I'm using a recent snap (wpa_supplicant-0.6-2006-12-11) and the current
wireless-dev w/ the PHYmode mods backed out so bcm43xx-d80211 compiles.
The module (WL-120G V2A) is from an ASUS wl500-gp and installed in x86
development machine using a mini-pci to pci adapter. I'm using firmware
4.80.17.0.
wpa_ connects solidly using either no encryption or tkip. Throughput,
though not measured, seems fast. I'm using the wext driver in wpa_. I
had it running for several days.
If I kill wpa_supplicant, the bcm43xx oops'es hard with a reboot
necessary. I hooked up a serial console to better see what was going on
and am attaching the dumps.
Hope this helps.
Steve
FROM firmware load
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: Broadcom 4318 WLAN found
Dec 20 17:46:44 mythtv kernel: ssb: Switching to core 2
Dec 20 17:46:44 mythtv kernel: ssb: Switching to core 1
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: PHY connected
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: Detected PHY: Version: 3, Type
2, Revision 7
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: Detected Radio: ID: 8205017f
(Manuf: 17f Ver: 2050 Rev: 8)
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: Radio turned off
Dec 20 17:46:44 mythtv kernel: bcm43xx_d80211: Radio turned off
---------------------------------------------------------
FROM /var/log/messages when wpa_supplicant-0.6-2006-12-11 killed
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: Radio turned off
Dec 20 18:01:55 mythtv kernel: ssb: Switching to core 0
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: DMA-32 0x0200 (RX) max used
slots: 1/64
Dec 20 18:01:55 mythtv kernel: ssb: Switching to core 1
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: DMA-32 0x02A0 (TX) max used
slots: 0/128
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: DMA-32 0x0280 (TX) max used
slots: 0/128
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: DMA-32 0x0260 (TX) max used
slots: 0/128
Dec 20 18:01:55 mythtv kernel: bcm43xx_d80211: DMA-32 0x0240 (TX) max used
slots: 0/128
REBOOT
Dec 20 18:07:12 mythtv syslogd 1.4.1: restart.
------------------------------------------------------------
FROM CONSOLE via SERIAL PORT
Kernel 2.6.19-rc6 on an i686
mythtv.ewol.com login: bcm43xx_d80211: ASSERTION FAILED (radio_attenuation <
10) at:
drivers/net/wireless/d80211/bcm43xx/bcm43xx_phy.c:1482:bcm43x)bcm43xx_d80211:
ASSERTION FAILED (radio_attenuation < 10) at:
drivers/net/wireless/d80211/bcm43xx/bcm43xx_phy.c:1482:bcm43xx_find_lopair()
bcm43xx_d80211: ASSERTION FAILED (radio_attenuation < 10) at:
drivers/net/wireless/d80211/bcm43xx/bcm43xx_phy.c:1482:bcm43xx_find_lopair()
bcm43xx_d80211: ASSERTION FAILED (radio_attenuation < 10) at:
drivers/net/wireless/d80211/bcm43xx/bcm43xx_phy.c:1482:bcm43xx_find_lopair()
------------[ cut here ]------------
kernel BUG at mm/slab.c:594!
