kern/52583: kernel crash after iwm firmware error

[alnsn%yandex.ru@localhost]

>Number:         52583
>Category:       kern
>Synopsis:       kernel crash after iwm firmware error
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Sep 30 12:30:00 +0000 2017
>Originator:     Alexander Nasonov
>Release:        8.99.1 amd64
>Organization:
XMM SWAP LTD
>Environment:
NetBSD 8.99.1 (GENERIC) #0: Fri Aug  4 22:07:35 BST 2017  alnsn@neva:/home/alnsn/netbsd-current/clean/src/sys/arch/amd64/compile/obj/GENERIC amd64
>Description:
I left my notebook running over night just one meter away from AP and it crashed. Here are some bits from dmesg -M netbsd.2.core:

iwm0: fatal firmware error
iwm0: unhandled firmware response 0x501b 0x1b/0x7a25229f rx ring 22[90]
iwm0: unhandled firmware response 0xc00c 0xc/0x7ab99247 rx ring 22[238]
iwm0: unhandled firmware response 0xffff 0xff/0x4208 rx ring 127[255]
iwm0: unhandled firmware response 0xf031 0x31/0x1610a3b rx ring 0[97]
iwm0: unhandled firmware response 0xf021 0x21/0x7c41c19a rx ring 24[118]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xa82 0x82/0x1613007 rx ring 0[98]
iwm0: unhandled firmware response 0x3018 0x18/0x7dbf00d4 rx ring 25[244]
iwm0: unhandled firmware response 0xc00f 0xf/0x7e3d908d rx ring 26[114]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x39c 0x9c/0x400d rx ring 0[0]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x3053 0x53/0x1618bdf rx ring 0[98]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x39ea 0xea/0x1619a17 rx ring 0[98]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x101d 0x1d/0x8252de92 rx ring 30[136]
iwm0: unhandled firmware response 0x533b 0x3b/0x161c1ab rx ring 0[98]
iwm0: unhandled firmware response 0x5ba3 0xa3/0x161ccf2 rx ring 0[98]
iwm0: unhandled firmware response 0xd008 0x8/0x83dc9db9 rx ring 32[17]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xc008 0x8/0x84e18d37 rx ring 33[22]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7eb3 0xb3/0x1620d77 rx ring 0[98]
iwm0: unhandled firmware response 0x801b 0x1b/0x866b4c85 rx ring 34[160]
iwm0: unhandled firmware response 0xc008 0x8/0x86ee8c31 rx ring 35[35]
iwm0: unhandled firmware response 0x8bfc 0xfc/0x1622bee rx ring 0[98]
iwm0: unhandled firmware response 0x6008 0x8/0x87f82bad rx ring 36[45]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x9830 0x30/0x16241ad rx ring 0[98]
iwm0: unhandled firmware response 0xc010 0x10/0x89788af5 rx ring 37[173]
iwm0: unhandled firmware response 0xa70c 0xc/0x1626633 rx ring 0[98]
iwm0: unhandled firmware response 0xe007 0x7/0x8a75aa6f rx ring 38[170]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7743 0x43/0x8bee40ef rx ring 40[35]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xcfcc 0xcc/0x162bb3b rx ring 0[98]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xd99d 0x9d/0x162d04f rx ring 0[98]
iwm0: unhandled firmware response 0xdf4b 0x4b/0x162dec4 rx ring 0[98]
iwm0: unhandled firmware response 0xdfe9 0xe9/0x162e99d rx ring 0[98]
iwm0: unhandled firmware response 0x5d3f 0x3f/0x8f0b255e rx ring 43[64]
iwm0: unhandled firmware response 0x8018 0x18/0x8f8047fe rx ring 43[181]
iwm0: unhandled firmware response 0xb00f 0xf/0x8ff577ba rx ring 44[42]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x501d 0x1d/0x90ff1744 rx ring 45[52]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x6c6d 0x6d/0x163a3ff rx ring 0[99]
iwm0: unhandled firmware response 0x33cf 0xcf/0x92a4fa24 rx ring 46[218]
iwm0: unhandled firmware response 0x415f 0x5f/0x9339076a rx ring 47[110]
iwm0: unhandled firmware response 0x26c9 0xc9/0x1647136 rx ring 0[100]
iwm0: unhandled firmware response 0x501a 0x1a/0x94831583 rx ring 48[184]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x4d92 0x92/0x165a60b rx ring 0[101]
iwm0: unhandled firmware response 0xc007 0x7/0x96758478 rx ring 50[170]
iwm0: unhandled firmware response 0xb007 0x7/0x97167428 rx ring 51[75]
iwm0: unhandled firmware response 0x6020 0x20/0x97982400 rx ring 51[205]
iwm0: unhandled firmware response 0x100b 0xb/0x9819d3aa rx ring 52[79]
iwm0: unhandled firmware response 0xe01a 0x1a/0x989ea377 rx ring 52[211]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x35cc 0xcc/0x166c251 rx ring 0[102]
iwm0: unhandled firmware response 0x9007 0x7/0x9a4c528d rx ring 54[129]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x10 0x10/0x9b76c1ff rx ring 55[172]
iwm0: unhandled firmware response 0xf018 0x18/0x9bfeb1c2 rx ring 56[51]
iwm0: unhandled firmware response 0xcb15 0x15/0x1677d99 rx ring 0[102]
iwm0: unhandled firmware response 0x11 0x11/0x9d06c134 rx ring 57[60]
iwm0: unhandled firmware response 0xa011 0x11/0x9d7a60f9 rx ring 57[175]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x10be 0xbe/0x9ed6d0f2 rx ring 59[12]
iwm0: unhandled firmware response 0xec4 0xc4/0x167e52e rx ring 0[103]
iwm0: unhandled firmware response 0x8080 0x80/0x9fb64041 rx ring 59[235]
iwm0: unhandled firmware response 0x26e5 0xe5/0x1680a7b rx ring 0[103]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x3bc8 0xc8/0x1682716 rx ring 0[103]
iwm0: unhandled firmware response 0x250c 0xc/0xa1a0e3d1 rx ring 61[214]
iwm0: unhandled firmware response 0x4f9d 0x9d/0x16845db rx ring 0[103]
iwm0: unhandled firmware response 0xffff 0xff/0x6208 rx ring 127[255]
iwm0: unhandled firmware response 0x6f90 0x90/0x1686d80 rx ring 0[103]
iwm0: unhandled firmware response 0xc008 0x8/0xa3a47dc6 rx ring 63[217]
iwm0: unhandled firmware response 0xffff 0xff/0x4208 rx ring 127[255]
iwm0: unhandled firmware response 0xd015 0x15/0xa4ac8d4d rx ring 64[225]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xcce4 0xe4/0x168d04e rx ring 0[103]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xf1fd 0xfd/0x168f934 rx ring 0[103]
iwm0: unhandled firmware response 0xfc68 0x68/0x16905c2 rx ring 0[103]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x242e 0x2e/0x1693c15 rx ring 0[104]
iwm0: unhandled firmware response 0xc018 0x18/0xa8b87b45 rx ring 68[237]
iwm0: unhandled firmware response 0x9008 0x8/0xa93d4af1 rx ring 69[114]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x50c5 0xc5/0x16976ed rx ring 0[104]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x9a88 0x88/0xab63545d rx ring 71[152]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xa00e 0xe/0xac395976 rx ring 72[110]
iwm0: unhandled firmware response 0x6016 0x16/0xacc91936 rx ring 72[254]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xe00d 0xd/0xade8989d rx ring 74[29]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x301f 0x1f/0xaef6e826 rx ring 75[44]
iwm0: unhandled firmware response 0xd7da 0xda/0x16a2ba9 rx ring 0[104]
iwm0: unhandled firmware response 0xd835 0x35/0x16a2c35 rx ring 0[104]
iwm0: unhandled firmware response 0x5007 0x7/0xb08a0744 rx ring 76[191]
iwm0: unhandled firmware response 0xda51 0x51/0x16a2fe7 rx ring 0[104]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xdce0 0xe0/0x16a4595 rx ring 0[104]
iwm0: unhandled firmware response 0xdd78 0x78/0x16a496c rx ring 0[104]
iwm0: unhandled firmware response 0xe365 0x65/0x16a5247 rx ring 0[104]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x1245 0x45/0x16a8d43 rx ring 0[105]
iwm0: unhandled firmware response 0x17a0 0xa0/0x16a975c rx ring 0[105]
iwm0: unhandled firmware response 0x19f3 0xf3/0x16a9b83 rx ring 0[105]
iwm0: unhandled firmware response 0x9aa5 0xa5/0xb66c4eee rx ring 82[161]
iwm0: unhandled firmware response 0xe010 0x10/0xb76193e1 rx ring 83[150]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x6015 0x15/0xb8681363 rx ring 84[157]
iwm0: unhandled firmware response 0xa00b 0xb/0xb8eb5318 rx ring 85[32]
iwm0: unhandled firmware response 0x6594 0x94/0x2c4a08 rx ring 114[156]
iwm0: unhandled firmware response 0xe0 0xe0/0x400d rx ring 0[0]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x101e 0x1e/0xba2ec28b rx ring 86[100]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x4463 0x63/0x16af7ea rx ring 0[105]
iwm0: unhandled firmware response 0x4677 0x77/0x16b0662 rx ring 0[105]
iwm0: unhandled firmware response 0x47ae 0xae/0x16b0a9e rx ring 0[105]
iwm0: unhandled firmware response 0x6594 0x94/0x2c4208 rx ring 114[156]
iwm0: unhandled firmware response 0x4062 0x62/0xbcb0f191 rx ring 88[230]
iwm0: unhandled firmware response 0x8021 0x21/0xbd343110 rx ring 89[105]
iwm0: unhandled firmware response 0x50c2 0xc2/0x16b17e2 rx ring 0[105]
iwm0: unhandled firmware response 0x5465 0x65/0xbe1b04e2 rx ring 90[80]
iwm0: unhandled firmware response 0xa01d 0x1d/0xbe635077 rx ring 90[152]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x5aae 0xae/0xbf7b0a7d rx ring 91[176]
iwm0: unhandled firmware response 0x6347 0x47/0x16b42d2 rx ring 0[105]
iwm0: unhandled firmware response 0x901f 0x1f/0xc07b3f71 rx ring 92[176]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7750 0x50/0x16b65f3 rx ring 0[105]
iwm0: unhandled firmware response 0x782e 0x2e/0x16b6cce rx ring 0[105]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7a7e 0x7e/0x16b7b1f rx ring 0[105]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x600b 0xb/0xc4cf0d3d rx ring 97[4]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x8011 0x11/0xc5cc2cc7 rx ring 98[1]
iwm0: unhandled firmware response 0xc007 0x7/0xc64f6c7d rx ring 98[132]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xb 0xb/0xc74fac02 rx ring 99[133]
iwm0: unhandled firmware response 0x701f 0x1f/0xc7cb1bda rx ring 100[0]
iwm0: unhandled firmware response 0xe2cc 0xcc/0x16c24aa rx ring 0[105]
iwm0: unhandled firmware response 0xecb1 0xb1/0x16c38e5 rx ring 0[105]
iwm0: unhandled firmware response 0x3007 0x7/0xc93bdb0e rx ring 101[113]
iwm0: unhandled firmware response 0x8020 0x20/0xc9b42aec rx ring 101[233]
iwm0: unhandled firmware response 0x301e 0x1e/0xca35daab rx ring 102[107]
iwm0: unhandled firmware response 0x9d46 0x46/0x16cf56d rx ring 0[106]
iwm0: unhandled firmware response 0xb008 0x8/0xcb3c5a12 rx ring 103[113]
iwm0: unhandled firmware response 0x3333 0x33/0x4208 rx ring 0[0]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xf020 0x20/0xccb9996d rx ring 104[238]
iwm0: unhandled firmware response 0x370 0x70/0x16d8143 rx ring 0[107]
iwm0: unhandled firmware response 0xe010 0x10/0xcdbe88db rx ring 105[243]
iwm0: unhandled firmware response 0x563 0x63/0xce25adfa rx ring 106[91]
iwm0: unhandled firmware response 0x4f24 0x24/0x16de4fc rx ring 0[107]
iwm0: unhandled firmware response 0x641f 0x1f/0x16dff25 rx ring 0[107]
iwm0: unhandled firmware response 0xf01f 0x1f/0xcfa797f5 rx ring 107[220]
iwm0: unhandled firmware response 0x5018 0x18/0xd02df7ab rx ring 108[99]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xbb55 0x55/0x16e731b rx ring 0[107]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x8008 0x8/0xd2332699 rx ring 110[104]
iwm0: unhandled firmware response 0x1009 0x9/0xd2b1b65b rx ring 110[231]
iwm0: unhandled firmware response 0x833 0x33/0x16ee6fd rx ring 0[108]
iwm0: unhandled firmware response 0xa 0xa/0xd3b6a5d9 rx ring 111[236]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x4008 0x8/0xd62de49c rx ring 114[99]
iwm0: unhandled firmware response 0xc 0xc/0xd6a4a464 rx ring 114[218]
iwm0: unhandled firmware response 0x6594 0x94/0x2c4208 rx ring 114[156]
iwm0: unhandled firmware response 0xd010 0x10/0xd7a673e7 rx ring 115[219]
iwm0: unhandled firmware response 0xbe90 0x90/0x16fe5df rx ring 0[108]
iwm0: unhandled firmware response 0xc5ad 0xad/0x16ff5b1 rx ring 0[108]
iwm0: unhandled firmware response 0x7008 0x8/0xd92d131d rx ring 117[98]
iwm0: unhandled firmware response 0x17 0x17/0xd9aba2ed rx ring 117[225]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x8008 0x8/0xda992268 rx ring 118[206]
iwm0: unhandled firmware response 0x5900 0x0/0x170aa2a rx ring 0[109]
iwm0: unhandled firmware response 0x9 0x9/0xdb9fa1e6 rx ring 119[213]
iwm0: unhandled firmware response 0xd9ab 0xab/0x171323d rx ring 0[109]
iwm0: unhandled firmware response 0xd008 0x8/0xdca17164 rx ring 120[214]
iwm0: unhandled firmware response 0xb007 0x7/0xdd1b5127 rx ring 121[80]
iwm0: unhandled firmware response 0xe0 0xe0/0x400d rx ring 0[0]
iwm0: unhandled firmware response 0xe0 0xe0/0x400d rx ring 0[0]
iwm0: unhandled firmware response 0x2c86 0x86/0x1719c06 rx ring 0[110]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x810a 0xa/0x17208f5 rx ring 0[110]
iwm0: unhandled firmware response 0xd008 0x8/0xe0706f7b rx ring 124[165]
iwm0: unhandled firmware response 0xacb3 0xb3/0x1723e4c rx ring 0[110]
iwm0: unhandled firmware response 0xc0eb 0xeb/0x17259fe rx ring 0[110]
iwm0: unhandled firmware response 0xda38 0x38/0x1727915 rx ring 0[110]
iwm0: unhandled firmware response 0xe2b0 0xb0/0x1728a04 rx ring 0[110]
iwm0: unhandled firmware response 0xfb74 0x74/0x172af9d rx ring 0[110]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x482b 0x2b/0x173185a rx ring 0[111]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7a4 0xa4/0x400d rx ring 0[0]
iwm0: unhandled firmware response 0x400c 0xc/0xe59bdce8 rx ring 1[209]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0x7aa5 0xa5/0xe8051649 rx ring 4[58]
iwm0: unhandled firmware response 0x901f 0x1f/0xe8852b84 rx ring 4[186]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xf017 0x17/0xe96f8b05 rx ring 5[164]
iwm0: unhandled firmware response 0xffff 0xff/0x80 rx ring 127[255]
iwm0: unhandled firmware response 0xb94b 0x4b/0xea7653b5 rx ring 6[171]
iwm0: unhandled firmware response 0xf84e 0x4e/0x1742047 rx ring 0[111]
iwm0: unhandled firmware response 0x8999 0x99/0xebc6235c rx ring 7[251]
iwm0: unhandled firmware response 0x4cb 0xcb/0x1744782 rx ring 0[112]
iwm0: unhandled firmware response 0x4bff 0xff/0x1748f09 rx ring 0[112]
iwm0: unhandled firmware response 0x6038 0x38/0xed3cf93f rx ring 9[114]
iwm0: Some HCMDs skipped?: idx=114 queued=0 cur=45
panic: kernel diagnostic assertion "ring->queued > 0" failed: file "/home/alnsn/netbsd-current/clean/src/sys/dev/pci/if_iwm.c", line 4459 
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x140
ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
iwm_softintr() at netbsd:iwm_softintr+0xd33
softint_dispatch() at netbsd:softint_dispatch+0xd3
DDB lost frame for netbsd:Xsoftintr+0x4f, trying 0xffffe40115ae1ff0
Xsoftintr() at netbsd:Xsoftintr+0x4f
--- interrupt ---
0:
cpu0: End traceback...

dumping to dev 20,17 (offset=212951, size=3119109):
dump 

>How-To-Repeat:
It's a random crash. I've been running the same kernel for a couple of months I saw 'iwm fatal firmware error' many times but it never crashed before.
>Fix:
Not known.