From owner-freebsd-wireless@freebsd.org Sat Dec 3 13:12:59 2016 Return-Path: Delivered-To: freebsd-wireless@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 67F3BC641C0 for ; Sat, 3 Dec 2016 13:12:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5773814C1 for ; Sat, 3 Dec 2016 13:12:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id uB3DCwbc044289 for ; Sat, 3 Dec 2016 13:12:59 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-wireless@FreeBSD.org Subject: [Bug 215025] Panic in arptimer Date: Sat, 03 Dec 2016 13:12:58 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: wireless X-Bugzilla-Version: 11.0-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: boris.astardzhiev@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-wireless@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter cc Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Dec 2016 13:12:59 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D215025 Bug ID: 215025 Summary: Panic in arptimer Product: Base System Version: 11.0-STABLE Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: wireless Assignee: freebsd-wireless@FreeBSD.org Reporter: boris.astardzhiev@gmail.com CC: freebsd-amd64@FreeBSD.org CC: freebsd-amd64@FreeBSD.org Hello, Ever since after upgrading to releng/11 I've been experiencing issues with = my ThinkPad R500's Intel wireless card which in fact used to work flawlessly in 10.x. Basically I'm unable to associate or rather it happens to associate pretty slowly - 10+ minutes. Here's the card as reported by pciconf: iwn0@pci0:3:0:0: class=3D0x028000 card=3D0x12118086 chip=3D0x4237808= 6 rev=3D0x00 hdr=3D0x00 vendor =3D 'Intel Corporation' device =3D 'PRO/Wireless 5100 AGN [Shiloh] Network Connection' class =3D network After upgrading to stable/11 due to unrelated reasons - commit 763ff62bcd42458bcc338e1ee34bd76e46f1a393 I experienced the following panic which I think is related to my wireless card: GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: Fatal trap 9: general protection fault while in kernel mode cpuid =3D 0; apic id =3D 00 instruction pointer =3D 0x20:0xffffffff80c4d014 stack pointer =3D 0x28:0xfffffe01165ed9b0 frame pointer =3D 0x28:0xfffffe01165eda20 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 12 (swi4: clock (0)) trap number =3D 9 panic: general protection fault cpuid =3D 0 KDB: stack backtrace: #0 0xffffffff80b26b57 at kdb_backtrace+0x67 #1 0xffffffff80adbaa2 at vpanic+0x182 #2 0xffffffff80adb913 at panic+0x43 #3 0xffffffff80fa6f71 at trap_fatal+0x331 #4 0xffffffff80fa6c11 at trap+0x721 #5 0xffffffff80f896c1 at calltrap+0x8 #6 0xffffffff80af5b4a at softclock_call_cc+0x18a #7 0xffffffff80af60c4 at softclock+0x94 #8 0xffffffff80a95a4f at intr_event_execute_handlers+0x20f #9 0xffffffff80a95cb6 at ithread_loop+0xc6 #10 0xffffffff80a92695 at fork_exit+0x85 #11 0xffffffff80f89bfe at fork_trampoline+0xe Uptime: 3m38s Dumping 343 out of 3993 MB:..5%..14%..24%..33%..42%..52%..61%..75%..84%..94% Reading symbols from /boot/kernel/linux.ko...Reading symbols from /usr/lib/debug//boot/kernel/linux.ko.debug...done. done. Loaded symbols for /boot/kernel/linux.ko Reading symbols from /boot/kernel/linux_common.ko...Reading symbols from /usr/lib/debug//boot/kernel/linux_common.ko.debug...done. done. Loaded symbols for /boot/kernel/linux_common.ko Reading symbols from /boot/kernel/fuse.ko...Reading symbols from /usr/lib/debug//boot/kernel/fuse.ko.debug...done. done. Loaded symbols for /boot/kernel/fuse.ko Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from /usr/lib/debug//boot/kernel/linprocfs.ko.debug...done. done. Loaded symbols for /boot/kernel/linprocfs.ko Reading symbols from /boot/kernel/ums.ko...Reading symbols from /usr/lib/debug//boot/kernel/ums.ko.debug...done. done. Loaded symbols for /boot/kernel/ums.ko Reading symbols from /boot/kernel/linux64.ko...Reading symbols from /usr/lib/debug//boot/kernel/linux64.ko.debug...done. done. Loaded symbols for /boot/kernel/linux64.ko Reading symbols from /boot/kernel/radeonkms.ko...Reading symbols from /usr/lib/debug//boot/kernel/radeonkms.ko.debug...done. done. Loaded symbols for /boot/kernel/radeonkms.ko Reading symbols from /boot/kernel/drm2.ko...Reading symbols from /usr/lib/debug//boot/kernel/drm2.ko.debug...done. done. Loaded symbols for /boot/kernel/drm2.ko Reading symbols from /boot/kernel/iicbus.ko...Reading symbols from /usr/lib/debug//boot/kernel/iicbus.ko.debug...done. done. Loaded symbols for /boot/kernel/iicbus.ko Reading symbols from /boot/kernel/iic.ko...Reading symbols from /usr/lib/debug//boot/kernel/iic.ko.debug...done. done. Loaded symbols for /boot/kernel/iic.ko Reading symbols from /boot/kernel/iicbb.ko...Reading symbols from /usr/lib/debug//boot/kernel/iicbb.ko.debug...done. done. Loaded symbols for /boot/kernel/iicbb.ko Reading symbols from /boot/kernel/radeonkmsfw_RV620_pfp.ko...Reading symbols from /usr/lib/debug//boot/kernel/radeonkmsfw_RV620_pfp.ko.debug...done. done. Loaded symbols for /boot/kernel/radeonkmsfw_RV620_pfp.ko Reading symbols from /boot/kernel/radeonkmsfw_RV620_me.ko...Reading symbols from /usr/lib/debug//boot/kernel/radeonkmsfw_RV620_me.ko.debug...done. done. Loaded symbols for /boot/kernel/radeonkmsfw_RV620_me.ko Reading symbols from /boot/kernel/radeonkmsfw_R600_rlc.ko...Reading symbols from /usr/lib/debug//boot/kernel/radeonkmsfw_R600_rlc.ko.debug...done. done. Loaded symbols for /boot/kernel/radeonkmsfw_R600_rlc.ko #0 doadump (textdump=3D) at pcpu.h:222 222 __asm("movq %%gs:%1,%0" : "=3Dr" (td) (kgdb) bt #0 doadump (textdump=3D) at pcpu.h:222 #1 0xffffffff80adb529 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:366 #2 0xffffffff80adbadb in vpanic (fmt=3D, ap=3D) at /usr/src/sys/kern/kern_shutdown.c:759 #3 0xffffffff80adb913 in panic (fmt=3D0x0) at /usr/src/sys/kern/kern_shutdown.c:690 #4 0xffffffff80fa6f71 in trap_fatal (frame=3D0xfffffe01165ed8f0, eva=3D0) = at /usr/src/sys/amd64/amd64/trap.c:801 #5 0xffffffff80fa6c11 in trap (frame=3D0xfffffe01165ed8f0) at /usr/src/sys/amd64/amd64/trap.c:198 #6 0xffffffff80f896c1 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:236 #7 0xffffffff80c4d014 in arptimer (arg=3D) at /usr/src/sys/netinet/if_ether.c:287 #8 0xffffffff80af5b4a in softclock_call_cc (c=3D, cc= =3D, direct=3D) at /usr/src/sys/kern/kern_timeout.c:729 #9 0xffffffff80af60c4 in softclock (arg=3D) at /usr/src/sys/kern/kern_timeout.c:867 #10 0xffffffff80a95a4f in intr_event_execute_handlers (p=3D, ie=3D) at /usr/src/sys/kern/kern_intr.c:1262 #11 0xffffffff80a95cb6 in ithread_loop (arg=3D) at /usr/src/sys/kern/kern_intr.c:1275 #12 0xffffffff80a92695 in fork_exit (callout=3D0xffffffff80a95bf0 , arg=3D0xfffff80003948b80, frame=3D0xfffffe01165edc00) at /usr/src/sys/kern/kern_fork.c:1040 #13 0xffffffff80f89bfe in fork_trampoline () at /usr/src/sys/amd64/amd64/exception.S:611 #14 0x0000000000000000 in ?? () Current language: auto; currently minimal (kgdb) frame 7 #7 0xffffffff80c4d014 in arptimer (arg=3D) at /usr/src/sys/netinet/if_ether.c:287 287 IF_AFDATA_LOCK(ifp); (kgdb) print ifp $1 =3D (struct ifnet *) 0x7fffffffffffffff kldstat: 1 54 0xffffffff80200000 1fbbf10 kernel 2 1 0xffffffff821bd000 9b220 linux.ko 3 4 0xffffffff82259000 dc90 linux_common.ko 4 1 0xffffffff82267000 1a5a0 fuse.ko 5 1 0xffffffff82421000 aa40 linprocfs.ko 6 1 0xffffffff8242c000 3799 ums.ko 7 1 0xffffffff82430000 384db linux64.ko 8 1 0xffffffff82469000 e85ec radeonkms.ko 9 1 0xffffffff82552000 495af drm2.ko 10 4 0xffffffff8259c000 265a iicbus.ko 11 1 0xffffffff8259f000 1c78 iic.ko 12 1 0xffffffff825a1000 1e25 iicbb.ko 13 1 0xffffffff825a3000 103b radeonkmsfw_RV620_pfp.ko 14 1 0xffffffff825a5000 5b3b radeonkmsfw_RV620_me.ko 15 1 0xffffffff825ab000 1337 radeonkmsfw_R600_rlc.ko And some dmesg on boot: Dec 3 14:29:42 boris-fbsd kernel: wlan0: Ethernet address: 00:21:6b:59:b0:= fa Dec 3 14:29:42 boris-fbsd kernel: bge0: link state changed to DOWN Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode rev=3D0x08530501 Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN Dec 3 14:29:42 boris-fbsd kernel: iwn0: device timeout Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode rev=3D0x08530501 Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN Dec 3 14:29:42 boris-fbsd kernel: iwn0: scan timeout Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode rev=3D0x08530501 Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_intr: fatal firmware error Dec 3 14:29:42 boris-fbsd kernel: firmware error log: Dec 3 14:29:42 boris-fbsd kernel: error type =3D "BAD_COMMAND" (0x000= 00007) Dec 3 14:29:42 boris-fbsd kernel: program counter =3D 0x0000275C Dec 3 14:29:42 boris-fbsd kernel: source line =3D 0x00000428 Dec 3 14:29:42 boris-fbsd kernel: error data =3D 0x0000000000000000 Dec 3 14:29:42 boris-fbsd kernel: branch link =3D 0x0000275A0000275A Dec 3 14:29:42 boris-fbsd kernel: interrupt link =3D 0x0000091600000000 Dec 3 14:29:42 boris-fbsd kernel: time =3D 15468 Dec 3 14:29:42 boris-fbsd kernel: driver status: Dec 3 14:29:42 boris-fbsd kernel: tx ring 0: qid=3D0 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 1: qid=3D1 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 2: qid=3D2 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 3: qid=3D3 cur=3D2 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 4: qid=3D4 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 5: qid=3D5 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 6: qid=3D6 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 7: qid=3D7 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 8: qid=3D8 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 9: qid=3D9 cur=3D64 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 10: qid=3D10 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 11: qid=3D11 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 12: qid=3D12 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 13: qid=3D13 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 14: qid=3D14 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 15: qid=3D15 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 16: qid=3D16 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 17: qid=3D17 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 18: qid=3D18 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: tx ring 19: qid=3D19 cur=3D0 queued=3D= 0=20=20 Dec 3 14:29:42 boris-fbsd kernel: rx ring: cur=3D5 Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_panicked: controller panicked, iv_state =3D 5; restarting Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN Dec 3 14:29:42 boris-fbsd kernel: iwn0: iwn_read_firmware: ucode rev=3D0x08530501 Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to UP Dec 3 14:29:42 boris-fbsd kernel: wlan0: link state changed to DOWN I triggered the panic by issuing several times /etc/rc.d/netif restart Regards, Boris --=20 You are receiving this mail because: You are the assignee for the bug.=