From: Larry Finger <Larry.Finger@lwfinger.net>
To: Johannes Berg <johannes@sipsolutions.net>
Cc: wireless <linux-wireless@vger.kernel.org>,
John Linville <linville@tuxdriver.com>
Subject: Kernel Panic in mac80211
Date: Thu, 24 Jan 2008 00:16:01 -0700 [thread overview]
Message-ID: <47983B31.4020304@lwfinger.net> (raw)
I have been having "random" kernel panics where the "Caps Lock" LED is flashing at ~1 Hz. These
crashes only occur for the wireless-2.6 tree and have been happening for roughly 3 weeks. After
running a memory test to ensure that these panics were not caused by a hardware problem, I enabled
netconsole logging and caught the following crash report for my x86_64 system:
Unable to handle kernel paging request at ffffffff88246288 RIP:
[<ffffffff88202940>] :mac80211:rate_control_pid_tx_status+0x426/0x45a
PGD 203067 PUD 207063 PMD 580d3067 PTE 0
Oops: 0000 [1] SMP
CPU 1
Modules linked in: netconsole af_packet snd_pcm_oss snd_mixer_oss snd_seq snd_seq_device sunrpc
rfkill_input cpufreq_conservative cpufreq_ondemand cpufreq_userspace cpufreq_powersave powernow_k8
freq_table usbserial ipt_MASQUERADE xt_state nf_nat_ftp iptable_nat nf_nat nf_conntrack_ftp
nf_conntrack_ipv4 nf_conntrack iptable_filter ip_tables x_tables fuse loop dm_mod snd_hda_intel
snd_pcm b43 rfkill mac80211 led_class snd_timer snd soundcore rtc_cmos rtc_core k8temp
snd_page_alloc rtc_lib forcedeth hwmon ohci1394 sdhci mmc_core sr_mod ieee1394 cdrom ssb serio_raw
i2c_nforce2 output button sg ehci_hcd ohci_hcd sd_mod usbcore edd ext3 mbcache jbd fan sata_nv
pata_amd libata scsi_mod thermal processor
Pid: 0, comm: swapper Not tainted 2.6.24-rc7-L2.6-gbc77eb36-dirty #11
RIP: 0010:[<ffffffff88202940>] [<ffffffff88202940>] :mac80211:rate_control_pid_tx_status+0x426/0x45a
RSP: 0018:ffff810059b77dd0 EFLAGS: 00010202
RAX: 0000000000003600 RBX: ffff8100581e6000 RCX: 0000000000000240
RDX: ffffffff88242c80 RSI: 0000000000000001 RDI: ffff810056066800
RBP: ffff810059b77e00 R08: 0000000000000007 R09: 000000000000000b
R10: 000000000000000c R11: ffff8100581e6010 R12: 0000000000000001
R13: 00000000ffffffff R14: 0000000000000000 R15: ffff810037a75028
FS: 00002b0125b744f0(0000) GS:ffff810059801780(0000) knlGS:00000000f70de6c0
CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: ffffffff88246288 CR3: 0000000056044000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffff810059b72000, task ffff810059b70000)
Stack: ffff810058b2e5c8 ffff810058071400 ffff810058b2e460 ffff810058b2e460
ffff810058165ba0 ffff810053e9d823 ffff810059b77e50 ffffffff881ee684
ffff810058b2e5b0 ffff810058071400 ffff810059b77e50 ffff810058071400
Call Trace:
<IRQ> [<ffffffff881ee684>] :mac80211:ieee80211_tx_status+0x19d/0x424
[<ffffffff881eee0a>] :mac80211:ieee80211_tasklet_handler+0x7e/0xe2
[<ffffffff8023ef23>] tasklet_action+0x6e/0xc8
[<ffffffff8023edf6>] __do_softirq+0x70/0xf1
[<ffffffff8020b03c>] default_idle+0x0/0x51
[<ffffffff8020d38c>] call_softirq+0x1c/0x28
[<ffffffff8020f2fb>] do_softirq+0x39/0x9f
[<ffffffff8023ed44>] irq_exit+0x4e/0x90
[<ffffffff8020f41b>] do_IRQ+0xba/0xdb
[<ffffffff8020b03c>] default_idle+0x0/0x51
[<ffffffff8020c686>] ret_from_intr+0x0/0xf
<EOI> [<ffffffff8020b073>] default_idle+0x37/0x51
[<ffffffff8020b071>] default_idle+0x35/0x51
[<ffffffff8020b133>] cpu_idle+0xa6/0xce
[<ffffffff8021df9f>] start_secondary+0x3de/0x3ef
Code: f6 44 02 08 10 74 12 45 85 ed 78 05 44 39 e9 7f 08 89 8f 24
RIP [<ffffffff88202940>] :mac80211:rate_control_pid_tx_status+0x426/0x45a
RSP <ffff810059b77dd0>
CR2: ffffffff88246288
---[ end trace 638a30c2fdaf8180 ]---
Kernel panic - not syncing: Aiee, killing interrupt handler!
I have not yet figured out which instruction is found at mac80211:rate_control_pid_tx_status+0x426,
but I will continue to work on it. I wanted to get this report filed so that the problem can be
found before 2.6.25-rcX comes out.
Larry
next reply other threads:[~2008-01-24 7:16 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-01-24 7:16 Larry Finger [this message]
2008-01-24 14:33 ` Kernel Panic in mac80211 Johannes Berg
2008-01-25 4:35 ` Larry Finger
2008-01-25 5:24 ` Stefano Brivio
2008-01-25 7:12 ` Larry Finger
2008-01-25 20:59 ` Johannes Berg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47983B31.4020304@lwfinger.net \
--to=larry.finger@lwfinger.net \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
--cc=linville@tuxdriver.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.