kernel panic with b43 and hostap on mips

kernel panic with b43 and hostap on mips

[Hauke Mehrtens]

Hi,

I am using compat-wireless of 2010-01-07 and mac80211: fix netdev 
queues, mac80211: fix a few work bugs and mac80211: fix endian error by 
Johannes.

The system is running OpenWrt with kernel 2.6.30.10 on Asus WL-500GP 
(brcm47xx system mips) and hostap git of 2010-01-08.

The Systems and hostapd starts normal, but if a client tries to connect 
to the access point the AP crashes. Without encryption it works without 
any problems but with PSK and WPA1 the system crashes with the attached 
panic. I have not tried other encryption modes. With compat-wireless of 
2009-12-05 and hostap git of 2009-11-29 the system worked link expected.

Hauke

root@OpenWrt:/# Unhandled kernel unaligned access[#1]:
Cpu 0
$ 0   : 00000000 00478a6b 00002000 0001a680
$ 4   : 00001520 80f4e300 00000003 00000005
$ 8   : 00000002 00000001 00100000 00000000
$12   : 00000000 00000000 00000083 00470000
$16   : 0000174f 80e38b80 80f4e300 80f60800
$20   : 80f4e300 00000091 00000300 00000000
$24   : 00000001 80f6f8e1
$28   : 80f34000 80f35c98 fffffff0 80198884
Hi    : 00000000
Lo    : 00000080
epc   : 8019889c dev_queue_xmit+0x1d0/0x418
     Not tainted
ra    : 80198884 dev_queue_xmit+0x1b8/0x418
Status: 1000dc03    KERNEL EXL IE
Cause : 00800010
BadVA : 0000174f
PrId  : 00029006 (Broadcom BCM3302)
Modules linked in: usb_storage uhci_hcd ohci_hcd nf_nat_tftp 
nf_conntrack_tftp nf_nat_irc nf_conntrack_irc nf_nat_ftp 
nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat xt_NOTRACK 
iptable_raw xt_state nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack 
ehci_hcd sd_mod pppoe pppox ipt_REJECT xt_TCPMSS ipt_LOG xt_multiport 
xt_mac xt_limit iptable_mangle iptable_filter ip_tables xt_tcpudp 
x_tables ext3 jbd ppp_async ppp_generic slhc vfat fat jbd2 b43legacy b43 
nls_utf8 nls_koi8_r nls_iso8859_2 nls_iso8859_15 nls_iso8859_13 
nls_iso8859_1 nls_cp866 nls_cp852 nls_cp850 nls_cp775 nls_cp437 
nls_cp1251 nls_cp1250 usbcore scsi_mod nls_base mac80211 cfg80211 compat 
mbcache crc16 crc_ccitt arc4 aes_generic deflate ecb cbc switch_robo 
switch_core diag
Process hostapd (pid: 3325, threadinfo=80f34000, task=80f52568, 
tls=00000000)
Stack : fffffff0 80187ce8 80f35d38 000000f1 00000000 00000091 80f60800 
80f35e08
         80ee5a00 8020d1d4 80289b88 8001e480 00000cfd 00000000 00000000 
00000000
         00000000 81804424 80f35d58 00000000 00000091 80f35e24 80f35e44 
80f35e44
         80f35e24 00000000 00000010 80184510 80f35e44 80f35e44 00000000 
7fe63134
         80f35e84 80184104 81c204c8 00000091 818b0940 80f35e18 00000000 
80f35e08
         ...
Call Trace:
[<8019889c>] dev_queue_xmit+0x1d0/0x418
[<8020d1d4>] packet_sendmsg+0x1ec/0x38c
[<80184510>] sock_sendmsg+0xa8/0xd8
[<801846e8>] sys_sendmsg+0x1a8/0x224
[<800031f0>] stack_done+0x20/0x3c


Code: 3042cfff  34422000  a642007c <8e030000> 1060003f  00000000 
8e02004c  30420004  10400005
Disabling lock debugging due to kernel taint
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..

