 AP01 last message repeated 3 times Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:31 AP01 last message repeated 5 times Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:31 AP01 last message repeated 5 times Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:31 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:32 AP01 last message repeated 5 times Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:32 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:33 AP01 last message repeated 5 times Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:33 AP01 last message repeated 5 times Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:33 AP01 last message repeated 5 times Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:33 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:34 AP01 last message repeated 5 times Jan 30 07:44:34 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:34 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:34 AP01 last message repeated 5 times Jan 30 07:44:34 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:34 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:35 AP01 last message repeated 5 times Jan 30 07:44:35 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:35 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:35 AP01 last message repeated 5 times Jan 30 07:44:35 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:35 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:36 AP01 last message repeated 5 times Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:36 AP01 last message repeated 5 times Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:36 AP01 last message repeated 5 times Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:36 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:37 AP01 last message repeated 5 times Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:37 AP01 last message repeated 3 times Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:37 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:38 AP01 last message repeated 5 times Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:38 AP01 last message repeated 5 times Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:38 AP01 last message repeated 3 times Jan 30 07:44:38 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:39 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:39 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 07:44:39 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 0) Jan 30 07:44:39 AP01 last message repeated 2 times Jan 30 08:06:52 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 08:08:26 AP01 kernel: ath1: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:23 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:24 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:24 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:24 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 08:52:24 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 08:52:24 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 4) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 42) Jan 30 11:27:44 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:45 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 15) Jan 30 11:27:45 AP01 kernel: ath0: stuck beacon; resetting (bmiss count 0) Jan 30 11:27:45 AP01 kernel: interrupt storm detected on "irq18:"; throttling interrupt source Jan 30 11:50:44 AP01 su: nighty to root on /dev/pts/0 Jan 30 11:54:39 AP01 kernel: no tx bufs (empty list): 0 Jan 30 11:54:39 AP01 kernel: no tx bufs (was busy): 0 Jan 30 11:54:39 AP01 kernel: aggr single packet: 111114 Jan 30 11:54:39 AP01 kernel: aggr single packet w/ BAW closed: 203 Jan 30 11:54:39 AP01 kernel: aggr non-baw packet: 3 Jan 30 11:54:39 AP01 kernel: aggr aggregate packet: 1393131 Jan 30 11:54:39 AP01 kernel: aggr single packet low hwq: 2035659 Jan 30 11:54:39 AP01 kernel: aggr single packet RTS aggr limited: 0 Jan 30 11:54:39 AP01 kernel: aggr sched, no work: 3070118 Jan 30 11:54:39 AP01 