Re: Wireless-testing's b43 panics in b43_generate_txhdr on packet transmit

From: Stefanik Gábor
Date: Sat May 31 2008 - 12:34:50 EST


On Sat, May 31, 2008 at 5:11 PM, Michael Buesch <mb@xxxxxxxxx> wrote:
> On Saturday 31 May 2008 16:23:58 Stefanik Gábor wrote:
>> In the latest wireless-testing kernel, I get a panic when I try to
>> connect to a network or inject a packet in monitor mode using b43
>> (stack obtained using kdump and crash):
>>
>> crash> bt -l
>> PID: 0 TASK: c0431340 CPU: 0 COMMAND: "swapper"
>> #0 [c04617bc] crash_kexec at c015ce2a
>> /usr/src/wl-hack/wireless-testing/kernel/kexec.c: 1077
>> #1 [c046180c] die at c01054ba
>> /usr/src/wl-hack/wireless-testing/arch/x86/kernel/traps_32.c: 476
>> #2 [c0461828] do_page_fault at c034ef1f
>> /usr/src/wl-hack/wireless-testing/arch/x86/mm/fault.c: 858
>> #3 [c0461994] error_code (via page_fault) at c034d2e8
>> /usr/src/wl-hack/wireless-testing/arch/i386/kernel/entry.S
>> EAX: 00000000 EBX: 00000000 ECX: f6103000 EDX: f75ed4a0 EBP: c0461a58
>> DS: 007b ESI: 00000002 ES: 007b EDI: 00000074
>> CS: 0060 EIP: f8dd3a99 ERR: ffffffff EFLAGS: 00010046
>> #4 [c04619c8] b43_generate_txhdr at f8dd3a99
>> #5 [c0461a5c] b43_dma_tx at f8dd83d7
>> #6 [c0461ae4] b43_op_tx at f8dc4d32
>> #7 [c0461afc] __ieee80211_tx at f89c3ed4
>> #8 [c0461b14] ieee80211_master_start_xmit at f89c4b6d
>> #9 [c0461b74] dev_hard_start_xmit at c02d4cb5
>> /usr/src/wl-hack/wireless-testing/net/core/dev.c: 1558
>> #10 [c0461ba0] __qdisc_run at c02e678d
>> /usr/src/wl-hack/wireless-testing/net/sched/sch_generic.c: 155
>> #11 [c0461bd8] dev_queue_xmit at c02d5172
>> include/net/pkt_sched.h: 89
>> #12 [c0461c04] ieee80211_subif_start_xmit at f89c45db
>> #13 [c0461cc0] dev_hard_start_xmit at c02d4cb5
>> /usr/src/wl-hack/wireless-testing/net/core/dev.c: 1558
>> #14 [c0461cec] __qdisc_run at c02e678d
>> /usr/src/wl-hack/wireless-testing/net/sched/sch_generic.c: 155
>> #15 [c0461d24] dev_queue_xmit at c02d5172
>> include/net/pkt_sched.h: 89
>> #16 [c0461d50] neigh_resolve_output at c02dac3e
>> /usr/src/wl-hack/wireless-testing/net/core/neighbour.c: 1215
>> #17 [c0461d90] ip6_output_finish at f8d55c9e
>> #18 [c0461db0] ip6_output2 at f8d57e63
>> #19 [c0461dd4] ip6_output at f8d58418
>> #20 [c0461e50] mld_sendpack at f8d70d8d
>> #21 [c0461ebc] mld_ifc_timer_expire at f8d71a94
>> #22 [c0461ef0] run_timer_softirq at c0138547
>> /usr/src/wl-hack/wireless-testing/kernel/timer.c: 798
>> #23 [c0461f34] __do_softirq at c0134230
>> /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 234
>> #24 [c0461f50] do_softirq at c0134318
>> /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 271
>> #25 [c0461f5c] irq_exit at c01344b0
>> /usr/src/wl-hack/wireless-testing/kernel/softirq.c: 310
>> #26 [c0461f64] smp_apic_timer_interrupt at c0113583
>> /usr/src/wl-hack/wireless-testing/arch/x86/kernel/apic_32.c: 619
>> #27 [c0461f7c] apic_timer_interrupt at c0104963
>> include/linux/kdev_t.h: 52
>> #28 [c0461fbc] cpu_idle at c0102d69
>> /usr/src/wl-hack/wireless-testing/arch/x86/kernel/process_32.c: 188
>>
>> No out-of-tree patches applied on b43. (I used to have a patch
>> applied, but I removed it to test reproducibility of this crash.)
>>
>> Any ideas why this happens?
>
> Please provide more information. For example as for what "crash" means.
> Is this a NULL pointer dereference or whatever?
> Please put a few printks into b43_generate_txhdr()
>
>
> --
> Greetings Michael.
>

"Crash" = /usr/bin/crash, the GDB-based crashdump debugger.
It's a NULL pointer dereference. I didn't know that when I sent my
previous message, because the kernel doesn't boot in anything but
80x25 mode (vesafb modes result in a blank screen, other VGA modes
like 80x50 either show a jumbled mess of fonts or are ignored in favor
of 80x25, likely a vesafb bug - BTW nvidia video card), so I only see
the bottom of the panic message. (That's why I had to use Crash to
retrieve the stack.) I used the command "bt -l" to get the stack
originally. Since then I discovered the "log" command, which allowed
me to retrieve the full message. (It's the first time I ever debug a
kdump, sorry.)
So, anyway, here is the full panic message, as it was printed out on the screen:

"BUG: unable to handle kernel NULL pointer dereference at 00000004
IP: [<f8dd3a99>] :b43:b43_generate_txhdr+0x6a9/0x790
*pdpt = 00000000360f0001 *pde = 0000000000000000
Oops: 0000 [#1] SMP
Modules linked in: rfkill_input b43 ocfs2_dlmfs ocfs2_dlm
ocfs2_nodemanager configfs ipv6 microcode af_packet snd_pcm_oss
binfmt_misc snd_mixer_oss snd_seq snd_seq_device fuse ext3 jbd mbcache
loop dm_mod joydev rt73usb crc_itu_t arc4 rt2x00usb snd_hda_intel
rt2x00lib ecb crypto_blkcipher ssb rfkill snd_aw2 pcmcia usbhid
forcedeth snd_pcm ohci1394 pcmcia_core zd1211rw sr_mod led_class hid
sata_nv ieee1394 snd_hwdep snd_timer firmware_class i2c_nforce2 cdrom
isp1760 button input_polldev snd ff_memless i2c_core snd_page_alloc
mac80211 soundcore sg cfg80211 ehci_hcd ohci_hcd sd_mod usbcore edd
reiserfs fan pata_amd libata scsi_mod dock thermal processor [last
unloaded: speedstep_lib]

Pid: 0, comm: swapper Not tainted (2.6.26-rc4-wl-wireless6 #8)
EIP: 0060:[<f8dd3a99>] EFLAGS: 00010046 CPU: 0
EIP is at b43_generate_txhdr+0x6a9/0x790 [b43]
EAX: 00000000 EBX: 00000000 ECX: f6103000 EDX: f75ed4a0
ESI: 00000002 EDI: 00000074 EBP: c0461a58 ESP: c04619d0
DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process swapper (pid: 0, ti=c0460000 task=c0431340 task.ti=c0460000)
Stack: 00000000 00000000 00000000 f78aee00 00000040 00004108 40201a0c f61c302c
f6880dc0 f6103000 00000101 00000002 00000002 00000d80 02984108 00000074
f88a2bc7 3798e6c0 00000000 f798e6c0 f798e060 f798e6c0 00000200 00000000
Call Trace:
[<f88a2bc7>] ? qh_urb_transaction+0xe7/0x3e0 [ehci_hcd]
[<f8dd83dc>] ? b43_dma_tx+0x19c/0x800 [b43]
[<f8dc4d37>] ? b43_op_tx+0x57/0xc0 [b43]
[<f89c3ed6>] ? __ieee80211_tx+0x16/0x120 [mac80211]
[<f89c4b72>] ? ieee80211_master_start_xmit+0x262/0x310 [mac80211]
[<c02d4cbb>] ? dev_hard_start_xmit+0x24b/0x2e0
[<c02e6792>] ? __qdisc_run+0x62/0x1e0
[<c02d5177>] ? dev_queue_xmit+0x307/0x380
[<f89c45e0>] ? ieee80211_subif_start_xmit+0x3e0/0x710 [mac80211]
[<c0123da4>] ? __enqueue_entity+0xd4/0x100
[<c011f3c7>] ? enqueue_task+0x57/0x70
[<c01251b4>] ? try_to_wake_up+0x74/0x1f0
[<c02d4cbb>] ? dev_hard_start_xmit+0x24b/0x2e0
[<c012533b>] ? default_wake_function+0xb/0x10
[<c014366b>] ? autoremove_wake_function+0x1b/0x50
[<c02e6792>] ? __qdisc_run+0x62/0x1e0
[<c02d5177>] ? dev_queue_xmit+0x307/0x380
[<c02dac41>] ? neigh_resolve_output+0xf1/0x2a0
[<f8d6fdcc>] ? ipv6_chk_mcast_addr+0xbc/0x180 [ipv6]
[<f8d55ca1>] ? ip6_output_finish+0x91/0xe0 [ipv6]
[<f8d57e68>] ? ip6_output2+0x138/0x220 [ipv6]
[<f8d5841d>] ? ip6_output+0x4cd/0xb30 [ipv6]
[<c0138be5>] ? lock_timer_base+0x25/0x50
[<c0138d91>] ? __mod_timer+0xa1/0xe0
[<c0138e87>] ? mod_timer+0x37/0x80
[<f8d641db>] ? fib6_force_start_gc+0x2b/0x30 [ipv6]
[<f8d70d90>] ? mld_sendpack+0x2d0/0x330 [ipv6]
[<f8d71a99>] ? mld_ifc_timer_expire+0x259/0x2f0 [ipv6]
[<c014cf7b>] ? clockevents_program_event+0x9b/0x150
[<c013854a>] ? run_timer_softirq+0x12a/0x1f0
[<f8d71840>] ? mld_ifc_timer_expire+0x0/0x2f0 [ipv6]
[<f8d71840>] ? mld_ifc_timer_expire+0x0/0x2f0 [ipv6]
[<c0134232>] ? __do_softirq+0x92/0x120
[<c013431d>] ? do_softirq+0x5d/0x60
[<c01344b5>] ? irq_exit+0x75/0xa0
[<c0113588>] ? smp_apic_timer_interrupt+0x58/0x90
[<c0109ca0>] ? mwait_idle+0x0/0x50
[<c0104968>] ? apic_timer_interrupt+0x28/0x30
[<c0109ca0>] ? mwait_idle+0x0/0x50
[<c0109cd2>] ? mwait_idle+0x32/0x50
[<c0102d6b>] ? cpu_idle+0x6b/0xf0
[<c033e09e>] ? rest_init+0x4e/0x60
=======================
Code: 26 00 c7 45 d8 0c 00 00 00 90 e9 7b fc ff ff 8d 76 00 0f b6 4d
af c7 45 d8 02 00 00 00 89 4d f0 eb ae 8b 55 0c 8b 4d 9c 8b 42 0c <0f>
b6 58 04 3a 99 c2 03 00 00 0f 83 b9 00 00 00 8b 7d 9c 0f b6
EIP: [<f8dd3a99>] b43_generate_txhdr+0x6a9/0x790 [b43] SS:ESP 0068:c04619d0"

Full output of crash>log (essentially "dmesg" on a kdump) is attached as a file.
Linux version 2.6.26-rc4-wl-wireless6 (root@dhcppc3) (gcc version 4.3.1 20080507 (prerelease) [gcc-4_3-branch revision 135036] (SUSE Linux) ) #8 SMP Fri May 30 21:16:11 CEST 2008
BIOS-provided physical RAM map:
BIOS-e820: 0000000000000100 - 000000000009b000 (usable)
BIOS-e820: 000000000009b000 - 00000000000a0000 (reserved)
BIOS-e820: 0000000000100000 - 000000003ffc0000 (usable)
BIOS-e820: 000000003ffc0000 - 000000003ffce000 (ACPI data)
BIOS-e820: 000000003ffce000 - 0000000040000000 (ACPI NVS)
BIOS-e820: 00000000fec00000 - 00000000fec01000 (reserved)
BIOS-e820: 00000000fee00000 - 00000000fee01000 (reserved)
BIOS-e820: 00000000fff80000 - 0000000100000000 (reserved)
x86 PAT enabled: cpu 0, old 0x7010600070106, new 0x7010600070106
127MB HIGHMEM available.
896MB LOWMEM available.
found SMP MP-table at [c00ff780] 000ff780
Reserving 64MB of memory at 32MB for crashkernel (System RAM: 1018MB)
NX (Execute Disable) protection: active
Entering add_active_range(0, 0, 262080) 0 entries of 256 used
Zone PFN ranges:
DMA 0 -> 4096
Normal 4096 -> 229376
HighMem 229376 -> 262080
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0 -> 262080
On node 0 totalpages: 262080
DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 1760 pages used for memmap
Normal zone: 223520 pages, LIFO batch:31
HighMem zone: 256 pages used for memmap
HighMem zone: 32448 pages, LIFO batch:7
Movable zone: 0 pages used for memmap
DMI present.
ACPI: RSDP 000F8E30, 0014 (r0 ACPIAM)
ACPI: RSDT 3FFC0000, 0038 (r1 A M I OEMRSDT 3000807 MSFT 97)
ACPI: FACP 3FFC0200, 0084 (r2 A M I OEMFACP 3000807 MSFT 97)
ACPI: DSDT 3FFC0450, 480B (r1 1ADKV 1ADKV000 0 INTL 20051117)
ACPI: FACS 3FFCE000, 0040
ACPI: APIC 3FFC0390, 0080 (r1 A M I OEMAPIC 3000807 MSFT 97)
ACPI: MCFG 3FFC0410, 003C (r1 A M I OEMMCFG 3000807 MSFT 97)
ACPI: OEMB 3FFCE040, 0061 (r1 A M I AMI_OEM 3000807 MSFT 97)
ACPI: HPET 3FFC4C60, 0038 (r1 A M I OEMHPET0 3000807 MSFT 97)
ACPI: PM-Timer IO Port: 0x4008
ACPI: Local APIC address 0xfee00000
ACPI: LAPIC (acpi_id[0x01] lapic_id[0x00] enabled)
BIOS bug, APIC version is 0 for CPU#0! fixing up to 0x10. (tell your hw vendor)
ACPI: LAPIC (acpi_id[0x02] lapic_id[0x81] disabled)
ACPI: LAPIC (acpi_id[0x03] lapic_id[0x82] disabled)
ACPI: LAPIC (acpi_id[0x04] lapic_id[0x83] disabled)
ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0])
IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23
ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
ACPI: INT_SRC_OVR (bus 0 bus_irq 14 global_irq 14 high edge)
ACPI: INT_SRC_OVR (bus 0 bus_irq 15 global_irq 15 high edge)
ACPI: IRQ0 used by override.
ACPI: IRQ2 used by override.
ACPI: IRQ9 used by override.
ACPI: IRQ14 used by override.
ACPI: IRQ15 used by override.
Enabling APIC mode: Flat. Using 1 I/O APICs
ACPI: HPET id: 0x10de8201 base: 0xfed00000
Using ACPI (MADT) for SMP configuration information
Allocating PCI resources starting at 50000000 (gap: 40000000:bec00000)
PM: Registered nosave memory: 000000000009b000 - 00000000000a0000
PM: Registered nosave memory: 00000000000a0000 - 0000000000100000
SMP: Allowing 4 CPUs, 3 hotplug CPUs
PERCPU: Allocating 41896 bytes of per cpu data
NR_CPUS: 8, nr_cpu_ids: 4
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 260032
Kernel command line: 3 crashkernel=64M@32M
mapped APIC to ffffb000 (fee00000)
mapped IOAPIC to ffffa000 (fec00000)
Enabling fast FPU save and restore... done.
Enabling unmasked SIMD FPU exception support... done.
Initializing CPU#0
PID hash table entries: 4096 (order: 12, 16384 bytes)
Detected 3333.510 MHz processor.
spurious 8259A interrupt: IRQ7.
Console: colour VGA+ 80x25
console [tty0] enabled
Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
Memory: 958480k/1048320k available (2373k kernel code, 89180k reserved, 1074k data, 288k init, 130816k highmem)
virtual kernel memory layout:
fixmap : 0xfff4c000 - 0xfffff000 ( 716 kB)
pkmap : 0xffa00000 - 0xffc00000 (2048 kB)
vmalloc : 0xf8800000 - 0xff9fe000 ( 113 MB)
lowmem : 0xc0000000 - 0xf8000000 ( 896 MB)
.init : 0xc0465000 - 0xc04ad000 ( 288 kB)
.data : 0xc0351780 - 0xc045e220 (1074 kB)
.text : 0xc0100000 - 0xc0351780 (2373 kB)
Checking if this processor honours the WP bit even in supervisor mode...Ok.
CPA: page pool initialized 1 of 1 pages preallocated
SLUB: Genslabs=12, HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
hpet clockevent registered
Calibrating delay using timer specific routine.. 6672.40 BogoMIPS (lpj=3336201)
Security Framework initialized
Capability LSM initialized
Mount-cache hash table entries: 512
CPU: L1 I cache: 32K, L1 D cache: 32K
CPU: L2 cache: 512K
Intel machine check architecture supported.
Intel machine check reporting enabled on CPU#0.
using mwait in idle threads.
Checking 'hlt' instruction... OK.
ACPI: Core revision 20080321
Parsing all Control Methods:
Table [DSDT](id 0001) - 733 Objects with 70 Devices 238 Methods 14 Regions
tbxface-0598 [00] tb_load_namespace : ACPI Tables successfully acquired
evxfevnt-0079 [00] enable : System is already in ACPI mode
ENABLING IO-APIC IRQs
..TIMER: vector=0x31 apic1=0 pin1=2 apic2=-1 pin2=-1
CPU0: Intel(R) Celeron(R) CPU 440 @ 2.00GHz stepping 01
Brought up 1 CPUs
Total of 1 processors activated (6672.40 BogoMIPS).
CPU0 attaching sched-domain:
domain 0: span 0
groups: 0
net_namespace: 660 bytes
Booting paravirtualized kernel on bare hardware
NET: Registered protocol family 16
ACPI: bus type pci registered
PCI: MCFG configuration 0: base e0000000 segment 0 buses 0 - 255
PCI: Not using MMCONFIG.
PCI: PCI BIOS revision 3.00 entry at 0xf0031, last bus=4
PCI: Using configuration type 1 for base access
Setting up standard PCI resources
evgpeblk-0956 [00] ev_create_gpe_block : GPE 00 to 1F [_GPE] 4 regs on int 0x9
evgpeblk-0956 [00] ev_create_gpe_block : GPE 20 to 5F [_GPE] 8 regs on int 0x9
ACPI: EC: Look up EC in DSDT
Completing Region/Field/Buffer/Package initialization:....................................................................................................
Initialized 9/14 Regions 26/26 Fields 43/43 Buffers 22/23 Packages (742 nodes)
Initializing Device/Processor/Thermal objects by executing _INI methods:
Executed 0 _INI methods requiring 0 _STA executions (examined 76 objects)
evgpeblk-1052 [00] ev_initialize_gpe_bloc: Found 10 Wake, Enabled 0 Runtime GPEs in this block
evgpeblk-1052 [00] ev_initialize_gpe_bloc: Found 0 Wake, Enabled 0 Runtime GPEs in this block
ACPI: Interpreter enabled
ACPI: (supports S0 S1 S3 S4 S5)
ACPI: Using IOAPIC for interrupt routing
PCI: MCFG configuration 0: base e0000000 segment 0 buses 0 - 255
PCI: MCFG area at e0000000 reserved in ACPI motherboard resources
PCI: Using MMCONFIG for extended config space
ACPI: PCI Root Bridge [PCI0] (0000:00)
PCI: Transparent bridge - 0000:00:10.0
ACPI: PCI Interrupt Routing Table [\_SB_.PCI0._PRT]
ACPI: PCI Interrupt Routing Table [\_SB_.PCI0.P0P1._PRT]
ACPI: PCI Interrupt Routing Table [\_SB_.PCI0.P0P8._PRT]
ACPI: PCI Interrupt Routing Table [\_SB_.PCI0.P0PB._PRT]
ACPI: PCI Interrupt Routing Table [\_SB_.PCI0.P0PC._PRT]
ACPI: PCI Interrupt Link [LNKA] (IRQs 16 *17 18 19)
ACPI: PCI Interrupt Link [LNKB] (IRQs 16 17 *18 19)
ACPI: PCI Interrupt Link [LNKC] (IRQs 16 17 18 19) *0, disabled.
ACPI: PCI Interrupt Link [LNKD] (IRQs 16 17 18 *19)
ACPI: PCI Interrupt Link [LNEA] (IRQs 16 17 18 19) *0, disabled.
ACPI: PCI Interrupt Link [LNEB] (IRQs 16 17 18 19) *0, disabled.
ACPI: PCI Interrupt Link [LNEC] (IRQs 16 17 18 19) *0, disabled.
ACPI: PCI Interrupt Link [LNED] (IRQs 16 17 18 19) *0, disabled.
ACPI: PCI Interrupt Link [LUB0] (IRQs 20 21 22 *23)
ACPI: PCI Interrupt Link [LUB2] (IRQs 20 21 *22 23)
ACPI: PCI Interrupt Link [LMAC] (IRQs 20 *21 22 23)
ACPI: PCI Interrupt Link [LAZA] (IRQs 20 21 22 23) *0, disabled.
ACPI: PCI Interrupt Link [LACI] (IRQs 20 21 22 23) *0, disabled.
ACPI: PCI Interrupt Link [LMC9] (IRQs 20 21 22 23) *0, disabled.
ACPI: PCI Interrupt Link [LSMB] (IRQs 20 21 22 23) *0, disabled.
ACPI: PCI Interrupt Link [LPMU] (IRQs 20 21 22 23) *0, disabled.
ACPI: PCI Interrupt Link [LSA0] (IRQs *20 21 22 23)
ACPI: PCI Interrupt Link [LSA1] (IRQs 20 21 22 *23)
ACPI: PCI Interrupt Link [LATA] (IRQs 20 21 22 23) *0, disabled.
ACPI Warning (tbutils-0217): Incorrect checksum in table [OEMB] - 89, should be 84 [20080321]
Linux Plug and Play Support v0.97 (c) Adam Belay
pnp: PnP ACPI init
ACPI: bus type pnp registered
pnp: PnP ACPI: found 15 devices
ACPI: ACPI bus type pnp unregistered
PnPBIOS: Disabled by ACPI PNP
PCI: Using ACPI for IRQ routing
hpet0: at MMIO 0xfed00000, IRQs 2, 8, 31
hpet0: 3 32-bit timers, 25000000 Hz
ACPI: RTC can wake from S4
system 00:07: ioport range 0x4d0-0x4d1 has been reserved
system 00:07: ioport range 0x800-0x80f has been reserved
system 00:07: ioport range 0x4000-0x407f has been reserved
system 00:07: ioport range 0x4080-0x40ff has been reserved
system 00:07: ioport range 0x4400-0x447f has been reserved
system 00:07: ioport range 0x4480-0x44ff has been reserved
system 00:07: ioport range 0x4800-0x487f has been reserved
system 00:07: ioport range 0x4880-0x48ff has been reserved
system 00:07: ioport range 0x2000-0x207f has been reserved
system 00:07: ioport range 0x2080-0x20ff has been reserved
system 00:07: iomem range 0x0-0xffffffffffffffff could not be reserved
system 00:07: iomem range 0xfee01000-0xfeefffff has been reserved
system 00:09: iomem range 0xfec00000-0xfec00fff could not be reserved
system 00:09: iomem range 0xfee00000-0xfee00fff could not be reserved
system 00:0c: ioport range 0xa00-0xadf has been reserved
system 00:0c: ioport range 0xae0-0xaef has been reserved
system 00:0d: iomem range 0xe0000000-0xefffffff has been reserved
system 00:0e: iomem range 0x0-0x9ffff could not be reserved
system 00:0e: iomem range 0xc0000-0xcffff could not be reserved
system 00:0e: iomem range 0xe0000-0xfffff could not be reserved
system 00:0e: iomem range 0x100000-0x3fffffff could not be reserved
system 00:0e: iomem range 0xfec00000-0xffffffff could not be reserved
PCI: Bridge: 0000:00:03.0
IO window: d000-dfff
MEM window: 0xfc000000-0xfeafffff
PREFETCH window: 0x00000000d0000000-0x00000000dfffffff
PCI: Bridge: 0000:00:06.0
IO window: disabled.
MEM window: disabled.
PREFETCH window: disabled.
PCI: Bridge: 0000:00:07.0
IO window: disabled.
MEM window: disabled.
PREFETCH window: disabled.
PCI: Bridge: 0000:00:10.0
IO window: e000-efff
MEM window: 0xfeb00000-0xfebfffff
PREFETCH window: disabled.
PCI: Setting latency timer of device 0000:00:03.0 to 64
PCI: Setting latency timer of device 0000:00:06.0 to 64
PCI: Setting latency timer of device 0000:00:07.0 to 64
PCI: Setting latency timer of device 0000:00:10.0 to 64
NET: Registered protocol family 2
IP route cache hash table entries: 32768 (order: 5, 131072 bytes)
TCP established hash table entries: 131072 (order: 8, 1048576 bytes)
TCP bind hash table entries: 65536 (order: 7, 524288 bytes)
TCP: Hash tables configured (established 131072 bind 65536)
TCP reno registered
NET: Registered protocol family 1
Unpacking initramfs... done
Freeing initrd memory: 9137k freed
Machine check exception polling timer started.
audit: initializing netlink socket (disabled)
type=2000 audit(1212240926.372:1): initialized
highmem bounce pool size: 64 pages
Total HugeTLB memory allocated, 0
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
msgmni has been set to 1634 for ipc namespace c043bae0
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered (default)
pci 0000:00:03.0: Disabling HT MSI mapping<6>pci 0000:00:06.0: Disabling HT MSI mapping<6>pci 0000:00:07.0: Disabling HT MSI mapping<6>pci 0000:00:09.0: Disabling HT MSI mapping<6>pci 0000:00:0e.0: Disabling HT MSI mapping<6>pci 0000:00:0f.0: Disabling HT MSI mapping<6>pci 0000:00:10.0: Disabling HT MSI mapping<6>pci 0000:00:10.1: Disabling HT MSI mapping<7>pci 0000:01:00.0: Boot video device
PCI: Setting latency timer of device 0000:00:03.0 to 64
assign_interrupt_mode Found MSI capability
Allocate Port Service[0000:00:03.0:pcie00]
Allocate Port Service[0000:00:03.0:pcie03]
PCI: Setting latency timer of device 0000:00:06.0 to 64
assign_interrupt_mode Found MSI capability
Allocate Port Service[0000:00:06.0:pcie00]
Allocate Port Service[0000:00:06.0:pcie03]
PCI: Setting latency timer of device 0000:00:07.0 to 64
assign_interrupt_mode Found MSI capability
Allocate Port Service[0000:00:07.0:pcie00]
Allocate Port Service[0000:00:07.0:pcie03]
isapnp: Scanning for PnP cards...
Switched to high resolution mode on CPU 0
isapnp: No Plug & Play device found
hpet_resources: 0xfed00000 is busy
Serial: 8250/16550 driver $Revision: 1.90 $ 8 ports, IRQ sharing enabled
serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
00:05: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
Floppy drive(s): fd0 is 1.44M
floppy0: no floppy controllers found
PNP: PS/2 Controller [PNP0303:PS2K,PNP0f03:PS2M] at 0x60,0x64 irq 1,12
serio: i8042 KBD port at 0x60,0x64 irq 1
serio: i8042 AUX port at 0x60,0x64 irq 12
mice: PS/2 mouse device common for all mice
input: PC Speaker as /class/input/input0
cpuidle: using governor ladder
cpuidle: using governor menu
Using IPI No-Shortcut mode
registered taskstats version 1
drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
Freeing unused kernel memory: 288k freed
Write protecting the kernel text: 2376k
Write protecting the kernel read-only data: 892k
input: AT Translated Set 2 keyboard as /class/input/input1
ACPI: ACPI0007:00 is registered as cooling_device0
No dock devices found.
SCSI subsystem initialized
libata version 3.00 loaded.
pata_amd 0000:00:0d.0: version 0.3.10
PCI: Setting latency timer of device 0000:00:0d.0 to 64
scsi0 : pata_amd
scsi1 : pata_amd
ACPI Exception (exoparg2-0444): AE_AML_PACKAGE_LIMIT, Index (0FFFFFFFF) is beyond end of object [20080321]
ACPI Error (psparse-0530): Method parse/execution failed [\_SB_.PCI0.IDE0.GTM_] (Node f70148b8), AE_AML_PACKAGE_LIMIT
ACPI Error (psparse-0530): Method parse/execution failed [\_SB_.PCI0.IDE0.CHN1._GTM] (Node f70147e0), AE_AML_PACKAGE_LIMIT
ata2: ACPI get timing mode failed (AE 0x300d)
ata1: PATA max UDMA/133 cmd 0x1f0 ctl 0x3f6 bmdma 0xffa0 irq 14
ata2: PATA max UDMA/133 cmd 0x170 ctl 0x376 bmdma 0xffa8 irq 15
ata1.00: ATA-7: Hitachi HDS721616PLAT80, P22OA8BA, max UDMA/133
ata1.00: 312581808 sectors, multi 16: LBA48
ata1.01: ATAPI: HL-DT-STDVD-RAM GSA-H20L, 1.01, max UDMA/33
ata1: nv_mode_filter: 0x7f39f&0x7f01f->0x7f01f, BIOS=0x7f000 (0xc7c00000) ACPI=0x7f01f (15:60:0x15)
ata1: nv_mode_filter: 0x739f&0x701f->0x701f, BIOS=0x7000 (0xc7c00000) ACPI=0x701f (15:60:0x15)
ata1.00: configured for UDMA/133
ata1.01: configured for UDMA/33
logips2pp: Detected unknown logitech mouse model 62
ata2.00: ATAPI: GCR-8521B, 1.02, max MWDMA2
ata2: nv_mode_filter: 0x39f&0xfffff->0x39f, BIOS=0x0 (0xc7c00000) ACPI=0x0
ata2.00: configured for MWDMA2
scsi 0:0:0:0: Direct-Access ATA Hitachi HDS72161 P22O PQ: 0 ANSI: 5
scsi 0:0:1:0: CD-ROM HL-DT-ST DVD-RAM GSA-H20L 1.01 PQ: 0 ANSI: 5
scsi 1:0:0:0: CD-ROM HL-DT-ST CD-ROM GCR-8521B 1.02 PQ: 0 ANSI: 5
BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
EDD information not available.
sys_init_module: 'edd'->init suspiciously returned 1, it should follow 0/-E convention
sys_init_module: loading module anyway...
Pid: 71, comm: modprobe Not tainted 2.6.26-rc4-wl-wireless6 #8
[<c0154dd6>] sys_init_module+0xb16/0x1db0
[<c0214370>] ? kobject_put+0x0/0x50
[<c0103e57>] sysenter_past_esp+0x78/0xb1
=======================
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
Driver 'sd' needs updating - please use bus_type methods
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sd 0:0:0:0: [sda] 312581808 512-byte hardware sectors (160042 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sda:<6>usbcore: registered new device driver usb
ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver
ACPI: PCI Interrupt Link [LUB0] enabled at IRQ 23
ACPI: PCI Interrupt 0000:00:0b.0[A] -> Link [LUB0] -> GSI 23 (level, low) -> IRQ 23
PCI: Setting latency timer of device 0000:00:0b.0 to 64
ohci_hcd 0000:00:0b.0: OHCI Host Controller
ohci_hcd 0000:00:0b.0: new USB bus registered, assigned bus number 1
ohci_hcd 0000:00:0b.0: irq 23, io mem 0xfbffb000
sda1 sda2 sda3 sda4
sd 0:0:0:0: [sda] Attached SCSI disk
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 8 ports detected
input: ImExPS/2 Logitech Explorer Mouse as /class/input/input2
usb usb1: New USB device found, idVendor=1d6b, idProduct=0001
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: OHCI Host Controller
usb usb1: Manufacturer: Linux 2.6.26-rc4-wl-wireless6 ohci_hcd
usb usb1: SerialNumber: 0000:00:0b.0
ACPI: PCI Interrupt Link [LUB2] enabled at IRQ 22
ACPI: PCI Interrupt 0000:00:0b.1[B] -> Link [LUB2] -> GSI 22 (level, low) -> IRQ 22
PCI: Setting latency timer of device 0000:00:0b.1 to 64
ehci_hcd 0000:00:0b.1: EHCI Host Controller
ehci_hcd 0000:00:0b.1: new USB bus registered, assigned bus number 2
ehci_hcd 0000:00:0b.1: debug port 1
PCI: cache line size of 32 is not supported by device 0000:00:0b.1
ehci_hcd 0000:00:0b.1: irq 22, io mem 0xfbffac00
ehci_hcd 0000:00:0b.1: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 8 ports detected
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: EHCI Host Controller
usb usb2: Manufacturer: Linux 2.6.26-rc4-wl-wireless6 ehci_hcd
usb usb2: SerialNumber: 0000:00:0b.1
ReiserFS: sda3: found reiserfs format "3.6" with standard journal
ReiserFS: sda3: using ordered data mode
ReiserFS: sda3: journal params: device sda3, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
ReiserFS: sda3: checking transaction log (sda3)
ReiserFS: sda3: Using r5 hash to sort names
ReiserFS: sda3: Removing [53132 1090633 0x0 SD]..done
ReiserFS: sda3: There were 1 uncompleted unlinks/truncates. Completed
usb 2-3: new high speed USB device using ehci_hcd and address 2
usb 2-3: configuration #1 chosen from 1 choice
usb 2-3: New USB device found, idVendor=13b1, idProduct=0020
usb 2-3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
usb 2-3: Product: Compact Wireless-G USB Adapter
usb 2-3: Manufacturer: Cisco-Linksys
usb 2-4: new high speed USB device using ehci_hcd and address 3
usb 2-4: configuration #1 chosen from 1 choice
usb 2-4: New USB device found, idVendor=0586, idProduct=3410
usb 2-4: New USB device strings: Mfr=16, Product=32, SerialNumber=0
usb 2-4: Product: ZyXEL G-202
usb 2-4: Manufacturer: ZyDAS
hub 2-0:1.0: unable to enumerate USB device on port 6
usb 1-6: new low speed USB device using ohci_hcd and address 2
usb 1-6: configuration #1 chosen from 1 choice
usb 1-6: New USB device found, idVendor=046d, idProduct=c207
usb 1-6: New USB device strings: Mfr=4, Product=32, SerialNumber=0
usb 1-6: Product: WingMan Extreme Digital 3D
usb 1-6: Manufacturer: Logitech Inc.
sd 0:0:0:0: Attached scsi generic sg0 type 0
scsi 0:0:1:0: Attached scsi generic sg1 type 5
scsi 1:0:0:0: Attached scsi generic sg2 type 5
input: Power Button (FF) as /class/input/input3
ACPI: Power Button (FF) [PWRF]
input: Power Button (CM) as /class/input/input4
ACPI: Power Button (CM) [PWRB]
ACPI: PCI Interrupt Link [LMAC] enabled at IRQ 21
ACPI: PCI Interrupt 0000:00:14.0[A] -> Link [LMAC] -> GSI 21 (level, low) -> IRQ 21
memory length for this resource is less than required
isp1760: probe of 0000:00:14.0 failed with error -12
i2c-adapter i2c-0: nForce2 SMBus adapter at 0x5000
i2c-adapter i2c-1: nForce2 SMBus adapter at 0x6000
sata_nv 0000:00:0e.0: version 3.5
ACPI: PCI Interrupt Link [LSA0] enabled at IRQ 20
ACPI: PCI Interrupt 0000:00:0e.0[A] -> Link [LSA0] -> GSI 20 (level, low) -> IRQ 20
sata_nv 0000:00:0e.0: Using SWNCQ mode
PCI: Setting latency timer of device 0000:00:0e.0 to 64
scsi2 : sata_nv
scsi3 : sata_nv
ata3: SATA max UDMA/133 cmd 0xc800 ctl 0xc480 bmdma 0xc000 irq 20
ata4: SATA max UDMA/133 cmd 0xc400 ctl 0xc080 bmdma 0xc008 irq 20
Driver 'sr' needs updating - please use bus_type methods
sr0: scsi3-mmc drive: 48x/48x writer dvd-ram cd/rw xa/form2 cdda tray
Uniform CD-ROM driver Revision: 3.20
sr 0:0:1:0: Attached scsi CD-ROM sr0
sr1: scsi3-mmc drive: 52x/52x cd/rw xa/form2 cdda tray
sr 1:0:0:0: Attached scsi CD-ROM sr1
zd1211rw usb_init()
usb 2-4: print_id() 0586:3410 v4810 high
usb 2-4: reset high speed USB device using ehci_hcd and address 3
zd1211rw 2-4:1.0: zd_chip_read_mac_addr_fw()
phy0: Selected rate control algorithm 'pid'
ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
ata3.00: HPA detected: current 398294975, native 398297088
ata3.00: ATA-7: Maxtor 6B200M0, BANC1B70, max UDMA/133
ata3.00: 398294975 sectors, multi 0: LBA48 NCQ (not used)
ata3.00: configured for UDMA/133
zd1211rw 2-4:1.0: probe() successful
zd1211rw 2-4:1.0: phy0
usbcore: registered new interface driver hiddev
usbcore: registered new interface driver zd1211rw
zd1211rw initialized
ata4: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
ata4.00: HPA detected: current 390719855, native 390721968
ata4.00: ATA-7: ST3200820AS, 3.AAC, max UDMA/133
ata4.00: 390719855 sectors, multi 16: LBA48 NCQ (depth 31/32)
phy1 -> rt73usb_validate_eeprom: EEPROM recovery - NIC: 0xffef
phy1 -> rt73usb_validate_eeprom: EEPROM recovery - Led: 0xe000
phy1 -> rt73usb_validate_eeprom: EEPROM recovery - RSSI OFFSET A: 0x0000
phy1 -> rt2x00_set_chip: Info - Chipset detected - rt: 1300, rf: 0002, rev: 0002573a.
phy1: Selected rate control algorithm 'pid'
Registered led device: rt73usb-phy1:radio
Registered led device: rt73usb-phy1:assoc
Registered led device: rt73usb-phy1:quality
ata4.00: configured for UDMA/133
scsi 2:0:0:0: Direct-Access ATA Maxtor 6B200M0 BANC PQ: 0 ANSI: 5
ata3.00: Disabling SWNCQ mode (depth 1)
sd 2:0:0:0: [sdb] 398294975 512-byte hardware sectors (203927 MB)
sd 2:0:0:0: [sdb] Write Protect is off
sd 2:0:0:0: [sdb] Mode Sense: 00 3a 00 00
sd 2:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sd 2:0:0:0: [sdb] 398294975 512-byte hardware sectors (203927 MB)
sd 2:0:0:0: [sdb] Write Protect is off
sd 2:0:0:0: [sdb] Mode Sense: 00 3a 00 00
sd 2:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sdb: sdb1 sdb2 < sdb5 sdb6 sdb7 sdb8 sdb9 sdb10 sdb11 sdb12 sdb13 >
sd 2:0:0:0: [sdb] Attached SCSI disk
sd 2:0:0:0: Attached scsi generic sg3 type 0
scsi 3:0:0:0: Direct-Access ATA ST3200820AS 3.AA PQ: 0 ANSI: 5
sd 3:0:0:0: [sdc] 390719855 512-byte hardware sectors (200049 MB)
sd 3:0:0:0: [sdc] Write Protect is off
sd 3:0:0:0: [sdc] Mode Sense: 00 3a 00 00
sd 3:0:0:0: [sdc] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sd 3:0:0:0: [sdc] 390719855 512-byte hardware sectors (200049 MB)
sd 3:0:0:0: [sdc] Write Protect is off
sd 3:0:0:0: [sdc] Mode Sense: 00 3a 00 00
sd 3:0:0:0: [sdc] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sdc: sdc1 sdc2
sd 3:0:0:0: [sdc] Attached SCSI disk
sd 3:0:0:0: Attached scsi generic sg4 type 0
ACPI: PCI Interrupt Link [LSA1] enabled at IRQ 23
ACPI: PCI Interrupt 0000:00:0f.0[A] -> Link [LSA1] -> GSI 23 (level, low) -> IRQ 23
sata_nv 0000:00:0f.0: Using SWNCQ mode
PCI: Setting latency timer of device 0000:00:0f.0 to 64
scsi4 : sata_nv
scsi5 : sata_nv
ata5: SATA max UDMA/133 cmd 0xbc00 ctl 0xb880 bmdma 0xb400 irq 23
ata6: SATA max UDMA/133 cmd 0xb800 ctl 0xb480 bmdma 0xb408 irq 23
ata5: SATA link down (SStatus 0 SControl 300)
ata6: SATA link down (SStatus 0 SControl 300)
ACPI: PCI Interrupt Link [LAZA] enabled at IRQ 22
ACPI: PCI Interrupt 0000:00:10.1[B] -> Link [LAZA] -> GSI 22 (level, low) -> IRQ 22
PCI: Setting latency timer of device 0000:00:10.1 to 64
hda_codec: Unknown model for ALC883, trying auto-probe from BIOS...
ALSA sound/pci/hda/hda_codec.c:3021: autoconfig: line_outs=3 (0x14/0x15/0x16/0x0/0x0)
ALSA sound/pci/hda/hda_codec.c:3025: speaker_outs=0 (0x0/0x0/0x0/0x0/0x0)
ALSA sound/pci/hda/hda_codec.c:3029: hp_outs=1 (0x1b/0x0/0x0/0x0/0x0)
ALSA sound/pci/hda/hda_codec.c:3030: mono: mono_out=0x0
ALSA sound/pci/hda/hda_codec.c:3038: inputs: mic=0x18, fmic=0x19, line=0x1a, fline=0x0, cd=0x0, aux=0x0
ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 19
ACPI: PCI Interrupt 0000:04:09.0[A] -> Link [LNKD] -> GSI 19 (level, low) -> IRQ 19
ohci1394: fw-host0: OHCI-1394 1.1 (PCI): IRQ=[19] MMIO=[febfd000-febfd7ff] Max Packet=[2048] IR/IT contexts=[4/8]
forcedeth: Reverse Engineered nForce ethernet driver. Version 0.61.
PCI: Setting latency timer of device 0000:00:14.0 to 64
forcedeth 0000:00:14.0: ifname eth0, PHY OUI 0x732 @ 1, addr 00:19:db:ca:a0:b0
forcedeth 0000:00:14.0: highdma pwrctl timirq gbit lnktim desc-v3
ACPI: PCI Interrupt Link [LNKB] enabled at IRQ 18
ACPI: PCI Interrupt 0000:04:07.0[A] -> Link [LNKB] -> GSI 18 (level, low) -> IRQ 18
Audiowerk 2 sound card (saa7146 chipset) detected and managed
ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 17
ACPI: PCI Interrupt 0000:04:06.0[A] -> Link [LNKA] -> GSI 17 (level, low) -> IRQ 17
udev: renamed network interface eth0 to eth1
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x0D, vendor 0x4243)
ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x09, vendor 0x4243)
ssb: Core 2 found: PCI (cc 0x804, rev 0x0C, vendor 0x4243)
ssb: Core 3 found: PCMCIA (cc 0x80D, rev 0x07, vendor 0x4243)
ssb: SPROM revision 2 detected.
ssb: Sonics Silicon Backplane found on PCI device 0000:04:06.0
ieee1394: Host added: ID:BUS[0-00:1023] GUID[000010dc012f0482]
usbhid: timeout initializing reports
input: Logitech Inc. WingMan Extreme Digital 3D as /class/input/input5
input,hidraw0: USB HID v1.00 Joystick [Logitech Inc. WingMan Extreme Digital 3D] on usb-0000:00:0b.0-6
usbcore: registered new interface driver rt73usb
usbcore: registered new interface driver usbhid
usbhid: v2.6:USB HID core driver
Adding 1558264k swap on /dev/sda1. Priority:-1 extents:1 across:1558264k
device-mapper: uevent: version 1.0.3
device-mapper: ioctl: 4.13.0-ioctl (2007-10-18) initialised: dm-devel@xxxxxxxxxx
loop: module loaded
kjournald starting. Commit interval 5 seconds
EXT3 FS on sda2, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
fuse init (API version 7.9)
powernow: This module only works with AMD K7 CPUs
eth1: no link during initialization.
phy1 -> rt2x00lib_request_firmware: Info - Loading firmware file 'rt73.bin'.
firmware: requesting rt73.bin
phy1 -> rt2x00lib_request_firmware: Info - Firmware detected - version: 1.7.
phy1: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_usb_init_hw()
usb 2-4: request_fw_file() fw name zd1211/zd1211b_ub
firmware: requesting zd1211/zd1211b_ub
phy1: HW CONFIG: freq=2412
NET: Registered protocol family 17
phy1: HW CONFIG: freq=2417
usb 2-4: upload_firmware() firmware device id 0x4810 is equal to the actual device id
usb 2-4: request_fw_file() fw name zd1211/zd1211b_uphr
firmware: requesting zd1211/zd1211b_uphr
phy1: HW CONFIG: freq=2422
usb 2-4: upload_code() transfer size 4096
usb 2-4: upload_code() transfer size 1024
usb 2-4: upload_code() firmware confirm return value 0x01
zd1211rw 2-4:1.0: zd_usb_enable_int()
zd1211rw 2-4:1.0: zd_usb_enable_int() submit urb f78fcd80
zd1211rw 2-4:1.0: zd_chip_init_hw()
zd1211rw 2-4:1.0: dump_cr() CR_AFTER_PNP 0x00000000
zd1211rw 2-4:1.0: dump_cr() CR_GPI_EN 0x00000000
zd1211rw 2-4:1.0: dump_cr() CR_INTERRUPT 0x00000000
zd1211rw 2-4:1.0: read_fw_regs_offset() fw_regs_base: 0xf772
zd1211rw 2-4:1.0: read_pod() E2P_POD 0x00000184
zd1211rw 2-4:1.0: read_pod() RF AL2230_RF 0x4 PA type 0x0 patch CCK 1 patch CR157 0 patch 6M 0 new PHY 0 link LED2 tx led 1
zd1211rw 2-4:1.0: hw_init()
zd1211rw 2-4:1.0: zd1211b_hw_reset_phy()
zd1211rw 2-4:1.0: zd1211b_hw_init_hmac()
zd1211rw 2-4:1.0: zd_usb_rfwrite() value 0x0241000 bits 24
phy1: HW CONFIG: freq=2427
zd1211rw 2-4:1.0: firmware version 4725
zd1211rw 2-4:1.0: dump_fw_registers() FW_FIRMWARE_VER 0x4725
zd1211rw 2-4:1.0: dump_fw_registers() FW_USB_SPEED 0x0001
zd1211rw 2-4:1.0: dump_fw_registers() FW_FIX_TX_RATE 0x0000
zd1211rw 2-4:1.0: dump_fw_registers() FW_LINK_STATUS 0x0000
zd1211rw 2-4:1.0: dump_cr() CR_AFTER_PNP 0x00000001
zd1211rw 2-4:1.0: dump_cr() CR_GPI_EN 0x00000000
zd1211rw 2-4:1.0: dump_cr() CR_INTERRUPT 0x00000000
zd1211rw 2-4:1.0: zd1211b chip 0586:3410 v4810 high 00-13-49 AL2230_RF pa0 g---S
zd1211rw 2-4:1.0: zd_read_regdomain() regdomain: 0x30
zd1211rw 2-4:1.0: regdomain 0x30
zd1211rw 2-4:1.0: zd_usb_disable_int() urb f78fcd80 killed
zd1211rw 2-4:1.0: zd_usb_enable_int()
zd1211rw 2-4:1.0: zd_usb_enable_int() submit urb f68a5280
zd1211rw 2-4:1.0: zd_usb_enable_rx()
zd1211rw 2-4:1.0: housekeeping_enable()
zd1211rw 2-4:1.0: zd_write_mac_addr() mac addr 00:13:49:8f:8f:db
zd1211rw 2-4:1.0: zd_op_bss_info_changed() changes: 6
zd1211rw 2-4:1.0: zd_chip_set_rts_cts_rate_locked() preamble=0
phy0: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy1: HW CONFIG: freq=2432
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy0: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2437
phy0: HW CONFIG: freq=2417
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 2
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2442
phy0: HW CONFIG: freq=2422
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 3
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2447
phy0: HW CONFIG: freq=2427
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 4
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2452
phy0: HW CONFIG: freq=2432
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 5
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2457
phy0: HW CONFIG: freq=2437
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 6
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
firmware: requesting intel-ucode/06-16-01
IA-32 Microcode Update Driver: v1.14a <tigran@xxxxxxxxxxxxxxxxxxxx>
phy0: HW CONFIG: freq=2442
phy1: HW CONFIG: freq=2462
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 7
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2447
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 8
phy1: HW CONFIG: freq=2467
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2452
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 9
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2472
phy0: HW CONFIG: freq=2457
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 10
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2484
phy0: HW CONFIG: freq=2462
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 11
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2412
phy0: HW CONFIG: freq=2467
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 12
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2472
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 13
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2484
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 14
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ADDRCONF(NETDEV_UP): wlan0: link is not ready
ADDRCONF(NETDEV_UP): wlan1: link is not ready
ADDRCONF(NETDEV_UP): eth1: link is not ready
OCFS2 Node Manager 1.5.0
OCFS2 DLM 1.5.0
OCFS2 DLMFS 1.5.0
OCFS2 User DLM kernel interface loaded
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 33:33:00:00:00:01
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy0: HW CONFIG: freq=2412
phy1: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2417
phy0: HW CONFIG: freq=2417
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 2
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2422
phy1: HW CONFIG: freq=2422
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 3
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2427
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 4
phy1: HW CONFIG: freq=2427
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2432
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 5
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2432
phy0: HW CONFIG: freq=2437
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 6
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2437
phy0: HW CONFIG: freq=2442
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 7
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2442
phy0: HW CONFIG: freq=2447
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 8
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2447
phy0: HW CONFIG: freq=2452
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 9
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2452
phy0: HW CONFIG: freq=2457
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 10
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2457
phy0: HW CONFIG: freq=2462
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 11
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2462
phy0: HW CONFIG: freq=2467
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 12
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2467
phy0: HW CONFIG: freq=2472
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 13
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2472
phy0: HW CONFIG: freq=2484
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 14
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2484
phy0: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 33:33:00:00:00:01
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy1: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 33:33:00:00:00:01
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy0: HW CONFIG: freq=2412
phy1: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2417
phy0: HW CONFIG: freq=2417
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 2
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2422
phy0: HW CONFIG: freq=2422
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 3
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2427
phy1: HW CONFIG: freq=2427
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 4
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2432
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 5
phy1: HW CONFIG: freq=2432
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy0: HW CONFIG: freq=2437
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 6
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2437
phy0: HW CONFIG: freq=2442
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 7
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2442
phy0: HW CONFIG: freq=2447
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 8
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2447
phy0: HW CONFIG: freq=2452
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 9
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2452
phy0: HW CONFIG: freq=2457
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 10
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2457
phy0: HW CONFIG: freq=2462
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 11
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2462
phy0: HW CONFIG: freq=2467
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 12
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2467
phy0: HW CONFIG: freq=2472
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 13
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2472
phy0: HW CONFIG: freq=2484
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 14
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
phy1: HW CONFIG: freq=2484
phy0: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_rf_set_channel() channel: 1
zd1211rw 2-4:1.0: patch_cck_gain() patching value 1a
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 33:33:00:00:00:01
zd1211rw 2-4:1.0: zd_op_configure_filter() mc addr 01:00:5e:00:00:01
phy1: HW CONFIG: freq=2412
zd1211rw 2-4:1.0: zd_write_mac_addr() set NULL mac
zd1211rw 2-4:1.0: housekeeping_disable()
zd1211rw 2-4:1.0: zd_usb_disable_int() urb f68a5280 killed
b43-phy2: Broadcom 4318 WLAN found
b43-phy2 debug: Found PHY: Analog 3, Type 2, Revision 7
b43-phy2 debug: Found Radio: Manuf 0x17F, Version 0x2050, Revision 8
phy2: Selected rate control algorithm 'pid'
Broadcom 43xx driver loaded [ Features: PMLR, Firmware-ID: FW13 ]
udev: renamed network interface wlan2 to wlan3
input: b43-phy2 as /class/input/input6
firmware: requesting b43/ucode5.fw
firmware: requesting b43/pcm5.fw
firmware: requesting b43/b0g0initvals5.fw
firmware: requesting b43/b0g0bsinitvals5.fw
b43-phy2: Loading firmware version 410.2160 (2007-05-26 15:32:10)
b43-phy2 debug: Chip initialized
b43-phy2 debug: 32-bit DMA initialized
Registered led device: b43-phy2::tx
Registered led device: b43-phy2::rx
Registered led device: b43-phy2::assoc
Registered led device: b43-phy2::radio
b43-phy2 debug: Wireless interface started
b43-phy2 debug: Adding Interface type 2
phy2: HW CONFIG: freq=2412
ADDRCONF(NETDEV_UP): wlan3: link is not ready
b43-phy2 debug: Using hardware based encryption for keyidx: 0, mac: ff:ff:ff:ff:ff:ff
phy2: HW CONFIG: freq=2412
phy2: HW CONFIG: freq=2417
phy2: HW CONFIG: freq=2422
phy2: HW CONFIG: freq=2427
phy2: HW CONFIG: freq=2432
phy2: HW CONFIG: freq=2437
phy2: HW CONFIG: freq=2442
phy2: HW CONFIG: freq=2447
phy2: HW CONFIG: freq=2452
phy2: HW CONFIG: freq=2457
phy2: HW CONFIG: freq=2462
phy2: HW CONFIG: freq=2467
phy2: HW CONFIG: freq=2472
phy2: HW CONFIG: freq=2484
phy2: HW CONFIG: freq=2412
phy2: HW CONFIG: freq=2412
wlan3: Initial auth_alg=0
wlan3: authenticate with AP 00:13:49:ed:62:55
wlan3: RX authentication from 00:13:49:ed:62:55 (alg=0 transaction=2 status=0)
wlan3: authenticated
wlan3: associate with AP 00:13:49:ed:62:55
wlan3: RX AssocResp from 00:13:49:ed:62:55 (capab=0x411 status=0 aid=31)
wlan3: associated
phy2: Allocated STA 00:13:49:ed:62:55
phy2: Inserted STA 00:13:49:ed:62:55
ADDRCONF(NETDEV_CHANGE): wlan3: link becomes ready
BUG: unable to handle kernel NULL pointer dereference at 00000004
IP: [<f8dd3a99>] :b43:b43_generate_txhdr+0x6a9/0x790
*pdpt = 00000000360f0001 *pde = 0000000000000000
Oops: 0000 [#1] SMP
Modules linked in: rfkill_input b43 ocfs2_dlmfs ocfs2_dlm ocfs2_nodemanager configfs ipv6 microcode af_packet snd_pcm_oss binfmt_misc snd_mixer_oss snd_seq snd_seq_device fuse ext3 jbd mbcache loop dm_mod joydev rt73usb crc_itu_t arc4 rt2x00usb snd_hda_intel rt2x00lib ecb crypto_blkcipher ssb rfkill snd_aw2 pcmcia usbhid forcedeth snd_pcm ohci1394 pcmcia_core zd1211rw sr_mod led_class hid sata_nv ieee1394 snd_hwdep snd_timer firmware_class i2c_nforce2 cdrom isp1760 button input_polldev snd ff_memless i2c_core snd_page_alloc mac80211 soundcore sg cfg80211 ehci_hcd ohci_hcd sd_mod usbcore edd reiserfs fan pata_amd libata scsi_mod dock thermal processor [last unloaded: speedstep_lib]

Pid: 0, comm: swapper Not tainted (2.6.26-rc4-wl-wireless6 #8)
EIP: 0060:[<f8dd3a99>] EFLAGS: 00010046 CPU: 0
EIP is at b43_generate_txhdr+0x6a9/0x790 [b43]
EAX: 00000000 EBX: 00000000 ECX: f6103000 EDX: f75ed4a0
ESI: 00000002 EDI: 00000074 EBP: c0461a58 ESP: c04619d0
DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process swapper (pid: 0, ti=c0460000 task=c0431340 task.ti=c0460000)
Stack: 00000000 00000000 00000000 f78aee00 00000040 00004108 40201a0c f61c302c
f6880dc0 f6103000 00000101 00000002 00000002 00000d80 02984108 00000074
f88a2bc7 3798e6c0 00000000 f798e6c0 f798e060 f798e6c0 00000200 00000000
Call Trace:
[<f88a2bc7>] ? qh_urb_transaction+0xe7/0x3e0 [ehci_hcd]
[<f8dd83dc>] ? b43_dma_tx+0x19c/0x800 [b43]
[<f8dc4d37>] ? b43_op_tx+0x57/0xc0 [b43]
[<f89c3ed6>] ? __ieee80211_tx+0x16/0x120 [mac80211]
[<f89c4b72>] ? ieee80211_master_start_xmit+0x262/0x310 [mac80211]
[<c02d4cbb>] ? dev_hard_start_xmit+0x24b/0x2e0
[<c02e6792>] ? __qdisc_run+0x62/0x1e0
[<c02d5177>] ? dev_queue_xmit+0x307/0x380
[<f89c45e0>] ? ieee80211_subif_start_xmit+0x3e0/0x710 [mac80211]
[<c0123da4>] ? __enqueue_entity+0xd4/0x100
[<c011f3c7>] ? enqueue_task+0x57/0x70
[<c01251b4>] ? try_to_wake_up+0x74/0x1f0
[<c02d4cbb>] ? dev_hard_start_xmit+0x24b/0x2e0
[<c012533b>] ? default_wake_function+0xb/0x10
[<c014366b>] ? autoremove_wake_function+0x1b/0x50
[<c02e6792>] ? __qdisc_run+0x62/0x1e0
[<c02d5177>] ? dev_queue_xmit+0x307/0x380
[<c02dac41>] ? neigh_resolve_output+0xf1/0x2a0
[<f8d6fdcc>] ? ipv6_chk_mcast_addr+0xbc/0x180 [ipv6]
[<f8d55ca1>] ? ip6_output_finish+0x91/0xe0 [ipv6]
[<f8d57e68>] ? ip6_output2+0x138/0x220 [ipv6]
[<f8d5841d>] ? ip6_output+0x4cd/0xb30 [ipv6]
[<c0138be5>] ? lock_timer_base+0x25/0x50
[<c0138d91>] ? __mod_timer+0xa1/0xe0
[<c0138e87>] ? mod_timer+0x37/0x80
[<f8d641db>] ? fib6_force_start_gc+0x2b/0x30 [ipv6]
[<f8d70d90>] ? mld_sendpack+0x2d0/0x330 [ipv6]
[<f8d71a99>] ? mld_ifc_timer_expire+0x259/0x2f0 [ipv6]
[<c014cf7b>] ? clockevents_program_event+0x9b/0x150
[<c013854a>] ? run_timer_softirq+0x12a/0x1f0
[<f8d71840>] ? mld_ifc_timer_expire+0x0/0x2f0 [ipv6]
[<f8d71840>] ? mld_ifc_timer_expire+0x0/0x2f0 [ipv6]
[<c0134232>] ? __do_softirq+0x92/0x120
[<c013431d>] ? do_softirq+0x5d/0x60
[<c01344b5>] ? irq_exit+0x75/0xa0
[<c0113588>] ? smp_apic_timer_interrupt+0x58/0x90
[<c0109ca0>] ? mwait_idle+0x0/0x50
[<c0104968>] ? apic_timer_interrupt+0x28/0x30
[<c0109ca0>] ? mwait_idle+0x0/0x50
[<c0109cd2>] ? mwait_idle+0x32/0x50
[<c0102d6b>] ? cpu_idle+0x6b/0xf0
[<c033e09e>] ? rest_init+0x4e/0x60
=======================
Code: 26 00 c7 45 d8 0c 00 00 00 90 e9 7b fc ff ff 8d 76 00 0f b6 4d af c7 45 d8 02 00 00 00 89 4d f0 eb ae 8b 55 0c 8b 4d 9c 8b 42 0c <0f> b6 58 04 3a 99 c2 03 00 00 0f 83 b9 00 00 00 8b 7d 9c 0f b6
EIP: [<f8dd3a99>] b43_generate_txhdr+0x6a9/0x790 [b43] SS:ESP 0068:c04619d0