[Bug 29020] ath_pci on amd64 triggers random kernel crash

Thu Jan 19 19:16:31 UTC 2006

Public bug reported:
https://launchpad.net/malone/bugs/29020

Affects: kernel-package (Ubuntu)
       Severity: Normal
       Priority: (none set)
         Status: Unconfirmed

Description:
May be linked with bug id #28043
That bug also crashes the system

Once every few days my linux machine crashes, with the log file that is
appended at the end of this message. It seems that it is linked to the
atheros madwifi drivers, but as i'm not sure if it's a ubuntu-only
problem I report it here. As the error happens randomly, at different
hours of the day and without any link to any specific behaviour, I can't
link to to any specific reason as to why it would crash.

The machine contains two atheros cards, one connecting to Internet and
one that provide access point functionality to the local network. The
box is an AMD64 machine with the latest linux kernel from ubuntu breezy.

More information on the bug is available below:

root at server:~# uname -a
Linux server 2.6.12-10-amd64-generic #1 Thu Dec 22 10:56:42 UTC 2005 x86_64 GNU/Linux

root at server:~# lspci -v -s 00:09.0
0000:00:09.0 Ethernet controller: Atheros Communications, Inc. AR5212 802.11abg NIC (rev 01)
        Subsystem: D-Link System Inc: Unknown device 3a13
        Flags: bus master, medium devsel, latency 168, IRQ 16
        Memory at fad00000 (32-bit, non-prefetchable) [size=64K]
        Capabilities: [44] Power Management version 2
root at server:~# lspci -s 00:09.0 ;  lspci -n -s 00:09.0
0000:00:09.0 Ethernet controller: Atheros Communications, Inc. AR5212 802.11abg NIC (rev 01)
0000:00:09.0 0200: 168c:0013 (rev 01)

root at server:~# lspci -v -s 00:0e.0
0000:00:0e.0 Ethernet controller: Atheros Communications, Inc. AR5212 802.11abg NIC (rev 01)
        Subsystem: D-Link System Inc: Unknown device 3a13
        Flags: bus master, medium devsel, latency 168, IRQ 19
        Memory at fa800000 (32-bit, non-prefetchable) [size=64K]
        Capabilities: [44] Power Management version 2
root at server:~# lspci -s 00:0e.0 ;  lspci -n -s 00:0e.0
0000:00:0e.0 Ethernet controller: Atheros Communications, Inc. AR5212 802.11abg NIC (rev 01)
0000:00:0e.0 0200: 168c:0013 (rev 01)

root at server:~# iwconfig ath0
ath0      IEEE 802.11g  ESSID:"XXXXXXXXXXXx"
          Mode:Managed  Frequency:2.437 GHz  Access Point: XX:XX:XX:XX:XX:XX
          Bit Rate:24 Mb/s   Tx-Power:18 dBm   Sensitivity=0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XX   Security mode:restricted
          Power Management:off
          Link Quality=42/94  Signal level=-53 dBm  Noise level=-95 dBm
          Rx invalid nwid:62752  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:2  Invalid misc:2   Missed beacon:1071

root at server:~# iwconfig ath1
ath1      IEEE 802.11g  ESSID:"XXXXXXXXXXX"
          Mode:Master  Frequency:2.472 GHz  Access Point: XX:XX:XX:XX:XX:XX
          Bit Rate:0 kb/s   Tx-Power:18 dBm   Sensitivity=0/3
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XX   Security mode:restricted
          Power Management:off
          Link Quality=26/94  Signal level=-69 dBm  Noise level=-95 dBm
          Rx invalid nwid:1756  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:40  Invalid misc:40   Missed beacon:0

root at server:~# lsmod |grep ath
ath_pci                80416  0
ath_rate_sample        17296  1 ath_pci
wlan                  135668  5 wlan_wep,ath_pci,ath_rate_sample
ath_hal               172144  4 ath_pci,ath_rate_sample

It seems iwlist does not work very well on ath1, only the basic stuff
like enc, ap, channel etc works on ath1 (which is configured as master)
and on ath0 most information that can be provided by iwlist works.

Please indicate if you need more information. Maybe the problem is
linked with bug ID #28043?

The log is copied by a copy/paste operation in windows from the
hyperterm serial application with a console setup.