kernel: 0: 0 1: 0 2: 91054 3: 81635 Jan 30 11:54:39 AP01 kernel: 4: 77614 5: 72945 6: 69749 7: 65203 Jan 30 11:54:39 AP01 kernel: 8: 60104 9: 55187 10: 51027 11: 46961 Jan 30 11:54:39 AP01 kernel: 12: 42941 13: 39432 14: 36748 15: 33895 Jan 30 11:54:39 AP01 kernel: 16: 31743 17: 28967 18: 27030 19: 24857 Jan 30 11:54:39 AP01 kernel: 20: 23382 21: 21882 22: 20478 23: 19258 Jan 30 11:54:39 AP01 kernel: 24: 17831 25: 16583 26: 15462 27: 14512 Jan 30 11:54:39 AP01 kernel: 28: 13597 29: 12771 30: 12082 31: 50457 Jan 30 11:54:39 AP01 kernel: 32: 217758 33: 0 34: 0 35: 0 Jan 30 11:54:39 AP01 kernel: 36: 0 37: 0 38: 0 39: 0 Jan 30 11:54:39 AP01 kernel: 40: 0 41: 0 42: 0 43: 0 Jan 30 11:54:39 AP01 kernel: 44: 0 45: 0 46: 0 47: 0 Jan 30 11:54:39 AP01 kernel: 48: 0 49: 0 50: 0 51: 0 Jan 30 11:54:39 AP01 kernel: 52: 0 53: 0 54: 0 55: 0 Jan 30 11:54:39 AP01 kernel: 56: 0 57: 0 58: 0 59: 0 Jan 30 11:54:39 AP01 kernel: 60: 0 61: 0 62: 0 63: 0 Jan 30 11:54:39 AP01 kernel: Jan 30 11:54:39 AP01 kernel: HW TXQ 0: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:39 AP01 kernel: HW TXQ 1: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=2, holdingbf=0 Jan 30 11:54:39 AP01 kernel: HW TXQ 2: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:39 AP01 kernel: HW TXQ 3: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:39 AP01 kernel: HW TXQ 8: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:39 AP01 kernel: Total TX buffers: 511; Total TX buffers busy: 0 (511) Jan 30 11:54:39 AP01 kernel: Total mgmt TX buffers: 32; Total mgmt TX buffers busy: 0 Jan 30 11:54:39 AP01 kernel: 0: fifolen: 16/16; head=0; tail=0 Jan 30 11:54:39 AP01 kernel: 1: fifolen: 128/128; head=95; tail=95 Jan 30 11:54:39 AP01 kernel: Total RX buffers in free list: 368 buffers Jan 30 11:54:40 AP01 kernel: no tx bufs (empty list): 0 Jan 30 11:54:40 AP01 kernel: no tx bufs (was busy): 0 Jan 30 11:54:40 AP01 kernel: aggr single packet: 976233 Jan 30 11:54:40 AP01 kernel: aggr single packet w/ BAW closed: 7626 Jan 30 11:54:40 AP01 kernel: aggr non-baw packet: 14 Jan 30 11:54:40 AP01 kernel: aggr aggregate packet: 8089005 Jan 30 11:54:40 AP01 kernel: aggr single packet low hwq: 12037457 Jan 30 11:54:40 AP01 kernel: aggr single packet RTS aggr limited: 0 Jan 30 11:54:40 AP01 kernel: aggr sched, no work: 16103947 Jan 30 11:54:40 AP01 kernel: 0: 0 1: 0 2: 782784 3: 709550 Jan 30 11:54:40 AP01 kernel: 4: 620740 5: 553569 6: 495272 7: 428160 Jan 30 11:54:40 AP01 kernel: 8: 367733 9: 317912 10: 276028 11: 236114 Jan 30 11:54:40 AP01 kernel: 12: 207090 13: 175951 14: 154894 15: 138394 Jan 30 11:54:40 AP01 kernel: 16: 122337 17: 108725 18: 99664 19: 90690 Jan 30 11:54:40 AP01 kernel: 20: 83159 21: 76893 22: 71246 23: 66298 Jan 30 11:54:40 AP01 kernel: 24: 77962 25: 58356 26: 55131 27: 52174 Jan 30 11:54:41 AP01 kernel: 28: 49967 29: 47438 30: 46420 31: 340248 Jan 30 11:54:41 AP01 kernel: 32: 1178141 33: 0 34: 0 35: 0 Jan 30 11:54:41 AP01 kernel: 36: 0 37: 0 38: 0 39: 0 Jan 30 11:54:41 AP01 kernel: 40: 0 41: 0 42: 0 43: 0 Jan 30 11:54:41 AP01 kernel: 44: 0 45: 0 46: 0 47: 0 Jan 30 11:54:41 AP01 kernel: 48: 0 49: 0 50: 0 51: 0 Jan 30 11:54:41 AP01 kernel: 52: 0 53: 0 54: 0 55: 0 Jan 30 11:54:41 AP01 kernel: 56: 0 57: 0 58: 0 59: 0 Jan 30 11:54:41 AP01 kernel: 60: 0 61: 0 62: 0 63: 0 Jan 30 11:54:41 AP01 kernel: Jan 30 11:54:41 AP01 kernel: HW TXQ 0: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:41 AP01 kernel: HW TXQ 1: axq_depth=0, axq_aggr_depth=1, axq_fifo_depth=2, holdingbf=0 Jan 30 11:54:41 AP01 kernel: HW TXQ 2: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:41 AP01 kernel: HW TXQ 3: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:41 AP01 kernel: HW TXQ 8: axq_depth=0, axq_aggr_depth=0, axq_fifo_depth=0, holdingbf=0 Jan 30 11:54:41 AP01 kernel: Total TX buffers: 447; Total TX buffers busy: 0 (447) Jan 30 11:54:41 AP01 kernel: Total mgmt TX buffers: 32; Total mgmt TX buffers busy: 0 Jan 30 11:54:41 AP01 kernel: 0: fifolen: 16/16; head=0; tail=0 Jan 30 11:54:41 AP01 kernel: 1: fifolen: 