IGMP+WiFi panic on recent kernel - in igmp_fasttimo()

[Vladimir Grebenschikov]

Hi 

Recent 8-CURRENT

Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x14
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc05f7251
stack pointer	        = 0x28:0xc4a8db8c
frame pointer	        = 0x28:0xc4a8dc24
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 11 (swi4: clock)

...


#0  doadump () at pcpu.h:246
246	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:246
#1  0xc0478399 in db_fncall (dummy1=0, dummy2=0, dummy3=-1065953936, 
    dummy4=0xc4a8d930 "p׬�,\004") at /usr/src/sys/ddb/db_command.c:548
#2  0xc0478791 in db_command (last_cmdp=0xc075709c, cmd_table=0x0, dopager=1)
    at /usr/src/sys/ddb/db_command.c:445
#3  0xc04788ea in db_command_loop () at /usr/src/sys/ddb/db_command.c:498
#4  0xc047a72d in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:229
#5  0xc05798a4 in kdb_trap (type=12, code=0, tf=0xc4a8db4c)
    at /usr/src/sys/kern/subr_kdb.c:534
#6  0xc06bb70f in trap_fatal (frame=0xc4a8db4c, eva=20)
    at /usr/src/sys/i386/i386/trap.c:917
#7  0xc06bb9b0 in trap_pfault (frame=0xc4a8db4c, usermode=0, eva=20)
    at /usr/src/sys/i386/i386/trap.c:839
#8  0xc06bc312 in trap (frame=0xc4a8db4c) at /usr/src/sys/i386/i386/trap.c:521
#9  0xc06a331b in calltrap () at /usr/src/sys/i386/i386/exception.s:165
#10 0xc05f7251 in igmp_fasttimo () at /usr/src/sys/netinet/igmp.c:1817
#11 0xc0598e29 in pffasttimo (arg=0x0) at /usr/src/sys/kern/uipc_domain.c:498
#12 0xc0562cbc in softclock (arg=0xc076ddc0)
    at /usr/src/sys/kern/kern_timeout.c:411
#13 0xc053021b in intr_event_execute_handlers (p=0xc4c61a90, ie=0xc4c9c200)
    at /usr/src/sys/kern/kern_intr.c:1134
#14 0xc05315ca in ithread_loop (arg=0xc4c472f0)
    at /usr/src/sys/kern/kern_intr.c:1147
---Type <return> to continue, or q <return> to quit--- 
#15 0xc052db70 in fork_exit (callout=0xc0531560 <ithread_loop>, 
    arg=0xc4c472f0, frame=0xc4a8dd38) at /usr/src/sys/kern/kern_fork.c:821
#16 0xc06a3390 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:270
(kgdb) fr 10
#10 0xc05f7251 in igmp_fasttimo () at /usr/src/sys/netinet/igmp.c:1817
1817		if (inm->inm_timer == 0) {
(kgdb)

This happens when I've configured IP-TV on DSL rounter, and though TV should go to another port (ethernet)
FreeBSD kernel now crashes while try to get connected through WiFi.

If I try to connect through wired port to same broadcast domain - everything in ok.

Wireless card:
ath0: <Atheros 5212> mem 0xedf00000-0xedf0ffff irq 17 at device 0.0 on pci3
ath0: [ITHREAD]
ath0: AR5413 mac 10.3 RF5424 phy 6.1

key_mgmt=WPA-PSK with wpa_supplicant

crash is 100% reproducible

-- 
Vladimir B. Grebenschikov
Project Manager, Automation
Parallels Inc. vova at parallels.com