invalid opcode: 0000 [#1]
Modules linked in: ipv6 autofs4 w83627hf hwmon_vid hwmon eeprom i2c_isa hidp
rfcomm l2cap bluetooth sunrpc dm_mirror dm_mod video button battery aeCPU: 0
EIP: 0060:[<c1060b5e>] Tainted: P VLI
EFLAGS: 00210046 (2.6.19-rc6 #3)
EIP is at kfree+0x6e/0x80
eax: 40000000 ebx: e4fbd980 ecx: e50da980 edx: c182bb40
esi: e50da000 edi: 00200286 ebp: f7339200 esp: e8e0be04
ds: 007b es: 007b ss: 0068
Process wpa_supplicant (pid: 2862, ti=e8e0b000 task=ee043030 task.ti=e8e0b000)
Stack: e4fbd980 00000009 e8e0be34 c11bcba8 f8adc1d4 f8ad812e f8ade23c f8aded11
00000220 f8aded08 00000020 00000080 e66ec33c f736595c f7365640 00000000
00000000 f8ad86e3 f7365640 f7365640 00000000 00000000 f719ee10 f719ee10
Call Trace:
[<c11bcba8>] kfree_skbmem+0x8/0x80
[<f8ad812e>] bcm43xx_destroy_dmaring+0xee/0x1f0 [bcm43xx_d80211]
[<f8ad86e3>] bcm43xx_dma_free+0x93/0xe0 [bcm43xx_d80211]
[<f8ac141f>] bcm43xx_shutdown_all_wireless_cores+0x7f/0x100 [bcm43xx_d80211]
[<f8ac14e3>] bcm43xx_free_board+0x33/0x50 [bcm43xx_d80211]
[<f8ac2942>] bcm43xx_net_stop+0x32/0x70 [bcm43xx_d80211]
[<c11c2198>] dev_close+0x68/0x70
[<f8b4fad3>] ieee80211_stop+0x113/0x120 [80211]
[<c11c2183>] dev_close+0x53/0x70
[<c11c1535>] dev_change_flags+0x55/0x120
[<c120487a>] devinet_ioctl+0x4fa/0x6f0
[<c10efbfe>] copy_to_user+0x3e/0x80
[<c11b69c4>] sock_ioctl+0x124/0x230
[<c11b68a0>] sock_ioctl+0x0/0x230
[<c10708af>] do_ioctl+0x1f/0x70
[<c107095c>] vfs_ioctl+0x5c/0x270
[<c1070be2>] sys_ioctl+0x72/0x90
[<c1003027>] syscall_call+0x7/0xb
[<c122007b>] unix_seq_next+0x6b/0x90
=======================
Code: 74 83 20 83 c0 01 89 03 57 9d 8b 1c 24 8b 74 24 04 8b 7c 24 08 83 c4 0c
c3 8b 52 0c eb cf 89 c8 89 da e8 b6 fe ff ff 8b 03 eb d4 <0f> 0b 52
EIP: [<c1060b5e>] kfree+0x6e/0x80 SS:ESP 0068:e8e0be04
<3>BUG: sleeping function called from invalid context at kernel/rwsem.c:20
in_atomic():0, irqs_disabled():1
[<c1033122>] down_read+0x12/0x20
[<c1029909>] blocking_notifier_call_chain+0x19/0x40
[<c101f679>] do_exit+0x19/0x8b0
[<c1004051>] show_registers+0x161/0x260
[<c101d49b>] printk+0x1b/0x20
[<c1004414>] die+0x2c4/0x2d0
[<c10048b0>] do_invalid_op+0x0/0xb0
[<c1004952>] do_invalid_op+0xa2/0xb0
[<c1060b5e>] kfree+0x6e/0x80
[<c10eea74>] vsnprintf+0x2f4/0x5f0
[<c1018351>] __activate_task+0x21/0x40
[<c1018c71>] try_to_wake_up+0x41/0x120
[<c10181e9>] __wake_up_common+0x39/0x60
[<c122ab11>] error_code+0x39/0x40
[<c1060b5e>] kfree+0x6e/0x80
[<c11bcba8>] kfree_skbmem+0x8/0x80
[<f8ad812e>] bcm43xx_destroy_dmaring+0xee/0x1f0 [bcm43xx_d80211]
[<f8ad86e3>] bcm43xx_dma_free+0x93/0xe0 [bcm43xx_d80211]
[<f8ac141f>] bcm43xx_shutdown_all_wireless_cores+0x7f/0x100 [bcm43xx_d80211]
