Re: iwm driver leads to kernel crash

[ng0%n0.is@localhost]

Ryota Ozaki transcribed 512 bytes:
> On Mon, Apr 1, 2019 at 6:53 AM <ng0%n0.is@localhost> wrote:
> >
> > Hi,
> >
> > would further dmesg outputs from the last 10 or so kernel crashes
> > still be useful?
> 
> Yes, and if you have crashdumps, could you please provide detailed
> information from them?  (see https://wiki.netbsd.org/panic/ for the
> instructions).
> 
> > This still keeps happening (workaround so far is to use ethernet).
> >
> > Or maybe I'm looking at the wrong kind of bug and there is something
> > to track / being worked on already?
> 
> I guess no.
> 
> Thanks,
>   ozaki-r

I guess I should have filed a bug.
Anyways, I have gathered around 16 coredumps in the last months
but I haven't had the time to properly process them.

While it looks to me like a problem related to my wireless, as most
crashes happened when I had the wifi card activated in the BIOS,
some crashes - like crash 16, recent CVS state (build on thursday) -
happen with it turned off.
So I really have no idea what's going on here, if they all are related
(I doubt it), and where to start.

If I'm missing something, let me know.

Cheers,
ng0

* dmesg -M netbsd.16.core -N netbsd.16

[   246.280922] panic: TAILQ_PREREMOVE head 0xffff80303374e388 elm 0xffff82800fe91168 /usr/src/sys/external/bsd/common/linux/linux_work.c:1022
[   246.280922] cpu0: Begin traceback...
[   246.280922] vpanic() at netbsd:vpanic+0x160
[   246.280922] snprintf() at netbsd:snprintf
[   246.280922] linux_mod_delayed_work() at netbsd:linux_mod_delayed_work+0x588
[   246.280922] i915_gem_retire_requests() at netbsd:i915_gem_retire_requests+0x86
[   246.280922] i915_gem_init_seqno() at netbsd:i915_gem_init_seqno+0x4c
[   246.280922] i915_gem_get_seqno() at netbsd:i915_gem_get_seqno+0x39
[   246.280922] i915_gem_request_alloc() at netbsd:i915_gem_request_alloc+0x6e
[   246.280922] intel_crtc_page_flip() at netbsd:intel_crtc_page_flip+0xa62
[   246.280922] drm_mode_page_flip_ioctl() at netbsd:drm_mode_page_flip_ioctl+0x22b
[   246.280922] drm_ioctl() at netbsd:drm_ioctl+0x214
[   246.280922] drm_ioctl_shim() at netbsd:drm_ioctl_shim+0x4d
[   246.280922] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[   246.280922] syscall() at netbsd:syscall+0x181
[   246.280922] --- syscall (number 54) ---
[   246.280922] 75cad51952ba:
[   246.280922] cpu0: End traceback...

* dmesg -M netbsd.15.core -N netbsd.15

[  1009.208570] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[  1009.208570] cpu0: Begin traceback...
[  1009.218574] vpanic() at netbsd:vpanic+0x160
[  1009.218574] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[  1009.218574] iwm_softintr() at netbsd:iwm_softintr+0x123b
[  1009.218574] softint_dispatch() at netbsd:softint_dispatch+0xf4
[  1009.218574] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffffac00a931c0f0
[  1009.218574] Xsoftintr() at netbsd:Xsoftintr+0x4f
[  1009.218574] --- interrupt ---
[  1009.218574] b8e934aa2c4c1dc0:
[  1009.218574] cpu0: End traceback...

* dmesg -M netbsd.14.core -N netbsd.14

[  2371.756752] kern error: [drm:(/usr/src/sys/external/bsd/drm2/dist/drm/i915/intel_sprite.c:132)intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A: -35
[  5160.679159] kern error: [drm:(/usr/src/sys/external/bsd/drm2/dist/drm/i915/intel_sprite.c:132)intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A: -35
[  6881.287646] panic: kernel diagnostic assertion "! state->root_referenced" failed: file "/usr/src/sys/kern/vfs_lookup.c", line 592 
[  6881.287646] cpu0: Begin traceback...
[  6881.287646] vpanic() at netbsd:vpanic+0x160
[  6881.287646] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[  6881.287646] namei_tryemulroot() at netbsd:namei_tryemulroot+0xdd1
[  6881.287646] namei() at netbsd:namei+0x29
[  6881.287646] fd_nameiat.isra.2() at netbsd:fd_nameiat.isra.2+0x54
[  6881.287646] do_sys_accessat.part.8() at netbsd:do_sys_accessat.part.8+0xbf
[  6881.287646] linux_syscall() at netbsd:linux_syscall+0x161
[  6881.287646] cpu0: End traceback...

* dmesg -M netbsd.13.core -N netbsd.13

[ 23885.558925] panic: kernel diagnostic assertion "! state->root_referenced" failed: file "/usr/src/sys/kern/vfs_lookup.c", line 592 
[ 23885.558925] cpu0: Begin traceback...
[ 23885.558925] vpanic() at netbsd:vpanic+0x160
[ 23885.558925] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[ 23885.558925] namei_tryemulroot() at netbsd:namei_tryemulroot+0xdd1
[ 23885.558925] namei() at netbsd:namei+0x29
[ 23885.568928] fd_nameiat.isra.2() at netbsd:fd_nameiat.isra.2+0x54
[ 23885.568928] do_sys_accessat.part.8() at netbsd:do_sys_accessat.part.8+0xbf
[ 23885.568928] linux_syscall() at netbsd:linux_syscall+0x161
[ 23885.568928] cpu0: End traceback...

Leading up to the traceback in netbsd.12 was a whole lot of iwm0 autoconfiguration error: unhandled firmware response  messages. After this My wifi has been off most of the time but
produced coredumps whenever I used it for a random amount of time.
* dmesg -M netbsd.12.core -N netbsd.12

[ 31347.971055] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[ 31347.971055] cpu0: Begin traceback...
[ 31347.971055] vpanic() at netbsd:vpanic+0x160
[ 31347.981059] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[ 31347.981059] iwm_softintr() at netbsd:iwm_softintr+0x123b
[ 31347.981059] softint_dispatch() at netbsd:softint_dispatch+0xf4
[ 31347.981059] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff9500a931c0f0
[ 31347.981059] Xsoftintr() at netbsd:Xsoftintr+0x4f
[ 31347.981059] --- interrupt ---
[ 31347.981059] b8e934aa2c4c1dc0:
[ 31347.981059] cpu0: End traceback...

* dmesg -M netbsd.11.core -N netbsd.11

[    36.357050] kern error: [drm:(/usr/src/sys/external/bsd/drm2/dist/drm/i915/intel_sprite.c:132)intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A: -35
[    85.134072] kern error: [drm:(/usr/src/sys/external/bsd/drm2/dist/drm/i915/intel_sprite.c:132)intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A: -35
[  1669.110212] kern error: [drm:(/usr/src/sys/external/bsd/drm2/dist/drm/i915/intel_sprite.c:132)intel_pipe_update_start] *ERROR* Potential atomic update failure on pipe A: -35
[  3513.053541] uvm_fault(0xffff83159d600e68, 0x0, 1) -> e
[  3513.053541] fatal page fault in supervisor mode
[  3513.053541] trap type 6 code 0 rip 0xffffffff80786a28 cs 0x8 rflags 0x10246 cr2 0x18 ilevel 0x4 rsp 0xffff9c80ab0d8a10
[  3513.053541] curlwp 0xffff83159deae4c0 pid 123.1 lowest kstack 0xffff9c80ab0d52c0
[  3513.053541] panic: trap
[  3513.053541] cpu1: Begin traceback...
[  3513.053541] vpanic() at netbsd:vpanic+0x160
[  3513.053541] snprintf() at netbsd:snprintf
[  3513.053541] startlwp() at netbsd:startlwp
[  3513.053541] alltraps() at netbsd:alltraps+0xc8
[  3513.053541] pfil_run_arg.isra.0() at netbsd:pfil_run_arg.isra.0+0xbe
[  3513.053541] in6_control() at netbsd:in6_control+0xd24
[  3513.053541] udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x32
[  3513.053541] compat_ifioctl() at netbsd:compat_ifioctl+0x13e
[  3513.063545] doifioctl() at netbsd:doifioctl+0xe27
[  3513.063545] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[  3513.063545] syscall() at netbsd:syscall+0x173
[  3513.063545] --- syscall (number 54) ---
[  3513.063545] 7e6b4ed9504a:
[  3513.063545] cpu1: End traceback...


