From nobody@FreeBSD.org  Thu Jan 21 23:31:55 2010
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id BC783106566C
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 21 Jan 2010 23:31:55 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id ADF318FC0C
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 21 Jan 2010 23:31:55 +0000 (UTC)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o0LNVtxT098256
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 21 Jan 2010 23:31:55 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id o0LNVtpr098255;
	Thu, 21 Jan 2010 23:31:55 GMT
	(envelope-from nobody)
Message-Id: <201001212331.o0LNVtpr098255@www.freebsd.org>
Date: Thu, 21 Jan 2010 23:31:55 GMT
From: Gary Dunn <knowtree@aloha.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: wi driver triggers panic
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         143074
>Category:       kern
>Synopsis:       [wi]: wi driver triggers panic
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bschmidt
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jan 21 23:40:02 UTC 2010
>Closed-Date:    Tue Jun 19 07:01:04 UTC 2012
>Last-Modified:  Tue Jun 19 07:01:04 UTC 2012
>Originator:     Gary Dunn
>Release:        FreeBSD 8.0 RELEASE
>Organization:
Open Slate Project
>Environment:
Not available, but it is 8.0 GENERIC i386.
>Description:
The wi driver triggers panic bringing up interface. Using wlan clone eliminates panic but will not connect to my ssid. Interface will go up without ssid specified but ifconfig wlan0 scan just hangs. Same card has worked fine under 7.x until last weekend when I installed 8.0 on same notebook.

>How-To-Repeat:
Insert Lucent Gold Card wifi card.
ifconfig wi0 up (system will panic)

Insert Lucent Gold Card wifi card.
ifconfig wlan create wlandev wi0
ifconfig wlan0 scan (will hang, no output, stops on ctrl-c)
ifconfig wlan0 ssid MYNET
ifconfig wlan0 (will show ssid set but no carrier)
ifconfig wlan0 up (still no carrier)


>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->freebsd-net 
Responsible-Changed-By: remko 
Responsible-Changed-When: Fri Jan 22 13:46:16 UTC 2010 
Responsible-Changed-Why:  
reassign to networking team 

http://www.freebsd.org/cgi/query-pr.cgi?pr=143074 

From: Dmitry Dorofeev <dima@yasp.com>
To: bug-followup@FreeBSD.org, knowtree@aloha.com
Cc:  
Subject: Re: kern/143074: [wi]: wi driver triggers panic
Date: Wed, 10 Feb 2010 17:54:17 +0300

 I have more info for this panic:
 
 Toshiba Portege 3500 Notebook with FreeBSD 8.0 i386 installed.
 
 #ifconfig wi0 up
 #ifconfig wi0 scan
 ifconfig: unable to get scan results
 
 And after couple of seconds it crashes:
 
 Fatal trap 12: page fault while in kernel mode
 cpuid = 0; apic id = 00
 fault virtual address    = 0x2c8
 fault code               = supervisor read, page not present
 instruction pointer      = 0x20:0xc07fs1ff
 stack pointer            = 0x28:0xd49eac18
 frame pointer            = 0x28:0xd49eac54
 code segment             = base 0x0, limit 0xfffff, type 0x1b
                          = DPL 0, pres 1, def32 1, gran 1
 processor eflags         = interrupt enabled, resume, IOPL = 0
 current process          = 12 (irq11: cbb0 cbb1++*)
 trap number              = 12
 panic: page fault
 cpuid = 0
 
 
 