128/128; head=1; tail=1 Jan 30 11:54:41 AP01 kernel: Total RX buffers in free list: 366 buffers ath0: flags=8843 metric 0 mtu 2290 ether 04:f0:21:04:5d:7a nd6 options=21 media: IEEE 802.11 Wireless Ethernet autoselect mode 11ng status: running ath1: flags=8843 metric 0 mtu 2290 ether 04:f0:21:04:5d:65 nd6 options=21 media: IEEE 802.11 Wireless Ethernet autoselect mode 11ng status: running wlan0: flags=8943 metric 0 mtu 1500 ether 04:f0:21:04:5d:7a nd6 options=29 media: IEEE 802.11 Wireless Ethernet autoselect mode 11ng status: running ssid R2 channel 11 (2462 MHz 11g ht/20) bssid 04:f0:21:04:5d:7a regdomain FCC country CA ecm authmode WPA2/802.11i privacy MIXED deftxkey 2 AES-CCM 2:128-bit AES-CCM 3:128-bit txpower 30 scanvalid 60 protmode CTS ampdulimit 64k ampdudensity 8 shortgi wme burst dtimperiod 1 -dfs wlan1: flags=8943 metric 0 mtu 1500 ether 04:f0:21:04:5d:65 nd6 options=29 media: IEEE 802.11 Wireless Ethernet autoselect mode 11ng status: running ssid R1 channel 6 (2437 MHz 11g ht/20) bssid 04:f0:21:04:5d:65 regdomain FCC country CA ecm authmode WPA2/802.11i privacy MIXED deftxkey 2 AES-CCM 2:128-bit AES-CCM 3:128-bit txpower 30 scanvalid 60 protmode CTS ampdulimit 64k ampdudensity 8 shortgi wme burst dtimperiod 1 -dfs -- -- ===================================================== Christophe Prevotaux Email: c.prevotaux@rural-networks.com Tel : +33 06 79 11 86 58 ===================================================== From owner-freebsd-wireless@FreeBSD.ORG Thu Jan 30 18:35:28 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 19B67B0B for ; Thu, 30 Jan 2014 18:35:28 +0000 (UTC) Received: from mail-qc0-x235.google.com (mail-qc0-x235.google.com [IPv6:2607:f8b0:400d:c01::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id CAA7F188A for ; Thu, 30 Jan 2014 18:35:27 +0000 (UTC) Received: by mail-qc0-f181.google.com with SMTP id e9so5567689qcy.12 for ; Thu, 30 Jan 2014 10:35:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=jZ21oUSLugX8vIO2b7muQwRzXuEAwsG3gkVUE8M3NCg=; b=pU0KtacClPR6ecEuh0Um/9ALrzzTbO4F+Peo/+/fnYjZ/XQ8EmeI74HbUcKBd2fUFl 3owjPM7KLkIJ7i+WH9v9a7+JM6QNuCOTYZZYS8U56x37EIZnaCH8lJhLZvAn5tfEax+T hNi3rzhIU5YnhxDgp8MobUbN8Ft7qHA0M15cr0p8eUqFZWxrBSgpdqaSdqz1pVwJSFgK eFmUhxgaLFWEpr0OJi3IFg2PmdZWoreDQofjk6K0JLApWePsU79EeBoXw9zqmk1wNwSP k9whN+S4mSNWpKLhvqLpug8Ex3csZhyxgyx5Z9MSsq2+fclneCxCJbhe0eIxw0LzRr0d FFJA== MIME-Version: 1.0 X-Received: by 10.140.96.180 with SMTP id k49mr22675255qge.4.1391106926989; Thu, 30 Jan 2014 10:35:26 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Thu, 30 Jan 2014 10:35:26 -0800 (PST) In-Reply-To: <20140130184125.6659baf1@fusen> References: <20140116145401.760bbb3c@fusen> <20140116201941.6df23143@fusen> <20140120193101.0eef976d@fusen> <20140130184125.6659baf1@fusen> Date: Thu, 30 Jan 2014 10:35:26 -0800 X-Google-Sender-Auth: DKC1km0fYC6kd9iU2OwpYkIGrDQ Message-ID: Subject: Re: ar9580 failures [freebsd11-snapshot1930213] [2.4Ghz] From: Adrian Chadd To: Christophe Prevotaux Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jan 2014 18:35:28 -0000 Hi, ok, so stuck beacon means a lot of things. It at the top end means "I couldn't transmit this beacon", and it could be for a variety of reasons: * the DMA engine hung; * the RX_BUSY or RX_CLEAR or TX_BUSY lines inside the chip are stuck; * the baseband has hung for some reason; * the DMA timing wasn't met and the frame didn't go out in time; * the PHY is calibrated incorrectly; * there's noise everywhere. So if it were me, I'd start by trying to make the athsurvey API work for the AR9300 HAL, so you could run 'athsurvey' whilst it was live and see what the story is. The MIB counters are a good starting point to see what the MAC thinks is going on. Eg, if RX_CLEAR is low (ie, the air is 'busy' according to the PHY.) I'd also enable NF calibration debugging to see what the noise floor and calibrated noise floor values are. If the differences between chains is more than 3dB then there's something wrong in the PHY that needs to be addressed. -a From owner-freebsd-wireless@FreeBSD.ORG Thu Jan 30 21:51:08 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AB640CAC for ; Thu, 30 Jan 2014 21:51:08 +0000 (UTC) Received: from relay.ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 231A319D2 for ; Thu, 30 Jan 2014 21:51:07 +0000 (UTC) Received: from ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) by relay.ibs.dn.ua with ESMTP id s0ULoa5E085594 for ; Thu, 30 Jan 2014 23:50:37 +0200 (EET) Message-ID: <20140130235036.85593@relay.ibs.dn.ua> Date: Thu, 30 Jan 2014 23:50:36 +0200 From: "Zeus Panchenko" To: Subject: ath0: ath_edma_rxfifo_alloc: Q1: alloc failed Organization: I.B.S. LLC X-Attribution: zeus Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWxsbGdnZ3U1NQTExN cXFzx8fG/v7+f8hyWAAACXUlEQVQ4jUWSwXYiIRBFi4yyhtjtWpmRdTL0ZC3TJOukDa6Rc+T/P2F eFepwtFvr8upVFVDua8mLWw6La4VIKTuMdAPOebdU55sQs3n/D1xFFPFGVGh4AHKttr5K0bS6g7N ZCge7qpVLB+f1Z2WAj2OKXwIWt/bXpdXSiu8KXbviWkHxF5td9+lg2e3xlI2SCvatK8YLfHyh9lw 15yrad8Va5eXg4Llr7QmAaC+dL9sDt9iad/DX3OKvLMBf+dm0A0QuMrTvYIevSik1IaSVvgjIHt5 lSCG2ynNRpEcBZ8cgDWk+Ns99qzsYYV3MZoppWzGtYlTO9+meG6m/g92iNO9LfQB2JZsMpoJs7QG ku2KtabRK0bZRwDLyBDvwlxTm6ZlP7qyOqLcfqtLexpDSB4M0H3I/PQy1emvjjzgK+A0LmMKl6Lq zlqzh0VGAw440F6MJd8cY0nI7wiF/fVIBGY7UNCAXy6DmfYGCLLI0wtDbVcDUMqtJLmAhLqODQAe riERAxXJ1/QYGpa0ymqyytpKC19MNXHjvFmEsfcHIrncFR4xdbYWgmfEGLCcZokpGbGj1egMR+6M 1BkNX1pDdhPcOXpAnAeLQUwQLYepgQoZVNGS61yaE8CYA7gYAcWKzwGstACY2HTFvvOwk4FXAG/a mKHni/EcA/GkOk7I0IK7UMIf3+SahU8/FJdiE7KcuWdM3MFocUDEEIX9LfJoo4xV5tnNKc3jJuSs SZWgnnhepgU1zN4Hii18yW4RwDX52CXUtk0Hqz6cHOIUkWaX8fDcB+J7y1y2xDHwjv/8Buu8Ekz6 7tXQAAAAASUVORK5CYII= X-Mailer: MH-E 8.3.1; GNU Mailutils 2.99.98; GNU Emacs 24.0.93 MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Zeus Panchenko List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jan 2014 21:51:08 -0000 =2D----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, please advise, I face severe problem with my new PCIe wifi card (since BCM4313, the one shipped with my netbook is not supported in FreeBSD, I have purchased another one, authorized for use in my netbook) ... the card is recognized well and I have no problem to configure it after `ifconfig ath0 up' wireless module starts to work as expected, I can ping and even can create working (for a short time) lagg(4) interface ... but console starts output a lot of: =2D ---[ quotation start ]------------------------------------------- ... ath0: ath_edma_rxfifo_alloc: Q1: alloc failed: i=3D1, nbufs=3D128? ath0: ath_edma_rxbuf_alloc: nothing on rxbuf?! ... =2D ---[ quotation end ]------------------------------------------- and after some time (about 2-5 minutes) my netbook hangs (no keyboard, no ssh) and only Ctrl-Alt-Del helps here are the details: > dmidecode System Information Manufacturer: Hewlett-Packard Product Name: HP Pavilion dm1 Notebook PC SKU Number: QJ490EA#ACB Family: 103C_5335KV G=3DN L=3DCON B=3DHP S=3DPAV > pciconf -bcelv ath0@pci0:3:0:0: class=3D0x028000 card=3D0x1785103c chip=3D0x0032168= c rev=3D0x01 hdr=3D0x00 vendor =3D 'Atheros Communications Inc.' device =3D 'AR9485 Wireless Network Adapter' class =3D network bar [10] =3D type Memory, range 64, base 0xf0200000, size 524288, ena= bled cap 01[40] =3D powerspec 2 supports D0 D1 D2 D3 current D0 cap 05[50] =3D MSI supports 4 messages, 64 bit, vector masks=20 cap 10[70] =3D PCI-Express 2 endpoint max data 128(128) link x1(x1) speed 2.5(2.5) ASPM L0s/L1(L0s/L1) ecap 0001[100] =3D AER 1 0 fatal 0 non-fatal 5 corrected ecap 0002[140] =3D VC 1 max VC0 ecap 0003[160] =3D Serial 1 0000000000000000 PCI-e errors =3D Correctable Error Detected Unsupported Request Detected Corrected =3D Receiver Error Bad TLP Bad DLLP Replay Timer Timeout Advisory Non-Fatal Error > ifconfig=20 ath0: flags=3D8802 metric 0 mtu 2290 ether 74:de:2b:d3:56:96 nd6 options=3D21 media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) status: no carrier wlan0: flags=3D8802 metric 0 mtu 1500 ether 74:de:2b:d3:56:96 nd6 options=3D29 media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) status: no carrier ssid "" channel 14 (2484 MHz 11b) regdomain 96 indoor ecm authmode WPA1+WPA2/802.11i privacy OFF txpower 20 bmiss 7 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 roam:rssi 7 roam:rate 1 wme burst > kldstat 9 2 0xffffffff80efb000 12e318 if_ath.ko 10 7 0xffffffff8102a000 6cf98 wlan.ko 37 1 0xffffffff812a7000 a380 if_ath_pci.ko 38 1 0xffffffff812b2000 af70 wlan_ccmp.ko 39 1 0xffffffff812bd000 4ad8 wlan_xauth.ko 51 1 0xffffffff81412000 45e9 wlan_wep.ko 52 1 0xffffffff81417000 5656 wlan_tkip.ko can I help to debug the problem? =2D --=20 Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET) =2D----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlLqySwACgkQr3jpPg/3oyon1ACfZVhq+VY2istOHkR2T5AGWqWa tyYAoKUyUbvgGeCvjOPvv7H325YFmptg =3DUWB2 =2D----END PGP SIGNATURE----- From owner-freebsd-wireless@FreeBSD.ORG Thu Jan 30 21:52:23 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 808A2CD6 for ; Thu, 30 Jan 2014 21:52:23 +0000 (UTC) Received: from mail-qc0-x233.google.com (mail-qc0-x233.google.com [IPv6:2607:f8b0:400d:c01::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 3FABA19DD for ; Thu, 30 Jan 2014 21:52:23 +0000 (UTC) Received: by mail-qc0-f179.google.com with SMTP id e16so6034022qcx.10 for ; Thu, 30 Jan 2014 13:52:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=mS++dk7fdav6pV4NHWBt+W1qr085sg96+ElYFA7k8jA=; b=uoeYfNPtsQRKZnNcjjc1zb11N3XXub8WnzHH7S4PjcXU3ZPV+NstmdDVKzLbAZy3YV rSGGC4oYTKn5G+oOx/X9V5j2+izUVcnz2jsY00cZZM1yQsBBYqicsKVlm5G2bUrAsxY0 I2WpE2gD5k0NikP/7pQFeMXPjKV8ePggETOAbKqJB5qzE9jOIGXuskyXwyIL/X0UN0IP x2E3EEDjzYH1+QMhcAMkASfWNHSo2jz8sslR5TZqguZjJgHHtwTKBSTX2B3dNhRN8/nc OIDPeCJeQ7Vcukzsz6hqZAOi74QIC9A2mOwLRo0ELbthbi3D0tUeQuoUH1JE9Yev2Ylv luZQ== MIME-Version: 1.0 X-Received: by 10.140.98.135 with SMTP id o7mr23905420qge.102.1391118742499; Thu, 30 Jan 2014 13:52:22 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Thu, 30 Jan 2014 13:52:22 -0800 (PST) In-Reply-To: <20140130235036.85593@relay.ibs.dn.ua> References: <20140130235036.85593@relay.ibs.dn.ua> Date: Thu, 30 Jan 2014 13:52:22 -0800 X-Google-Sender-Auth: ihFqor_FL44MfTfLZ8O6_io4coI Message-ID: Subject: Re: ath0: ath_edma_rxfifo_alloc: Q1: alloc failed From: Adrian Chadd To: Zeus Panchenko Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jan 2014 21:52:23 -0000 Does your kernel have ATH_SUPPORT_11N ? -a On 30 January 2014 13:50, Zeus Panchenko wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > hi, > > please advise, I face severe problem with my new PCIe wifi card (since > BCM4313, the one shipped with my netbook is not supported in FreeBSD, I > have purchased another one, authorized for use in my netbook) ... > > the card is recognized well and I have no problem to configure it > > after `ifconfig ath0 up' wireless module starts to work as expected, I > can ping and even can create working (for a short time) lagg(4) > interface ... but console starts output a lot of: > > - ---[ quotation start ]------------------------------------------- > ... > ath0: ath_edma_rxfifo_alloc: Q1: alloc failed: i=1, nbufs=128? > ath0: ath_edma_rxbuf_alloc: nothing on rxbuf?! > ... > - ---[ quotation end ]------------------------------------------- > > and after some time (about 2-5 minutes) my netbook hangs (no keyboard, > no ssh) and only Ctrl-Alt-Del helps > > here are the details: > >> dmidecode > System Information > Manufacturer: Hewlett-Packard > Product Name: HP Pavilion dm1 Notebook PC > SKU Number: QJ490EA#ACB > Family: 103C_5335KV G=N L=CON B=HP S=PAV > >> pciconf -bcelv > ath0@pci0:3:0:0: class=0x028000 card=0x1785103c chip=0x0032168c rev=0x01 hdr=0x00 > vendor = 'Atheros Communications Inc.' > device = 'AR9485 Wireless Network Adapter' > class = network > bar [10] = type Memory, range 64, base 0xf0200000, size 524288, enabled > cap 01[40] = powerspec 2 supports D0 D1 D2 D3 current D0 > cap 05[50] = MSI supports 4 messages, 64 bit, vector masks > cap 10[70] = PCI-Express 2 endpoint max data 128(128) link x1(x1) > speed 2.5(2.5) ASPM L0s/L1(L0s/L1) > ecap 0001[100] = AER 1 0 fatal 0 non-fatal 5 