* dmesg -M netbsd.10.core -N netbsd.10

[ 10822.862599] trap type 6 code 0 rip 0xffffffff80786a28 cs 0x8 rflags 0x10246 cr2 0x18 ilevel 0x4 rsp 0xffffcf00aad58a10
[ 10822.862599] curlwp 0xfffff697bd81d200 pid 124.1 lowest kstack 0xffffcf00aad552c0
[ 10822.862599] panic: trap
[ 10822.862599] cpu1: Begin traceback...
[ 10822.862599] vpanic() at netbsd:vpanic+0x160
[ 10822.862599] snprintf() at netbsd:snprintf
[ 10822.862599] startlwp() at netbsd:startlwp
[ 10822.862599] alltraps() at netbsd:alltraps+0xc8
[ 10822.862599] pfil_run_arg.isra.0() at netbsd:pfil_run_arg.isra.0+0xbe
[ 10822.862599] in6_control() at netbsd:in6_control+0xd24
[ 10822.862599] udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x32
[ 10822.862599] compat_ifioctl() at netbsd:compat_ifioctl+0x13e
[ 10822.862599] doifioctl() at netbsd:doifioctl+0xe27
[ 10822.872603] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[ 10822.872603] syscall() at netbsd:syscall+0x173
[ 10822.872603] --- syscall (number 54) ---
[ 10822.872603] 7d9fd199504a:
[ 10822.872603] cpu1: End traceback...


* dmesg -M netbsd.9.core -N netbsd.9

[  7034.490658] panic: kernel diagnostic assertion "! state->root_referenced" failed: file "/usr/src/sys/kern/vfs_lookup.c", line 592 
[  7034.490658] cpu1: Begin traceback...
[  7034.490658] vpanic() at netbsd:vpanic+0x160
[  7034.490658] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[  7034.490658] namei_tryemulroot() at netbsd:namei_tryemulroot+0xdd1
[  7034.490658] namei() at netbsd:namei+0x29
[  7034.490658] emul_find_interp() at netbsd:emul_find_interp+0xbe
[  7034.490658] linux_elf64_probe() at netbsd:linux_elf64_probe+0x49
[  7034.490658] exec_elf64_makecmds() at netbsd:exec_elf64_makecmds+0x1b7
[  7034.500660] check_exec() at netbsd:check_exec+0x36e
[  7034.500660] execve_loadvm() at netbsd:execve_loadvm+0x204
[  7034.500660] execve1() at netbsd:execve1+0x28
[  7034.500660] syscall() at netbsd:syscall+0x173
[  7034.500660] --- syscall (number 59) ---
[  7034.500660] 7258ee842a7a:
[  7034.500660] cpu1: End traceback...


* dmesg -M netbsd.8.core -N netbsd.8

[  2283.398727] uvm_fault(0xffffad9e3c3d1a18, 0x0, 1) -> e
[  2283.398727] fatal page fault in supervisor mode
[  2283.398727] trap type 6 code 0 rip 0xffffffff807866d8 cs 0x8 rflags 0x10246 cr2 0x18 ilevel 0x4 rsp 0xffffae00ab0fca10
[  2283.398727] curlwp 0xffffad9e3c489920 pid 175.1 lowest kstack 0xffffae00ab0f92c0
[  2283.398727] panic: trap
[  2283.398727] cpu2: Begin traceback...
[  2283.398727] vpanic() at netbsd:vpanic+0x160
[  2283.398727] snprintf() at netbsd:snprintf
[  2283.398727] startlwp() at netbsd:startlwp
[  2283.398727] alltraps() at netbsd:alltraps+0xc8
[  2283.398727] pfil_run_arg.isra.0() at netbsd:pfil_run_arg.isra.0+0xbe
[  2283.408730] in6_control() at netbsd:in6_control+0xd24
[  2283.408730] udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x32
[  2283.408730] compat_ifioctl() at netbsd:compat_ifioctl+0x13e
[  2283.408730] doifioctl() at netbsd:doifioctl+0xe27
[  2283.408730] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[  2283.408730] syscall() at netbsd:syscall+0x173
[  2283.408730] --- syscall (number 54) ---
[  2283.408730] 70a04a11ae3a:
[  2283.408730] cpu2: End traceback...


* dmesg -M netbsd.7.core -N netbsd.7

[   161.226433] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=0 queued=1 cur=2
[   161.226433] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=1 queued=0 cur=2
[   161.226433] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[   161.226433] cpu0: Begin traceback...
[   161.226433] vpanic() at netbsd:vpanic+0x160
[   161.226433] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[   161.226433] iwm_softintr() at netbsd:iwm_softintr+0x123b
[   161.226433] softint_dispatch() at netbsd:softint_dispatch+0xf4
[   161.226433] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffffa400a931c0f0
[   161.226433] Xsoftintr() at netbsd:Xsoftintr+0x4f
[   161.226433] --- interrupt ---
[   161.226433] 5f0b157981fca8b6:
[   161.226433] cpu0: End traceback...


* dmesg -M netbsd.6.core -N netbsd.6

[ 16861.800224] uvm_fault(0xffffd0905fe18e68, 0x0, 1) -> e
[ 16861.800224] fatal page fault in supervisor mode
[ 16861.800224] trap type 6 code 0 rip 0xffffffff80786524 cs 0x8 rflags 0x10246 cr2 0x18 ilevel 0x4 rsp 0xffffaf00abfd8a10
[ 16861.800224] curlwp 0xffffd09060b46440 pid 124.1 lowest kstack 0xffffaf00abfd52c0
[ 16861.800224] panic: trap
[ 16861.800224] cpu3: Begin traceback...
[ 16861.800224] vpanic() at netbsd:vpanic+0x160
[ 16861.800224] snprintf() at netbsd:snprintf
[ 16861.800224] startlwp() at netbsd:startlwp
[ 16861.800224] alltraps() at netbsd:alltraps+0xc8
[ 16861.800224] pfil_run_arg.isra.0() at netbsd:pfil_run_arg.isra.0+0xbe
[ 16861.800224] in6_control() at netbsd:in6_control+0xd24
[ 16861.810228] udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x32
[ 16861.810228] compat_ifioctl() at netbsd:compat_ifioctl+0x13e
[ 16861.810228] doifioctl() at netbsd:doifioctl+0xe27
[ 16861.810228] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[ 16861.810228] syscall() at netbsd:syscall+0x173
[ 16861.810228] --- syscall (number 54) ---
[ 16861.810228] 79cf6f71ae3a:
[ 16861.810228] cpu3: End traceback...


* dmesg -M netbsd.4.core -N netbsd.4

[   241.569817] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=0 queued=1 cur=2
[   241.569817] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=1 queued=0 cur=2
[   241.569817] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[   241.569817] cpu0: Begin traceback...
[   241.579820] vpanic() at netbsd:vpanic+0x160
[   241.579820] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[   241.579820] iwm_softintr() at netbsd:iwm_softintr+0x123b
[   241.579820] softint_dispatch() at netbsd:softint_dispatch+0xf4
[   241.579820] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff9880a931c0f0
[   241.579820] Xsoftintr() at netbsd:Xsoftintr+0x4f
[   241.579820] --- interrupt ---
[   241.579820] 5f0b157981fca8b6:
[   241.579820] cpu0: End traceback...


* dmesg -M netbsd.3.core -N netbsd.3

[ 14730.645706] trap type 6 code 0 rip 0xffffffff80779614 cs 0x8 rflags 0x10246 cr2 0x18 ilevel 0x4 rsp 0xffff9400abfbda10
[ 14730.645706] curlwp 0xffff814432af1860 pid 124.1 lowest kstack 0xffff9400abfba2c0
[ 14730.645706] panic: trap
[ 14730.645706] cpu1: Begin traceback...
[ 14730.645706] vpanic() at netbsd:vpanic+0x160
[ 14730.645706] snprintf() at netbsd:snprintf
[ 14730.645706] startlwp() at netbsd:startlwp
[ 14730.645706] alltraps() at netbsd:alltraps+0xc8
[ 14730.645706] pfil_run_arg.isra.0() at netbsd:pfil_run_arg.isra.0+0xbe
[ 14730.645706] in6_control() at netbsd:in6_control+0xd24
[ 14730.655709] udp6_ioctl_wrapper() at netbsd:udp6_ioctl_wrapper+0x32
[ 14730.655709] compat_ifioctl() at netbsd:compat_ifioctl+0x13e
[ 14730.655709] doifioctl() at netbsd:doifioctl+0xe27
[ 14730.655709] sys_ioctl() at netbsd:sys_ioctl+0x5ab
[ 14730.655709] syscall() at netbsd:syscall+0x173
[ 14730.655709] --- syscall (number 54) ---
[ 14730.655709] 71ff8291acca:
[ 14730.655709] cpu1: End traceback...


* dmesg -M netbsd.2.core -N netbsd.2

[ 13203.194958] pms_input: unusual delay (0.060024 s), scheduling reset
[ 13302.337995] pms_input: unusual delay (0.060024 s), scheduling reset
[ 13731.904861] pms_input: unusual delay (0.060026 s), scheduling reset
[ 13842.032759] pms_input: unusual delay (0.050020 s), scheduling reset
[ 13850.406405] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=0 queued=1 cur=2
[ 13850.406405] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=1 queued=0 cur=2
[ 13850.406405] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[ 13850.406405] cpu0: Begin traceback...
[ 13850.406405] vpanic() at netbsd:vpanic+0x160
[ 13850.406405] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[ 13850.406405] iwm_softintr() at netbsd:iwm_softintr+0x123b
[ 13850.416408] softint_dispatch() at netbsd:softint_dispatch+0xf4
[ 13850.416408] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff9200a931c0f0
[ 13850.416408] Xsoftintr() at netbsd:Xsoftintr+0x4f
[ 13850.416408] --- interrupt ---
[ 13850.416408] 5f0b157981fca8b6:
[ 13850.416408] cpu0: End traceback...


* dmesg -M netbsd.1.core -N netbsd.1

[ 42446.347934] pms_input: unusual delay (0.060027 s), scheduling reset
[ 42697.412605] pms_input: unusual delay (0.050021 s), scheduling reset
[ 42708.387618] pms_input: unusual delay (0.060028 s), scheduling reset
[ 42758.980731] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=0 queued=1 cur=2
[ 42758.980731] iwm0: autoconfiguration error: Some HCMDs skipped?: idx=1 queued=0 cur=2
[ 42758.980731] panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/usr/src/sys/dev/pci/if_iwm.c", line 4459 
[ 42758.980731] cpu0: Begin traceback...
[ 42758.990734] vpanic() at netbsd:vpanic+0x160
[ 42758.990734] stge_eeprom_wait.isra.4() at netbsd:stge_eeprom_wait.isra.4
[ 42758.990734] iwm_softintr() at netbsd:iwm_softintr+0x123b
[ 42758.990734] softint_dispatch() at netbsd:softint_dispatch+0xf4
[ 42758.990734] DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffff9d00a931c0f0
[ 42758.990734] Xsoftintr() at netbsd:Xsoftintr+0x4f
[ 42758.990734] --- interrupt ---
[ 42758.990734] 5f0b157981fca8b6:
[ 42758.990734] cpu0: End traceback...


* dmesg -M netbsd.0.core -N netbsd.0

panic: trap
cpu1: Begin traceback...
vpanic() at netbsd:vpanic+0x15d
snprintf() at netbsd:snprintf
trap() at netbsd:trap+0xa00
--- trap (number 6) ---
usb_transfer_complete() at netbsd:usb_transfer_complete+0x58
xhci_abort_xfer() at netbsd:xhci_abort_xfer+0x151
usbd_abort_pipe() at netbsd:usbd_abort_pipe+0x50
umass_detach() at netbsd:umass_detach+0x43
config_detach() at netbsd:config_detach+0xa1
usb_disconnect_port() at netbsd:usb_disconnect_port+0xae
uhub_explore() at netbsd:uhub_explore+0x226
usb_discover.isra.0() at netbsd:usb_discover.isra.0+0x57
usb_event_thread() at netbsd:usb_event_thread+0x7c
cpu1: End traceback...