[<f8ac14e3>] bcm43xx_free_board+0x33/0x50 [bcm43xx_d80211]
[<f8ac2942>] bcm43xx_net_stop+0x32/0x70 [bcm43xx_d80211]
[<c11c2198>] dev_close+0x68/0x70
[<f8b4fad3>] ieee80211_stop+0x113/0x120 [80211]
[<c11c2183>] dev_close+0x53/0x70
[<c11c1535>] dev_change_flags+0x55/0x120
[<c120487a>] devinet_ioctl+0x4fa/0x6f0
[<c10efbfe>] copy_to_user+0x3e/0x80
[<c11b69c4>] sock_ioctl+0x124/0x230
[<c11b68a0>] sock_ioctl+0x0/0x230
[<c10708af>] do_ioctl+0x1f/0x70
[<c107095c>] vfs_ioctl+0x5c/0x270
[<c1070be2>] sys_ioctl+0x72/0x90
[<c1003027>] syscall_call+0x7/0xb
[<c122007b>] unix_seq_next+0x6b/0x90
=======================
BUG: unable to handle kernel NULL pointer dereference at virtual address
00000004
printing eip:
c11bbdca
*pde = 00000000
Oops: 0002 [#2]
Modules linked in: ipv6 autofs4 w83627hf hwmon_vid hwmon eeprom i2c_isa hidp
rfcomm l2cap bluetooth sunrpc dm_mirror dm_mod video button battery aeCPU: 0
EIP: 0060:[<c11bbdca>] Tainted: P VLI
EFLAGS: 00010006 (2.6.19-rc6 #3)
EIP is at skb_dequeue+0x2a/0x60
eax: 00000000 ebx: f716c100 ecx: 00000000 edx: 00000296
esi: e4fbdd80 edi: f716c10c ebp: f722be48 esp: f722bd28
ds: 007b es: 007b ss: 0068
Process syslogd (pid: 1651, ti=f722b000 task=f7f5ea90 task.ti=f722b000)
Stack: f716c080 f722bf20 f7fb2300 c11bf137 f716c100 7fffffff 00000000 f7ef0d80
00000246 f7f8d200 c10df757 80006af2 00000000 f722bf20 f7fb2300 f722be48
c122214c f722bda4 00000000 f716c238 f7fb2300 f716c080 00000000 0301f9e5
Call Trace:
[<c11bf137>] skb_recv_datagram+0x137/0x210
[<c10df757>] generic_make_request+0xd7/0x250
[<c122214c>] unix_dgram_recvmsg+0x7c/0x2a0
[<c10213f6>] current_fs_time+0x46/0x50
[<c11b7171>] sock_recvmsg+0x131/0x150
[<c1047198>] __generic_file_aio_write_nolock+0x2a8/0x590
[<c102fd50>] autoremove_wake_function+0x0/0x50
[<c1071cb3>] core_sys_select+0x1f3/0x300
[<c104c27a>] pagevec_lookup_tag+0x2a/0x40
[<c12ffb40>] init_apic_mappings+0x70/0x2a0
[<c11b830b>] sys_recvfrom+0xeb/0x170
[<f888c8af>] journal_stop+0x1af/0x250 [jbd]
[<c104a7b9>] mapping_tagged+0x39/0x50
[<c122aa85>] _read_unlock_irq+0x5/0x10
[<c1045251>] find_get_pages_tag+0x71/0x80
[<c104c27a>] pagevec_lookup_tag+0x2a/0x40
[<c11b83c7>] sys_recv+0x37/0x40
[<c11b892a>] sys_socketcall+0x19a/0x2b0
[<c1002fbd>] sysenter_past_esp+0x56/0x79
=======================
Code: e2 83 ec 0c 89 7c 24 08 8d 78 0c 89 1c 24 89 c3 89 f8 89 74 24 04 e8 f6
ec 06 00 8b 33 39 de 89 c2 74 30 8b 06 83 6b 08 01 89 03 <89> 58 04
EIP: [<c11bbdca>] skb_dequeue+0x2a/0x60 SS:ESP 0068:f722bd28
_______________________________________________
Bcm43xx-dev mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev
