2008-10-24 18:55:08

by John W. Linville

[permalink] [raw]
Subject: Re: iwl4965 crash in iwl-tx.c

You might want to Cc: [email protected]...

Can you by chance recreate this with 2.6.28-rc1?

John

On Fri, Oct 24, 2008 at 02:05:15PM -0400, Noah Meyerhans wrote:
> Hi all. I've recently experienced frequent crashes related to the
> iwl4965 wireless interface in my Thinkpad X300. Kernel output,
> generated by 2.6.27.3, is included below. I've experienced similar
> problems with older kernels as packaged by Debian beginning no later
> than 2.6.24. The crash doesn't seem directly related to network load,
> and will happen even if the interface is completely idle except for
> normal broadcast traffic and other background noise.
>
> lspci reports the hardware as:
> 03:00.0 Network controller: Intel Corporation PRO/Wireless 4965 AG or AGN Network Connection (rev 61)
> Subsystem: Intel Corporation Lenovo ThinkPad T51
> Flags: fast devsel, IRQ 17
> Memory at f9f00000 (64-bit, non-prefetchable) [size=8K]
> Capabilities: [c8] Power Management version 3
> Capabilities: [d0] Message Signalled Interrupts: Mask- 64bit+ Queue=0/0 Enable-
> Capabilities: [e0] Express Endpoint, MSI 00
> Capabilities: [100] Advanced Error Reporting <?>
> Capabilities: [140] Device Serial Number 6d-57-26-ff-ff-3b-1f-00
> Kernel driver in use: iwlagn
> Kernel modules: iwlagn
>
>
> I'm happy to test patches or provide additional information if it's
> helpful...
>
> Thanks,
> noah
>
> [ 3365.764593] iwlagn: Error wrong command queue 63 command id 0x0
> [ 3365.764649] ------------[ cut here ]------------
> [ 3365.764657] kernel BUG at drivers/net/wireless/iwlwifi/iwl-tx.c:1198!
> [ 3365.764666] invalid opcode: 0000 [#1] SMP
> [ 3365.764679] Modules linked in: netconsole configfs i915 drm rfcomm l2cap uinput ppdev parport_pc lp parport ipv6 acpi_cpufreq cpufreq_powersave cpufreq_stats cpufreq_userspace cpufreq_conservative cpufreq_ondemand freq_table fuse loop joydev snd_hda_intel hci_usb bluetooth snd_seq_dummy snd_seq_oss snd_pcm_oss snd_mixer_oss arc4 snd_seq_midi snd_rawmidi snd_pcm snd_seq_midi_event snd_seq ecb crypto_blkcipher psmouse serio_raw uvcvideo snd_timer compat_ioctl32 snd_seq_device pcspkr videodev v4l1_compat snd i2c_i801 i2c_core iTCO_wdt iwlagn soundcore iwlcore snd_page_alloc mac80211 battery cfg80211 ac video output button intel_agp agpgart thinkpad_acpi rfkill evdev led_class nvram ext3 jbd mbcache sg sr_mod cdrom sd_mod piix ide_pci_generic ide_core ata_generic ahci ata_piix libata scsi_mod dock ehci_hcd uhci_hcd usbcore e1000e thermal processor fan thermal_sys
> [ 3365.765112]
> [ 3365.765121] Pid: 3415, comm: Xorg Not tainted (2.6.27.3-custom #1)
> [ 3365.765130] EIP: 0060:[<f8d9cec9>] EFLAGS: 00013096 CPU: 0
> [ 3365.765170] EIP is at iwl_tx_cmd_complete+0x3a/0x21f [iwlcore]
> [ 3365.765178] EAX: 00000046 EBX: f7bc0de0 ECX: f4a27edc EDX: f8da27c5
> [ 3365.765185] ESI: ee458000 EDI: f7bc2770 EBP: f750f058 ESP: f4a27ed8
> [ 3365.765192] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
> [ 3365.765200] Process Xorg (pid: 3415, ti=f4a26000 task=f752e5e0 task.ti=f4a26000)
> [ 3365.765207] Stack: f8da27c5 0000003f 00000000 00000000 00000000 00000000 00000001 ffffffff
> [ 3365.765246] f2a03780 00000000 f7bc0de0 f7bc2770 00000001 f750f058 f8db1632 00000000
> [ 3365.765285] 2e458000 f7bc3144 f7bc3138 00000026 00000025 00000008 00000000 f7bc0de0
> [ 3365.765330] Call Trace:
> [ 3365.765352] [<f8db1632>] iwl_rx_handle+0xff/0x1ed [iwlagn]
> [ 3365.765385] [<f8db18cb>] iwl4965_irq_tasklet+0x1ab/0x248 [iwlagn]
> [ 3365.765411] [<c012807a>] tasklet_action+0x6a/0xc9
> [ 3365.765429] [<c01285b7>] __do_softirq+0x78/0xe4
> [ 3365.765443] [<c0128668>] do_softirq+0x45/0x53
> [ 3365.765458] [<c0128770>] irq_exit+0x35/0x69
> [ 3365.765472] [<c0105fda>] do_IRQ+0x52/0x64
> [ 3365.765487] [<c010434f>] common_interrupt+0x23/0x28
> [ 3365.765504] =======================
