From hsu@evoluutio.bbnetworks.net Tue Nov 11 19:21:29 2003 Return-Path: Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1778016A4D0 for ; Tue, 11 Nov 2003 19:20:28 -0800 (PST) Received: from evoluutio.bbnetworks.net (dyn071-235.ietf58.ietf.org [130.129.71.235]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0B4A243FAF for ; Tue, 11 Nov 2003 19:20:25 -0800 (PST) (envelope-from hsu@evoluutio.bbnetworks.net) Received: from evoluutio.bbnetworks.net (localhost [127.0.0.1]) by evoluutio.bbnetworks.net (8.12.10/8.12.10) with ESMTP id hAC3KN6I000445 for ; Tue, 11 Nov 2003 21:20:23 -0600 (CST) (envelope-from hsu@evoluutio.bbnetworks.net) Received: (from root@localhost) by evoluutio.bbnetworks.net (8.12.10/8.12.10/Submit) id hAC7jwfP000721; Wed, 12 Nov 2003 01:45:58 -0600 (CST) (envelope-from hsu) Message-Id: <200311120745.hAC7jwfP000721@evoluutio.bbnetworks.net> Date: Wed, 12 Nov 2003 01:45:58 -0600 (CST) From: Heikki Suonsivu Reply-To: Heikki Suonsivu To: FreeBSD-gnats-submit@freebsd.org Cc: Subject: Panic with wi and newcard X-Send-Pr-Version: 3.113 X-GNATS-Notify: >Number: 59203 >Category: kern >Synopsis: [newcard] Panic with wi and newcard >Confidential: no >Severity: serious >Priority: medium >Responsible: imp >State: closed >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Nov 11 19:30:19 PST 2003 >Closed-Date: Mon Apr 13 09:08:55 MDT 2009 >Last-Modified: Mon Apr 13 09:08:55 MDT 2009 >Originator: Heikki Suonsivu >Release: FreeBSD 5.1-CURRENT i386 >Organization: bbnetworks.net >Environment: System: FreeBSD evoluutio.bbnetworks.net 5.1-CURRENT FreeBSD 5.1-CURRENT #1: Wed Nov 12 00:59:04 CST 2003 hsu@evoluutio.bbnetworks.net:/usr/obj/usr/src/sys/GENERIC i386 Compaq Evo N620c. Wireless card: old Orinoco silver which still also has Lucent Technologies logo in it, firmware upgrade did not help. >Description: When using newcard and inserting orinoco wireless card FreeBSD 5 seems to become unstable, ending up with a panic. This is one of the panics. Oldcard worked couple of months ago, but also fails now with sligtly different symptoms (separate PR). These problems do not seem to be necessarily wi driver related, as Cisco card stopped working at the same time. The computer was working before and Windows seems to work fine, so I assume memory/hardware problem is unlikely reason. GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-undermydesk-freebsd"... panic: from debugger panic messages: --- Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) panic: from debugger cpuid = 0; Fatal trap 3: breakpoint instruction fault while in kernel mode cpuid = 0; apic id = 00 instruction pointer = 0x8:0xc07fe315 stack pointer = 0x10:0xe9c7298c frame pointer = 0x10:0xe9c72998 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0xc4b11c48 fault code = supervisor write, page not present instruction pointer = 0x8:0xc0690b48 stack pointer = 0x10:0xe9c72c1c frame pointer = 0x10:0xe9c72c34 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 558 (sh) panic: from debugger cpuid = 0; Uptime: 1m29s Dumping 511 MB 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 336 352 368 384 400 416 432 448 464 480 496 --- Reading symbols from /usr/obj/usr/src/sys/GENERIC/modules/usr/src/sys/modules/linux/linux.ko.debug...done. Loaded symbols for /usr/obj/usr/src/sys/GENERIC/modules/usr/src/sys/modules/linux/linux.ko.debug #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 240 dumping++; (kgdb) bt #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc066ad6b in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc066b16d in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc0489782 in db_panic () at /usr/src/sys/ddb/db_command.c:450 #4 0xc04896e2 in db_command (last_cmdp=0xc0921b60, cmd_table=0x0, aux_cmd_tablep=0xc08a4e14, aux_cmd_tablep_end=0xc08a4e2c) at /usr/src/sys/ddb/db_command.c:346 #5 0xc0489825 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472 #6 0xc048c825 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:73 #7 0xc07fe00c in kdb_trap (type=12, code=0, regs=0xe9c72bdc) at /usr/src/sys/i386/i386/db_interface.c:171 #8 0xc0814806 in trap_fatal (frame=0xe9c72bdc, eva=0) at /usr/src/sys/i386/i386/trap.c:816 #9 0xc08144b2 in trap_pfault (frame=0xe9c72bdc, usermode=0, eva=3299941448) at /usr/src/sys/i386/i386/trap.c:735 #10 0xc0814050 in trap (frame= {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = -997004632, tf_esi = -1064453460, tf_ebp = -372822988, tf_isp = -372823032, tf_ebx = -997004632, tf_edx = -996517696, tf_ecx = 0, tf_eax = -995025848, tf_trapno = 