Re: kernel panic with b43 and hostap on mips

[Larry Finger]

On 01/09/2010 05:15 PM, Hauke Mehrtens wrote:
> Hi,
> 
> I am using compat-wireless of 2010-01-07 and mac80211: fix netdev
> queues, mac80211: fix a few work bugs and mac80211: fix endian error by
> Johannes.
> 
> The system is running OpenWrt with kernel 2.6.30.10 on Asus WL-500GP
> (brcm47xx system mips) and hostap git of 2010-01-08.
> 
> The Systems and hostapd starts normal, but if a client tries to connect
> to the access point the AP crashes. Without encryption it works without
> any problems but with PSK and WPA1 the system crashes with the attached
> panic. I have not tried other encryption modes. With compat-wireless of
> 2009-12-05 and hostap git of 2009-11-29 the system worked link expected.

Can you run compat-wireless of 01-07 with hostap of 11-29 to isolate the problem
in compat-wireless? If that shows the problem in compat-wireless, can you
perform what amounts to a bisection?

Larry

Re: kernel panic with b43 and hostap on mips

[Hauke Mehrtens]

[-- Attachment #1: Type: text/plain, Size: 6867 bytes --]

Larry Finger wrote:
> On 01/09/2010 05:15 PM, Hauke Mehrtens wrote:
>> Hi,
>>
>> I am using compat-wireless of 2010-01-07 and mac80211: fix netdev
>> queues, mac80211: fix a few work bugs and mac80211: fix endian error by
>> Johannes.
>>
>> The system is running OpenWrt with kernel 2.6.30.10 on Asus WL-500GP
>> (brcm47xx system mips) and hostap git of 2010-01-08.
>>
>> The Systems and hostapd starts normal, but if a client tries to connect
>> to the access point the AP crashes. Without encryption it works without
>> any problems but with PSK and WPA1 the system crashes with the attached
>> panic. I have not tried other encryption modes. With compat-wireless of
>> 2009-12-05 and hostap git of 2009-11-29 the system worked link expected.
> 
> Can you run compat-wireless of 01-07 with hostap of 11-29 to isolate the problem
> in compat-wireless? If that shows the problem in compat-wireless, can you
> perform what amounts to a bisection?

Hi,

hostapd of 2010-01-08 and compat-wireless of 2009-12-05 are working
together. With compat-wireless of 2010-01-01 hostapd says "Failed to
remove interface (ifidx=0)" and no connection to the ap is possible.
With compat-wireless of 2010-01-05 hostap says nothing while a client
tries to connect.
For the tests today I used kernel 2.6.32.3.

It is hard to biselect the issue, because the AP mode did not worked for
some time on my device.
On an AMD64 System with Ubuntu 9.10 (kernel 2.6.31) and compat-wireless
of 2010-01-07 with the same hostapd version I have no problems.

Here is an other log of the error combined with hostapd debug log with
hostapd 20100108 and compat-wireless 2010-01-07.