> [ 3365.765514] Code: b1 ac 00 00 00 66 8b 46 06 0f b6 d4 81 e2 bf 00 00 00 83 fa 04 0f 84 d7 01 00 00 0f b6 46 04 50 52 68 c5 27 da f8 e8 c1 ae 52 c7 <0f> 0b 83 c4 0c eb fe 48 21 e8 0f b6 c0 8b 84 83 5c 34 00 00 89
> [ 3365.765757] EIP: [<f8d9cec9>] iwl_tx_cmd_complete+0x3a/0x21f [iwlcore] SS:ESP 0068:f4a27ed8
> [ 3365.765803] Kernel panic - not syncing: Fatal exception in interrupt
> [ 3365.765815] ------------[ cut here ]------------
> [ 3365.765822] WARNING: at kernel/smp.c:332 smp_call_function_mask+0x34/0x18f()
> [ 3365.765832] Modules linked in: netconsole configfs i915 drm rfcomm l2cap uinput ppdev parport_pc lp parport ipv6 acpi_cpufreq cpufreq_powersave cpufreq_stats cpufreq_userspace cpufreq_conservative cpufreq_ondemand freq_table fuse loop joydev snd_hda_intel hci_usb bluetooth snd_seq_dummy snd_seq_oss snd_pcm_oss snd_mixer_oss arc4 snd_seq_midi snd_rawmidi snd_pcm snd_seq_midi_event snd_seq ecb crypto_blkcipher psmouse serio_raw uvcvideo snd_timer compat_ioctl32 snd_seq_device pcspkr videodev v4l1_compat snd i2c_i801 i2c_core iTCO_wdt iwlagn soundcore iwlcore snd_page_alloc mac80211 battery cfg80211 ac video output button intel_agp agpgart thinkpad_acpi rfkill evdev led_class nvram ext3 jbd mbcache sg sr_mod cdrom sd_mod piix ide_pci_generic ide_core ata_generic ahci ata_piix libata scsi_mod dock ehci_hcd uhci_hcd usbcore e1000e thermal processor fan thermal_sys
> [ 3365.766351] Pid: 3415, comm: Xorg Tainted: G D 2.6.27.3-custom #1
> [ 3365.766358] [<c01240f2>] warn_on_slowpath+0x40/0x63
> [ 3365.766384] [<c0271417>] netpoll_send_udp+0xa8/0x1d5
> [ 3365.766399] [<f911913c>] write_msg+0x80/0xbf [netconsole]
> [ 3365.766421] [<f91190bc>] write_msg+0x0/0xbf [netconsole]
> [ 3365.766436] [<c02c9acc>] _spin_lock_irqsave+0x23/0x29
> [ 3365.766448] [<c0124360>] __call_console_drivers+0x4f/0x5b
> [ 3365.766460] [<c012476e>] release_console_sem+0x17b/0x194
> [ 3365.766472] [<c013f8bb>] smp_call_function_mask+0x34/0x18f
> [ 3365.766485] [<c010f1b1>] stop_this_cpu+0x0/0x41
> [ 3365.766498] [<c0148608>] crash_kexec+0xa9/0xb0
> [ 3365.766516] [<f8d9cedd>] iwl_tx_cmd_complete+0x4e/0x21f [iwlcore]
> [ 3365.766547] [<c0148608>] crash_kexec+0xa9/0xb0
> [ 3365.766560] [<c013fa25>] smp_call_function+0xf/0x11
> [ 3365.766572] [<c010f188>] native_smp_send_stop+0x18/0x41
> [ 3365.766584] [<c02c7cee>] panic+0x47/0xe3
> [ 3365.766597] [<c0104a14>] oops_end+0x7f/0x8f
> [ 3365.766608] [<c01057b8>] do_invalid_op+0x0/0x6b
> [ 3365.766620] [<c010581a>] do_invalid_op+0x62/0x6b
> [ 3365.766638] [<f8d9cec9>] iwl_tx_cmd_complete+0x3a/0x21f [iwlcore]
> [ 3365.766669] [<c011ad73>] __wake_up+0x29/0x39
> [ 3365.766682] [<c01245f1>] wake_up_klogd+0x2b/0x2d
> [ 3365.766694] [<c02c9daa>] error_code+0x72/0x78
> [ 3365.766717] [<f8d9cec9>] iwl_tx_cmd_complete+0x3a/0x21f [iwlcore]
> [ 3365.766846] [<f8db1632>] iwl_rx_handle+0xff/0x1ed [iwlagn]
> [ 3365.766871] [<f8db18cb>] iwl4965_irq_tasklet+0x1ab/0x248 [iwlagn]
> [ 3365.766893] [<c012807a>] tasklet_action+0x6a/0xc9
> [ 3365.766905] [<c01285b7>] __do_softirq+0x78/0xe4
> [ 3365.766916] [<c0128668>] do_softirq+0x45/0x53
> [ 3365.766926] [<c0128770>] irq_exit+0x35/0x69
> [ 3365.766937] [<c0105fda>] do_IRQ+0x52/0x64
> [ 3365.766948] [<c010434f>] common_interrupt+0x23/0x28
> [ 3365.766960] =======================
> [ 3365.766966] ---[ end trace e5b066fc1a519937 ]---
> [ 3365.766975] ------------[ cut here ]------------
> [ 3365.766982] WARNING: at kernel/smp.c:219 smp_call_function_single+0x32/0xbd()
> [ 3365.766988] Modules linked in: netconsole configfs i915 drm rfcomm l2cap uinput ppdev parport_pc lp parport ipv6 acpi_cpufreq cpufreq_powersave cpufreq_stats cpufreq_userspace cpufreq_conservative cpufreq_ondemand freq_table fuse loop joydev snd_hda_intel hci_usb bluetooth snd_seq_dummy snd_seq_oss snd_pcm_oss snd_mixer_oss arc4 snd_seq_midi snd_rawmidi snd_pcm snd_seq_midi_event snd_seq ecb crypto_blkcipher psmouse serio_raw uvcvideo snd_timer compat_ioctl32 snd_seq_device pcspkr videodev v4l1_compat snd i2c_i801 i2c_core iTCO_wdt iwlagn soundcore iwlcore snd_page_alloc mac80211 battery cfg80211
>
>



--
John W. Linville Linux should be at the core
[email protected] of your literate lifestyle.


2008-10-28 17:39:20

by Reinette Chatre

[permalink] [raw]
Subject: Re: iwl4965 crash in iwl-tx.c

On Fri, 2008-10-24 at 12:17 -0700, Noah Meyerhans wrote:
> On Fri, Oct 24, 2008 at 02:54:20PM -0400, John W. Linville wrote:
> > You might want to Cc: [email protected]...
>
> Thanks; I'll follow up there and leave linux-kernel off of future
> replies.
>
> >
> > Can you by chance recreate this with 2.6.28-rc1?
>
> Compiling this now...

There is an open bug for this problem at
http://www.intellinuxwireless.org/bugzilla/show_bug.cgi?id=1703. Please
add your results there.

Reinette


2008-10-28 19:24:43

by Noah Meyerhans

[permalink] [raw]
Subject: Re: iwl4965 crash in iwl-tx.c

On Tue, Oct 28, 2008 at 10:39:43AM -0700, reinette chatre wrote:
> > > You might want to Cc: [email protected]...
> >
> > Thanks; I'll follow up there and leave linux-kernel off of future
> > replies.
> >
> > > Can you by chance recreate this with 2.6.28-rc1?
> >
> > Compiling this now...
>
> There is an open bug for this problem at
> http://www.intellinuxwireless.org/bugzilla/show_bug.cgi?id=1703. Please
> add your results there.

Thanks, I've added an attachment to that bug containing the output
generated by 2.6.28-rc1. -rc1 does still show the same "wrong command
queue" error, but doesn't actually hang.

noah


Attachments:
(No filename) (639.00 B)
signature.asc (189.00 B)
Digital signature
Download all attachments

2008-10-24 19:46:01

by Noah Meyerhans

[permalink] [raw]
Subject: Re: iwl4965 crash in iwl-tx.c

On Fri, Oct 24, 2008 at 02:54:20PM -0400, John W. Linville wrote:
> You might want to Cc: [email protected]...

Thanks; I'll follow up there and leave linux-kernel off of future
replies.

>
> Can you by chance recreate this with 2.6.28-rc1?

Compiling this now...

noah


Attachments:
(No filename) (285.00 B)
signature.asc (189.00 B)
Digital signature
Download all attachments