corrected > ecap 0002[140] = VC 1 max VC0 > ecap 0003[160] = Serial 1 0000000000000000 > PCI-e errors = Correctable Error Detected > Unsupported Request Detected > Corrected = Receiver Error > Bad TLP > Bad DLLP > Replay Timer Timeout > Advisory Non-Fatal Error > >> ifconfig > > ath0: flags=8802 metric 0 mtu 2290 > ether 74:de:2b:d3:56:96 > nd6 options=21 > media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) > status: no carrier > > wlan0: flags=8802 metric 0 mtu 1500 > ether 74:de:2b:d3:56:96 > nd6 options=29 > media: IEEE 802.11 Wireless Ethernet autoselect (autoselect) > status: no carrier > ssid "" channel 14 (2484 MHz 11b) > regdomain 96 indoor ecm authmode WPA1+WPA2/802.11i privacy OFF > txpower 20 bmiss 7 scanvalid 60 bgscan bgscanintvl 300 bgscanidle 250 > roam:rssi 7 roam:rate 1 wme burst > >> kldstat > > 9 2 0xffffffff80efb000 12e318 if_ath.ko > 10 7 0xffffffff8102a000 6cf98 wlan.ko > 37 1 0xffffffff812a7000 a380 if_ath_pci.ko > 38 1 0xffffffff812b2000 af70 wlan_ccmp.ko > 39 1 0xffffffff812bd000 4ad8 wlan_xauth.ko > 51 1 0xffffffff81412000 45e9 wlan_wep.ko > 52 1 0xffffffff81417000 5656 wlan_tkip.ko > > > > > can I help to debug the problem? > > - -- > Zeus V. Panchenko jid:zeus@im.ibs.dn.ua > IT Dpt., I.B.S. LLC GMT+2 (EET) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.19 (FreeBSD) > > iEYEARECAAYFAlLqySwACgkQr3jpPg/3oyon1ACfZVhq+VY2istOHkR2T5AGWqWa > tyYAoKUyUbvgGeCvjOPvv7H325YFmptg > =UWB2 > -----END PGP SIGNATURE----- > _______________________________________________ > freebsd-wireless@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-wireless > To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" From owner-freebsd-wireless@FreeBSD.ORG Thu Jan 30 22:20:07 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C288065C; Thu, 30 Jan 2014 22:20:07 +0000 (UTC) Received: from relay.ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 398751CCD; Thu, 30 Jan 2014 22:20:06 +0000 (UTC) Received: from ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) by relay.ibs.dn.ua with ESMTP id s0UMK4Uk087453; Fri, 31 Jan 2014 00:20:05 +0200 (EET) Message-ID: <20140131002004.87451@relay.ibs.dn.ua> Date: Fri, 31 Jan 2014 00:20:04 -2200 From: "Zeus Panchenko" To: "Adrian Chadd" Subject: Re: ath0: ath_edma_rxfifo_alloc: Q1: alloc failed In-reply-to: Your message of Thu, 30 Jan 2014 13:52:22 -0800 References: <20140130235036.85593@relay.ibs.dn.ua> Organization: I.B.S. LLC X-Attribution: zeus Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWxsbGdnZ3U1NQTExN cXFzx8fG/v7+f8hyWAAACXUlEQVQ4jUWSwXYiIRBFi4yyhtjtWpmRdTL0ZC3TJOukDa6Rc+T/P2F eFepwtFvr8upVFVDua8mLWw6La4VIKTuMdAPOebdU55sQs3n/D1xFFPFGVGh4AHKttr5K0bS6g7N ZCge7qpVLB+f1Z2WAj2OKXwIWt/bXpdXSiu8KXbviWkHxF5td9+lg2e3xlI2SCvatK8YLfHyh9lw 15yrad8Va5eXg4Llr7QmAaC+dL9sDt9iad/DX3OKvLMBf+dm0A0QuMrTvYIevSik1IaSVvgjIHt5 lSCG2ynNRpEcBZ8cgDWk+Ns99qzsYYV3MZoppWzGtYlTO9+meG6m/g92iNO9LfQB2JZsMpoJs7QG ku2KtabRK0bZRwDLyBDvwlxTm6ZlP7qyOqLcfqtLexpDSB4M0H3I/PQy1emvjjzgK+A0LmMKl6Lq zlqzh0VGAw440F6MJd8cY0nI7wiF/fVIBGY7UNCAXy6DmfYGCLLI0wtDbVcDUMqtJLmAhLqODQAe riERAxXJ1/QYGpa0ymqyytpKC19MNXHjvFmEsfcHIrncFR4xdbYWgmfEGLCcZokpGbGj1egMR+6M 1BkNX1pDdhPcOXpAnAeLQUwQLYepgQoZVNGS61yaE8CYA7gYAcWKzwGstACY2HTFvvOwk4FXAG/a mKHni/EcA/GkOk7I0IK7UMIf3+SahU8/FJdiE7KcuWdM3MFocUDEEIX9LfJoo4xV5tnNKc3jJuSs SZWgnnhepgU1zN4Hii18yW4RwDX52CXUtk0Hqz6cHOIUkWaX8fDcB+J7y1y2xDHwjv/8Buu8Ekz6 7tXQAAAAASUVORK5CYII= X-Mailer: MH-E 8.3.1; GNU Mailutils 2.99.98; GNU Emacs 24.0.93 MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Zeus Panchenko List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jan 2014 22:20:07 -0000 =2D----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>>>> Adrian Chadd writes: > Does your kernel have ATH_SUPPORT_11N ? -a no ... I was hoping I can do all stuff via loader.conf ... I'll re-build the kernel with all generic ath stuff and report thanks =2D --=20 Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET) =2D----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlLq0BQACgkQr3jpPg/3oyoTbwCgqiU+vmRvvLZzjohb3QLAMPFd fYEAn2bbrxc/Z9tduky9lZ4byPeFxKXX =3DtDqe =2D----END PGP SIGNATURE----- From owner-freebsd-wireless@FreeBSD.ORG Fri Jan 31 00:42:46 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id D81D1B96; Fri, 31 Jan 2014 00:42:46 +0000 (UTC) Received: from relay.ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 329F716FF; Fri, 31 Jan 2014 00:42:45 +0000 (UTC) Received: from ibs.dn.ua (relay.ibs.dn.ua [91.216.196.25]) by relay.ibs.dn.ua with ESMTP id s0V0ghC3096049; Fri, 31 Jan 2014 02:42:43 +0200 (EET) Message-ID: <20140131024243.96047@relay.ibs.dn.ua> Date: Fri, 31 Jan 2014 02:42:43 +0200 From: "Zeus Panchenko" To: "Adrian Chadd" Subject: Re: ath0: ath_edma_rxfifo_alloc: Q1: alloc failed In-reply-to: Your message of Thu, 30 Jan 2014 13:52:22 -0800 References: <20140130235036.85593@relay.ibs.dn.ua> Organization: I.B.S. LLC X-Attribution: zeus Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWxsbGdnZ3U1NQTExN cXFzx8fG/v7+f8hyWAAACXUlEQVQ4jUWSwXYiIRBFi4yyhtjtWpmRdTL0ZC3TJOukDa6Rc+T/P2F eFepwtFvr8upVFVDua8mLWw6La4VIKTuMdAPOebdU55sQs3n/D1xFFPFGVGh4AHKttr5K0bS6g7N ZCge7qpVLB+f1Z2WAj2OKXwIWt/bXpdXSiu8KXbviWkHxF5td9+lg2e3xlI2SCvatK8YLfHyh9lw 15yrad8Va5eXg4Llr7QmAaC+dL9sDt9iad/DX3OKvLMBf+dm0A0QuMrTvYIevSik1IaSVvgjIHt5 lSCG2ynNRpEcBZ8cgDWk+Ns99qzsYYV3MZoppWzGtYlTO9+meG6m/g92iNO9LfQB2JZsMpoJs7QG ku2KtabRK0bZRwDLyBDvwlxTm6ZlP7qyOqLcfqtLexpDSB4M0H3I/PQy1emvjjzgK+A0LmMKl6Lq zlqzh0VGAw440F6MJd8cY0nI7wiF/fVIBGY7UNCAXy6DmfYGCLLI0wtDbVcDUMqtJLmAhLqODQAe riERAxXJ1/QYGpa0ymqyytpKC19MNXHjvFmEsfcHIrncFR4xdbYWgmfEGLCcZokpGbGj1egMR+6M 1BkNX1pDdhPcOXpAnAeLQUwQLYepgQoZVNGS61yaE8CYA7gYAcWKzwGstACY2HTFvvOwk4FXAG/a mKHni/EcA/GkOk7I0IK7UMIf3+SahU8/FJdiE7KcuWdM3MFocUDEEIX9LfJoo4xV5tnNKc3jJuSs SZWgnnhepgU1zN4Hii18yW4RwDX52CXUtk0Hqz6cHOIUkWaX8fDcB+J7y1y2xDHwjv/8Buu8Ekz6 7tXQAAAAASUVORK5CYII= X-Mailer: MH-E 8.3.1; GNU Mailutils 2.99.98; GNU Emacs 24.0.93 MIME-Version: 1.0 Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Zeus Panchenko List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Jan 2014 00:42:46 -0000 =2D----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >>>>> Adrian Chadd writes: > Does your kernel have ATH_SUPPORT_11N ? -a after re-building the kernel with all ath related stuff from GENERIC, now I have no those debug on the console, no hanging till now in console I have rare: ath0: ath_edma_recv_tasklet: sc_inreset_cnt > 0; skipping my wifi is up and working! thanks much! one thing remains - the led of WiFi status ... it is not show when wifi is up or down ... just=20=20 I can remember when I was trying to use ndis with win driver for the previous card, the led was correctly working (white for up and orange for down state), but now it is all time orange ... is there way to find the cause? =2D --=20 Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET) =2D----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (FreeBSD) iEYEARECAAYFAlLq8YIACgkQr3jpPg/3oyoIiACg1cd3YN+WVlcIEkjNmHAt8ySk nLYAn3OeInKEZ2YFDaKyWBJUfxsErt6X =3D3R1X =2D----END PGP SIGNATURE----- From owner-freebsd-wireless@FreeBSD.ORG Fri Jan 31 00:44:03 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E1841BE6 for ; Fri, 31 Jan 2014 00:44:03 +0000 (UTC) Received: from mail-qc0-x234.google.com (mail-qc0-x234.google.com [IPv6:2607:f8b0:400d:c01::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 9FD97171E for ; Fri, 31 Jan 2014 00:44:03 +0000 (UTC) Received: by mail-qc0-f180.google.com with SMTP id i17so6252627qcy.11 for ; Thu, 30 Jan 2014 16:44:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=VCvDMDs0kHb4JbKBGpDB1vMOY0w5t+Ub2JGYPdpzuQY=; b=gL07ugPrXb9ZSFKBlvxhIwexaK6ZQPLbxm8vs8p5Mt9OVWeuXSqaeodLAuu3enhlOY w+8VAgzNP5j+K0Wby1pX5JDNjfTiTPwXU3Tw89M4dlhv0Z8KEqlff0Wu2oOA573pIbMc iApT2IvpHlsuwkAuA+ki/4ezAxdPBH7U9BZWVCNExF5r7TkwqdbtqiEwzeqVeQfVHHwo AowMSl4fj+TGIGOoO/CglNLydigSkkBo96qdQ9eDVQtl4Om0/6aW1hD27EJS7bz4koOQ Fjqm/rwbtDsEIj3ZScTq5UsJkCDWpE3JbbWNvX7tmHyRci5aH8/shf1iu3GfBI3oBkrd bq1A== MIME-Version: 1.0 X-Received: by 10.140.98.135 with SMTP id o7mr24837163qge.102.1391129042855; Thu, 30 Jan 