 
 $ dmesg
 Copyright (c) 1992-2010 The FreeBSD Project.
 Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
         The Regents of the University of California. All rights reserved.
 FreeBSD is a registered trademark of The FreeBSD Foundation.             
 FreeBSD 8.0-STABLE #1: Tue Feb  9 16:12:10 MSK 2010                      
     root@yota.home.lan:/usr/obj/usr/src/sys/GENERIC i386                 
 Timecounter "i8254" frequency 1193182 Hz quality 0                       
 CPU: Mobile Intel(R) Pentium(R) III CPU - M  1333MHz (1298.74-MHz 686-class CPU)
   Origin = "GenuineIntel"  Id = 0x6b4  Stepping = 4                             
   Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
 real memory  = 536870912 (512 MB)                                                                    
 avail memory = 494129152 (471 MB)                                                                    
 kbd1 at kbdmux0                                                                                      
 acpi0: <TOSHIB 750> on motherboard                                                                   
 acpi0: [ITHREAD]                                                                                     
 acpi0: Power Button (fixed)                                                                          
 acpi0: reservation of 0, a0000 (3) failed                                                            
 acpi0: reservation of 100000, 1eef0000 (3) failed                                                    
 Timecounter "ACPI-safe" frequency 3579545 Hz quality 850                                             
 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xd808-0xd80b on acpi0                               
 pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0                                              
 pci0: <ACPI PCI bus> on pcib0                                                                        
 pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0                                                   
 pci1: <ACPI PCI bus> on pcib1                                                                        
 vgapci0: <VGA-compatible display> mem 0xfc000000-0xfdffffff,0xfbc00000-0xfbffffff,0xf8000000-0xf9ffffff,0xf7ff8000-0xf7ffffff irq 11 at device 0.0 on pci1
 atapci0: <AcerLabs M5229 UDMA66 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xeff0-0xefff at device 4.0 on pci0                                  
 atapci0: using PIO transfers above 137GB as workaround for 48bit DMA access bug, expect reduced performance                                               
 ata0: <ATA channel 0> on atapci0                                                                                                                          
 ata0: [ITHREAD]                                                                                                                                           
 ata1: <ATA channel 1> on atapci0                                                                                                                          
 ata1: [ITHREAD]                                                                                                                                           
 pci0: <multimedia, audio> at device 6.0 (no driver attached)                                                                                              
 isab0: <PCI-ISA bridge> at device 7.0 on pci0                                                                                                             
 isa0: <ISA bus> on isab0                                                                                                                                  
 pci0: <bridge> at device 8.0 (no driver attached)                                                                                                         
 fxp0: <Intel 82551QM Pro/100 M Mobile Connection> port 0xeb40-0xeb7f mem 0xf7efe000-0xf7efefff,0xf7ec0000-0xf7edffff irq 11 at device 10.0 on pci0        
 miibus0: <MII bus> on fxp0                                                                                                                                
 inphy0: <i82555 10/100 media interface> PHY 1 on miibus0                                                                                                  
 inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto                                                                                             
 fxp0: Ethernet address: 00:08:0d:ac:a6:13                                                                                                                 
 fxp0: [ITHREAD]                                                                                                                                           
 ohci0: <NEC uPD 9210 USB controller> mem 0xf7ebf000-0xf7ebffff irq 11 at device 12.0 on pci0                                                              
 ohci0: [ITHREAD]                                                                                                                                          
 usbus0: <NEC uPD 9210 USB controller> on ohci0                                                                                                            
 ohci1: <NEC uPD 9210 USB controller> mem 0xf7ebe000-0xf7ebefff irq 11 at device 12.1 on pci0                                                              
 ohci1: [ITHREAD]                                                                                                                                          
 usbus1: <NEC uPD 9210 USB controller> on ohci1                                                                                                            
 ehci0: <NEC uPD 720100 USB 2.0 controller> mem 0xf7ebdf00-0xf7ebdfff irq 11 at device 12.2 on pci0                                                        
 ehci0: [ITHREAD]                                                                                                                                          
 usbus2: EHCI version 0.95                                                                                                                                 
 usbus2: <NEC uPD 720100 USB 2.0 controller> on ehci0                                                                                                      
 cbb0: <TI1410 PCI-CardBus Bridge> at device 16.0 on pci0                                                                                                  
 cardbus0: <CardBus bus> on cbb0                                                                                                                           
 pccard0: <16-bit PCCard bus> on cbb0                                                                                                                      
 cbb0: [FILTER]                                                                                                                                            
 cbb1: <ToPIC100 PCI-CardBus Bridge> at device 17.0 on pci0                                                                                                
 cardbus1: <CardBus bus> on cbb1                                                                                                                           
 pccard1: <16-bit PCCard bus> on cbb1                                                                                                                      
 cbb1: [FILTER]                                                                                                                                            
 cbb2: <ToPIC100 PCI-CardBus Bridge> at device 17.1 on pci0                                                                                                
 cardbus2: <CardBus bus> on cbb2                                                                                                                           
 pccard2: <16-bit PCCard bus> on cbb2                                                                                                                      
 cbb2: [FILTER]                                                                                                                                            
 pci0: <base peripheral> at device 18.0 (no driver attached)                                                                                               
 acpi_button0: <Power Button> on acpi0                                                                                                                     
 acpi_lid0: <Control Method Lid Switch> on acpi0                                                                                                           
 battery0: <ACPI Control Method Battery> on acpi0                                                                                                          
 acpi_acad0: <AC Adapter> on acpi0                                                                                                                         
 acpi_tz0: <Thermal Zone> on acpi0                                                                                                                         
 atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0                                                                                      
 atkbd0: <AT Keyboard> irq 1 on atkbdc0                                                                                                                    
 kbd0 at atkbd0                                                                                                                                            
 atkbd0: [GIANT-LOCKED]                                                                                                                                    
 atkbd0: [ITHREAD]                                                                                                                                         
 psm0: <PS/2 Mouse> irq 12 on atkbdc0                                                                                                                      
 psm0: [GIANT-LOCKED]                                                                                                                                      
 psm0: [ITHREAD]                                                                                                                                           
 psm0: model GlidePoint, device ID 0                                                                                                                       
 atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0                                                                                                 
 uart2: <16550 or compatible> port 0x338-0x33f irq 4 on acpi0                                                                                              
 uart2: [FILTER]                                                                                                                                           
 cpu0: <ACPI CPU> on acpi0                                                                                                                                 
 acpi_perf0: <ACPI CPU Frequency Control> on cpu0                                                                                                          
 pmtimer0 on isa0                                                                                                                                          
 orm0: <ISA Option ROMs> at iomem 0xc0000-0xcbfff,0xe0000-0xeffff pnpid ORM0000 on isa0                                                                    
 sc0: <System console> at flags 0x100 on isa0                                                                                                              
 sc0: VGA <16 virtual consoles, flags=0x300>                                                                                                               
 vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0                                                                                 
 ppc0: parallel port not found.                                                                                                                            
 Timecounter "TSC" frequency 1298744886 Hz quality 800                                                                                                     
 Timecounters tick every 1.000 msec                                                                                                                        
 usbus0: 12Mbps Full Speed USB v1.0
 usbus1: 12Mbps Full Speed USB v1.0
 usbus2: 480Mbps High Speed USB v2.0
 ad0: 38154MB <TOSHIBA MK4019GAX FA003E> at ata0-master UDMA66
 ugen0.1: <NEC> at usbus0
 uhub0: <NEC OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus0
 ugen1.1: <NEC> at usbus1
 uhub1: <NEC OHCI root HUB, class 9/0, rev 1.00/1.00, addr 1> on usbus1
 ugen2.1: <NEC> at usbus2
 uhub2: <NEC EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus2
 interrupt storm detected on "irq11:"; throttling interrupt source
 wi0: <TOSHIBA Wireless LAN Card> at port 0x100-0x13f irq 11 function 0 config 1 on pccard0
 wi0: [ITHREAD]
 uhub1: 2 ports with 2 removable, self powered
 Root mount waiting for: usbus2 usbus0
 uhub0: 3 ports with 3 removable, self powered
 Root mount waiting for: usbus2
 uhub2: 5 ports with 5 removable, self powered
 Trying to mount root from ufs:/dev/ad0s1a
 
