current panics when Netgear WG511T ejected

From: Tom Uffner <tom_at_uffner.com>
Date: Mon, 26 Mar 2007 04:50:03 -0400
I recently installed a more current -CURRENT on my laptop, and discovered
that it panics when I eject my wireless network card. the laptop is a Sony
Vaio PCG-XG9. the Wireless card is a Netgear WG511T (Atheros 5212, cardbus,
802.11 b/g)

It does not seem to matter if the card was installed when the system boots
or was inserted later, i get the same panic either way if i eject it.
other than not being able to remove it, the card works fine.

FreeBSD kali.uffner.com 7.0-CURRENT FreeBSD 7.0-CURRENT #18: Thu Mar 22 
20:29:36 EDT 2007     tom_at_kali.uffner.com:/usr/obj/usr/src/sys/KALI  i386

Id Refs Address    Size     Name
  1   26 0xc0400000 38d574   kernel
  2    1 0xc078e000 1267c    if_ath.ko
  3    2 0xc07a1000 44a4     ath_rate.ko
  4    4 0xc07a6000 23b78    wlan.ko
  5    3 0xc07ca000 2ec38    ath_hal.ko
  6    1 0xc07f9000 d7d8     if_ed.ko
  7    2 0xc0807000 43230    sound.ko
  8    1 0xc084b000 cc18     snd_ds1.ko
  9    1 0xc0858000 c2e4     random.ko
10    1 0xc0865000 2f50     wlan_wep.ko
11    1 0xc0868000 9a94     sio.ko
12    2 0xc0872000 47b0     ucom.ko
13    1 0xc0877000 4c4c     uplcom.ko
14    1 0xc087c000 682f4    acpi.ko
15    1 0xc1978000 2000     green_saver.ko

# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.329 2001/11/06 16:15:47 obrien Exp $

machine		i386
cpu		I686_CPU
ident		KALI
maxusers	0

makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols

options		SCHED_4BSD
options		PREEMPTION		# Enable kernel thread preemption
options		INET			#InterNETworking
options		FFS			#Berkeley Fast Filesystem
options		SOFTUPDATES		#Enable FFS soft updates support
options		UFS_ACL			#Support for access control lists
options		UFS_DIRHASH		#Improve performance on big directories
options		MD_ROOT			#MD is a potential root device
#options	MSDOSFS			#MSDOS Filesystem
options		CD9660			#ISO 9660 Filesystem
options		PROCFS			# Process filesystem (requires PSEUDOFS)
options		PSEUDOFS		# Pseudo-filesystem framework
options		GEOM_PART_GPT		# GUID Partition Tables.
options		GEOM_LABEL		# Provides labelization
options		COMPAT_43TTY		# BSD 4.3 TTY compat [KEEP THIS!]
options		COMPAT_FREEBSD6		#Compatible with FreeBSD4
options		KTRACE			#ktrace(1) support
options		SYSVSHM			#SYSV-style shared memory
options		SYSVMSG			#SYSV-style message queues
options		SYSVSEM			#SYSV-style semaphores
options		_KPOSIX_PRIORITY_SCHEDULING
options		KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options		ADAPTIVE_GIANT		# Giant mutex is adaptive.
options		STOP_NMI		# Stop CPUS using NMI instead of IPI

# Debugging for use in -current
options		KDB			#Enable the kernel debugger
options		DDB			#Enable the kernel debugger

#device		isa
device		eisa
device		pci

# Floppy drives
device		fdc

# ATA and ATAPI devices
device		ata
device		atadisk			# ATA disk drives
device		atapicd			# ATAPI CDROM drives
options		ATA_STATIC_ID		#Static device numbering

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc		# At keyboard controller
device		atkbd		# at keyboard
device		psm		# psm mouse

device		kbdmux		# keyboard multiplexer

device		vga		# VGA screen

# splash screen/screen saver
device		splash

# syscons is the default console driver, resembling an SCO console
device		sc

device		agp		# support several AGP chipsets

# Power management support (see NOTES for more options)
device		apm
# Add suspend/resume support for the i8254.
device		pmtimer

# PCCARD (PCMCIA) support
device		cbb		# cardbus (yenta) bridge
device		pccard		# PC Card (16-bit) bus
device		cardbus		# CardBus (32-bit) bus

# Serial (COM) ports
#device		sio		# 8250, 16[45]50 based serial ports

# Parallel port
device		ppc
device		ppbus		# Parallel port bus (required)
#device		lpt		# Printer
#device		plip		# TCP/IP over parallel
#device		ppi		# Parallel port interface device

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device		miibus		# MII bus support
#device		ed		# NE[12]000, SMC Ultra, 3c503, DS8390 cards

# Pseudo devices - the number indicates how many units to allocate.
device		loop		# Network loopback
device		ether		# Ethernet support
device		pty		# Pseudo-ttys (telnet etc)
device		md		# Memory "disks"
device		firmware	# firmware assist module

# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
device		bpf		# Berkeley packet filter

# USB support
device		uhci		# UHCI PCI->USB interface
device		usb		# USB Bus (required)
device		ugen		# Generic
#device		uplcom		# USB support for Prolific PL-2303/2303X/2303HX
#device		ucom		# USB tty support
device		uhid		# "Human Interface Devices"
device		ukbd		# Keyboard
device		ulpt		# Printer
device		ums		# Mouse

options		SC_HISTORY_SIZE=800	# number of history buffer lines
options		SC_NORM_ATTR="(FG_GREEN|BG_BLACK)"

device		spic


Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-CURRENT #18: Thu Mar 22 20:29:36 EDT 2007
    tom_at_kali.uffner.com:/usr/obj/usr/src/sys/KALI
Preloaded elf kernel "/boot/kernel/kernel" at 0xc08e6000.
Preloaded elf module "/boot/kernel/if_ath.ko" at 0xc08e6160.
Preloaded elf module "/boot/kernel/ath_rate.ko" at 0xc08e620c.
Preloaded elf module "/boot/kernel/wlan.ko" at 0xc08e62bc.
Preloaded elf module "/boot/kernel/ath_hal.ko" at 0xc08e6368.
Preloaded elf module "/boot/kernel/if_ed.ko" at 0xc08e6414.
Preloaded elf module "/boot/kernel/sound.ko" at 0xc08e64c0.
Preloaded elf module "/boot/kernel/snd_ds1.ko" at 0xc08e656c.
Preloaded elf module "/boot/kernel/random.ko" at 0xc08e6618.
Preloaded elf module "/boot/kernel/wlan_wep.ko" at 0xc08e66c4.
Preloaded elf module "/boot/kernel/sio.ko" at 0xc08e6774.
Preloaded elf module "/boot/kernel/ucom.ko" at 0xc08e681c.
Preloaded elf module "/boot/kernel/uplcom.ko" at 0xc08e68c8.
Preloaded elf module "/boot/kernel/acpi.ko" at 0xc08e6974.
Calibrating clock(s) ... i8254 clock: 1193194 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter "i8254" frequency 1193182 Hz quality 0
Calibrating TSC clock ... TSC clock: 496310398 Hz
CPU: Intel Pentium III (496.31-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x681  Stepping = 1
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>

Instruction TLB: 4 KB pages, 4-way set associative, 32 entries
Instruction TLB: 4 MB pages, fully associative, 2 entries
Data TLB: 4 KB pages, 4-way set associative, 64 entries
2nd-level cache: 256 KB, 8-way set associative, 32 byte line size
1st-level instruction cache: 16 KB, 4-way set associative, 32 byte line size
Data TLB: 4 MB Pages, 4-way set associative, 8 entries
1st-level data cache: 16 KB, 4-way set associative, 32 byte line size
real memory  = 134152192 (127 MB)
Physical memory chunk(s):
0x0000000000001000 - 0x000000000009efff, 647168 bytes (158 pages)
0x0000000000100000 - 0x00000000003fffff, 3145728 bytes (768 pages)
0x0000000000c25000 - 0x0000000007d6efff, 118792192 bytes (29002 pages)
avail memory = 121634816 (116 MB)
bios32: Found BIOS32 Service Directory header at 0xc00f7100
bios32: Entry = 0xfd880 (c00fd880)  Rev = 0  Len = 1
pcibios: PCI BIOS entry at 0xfd880+0x11e
pnpbios: Found PnP BIOS data at 0xc00f7130
pnpbios: Entry = f0000:b329  Rev = 1.0
pnpbios: Event flag at 4b4
Other BIOS signatures found:
wlan: <802.11 Link Layer>
feeder_register: snd_unit=0 snd_maxautovchans=4 latency=5 feeder_buffersize=16384 feeder_rate_min=1 feeder_rate_max=2016000 feeder_rate_round=25
ath_rate: version 1.2 <SampleRate bit-rate selection algorithm>
null: <null device, zero device>
kbd: new array size 4
kbd1 at kbdmux0
mem: <memory>
Pentium Pro MTRR support enabled
random: <entropy source, Software, Yarrow>
io: <I/O>
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
npx0: INT 16 interface
acpi0: <SONY A0> on motherboard
acpi0: [MPSAFE]
acpi0: [ITHREAD]
pci_open(1):	mode 1 addr port (0x0cf8) is 0x80003904
pci_open(1a):	mode1res=0x80000000 (0x80000000)
pci_cfgcheck:	device 0 [class=060000] [hdr=00] is there (id=71908086)
pcibios: BIOS version 2.10
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 16 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 2
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 12 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 12 func 1
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 0
acpi0: wakeup code va 0xc3d55000 pa 0x9e000
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 0 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 3
acpi0: reservation of 100000, 7f00000 (3) failed
acpi0: reservation of 0, a0000 (3) failed
ACPI timer: 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 -> 0
Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x8008-0x800b on acpi0
acpi_ec0: <Embedded Controller: GPE 0x9> port 0x62,0x66 on acpi0
pci_link0:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link1:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link2:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link3:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
cpu0: <ACPI CPU> on acpi0
cpu0: switching to generic Cx mode
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_throttle0: P_CNT from P_BLK 0x8010
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
ACPI: Found matching pin for 0.7.INTD at func 2: 9
ACPI: Found matching pin for 0.8.INTA at func 0: 9
ACPI: Found matching pin for 0.9.INTA at func 0: 9
ACPI: Found matching pin for 0.10.INTA at func 0: 9
ACPI: Found matching pin for 0.12.INTA at func 0: 255
ACPI: Found matching pin for 0.12.INTB at func 1: 255
pci0: <ACPI PCI bus> on pcib0
pci0: physical bus=0
found->	vendor=0x8086, dev=0x7190, revid=0x03
	bus=0, slot=0, func=0
	class=06-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0106, statreg=0x2210, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[10]: type 3, range 32, base 0x40000000, size 24, enabled
found->	vendor=0x8086, dev=0x7191, revid=0x03
	bus=0, slot=1, func=0
	class=06-04-00, hdrtype=0x01, mfdev=0
	cmdreg=0x001f, statreg=0x0220, cachelnsz=0 (dwords)
	lattimer=0x80 (3840 ns), mingnt=0x8c (35000 ns), maxlat=0x00 (0 ns)
found->	vendor=0x8086, dev=0x7110, revid=0x02
	bus=0, slot=7, func=0
	class=06-01-00, hdrtype=0x00, mfdev=1
	cmdreg=0x000f, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
found->	vendor=0x8086, dev=0x7111, revid=0x01
	bus=0, slot=7, func=1
	class=01-01-80, hdrtype=0x00, mfdev=0
	cmdreg=0x0005, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[20]: type 4, range 32, base 0xfc90, size  4, enabled
found->	vendor=0x8086, dev=0x7112, revid=0x01
	bus=0, slot=7, func=2
	class=0c-03-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0001, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=d, irq=9
	map[20]: type 4, range 32, base 0xfca0, size  5, enabled
pcib0: matched entry for 0.7.INTD (src \\_SB_.LNKD:0)
pcib0: slot 7 INTD routed to irq 9 via \\_SB_.LNKD
found->	vendor=0x8086, dev=0x7113, revid=0x03
	bus=0, slot=7, func=3
	class=06-80-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0003, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[90]: type 4, range 32, base 0x1040, size  4, enabled
found->	vendor=0x104d, dev=0x8039, revid=0x02
	bus=0, slot=8, func=0
	class=0c-00-10, hdrtype=0x00, mfdev=0
	cmdreg=0x0002, statreg=0x0210, cachelnsz=8 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x04 (1000 ns), maxlat=0x04 (1000 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D3  current D0
	map[10]: type 1, range 32, base 0xfedf7000, size 11, enabled
	map[14]: type 1, range 32, base 0xfedf7c00, size  9, enabled
pcib0: matched entry for 0.8.INTA (src \\_SB_.LNKD:0)
pcib0: slot 8 INTA routed to irq 9 via \\_SB_.LNKD
found->	vendor=0x1073, dev=0x0010, revid=0x02
	bus=0, slot=9, func=0
	class=04-01-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0007, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x05 (1250 ns), maxlat=0x19 (6250 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D2 D3  current D0
	map[10]: type 1, range 32, base 0xfedf8000, size 15, enabled
	map[14]: type 4, range 32, base 0xfcc0, size  6, enabled
	map[18]: type 4, range 32, base 0xfc8c, size  2, enabled
pcib0: matched entry for 0.9.INTA (src \\_SB_.LNKC:0)
pcib0: slot 9 INTA routed to irq 9 via \\_SB_.LNKC
found->	vendor=0x127a, dev=0x2005, revid=0x01
	bus=0, slot=10, func=0
	class=07-80-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0003, statreg=0x0290, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=a, irq=9
	powerspec 2  supports D0 D3  current D0
	map[10]: type 1, range 32, base 0xfede0000, size 16, enabled
	map[14]: type 4, range 32, base 0xfc78, size  3, enabled
pcib0: matched entry for 0.10.INTA (src \\_SB_.LNKB:0)
pcib0: slot 10 INTA routed to irq 9 via \\_SB_.LNKB
found->	vendor=0x1180, dev=0x0478, revid=0x80
	bus=0, slot=12, func=0
	class=06-07-00, hdrtype=0x02, mfdev=1
	cmdreg=0x0000, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=a, irq=255
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 1, range 32, base 0, size 12, memory disabled
found->	vendor=0x1180, dev=0x0478, revid=0x80
	bus=0, slot=12, func=1
	class=06-07-00, hdrtype=0x02, mfdev=1
	cmdreg=0x0000, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=b, irq=255
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 1, range 32, base 0, size 12, memory disabled
agp0: <Intel 82443BX (440 BX) host to PCI bridge> on hostb0
hostb0: Reserved 0x1000000 bytes for rid 0x10 type 3 at 0x40000000
agp0: allocating GATT for aperture of size 16M
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pcib1:   secondary bus     1
pcib1:   subordinate bus   1
pcib1:   I/O decode        0xf000-0xfff
pcib1:   memory decode     0xfe800000-0xfecfffff
pcib1:   prefetched decode 0xfd000000-0xfdffffff
pcib1: could not get PCI interrupt routing table for \\_SB_.PCI0.VID0 - AE_NOT_FOUND
pci1: <ACPI PCI bus> on pcib1
pci1: physical bus=1
found->	vendor=0x10c8, dev=0x0005, revid=0x20
	bus=1, slot=0, func=0
	class=03-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0207, statreg=0x0290, cachelnsz=0 (dwords)
	lattimer=0x80 (3840 ns), mingnt=0x10 (4000 ns), maxlat=0xff (63750 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 3, range 32, base 0xfd000000, size 24, enabled
pcib1: requested memory range 0xfd000000-0xfdffffff: good
	map[14]: type 1, range 32, base 0xfe800000, size 22, enabled
pcib1: requested memory range 0xfe800000-0xfebfffff: good
	map[18]: type 1, range 32, base 0xfec00000, size 20, enabled
pcib1: requested memory range 0xfec00000-0xfecfffff: good
pcib0: matched entry for 0.1.INTA (src \\_SB_.LNKA:0)
pcib0: slot 1 INTA routed to irq 9 via \\_SB_.LNKA
pcib1: slot 0 INTA is routed to irq 9
vgapci0: <VGA-compatible display> mem 0xfd000000-0xfdffffff,0xfe800000-0xfebfffff,0xfec00000-0xfecfffff irq 9 at device 0.0 on pci1
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 UDMA33 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc90-0xfc9f at device 7.1 on pci0
atapci0: Reserved 0x10 bytes for rid 0x20 type 4 at 0xfc90
ata0: <ATA channel 0> on atapci0
atapci0: Reserved 0x8 bytes for rid 0x10 type 4 at 0x1f0
atapci0: Reserved 0x1 bytes for rid 0x14 type 4 at 0x3f6
ata0: reset tp1 mask=03 ostat0=50 ostat1=00
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x50 err=0x01 lsb=0x00 msb=0x00
ata0: stat1=0x00 err=0x01 lsb=0x00 msb=0x00
ata0: reset tp2 stat0=50 stat1=00 devices=0x1<ATA_MASTER>
ata0: [MPSAFE]
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
atapci0: Reserved 0x8 bytes for rid 0x18 type 4 at 0x170
atapci0: Reserved 0x1 bytes for rid 0x1c type 4 at 0x376
ata1: reset tp1 mask=03 ostat0=51 ostat1=00
ata1: stat0=0x00 err=0x01 lsb=0x14 msb=0xeb
ata1: stat1=0x00 err=0x04 lsb=0x14 msb=0xeb
ata1: reset tp2 stat0=00 stat1=00 devices=0x4<ATAPI_MASTER>
ata1: [MPSAFE]
ata1: [ITHREAD]
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xfca0-0xfcbf irq 9 at device 7.2 on pci0
uhci0: Reserved 0x20 bytes for rid 0x20 type 4 at 0xfca0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
pci0: <bridge> at device 7.3 (no driver attached)
pci0: <serial bus, FireWire> at device 8.0 (no driver attached)
pcm0: <Yamaha DS-1E (YMF744)> port 0xfcc0-0xfcff,0xfc8c-0xfc8f mem 0xfedf8000-0xfedfffff irq 9 at device 9.0 on pci0
pcm0: Reserved 0x8000 bytes for rid 0x10 type 3 at 0xfedf8000
ds1: setmap (7c57000, 3de4), nseg=1, error=0
pcm0: <Asahi Kasei AK4543 AC97 Codec (id = 0x414b4d02)>
pcm0: Codec features headphone, 18 bit DAC, 18 bit ADC, 5 bit master volume, AKM 3D Audio
pcm0: ac97 codec dac ready count: 0
pcm0: Mixer "vol":
pcm0: Mixer "pcm":
pcm0: Mixer "line":
pcm0: Mixer "mic":
pcm0: Mixer "cd":
pcm0: Mixer "rec":
pcm0: Mixer "igain":
pcm0: [MPSAFE]
pcm0: [ITHREAD]
pcm0: sndbuf_setmap 19d000, 1000; 0xc1769000 -> 19d000
pcm0: sndbuf_setmap 1a1000, 1000; 0xc176d000 -> 1a1000
pcm0: sndbuf_setmap 1b0000, 1000; 0xc177e000 -> 1b0000
pcm0: sndbuf_setmap 1ae000, 1000; 0xc177c000 -> 1ae000
pcm0: sndbuf_setmap 1ac000, 1000; 0xc177a000 -> 1ac000
pcm0: sndbuf_setmap 1aa000, 1000; 0xc1778000 -> 1aa000
want format 268435472
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
setspeed, channel pcm0:play:0:dsp0.p0
want speed 4000, try speed 4000, got speed 4000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
setspeed, channel pcm0:play:0:dsp0.p0
want speed 4000, try speed 4000, got speed 4000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
setspeed, channel pcm0:play:0:dsp0.p0
want speed 48000, try speed 48000, got speed 48000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
pci0: <simple comms> at device 10.0 (no driver attached)
cbb0: <RF5C478 PCI-CardBus Bridge> at device 12.0 on pci0
cbb0: Lazy allocation of 0x1000 bytes rid 0x10 type 3 at 0x80000000
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pcib0: matched entry for 0.12.INTA (src \\_SB_.LNKA:0)
pcib0: slot 12 INTA routed to irq 9 via \\_SB_.LNKA
cbb0: [MPSAFE]
cbb0: [ITHREAD]
cbb0: PCI Configuration space:
  0x00: 0x04781180 0x02100007 0x06070080 0x00822000 
  0x10: 0x80000000 0x020000dc 0x20030200 0xfffff000 
  0x20: 0x00000000 0xfffff000 0x00000000 0xfffffffc 
  0x30: 0x00000000 0xfffffffc 0x00000000 0x04000109 
  0x40: 0x804f104d 0x00000001 0x00000000 0x00000000 
  0x50: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x60: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x70: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x80: 0x00000001 0x00000000 0x04630463 0x00000000 
  0x90: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xa0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xb0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xc0: 0x804f104d 0x00000000 0x00000000 0x00000000 
  0xd0: 0x00000000 0x00000000 0x00000000 0xfe190001 
  0xe0: 0x24c04000 0x00000000 0x00000000 0x00000000 
  0xf0: 0x00000000 0x00000000 0x00000000 0x00000000 
cbb1: <RF5C478 PCI-CardBus Bridge> at device 12.1 on pci0
cbb1: Lazy allocation of 0x1000 bytes rid 0x10 type 3 at 0x80001000
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pcib0: matched entry for 0.12.INTB (src \\_SB_.LNKB:0)
pcib0: slot 12 INTB routed to irq 9 via \\_SB_.LNKB
cbb1: [MPSAFE]
cbb1: [ITHREAD]
cbb1: PCI Configuration space:
  0x00: 0x04781180 0x02100007 0x06070080 0x00822000 
  0x10: 0x80001000 0x020000dc 0x20050400 0xfffff000 
  0x20: 0x00000000 0xfffff000 0x00000000 0xfffffffc 
  0x30: 0x00000000 0xfffffffc 0x00000000 0x04000209 
  0x40: 0x804f104d 0x00000001 0x00000000 0x00000000 
  0x50: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x60: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x70: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x80: 0x00000001 0x00000000 0x04630463 0x00000000 
  0x90: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xa0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xb0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xc0: 0x804f104d 0x00000000 0x00000000 0x00000000 
  0xd0: 0x00000000 0x00000000 0x00000000 0xfe190001 
  0xe0: 0x24c04000 0x00000000 0x00000000 0x00000000 
  0xf0: 0x00000000 0x00000000 0x00000000 0x00000000 
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
atkbd: the current kbd controller command byte 0047
atkbd: keyboard ID 0x41ab (2)
kbd0 at atkbd0
kbd0: atkbd0, AT 101/102 (2), config:0x0, flags:0x3d0000
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
psm0: unable to allocate IRQ
psmcpnp0: <PS/2 mouse port> irq 12 on acpi0
psm0: current command byte:0047
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model Generic PS/2 mouse, device ID 0-00, 3 buttons
psm0: config:00000000, flags:00000008, packet size:3
psm0: syncmask:c0, syncbits:00
sio0: irq maps: 0x1 0x11 0x1 0x1
sio0: irq maps: 0x1 0x11 0x1 0x1
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
sio0: [FILTER]
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: ic_type 90 part_id 73
fdc0: [FILTER]
battery0: <ACPI Control Method Battery> on acpi0
battery1: <ACPI Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
pmtimer: pmtimer0 already exists; skipping it
pnp_identify: Trying Read_Port at 203
pnp_identify: Trying Read_Port at 243
pnp_identify: Trying Read_Port at 283
pnp_identify: Trying Read_Port at 2c3
pnp_identify: Trying Read_Port at 303
pnp_identify: Trying Read_Port at 343
pnp_identify: Trying Read_Port at 383
pnp_identify: Trying Read_Port at 3c3
PNP Identify complete
sc: sc0 already exists; skipping it
isa_probe_children: disabling PnP devices
isa_probe_children: probing non-PnP devices
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcbfff pnpid ORM0000 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sc0: fb0, kbd1, terminal emulator: sc (syscons terminal)
spic0: device model type = 1
spic0: <Sony Programmable I/O Controller> at port 0x10a0-0x10a4 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
isa_probe_children: probing PnP devices
Device configuration finished.
procfs registered
Timecounter "TSC" frequency 496310398 Hz quality 800
Timecounters tick every 1.000 msec
lo0: bpf attached
ata0-master: pio=PIO4 wdma=WDMA2 udma=UDMA66 cable=80 wire
ad0: setting PIO4 on PIIX4 chip
ad0: setting UDMA33 on PIIX4 chip
ad0: 17301MB <IBM DARA-218000 GL6OA50A> at ata0-master UDMA33
ad0: 35433216 sectors [37495C/15H/63S] 16 sectors/interrupt 1 depth queue
ata1-master: pio=PIO4 wdma=WDMA2 udma=UDMA33 cable=40 wire
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
GEOM: new disk ad0
battery0: battery initialization start
battery1: battery initialization start
acpi_acad0: acline initialization start
battery0: battery initialization done, tried 1 times
acpi_acad0: On Line
acpi_acad0: acline initialization done, tried 1 times
GEOM_LABEL: Label for provider ad0s1 is msdosfs/NO NAME.
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
Trying to mount root from ufs:/dev/ad0s2a
start_init: trying /sbin/init
splash: image decoder found: green_saver
battery1: battery initialization failed, giving up
cbb0: Opening memory:
cbb0: Normal: 0x88000000-0x8800ffff
unknown: Lazy allocation of 0x10000 bytes rid 0x10 type 3 at 0x88000000
cbb0: Opening memory:
	map[10]: type 1, range 32, base 0x88000000, size 16, enabled
found->	vendor=0x168c, dev=0x0013, revid=0x01
	bus=2, slot=0, func=0
	class=02-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0002, statreg=0x0290, cachelnsz=8 (dwords)
	lattimer=0xa8 (5040 ns), mingnt=0x0a (2500 ns), maxlat=0x1c (7000 ns)
	intpin=a, irq=255
	powerspec 2  supports D0 D3  current D0
ath0: <Atheros 5212> mem 0x88000000-0x8800ffff at device 0.0 on cardbus0
ath0: Reserved 0x10000 bytes for rid 0x10 type 3 at 0x88000000
cbb0: Opening memory:
cbb0: Normal: 0x88000000-0x8800ffff
ath0: [MPSAFE]
ath0: [ITHREAD]
ath0: hal channel 2412/a0 -> 1
ath0: hal channel 2412/c0 -> 1
ath0: hal channel 2417/a0 -> 2
ath0: hal channel 2417/c0 -> 2
ath0: hal channel 2422/a0 -> 3
ath0: hal channel 2422/c0 -> 3
ath0: hal channel 2427/a0 -> 4
ath0: hal channel 2427/c0 -> 4
ath0: hal channel 2432/a0 -> 5
ath0: hal channel 2432/c0 -> 5
ath0: hal channel 2437/a0 -> 6
ath0: hal channel 2437/c0 -> 6
ath0: hal channel 2437/d0 -> 6
ath0: hal channel 2442/a0 -> 7
ath0: hal channel 2442/c0 -> 7
ath0: hal channel 2447/a0 -> 8
ath0: hal channel 2447/c0 -> 8
ath0: hal channel 2452/a0 -> 9
ath0: hal channel 2452/c0 -> 9
ath0: hal channel 2457/a0 -> 10
ath0: hal channel 2457/c0 -> 10
ath0: hal channel 2462/a0 -> 11
ath0: hal channel 2462/c0 -> 11
ath0: using obsoleted if_watchdog interface
ath0: bpf attached
ath0: Ethernet address: 00:0f:b5:22:be:69
ath0: bpf attached
ath0: bpf attached
ath0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
ath0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
ath0: mac 5.9 phy 4.3 radio 4.6
ath0: Use hw queue 1 for WME_AC_BE traffic
ath0: Use hw queue 0 for WME_AC_BK traffic
ath0: Use hw queue 2 for WME_AC_VI traffic
ath0: Use hw queue 3 for WME_AC_VO traffic
ath0: Use hw queue 8 for CAB traffic
ath0: Use hw queue 9 for beacons
ath0: link state changed to UP
ath0: link state changed to DOWN


Fatal trap 12: page fault while in kernel mode
fault virtual address	= 0x50
fault code		= supervisor read, page not present
instruction pointer	= 0x20:0xc05ab9b9
stack pointer	        = 0x28:0xc7b20b5c
frame pointer	        = 0x28:0xc7b20b9c
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 25 (cbb0 event thread)
panic: from debugger
Uptime: 4m5s
Physical memory: 119 MB
Dumping 24 MB: 9
Dump complete
Automatic reboot in 15 seconds - press a key on the console to abort
Rebooting...
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
	The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.0-CURRENT #18: Thu Mar 22 20:29:36 EDT 2007
    tom_at_kali.uffner.com:/usr/obj/usr/src/sys/KALI
Preloaded elf kernel "/boot/kernel/kernel" at 0xc08e6000.
Preloaded elf module "/boot/kernel/if_ath.ko" at 0xc08e6160.
Preloaded elf module "/boot/kernel/ath_rate.ko" at 0xc08e620c.
Preloaded elf module "/boot/kernel/wlan.ko" at 0xc08e62bc.
Preloaded elf module "/boot/kernel/ath_hal.ko" at 0xc08e6368.
Preloaded elf module "/boot/kernel/if_ed.ko" at 0xc08e6414.
Preloaded elf module "/boot/kernel/sound.ko" at 0xc08e64c0.
Preloaded elf module "/boot/kernel/snd_ds1.ko" at 0xc08e656c.
Preloaded elf module "/boot/kernel/random.ko" at 0xc08e6618.
Preloaded elf module "/boot/kernel/wlan_wep.ko" at 0xc08e66c4.
Preloaded elf module "/boot/kernel/sio.ko" at 0xc08e6774.
Preloaded elf module "/boot/kernel/ucom.ko" at 0xc08e681c.
Preloaded elf module "/boot/kernel/uplcom.ko" at 0xc08e68c8.
Preloaded elf module "/boot/kernel/acpi.ko" at 0xc08e6974.
Calibrating clock(s) ... i8254 clock: 1193193 Hz
CLK_USE_I8254_CALIBRATION not specified - using default frequency
Timecounter "i8254" frequency 1193182 Hz quality 0
Calibrating TSC clock ... TSC clock: 496310603 Hz
CPU: Intel Pentium III (496.31-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x681  Stepping = 1
  Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>

Instruction TLB: 4 KB pages, 4-way set associative, 32 entries
Instruction TLB: 4 MB pages, fully associative, 2 entries
Data TLB: 4 KB pages, 4-way set associative, 64 entries
2nd-level cache: 256 KB, 8-way set associative, 32 byte line size
1st-level instruction cache: 16 KB, 4-way set associative, 32 byte line size
Data TLB: 4 MB Pages, 4-way set associative, 8 entries
1st-level data cache: 16 KB, 4-way set associative, 32 byte line size
real memory  = 134152192 (127 MB)
Physical memory chunk(s):
0x0000000000001000 - 0x000000000009efff, 647168 bytes (158 pages)
0x0000000000100000 - 0x00000000003fffff, 3145728 bytes (768 pages)
0x0000000000c25000 - 0x0000000007d6efff, 118792192 bytes (29002 pages)
avail memory = 121634816 (116 MB)
bios32: Found BIOS32 Service Directory header at 0xc00f7100
bios32: Entry = 0xfd880 (c00fd880)  Rev = 0  Len = 1
pcibios: PCI BIOS entry at 0xfd880+0x11e
pnpbios: Found PnP BIOS data at 0xc00f7130
pnpbios: Entry = f0000:b329  Rev = 1.0
pnpbios: Event flag at 4b4
Other BIOS signatures found:
wlan: <802.11 Link Layer>
feeder_register: snd_unit=0 snd_maxautovchans=4 latency=5 feeder_buffersize=16384 feeder_rate_min=1 feeder_rate_max=2016000 feeder_rate_round=25
ath_rate: version 1.2 <SampleRate bit-rate selection algorithm>
null: <null device, zero device>
kbd: new array size 4
kbd1 at kbdmux0
mem: <memory>
Pentium Pro MTRR support enabled
random: <entropy source, Software, Yarrow>
io: <I/O>
ath_hal: 0.9.20.3 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413)
npx0: INT 16 interface
acpi0: <SONY A0> on motherboard
acpi0: [MPSAFE]
acpi0: [ITHREAD]
pci_open(1):	mode 1 addr port (0x0cf8) is 0x80003904
pci_open(1a):	mode1res=0x80000000 (0x80000000)
pci_cfgcheck:	device 0 [class=060000] [hdr=00] is there (id=71908086)
pcibios: BIOS version 2.10
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 16 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 2
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 12 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 12 func 1
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 0
acpi0: wakeup code va 0xc3d55000 pa 0x9e000
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 0 func 0
acpi_bus_number: root bus has no _BBN, assuming 0
AcpiOsDerivePciId: bus 0 dev 7 func 3
acpi0: reservation of 100000, 7f00000 (3) failed
acpi0: reservation of 0, a0000 (3) failed
ACPI timer: 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 0/5 -> 0
Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x8008-0x800b on acpi0
acpi_ec0: <Embedded Controller: GPE 0x9> port 0x62,0x66 on acpi0
pci_link0:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link1:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link2:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
pci_link3:        Index  IRQ  Rtd  Ref  IRQs
  Initial Probe       0    9   N     0  9
  Validation          0    9   N     0  9
  After Disable       0  255   N     0  9
cpu0: <ACPI CPU> on acpi0
cpu0: switching to generic Cx mode
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_throttle0: P_CNT from P_BLK 0x8010
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
ACPI: Found matching pin for 0.7.INTD at func 2: 9
ACPI: Found matching pin for 0.8.INTA at func 0: 9
ACPI: Found matching pin for 0.9.INTA at func 0: 9
ACPI: Found matching pin for 0.10.INTA at func 0: 9
ACPI: Found matching pin for 0.12.INTA at func 0: 255
ACPI: Found matching pin for 0.12.INTB at func 1: 255
pci0: <ACPI PCI bus> on pcib0
pci0: physical bus=0
found->	vendor=0x8086, dev=0x7190, revid=0x03
	bus=0, slot=0, func=0
	class=06-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0106, statreg=0x2210, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[10]: type 3, range 32, base 0x40000000, size 24, enabled
found->	vendor=0x8086, dev=0x7191, revid=0x03
	bus=0, slot=1, func=0
	class=06-04-00, hdrtype=0x01, mfdev=0
	cmdreg=0x001f, statreg=0x0220, cachelnsz=0 (dwords)
	lattimer=0x80 (3840 ns), mingnt=0x8c (35000 ns), maxlat=0x00 (0 ns)
found->	vendor=0x8086, dev=0x7110, revid=0x02
	bus=0, slot=7, func=0
	class=06-01-00, hdrtype=0x00, mfdev=1
	cmdreg=0x000f, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
found->	vendor=0x8086, dev=0x7111, revid=0x01
	bus=0, slot=7, func=1
	class=01-01-80, hdrtype=0x00, mfdev=0
	cmdreg=0x0005, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[20]: type 4, range 32, base 0xfc90, size  4, enabled
found->	vendor=0x8086, dev=0x7112, revid=0x01
	bus=0, slot=7, func=2
	class=0c-03-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0001, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=d, irq=9
	map[20]: type 4, range 32, base 0xfca0, size  5, enabled
pcib0: matched entry for 0.7.INTD (src \\_SB_.LNKD:0)
pcib0: slot 7 INTD routed to irq 9 via \\_SB_.LNKD
found->	vendor=0x8086, dev=0x7113, revid=0x03
	bus=0, slot=7, func=3
	class=06-80-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0003, statreg=0x0280, cachelnsz=0 (dwords)
	lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	map[90]: type 4, range 32, base 0x1040, size  4, enabled
found->	vendor=0x104d, dev=0x8039, revid=0x02
	bus=0, slot=8, func=0
	class=0c-00-10, hdrtype=0x00, mfdev=0
	cmdreg=0x0002, statreg=0x0210, cachelnsz=8 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x04 (1000 ns), maxlat=0x04 (1000 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D3  current D0
	map[10]: type 1, range 32, base 0xfedf7000, size 11, enabled
	map[14]: type 1, range 32, base 0xfedf7c00, size  9, enabled
pcib0: matched entry for 0.8.INTA (src \\_SB_.LNKD:0)
pcib0: slot 8 INTA routed to irq 9 via \\_SB_.LNKD
found->	vendor=0x1073, dev=0x0010, revid=0x02
	bus=0, slot=9, func=0
	class=04-01-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0007, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x05 (1250 ns), maxlat=0x19 (6250 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D2 D3  current D0
	map[10]: type 1, range 32, base 0xfedf8000, size 15, enabled
	map[14]: type 4, range 32, base 0xfcc0, size  6, enabled
	map[18]: type 4, range 32, base 0xfc8c, size  2, enabled
pcib0: matched entry for 0.9.INTA (src \\_SB_.LNKC:0)
pcib0: slot 9 INTA routed to irq 9 via \\_SB_.LNKC
found->	vendor=0x127a, dev=0x2005, revid=0x01
	bus=0, slot=10, func=0
	class=07-80-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0003, statreg=0x0290, cachelnsz=0 (dwords)
	lattimer=0x40 (1920 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=a, irq=9
	powerspec 2  supports D0 D3  current D0
	map[10]: type 1, range 32, base 0xfede0000, size 16, enabled
	map[14]: type 4, range 32, base 0xfc78, size  3, enabled
pcib0: matched entry for 0.10.INTA (src \\_SB_.LNKB:0)
pcib0: slot 10 INTA routed to irq 9 via \\_SB_.LNKB
found->	vendor=0x1180, dev=0x0478, revid=0x80
	bus=0, slot=12, func=0
	class=06-07-00, hdrtype=0x02, mfdev=1
	cmdreg=0x0000, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x20 (960 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=a, irq=255
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 1, range 32, base 0, size 12, memory disabled
found->	vendor=0x1180, dev=0x0478, revid=0x80
	bus=0, slot=12, func=1
	class=06-07-00, hdrtype=0x02, mfdev=1
	cmdreg=0x0000, statreg=0x0210, cachelnsz=0 (dwords)
	lattimer=0x20 (960 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns)
	intpin=b, irq=255
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 1, range 32, base 0, size 12, memory disabled
agp0: <Intel 82443BX (440 BX) host to PCI bridge> on hostb0
hostb0: Reserved 0x1000000 bytes for rid 0x10 type 3 at 0x40000000
agp0: allocating GATT for aperture of size 16M
pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
pcib1:   secondary bus     1
pcib1:   subordinate bus   1
pcib1:   I/O decode        0xf000-0xfff
pcib1:   memory decode     0xfe800000-0xfecfffff
pcib1:   prefetched decode 0xfd000000-0xfdffffff
pcib1: could not get PCI interrupt routing table for \\_SB_.PCI0.VID0 - AE_NOT_FOUND
pci1: <ACPI PCI bus> on pcib1
pci1: physical bus=1
found->	vendor=0x10c8, dev=0x0005, revid=0x20
	bus=1, slot=0, func=0
	class=03-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0207, statreg=0x0290, cachelnsz=0 (dwords)
	lattimer=0x80 (3840 ns), mingnt=0x10 (4000 ns), maxlat=0xff (63750 ns)
	intpin=a, irq=9
	powerspec 1  supports D0 D1 D2 D3  current D0
	map[10]: type 3, range 32, base 0xfd000000, size 24, enabled
pcib1: requested memory range 0xfd000000-0xfdffffff: good
	map[14]: type 1, range 32, base 0xfe800000, size 22, enabled
pcib1: requested memory range 0xfe800000-0xfebfffff: good
	map[18]: type 1, range 32, base 0xfec00000, size 20, enabled
pcib1: requested memory range 0xfec00000-0xfecfffff: good
pcib0: matched entry for 0.1.INTA (src \\_SB_.LNKA:0)
pcib0: slot 1 INTA routed to irq 9 via \\_SB_.LNKA
pcib1: slot 0 INTA is routed to irq 9
vgapci0: <VGA-compatible display> mem 0xfd000000-0xfdffffff,0xfe800000-0xfebfffff,0xfec00000-0xfecfffff irq 9 at device 0.0 on pci1
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 UDMA33 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc90-0xfc9f at device 7.1 on pci0
atapci0: Reserved 0x10 bytes for rid 0x20 type 4 at 0xfc90
ata0: <ATA channel 0> on atapci0
atapci0: Reserved 0x8 bytes for rid 0x10 type 4 at 0x1f0
atapci0: Reserved 0x1 bytes for rid 0x14 type 4 at 0x3f6
ata0: reset tp1 mask=03 ostat0=50 ostat1=00
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x80 err=0x80 lsb=0x80 msb=0x80
ata0: stat0=0x50 err=0x01 lsb=0x00 msb=0x00
ata0: stat1=0x00 err=0x01 lsb=0x00 msb=0x00
ata0: reset tp2 stat0=50 stat1=00 devices=0x1<ATA_MASTER>
ata0: [MPSAFE]
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
atapci0: Reserved 0x8 bytes for rid 0x18 type 4 at 0x170
atapci0: Reserved 0x1 bytes for rid 0x1c type 4 at 0x376
ata1: reset tp1 mask=03 ostat0=51 ostat1=00
ata1: stat0=0x00 err=0x01 lsb=0x14 msb=0xeb
ata1: stat1=0x00 err=0x04 lsb=0x14 msb=0xeb
ata1: reset tp2 stat0=00 stat1=00 devices=0x4<ATAPI_MASTER>
ata1: [MPSAFE]
ata1: [ITHREAD]
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xfca0-0xfcbf irq 9 at device 7.2 on pci0
uhci0: Reserved 0x20 bytes for rid 0x20 type 4 at 0xfca0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
pci0: <bridge> at device 7.3 (no driver attached)
pci0: <serial bus, FireWire> at device 8.0 (no driver attached)
pcm0: <Yamaha DS-1E (YMF744)> port 0xfcc0-0xfcff,0xfc8c-0xfc8f mem 0xfedf8000-0xfedfffff irq 9 at device 9.0 on pci0
pcm0: Reserved 0x8000 bytes for rid 0x10 type 3 at 0xfedf8000
ds1: setmap (7c57000, 3de4), nseg=1, error=0
pcm0: <Asahi Kasei AK4543 AC97 Codec (id = 0x414b4d02)>
pcm0: Codec features headphone, 18 bit DAC, 18 bit ADC, 5 bit master volume, AKM 3D Audio
pcm0: ac97 codec dac ready count: 0
pcm0: Mixer "vol":
pcm0: Mixer "pcm":
pcm0: Mixer "line":
pcm0: Mixer "mic":
pcm0: Mixer "cd":
pcm0: Mixer "rec":
pcm0: Mixer "igain":
pcm0: [MPSAFE]
pcm0: [ITHREAD]
pcm0: sndbuf_setmap 19d000, 1000; 0xc1769000 -> 19d000
pcm0: sndbuf_setmap 1a1000, 1000; 0xc176d000 -> 1a1000
pcm0: sndbuf_setmap 1b0000, 1000; 0xc177e000 -> 1b0000
pcm0: sndbuf_setmap 1ae000, 1000; 0xc177c000 -> 1ae000
pcm0: sndbuf_setmap 1ac000, 1000; 0xc177a000 -> 1ac000
pcm0: sndbuf_setmap 1aa000, 1000; 0xc1778000 -> 1aa000
want format 268435472
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
setspeed, channel pcm0:play:0:dsp0.p0
want speed 4000, try speed 4000, got speed 4000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
setspeed, channel pcm0:play:0:dsp0.p0
want speed 4000, try speed 4000, got speed 4000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
setspeed, channel pcm0:play:0:dsp0.p0
want speed 48000, try speed 48000, got speed 48000
feederflags 0
trying feeder_vchan (0x10000010 -> 0x10000010)...
got it
chn_fmtchain: 0x10000010 -> 0x10000010 (maxdepth: 0)
r = 0
setspeed done, r = 0
pci0: <simple comms> at device 10.0 (no driver attached)
cbb0: <RF5C478 PCI-CardBus Bridge> at device 12.0 on pci0
cbb0: Lazy allocation of 0x1000 bytes rid 0x10 type 3 at 0x80000000
cardbus0: <CardBus bus> on cbb0
pccard0: <16-bit PCCard bus> on cbb0
pcib0: matched entry for 0.12.INTA (src \\_SB_.LNKA:0)
pcib0: slot 12 INTA routed to irq 9 via \\_SB_.LNKA
cbb0: [MPSAFE]
cbb0: [ITHREAD]
cbb0: PCI Configuration space:
  0x00: 0x04781180 0x02100007 0x06070080 0x00822000 
  0x10: 0x80000000 0x020000dc 0x20030200 0xfffff000 
  0x20: 0x00000000 0xfffff000 0x00000000 0xfffffffc 
  0x30: 0x00000000 0xfffffffc 0x00000000 0x04000109 
  0x40: 0x804f104d 0x00000001 0x00000000 0x00000000 
  0x50: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x60: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x70: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x80: 0x00000001 0x00000000 0x04630463 0x00000000 
  0x90: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xa0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xb0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xc0: 0x804f104d 0x00000000 0x00000000 0x00000000 
  0xd0: 0x00000000 0x00000000 0x00000000 0xfe190001 
  0xe0: 0x24c0c000 0x00000000 0x00000000 0x00000000 
  0xf0: 0x00000000 0x00000000 0x00000000 0x00000000 
cbb1: <RF5C478 PCI-CardBus Bridge> at device 12.1 on pci0
cbb1: Lazy allocation of 0x1000 bytes rid 0x10 type 3 at 0x80001000
cardbus1: <CardBus bus> on cbb1
pccard1: <16-bit PCCard bus> on cbb1
pcib0: matched entry for 0.12.INTB (src \\_SB_.LNKB:0)
pcib0: slot 12 INTB routed to irq 9 via \\_SB_.LNKB
cbb1: [MPSAFE]
cbb1: [ITHREAD]
cbb1: PCI Configuration space:
  0x00: 0x04781180 0x02100007 0x06070080 0x00822000 
  0x10: 0x80001000 0x020000dc 0x20050400 0xfffff000 
  0x20: 0x00000000 0xfffff000 0x00000000 0xfffffffc 
  0x30: 0x00000000 0xfffffffc 0x00000000 0x04000209 
  0x40: 0x804f104d 0x00000001 0x00000000 0x00000000 
  0x50: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x60: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x70: 0x00000000 0x00000000 0x00000000 0x00000000 
  0x80: 0x00000001 0x00000000 0x04630463 0x00000000 
  0x90: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xa0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xb0: 0x00000000 0x00000000 0x00000000 0x00000000 
  0xc0: 0x804f104d 0x00000000 0x00000000 0x00000000 
  0xd0: 0x00000000 0x00000000 0x00000000 0xfe190001 
  0xe0: 0x24c04000 0x00000000 0x00000000 0x00000000 
  0xf0: 0x00000000 0x00000000 0x00000000 0x00000000 
acpi_tz0: <Thermal Zone> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
atkbd: the current kbd controller command byte 0047
atkbd: keyboard ID 0x41ab (2)
kbd0 at atkbd0
kbd0: atkbd0, AT 101/102 (2), config:0x0, flags:0x3d0000
atkbd0: [GIANT-LOCKED]
atkbd0: [ITHREAD]
psm0: unable to allocate IRQ
psmcpnp0: <PS/2 mouse port> irq 12 on acpi0
psm0: current command byte:0047
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: [ITHREAD]
psm0: model Generic PS/2 mouse, device ID 0-00, 3 buttons
psm0: config:00000000, flags:00000008, packet size:3
psm0: syncmask:c0, syncbits:00
sio0: irq maps: 0x1 0x11 0x1 0x1
sio0: irq maps: 0x1 0x11 0x1 0x1
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 on acpi0
sio0: type 16550A
sio0: [FILTER]
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: ic_type 90 part_id 73
fdc0: [FILTER]
battery0: <ACPI Control Method Battery> on acpi0
battery1: <ACPI Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
pmtimer: pmtimer0 already exists; skipping it
pnp_identify: Trying Read_Port at 203
pnp_identify: Trying Read_Port at 243
pnp_identify: Trying Read_Port at 283
pnp_identify: Trying Read_Port at 2c3
pnp_identify: Trying Read_Port at 303
pnp_identify: Trying Read_Port at 343
pnp_identify: Trying Read_Port at 383
pnp_identify: Trying Read_Port at 3c3
PNP Identify complete
sc: sc0 already exists; skipping it
isa_probe_children: disabling PnP devices
isa_probe_children: probing non-PnP devices
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc0000-0xcbfff pnpid ORM0000 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sc0: fb0, kbd1, terminal emulator: sc (syscons terminal)
spic0: device model type = 1
spic0: <Sony Programmable I/O Controller> at port 0x10a0-0x10a4 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
isa_probe_children: probing PnP devices
Device configuration finished.
procfs registered
Timecounter "TSC" frequency 496310603 Hz quality 800
Timecounters tick every 1.000 msec
lo0: bpf attached
ata0-master: pio=PIO4 wdma=WDMA2 udma=UDMA66 cable=80 wire
ad0: setting PIO4 on PIIX4 chip
ad0: setting UDMA33 on PIIX4 chip
ad0: 17301MB <IBM DARA-218000 GL6OA50A> at ata0-master UDMA33
ad0: 35433216 sectors [37495C/15H/63S] 16 sectors/interrupt 1 depth queue
ata1-master: pio=PIO4 wdma=WDMA2 udma=UDMA33 cable=40 wire
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
fdc0: output ready timeout
GEOM: new disk ad0
battery0: battery initialization start
battery1: battery initialization start
acpi_acad0: acline initialization start
cbb0: Opening memory:
cbb0: Normal: 0x88000000-0x8800ffff
unknown: Lazy allocation of 0x10000 bytes rid 0x10 type 3 at 0x88000000
cbb0: Opening memory:
	map[10]: type 1, range 32, base 0x88000000, size 16, enabled
found->	vendor=0x168c, dev=0x0013, revid=0x01
	bus=2, slot=0, func=0
	class=02-00-00, hdrtype=0x00, mfdev=0
	cmdreg=0x0002, statreg=0x0290, cachelnsz=8 (dwords)
	lattimer=0xa8 (5040 ns), mingnt=0x0a (2500 ns), maxlat=0x1c (7000 ns)
	intpin=a, irq=255
	powerspec 2  supports D0 D3  current D0
ath0: <Atheros 5212> mem 0x88000000-0x8800ffff at device 0.0 on cardbus0
ath0: Reserved 0x10000 bytes for rid 0x10 type 3 at 0x88000000
cbb0: Opening memory:
cbb0: Normal: 0x88000000-0x8800ffff
ath0: [MPSAFE]
ath0: [ITHREAD]
ath0: hal channel 2412/a0 -> 1
ath0: hal channel 2412/c0 -> 1
ath0: hal channel 2417/a0 -> 2
ath0: hal channel 2417/c0 -> 2
ath0: hal channel 2422/a0 -> 3
ath0: hal channel 2422/c0 -> 3
ath0: hal channel 2427/a0 -> 4
ath0: hal channel 2427/c0 -> 4
ath0: hal channel 2432/a0 -> 5
ath0: hal channel 2432/c0 -> 5
ath0: hal channel 2437/a0 -> 6
ath0: hal channel 2437/c0 -> 6
ath0: hal channel 2437/d0 -> 6
ath0: hal channel 2442/a0 -> 7
ath0: hal channel 2442/c0 -> 7
ath0: hal channel 2447/a0 -> 8
ath0: hal channel 2447/c0 -> 8
ath0: hal channel 2452/a0 -> 9
ath0: hal channel 2452/c0 -> 9
ath0: hal channel 2457/a0 -> 10
ath0: hal channel 2457/c0 -> 10
ath0: hal channel 2462/a0 -> 11
ath0: hal channel 2462/c0 -> 11
ath0: using obsoleted if_watchdog interface
ath0: bpf attached
ath0: Ethernet address: 00:0f:b5:22:be:69
ath0: bpf attached
ath0: bpf attached
ath0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
ath0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
ath0: mac 5.9 phy 4.3 radio 4.6
ath0: Use hw queue 1 for WME_AC_BE traffic
ath0: Use hw queue 0 for WME_AC_BK traffic
ath0: Use hw queue 2 for WME_AC_VI traffic
ath0: Use hw queue 3 for WME_AC_VO traffic
ath0: Use hw queue 8 for CAB traffic
ath0: Use hw queue 9 for beacons
battery0: battery initialization done, tried 1 times
acpi_acad0: On Line
acpi_acad0: acline initialization done, tried 1 times
GEOM_LABEL: Label for provider ad0s1 is msdosfs/NO NAME.
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
fdc0: output ready timeout
fdc0: input ready timeout
fdc0: input ready timeout
Trying to mount root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
start_init: trying /sbin/init
WARNING: /home was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted

Script started on Mon Mar 26 03:43:04 2007
[kali#:/boot/kernel:ttyp2] kgdb kernel.symbols /var/crash/vmcore.2
kgdb: kvm_nlist(_stopped_cpus): 
kgdb: kvm_nlist(_stoppcbs): 
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
<5>ath0: link state changed to DOWN


Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x50
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc05ab9b9
stack pointer           = 0x28:0xc7b20b5c
frame pointer           = 0x28:0xc7b20b9c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 25 (cbb0 event thread)
panic: from debugger
Uptime: 4m5s
Physical memory: 119 MB
Dumping 24 MB: 9

#0  doadump () at pcpu.h:172
172     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) add-symbol-file /boot/kernel/if_ath.ko.symbols 0xc0791510
add symbol table from file "/boot/kernel/if_ath.ko.symbols" at
        .text_addr = 0xc0791510
(y or n) y
Reading symbols from /boot/kernel/if_ath.ko.symbols...done.
(kgdb) add-symbol-file /boot/kernel/ath_rate.ko.symbols 0xc07a1a50
add symbol table from file "/boot/kernel/ath_rate.ko.symbols" at
        .text_addr = 0xc07a1a50
(y or n) y
Reading symbols from /boot/kernel/ath_rate.ko.symbols...done.
(kgdb) add-symbol-file /boot/kernel/wlan.ko.symbols 0xc07aaf00
add symbol table from file "/boot/kernel/wlan.ko.symbols" at
        .text_addr = 0xc07aaf00
(y or n) y
Reading symbols from /boot/kernel/wlan.ko.symbols...done.
(kgdb) bt
#0  doadump () at pcpu.h:172
#1  0xc0508fe6 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
#2  0xc050934d in panic (fmt=0xc067fffe "from debugger")
    at /usr/src/sys/kern/kern_shutdown.c:563
#3  0xc042eee7 in db_panic (addr=-1067796039, have_addr=0, count=-1, 
    modif=0xc7b20908 "") at /usr/src/sys/ddb/db_command.c:433
#4  0xc042ee70 in db_command (last_cmdp=0xc06de1a4, cmd_table=0x0)
    at /usr/src/sys/ddb/db_command.c:401
#5  0xc042ef55 in db_command_loop () at /usr/src/sys/ddb/db_command.c:453
#6  0xc04311e5 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:222
#7  0xc052fda5 in kdb_trap (type=0, code=0, tf=0x0)
    at /usr/src/sys/kern/subr_kdb.c:502
#8  0xc066093c in trap_fatal (frame=0xc7b20b1c, eva=80)
    at /usr/src/sys/i386/i386/trap.c:859
#9  0xc0660615 in trap_pfault (frame=0xc7b20b1c, usermode=0, eva=80)
    at /usr/src/sys/i386/i386/trap.c:777
#10 0xc066018c in trap (frame=0xc7b20b1c) at /usr/src/sys/i386/i386/trap.c:462
#11 0xc064ef9b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#12 0xc05ab9b9 in rt_newmaddrmsg (cmd=-1048376576, ifma=0xc1b721e0)
    at /usr/src/sys/net/rtsock.c:967
#13 0xc05a1125 in if_delmulti_locked (ifp=0xc17a2800, ifma=0xc1b721e0, 
    detaching=1) at /usr/src/sys/net/if.c:2528
#14 0xc059cc76 in if_purgemaddrs (ifp=0xc17a2800) at /usr/src/sys/net/if.c:636
#15 0xc059cdf7 in if_detach (ifp=0xc17a2800) at /usr/src/sys/net/if.c:701
#16 0xc05a3a70 in ether_ifdetach (ifp=0xc17a2800)
    at /usr/src/sys/net/if_ethersubr.c:924
#17 0xc07ab5a2 in ieee80211_ifdetach (ic=0xc1b643c8)
    at /usr/src/sys/modules/wlan/../../net80211/ieee80211.c:279
#18 0xc079220b in ath_detach (sc=0xc1b64000)
    at /usr/src/sys/modules/ath/../../dev/ath/if_ath.c:669
#19 0xc079b1eb in ath_pci_detach (dev=0xc1922280)
    at /usr/src/sys/modules/ath/../../dev/ath/if_ath_pci.c:223
#20 0xc0529a0a in device_detach (dev=0xc1922280) at device_if.h:211
#21 0xc04549a4 in cardbus_detach_card (cbdev=0xc1755880)
    at /usr/src/sys/dev/cardbus/cardbus.c:235
#22 0xc0475509 in cbb_removal (sc=0xc1722000) at card_if.h:94
#23 0xc0475077 in cbb_event_thread (arg=0xc1722000)
    at /usr/src/sys/dev/pccbb/pccbb.c:486
#24 0xc04ecb30 in fork_exit (callout=0xc0474f20 <cbb_event_thread>, 
    arg=0xc1830b00, frame=0xc1830b00) at /usr/src/sys/kern/kern_fork.c:814
#25 0xc064f010 in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:205
(kgdb) up 12
#12 0xc05ab9b9 in rt_newmaddrmsg (cmd=-1048376576, ifma=0xc1b721e0)
    at /usr/src/sys/net/rtsock.c:967
967             ifmam = mtod(m, struct ifma_msghdr *);
(kgdb) p *ifma
$1 = {ifma_link = {tqe_next = 0xc1b721c0, tqe_prev = 0xc17a28bc}, 
  ifma_addr = 0xc189e080, ifma_lladdr = 0xc193c340, ifma_ifp = 0x0, 
  ifma_refcount = 0, ifma_protospec = 0xc193c280, ifma_llifma = 0xc1b721c0}
(kgdb) p m
$2 = (struct mbuf *) 0xc1830b00
(kgdb) p *m
$3 = {m_hdr = {mh_next = 0xc1830a00, mh_nextpkt = 0x0, 
    mh_data = 0xc1830b34 "X", mh_len = 16, mh_flags = 2, mh_type = 1}, 
  M_dat = {MH = {MH_pkthdr = {rcvif = 0x0, len = 88, header = 0x0, 
        csum_flags = 0, csum_data = 0, tso_segsz = 0, ether_vtag = 0, tags = {
          slh_first = 0x0}}, MH_dat = {MH_ext = {
          ext_buf = 0x10050058 <Address 0x10050058 out of bounds>, 
          ext_free = 0, ext_args = 0x0, ext_size = 0, ref_cnt = 0x40, 
          ext_type = 0}, 
        MH_databuf = "X\000\005\020", '\0' <repeats 12 times>, "_at_\000\000\000\000\000\000\000\000\006\000 \177\000\000\001\177\000\000\001×\230\000\031\020\037\210g?\237~\017\200\020\027\001\000\000\000\000\001\001\b\n\000\000B\215kåU", '\0' <repeats 136 times>}}, 
    M_databuf = "\000\000\000\000X", '\0' <repeats 23 times>, "X\000\005\020", '\0' <repeats 12 times>, "_at_\000\000\000\000\000\000\000\000\006\000 \177\000\000\001\177\000\000\001×\230\000\031\020\037\210g?\237~\017\200\020\027\001\000\000\000\000\001\001\b\n\000\000B\215kåU", '\0' <repeats 136 times>}}
(kgdb) up
#13 0xc05a1125 in if_delmulti_locked (ifp=0xc17a2800, ifma=0xc1b721e0, 
    detaching=1) at /usr/src/sys/net/if.c:2528
2528            rt_newmaddrmsg(RTM_DELMADDR, ifma);
(kgdb) p *ifp
$4 = {if_softc = 0xc1b64000, if_l2com = 0xc1756340, if_link = {tqe_next = 0x0, 
    tqe_prev = 0xc17bf408}, if_xname = "ath0", '\0' <repeats 11 times>, 
  if_dname = 0xc16cc0ac "ath", if_dunit = 0, if_addrhead = {
    tqh_first = 0xc1940a00, tqh_last = 0xc1940a60}, if_klist = {kl_list = {
      slh_first = 0x0}, kl_lock = 0xc04e5f40 <knlist_mtx_lock>, 
    kl_unlock = 0xc04e5fa0 <knlist_mtx_unlock>, 
    kl_locked = 0xc04e5ff0 <knlist_mtx_locked>, kl_lockarg = 0xc06f2c38}, 
  if_pcount = 0, if_carp = 0x0, if_bpf = 0xc193c640, if_index = 2, 
  if_timer = 0, if_vlantrunk = 0x0, if_flags = 34818, if_capabilities = 0, 
  if_capenable = 0, if_linkmib = 0x0, if_linkmiblen = 0, if_data = {
    ifi_type = 6 '\006', ifi_physical = 0 '\0', ifi_addrlen = 6 '\006', 
    ifi_hdrlen = 32 ' ', ifi_link_state = 1 '\001', ifi_recvquota = 0 '\0', 
    ifi_xmitquota = 0 '\0', ifi_datalen = 80 'P', ifi_mtu = 1500, 
    ifi_metric = 0, ifi_baudrate = 54000000, ifi_ipackets = 12, 
    ifi_ierrors = 32, ifi_opackets = 3, ifi_oerrors = 0, ifi_collisions = 0, 
    ifi_ibytes = 1753, ifi_obytes = 726, ifi_imcasts = 10, ifi_omcasts = 0, 
    ifi_iqdrops = 0, ifi_noproto = 0, ifi_hwassist = 0, ifi_epoch = 110, 
    ifi_lastchange = {tv_sec = 1174796489, tv_usec = 156365}}, 
  if_multiaddrs = {tqh_first = 0xc1b721e0, tqh_last = 0xc1b721c0}, 
  if_amcount = 0, if_output = 0xc07bd8b0 <ieee80211_output>, 
  if_input = 0xc05a3290 <ether_input>, if_start = 0xc0792da0 <ath_start>, 
  if_ioctl = 0xc0798c50 <ath_ioctl>, if_watchdog = 0xc0798bc0 <ath_watchdog>, 
  if_init = 0xc0792750 <ath_init>, 
  if_resolvemulti = 0xc05a3c30 <ether_resolvemulti>, if_addr = 0xc1940a00, 
  if_spare2 = 0xc1b64230, if_spare3 = 0x0, if_drv_flags = 0, 
  if_spare_flags2 = 0, if_snd = {ifq_head = 0x0, ifq_tail = 0x0, ifq_len = 0, 
    ifq_maxlen = 50, ifq_drops = 0, ifq_mtx = {mtx_object = {
        lo_name = 0xc17a2810 "ath0", lo_type = 0xc06950bf "if send queue", 
        lo_flags = 16973824, lo_witness_data = {lod_list = {stqe_next = 0x0}, 
          lod_witness = 0x0}}, mtx_lock = 4, mtx_recurse = 0}, 
    ifq_drv_head = 0x0, ifq_drv_tail = 0x0, ifq_drv_len = 0, 
    ifq_drv_maxlen = 50, altq_type = 0, altq_flags = 1, altq_disc = 0x0, 
    altq_ifp = 0xc17a2800, altq_enqueue = 0, altq_dequeue = 0, 
    altq_request = 0, altq_clfier = 0x0, altq_classify = 0, altq_tbr = 0x0, 
    altq_cdnr = 0x0}, if_broadcastaddr = 0xc067b4c0 "ÿÿÿÿÿÿ", if_bridge = 0x0, 
  lltables = 0x0, if_label = 0x0, if_prefixhead = {tqh_first = 0x0, 
    tqh_last = 0xc17a2970}, if_afdata = {0x0 <repeats 38 times>}, 
  if_afdata_initialized = 2, if_afdata_mtx = {mtx_object = {
      lo_name = 0xc06950b5 "if_afdata", lo_type = 0xc06950b5 "if_afdata", 
      lo_flags = 16973824, lo_witness_data = {lod_list = {stqe_next = 0x0}, 
        lod_witness = 0x0}}, mtx_lock = 4, mtx_recurse = 0}, if_starttask = {
    ta_link = {stqe_next = 0x0}, ta_pending = 0, ta_priority = 0, 
    ta_func = 0xc05a14d0 <if_start_deferred>, ta_context = 0xc17a2800}, 
  if_linktask = {ta_link = {stqe_next = 0x0}, ta_pending = 0, ta_priority = 0, 
    ta_func = 0xc059eca0 <do_link_state_change>, ta_context = 0xc17a2800}, 
  if_addr_mtx = {mtx_object = {lo_name = 0xc069504b "if_addr_mtx", 
      lo_type = 0xc069504b "if_addr_mtx", lo_flags = 16973824, 
      lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}}, 
    mtx_lock = 3244942176, mtx_recurse = 0}, if_clones = {le_next = 0x0, 
    le_prev = 0x0}, if_groups = {tqh_first = 0xc189e690, 
    tqh_last = 0xc189e694}, if_pf_kif = 0x0}
(kgdb) q
1.686u 0.217s 20:55.17 0.1%     2545+1206k 135+0io 30pf+0w
[kali#:/boot/kernel:ttyp2] exit
exit

Script done on Mon Mar 26 04:04:23 2007
Received on Mon Mar 26 2007 - 07:17:08 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:07 UTC