From owner-freebsd-bugs@FreeBSD.ORG Sun Aug 14 17:30:09 2011 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A38B11065673 for ; Sun, 14 Aug 2011 17:30:09 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 6B8138FC14 for ; Sun, 14 Aug 2011 17:30:09 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.4/8.14.4) with ESMTP id p7EHU9ZU001195 for ; Sun, 14 Aug 2011 17:30:09 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.4/8.14.4/Submit) id p7EHU9hI001194; Sun, 14 Aug 2011 17:30:09 GMT (envelope-from gnats) Resent-Date: Sun, 14 Aug 2011 17:30:09 GMT Resent-Message-Id: <201108141730.p7EHU9hI001194@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Colin Percival Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35]) by hub.freebsd.org (Postfix) with ESMTP id 4FFC8106564A for ; Sun, 14 Aug 2011 17:22:26 +0000 (UTC) (envelope-from cperciva@xps.daemonology.net) Received: from xps.daemonology.net (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx2.freebsd.org (Postfix) with SMTP id 16CE314EAC5 for ; Sun, 14 Aug 2011 17:22:26 +0000 (UTC) Received: (qmail 16997 invoked by uid 1001); 14 Aug 2011 17:22:25 -0000 Message-Id: <20110814172225.16996.qmail@xps.daemonology.net> Date: 14 Aug 2011 17:22:25 -0000 From: Colin Percival To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: kern/159768: [iwn] [panic] iwn_auth being called with wrong ni_chan X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Colin Percival List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Aug 2011 17:30:09 -0000 >Number: 159768 >Category: kern >Synopsis: [iwn] [panic] iwn_auth being called with wrong ni_chan >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 14 17:30:09 UTC 2011 >Closed-Date: >Last-Modified: >Originator: Colin Percival >Release: FreeBSD 9.0-BETA1 amd64 >Organization: >Environment: Dell Latitude E5420, containing an Intel Centrino Advanced-N 6205 9.0-BETA1, amd64, GENERIC minus debug options. iwn0 is wlan0; wlan0 is running with wpa_supplicant. >Description: panic reading 0xffff. kgdb shows iwn0 taskq at line 5294 of if_iwn.c: if (IEEE80211_IS_CHAN_2GHZ(ni->ni_chan)) and ni_chan is 0xffff (aka. IEEE80211_CHAN_ANY). The last entry in dmesg before the panic is wlan0: ieee80211_new_state_locked: pending INIT -> AUTH transition lost which may explain how we got into iwn_auth without having ni_chan changed from IEEE80211_CHAN_ANY to a valid channel. >How-To-Repeat: Only happened once so far. My laptop was sitting at the edge of the access point's range and wlan0 lost its connection and re-connected 239 times before the panic; so this might be a disconnection/reconnection race condition of some sort. I can provide the crashdump (or load it up in kgdb here) if there's any more information to be gleaned from it. >Fix: >Release-Note: >Audit-Trail: >Unformatted: