i386/5152: wpi media type change causes panic

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

i386/5152: wpi media type change causes panic

Ben Lovett
>Number:         5152
>Category:       i386
>Synopsis:       panic on wpi media type change
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    bugs
>State:          open
>Quarter:        
>Keywords:      
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jun 10 17:10:02 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     Ben Lovett
>Release:        3.9-current 20060610
>Organization:
none
>Environment:
       
        System      : OpenBSD 3.9-current
        Architecture: OpenBSD.i386
        Machine     : i386
>Description:
        Setting the media type for wpi0 before bringing the interface up results in a panic.

A panic does not occur if the interface is brought up before attempting to change the media type.

panic: ieee80211_newstate: bogus xmit rate 9 setup
ddb> ps
   PID   PPID   PGRP    UID  S       FLAGS  WAIT       COMMAND
  7376      1   7376   1000  3     0x40184  select     ssh-agent
  8930  11814  11814    507  3      0x4184  select     qmgr
 28571  11814  11814    507  3      0x4184  select     pickup
 11814      1  11814      0  3      0x418c  select     master
 16498   7141   2187    502  3      0x4185  poll       mysqld
 24683      1  24683      0  3      0x4086  ttyin      getty
  6419      1   6419      0  3      0x4086  ttyin      getty
 16644      1  16644      0  3      0x4086  ttyin      getty
  4419      1   4419      0  3      0x4086  ttyin      getty
 29737      1  29737   1000  3      0x4086  ttyin      zsh
  7906      1   7906      0  3        0x84  select     cron
  7141      1   2187      0  3      0x4086  pause      sh
 16861      1  16861      0  3        0x84  select     sshd
  8856  25481  25481     83  3       0x184  poll       ntpd
 25481      1  25481      0  3        0x84  poll       ntpd
  3132   6226   6226     73  2       0x184             syslogd
  6226      1   6226      0  3        0x84  netio      syslogd
 24695      1  24695     77  3       0x184  poll       dhclient
  2668      1   2187      0  3        0x86  poll       dhclient
    16      0      0      0  3    0x100204  crypto_wa  crypto
    15      0      0      0  3    0x100204  aiodoned   aiodoned
    14      0      0      0  3    0x100204  syncer     update
    13      0      0      0  3    0x100204  cleaner    cleaner
    12      0      0      0  3    0x100204  reaper     reaper
    11      0      0      0  3    0x100204  pgdaemon   pagedaemon
    10      0      0      0  3    0x100204  pftm       pfpurge
     9      0      0      0  3    0x100204  wait       wskbd_hotkey
     8      0      0      0  3    0x100204  usbevt     usb4
     7      0      0      0  3    0x100204  usbevt     usb3
     6      0      0      0  3    0x100204  usbevt     usb2
     5      0      0      0  3    0x100204  usbevt     usb1
     4      0      0      0  3    0x100204  usbtsk     usbtask
     3      0      0      0  3    0x100204  usbevt     usb0
     2      0      0      0  3    0x100204  kmalloc    kmthread
     1      0      1      0  3      0x4084  wait       init
     0     -1      0      0  3     0x80204  scheduler  swapper
ddb> trace
Debugger(e90ea340,1,d19be000,0,d19b0b00) at Debugger+0x4
panic(d064acf9,d064ad18,9,4,1) at panic+0x63
ieee80211_rssadapt_choose(d19be030,4,10,0,10) at ieee80211_rssadapt_choose
wpi_newstate(d19be030,4,10,16) at wpi_newstate+0x9a
ieee80211_recv_mgmt(d19be030,d7ef8e00,d19b0b00,10,35) at ieee80211_recv_mgmt+0x
549
ieee80211_input(d19be030,d7ef8e00,d19b0b00,35,0,d7ee8018) at ieee80211_input+0x
2eb
wpi_rx_intr(d19be000,d7ee8000,d19beeb8,1b,0) at wpi_rx_intr+0x3c5
wpi_notif_intr(d19be000,d0841000,0,d0842e24) at wpi_notif_intr+0xee
wpi_intr(d19be000) at wpi_intr+0xca
Xrecurse_legacy11() at Xrecurse_legacy11+0xb6
--- interrupt ---
apm_cpu_idle(b0,d07103c0,d0710220,7fffffff,d03273eb) at apm_cpu_idle+0x42
idle_loop(d07beb80,28,0,0,80000000) at idle_loop+0x5
bpendtsleep(d0710220,4,d065b031,0,0,ffffffff,d0612d32,0) at bpendtsleep
uvm_scheduler(d071021c,3,0,d0612d32,0) at uvm_scheduler+0x6b
check_console(0,0,0,0,0) at check_console

System dmesg:
OpenBSD 3.9-current (XENON) #45: Sat Jun 10 09:32:27 PDT 2006
    [hidden email]:/usr/src/sys/arch/i386/compile/XENON
cpu0: Genuine Intel(R) CPU T2300 @ 1.66GHz ("GenuineIntel" 686-class) 1.67 GHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,VMX,EST,TM2
cpu signature           : 0x000006e8
MSR_PLATFORM_ID         : 0x00140000d804852c
MSR_EBL_CR_POWERON      : 0x0000000042880000
MSR_FSB_FREQ            : 0x0000000000000133
cpu0: unknown Enhanced SpeedStep CPU, msr 0x06130a2c06000a2c
cpu0: using only highest and lowest power states
cpu0: Enhanced SpeedStep 1667 MHz (1404 mV): speeds: 1667, 1000 MHz
real mem  = 1063419904 (1038496K)
avail mem = 962367488 (939812K)
using 4256 buffers containing 53272576 bytes (52024K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 03/22/06, BIOS32 rev. 0 @ 0xffa10, SMBIOS rev. 2.4 @ 0xf71f0 (61 entries)
bios0: Dell Inc. Latitude D620
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfac40/224 (12 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371 ISA and IDE" rev 0x00)
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc0000/0xe800! 0xce800/0x1800
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82945GM MCH" rev 0x03
vga1 at pci0 dev 2 function 0 "Intel 82945GM Video" rev 0x03: aperture at 0xdff00000, size 0x10000000
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
"Intel 82945GM Video" rev 0x03 at pci0 dev 2 function 1 not configured
azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x01: irq 10
azalia0: host: High Definition Audio rev. 1.0
azalia0: codec: 0x04x/0x8384 (rev. 34.1), HDA version 1.0
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x01
pci1 at ppb0 bus 1
ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x01
pci2 at ppb1 bus 2
wpi0 at pci2 dev 0 function 0 "Intel PRO/Wireless 3945ABG" rev 0x02: irq 11channel 1 pwr1 0x0085 pwr2 0x0083
channel 2 pwr1 0x0082 pwr2 0x0084
channel 3 pwr1 0x0073 pwr2 0x0072
channel 4 pwr1 0x0071 pwr2 0x0073
channel 5 pwr1 0x0000 pwr2 0x0000
channel 6 pwr1 0x007a pwr2 0x007b
channel 7 pwr1 0x007b pwr2 0x007a
channel 8 pwr1 0x0080 pwr2 0x0080
channel 9 pwr1 0x0080 pwr2 0x0080
channel 10 pwr1 0x0000 pwr2 0x0000
channel 11 pwr1 0x0003 pwr2 0x0003
channel 12 pwr1 0xfffb pwr2 0xfffb
channel 13 pwr1 0x0003 pwr2 0x0003
channel 14 pwr1 0xfffb pwr2 0xfffb
, address 00:13:02:1f:fd:5f
ppb2 at pci0 dev 28 function 2 "Intel 82801GB PCIE" rev 0x01
pci3 at ppb2 bus 3
bge0 at pci3 dev 0 function 0 "Broadcom BCM5752" rev 0x02, BCM5752 A2 (0x6002):irq 5bge0: firmware handshake timed out
, address 00:14:22:f5:5e:6b
brgphy0 at bge0 phy 1: BCM5752 10/100/1000baseT PHY, rev. 0
uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x01: irq 9
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x01: irq 10
usb1 at uhci1: USB revision 1.0
uhub1 at usb1
uhub1: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x01: irq 5
usb2 at uhci2: USB revision 1.0
uhub2 at usb2
uhub2: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x01: irq 3
usb3 at uhci3: USB revision 1.0
uhub3 at usb3
uhub3: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x01: irq 9
usb4 at ehci0: USB revision 2.0
uhub4 at usb4
uhub4: Intel EHCI root hub, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
ppb3 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xe1
pci4 at ppb3 bus 4
ichpcib0 at pci0 dev 31 function 0 "Intel 82801GBM LPC" rev 0x01: PM disabled
pciide0 at pci0 dev 31 function 2 "Intel 82801GBM SATA" rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <Hitachi HTS721080G9SA00>
wd0: 16-sector PIO, LBA48, 76319MB, 156301488 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <SONY, DVD+-RW DW-Q58A, UDS1> SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 82801GB SMBus" rev 0x01: SMI
iic0 at ichiic0
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
biomask e7ed netmask efed ttymask ffef
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
uhub5 at uhub0 port 2
uhub5: Dell product 0xa005, rev 2.00/50.18, addr 2
uhub5: 4 ports with 0 removable, self powered
uhub6 at uhub5 port 3
uhub6: vendor 0x0b97 product 0x7761, rev 1.10/1.10, addr 3
uhub6: 3 ports with 2 removable, bus powered
ugen0 at uhub6 port 2
ugen0: O2 O2Micro CCID SC Reader, rev 1.10/1.10, addr 4
ubt0 at uhub5 port 4 configuration 1 interface 0
ubt0: Dell Bluetooth 350, rev 2.00/24.22, addr 5
ubt0: Interface 0 endpoints: interrupt=0x81, bulk-in=0x82, bulk-out=0x2
ubt0: Interface 1 (alt.config 5) endpoints: isoc-in=0x83, isoc-out=0x3; wMaxPacketSize=49; nframes=6, buffer size=294
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
setting h/w config 1200
microcode alive notification version 10d00 alive 1
temperature -206
wpi0: fatal firmware error
wpi0: timeout resetting Rx ring
wpi0: configure command failed
wpi0: could not configure device
wpi0: timeout resetting Tx ring 1
wpi0: timeout resetting Tx ring 3
wpi0: timeout resetting Tx ring 4
setting h/w config 1200
microcode alive notification version 10d00 alive 1
temperature -209
rx tail flags error 702
scan finished
config chan 1 flags 8005 cck f ofdm 15
TSF bintval=100 tstamp=1111896720115, init=60685
config chan 1 flags 8005
wpi0: fatal firmware error
wpi0: timeout resetting Rx ring
setting h/w config 1200
microcode alive notification version 10d00 alive 1
temperature -165
rx tail flags error 702
scan finished
config chan 1 flags 8005 cck f ofdm 15
TSF bintval=100 tstamp=1112265318797, init=102003
config chan 1 flags 8005
rx tail flags error 702
setting h/w config 1200
microcode alive notification version 10d00 alive 1
temperature -165
rx tail flags error 702
scan finished
config chan 1 flags 8005 cck f ofdm 15
rx tail flags error 702
TSF bintval=100 tstamp=1112286106006, init=101994
config chan 1 flags 8005
rx tail flags error 702
setting h/w config 1200
wpi0: fatal firmware error
wpi0: timeout resetting Rx ring
wpi0: timeout waiting for adapter to initialize
wpi0: timeout resetting Tx ring 1
wpi0: timeout resetting Tx ring 3
wpi0: timeout resetting Tx ring 4
setting h/w config 1200
microcode alive notification version 10d00 alive 1
temperature -165
rx tail flags error 702
scan finished
config chan 1 flags 8005 cck f ofdm 15
TSF bintval=100 tstamp=1112314433017, init=37383
config chan 1 flags 8005

>How-To-Repeat:
        ifconfig wpi0 media DS11
        ifconfig wpi0 up
>Fix:
        Unknown.


>Release-Note:
>Audit-Trail:
>Unformatted: