[ath9k-devel] Maybe a bug somewhere in the WIFI driver

[BARRAL Adrien <adrien.barral@robopec.com>]

Hello,

 

Here is a description of my system :

Linux : 2.6.35-22-generic (on a ubuntu 10.04 LTS)

My wifi card is : 02:00.0 Network controller: Atheros Communications Inc.
AR9285 Wireless Network Adapter (PCI-Express) (rev 01)

"dmesg" outputs about the wifi controller are : 

Oct 10 17:28:49 kernel: [   12.546288] ath9k 0000:02:00.0: PCI INT A -> GSI
17 (level, low) -> IRQ 17

Oct 10 17:28:49 kernel: [   12.606040] HDA Intel 0000:00:1b.0: PCI INT A ->
GSI 16 (level, low) -> IRQ 16

Oct 10 17:28:49 kernel: [   12.653486] phy0: Atheros AR9285 Rev:2
mem=0xf8e60000, irq=17

 

I am using an atheros Wifi Card in ad-hoc mode, I create my ad-hoc network
with two differents ways : 

1. Thanks to the following commands :

                ifconfig wlan2 down

                iwconfig wlan2 mode Ad-Hoc

                iwconfig wlan2 essid "Toto"

                ifconfig wlan2 up

2. Thanks to the ubuntu network manager "Create a New Network" function's. 

 

The way I use to create the network doesn't matter.

 

A few minutes after the AdHoc network is created, my system freeze. I have
got the following message in /var/log/kernel :

 

----------------- START OF MESSAGE ------------------

Oct 11 09:44:52 kernel: [  840.290670] BUG: unable to handle kernel NULL
pointer dereference at 00000080

Oct 11 09:44:52 kernel: [  840.290682] IP: [<c020cb7c>]
__kmalloc_track_caller+0x6c/0x170

Oct 11 09:44:52 kernel: [  840.290697] *pde = 7e630067

Oct 11 09:44:52   kernel: [  840.290703] Oops: 0000 [#1] SMP

Oct 11 09:44:52   kernel: [  840.290709] last sysfs file:
/sys/devices/pci0000:00/0000:00:1e.0/0000:04:0b.0/local_cpus

Oct 11 09:44:52   kernel: [  840.290716] Modules linked in: ipt_MASQUERADE
xt_state ipt_REJECT xt_tcpudp iptable_filter nf_nat_h323 nf_conntrack_h323
nf_nat_pptp nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_proto_gre
nf_nat_tftp nf_conntrack_tftp nf_nat_sip nf_conntrack_sip nf_nat_irc
nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp iptable_nat nf_nat
nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables x_tables
nls_iso8859_1 nls_cp437 vfat fat parport_pc ppdev snd_hda_codec_nvhdmi
binfmt_misc snd_hda_codec_realtek snd_hda_intel snd_hda_codec nvidia(P) arc4
snd_usb_audio ath9k snd_hwdep snd_usbmidi_lib snd_pcm ath9k_common
snd_seq_midi ath9k_hw joydev snd_rawmidi ath mac80211 snd_seq_midi_event
snd_seq snd_timer usbhid snd_seq_device cfg80211 uvcvideo intel_agp
usb_storage hid snd cdc_acm psmouse videodev v4l1_compat led_class serio_raw
coretemp xhci_hcd agpgart soundcore snd_page_alloc lp parport r8169 mii

Oct 11 09:44:52   kernel: [  840.290822]

Oct 11 09:44:52   kernel: [  840.290829] Pid: 757, comm: phy0 Tainted: P
2.6.35-22-generic #33-Ubuntu To be filled by O.E.M./To Be Filled By O.E.M.

Oct 11 09:44:52   kernel: [  840.290837] EIP: 0060:[<c020cb7c>] EFLAGS:
00010002 CPU: 3

Oct 11 09:44:52   kernel: [  840.290844] EIP is at
__kmalloc_track_caller+0x6c/0x170

Oct 11 09:44:52   kernel: [  840.290849] EAX: c2705aec EBX: c07c6888 ECX:
c07c6888 EDX: 00000000

Oct 11 09:44:52   kernel: [  840.290854] ESI: 000000d0 EDI: 00000080 EBP:
f3f6bebc ESP: f3f6be94

Oct 11 09:44:52   kernel: [  840.290860]  DS: 007b ES: 007b FS: 00d8 GS:
00e0 SS: 0068

Oct 11 09:44:52   kernel: [  840.290866] Process phy0 (pid: 757, ti=f3f6a000
task=f3ec3f70 task.ti=f3f6a000)

Oct 11 09:44:52   kernel: [  840.290870] Stack:

Oct 11 09:44:52   kernel: [  840.290874]  c2705a98 00000000 c04ece6e
c04eddf8 00000246 000000d0 000001c4 f35b5300

Oct 11 09:44:52   kernel: [  840.290886] <0> 000000d0 000000ff f3f6bedc
c04ece98 c07c64d0 00000000 000000c0 f35b9000

Oct 11 09:44:52   kernel: [  840.290900] <0> 00000000 f080d000 f3f6bef8
c04eddf8 ffffffff f080d000 f3dc8480 00000000

Oct 11 09:44:52   kernel: [  840.290914] Call Trace:

Oct 11 09:44:52   kernel: [  840.290924]  [<c04ece6e>] ?
__alloc_skb+0x2e/0x100

Oct 11 09:44:52   kernel: [  840.290931]  [<c04eddf8>] ? skb_copy+0x38/0x90

Oct 11 09:44:52   kernel: [  840.290938]  [<c04ece98>] ?
__alloc_skb+0x58/0x100

Oct 11 09:44:52   kernel: [  840.290944]  [<c04eddf8>] ? skb_copy+0x38/0x90

Oct 11 09:44:52   kernel: [  840.290976]  [<f8e3714d>] ?
ieee80211_rx_mgmt_probe_req+0xed/0x130 [mac80211]

Oct 11 09:44:52   kernel: [  840.291004]  [<f8e3810d>] ?
ieee80211_ibss_rx_queued_mgmt+0x3d/0xf0 [mac80211]

Oct 11 09:44:52   kernel: [  840.291012]  [<c04ec5c0>] ?
skb_dequeue+0x50/0x70

Oct 11 09:44:52   kernel: [  840.291039]  [<f8e38211>] ?
ieee80211_ibss_work+0x51/0xd0 [mac80211]

Oct 11 09:44:52   kernel: [  840.291049]  [<c0161a4e>] ?
run_workqueue+0x8e/0x150

Oct 11 09:44:52   kernel: [  840.291075]  [<f8e381c0>] ?
ieee80211_ibss_work+0x0/0xd0 [mac80211]

Oct 11 09:44:52   kernel: [  840.291084]  [<c0161b94>] ?
worker_thread+0x84/0xe0

Oct 11 09:44:52   kernel: [  840.291092]  [<c0165e10>] ?
autoremove_wake_function+0x0/0x50

Oct 11 09:44:52   kernel: [  840.291099]  [<c0161b10>] ?
worker_thread+0x0/0xe0

Oct 11 09:44:52   kernel: [  840.291106]  [<c01659e4>] ? kthread+0x74/0x80

Oct 11 09:44:52   kernel: [  840.291112]  [<c0165970>] ? kthread+0x0/0x80

Oct 11 09:44:52   kernel: [  840.291120]  [<c010363e>] ?
kernel_thread_helper+0x6/0x10

Oct 11 09:44:52   kernel: [  840.291123] Code: ec 75 5c 9c 58 8d 74 26 00 89
45 e8 fa 90 8d 74 26 00 64 8b 15 54 e0 8b c0 8b 03 8d 04 02 8b 38 85 ff 0f
84 99 00 00 00 8b 53 10 <8b> 14 17 89 10 8b 45 e8 50 9d 8d 74 26 00 85 ff 75
2a 8b 0d e4

Oct 11 09:44:52   kernel: [  840.291196] EIP: [<c020cb7c>]
__kmalloc_track_caller+0x6c/0x170 SS:ESP 0068:f3f6be94

Oct 11 09:44:52   kernel: [  840.291206] CR2: 0000000000000080

Oct 11 09:44:52   kernel: [  840.291212] ---[ end trace 34d01f410e93db66
]---

----------------- END OF MESSAGE ------------------

 

Of course this message is only the call trace of the wifi driver, all
process running on the system generate a call trace. I am almost certain
that the problem come from the WiFi in AdHoc mode, because if I disable this
feature my system never freeze !

 

I will try with a newer kernel, but I read all the changelog from the 2.6.35
to 3.0, and I haven't seen any fix about my problem, so I don't think this
bug was fixed...

 

Any help will be very appreciated, 

 

Best regads, 

Adrien BARRAL.
Robopec.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ath9k.org/pipermail/ath9k-devel/attachments/20111011/81073a6d/attachment-0001.htm