 
 $ vmstat -i
 interrupt                          total       rate
 irq0: clk                         125738        997
 irq1: atkbd0                          35          0
 irq8: rtc                          16096        127
 irq9: acpi0                           17          0
 irq11: cbb0 cbb1++*                 1139          9
 irq14: ata0                         7050         55
 Total                             150075       1191
 
 -------------------
 
 I can test bug-fixes and report back any info you would be interested in.
 
 Thanks,
 
 -Dmitry
 
 
 -- 
  ,
    ,
    "",
    
   +7 812 412 1076
State-Changed-From-To: open->feedback 
State-Changed-By: bschmidt 
State-Changed-When: Thu Dec 30 11:37:33 UTC 2010 
State-Changed-Why:  
Is that still an issue on a recent installation? I'm not able to trigger 
that. 

For the scan hang try the patch available at http://lists.freebsd.org/pipermail/freebsd-net/2010-December/027327.html 


Responsible-Changed-From-To: freebsd-net->bschmidt 
Responsible-Changed-By: bschmidt 
Responsible-Changed-When: Thu Dec 30 11:37:33 UTC 2010 
Responsible-Changed-Why:  
over to me 

http://www.freebsd.org/cgi/query-pr.cgi?pr=143074 
State-Changed-From-To: feedback->closed 
State-Changed-By: bschmidt 
State-Changed-When: Tue Jun 19 07:00:47 UTC 2012 
State-Changed-Why:  
feedback timeout 

http://www.freebsd.org/cgi/query-pr.cgi?pr=143074 
>Unformatted:
