Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 03 Dec 2016 13:12:58 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-wireless@FreeBSD.org
Subject:   [Bug 215025] Panic in arptimer
Message-ID:  <bug-215025-21060@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D215025

            Bug ID: 215025
           Summary: Panic in arptimer
           Product: Base System
           Version: 11.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: wireless
          Assignee: freebsd-wireless@FreeBSD.org
          Reporter: boris.astardzhiev@gmail.com
                CC: freebsd-amd64@FreeBSD.org
                CC: freebsd-amd64@FreeBSD.org

Hello,

Ever since after upgrading to releng/11 I've been experiencing issues with =
my
ThinkPad R500's Intel wireless card which in fact used to work flawlessly in
10.x. Basically I'm unable to associate or rather it happens to associate
pretty slowly - 10+ minutes. Here's the card as reported by pciconf:

iwn0@pci0:3:0:0:        class=3D0x028000 card=3D0x12118086 chip=3D0x4237808=
6 rev=3D0x00
hdr=3D0x00
    vendor     =3D 'Intel Corporation'
    device     =3D 'PRO/Wireless 5100 AGN [Shiloh] Network Connection'
    class      =3D network

After upgrading to stable/11 due to unrelated reasons - commit
763ff62bcd42458bcc338e1ee34bd76e46f1a393 I experienced the following panic
which I think is related to my wireless card:

GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 9: general protection fault while in kernel mode
cpuid =3D 0; apic id =3D 00
instruction pointer     =3D 0x20:0xffffffff80c4d014
stack pointer           =3D 0x28:0xfffffe01165ed9b0
frame pointer           =3D 0x28:0xfffffe01165eda20
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 12 (swi4: clock (0))
trap number             =3D 9
panic: general protection fault
cpuid =3D 0
KDB: stack backtrace:
#0 0xffffffff80b26b57 at kdb_backtrace+0x67
#1 0xffffffff80adbaa2 at vpanic+0x182
#2 0xffffffff80adb913 at panic+0x43
#3 0xffffffff80fa6f71 at trap_fatal+0x331
#4 0xffffffff80fa6c11 at trap+0x721
#5 0xffffffff80f896c1 at calltrap+0x8
#6 0xffffffff80af5b4a at softclock_call_cc+0x18a
#7 0xffffffff80af60c4 at softclock+0x94
#8 0xffffffff80a95a4f at intr_event_execute_handlers+0x20f
#9 0xffffffff80a95cb6 at ithread_loop+0xc6
#10 0xffffffff80a92695 at fork_exit+0x85
#11 0xffffffff80f89bfe at fork_trampoline+0xe
Uptime: 3m38s
Dumping 343 out of 3993 MB:..5%..14%..24%..33%..42%..52%..61%..75%..84%..94%

Reading symbols from /boot/kernel/linux.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/linux_common.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux_common.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux_common.ko
Reading symbols from /boot/kernel/fuse.ko...Reading symbols from
/usr/lib/debug//boot/kernel/fuse.ko.debug...done.
done.
Loaded symbols for /boot/kernel/fuse.ko
Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linprocfs.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/kernel/ums.ko...Reading symbols from
/usr/lib/debug//boot/kernel/ums.ko.debug...done.
done.
Loaded symbols for /boot/kernel/ums.ko
Reading symbols from /boot/kernel/linux64.ko...Reading symbols from
/usr/lib/debug//boot/kernel/linux64.ko.debug...done.
done.
Loaded symbols for /boot/kernel/linux64.ko
Reading symbols from /boot/kernel/radeonkms.ko...Reading symbols from
/usr/lib/debug//boot/kernel/radeonkms.ko.debug...done.
done.
Loaded symbols for /boot/kernel/radeonkms.ko
Reading symbols from /boot/kernel/drm2.ko...Reading symbols from
/usr/lib/debug//boot/kernel/drm2.ko.debug...done.
done.
Loaded symbols for /boot/kernel/drm2.ko
Reading symbols from /boot/kernel/iicbus.ko...Reading symbols from
/usr/lib/debug//boot/kernel/iicbus.ko.debug...done.
done.
Loaded symbols for /boot/kernel/iicbus.ko
Reading symbols from /boot/kernel/iic.ko...Reading symbols from
/usr/lib/debug//boot/kernel/iic.ko.debug...done.
done.
Loaded symbols for /boot/kernel/iic.ko
Reading symbols from /boot/kernel/iicbb.ko...Reading symbols from
/usr/lib/debug//boot/kernel/iicbb.ko.debug...done.
done.
Loaded symbols for /boot/kernel/iicbb.ko
Reading symbols from /boot/kernel/radeonkmsfw_RV620_pfp.ko...Reading symbols
from /usr/lib/debug//boot/kernel/radeonkmsfw_RV620_pfp.ko.debug...done.
done.
Loaded symbols for /boot/kernel/radeonkmsfw_RV620_pfp.ko
Reading symbols from /boot/kernel/radeonkmsfw_RV620_me.ko...Reading symbols
from /usr/lib/debug//boot/kernel/radeonkmsfw_RV620_me.ko.debug...done.
done.
Loaded symbols for /boot/kernel/radeonkmsfw_RV620_me.ko
Reading symbols from /boot/kernel/radeonkmsfw_R600_rlc.ko...Reading symbols
from /usr/lib/debug//boot/kernel/radeonkmsfw_R600_rlc.ko.debug...done.
done.
Loaded symbols for /boot/kernel/radeonkmsfw_R600_rlc.ko
#0  doadump (textdump=3D<value optimized out>) at pcpu.h:222
222             __asm("movq %%gs:%1,%0" : "=3Dr" (td)
(kgdb) bt
#0  doadump (textdump=3D<value optimized out>) at pcpu.h:222
#1  0xffffffff80adb529 in kern_reboot (howto=3D260) at
/usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80adbadb in vpanic (fmt=3D<value optimized out>, ap=3D<value
optimized out>) at /usr/src/sys/kern/kern_shutdown.c:759
#3  0xffffffff80adb913 in panic (fmt=3D0x0) at
/usr/src/sys/kern/kern_shutdown.c:690
#4  0xffffffff80fa6f71 in trap_fatal (frame=3D0xfffffe01165ed8f0, eva=3D0) =
at
/usr/src/sys/amd64/amd64/trap.c:801
#5  0xffffffff80fa6c11 in trap (frame=3D0xfffffe01165ed8f0) at
/usr/src/sys/amd64/amd64/trap.c:198
#6  0xffffffff80f896c1 in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:236
#7  0xffffffff80c4d014 in arptimer (arg=3D<value optimized out>) at
/usr/src/sys/netinet/if_ether.c:287
#8  0xffffffff80af5b4a in softclock_call_cc (c=3D<value optimized out>, cc=
=3D<value
optimized out>, direct=3D<value optimized out>) at
/usr/src/sys/kern/kern_timeout.c:729
#9  0xffffffff80af60c4 in softclock (arg=3D<value optimized out>) at
/usr/src/sys/kern/kern_timeout.c:867
#10 0xffffffff80a95a4f in intr_event_execute_handlers (p=3D<value optimized=
 out>,
ie=3D<value optimized out>) at /usr/src/sys/kern/kern_intr.c:1262
#11 0xffffffff80a95cb6 in ithread_loop (arg=3D<value optimized out>) at
/usr/src/sys/kern/kern_intr.c:1275
#12 0xffffffff80a92695 in fork_exit (callout=3D0xffffffff80a95bf0 <ithread_=
loop>,
arg=3D0xfffff80003948b80, frame=3D0xfffffe01165edc00)
    at /usr/src/sys/kern/kern_fork.c:1040
#13 0xffffffff80f89bfe in fork_trampoline () at
/usr/src/sys/amd64/amd64/exception.S:611
#14 0x0000000000000000 in ?? ()
Current language:  auto; currently minimal
(kgdb) frame 7
#7  0xffffffff80c4d014 in arptimer (arg=3D<value optimized out>) at
/usr/src/sys/netinet/if_ether.c:287
287             IF_AFDATA_LOCK(ifp);
(kgdb) print ifp
$1 =3D (struct ifnet *) 0x7fffffffffffffff

kldstat:
 1   54 0xffffffff80200000 1fbbf10  kernel
 2    1 0xffffffff821bd000 9b220    linux.ko
 3    4 0xffffffff82259000 dc90     linux_common.ko
 4    1 0xffffffff82267000 1a5a0    fuse.ko
 5    1 0xffffffff82421000 aa40     linprocfs.ko
 6    1 0xffffffff8242c000 3799     ums.ko
 7    1 0xffffffff82430000 384db    linux64.ko
 8    1 0xffffffff82469000 e85ec    radeonkms.ko
 9    1 0xffffffff82552000 495af    drm2.ko
10    4 0xffffffff8259c000 265a     iicbus.ko
11    1 0xffffffff8259f000 1c78     iic.ko
12    1 0xffffffff825a1000 1e25     iicbb.ko
13    1 0xffffffff825a3000 103b     radeonkmsfw_RV620_pfp.ko
14    1 0xffffffff825a5000 5b3b     radeonkmsfw_RV620_me.ko
15    1 0xffffffff825ab000 1337     radeonkmsfw_R600_rlc.ko

And some dmesg on boot:
Dec  3 14:29:42 boris-fbsd kernel: wlan0: Ethernet address: 00:21:6b:59:b0:=
fa
Dec  3 14:29:42 boris-fbsd kernel: bge0: link state changed to DOWN
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode
rev=3D0x08530501
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN
Dec  3 14:29:42 boris-fbsd kernel: iwn0: device timeout
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode
rev=3D0x08530501
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN
Dec  3 14:29:42 boris-fbsd kernel: iwn0: scan timeout
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode
rev=3D0x08530501
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_intr: fatal firmware error
Dec  3 14:29:42 boris-fbsd kernel: firmware error log:
Dec  3 14:29:42 boris-fbsd kernel: error type      =3D "BAD_COMMAND" (0x000=
00007)
Dec  3 14:29:42 boris-fbsd kernel: program counter =3D 0x0000275C
Dec  3 14:29:42 boris-fbsd kernel: source line     =3D 0x00000428
Dec  3 14:29:42 boris-fbsd kernel: error data      =3D 0x0000000000000000
Dec  3 14:29:42 boris-fbsd kernel: branch link     =3D 0x0000275A0000275A
Dec  3 14:29:42 boris-fbsd kernel: interrupt link  =3D 0x0000091600000000
Dec  3 14:29:42 boris-fbsd kernel: time            =3D 15468
Dec  3 14:29:42 boris-fbsd kernel: driver status:
Dec  3 14:29:42 boris-fbsd kernel: tx ring  0: qid=3D0  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  1: qid=3D1  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  2: qid=3D2  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  3: qid=3D3  cur=3D2   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  4: qid=3D4  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  5: qid=3D5  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  6: qid=3D6  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  7: qid=3D7  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  8: qid=3D8  cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring  9: qid=3D9  cur=3D64  queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 10: qid=3D10 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 11: qid=3D11 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 12: qid=3D12 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 13: qid=3D13 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 14: qid=3D14 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 15: qid=3D15 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 16: qid=3D16 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 17: qid=3D17 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 18: qid=3D18 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: tx ring 19: qid=3D19 cur=3D0   queued=3D=
0=20=20
Dec  3 14:29:42 boris-fbsd kernel: rx ring: cur=3D5
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_panicked: controller panicked,
iv_state =3D 5; restarting
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN
Dec  3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode
rev=3D0x08530501
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP
Dec  3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN

I triggered the panic by issuing several times /etc/rc.d/netif restart

Regards,
Boris

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-215025-21060>