#187 Kernel panic after eject and reinsert a WiFi Cardbus-Card

[Giuliano Montecarlo]

Hi,
I'm running Fedora Core 6 with the newest 16K-Kernel from Linuxant and ndiswrapper-1.25 (1.37 is even worse...).
If I boot my PC and put my Neatgear WG511 in, everything works fine. But if I remove the card, and put it back in, I get a kernel panic. After removing the card, syslog says folloing:

Feb 14 22:01:37 Pinte kernel: pccard: card ejected from slot 1
Feb 14 22:01:37 Pinte kernel: BUG: unable to handle kernel paging request at virtual address 000041f5
Feb 14 22:01:37 Pinte kernel: printing eip:

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: Oops: 0002 [#1]

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: SMP

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: CPU: 0

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: EIP: 0060:[<d0c1616f>]</d0c1616f> Tainted: P VLI

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: EFLAGS: 00010206 (2.6.19-1.2895.fc6.stk16 #1)

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: EIP is at NdisFreePacket+0x32/0x66 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: eax: c751942c ebx: 000041ed ecx: cbb14000 edx: c9658414

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: esi: c9a2c400 edi: c60d8780 ebp: cfde3da0 esp: cfde3d84

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: ds: 007b es: 007b ss: 0068

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: Process pccardd (pid: 341, ti=cfde0000 task=cfdde5d0 task.ti=cfde0000)

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: Stack: cbb14898 cfde3d98 d0da30c0 cbb14898 c9a2c400 d0d94278 c9658414 cfde3db8

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: d0d94d1b cbb14000 c751942c c751942c c751942c cfde3dcc d0d8f737 cbb14000

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: 00a38600 cbb14000 cfde3dd8 d0da3059 cbb14000 cfde3de4 d0da3987 cba55400

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: Call Trace:

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: [<d0d94278>]</d0d94278> 0xd0d94278

Message from syslogd@Pinte at Wed Feb 14 22:01:37 2007 ...
Pinte kernel: DWARF2 unwinder stuck at 0xd0d94278

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: Leftover inexact backtrace:

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c2202d>]</d0c2202d> miniport_halt+0x3f/0x16c [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c224e1>]</d0c224e1> ndis_remove_device+0x108/0x174 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c232c0>]</d0c232c0> NdisDispatchPnp+0x73b/0x795 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1d87c>]</d0c1d87c> IoAllocateIrp+0x67/0x74 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1e170>]</d0c1e170> IoBuildAsynchronousFsdRequest+0x2d/0x132 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c19a20>]</d0c19a20> get_current_nt_thread+0xad/0xbc [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1e282>]</d0c1e282> IoQueueThreadIrp+0xd/0xc7 [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1d5d4>]</d0c1d5d4> IofCallDriver+0x2e/0x5c [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1f7ae>]</d0c1f7ae> IoSendIrpTopDev+0xad/0xfb [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<d0c1f87d>]</d0c1f87d> pnp_remove_device+0x81/0x18a [ndiswrapper]

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<c04fad14>]</c04fad14> pci_device_remove+0x16/0x35

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<c055e5ed>]</c055e5ed> __device_release_driver+0x60/0x78
Feb 14 22:01:37 Pinte kernel: d0c1616f
Feb 14 22:01:37 Pinte kernel: *pde = 00000000
Feb 14 22:01:37 Pinte kernel: Oops: 0002 [#1]
Feb 14 22:01:37 Pinte kernel: SMP
Feb 14 22:01:37 Pinte kernel: last sysfs file: /class/net/eth0/carrier
Feb 14 22:01:37 Pinte kernel: Modules linked in: ndiswrapper(U) autofs4 hidp rfcomm l2cap bluetooth sunrpc dm_mirror dm_multipath dm_mod video sbs i2c_ec i2c_core dock button battery asus_acpi ac radeon drm ipv6 lp floppy snd_intel8x0m snd_intel8x0 snd_ac97_codec snd_ac97_bus snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss irda ide_cd snd_mixer_oss cdrom snd_pcm crc_ccitt snd_timer snd soundcore snd_page_alloc iTCO_wdt 3c59x pcspkr mii serio_raw parport_pc parport ata_piix libata sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd
Feb 14 22:01:37 Pinte kernel: CPU: 0
Feb 14 22:01:37 Pinte kernel: EIP: 0060:[<d0c1616f>]</d0c1616f> Tainted: P VLI
Feb 14 22:01:37 Pinte kernel: EFLAGS: 00010206 (2.6.19-1.2895.fc6.stk16 #1)
Feb 14 22:01:37 Pinte kernel: EIP is at NdisFreePacket+0x32/0x66 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: eax: c751942c ebx: 000041ed ecx: cbb14000 edx: c9658414
Feb 14 22:01:37 Pinte kernel: esi: c9a2c400 edi: c60d8780 ebp: cfde3da0 esp: cfde3d84
Feb 14 22:01:37 Pinte kernel: ds: 007b es: 007b ss: 0068
Feb 14 22:01:37 Pinte kernel: Process pccardd (pid: 341, ti=cfde0000 task=cfdde5d0 task.ti=cfde0000)
Feb 14 22:01:37 Pinte kernel: Stack: cbb14898 cfde3d98 d0da30c0 cbb14898 c9a2c400 d0d94278 c9658414 cfde3db8
Feb 14 22:01:37 Pinte kernel: d0d94d1b cbb14000 c751942c c751942c c751942c cfde3dcc d0d8f737 cbb14000
Feb 14 22:01:37 Pinte kernel: 00a38600 cbb14000 cfde3dd8 d0da3059 cbb14000 cfde3de4 d0da3987 cba55400
Feb 14 22:01:37 Pinte kernel: Call Trace:
Feb 14 22:01:37 Pinte kernel: [<d0d94278>]</d0d94278> 0xd0d94278
Feb 14 22:01:37 Pinte kernel: DWARF2 unwinder stuck at 0xd0d94278
Feb 14 22:01:37 Pinte kernel:
Feb 14 22:01:37 Pinte kernel: Leftover inexact backtrace:
Feb 14 22:01:37 Pinte kernel:
Feb 14 22:01:37 Pinte kernel: [<d0c2202d>]</d0c2202d> miniport_halt+0x3f/0x16c [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c224e1>]</d0c224e1> ndis_remove_device+0x108/0x174 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c232c0>]</d0c232c0> NdisDispatchPnp+0x73b/0x795 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1d87c>]</d0c1d87c> IoAllocateIrp+0x67/0x74 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1e170>]</d0c1e170> IoBuildAsynchronousFsdRequest+0x2d/0x132 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c19a20>]</d0c19a20> get_current_nt_thread+0xad/0xbc [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1e282>]</d0c1e282> IoQueueThreadIrp+0xd/0xc7 [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1d5d4>]</d0c1d5d4> IofCallDriver+0x2e/0x5c [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1f7ae>]</d0c1f7ae> IoSendIrpTopDev+0xad/0xfb [ndiswrapper]
Feb 14 22:01:37 Pinte kernel: [<d0c1f87d>]</d0c1f87d> pnp_remove_device+0x81/0x18a [ndiswrapper]
Feb 14 22:01:38 Pinte kernel: [<c04fad14>]</c04fad14> pci_device_remove+0x16/0x35
Feb 14 22:01:38 Pinte kernel: [<c055e5ed>]</c055e5ed> __device_release_driver+0x60/0x78
Feb 14 22:01:38 Pinte kernel: [<c055e999>]</c055e999> device_release_driver+0x32/0x48

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<c055e999>]</c055e999> device_release_driver+0x32/0x48

Message from syslogd@Pinte at Wed Feb 14 22:01:38 2007 ...
Pinte kernel: [<c055e068>]</c055e068> bus_remove_device+0x6d/0x7d

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c055cc30>]</c055cc30> device_del+0x166/0x19a

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c055cc6c>]</c055cc6c> device_unregister+0x8/0x10

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c04f8578>]</c04f8578> pci_stop_dev+0x20/0x4b

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c04f8650>]</c04f8650> pci_remove_bus_device+0x28/0x86

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c04f86c8>]</c04f86c8> pci_remove_behind_bridge+0x1a/0x2e

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c057f98c>]</c057f98c> socket_shutdown+0x6d/0xd8

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c057fa13>]</c057fa13> socket_remove+0x1c/0x26

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c0580000>]</c0580000> pccardd+0x13b/0x1ee

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c04215c7>]</c04215c7> default_wake_function+0x0/0xc

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c057fec5>]</c057fec5> pccardd+0x0/0x1ee

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c0439810>]</c0439810> kthread+0xc0/0xec

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c0439750>]</c0439750> kthread+0x0/0xec

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: [<c0404c03>]</c0404c03> kernel_thread_helper+0x7/0x10

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: =======================

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: Code: 18 8b 5a 10 85 db 75 22 89 54 24 0c c7 44 24 08 95 05 00 00 c7 44 24 04 dd 71 c2 d0 c7 04 24 30 8d c2 d0 e8 65 19 81 ef eb 2e 90 <ff> 4b 08 83 7b 04 14 76 0d 89 d0 e8 10 b4 85 ef 90 ff 4b 04 eb</ff>

Message from syslogd@Pinte at Wed Feb 14 22:01:39 2007 ...
Pinte kernel: EIP: [<d0c1616f>]</d0c1616f> NdisFreePacket+0x32/0x66 [ndiswrapper] SS:ESP 0068:cfde3d84
Feb 14 22:01:38 Pinte kernel: [<c055e068>]</c055e068> bus_remove_device+0x6d/0x7d
Feb 14 22:01:38 Pinte kernel: [<c055cc30>]</c055cc30> device_del+0x166/0x19a
Feb 14 22:01:38 Pinte kernel: [<c055cc6c>]</c055cc6c> device_unregister+0x8/0x10
Feb 14 22:01:38 Pinte kernel: [<c04f8578>]</c04f8578> pci_stop_dev+0x20/0x4b
Feb 14 22:01:38 Pinte kernel: [<c04f8650>]</c04f8650> pci_remove_bus_device+0x28/0x86
Feb 14 22:01:38 Pinte kernel: [<c04f86c8>]</c04f86c8> pci_remove_behind_bridge+0x1a/0x2e
Feb 14 22:01:38 Pinte kernel: [<c057f98c>]</c057f98c> socket_shutdown+0x6d/0xd8
Feb 14 22:01:38 Pinte kernel: [<c057fa13>]</c057fa13> socket_remove+0x1c/0x26
Feb 14 22:01:38 Pinte kernel: [<c0580000>]</c0580000> pccardd+0x13b/0x1ee
Feb 14 22:01:38 Pinte kernel: [<c04215c7>]</c04215c7> default_wake_function+0x0/0xc
Feb 14 22:01:38 Pinte kernel: [<c057fec5>]</c057fec5> pccardd+0x0/0x1ee
Feb 14 22:01:38 Pinte kernel: [<c0439810>]</c0439810> kthread+0xc0/0xec
Feb 14 22:01:38 Pinte kernel: [<c0439750>]</c0439750> kthread+0x0/0xec
Feb 14 22:01:39 Pinte kernel: [<c0404c03>]</c0404c03> kernel_thread_helper+0x7/0x10
Feb 14 22:01:39 Pinte kernel: =======================
Feb 14 22:01:39 Pinte kernel: Code: 18 8b 5a 10 85 db 75 22 89 54 24 0c c7 44 24 08 95 05 00 00 c7 44 24 04 dd 71 c2 d0 c7 04 24 30 8d c2 d0 e8 65 19 81 ef eb 2e 90 <ff> 4b 08 83 7b 04 14 76 0d 89 d0 e8 10 b4 85 ef 90 ff 4b 04 eb
Feb 14 22:01:39 Pinte kernel: EIP: [<d0c1616f>]</d0c1616f> NdisFreePacket+0x32/0x66 [ndiswrapper] SS:ESP 0068:cfde3d84</ff>

I tried lots of drivers, but noone works (even a driver written for a SMC-Card doesn't work after a remove of that card.)

If you need other logs/configs, let me know.

Regards

[Giridhar Pemmasani]

Logged In: YES
user_id=918798
Originator: NO

Submit debug trace. You can do the following to obtain it:

rmmood ndiswrapper
cd ndiswrapper-1.37/driver
make DEBUG=4
insmod ./ndiswrapper.ko debug=0

then configure and use the interface. Right before ejecting the card

echo 4 > /proc/net/ndiswrapper/debug

this should log debug trace into system log file (usually /var/log/messages or /var/log/kern.log, but it may be different on your distribution). Submit that trace.
BTW, these instructions are in wiki entry Bugs which explains how to file bugs.

[Giridhar Pemmasani]

Logged In: YES
user_id=918798
Originator: NO

Also, email me ndis.o file.

[Giridhar Pemmasani]

Logged In: YES
user_id=918798
Originator: NO

If no useful feedback is given, this bug will be closed.

[Giridhar Pemmasani]

Logged In: YES
user_id=918798
Originator: NO

When you get the time to supply useful information when submitting bug report (and to follow up with requested information), reopen this or refile a new bug.