Re: kern/48954: USB diagconstic message: actlen (-15996) > len (4)

[Alexander Nasonov <alnsn%yandex.ru@localhost>]

The following reply was made to PR kern/48954; it has been noted by GNATS.

From: Alexander Nasonov <alnsn%yandex.ru@localhost>
To: Nick Hudson <skrll%netbsd.org@localhost>
Cc: gnats-bugs%NetBSD.org@localhost, alnsn%NetBSD.org@localhost, 
kern-bug-people%netbsd.org@localhost,
        gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: kern/48954: USB diagconstic message: actlen (-15996) > len (4)
Date: Fri, 27 Jun 2014 19:48:30 +0100

 Nick Hudson wrote:
 > Have you tried setting kmem_guard_depth as described in kmem(9)?
 
 kmem_guard_depth=50000 made no difference.
 
 usbd_get_string: getting lang failed, using 0
 urtwn0 at uhub1 port 1
 urtwn0: Realtek 802.11n WLAN Adapter, rev 2.00/2.00, addr 3
 urtwn0: MAC/BB RTL8188CUS, RF 6052 1T1R, address 80:1f:02:84:fb:fe
 urtwn0: 1 rx pipe, 2 tx pipes
 urtwn0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
 urtwn0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps
 24Mbps 36Mbps 48Mbps 54Mbps
 uvm_fault(0xfffffe811cc122e8, 0x0, 2) -> e
 fatal page fault in supervisor mode
 trap type 6 code 2 rip ffffffff80899582 cs 8 rflags 10286 cr2 0 ilevel 6
 rsp fffffe80ca6fc6d0
 curlwp 0xfffffe811c501b40 pid 155.1 lowest kstack 0xfffffe80ca6f92c0
 panic: trap
 cpu3: Begin traceback...
 vpanic() at netbsd:vpanic+0x13c
 snprintf() at netbsd:snprintf
 startlwp() at netbsd:startlwp
 alltraps() at netbsd:alltraps+0x9e
 urtwn_init() at netbsd:urtwn_init+0x182c
 ether_ioctl() at netbsd:ether_ioctl+0xc8
 ieee80211_ioctl() at netbsd:ieee80211_ioctl+0x9a4
 urtwn_ioctl() at netbsd:urtwn_ioctl+0x91
 in6_update_ifa1() at netbsd:in6_update_ifa1+0x6fd
 in6_update_ifa() at netbsd:in6_update_ifa+0x36
 in6_control1() at netbsd:in6_control1+0x3c3
 in6_control() at netbsd:in6_control+0x78
 udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x3e
 compat_ifioctl() at netbsd:compat_ifioctl+0x127
 doifioctl() at netbsd:doifioctl+0x43b
 soo_ioctl() at netbsd:soo_ioctl+0x2b8
 sys_ioctl() at netbsd:sys_ioctl+0x17e
 syscall() at netbsd:syscall+0x9a
 --- syscall (number 54) ---
 7f7ff74d088a:
 cpu3: End traceback...
 
 
 ffffffff804536a1 <urtwn_init>:
 ffffffff804536a1:       55                      push   %rbp
 ffffffff804536a2:       48 89 e5                mov    %rsp,%rbp
 ffffffff804536a5:       41 57                   push   %r15
 ffffffff804536a7:       41 56                   push   %r14
 ffffffff804536a9:       41 55                   push   %r13
 ffffffff804536ab:       41 54                   push   %r12
 ffffffff804536ad:       53                      push   %rbx
 ffffffff804536ae:       48 83 ec 58             sub    $0x58,%rsp
 ffffffff804536b2:       48 89 7d c8             mov    %rdi,-0x38(%rbp)
 ffffffff804536b6:       48 8b 1f                mov    (%rdi),%rbx
 ffffffff804536b9:       f6 05 f8 46 b0 00 02    testb
 $0x2,0xb046f8(%rip)        # ffffffff80f57db8 <urtwn_debug>
 ffffffff804536c0:       0f 85 fa 03 00 00       jne    ffffffff80453ac0
 <urtwn_init+0x41f>
 
 ...
 
 ffffffff80454e8b:       e8 68 e0 ff ff          callq  ffffffff80452ef8
 <urtwn_set_chan.constprop.7>
 ffffffff80454e90:       48 8b 8b 00 33 00 00    mov    0x3300(%rbx),%rcx
 ffffffff80454e97:       48 8d 93 f0 32 00 00    lea    0x32f0(%rbx),%rdx
 ffffffff80454e9e:       48 8b b3 68 11 00 00    mov    0x1168(%rbx),%rsi
 ffffffff80454ea5:       48 8b bb f8 32 00 00    mov    0x32f8(%rbx),%rdi
 ffffffff80454eac:       48 c7 44 24 08 1d 0f    movq
 $0xffffffff80450f1d,0x8(%rsp)
 ffffffff80454eb3:       45 80
 ffffffff80454eb5:       c7 04 24 00 00 00 00    movl   $0x0,(%rsp)
 ffffffff80454ebc:       41 b9 05 00 00 00       mov    $0x5,%r9d
 ffffffff80454ec2:       41 b8 00 40 00 00       mov    $0x4000,%r8d
 ffffffff80454ec8:       e8 b1 46 44 00          callq  ffffffff8089957e
 <usbd_setup_xfer>
 ffffffff80454ecd:       48 8b bb f8 32 00 00    mov    0x32f8(%rbx),%rdi
 ffffffff80454ed4:       e8 42 40 44 00          callq  ffffffff80898f1b
 <usbd_transfer>
 ffffffff80454ed9:       83 f8 01                cmp    $0x1,%eax
 
 Alex