Hauke


122.439116: RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added
122.439224: Unknown event 5
122.439342: RTM_NEWLINK: operstate=0 ifi_flags=0x11043
([UP][RUNNING][LOWER_UP])
122.439491: RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added
122.439661: Unknown event 5
151.228297: mgmt::proberesp cb
151.284292: mgmt::proberesp cb
151.344281: mgmt::proberesp cb
175.820380: mgmt::proberesp cb
175.880294: mgmt::proberesp cb
175.944281: mgmt::proberesp cb
177.024713: mgmt::auth
177.024924: authentication: STA=00:25:d3:24:81:99 auth_alg=0
auth_transaction=1 status_code=0 wep=0
177.025127:   New STA
177.025390: wlan0: STA 00:25:d3:24:81:99 IEEE 802.11: authentication OK
(open system)
177.025749: wlan0: STA 00:25:d3:24:81:99 MLME:
MLME-AUTHENTICATE.indication(00:25:d3:24:81:99, OPEN_SYSTEM)
177.0260CPU 0 Unable to handle kernel paging request at virtual address
00000000, epc == 801a8efc, ra == 801a8ee4
03: wlan0: STA 0Oops[#1]:
Cpu 0
$ 0   : 00000000 00478aa3 00002000 00027a80
$ 4   : 000011a0 8151c780 00000003 00000005
$ 8   : 00000002 00000001 00100000 00000000
$12   : 00000000 00000000 00000083 00470000
$16   : 00000000 81462e00 8151c780 81ff0000
$20   : 00000000 8186c940 00000091 00000000
$24   : 00000001 814f58e1
$28   : 8152e000 8152fc58 81debe00 801a8ee4
Hi    : 00000000
Lo    : 00000080
epc   : 801a8efc dev_queue_xmit+0x1d8/0x5dc
    Not tainted
ra    : 801a8ee4 dev_queue_xmit+0x1c0/0x5dc
Status: 1000d803    KERNEL EXL IE
Cause : 00800008
BadVA : 00000000
PrId  : 00029006 (Broadcom BCM3302)
Modules linked in: nf_nat_tftp nf_conntrack_tftp nf_nat_irc
nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp ipt_MASQUERADE iptable_nat
nf_nat xt_NOTRACK iptable_raw xt_state nf_conntrack_ipv4 nf_defrag_ipv4
nf_conntrack pppoe pppox ipt_REJECT xt_TCPMSS ipt_LOG xt_multiport
xt_mac xt_limit iptable_mangle iptable_filter ip_tables xt_tcpudp
x_tables ppp_async ppp_generic slhc b43legacy b43 mac80211 cfg80211
crc_ccitt arc4 aes_generic deflate ecb cbc switch_robo switch_core diag
Process hostapd (pid: 1058, threadinfo=8152e000, task=81c439b8,
tls=00000000)
Stack : 00000000 8186c940 00000091 00000000 81debe00 80197b38 81e08000
8151c780
        81ff0000 00000091 00000300 00000000 8186c940 8022008c 81e08000
8152fe28
        00000000 8152fd38 818041a0 8001dcc0 00000000 801a1164 00000000
8152fd38
        00000000 00000024 8152fce8 801c6b84 0319bfe0 802f0200 00000422
00000000
        00000000 00000000 8152fd58 00000000 00000091 8152fe24 8152fe44
8152fe44
        ...
Call Trace:
[<801a8efc>] dev_queue_xmit+0x1d8/0x5dc
[<8022008c>] packet_sendmsg+0x9c4/0xb9c
[<80194470>] sock_sendmsg+0xa8/0xd8
[<80194648>] sys_sendmsg+0x1a8/0x224
[<80003230>] stack_done+0x20/0x3c


Code: 3042cfff  34422000  a642007a <8e030000> 106000a8  00000000
8e02004c  30420004  10400005
Disabling lock debugging due to kernel taint
0:25:d3:24:81:99Kernel panic - not syncing: Fatal exception in interrupt
 MLME: MLME-DELERebooting in 3 seconds..TEKEYS.request(00:25:d3:24:81:99)
177.026164: authentication reply: STA=00:25:d3:24:81:99 auth_alg=0
auth_transaction=2 resp=0 (IE len=0)
177.028302: mgmt::auth cb
177.028563: wlan0: STA 00:25:d3:24:81:99 IEEE 802.11: authenticated
177.029915: mgmt::reassoc_req
177.030043: reassociation request: STA=00:25:d3:24:81:99
capab_info=0x431 listen_interval=10 current_ap=00:1a:92:ea:73:12
177.030320: Validating WMM IE: OUI 00:50:f2  OUI type 2  OUI sub-type 0
 version 1  QoS info 0x0
177.030540:   new AID 1
177.030760: wlan0: STA 00:25:d3:24:81:99 IEEE 802.11: association OK (aid 1)
177.033298: mgmt::reassoc_resp cb
177.033576: wlan0: STA 00:25:d3:24:81:99 IEEE 802.11: associated (aid 1)
177.034240: wlan0: STA 00:25:d3:24:81:99 MLME:
MLME-REASSOCIATE.indication(00:25:d3:24:81:99)
177.034567: wlan0: STA 00:25:d3:24:81:99 MLME:
MLME-DELETEKEYS.request(00:25:d3:24:81:99)
177.036355: wpa_driver_nl80211_set_key: ifindex=8 alg=0 addr=0x478848
key_idx=0 set_tx=1 seq_len=0 key_len=0
177.036611:    addr=00:25:d3:24:81:99
177.047463: wlan0: STA 00:25:d3:24:81:99 WPA: event 1 notification
177.048974: wpa_driver_nl80211_set_key: ifindex=8 alg=0 addr=0x478848
key_idx=0 set_tx=1 seq_len=0 key_len=0
177.049226:    addr=00:25:d3:24:81:99
177.049898: wlan0: STA 00:25:d3:24:81:99 WPA: start authentication
177.050027: WPA: 00:25:d3:24:81:99 WPA_PTK entering state INITIALIZE
177.051323: wpa_driver_nl80211_set_key: ifindex=8 alg=0 addr=0x478848
key_idx=0 set_tx=1 seq_len=0 key_len=0
177.051575:    addr=00:25:d3:24:81:99
177.053702: wlan0: STA 00:25:d3:24:81:99 IEEE 802.1X: unauthorizing port
177.053829: WPA: 00:25:d3:24:81:99 WPA_PTK_GROUP entering state IDLE
177.053975: WPA: 00:25:d3:24:81:99 WPA_PTK entering state AUTHENTICATION
177.054197: WPA: 00:25:d3:24:81:99 WPA_PTK entering state AUTHENTICATION2
177.054344: WPA: 00:25:d3:24:81:99 WPA_PTK entering state INITPSK
177.054535: WPA: 00:25:d3:24:81:99 WPA_PTK entering state PTKSTART
177.054814: wlan0: STA 00:25:d3:24:81:99 WPA: sending 1/4 msg of 4-Way
Handshake
177.054914: WPA: Send EAPOL(version=1 secure=0 mic=0 ack=1 install=0
pairwise=8 kde_len=0 keyidx=0 encr=0)



