From nobody@FreeBSD.org  Fri Feb 22 10:52:31 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2816116A401
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 22 Feb 2008 10:52:31 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 1D32013C459
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 22 Feb 2008 10:52:31 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m1MAntGr028389
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 22 Feb 2008 10:49:55 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m1MAns9Z028387;
	Fri, 22 Feb 2008 10:49:54 GMT
	(envelope-from nobody)
Message-Id: <200802221049.m1MAns9Z028387@www.freebsd.org>
Date: Fri, 22 Feb 2008 10:49:54 GMT
From: Oliver Herold <oliver@akephalos.de>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernel panic with if_rum and WPA encryption
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         120966
>Category:       kern
>Synopsis:       [rum] kernel panic with if_rum and WPA encryption
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-net
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 22 11:00:05 UTC 2008
>Closed-Date:    
>Last-Modified:  Sat May 24 22:40:01 UTC 2008
>Originator:     Oliver Herold
>Release:        FreeBSD 7, RELENG_7
>Organization:
>Environment:
FreeBSD asgard.home 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #1: Thu Feb 21 23:38:31 CET 2008     acheron@asgard.home:/usr/obj/usr/src/sys/ASGARD  i386
>Description:
I've tested two Wifi usb sticks (manufacturer Hama and Edimax). Both of them are from the same OEM manufacturer.

rum0: <Ralink 802.11 bg WLAN, class 0/0, rev 2.00/0.01, addr 2> on uhub1
rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528
rum0: Ethernet address: 00:0e:2e:b2:86:36
rum0: if_start running deferred for Giant

I can use it without any problems while using WEP encryption or without any encryption, but this is not a long-term option. So after bringing if_rum up with WPA it takes just about some (5-10 usually) minutes to render a kernel panic.



Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0x12
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc06d1570
stack pointer           = 0x28:0xef0fac04
frame pointer           = 0x28:0xef0fac20
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 27 (irq22: ehci0+)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 11m8s
Physical memory: 3051 MB
>How-To-Repeat:
Just use if_rum with WPA encryption, this will lead to a kernel panic after some minutes.
>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-i386->freebsd-net 
Responsible-Changed-By: remko 
Responsible-Changed-When: Fri Feb 22 20:02:40 UTC 2008 
Responsible-Changed-Why:  
reassign to networking team, I have pending feedback request 
for more info regarding the dump 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120966 
State-Changed-From-To: open->feedback 
State-Changed-By: remko 
State-Changed-When: Fri Feb 22 20:03:18 UTC 2008 
State-Changed-Why:  
i requested feedback 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120966 

From: "Remko Lodder" <remko@elvandar.org>
To: "Oliver Herold" <oliver@akephalos.de>
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: i386/120966: kernel panic with if_rum and WPA encryption
Date: Fri, 22 Feb 2008 21:02:32 +0100 (CET)

 Hello,
 
 Thanks for the report, since you got a kernel panic, I would like to visit
 http://www.freebsd.org/doc/en/books/developers-handbook/kerneldebug.html
 and follow the instructions listed there.
 
 If you have the information, please reply-all on this message, so that it
 gets properly recorded into the ticket. Without the dump info we cannot do
 much.
 
 Thanks!
 -- 
 /"\   Best regards,                      | remko@FreeBSD.org
 \ /   Remko Lodder                       | remko@EFnet
  X    http://www.evilcoder.org/          |
 / \   ASCII Ribbon Campaign              | Against HTML Mail and News
 
 

From: Oliver Herold <oliver@akephalos.de>
To: bug-followup@FreeBSD.org, oliver@akephalos.de
Cc:  
Subject: Re: kern/120966: [rum]: kernel panic with if_rum and WPA encryption
Date: Fri, 22 Feb 2008 23:24:33 +0100

 --8P1HSweYDcXXzwPJ
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 Hi,
 
 I hope this is the proper information. I have a kernel with debug
 symbols and vmcore files  (about 116Mb) in /var/crash.
 
 Oliver
 
 --------------
 
 Unread portion of the kernel message buffer:
 
 
 Fatal trap 12: page fault while in kernel mode
 cpuid =3D 1; apic id =3D 01
 fault virtual address	=3D 0x12
 fault code		=3D supervisor read, page not present
 instruction pointer	=3D 0x20:0xc06bb18a
 stack pointer	        =3D 0x28:0xef0fabe4
 frame pointer	        =3D 0x28:0xef0fabfc
 code segment		=3D base 0x0, limit 0xfffff, type 0x1b
 			=3D DPL 0, pres 1, def32 1, gran 1
 processor eflags	=3D interrupt enabled, resume, IOPL =3D 0
 current process		=3D 27 (irq22: ehci0+)
 trap number		=3D 12
 panic: page fault
 cpuid =3D 1
 Uptime: 11m30s
 Physical memory: 3051 MB
 Dumping 116 MB: 101 85 69 53 37 21 5
 
