i've had this panic occur 6-8 times since i replaced wi cards, one on an openbsd
client, the other on an openbsd AP running in hostap mode, with ral cards. it
seems to be related to my brother using his winxp laptop to pull >200 KBps
through the ral AP.
the AP is running a snapshot from Dec 8 that was updated from from a Jul 7
snapshot. i believe i've applied all the changes needed to keep the machine
up-to-date, but am not certain of this.
i had to pull the ddb info by typing it myself since this machine doesn't keep
its console on com0 (it says "switching console to com0" then boots to C0),
despite the correct entries being in ttys and boot.conf.
below is the ddb output followed by dmesg:
kernel: integer divide fault trap, code = 0
stopped at rt2661_setup_tx_desc+0xc5: idivl 0x1c(%ebp), %eax
ddb> trace
rt2661_setup_tx_desc(d0a2c000,d67aa070,8,0,5f4) at rt2661_setup_tx_desc+0xc5
rt2661_tx_data(d0a2c000,d2c48700,d0af3600,0) at rt2661_tx_data+0x3c1
rt2661_start(d0a2c030,d2c53808,6,23a4bb6) at rt2661_start+0x1b3
ether_output(d0a2c030,d2c48a00,d077ac6c,d2bf2ec4,d0a537b8) at
ether_output+0x364
ip_output(d2c48a00,0,d077ac68,1,0,0,44,1) at ip_output+0x98b
ip_forward(d2c48a00,0,0,50,d0a2b05c) at ip_forward+0x1a3
ipv4_input(d2c48a00,d0a1fc80,0,d08ad000) at ipv4_input+0x258
ipintr(58,10,10,10,d08ad000) at ipintr+0x64
Bad frame pointer: 0xd08aee24
ddb> ps
PID PPID PGRP UID S FLAGS WAIT COMMAND
6973 1 6973 0 3 0x4082 ttyin getty
70 1 70 0 3 0x4082 ttyin getty
21812 1 21812 0 3 0x4082 ttyin getty
9937 1 9937 0 3 0x4082 ttyin getty
7567 1 7567 0 3 0x4082 ttyin getty
991 1 991 0 3 0x80 select cron
1263 1 32536 0 3 0x4083 select kdc
1274 1 1274 0 3 0x40180 select
sendmail
8983 1 8983 0 3 0x80 select sshd
30465 1 30465 0 3 0x180 select inetd
3758 1 3758 77 3 0x180 poll dhcpd
15354 15405 15405 83 3 0x180 poll ntpd
15405 1 15405 0 3 0x80 poll ntpd
26211 6493 6493 73 3 0x180 poll syslogd
6493 1 6493 0 3 0x88 netio syslogd
13 0 0 0 3 0x100200 crypto_wa crypto
12 0 0 0 3 0x100200 aiodoned
aiodoned
11 0 0 0 3 0x100200 syncer update
10 0 0 0 3 0x100200 cleaner cleaner
9 0 0 0 3 0x100200 reaper reaper
8 0 0 0 3 0x100200 pgdaemon
pagedaemon
7 0 0 0 3 0x100200 pftm pfpurge
6 0 0 0 3 0x100200 wait
wskbd_hotkey
5 0 0 0 3 0x100200 usbtsk usbtask
4 0 0 0 3 0x100200 usbevt usb0
3 0 0 0 3 0x100200 apmev apm0
2 0 0 0 3 0x100200 kmalloc
kmthread
1 0 1 0 3 0x4080 wait init
0 -1 0 0 3 0x80200 scheduler swapper
OpenBSD 4.0-current (GENERIC) #1247: Fri Dec 8 11:44:40 MST 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium (P54C) ("GenuineIntel" 586-class) 167 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8
cpu0: F00F bug workaround installed
real mem = 66678784 (65116K)
avail mem = 52465664 (51236K)
using 844 buffers containing 3457024 bytes (3376K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(27) BIOS, date 08/15/96, BIOS32 rev. 0 @ 0xfd971
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: PCI BIOS has 6 Interrupt Routing table entries
pcibios0: PCI Interrupt Router at 000:08:0 ("Intel 82371SB ISA" rev 0x00)
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc0000/0x8000
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82437VX" rev 0x01
pcib0 at pci0 dev 8 function 0 "Intel 82371SB ISA" rev 0x01
pciide0 at pci0 dev 8 function 1 "Intel 82371SB IDE" rev 0x00: DMA, channel 0
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <IBM-DAQA-32160>
wd0: 16-sector PIO, LBA, 2014MB, 4124736 sectors
wd0(pciide0:0:0): using PIO mode 0, DMA mode 1
pciide0: channel 1 disabled (no drives)
uhci0 at pci0 dev 8 function 2 "Intel 82371SB USB" rev 0x01: irq 12
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
rl0 at pci0 dev 11 function 0 "Realtek 8139" rev 0x10: irq 11, address
00:08:54:24:e7:31
rlphy0 at rl0 phy 0: RTL internal PHY
ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 10, address
00:08:a1:a4:b4:f4
ral0: MAC/BBP RT2561C, RF RT2527
vga1 at pci0 dev 19 function 0 "ATI Mach64 GT" rev 0x48
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
lpt2 at isa0 port 0x3bc/4: polled
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask f3f5 netmask fff5 ttymask fff7
pctr: 586-class performance counters and user-level cycle counter enabled
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted
ral0: timeout waiting for BBP
cheers,
jake