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 898 bytes --]

Re: kernel panic with b43 and hostap on mips

[Johannes Berg]

[-- Attachment #1: Type: text/plain, Size: 319 bytes --]

On Sun, 2010-01-10 at 00:15 +0100, Hauke Mehrtens wrote:

> I am using compat-wireless of 2010-01-07 and mac80211: fix netdev 
> queues, mac80211: fix a few work bugs and mac80211: fix endian error
> by Johannes.

> ra    : 80198884 dev_queue_xmit+0x1b8/0x418

Could be the bug Lennert also found?

johannes

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 801 bytes --]

Re: kernel panic with b43 and hostap on mips

[Steve Brown]

On 01/09/2010 06:15 PM, Hauke Mehrtens wrote:
> I am using compat-wireless of 2010-01-07 and mac80211: fix netdev 
> queues, mac80211: fix a few work bugs and mac80211: fix endian error 
> by Johannes.
>
> The system is running OpenWrt with kernel 2.6.30.10 on Asus WL-500GP 
> (brcm47xx system mips) and hostap git of 2010-01-08.
>
> The Systems and hostapd starts normal, but if a client tries to 
> connect to the access point the AP crashes. Without encryption it 
> works without any problems but with PSK and WPA1 the system crashes 
> with the attached panic. I have not tried other encryption modes. With 
> compat-wireless of 2009-12-05 and hostap git of 2009-11-29 the system 
> worked link expected.
>
Much the same behavior w/ OpenWrt & 2.6.31.11 on Alix (x86), AR9160 
radio (ath9k) and above compat-wireless and hostapd using WPA2.

I also got some warnings on the client. It was running the same 
hardware, kernel and compat-wireless w/ wpa_supplicant 0.6.9.

Steve

===== AP =====

Jan 10 05:26:11 222 daemon.info hostapd: wlan0: STA 00:0e:8e:1d:f5:5b 
IEEE 802.11: Station tried to associate before authentication (aid=-1 
flags=0x0)
Jan 10 05:26:12 222 daemon.info hostapd: wlan0: STA 00:0e:8e:1d:f5:5b 
IEEE 802.11: Station tried to associate before authentication (aid=-1 
flags=0x0)
BUG: unable to handle kernel paging request at 00acd30c
IP: [<c11bb8cd>] qdisc_calculate_pkt_len+0xd/0xa0
*pde = 00000000
Oops: 0000 [#1]
last sysfs file: /sys/devices/pci0000:00/0000:00:0c.0/ieee80211/phy0/index
Modules linked in: usbhid option usb_storage usbserial evdev lm90 
scx200_acb i2c_algo_bit i2c_dev i2c_core ohci_hcd ne2k_pci 8390 
leds_alix2 nf_nat_tftp nf_conne

Pid: 2422, comm: hostapd Not tainted (2.6.31.11 #1)
EIP: 0060:[<c11bb8cd>] EFLAGS: 00010282 CPU: 0
EIP is at qdisc_calculate_pkt_len+0xd/0xa0
EAX: c171b180 EBX: 00acd2f0 ECX: 00000014 EDX: 00acd2f0
ESI: c171b180 EDI: cf9c8900 EBP: cebe4000 ESP: c16fccd0
  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068
Process hostapd (pid: 2422, ti=c16fc000 task=c1780d80 task.ti=c16fc000)
Stack:
  c171b180 c0000007 c171b180 00000300 c171b180 c11af464 c16fcef4 00000083
<0> 00000083 c11a75ab 00000300 00000091 cebe4000 c171b180 c1200266 c16fcd58
<0> 00000000 00000286 c16fcf40 c171b19c c16fcf44 c1694c00 00000000 c16fcd58
Call Trace:
  [<c11af464>] ? dev_queue_xmit+0x184/0x2d0
  [<c11a75ab>] ? memcpy_fromiovec+0x2b/0x50
  [<c1200266>] ? packet_sendmsg+0x756/0x7c0
  [<c11c3156>] ? netlink_recvmsg+0x246/0x280
  [<c119f0be>] ? sock_sendmsg+0xbe/0xf0
  [<c10329f0>] ? autoremove_wake_function+0x0/0x50
  [<c10329f0>] ? autoremove_wake_function+0x0/0x50
  [<c11a78c0>] ? verify_iovec+0x50/0x90
  [<c119f2d1>] ? sys_sendmsg+0x1e1/0x270
  [<c119fdc4>] ? sys_recvmsg+0x1e4/0x270
  [<c102f35d>] ? call_usermodehelper_exec+0x6d/0x80
  [<c119e78e>] ? sock_ioctl+0x21e/0x250
  [<c107672f>] ? vfs_ioctl+0x1f/0x70
  [<c1089699>] ? invalidate_inode_buffers+0x9/0x30
  [<c11a0613>] ? sys_socketcall+0x243/0x290
  [<c1069a51>] ? filp_close+0x61/0x80
  [<c1069abe>] ? sys_close+0x4e/0x90
  [<c1003095>] ? syscall_call+0x7/0xb
Code: 02 31 c0 8b 5c 24 14 8b 74 24 18 8b 7c 24 1c 8b 6c 24 20 83 c4 24 
c3 8d b4 26 00 00 00 00 83 ec 14 89 5c 24 04 89 d3 89 74 24 08 <8b> 73 
1c 89 7c 24 0c 89
EIP: [<c11bb8cd>] qdisc_calculate_pkt_len+0xd/0xa0 SS:ESP 0068:c16fccd0
CR2: 0000000000acd30c
---[ end trace 7246f3554ac82cd2 ]---

====== Client =======

Jan 10 08:10:48 220 user.warn kernel: WARNING: at 
/home/brown/wifi/dev/openwrt/trunk-alix-svn/build_dir/linux-x86_generic/compat-wireless-2010-01-07/net/mac80211/work.c:736 
free_work+0x347/0xe80 [mac80211]()
Jan 10 08:10:48 220 user.warn kernel: Modules linked in: usbhid option 
usb_storage usbserial evdev lm90 scx200_acb i2c_algo_bit i2c_dev 
i2c_core ohci_hcd ne2k_pci 8390 leds_alix2 nf_nat_tftp nf_conntrack_tftp 
nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp
Jan 10 08:10:48 220 user.warn kernel: Pid: 707, comm: phy0 Tainted: 
G        W  2.6.31.11 #1
Jan 10 08:10:48 220 user.warn kernel: Call Trace:
Jan 10 08:10:48 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c10221bf>] ? 
warn_slowpath_common+0x7f/0xb0
Jan 10 08:10:48 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c1022203>] ? 
warn_slowpath_null+0x13/0x20
Jan 10 08:10:48 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c11a4ed8>] ? __kfree_skb+0x8/0x80
Jan 10 08:10:48 220 user.warn kernel:  [<c897d2d9>] ? 
ieee80211_sta_restart+0x6f9/0x810 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c897d3c8>] ? 
ieee80211_sta_restart+0x7e8/0x810 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c8ab023f>] ? 
ath9k_hw_wait+0x3f/0x70 [ath9k_hw]
Jan 10 08:10:48 220 user.warn kernel:  [<c101cb7d>] ? update_curr+0x7d/0xd0
Jan 10 08:10:48 220 user.warn kernel:  [<c1212569>] ? schedule+0x269/0x290
Jan 10 08:10:48 220 user.warn kernel:  [<c897e000>] ? 
free_work+0x10/0xe80 [mac80211]
Jan 10 08:10:48 220 user.warn kernel:  [<c102feda>] ? 
worker_thread+0xca/0x150
Jan 10 08:10:48 220 user.warn kernel:  [<c10329f0>] ? 
autoremove_wake_function+0x0/0x50
Jan 10 08:10:48 220 user.warn kernel:  [<c102fe10>] ? 
worker_thread+0x0/0x150
Jan 10 08:10:48 220 user.warn kernel:  [<c1032833>] ? kthread+0x73/0x90
Jan 10 08:10:48 220 user.warn kernel:  [<c10327c0>] ? kthread+0x0/0x90
Jan 10 08:10:48 220 user.warn kernel:  [<c1003873>] ? 
kernel_thread_helper+0x7/0x14
Jan 10 08:10:48 220 user.warn kernel: ---[ end trace 3df74ce0e3e9f3f6 ]---
Jan 10 08:10:48 220 user.debug kernel: wlan0: association with 
00:0e:8e:1d:f5:5c timed out
Jan 10 08:10:50 220 user.debug kernel: wlan0: direct probe to 
00:0e:8e:1d:f5:5c (try 1)
Jan 10 08:10:50 220 user.debug kernel: wlan0: direct probe responded
Jan 10 08:10:50 220 user.debug kernel: wlan0: direct probe responded
Jan 10 08:10:50 220 user.debug kernel: wlan0: associate with 
00:0e:8e:1d:f5:5c (try 1)
Jan 10 08:10:51 220 user.warn kernel: ------------[ cut here ]------------
Jan 10 08:10:51 220 user.warn kernel: WARNING: at 
/home/brown/wifi/dev/openwrt/trunk-alix-svn/build_dir/linux-x86_generic/compat-wireless-2010-01-07/net/mac80211/work.c:736 
free_work+0x347/0xe80 [mac80211]()
Jan 10 08:10:51 220 user.warn kernel: Modules linked in: usbhid option 
usb_storage usbserial evdev lm90 scx200_acb i2c_algo_bit i2c_dev 
i2c_core ohci_hcd ne2k_pci 8390 leds_alix2 nf_nat_tftp nf_conntrack_tftp 
nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp
Jan 10 08:10:51 220 user.warn kernel: Pid: 707, comm: phy0 Tainted: 
G        W  2.6.31.11 #1
Jan 10 08:10:51 220 user.warn kernel: Call Trace:
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c10221bf>] ? 
warn_slowpath_common+0x7f/0xb0
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c1022203>] ? 
warn_slowpath_null+0x13/0x20
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c8ab023f>] ? 
ath9k_hw_wait+0x3f/0x70 [ath9k_hw]
Jan 10 08:10:51 220 user.warn kernel: ------------[ cut here ]------------
Jan 10 08:10:51 220 user.warn kernel: WARNING: at 
/home/brown/wifi/dev/openwrt/trunk-alix-svn/build_dir/linux-x86_generic/compat-wireless-2010-01-07/net/mac80211/work.c:736 
free_work+0x347/0xe80 [mac80211]()
Jan 10 08:10:51 220 user.warn kernel: Modules linked in: usbhid option 
usb_storage usbserial evdev lm90 scx200_acb i2c_algo_bit i2c_dev 
i2c_core ohci_hcd ne2k_pci 8390 leds_alix2 nf_nat_tftp nf_conntrack_tftp 
nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp
Jan 10 08:10:51 220 user.warn kernel: Pid: 707, comm: phy0 Tainted: 
G        W  2.6.31.11 #1
Jan 10 08:10:51 220 user.warn kernel: Call Trace:
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c10221bf>] ? 
warn_slowpath_common+0x7f/0xb0
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c1022203>] ? 
warn_slowpath_null+0x13/0x20
Jan 10 08:10:51 220 user.warn kernel:  [<c897e337>] ? 
free_work+0x347/0xe80 [mac80211]
Jan 10 08:10:51 220 user.warn kernel:  [<c11a4ed8>] ? __kfree_skb+0x8/0x80
Jan 10 08:10:52 220 user.warn kernel: ------------[ cut here ]------------