i've had this panic occur 6-8 times since i replaced wi cards, one on an openbsd client, the other on an openbsd AP running in hostap mode, with ral cards. it seems to be related to my brother using his winxp laptop to pull >200 KBps through the ral AP.
the AP is running a snapshot from Dec 8 that was updated from from a Jul 7 snapshot. i believe i've applied all the changes needed to keep the machine up-to-date, but am not certain of this. i had to pull the ddb info by typing it myself since this machine doesn't keep its console on com0 (it says "switching console to com0" then boots to C0), despite the correct entries being in ttys and boot.conf. below is the ddb output followed by dmesg: kernel: integer divide fault trap, code = 0 stopped at rt2661_setup_tx_desc+0xc5: idivl 0x1c(%ebp), %eax ddb> trace rt2661_setup_tx_desc(d0a2c000,d67aa070,8,0,5f4) at rt2661_setup_tx_desc+0xc5 rt2661_tx_data(d0a2c000,d2c48700,d0af3600,0) at rt2661_tx_data+0x3c1 rt2661_start(d0a2c030,d2c53808,6,23a4bb6) at rt2661_start+0x1b3 ether_output(d0a2c030,d2c48a00,d077ac6c,d2bf2ec4,d0a537b8) at ether_output+0x364 ip_output(d2c48a00,0,d077ac68,1,0,0,44,1) at ip_output+0x98b ip_forward(d2c48a00,0,0,50,d0a2b05c) at ip_forward+0x1a3 ipv4_input(d2c48a00,d0a1fc80,0,d08ad000) at ipv4_input+0x258 ipintr(58,10,10,10,d08ad000) at ipintr+0x64 Bad frame pointer: 0xd08aee24 ddb> ps PID PPID PGRP UID S FLAGS WAIT COMMAND 6973 1 6973 0 3 0x4082 ttyin getty 70 1 70 0 3 0x4082 ttyin getty 21812 1 21812 0 3 0x4082 ttyin getty 9937 1 9937 0 3 0x4082 ttyin getty 7567 1 7567 0 3 0x4082 ttyin getty 991 1 991 0 3 0x80 select cron 1263 1 32536 0 3 0x4083 select kdc 1274 1 1274 0 3 0x40180 select sendmail 8983 1 8983 0 3 0x80 select sshd 30465 1 30465 0 3 0x180 select inetd 3758 1 3758 77 3 0x180 poll dhcpd 15354 15405 15405 83 3 0x180 poll ntpd 15405 1 15405 0 3 0x80 poll ntpd 26211 6493 6493 73 3 0x180 poll syslogd 6493 1 6493 0 3 0x88 netio syslogd 13 0 0 0 3 0x100200 crypto_wa crypto 12 0 0 0 3 0x100200 aiodoned aiodoned 11 0 0 0 3 0x100200 syncer update 10 0 0 0 3 0x100200 cleaner cleaner 9 0 0 0 3 0x100200 reaper reaper 8 0 0 0 3 0x100200 pgdaemon pagedaemon 7 0 0 0 3 0x100200 pftm pfpurge 6 0 0 0 3 0x100200 wait wskbd_hotkey 5 0 0 0 3 0x100200 usbtsk usbtask 4 0 0 0 3 0x100200 usbevt usb0 3 0 0 0 3 0x100200 apmev apm0 2 0 0 0 3 0x100200 kmalloc kmthread 1 0 1 0 3 0x4080 wait init 0 -1 0 0 3 0x80200 scheduler swapper OpenBSD 4.0-current (GENERIC) #1247: Fri Dec 8 11:44:40 MST 2006 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium (P54C) ("GenuineIntel" 586-class) 167 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8 cpu0: F00F bug workaround installed real mem = 66678784 (65116K) avail mem = 52465664 (51236K) using 844 buffers containing 3457024 bytes (3376K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(27) BIOS, date 08/15/96, BIOS32 rev. 0 @ 0xfd971 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown apm0: flags 30102 dobusy 0 doidle 1 pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000 pcibios0: PCI BIOS has 6 Interrupt Routing table entries pcibios0: PCI Interrupt Router at 000:08:0 ("Intel 82371SB ISA" rev 0x00) pcibios0: PCI bus #0 is the last bus bios0: ROM list: 0xc0000/0x8000 cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 "Intel 82437VX" rev 0x01 pcib0 at pci0 dev 8 function 0 "Intel 82371SB ISA" rev 0x01 pciide0 at pci0 dev 8 function 1 "Intel 82371SB IDE" rev 0x00: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: <IBM-DAQA-32160> wd0: 16-sector PIO, LBA, 2014MB, 4124736 sectors wd0(pciide0:0:0): using PIO mode 0, DMA mode 1 pciide0: channel 1 disabled (no drives) uhci0 at pci0 dev 8 function 2 "Intel 82371SB USB" rev 0x01: irq 12 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered rl0 at pci0 dev 11 function 0 "Realtek 8139" rev 0x10: irq 11, address 00:08:54:24:e7:31 rlphy0 at rl0 phy 0: RTL internal PHY ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 10, address 00:08:a1:a4:b4:f4 ral0: MAC/BBP RT2561C, RF RT2527 vga1 at pci0 dev 19 function 0 "ATI Mach64 GT" rev 0x48 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: <PC speaker> spkr0 at pcppi0 lpt2 at isa0 port 0x3bc/4: polled npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask f3f5 netmask fff5 ttymask fff7 pctr: 586-class performance counters and user-level cycle counter enabled dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 WARNING: / was not properly unmounted ral0: timeout waiting for BBP cheers, jake