 #0  doadump () at pcpu.h:195
 195	pcpu.h: No such file or directory.
 	in pcpu.h
 (kgdb) where
 #0  doadump () at pcpu.h:195
 #1  0xc07557c7 in boot (howto=3D260) at
 /usr/src/sys/kern/kern_shutdown.c:409
 #2  0xc0755a89 in panic (fmt=3DVariable "fmt" is not available.
 ) at /usr/src/sys/kern/kern_shutdown.c:563
 #3  0xc0a48aec in trap_fatal (frame=3D0xef0faba4, eva=3D18) at
 /usr/src/sys/i386/i386/trap.c:899
 #4  0xc0a48d50 in trap_pfault (frame=3D0xef0faba4, usermode=3D0, eva=3D18) =
 at
 /usr/src/sys/i386/i386/trap.c:812
 #5  0xc0a496d2 in trap (frame=3D0xef0faba4) at
 /usr/src/sys/i386/i386/trap.c:490
 #6  0xc0a3004b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc06bb18a in rum_txeof (xfer=3D0xc6f22000, priv=3D0xc6cb0498,
 status=3DUSBD_NORMAL_COMPLETION) at /usr/src/sys/dev/usb/if_rum.c:843
 #8  0xc06d49f5 in usb_transfer_complete (xfer=3D0xc6f22000) at
 /usr/src/sys/dev/usb/usbdi.c:977
 #9  0xc06a75a1 in ehci_softintr (v=3D0xc6c20000) at
 /usr/src/sys/dev/usb/ehci.c:884
 #10 0xc06d0572 in usb_schedsoftintr (bus=3D0xc6c20000) at
 /usr/src/sys/dev/usb/usb.c:844
 #11 0xc06a8d7e in ehci_intr1 (sc=3D0xc6c20000) at
 /usr/src/sys/dev/usb/ehci.c:603
 #12 0xc06a97b5 in ehci_intr (v=3D0xc6c20000) at
 /usr/src/sys/dev/usb/ehci.c:562
 #13 0xc07389fb in ithread_loop (arg=3D0xc6c96920) at
 /usr/src/sys/kern/kern_intr.c:1036
 #14 0xc07357f9 in fork_exit (callout=3D0xc0738850 <ithread_loop>,
 arg=3D0xc6c96920, frame=3D0xef0fad38) at /usr/src/sys/kern/kern_fork.c:781
 #15 0xc0a300c0 in fork_trampoline () at
 /usr/src/sys/i386/i386/exception.s:205
 --=20
 To refuse praise is to seek praise twice.
 
 --8P1HSweYDcXXzwPJ
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.8 (FreeBSD)
 
 iEYEARECAAYFAke/S6EACgkQbZFSiGSuUEg2wgCfX+3UDPUS8QeHhJo2ZcBu80kQ
 190AniSg3j93qFj2QTCfO+9JtgC6tcIB
 =jx6o
 -----END PGP SIGNATURE-----
 
 --8P1HSweYDcXXzwPJ--

From: Oliver Herold <oliver@akephalos.de>
To: bug-followup@FreeBSD.org, oliver@akephalos.de
Cc:  
Subject: Re: kern/120966: [rum]: kernel panic with if_rum and WPA encryption
Date: Sat, 23 Feb 2008 18:01:23 +0100

 --mP3DRpeJDSE+ciuQ
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 Hi
 
 Controller /dev/usb0:
 addr 1: full speed, self powered, config 1, OHCI root hub(0x0000),
 nVidia(0x0000), rev 1.00
   uhub0
  port 1 addr 2: low speed, power 100 mA, config 1, product
 0x0023(0x0023), vendor 0x046a(0x046a), rev 0.32
    ukbd0
    uhid0
  port 2 addr 3: low speed, power 100 mA, config 1, USB Optical
 Mouse(0xc019), Logitech(0x046d), rev 43.01
    ums0
  port 3 powered
  port 4 powered
  port 5 powered
  port 6 powered
  port 7 powered
  port 8 powered
  port 9 powered
  port 10 powered
 Controller /dev/usb1:
 addr 1: high speed, self powered, config 1, EHCI root hub(0x0000),
 nVidia(0x0000), rev 1.00
   uhub1
  port 1 powered
  port 2 powered
  port 3 powered
  port 4 addr 2: high speed, power 300 mA, config 1, 802.11 bg
 WLAN(0x2573), Ralink(0x148f), rev 0.01
    rum0
  port 5 powered
  port 6 powered
  port 7 powered
  port 8 powered
  port 9 powered
  port 10 powered
 
 
 Maybe this is of some help too. It's a nVidia nforce 4 chipset and and
 dualcore cpu (Athlon X2).
 
 --Oliver
 --=20
 A woman without a man is like a fish without a bicycle.
 		-- Gloria Steinem
 
 --mP3DRpeJDSE+ciuQ
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.8 (FreeBSD)
 
 iEYEARECAAYFAkfAUWMACgkQbZFSiGSuUEjX3gCgj4dS07z1Wbv2S02NXbtR2Zf0
 9sQAn0NtFchVhjF0wkq4iE8wZAbiEnJS
 =1deT
 -----END PGP SIGNATURE-----
 
 --mP3DRpeJDSE+ciuQ--
State-Changed-From-To: feedback->open 
State-Changed-By: vwe 
State-Changed-When: Wed May 14 21:03:46 UTC 2008 
State-Changed-Why:  

Feedback has been provided. 
Does this belong to net or better assign to usb? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=120966 

From: Jonathan Crook <je.suis.bon@googlemail.com>
To: bug-followup@FreeBSD.org, oliver@akephalos.de
Cc:  
Subject: Re: kern/120966: [rum] kernel panic with if_rum and WPA encryption
Date: Sat, 24 May 2008 23:05:12 +0100

 I have encountered the same problem.
 Using a network device with an rt73 chipset (thus using the rum driver), 
 and with WPA, I get a kernel panic within minutes.
 I have not yet tested the device without WPA.
 
 Unlike Oliver, I have an Intel ICH7 chipset.
 
 Thanks,
 Jonny.
>Unformatted:
