Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Aug 2014 16:51:00 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-wireless@FreeBSD.org
Subject:   [Bug 192641] New: [iwn] panic in AMPDU tx code "ni: no node"
Message-ID:  <bug-192641-21060@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D192641

            Bug ID: 192641
           Summary: [iwn] panic in AMPDU tx code "ni: no node"
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Only Me
          Priority: ---
         Component: wireless
          Assignee: freebsd-wireless@FreeBSD.org
          Reporter: adrian@freebsd.org

(kgdb) bt
#0  doadump (textdump=3D-1059352868) at pcpu.h:233
#1  0xc04f92cd in db_fncall (dummy1=3D-332454048, dummy2=3D0, dummy3=3D-951=
087536,
dummy4=3D0xec2f274c "=EF=BF=BD&R=EF=BF=BD=EF=BF=BD\216=EF=BF=BD=EF=BF=BD") =
at
/usr/home/adrian/work/freebsd/head/src/sys/ddb/db_command.c:578
#2  0xc04f8fab in db_command (cmd_table=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/ddb/db_command.c:449
#3  0xc04f8cf0 in db_command_loop () at
/usr/home/adrian/work/freebsd/head/src/sys/ddb/db_command.c:502
#4  0xc04fb640 in db_trap (type=3D<value optimized out>, code=3D<value opti=
mized
out>) at /usr/home/adrian/work/freebsd/head/src/sys/ddb/db_main.c:231
#5  0xc06c2bf4 in kdb_trap (type=3D<value optimized out>, code=3D<value opt=
imized
out>, tf=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/kern/subr_kdb.c:654
#6  0xc093df67 in trap (frame=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/i386/i386/trap.c:693
#7  0xc0926a7c in calltrap () at
/usr/home/adrian/work/freebsd/head/src/sys/i386/i386/exception.s:169
#8  0xc06c247d in kdb_enter (why=3D0xc09ba864 "panic", msg=3D<value optimiz=
ed out>)
at cpufunc.h:71
#9  0xc0687f61 in vpanic (fmt=3D<value optimized out>, ap=3D<value optimize=
d out>)
at /usr/home/adrian/work/freebsd/head/src/sys/kern/kern_shutdown.c:739
#10 0xc0687e13 in kassert_panic (fmt=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/kern/kern_shutdown.c:634
#11 0xc8f14751 in iwn_ampdu_tx_done (sc=3D0xc8f21000, qid=3D10, idx=3D<value
optimized out>, nframes=3D1, stat=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/modules/iwn/../../dev/iwn/if_iwn=
.c:3613
#12 0xc8f13eb5 in iwn5000_tx_done (sc=3D<value optimized out>, desc=3D<value
optimized out>, data=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/modules/iwn/../../dev/iwn/if_iwn=
.c:3411
#13 0xc8f0b9ff in iwn_notif_intr (sc=3D0xc8f21000) at
/usr/home/adrian/work/freebsd/head/src/sys/modules/iwn/../../dev/iwn/if_iwn=
.c:3696
#14 0xc8f0b2e0 in iwn_intr (arg=3D0xc8f21000) at
/usr/home/adrian/work/freebsd/head/src/sys/modules/iwn/../../dev/iwn/if_iwn=
.c:3995
#15 0xc0655913 in intr_event_execute_handlers (ie=3D<value optimized out>) =
at
/usr/home/adrian/work/freebsd/head/src/sys/kern/kern_intr.c:1252
#16 0xc0656213 in ithread_loop (arg=3D0xc85e6ee0) at
/usr/home/adrian/work/freebsd/head/src/sys/kern/kern_intr.c:1265
#17 0xc0652e2f in fork_exit (callout=3D0xc0656180 <ithread_loop>) at
/usr/home/adrian/work/freebsd/head/src/sys/kern/kern_fork.c:977
#18 0xc0926b24 in fork_trampoline () at
/usr/home/adrian/work/freebsd/head/src/sys/i386/i386/exception.s:278
Current language:  auto; currently minimal
(kgdb) frame 11
#11 0xc8f14751 in iwn_ampdu_tx_done (sc=3D0xc8f21000, qid=3D10, idx=3D<value
optimized out>, nframes=3D1, stat=3D<value optimized out>) at
/usr/home/adrian/work/freebsd/head/src/sys/modules/iwn/../../dev/iwn/if_iwn=
.c:3613
3613            KASSERT(ni !=3D NULL, ("no node"));
(kgdb) print ni
$1 =3D <value optimized out>
(kgdb)=20

.. and leading up to it:

Unread portion of the kernel message buffer:
iwn0: iwn_tx_data: m=3D0xc9572900: seqno (53004) (12) !=3D ring index (0) !
iwn0: iwn_tx_data: m=3D0xc896f200: seqno (53005) (13) !=3D ring index (1) !
panic: no node
cpuid =3D 1
KDB: stack backtrace:
db_trace_self_wrapper(c09bf552,ec2f29b8,fc,10000000,0,...) at
db_trace_self_wrapper+0x2d/frame 0xec2f29a0
kdb_backtrace(c09fc9a7,1,c8f18b78,ec2f2a8c,ec2f2a30,...) at
kdb_backtrace+0x30/frame 0xec2f2a08
vpanic(c0af9f18,100,c8f18b78,ec2f2a8c,4000ace,...) at vpanic+0x11d/frame
0xec2f2a44
kassert_panic(c8f18b78,5,cdd25c00,cdd25c00,c8d6dc00,...) at
kassert_panic+0x153/frame 0xec2f2a80
iwn_ampdu_tx_done(0,1,cae8f028,c0671aa1,c8f2100c,...) at
iwn_ampdu_tx_done+0x251/frame 0xec2f2adc
iwn5000_tx_done(c8f21000,cae8f000,c8f3a934,bd2,c8f0dea0,...) at
iwn5000_tx_done+0xe5/frame 0xec2f2b20
iwn_notif_intr(c8f2101c,0,c8f18029,f5a,c0b07b80,...) at
iwn_notif_intr+0x4bf/frame 0xec2f2bd0
iwn_intr(c8f21000,c09b3975,4e0,c09b3b43,c09b3b68,...) at iwn_intr+0x7c0/fra=
me
0xec2f2c3c
intr_event_execute_handlers(c7492bc0,c86c6480,c09b3975,55a,3c9,...) at
intr_event_execute_handlers+0xe3/frame 0xec2f2c80
ithread_loop(c85e6ee0,ec2f2d08,c09b367a,3c9,0,...) at ithread_loop+0x93/fra=
me
0xec2f2ccc
fork_exit(c0656180,c85e6ee0,ec2f2d08) at fork_exit+0x7f/frame 0xec2f2cf4
fork_trampoline() at fork_trampoline+0x8/frame 0xec2f2cf4
--- trap 0, eip =3D 0, esp =3D 0xec2f2d40, ebp =3D 0 ---
KDB: enter: panic

.. so something went a little pear shaped and we didn't handle it right.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-192641-21060>