2014 16:44:02 -0800 (PST) Sender: adrian.chadd@gmail.com Received: by 10.224.52.8 with HTTP; Thu, 30 Jan 2014 16:44:02 -0800 (PST) In-Reply-To: <20140131024243.96047@relay.ibs.dn.ua> References: <20140130235036.85593@relay.ibs.dn.ua> <20140131024243.96047@relay.ibs.dn.ua> Date: Thu, 30 Jan 2014 16:44:02 -0800 X-Google-Sender-Auth: Nj3K0xcngv0fswAdnKafn7wp1mM Message-ID: Subject: Re: ath0: ath_edma_rxfifo_alloc: Q1: alloc failed From: Adrian Chadd To: Zeus Panchenko Content-Type: text/plain; charset=ISO-8859-1 Cc: "freebsd-wireless@freebsd.org" X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Jan 2014 00:44:03 -0000 Yeah I haven't added the code for driving the LEDs on those NICs. :) -a On 30 January 2014 16:42, Zeus Panchenko wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > >>>>>> Adrian Chadd writes: > >> Does your kernel have ATH_SUPPORT_11N ? -a > > after re-building the kernel with all ath related stuff from GENERIC, now > I have no those debug on the console, no hanging till now > > in console I have rare: > > ath0: ath_edma_recv_tasklet: sc_inreset_cnt > 0; skipping > > my wifi is up and working! thanks much! > > one thing remains - the led of WiFi status ... it is not show when wifi > is up or down ... just > > I can remember when I was trying to use ndis with win driver for the > previous card, the led was correctly working (white for up and orange > for down state), but now it is all time orange ... is there way to find > the cause? > > - -- > Zeus V. Panchenko jid:zeus@im.ibs.dn.ua > IT Dpt., I.B.S. LLC GMT+2 (EET) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.19 (FreeBSD) > > iEYEARECAAYFAlLq8YIACgkQr3jpPg/3oyoIiACg1cd3YN+WVlcIEkjNmHAt8ySk > nLYAn3OeInKEZ2YFDaKyWBJUfxsErt6X > =3R1X > -----END PGP SIGNATURE----- From owner-freebsd-wireless@FreeBSD.ORG Fri Jan 31 12:18:51 2014 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1869EF1B for ; Fri, 31 Jan 2014 12:18:51 +0000 (UTC) Received: from marge.meraka.csir.co.za (marge.meraka.csir.co.za [IPv6:2001:4200:7000:3::1]) by mx1.freebsd.org (Postfix) with ESMTP id BA0FF19B0 for ; Fri, 31 Jan 2014 12:18:49 +0000 (UTC) Received: from jeep.localnet (unknown [IPv6:2001:4200:7000:3:223:aeff:fea7:a3c2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by marge.meraka.csir.co.za (Postfix) with ESMTPS id 59D21D0CC04 for ; Fri, 31 Jan 2014 14:18:34 +0200 (SAST) From: Johann Hugo To: freebsd-wireless@freebsd.org Subject: Atheros 5413 + half/quarter width Date: Fri, 31 Jan 2014 14:18:33 +0204 Message-ID: <3787601.UsSFcOE7ff@jeep> User-Agent: KMail/4.9.3 (FreeBSD/9.1-RELEASE; KDE/4.9.3; amd64; ; ) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7Bit X-Content-Filtered-By: Mailman/MimeDel 2.1.17 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Jan 2014 12:18:51 -0000 Hi Is half/quarter width working for Atheros 5413 (looks like it) ? https://wiki.freebsd.org/dev/ath_hal(4)/HalfQuarterRate Will the output of "ifconfig -v wlan2" show if it is supported ? Is it supported in FreeBSD 9.0 or do I need to upgrade to CURRENT ? Do I need compile time flags/options to enable half/quarter width support ? Is this the correct way to configure it ? ifconfig wlan2 channel 6:g/10 ifconfig: unknown/undefined channel number 6 flags 0x40a0 Other info Wifi Adapter = http://www.doodlelabs.com/products/radio-transceivers/sub-ghz- range/470-790-mhz-tvws-100/ tvws1:~ # uname -a FreeBSD tvws1 9.0-STABLE FreeBSD 9.0-STABLE ath2: irq 26 at device 3.0 on pci0 ath2: AR5413 mac 10.5 RF5413 phy 6.1 wlan2: flags=8843 metric 0 mtu 1500 ether 00:30:1a:46:0a:5f inet6 fe80::230:1aff:fe46:a5f%wlan2 prefixlen 64 scopeid 0xa inet 10.10.165.1 netmask 0xffffff00 broadcast 10.10.165.255 inet6 fd9c:6829:597c:aa5:230:1aff:fe46:a5f prefixlen 64 inet6 fd9c:6829:597c:aa5:: prefixlen 64 anycast nd6 options=21 media: IEEE 802.11 Wireless Ethernet autoselect mode 11b status: running ssid tvws channel 14 (2484 MHz 11b) bssid 00:00:00:00:00:01 regdomain JAPAN country JP ecm authmode OPEN privacy OFF txpower 30 scanvalid 60 wme burst Johann