kern/49688: ifconfig iwm0 up crashes the system

[degroote%netbsd.org@localhost]

>Number:         49688
>Category:       kern
>Synopsis:       ifconfig iwm0 up crashes the system
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Feb 23 17:20:00 +0000 2015
>Originator:     Arnaud Degroote
>Release:        -current
>Organization:
TNF
>Environment:
NetBSD  7.99.5 NetBSD 7.99.5 (GENERIC) #7: Mon Feb 23 13:53:36 CET 2015  adegroot@dmia-degroote:/home/adegroot/netbsd-dev/build/amd64/objdir/sys/arch/amd64/compile/GENERIC amd64

if_iwm.c 1.11
>Description:
On my system with iwm(4), the following command

ifconfig iwm0 up

leads to several kernel messages such as 

iwm0: frame 40/107 99e72408 UNHANDLED (this should not happen)
iwm0: frame 34/129 87a88bcb UNHANDLED (this should not happen)
...

until a real crashe in

panic: _bus_dmamap_sync: bad length 0xc + 0x74ca > 0x1000

bus_dmamap_sync() at netbsd:bus_dmamap_sync+0x252
iwn_intr() at netbsd:iwn_intr+0x745

the dmesg looks like

NetBSD 7.99.5 (GENERIC) #7: Mon Feb 23 13:53:36 CET 2015
        adegroot@dmia-degroote:/home/adegroot/netbsd-dev/build/amd64/objdir/sys/arch/amd64/compile/GENERIC
total memory = 16281 MB
avail memory = 15790 MB
timecounter: Timecounters tick every 10.000 msec
RTC BIOS diagnostic error 0xbd<clock_battery,config_unit,memory_size,fixed_disk,invalid_time>
timecounter: Timecounter "i8254" frequency 1193182 Hz quality 100
Hewlett-Packard HP EliteBook 820 G1 (A3008CD10003)
mainbus0 (root)
ACPI: RSDP 0x00000000000F2FE0 000024 (v02 HPQOEM)
ACPI: XSDT 0x00000000BBFFE120 00009C (v01 HPQOEM SLIC-MPC 00000001      01000013)
ACPI: FACP 0x00000000BBFFC000 00010C (v05 HPQOEM 1991     00000001 HP   00000001)
ACPI: DSDT 0x00000000BBFD1000 025472 (v02 HPQOEM 1991     00000001 INTL 20110112)
ACPI: FACS 0x00000000BBDE4000 000040
ACPI: HPET 0x00000000BBFFB000 000038 (v01 HPQOEM 1991     00000001 HP   00000001)
ACPI: APIC 0x00000000BBFFA000 0000BC (v01 HPQOEM 1991     00000001 HP   00000001)
ACPI: MCFG 0x00000000BBFF9000 00003C (v01 HPQOEM 1991     00000001 HP   00000001)
ACPI: TCPA 0x00000000BBFF7000 000032 (v02 HPQOEM 1991     00000000 HP   00000001)
ACPI: SSDT 0x00000000BBFCE000 000313 (v01 HPQOEM SataAhci 00001000 INTL 20110112)
ACPI: SSDT 0x00000000BBFCD000 00048A (v01 HPQOEM PtidDevc 00001000 INTL 20110112)
ACPI: FPDT 0x00000000BBFCB000 000044 (v01 HPQOEM 1991     00000001 HP   00000001)
ACPI: BGRT 0x00000000BBFCA000 000038 (v00 HPQOEM 1991     00000001 HP   00000001)
ACPI: SSDT 0x00000000BBFC6000 000466 (v01 Isct   IsctAsl  00003000 INTL 20110112)
ACPI: SSDT 0x00000000BBFC5000 000544 (v01 PmRef  Cpu0Ist  00003000 INTL 20110112)
ACPI: SSDT 0x00000000BBFC4000 000AF3 (v01 PmRef  CpuPm    00003000 INTL 20110112)
ACPI: SSDT 0x00000000BBFC3000 0001D5 (v01 PmRef  LakeTiny 00003000 INTL 20110112)
ACPI: SSDT 0x00000000BBFC2000 000706 (v01 SaSsdt SaSsdt   00003000 INTL 20110112)
ACPI: ASF! 0x00000000BBFF8000 0000A5 (v32 HPQOEM 1991     00000001 HP   00000001)
ACPI: All ACPI Tables successfully acquired
cpu0 at mainbus0 apid 0
cpu0: Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz, id 0x40651
cpu1 at mainbus0 apid 1
cpu1: Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz, id 0x40651
cpu2 at mainbus0 apid 2
cpu2: Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz, id 0x40651
cpu3 at mainbus0 apid 3
cpu3: Intel(R) Core(TM) i7-4600U CPU @ 2.10GHz, id 0x40651
ioapic0 at mainbus0 apid 0: pa 0xfec00000, version 0x20, 40 pins
acpi0 at mainbus0: Intel ACPICA 20140926
acpi0: X/RSDT: OemId <HPQOEM,SLIC-MPC,00000001>, AslId <    ,01000013>
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D222810 0003F3 (v01 PmRef  Cpu0Cst  00003001 INTL 20110112)
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D222010 0005DB (v01 PmRef  ApIst    00003000 INTL 20110112)
ACPI: Dynamic OEM Table Load:
ACPI: SSDT 0xFFFFFE811D06C090 000119 (v01 PmRef  ApCst    00003000 INTL 20110112)
acpi0: SCI interrupting at int 9
timecounter: Timecounter "ACPI-Safe" frequency 3579545 Hz quality 900
hpet0 at acpi0: high precision event timer (mem 0xfed00000-0xfed00400)
timecounter: Timecounter "hpet0" frequency 14318180 Hz quality 2000
acpiec0 at acpi0 (EC0, PNP0C09-1)
: io 0x62,0x66
WLBU (HPQ6001) at acpi0 not configured
PDRC (PNP0C02) at acpi0 not configured
acpivga0 at acpi0 (GFX0): ACPI Display Adapter
acpiout0 at acpivga0 (DD01, 0x0100): ACPI Display Output Device
acpiout0: brightness levels: [0-67,69-100]
acpiout1 at acpivga0 (DD02, 0x0400): ACPI Display Output Device
acpiout2 at acpivga0 (DD03, 0x0300): ACPI Display Output Device
acpiout3 at acpivga0 (DD04, 0x0301): ACPI Display Output Device
acpiout4 at acpivga0 (DD05, 0x0302): ACPI Display Output Device
acpiout5 at acpivga0 (DD06, 0x0006): ACPI Display Output Device
acpiout6 at acpivga0 (DD07, 0x0007): ACPI Display Output Device
acpiout7 at acpivga0 (DD08, 0x0008): ACPI Display Output Device
acpivga0: unknown output device acpiout0
acpivga0: unknown output device acpiout2
acpivga0: unknown output device acpiout3
acpivga0: unknown output device acpiout4
acpivga0: unknown output device acpiout5
acpivga0: unknown output device acpiout6
acpivga0: unknown output device acpiout7
acpivga0: connected output devices:
acpivga0:   0x0400 (acpiout1): Unknown Output Device, head 0
FWHD (INT0800) at acpi0 not configured
LDRC (PNP0C02) at acpi0 not configured
attimer1 at acpi0 (TIMR, PNP0100): io 0x40-0x43,0x50-0x53 irq 0
pckbc1 at acpi0 (PS2K, HPQ8001) (kbd port): io 0x60,0x64 irq 1
pckbc2 at acpi0 (PS2M, SYN3008) (aux port): irq 12
ACEL (HPQ6007) at acpi0 not configured
MEM2 (PNP0C01) at acpi0 not configured
acpibat0 at acpi0 (BAT0, PNP0C0A-1): ACPI Battery
acpibat0: Hewlett-Packard LIon rechargeable battery
acpibat0: granularity: low->warn 0.100 Ah, warn->full 0.100 Ah
acpiacad0 at acpi0 (AC, ACPI0003): ACPI AC Adapter
acpibut0 at acpi0 (SLPB, PNP0C0E): ACPI Sleep Button
acpilid0 at acpi0 (LID, PNP0C0D): ACPI Lid Switch
acpiwmi0 at acpi0 (WMID, PNP0C14-0): ACPI WMI Interface
wmihp0 at acpiwmi0: HP WMI mappings
GTPM (IFX0102) at acpi0 not configured
ISCT (INT33A0) at acpi0 not configured
acpitz0 at acpi0 (CPUZ)
acpitz0: levels: critical 128.0 C, hot 99.0 C, passive cooling
acpitz1 at acpi0 (GFXZ): cpu0
acpitz1: levels: critical 128.0 C, passive 102.0 C, passive cooling
acpitz2 at acpi0 (EXTZ)
acpitz2: levels: critical 128.0 C, passive cooling
acpitz3 at acpi0 (LOCZ)
acpitz3: levels: critical 128.0 C, passive cooling
acpitz4 at acpi0 (BATZ): cpu0
acpitz4: levels: critical 128.0 C, passive 55.0 C, passive cooling
acpitz5 at acpi0 (PCHZ)
acpitz5: levels: critical 128.0 C, passive cooling
acpitz6 at acpi0 (DM1Z)
acpitz6: levels: critical 128.0 C, passive cooling
acpitz7 at acpi0 (DM2Z)
acpitz7: levels: critical 128.0 C, passive cooling
PTID (INT340E) at acpi0 not configured
ACPI: Enabled 5 GPEs in block 00 to 7F
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20140926/hwxface-646)
ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20140926/hwxface-646)
pckbd0 at pckbc1 (kbd slot)
pckbc1: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
pms0 at pckbc1 (aux slot)
pckbc1: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o space, memory space enabled, rd/line, rd/mult, wr/inv ok
pchb0 at pci0 dev 0 function 0: vendor 8086 product 0a04 (rev. 0x0b)
i915drmkms0 at pci0 dev 2 function 0: vendor 8086 product 0a16 (rev. 0x0b)
drm: Memory usable by graphics device = 2048M
drm: Supports vblank timestamp caching Rev 2 (21.10.2013).
drm: Driver supports precise vblank timestamp query.
i915drmkms0: interrupting at ioapic0 pin 16 (i915)
intelfb0 at i915drmkms0
i915drmkms0: info: registered panic notifier
intelfb0: framebuffer at 0xffff80011ccd8000, size 1366x768, depth 32, stride 5504
wsdisplay0 at intelfb0 kbdmux 1: console (default, vt100 emulation), using wskbd0
wsmux1: connecting to wsdisplay0
hdaudio0 at pci0 dev 3 function 0: HD Audio Controller
hdaudio0: interrupting at ioapic0 pin 16
hdaudio0: timeout leaving reset state
hdaudio0: device driver failed to attach
vendor 8086 product 9c31 (USB serial bus, xHCI, revision 0x04) at pci0 dev 20 function 0 not configured
vendor 8086 product 9c3a (miscellaneous communications, revision 0x04) at pci0 dev 22 function 0 not configured
puc0 at pci0 dev 22 function 3: Intel Core 4G (mobile) KT (com)
com2 at puc0 port 0 (16550-compatible): ioaddr 0x30b0, interrupting at ioapic0 pin 19
com2: ns16550a, working fifo
wm0 at pci0 dev 25 function 0: I218 LM Ethernet Connection (rev. 0x04)
wm0: interrupting at ioapic0 pin 20
wm0: PCI-Express bus
wm0: 2048 words FLASH
wm0: Ethernet address ec:b1:d7:93:e0:52
ihphy0 at wm0 phy 2: i217 10/100/1000 media interface, rev. 5
ihphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
hdaudio1 at pci0 dev 27 function 0: HD Audio Controller
hdaudio1: interrupting at ioapic0 pin 22
hdafg0 at hdaudio1: vendor 111d product 76e0
hdafg0: DAC00 2ch: Speaker [Built-In], HP Out [Jack]
hdafg0: ADC01 2ch: Line In [Jack], Mic In [Jack]
hdafg0: DAC02 2ch: Speaker [Jack]
hdafg0: ADC03 2ch: Mic In [Jack & Built-In]
hdafg0: 2ch/2ch 44100Hz 48000Hz 88200Hz 96000Hz 192000Hz PCM16 PCM20 PCM24 AC3
audio0 at hdafg0: full duplex, playback, capture, mmap, independent
ppb0 at pci0 dev 28 function 0: vendor 8086 product 9c10 (rev. 0xe4)
ppb0: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x1 @ 5.0GT/s
pci1 at ppb0 bus 1
pci1: i/o space, memory space enabled, rd/line, wr/inv ok
ppb1 at pci0 dev 28 function 3: vendor 8086 product 9c16 (rev. 0xe4)
ppb1: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x1 @ 5.0GT/s
ppb1: link is x1 @ 2.5GT/s
pci2 at ppb1 bus 2
pci2: i/o space, memory space enabled, rd/line, wr/inv ok
iwm0 at pci2 dev 0 function 0: vendor 8086 product 08b1 (rev. 0x73)
iwm0: interrupting at ioapic0 pin 19
ppb2 at pci0 dev 28 function 5: vendor 8086 product 9c1a (rev. 0xe4)
ppb2: PCI Express capability version 2 <Root Port of PCI-E Root Complex> x1 @ 5.0GT/s
ppb2: link is x1 @ 2.5GT/s
pci3 at ppb2 bus 3
pci3: i/o space, memory space enabled, rd/line, wr/inv ok
rtsx0 at pci3 dev 0 function 0: vendor 10ec product 5227 (rev. 0x01)
rtsx0: interrupting at ioapic0 pin 17
sdmmc0 at rtsx0
ehci0 at pci0 dev 29 function 0: vendor 8086 product 9c26 (rev. 0x04)
ehci0: interrupting at ioapic0 pin 17
ehci0: EHCI version 1.0
usb0 at ehci0: USB revision 2.0
pcib0 at pci0 dev 31 function 0: vendor 8086 product 9c43 (rev. 0x04)
ahcisata0 at pci0 dev 31 function 2: vendor 8086 product 9c03 (rev. 0x04)
ahcisata0: interrupting at ioapic0 pin 19
ahcisata0: 64-bit DMA
ahcisata0: AHCI revision 1.30, 2 ports, 32 slots, CAP 0xc734ff01<PSC,SSC,PMD,SAM,ISS=0x3=Gen3,SCLO,SAL,SALP,SNCQ,S64A>
atabus0 at ahcisata0 channel 0
ichsmb0 at pci0 dev 31 function 3: vendor 8086 product 9c22 (rev. 0x04)
ichsmb0: interrupting at ioapic0 pin 18
iic0 at ichsmb0: I2C bus
isa0 at pcib0
tpm0 at isa0 iomem 0xfed40000-0xfed44fff irq 7: IFX SLB 9635 TT 1.2 rev 0x10
pcppi0 at isa0 port 0x61
midi0 at pcppi0: PC speaker
sysbeep0 at pcppi0
attimer1: attached to pcppi0
acpicpu0 at cpu0: ACPI CPU
acpicpu0: C1: FFH, lat   1 us, pow  1000 mW
acpicpu0: C2: FFH, lat 148 us, pow   200 mW
acpicpu0: C3: FFH, lat 506 us, pow   200 mW
acpicpu0: P0: FFH, lat  10 us, pow 15000 mW, 2701 MHz, turbo boost
acpicpu0: P1: FFH, lat  10 us, pow 15000 mW, 2700 MHz
acpicpu0: P2: FFH, lat  10 us, pow 14236 mW, 2600 MHz
acpicpu0: P3: FFH, lat  10 us, pow 12752 mW, 2400 MHz
acpicpu0: P4: FFH, lat  10 us, pow 12175 mW, 2300 MHz
acpicpu0: P5: FFH, lat  10 us, pow 10775 mW, 2100 MHz
acpicpu0: P6: FFH, lat  10 us, pow 10234 mW, 2000 MHz
acpicpu0: P7: FFH, lat  10 us, pow  8912 mW, 1800 MHz
acpicpu0: P8: FFH, lat  10 us, pow  8271 mW, 1700 MHz
acpicpu0: P9: FFH, lat  10 us, pow  7778 mW, 1600 MHz
acpicpu0: P10: FFH, lat  10 us, pow  6561 mW, 1400 MHz
acpicpu0: P11: FFH, lat  10 us, pow  6099 mW, 1300 MHz
acpicpu0: P12: FFH, lat  10 us, pow  4957 mW, 1100 MHz
acpicpu0: P13: FFH, lat  10 us, pow  4529 mW, 1000 MHz
acpicpu0: P14: FFH, lat  10 us, pow  3461 mW,  800 MHz
acpicpu0: P15: FFH, lat  10 us, pow  2945 mW,  756 MHz
acpicpu0: T0: I/O, lat   1 us, pow     0 mW, 100 %
acpicpu0: T1: I/O, lat   1 us, pow     0 mW,  88 %
acpicpu0: T2: I/O, lat   1 us, pow     0 mW,  76 %
acpicpu0: T3: I/O, lat   1 us, pow     0 mW,  64 %
acpicpu0: T4: I/O, lat   1 us, pow     0 mW,  52 %
acpicpu0: T5: I/O, lat   1 us, pow     0 mW,  40 %
acpicpu0: T6: I/O, lat   1 us, pow     0 mW,  28 %
acpicpu0: T7: I/O, lat   1 us, pow     0 mW,  16 %
coretemp0 at cpu0: thermal sensor, 1 C resolution
acpicpu1 at cpu1: ACPI CPU
acpicpu2 at cpu2: ACPI CPU
coretemp1 at cpu2: thermal sensor, 1 C resolution
acpicpu3 at cpu3: ACPI CPU
DRM error in intel_uncore_check_errors: Unclaimed register before interrupt
timecounter: Timecounter "clockinterrupt" frequency 100 Hz quality 0
timecounter: Timecounter "TSC" frequency 2693949370 Hz quality 3000
acpiacad0: AC adapter online.
uhub0 at usb0: vendor 8086 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 3 ports with 3 removable, self powered
ahcisata0 port 0: device present, speed: 6.0Gb/s
IPsec: Initialized Security Association Processing.
drm: Enabling RC6 states: RC6 on, RC6p off, RC6pp off
wd0 at atabus0 drive 0
wd0: <MTFDDAK512MAY-1AE1ZABHA>
wd0: drive supports 16-sector PIO transfers, LBA48 addressing
wd0: 476 GB, 992277 cyl, 16 head, 63 sec, 512 bytes/sect x 1000215216 sectors
wd0: drive supports PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133)
wd0(ahcisata0:0:0): using PIO mode 4, DMA mode 2, Ultra-DMA mode 6 (Ultra/133) (using DMA)
uhub1 at uhub0 port 1: vendor 8087 product 8000, class 9/0, rev 2.00/0.04, addr 2
uhub1: single transaction translator
uhub1: 8 ports with 8 removable, self powered
uhub2 at uhub1 port 3: SMSC USB2134B, class 9/0, rev 2.10/50.00, addr 3
uhub2: multiple transaction translators
uhub2: 3 ports with 2 removable, self powered
sdmmc0: couldn't enable card: 60
ubt0 at uhub1 port 4
ubt0: vendor 8087 product 07dc, rev 2.00/0.01, addr 4
uvideo0 at uhub1 port 7 configuration 1 interface 0: Chicony Electronics Co.,Ltd. HP HD Webcam, rev 2.00/66.63, addr 5
video0 at uvideo0: Chicony Electronics Co.,Ltd. HP HD Webcam, rev 2.00/66.63, addr 5
Kernelized RAIDframe activated
pad0: outputs: 44100Hz, 16-bit, stereo
audio1 at pad0: half duplex, playback, capture
boot device: wd0
root on wd0a dumps on wd0b
/: replaying log to memory
root file system type: ffs
kern.module.path=/stand/amd64/7.99.5/modules
iwm0: hw rev: 0x140, fw ver 25.228 (API ver 9), address 80:19:34:9c:d8:17
iwm0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
iwm0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
/: replaying log to disk
sdmmc0: couldn't enable card: 60
wsdisplay0: screen 1 added (default, vt100 emulation)
wsdisplay0: screen 2 added (default, vt100 emulation)
wsdisplay0: screen 3 added (default, vt100 emulation)
wsdisplay0: screen 4 added (default, vt100 emulation
>How-To-Repeat:

ifconfig iwm0 up
>Fix:
No idea yet