Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 Feb 2023 21:25:40 +0000
From:      bugzilla-noreply@freebsd.org
To:        wireless@FreeBSD.org
Subject:   [Bug 269842] iwlwifi: crash on ifconfig wlan0 destroy
Message-ID:  <bug-269842-21060@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D269842

            Bug ID: 269842
           Summary: iwlwifi: crash on ifconfig wlan0 destroy
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: wireless
          Assignee: wireless@FreeBSD.org
          Reporter: mizhka@FreeBSD.org

Crash on fresh CURRENT main-n261047-58e3631bd08c: Tue Feb 21 17:09:40 MSK 2=
023

[170799] iwlwifi0: Microcode SW error detected. Restarting 0x0.
[170799] iwlwifi0: Start IWL Error Log Dump:
[170799] iwlwifi0: Transport status: 0x0000004B, valid: 6
[170799] iwlwifi0: Loaded firmware version: 73.35c0a2c6.0 cc-a0-73.ucode
[170799] iwlwifi0: 0x00000071 | NMI_INTERRUPT_UMAC_FATAL=20=20=20=20
[170799] iwlwifi0: 0x4000A2F0 | trm_hw_status0
[170799] iwlwifi0: 0x00000000 | trm_hw_status1
[170799] iwlwifi0: 0x004FBD66 | branchlink2
[170799] iwlwifi0: 0x00015074 | interruptlink1
[170799] iwlwifi0: 0x00015074 | interruptlink2
[170799] iwlwifi0: 0x00004D30 | data1
[170799] iwlwifi0: 0x00001000 | data2
[170799] iwlwifi0: 0x00000000 | data3
[170799] iwlwifi0: 0x89008A52 | beacon time
[170799] iwlwifi0: 0x1F7AC5D1 | tsf low
[170799] iwlwifi0: 0x00000114 | tsf hi
[170799] iwlwifi0: 0x00000000 | time gp1
[170799] iwlwifi0: 0x0D180284 | time gp2
[170799] iwlwifi0: 0x00000001 | uCode revision type
[170799] iwlwifi0: 0x00000049 | uCode version major
[170799] iwlwifi0: 0x35C0A2C6 | uCode version minor
[170799] iwlwifi0: 0x00000340 | hw version
[170799] iwlwifi0: 0x00C89000 | board version
[170799] iwlwifi0: 0x809AF503 | hcmd
[170799] iwlwifi0: 0x62EA8000 | isr0
[170799] iwlwifi0: 0x00000000 | isr1
[170799] iwlwifi0: 0x08F00002 | isr2
[170799] iwlwifi0: 0x00C000C9 | isr3
[170799] iwlwifi0: 0x00000000 | isr4
[170799] iwlwifi0: 0x01E7001C | last cmd Id
[170799] iwlwifi0: 0x00004D30 | wait_event
[170799] iwlwifi0: 0x00000854 | l2p_control
[170799] iwlwifi0: 0x00000000 | l2p_duration
[170799] iwlwifi0: 0x0000000F | l2p_mhvalid
[170799] iwlwifi0: 0x00000000 | l2p_addr_match
[170799] iwlwifi0: 0x00000009 | lmpm_pmg_sel
[170799] iwlwifi0: 0x00000000 | timestamp
[170799] iwlwifi0: 0x00001050 | flow_handler
[170799] iwlwifi0: Start IWL Error Log Dump:
[170799] iwlwifi0: Transport status: 0x0000004B, valid: 7
[170799] iwlwifi0: 0x20003418 | ADVANCED_SYSASSERT
[170799] iwlwifi0: 0x00000000 | umac branchlink1
[170799] iwlwifi0: 0x80455D6C | umac branchlink2
[170799] iwlwifi0: 0x80455BE8 | umac interruptlink1
[170799] iwlwifi0: 0x00000000 | umac interruptlink2
[170799] iwlwifi0: 0x00000000 | umac data1
[170799] iwlwifi0: 0x00000001 | umac data2
[170799] iwlwifi0: 0x00000000 | umac data3
[170799] iwlwifi0: 0x00000049 | umac major
[170799] iwlwifi0: 0x35C0A2C6 | umac minor
[170799] iwlwifi0: 0x0D18027E | frame pointer
[170799] iwlwifi0: 0xC0886B5C | stack pointer
[170799] iwlwifi0: 0x00670128 | last host cmd
[170799] iwlwifi0: 0x00000000 | isr status reg
[170799] iwlwifi0: IML/ROM dump:
[170799] iwlwifi0: 0x00000003 | IML/ROM error/state
[170799] iwlwifi0: 0x00006149 | IML/ROM data1
[170799] iwlwifi0: 0x00000080 | IML/ROM WFPM_AUTH_KEY_0
[170799] iwlwifi0: Fseq Registers:
[170799] iwlwifi0: 0x60000000 | FSEQ_ERROR_CODE
[170799] iwlwifi0: 0x80290021 | FSEQ_TOP_INIT_VERSION
[170799] iwlwifi0: 0x00050008 | FSEQ_CNVIO_INIT_VERSION
[170799] iwlwifi0: 0x0000A503 | FSEQ_OTP_VERSION
[170799] iwlwifi0: 0x80000003 | FSEQ_TOP_CONTENT_VERSION
[170799] iwlwifi0: 0x4552414E | FSEQ_ALIVE_TOKEN
[170799] iwlwifi0: 0x00100530 | FSEQ_CNVI_ID
[170799] iwlwifi0: 0x00000532 | FSEQ_CNVR_ID
[170799] iwlwifi0: 0x00100530 | CNVI_AUX_MISC_CHIP
[170799] iwlwifi0: 0x00000532 | CNVR_AUX_MISC_CHIP
[170799] iwlwifi0: 0x05B0905B | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
[170799] iwlwifi0: 0x0000025B | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
[170799] iwlwifi0: WRT: Collecting data: ini trigger 4 fired (delay=3D0ms).
[170799] iwlwifi0: FW error in SYNC CMD MAC_CONTEXT_CMD
[170799] #0 0xffffffff80e5c4db at linux_dump_stack+0x1b
[170799] #1 0xffffffff8441b0e4 at iwl_trans_txq_send_hcmd+0x414
[170799] #2 0xffffffff843c317e at iwl_trans_send_cmd+0xce
[170799] #3 0xffffffff84402b2f at iwl_mvm_send_cmd_pdu+0x6f
[170799] #4 0xffffffff843d31ad at iwl_mvm_mac_ctxt_remove+0x7d
[170799] #5 0xffffffff843d6e8c at iwl_mvm_mac_remove_interface+0x1ac
[170799] #6 0xffffffff80e56bd5 at lkpi_80211_mo_remove_interface+0x65
[170799] #7 0xffffffff80e54015 at lkpi_ic_vap_delete+0xb5
[170799] #8 0xffffffff80d1b249 at if_clone_destroyif+0x239
[170799] #9 0xffffffff80d1af94 at if_clone_destroy+0x114
[170799] #10 0xffffffff80d17cd1 at ifioctl+0x741
[170799] #11 0xffffffff80c61462 at kern_ioctl+0x202
[170799] #12 0xffffffff80c611aa at sys_ioctl+0x12a
[170799] #13 0xffffffff810c93de at amd64_syscall+0x12e
[170799] #14 0xffffffff8109c5eb at fast_syscall_common+0xf8
[170799] iwlwifi0: Failed to remove MAC context: -5
<118>[170799] 2022-12-06T08:00:29.934845+03:00 tamagawa.unclebear.ru
dhclient[23576] receive_packet failed on wlan0: Device not configured
<118>[170799] 2022-12-06T08:00:29.934925+03:00 tamagawa.unclebear.ru
dhclient[23576] ioctl(SIOCGIFFLAGS) on wlan0: Operation not permitted
<118>[170799] 2022-12-06T08:00:29.934980+03:00 tamagawa.unclebear.ru
dhclient[23576] Interface wlan0 no longer appears valid.
<118>2022-12-06T08:00:29.935037+03:00 tamagawa.unclebear.ru dhclient[23576]=
 No
live interfaces to poll on - exiting.
<118>[170799] 2022-12-06T08:00:29.935192+03:00 tamagawa.unclebear.ru
dhclient[23576] exiting.
<118>[170799] 2022-12-06T08:00:29.935568+03:00 tamagawa.unclebear.ru
dhclient[23576] connection closed
<118>[170799] 2022-12-06T08:00:29.935625+03:00 tamagawa.unclebear.ru
dhclient[23576] exiting.
<6>[170799] pid 23262 (wpa_supplicant), jid 0, uid 0: exited on signal 11 (=
core
dumped)
[170800] iwlwifi0: Failed to synchronize multicast groups update
[170800] iwlwifi0: Failed to send flush command (-5)
[170800] iwlwifi0: flush request fail
[170800] iwlwifi0: Couldn't send the SESSION_PROTECTION_CMD
<6>[170800] wlan0: link state changed to DOWN
[170800] iwlwifi0: iwl_trans_wait_txq_empty bad state =3D 0
[170800] iwlwifi0: Failed to trigger RX queues sync (-5)
[170800] iwlwifi0: Failed to send MAC context (action:2): -5
[170800] iwlwifi0: Failed to synchronize multicast groups update
[170800] iwlwifi0: Failed to send MAC context (action:2): -5
[170800] iwlwifi0: failed to update MAC 0xfffffe01b46f2c9eM
[170800] iwlwifi0: Failed to remove station. Id=3D0
[170800] iwlwifi0: failed to remove AP station
[170800] iwlwifi0: Failed to send MAC context (action:2): -5
[170800] iwlwifi0: failed to update MAC 0xfffffe01b46f2c9eM (clear after
unassoc)
[170800] iwlwifi0: Failed to synchronize multicast groups update
[170800] iwlwifi0: Failed to send MAC context (action:2): -5
[170800] iwlwifi0: failed to update MAC 0xfffffe01b46f2c9eM
[170800] iwlwifi0: Failed to send binding (action:3): -5
[170800] iwlwifi0: PHY ctxt cmd error. ret=3D-5
[170800]=20
[170800]=20
[170800] Fatal trap 9: general protection fault while in kernel mode
[170800] cpuid =3D 0; apic id =3D 00
[170800] instruction pointer    =3D 0x20:0xffffffff80bc4c39
[170800] stack pointer          =3D 0x0:0xfffffe0169b4ea10
[170800] frame pointer          =3D 0x0:0xfffffe0169b4ea50
[170800] code segment           =3D base 0x0, limit 0xfffff, type 0x1b
[170800]                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
[170800] processor eflags       =3D interrupt enabled, resume, IOPL =3D 0
[170800] current process                =3D 55330 (ifconfig)
[170800] rdi: deadc0dedeadc0f6 rsi: fffffe0157cab720 rdx:                0
[170800] rcx:              865  r8: ffffffff81b10998  r9:                0
[170800] rax:                1 rbx: fffffe0174406000 rbp: fffffe0169b4ea50
[170800] r10:                0 r11:         8103b345 r12: ffffffff81215df1
[170800] r13:              865 r14: deadc0dedeadc10e r15: fffff80298a5f800
[170800] trap number            =3D 9
[170800] WARNING !drm_modeset_is_locked(&crtc->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:619
[170800] WARNING !drm_modeset_is_locked(&crtc->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:619
[170800] WARNING !drm_modeset_is_locked(&crtc->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:619
[170800] WARNING !drm_modeset_is_locked(&crtc->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:619
[170800] WARNING !drm_modeset_is_locked(&dev->mode_config.connection_mutex)
failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:669
[170800] WARNING !drm_modeset_is_locked(&dev->mode_config.connection_mutex)
failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:669
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800] WARNING !drm_modeset_is_locked(&plane->mutex) failed at
/usr/home/mizhka/repo/fbsd/drm-kmod/drivers/gpu/drm/drm_atomic_helper.c:894
[170800]                                 panic: general protection fault
[170800] cpuid =3D 0
[170800] time =3D 1670302830
[170800] KDB: stack backtrace:
[170800] db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame
0xfffffe0169b4e830
[170800] vpanic() at vpanic+0x151/frame 0xfffffe0169b4e880
[170800] panic() at panic+0x43/frame 0xfffffe0169b4e8e0
[170800] trap_fatal() at trap_fatal+0x409/frame 0xfffffe0169b4e940
[170800] calltrap() at calltrap+0x8/frame 0xfffffe0169b4e940
[170800] --- trap 0x9, rip =3D 0xffffffff80bc4c39, rsp =3D 0xfffffe0169b4ea=
10, rbp
=3D 0xfffffe0169b4ea50 ---
[170800] __mtx_lock_flags() at __mtx_lock_flags+0x49/frame 0xfffffe0169b4ea=
50
[170800] ieee80211_free_node() at ieee80211_free_node+0x34/frame
0xfffffe0169b4ea90
[170800] ieee80211_node_vdetach() at ieee80211_node_vdetach+0x2b/frame
0xfffffe0169b4eab0
[170800] ieee80211_vap_detach() at ieee80211_vap_detach+0x60e/frame
0xfffffe0169b4eb00
[170800] lkpi_ic_vap_delete() at lkpi_ic_vap_delete+0xca/frame
0xfffffe0169b4eb40
[170800] if_clone_destroyif() at if_clone_destroyif+0x239/frame
0xfffffe0169b4eb90
[170800] if_clone_destroy() at if_clone_destroy+0x114/frame 0xfffffe0169b4e=
bd0
[170800] ifioctl() at ifioctl+0x741/frame 0xfffffe0169b4ecc0
[170800] kern_ioctl() at kern_ioctl+0x202/frame 0xfffffe0169b4ed30
[170800] sys_ioctl() at sys_ioctl+0x12a/frame 0xfffffe0169b4ee00
[170800] amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0169b4ef30
[170800] fast_syscall_common() at fast_syscall_common+0xf8/frame
0xfffffe0169b4ef30
[170800] --- syscall (54, FreeBSD ELF64, sys_ioctl), rip =3D 0x4eab25ba97a,=
 rsp =3D
0x4eaadf7a4a8, rbp =3D 0x4eaadf7a4c0 ---
[170800] KDB: enter: panic

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-269842-21060>