12, tf_err = 2, tf_eip = -1066857656, tf_cs = 8, tf_eflags = 66118, tf_esp = -1064439776, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:420 #11 0xc07ffa58 in calltrap () at {standard input}:94 #12 0xc0661c9b in mtx_init (m=0xc492eaa8, name=0xc0882d09 "sigacts", type=0x0, opts=-1064453460) at /usr/src/sys/kern/kern_mutex.c:955 ---Type to continue, or q to quit--- #13 0xc0670867 in sigacts_alloc () at /usr/src/sys/kern/kern_sig.c:2733 #14 0xc0655032 in fork1 (td=0xc49a58c0, flags=20, pages=0, procp=0xe9c72cd8) at /usr/src/sys/kern/kern_fork.c:412 #15 0xc06548bb in fork (td=0xc49a58c0, uap=0xe9c72d10) at /usr/src/sys/kern/kern_fork.c:102 #16 0xc0814ba0 in syscall (frame= {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 0, tf_esi = 135303168, tf_ebp = -1077940968, tf_isp = -372822668, tf_ebx = 0, tf_edx = 135299120, tf_ecx = 3, tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134726551, tf_cs = 31, tf_eflags = 582, tf_esp = -1077941012, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1010 #17 0xc07ffaad in Xint0x80_syscall () at {standard input}:136 ---Can't read userspace from dump, or kernel process--- (kgdb) bt #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:240 #1 0xc066ad6b in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:372 #2 0xc066b16d in panic () at /usr/src/sys/kern/kern_shutdown.c:550 #3 0xc0489782 in db_panic () at /usr/src/sys/ddb/db_command.c:450 #4 0xc04896e2 in db_command (last_cmdp=0xc0921b60, cmd_table=0x0, aux_cmd_tablep=0xc08a4e14, aux_cmd_tablep_end=0xc08a4e2c) at /usr/src/sys/ddb/db_command.c:346 #5 0xc0489825 in db_command_loop () at /usr/src/sys/ddb/db_command.c:472 #6 0xc048c825 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_trap.c:73 #7 0xc07fe00c in kdb_trap (type=12, code=0, regs=0xe9c72bdc) at /usr/src/sys/i386/i386/db_interface.c:171 #8 0xc0814806 in trap_fatal (frame=0xe9c72bdc, eva=0) at /usr/src/sys/i386/i386/trap.c:816 #9 0xc08144b2 in trap_pfault (frame=0xe9c72bdc, usermode=0, eva=3299941448) at /usr/src/sys/i386/i386/trap.c:735 #10 0xc0814050 in trap (frame= {tf_fs = 24, tf_es = 16, tf_ds = 16, tf_edi = -997004632, tf_esi = -1064453460, tf_ebp = -372822988, tf_isp = -372823032, tf_ebx = -997004632, tf_edx = -996517696, tf_ecx = 0, tf_eax = -995025848, tf_trapno = 12, tf_err = 2, tf_eip = -1066857656, tf_cs = 8, tf_eflags = 66118, tf_esp = -1064439776, tf_ss = 0}) at /usr/src/sys/i386/i386/trap.c:420 #11 0xc07ffa58 in calltrap () at {standard input}:94 #12 0xc0661c9b in mtx_init (m=0xc492eaa8, name=0xc0882d09 "sigacts", type=0x0, opts=-1064453460) at /usr/src/sys/kern/kern_mutex.c:955 ---Type to continue, or q to quit--- #13 0xc0670867 in sigacts_alloc () at /usr/src/sys/kern/kern_sig.c:2733 #14 0xc0655032 in fork1 (td=0xc49a58c0, flags=20, pages=0, procp=0xe9c72cd8) at /usr/src/sys/kern/kern_fork.c:412 #15 0xc06548bb in fork (td=0xc49a58c0, uap=0xe9c72d10) at /usr/src/sys/kern/kern_fork.c:102 #16 0xc0814ba0 in syscall (frame= {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 0, tf_esi = 135303168, tf_ebp = -1077940968, tf_isp = -372822668, tf_ebx = 0, tf_edx = 135299120, tf_ecx = 3, tf_eax = 2, tf_trapno = 12, tf_err = 2, tf_eip = 134726551, tf_cs = 31, tf_eflags = 582, tf_esp = -1077941012, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1010 #17 0xc07ffaad in Xint0x80_syscall () at {standard input}:136 ---Can't read userspace from dump, or kernel process--- (kgdb) >How-To-Repeat: Get a Compaq Evo N620c or comparable laptop (people on mobile and current mailing lists have had similar problems during last few months with some other brands). >Fix: >Release-Note: >Audit-Trail: Responsible-Changed-From-To: freebsd-bugs->imp Responsible-Changed-By: kris Responsible-Changed-When: Sat Nov 15 13:29:25 PST 2003 Responsible-Changed-Why: Assign to newcard maintainer http://www.freebsd.org/cgi/query-pr.cgi?pr=59203 State-Changed-From-To: open->feedback State-Changed-By: linimon State-Changed-When: Wed Apr 25 22:25:00 UTC 2007 State-Changed-Why: To submitter: this PR is quite old. Does the problem still persist? http://www.freebsd.org/cgi/query-pr.cgi?pr=59203 State-Changed-From-To: feedback->open State-Changed-By: linimon State-Changed-When: Thu Apr 26 23:01:44 UTC 2007 State-Changed-Why: Apparently this still recurs. http://www.freebsd.org/cgi/query-pr.cgi?pr=59203 State-Changed-From-To: open->closed State-Changed-By: imp State-Changed-When: Mon Apr 13 09:06:35 MDT 2009 State-Changed-Why: I've not seen this in several years, closing. http://www.freebsd.org/cgi/query-pr.cgi?pr=59203 >Unformatted: