Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 08 May 2015 10:26:59 +0200
From:      Guido Falsi <mad@madpilot.net>
To:        freebsd-wireless@freebsd.org
Subject:   run panic double fault in nanobsd image, FreeBSD 10.1
Message-ID:  <554C7353.4050305@madpilot.net>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------050400020203020706060901
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hi, as the subject states I'm experiencing a panic in a custom nanobsd
image when trying to use a run device. The hardware is an ALIX board.

In this image I have a custom kernel (attached) and am loading some
modules with the following line in rc.conf:

kld_list="wlan wlan_wep wlan_ccmp wlan_tkip wlan_amrr if_run runfw"

I'm using sources from /releng/10.1 and have merged in r273636, since it
looked like it could be related.

This is some information from the device (from another machine):

> usbconfig -d ugen1.5 dump_device_desc
ugen1.5: <802.11 n WLAN Ralink> at usbus1, cfg=0 md=HOST spd=HIGH
(480Mbps) pwr=ON (450mA)

  bLength = 0x0012
  bDescriptorType = 0x0001
  bcdUSB = 0x0200
  bDeviceClass = 0x0000  <Probed by interface class>
  bDeviceSubClass = 0x0000
  bDeviceProtocol = 0x0000
  bMaxPacketSize0 = 0x0040
  idVendor = 0x148f
  idProduct = 0x5572
  bcdDevice = 0x0101
  iManufacturer = 0x0001  <Ralink>
  iProduct = 0x0002  <802.11 n WLAN>
  iSerialNumber = 0x0003  <1.0>
  bNumConfigurations = 0x0001

The system fails while configuring the wireless netowrk:

Mounting local file systems:.
Loading kernel modules:
run0: <1.0> on usbus1
run0: MAC/BBP RT5592 (rev 0x0222), RF RT5592 (MIMO 2T2R), address
e8:94:f6:14:f6:0f
Writing entropy file:.
Setting hostname: rvdemo.
vr1: link state changed to DOWN
wlan0: Ethernet address: e8:94:f6:14:f6:0f
Starting wpa_supplicant.
Starting dhclient.
wlan0: no link ...run0: firmware RT3071 ver. 0.33 loaded
vr1: link state changed to UP

Fatal double fault:
eip = 0xc324d1a2
esp = 0xd23b5fb0
ebp = 0xd23b6450
panic: double fault
KDB: stack backtrace:
db_trace_self_wrapper(c0909d9e,c09814ec,c0935832,c0999e88,c0999e88,...)
at db_trace_self_wrapper+0x2d/frame 0xc0999e54
panic(c0935832,d23b6450,d23b6450,d23b5fb0,c324d1a2,...) at
panic+0x85/frame 0xc0999e7c
dblfault_handler() at dblfault_handler+0x6c/frame 0xc0999e7c
--- trap 0x17, eip = 0xc324d1a2, esp = 0xd23b5fb0, ebp = 0xd23b6450 ---
run_select_chan_group(c2a74000,c32742d4,d23b6568,0,0,...) at
run_select_chan_group+0x12/frame 0xd23b6450
run_set_chan(c2a74000,c32742d4,d23b7630,0,0,...) at 0xc324b744/frame
0xd23b6e40
run_init_locked(c32742e4,0,c327025b,ec3,2db,...) at 0xc326bb3d/frame
0xd23b7be8
run_ioctl(c2aa1800,80206910,0,d23b7c98,c066f996,...) at
run_ioctl+0x281/frame 0xd23b7c44
parent_updown(c2aa1800,1,0,0,0,...) at parent_updown+0x22/frame 0xd23b7c58
taskqueue_run_locked(c3198e80,c3198e98,0,c08ffd39,0,...) at
taskqueue_run_locked+0xe6/frame 0xd23b7c98
taskqueue_thread_loop(c32880a4,d23b7d08,0,0,c0670380,...) at
taskqueue_thread_loop+0x97/frame 0xd23b7cd0
fork_exit(c0670380,c32880a4,d23b7d08) at fork_exit+0x67/frame 0xd23b7cf4
fork_trampoline() at fork_trampoline+0x8/frame 0xd23b7cf4
--- trap 0, eip = 0, esp = 0xd23b7d40, ebp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100054 ]
Stopped at      kdb_enter+0x3d: movl    $0,kdb_why
db>


This does not happen on a FreeBSD installation with the stock kernel nor
a full FreeBSD-current installation, and I suspect it could be triggered
by something missing in my trimmed down nanobsd installation, although
the driver should not crash like that anyway.

Also if I include WITNESS, INVARIANTS and DEADLKRES in the kernel the
bug does not show up. Only including DDB "luckily" allows me to
reproduce it.

If needed I can reboot the image and run diagnostic commands at the db>
prompt and am available for any further information or test which could
be needed.

I will file a full bug report in bugzilla if that's preferred.

Thanks in advance for any help.

-- 
Guido Falsi <mad@madpilot.net>

--------------050400020203020706060901
Content-Type: text/plain; charset=us-ascii;
 name="KERNEL"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="KERNEL"
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--------------050400020203020706060901--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?554C7353.4050305>