----------- [cut here ] --------- [please bite here ] ---------
[30967.038440] Kernel BUG at "/build/buildd/linux-restricted-modules-2.6.12-2.6:
366
[30967.042958] invalid operand: 0000 [1]
[30967.045244] CPU 0
[30967.046476] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat ipt_TCPMSS ip
t_tcpmss pppoe pppox ppp_generic slhc tun binfmt_misc rfcomm l2cap powernow_k8 c
pufreq_userspace cpufreq_stats freq_table cpufreq_powersave cpufreq_ondemand cpu
freq_conservative af_packet nvidia ipv6 video tc1100_wmi sony_acpi pcc_acpi hotk
ey dev_acpi i2c_acpi_ec button battery container ac ip_nat_irc ip_conntrack_irc
ip_nat_ftp ip_conntrack_ftp ipt_MASQUERADE ipt_REJECT ipt_LOG ipt_limit ipt_stat
e iptable_nat iptable_filter ip_conntrack ip_tables wlan_wep floppy pcspkr joyde
v tsdev touchkitusb ftdi_sio usbserial hci_usb bluetooth i2c_viapro snd_bt87x em
u10k1_gp gameport snd_emu10k1_synth snd_emux_synth snd_seq_virmidi snd_seq_midi_
emul snd_seq_dummy snd_seq_oss snd_seq_midi snd_seq_midi_event snd_seq snd_emu10
k1 snd_rawmidi snd_seq_device snd_ac97_codec snd_pcm_oss snd_mixer_oss snd_pcm s
nd_timer snd_page_alloc snd_util_mem snd_hwdep snd soundcore tda9887 msp3400 saa
7127 saa7115 tuner ivtv ath_pci ath_rate_sample wlan ath_hal ohci1394 shpchp pci
_hotplug evdev video_buf firmware_class i2c_algo_bit v4l2_common btcx_risc tveep
rom i2c_core videodev v4l1_compat sr_mod sbp2 ieee1394 rtc psmouse mousedev parp
ort_pc lp parport ide_disk md ext3 jbd dm_mod thermal processor fan sd_mod usb_s
torage usbhid ehci_hcd uhci_hcd sata_via libata scsi_mod skge ide_cd cdrom ide_g
eneric via82cxxx ide_core unix vesafb capability commoncap vga16fb vgastate soft
cursor cfbimgblt cfbfillrect cfbcopyarea fbcon tileblit font bitblit
[30967.127262] Pid: 0, comm: swapper Tainted: P      2.6.12-10-amd64-generic
[30967.131406] RIP: 0010:[<ffffffff8824d109>] <ffffffff8824d109>{:ath_rate_sampl
e:ath_rate_findrate+1163}
[30967.136998] RSP: 0018:ffffffff80392ce8  EFLAGS: 00010292
[30967.140358] RAX: 0000000000000018 RBX: 00000000ffffffff RCX: ffffffff802ee710
[30967.144713] RDX: ffffffff802ee710 RSI: 0000000000000001 RDI: ffff81006287c860
[30967.149063] RBP: ffff810029f77260 R08: 0000000000000000 R09: 0000000000000004
[30967.153419] R10: 0000000100000000 R11: 0000000000000012 R12: ffff81007895cee0
[30967.157779] R13: 0000000000000040 R14: 00000000fffffffe R15: ffff810078990000
[30967.162140] FS:  00002aaaabfb2830(0000) GS:ffffffff803d8b80(0000) knlGS:00000
00000000000
[30967.167081] CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
[30967.170585] CR2: 0000000001507210 CR3: 0000000066fdf000 CR4: 00000000000006e0
[30967.174937] Process swapper (pid: 0, threadinfo ffffffff803e2000, task ffffff
ff802e1c00)
[30967.179867] Stack: ffff810000000000 ffffffff80392e0f 0000000067184748 ffff810
029f77000
[30967.184666]        ffff810078991450 0000000178990920 ffffffff78991450 0000000
000000048
[30967.189575]        ffff810078990000 0000000000060806
[30967.192664] Call Trace: <IRQ> <ffffffff88256fb6>{:ath_pci:ath_start+2820} <ff
ffffff888bf2ad>{:af_packet:packet_rcv_spkt+565}
[30967.199599]        <ffffffff8024c315>{qdisc_restart+182} <ffffffff8023f7c4>{d
ev_queue_xmit+210}
[30967.204951]        <ffffffff80275a54>{arp_xmit+75} <ffffffff80275bd4>{arp_sol
icit+333}
[30967.209822]        <ffffffff80243ce6>{neigh_timer_handler+456} <ffffffff80243
b1e>{neigh_timer_handler+0}
[30967.215650]        <ffffffff80133c8c>{run_timer_softirq+356} <ffffffff80130b9
0>{__do_softirq+76}
[30967.221049]        <ffffffff80130c1a>{do_softirq+49} <ffffffff801109fa>{do_IR
Q+69}
[30967.225694]        <ffffffff8010e8dd>{ret_from_intr+0}  <EOI> <ffffffff801293
3b>{recalc_task_prio+272}
[30967.231402]        <ffffffff8010d027>{__switch_to+483} <ffffffff8010c947>{def
ault_idle+0}
[30967.236425]        <ffffffff880f4b3b>{:processor:acpi_processor_idle+291}
[30967.240593]        <ffffffff8010ca50>{cpu_idle+46} <ffffffff803e46ef>{start_k
ernel+440}
[30967.245516]        <ffffffff803e41ef>{_sinittext+495}
[30967.248779]
[30967.248781] Code: 0f 0b 37 e0 24 88 ff ff ff ff 6e 01 44 8b 1c 24 48 63 c3 48

[30967.254184] RIP <ffffffff8824d109>{:ath_rate_sample:ath_rate_findrate+1163} R
SP <ffffffff80392ce8>
[30967.259661]  <0>Kernel panic - not syncing: Aiee, killing interrupt handler!
[30967.264024]  <0>Rebooting in 600 seconds..machine restart
Loading, please wait...