[Bug 255012] iwn driver kernel panic

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

Bug ID: 255012
Summary: iwn driver kernel panic
Product: Base System
Version: CURRENT
Hardware: amd64
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: wireless
Assignee: ***@FreeBSD.org
Reporter: ***@gmail.com

The iwn driver, after a few hours of use, will kernel panic with a page fault.
It would seem that it occurs in iwn_rx_compressed_ba(). This is reproducable.

Steps to reproduce:
1. Connect to an AP (in my case it's using wpa_supplicant using WPA2 PSK)
2. Allow traffic to flow in and out of the interface (In this case, you can
just ping an address, and to speed up the process, put a wait time of 0.1 is
what I do to reproduce, but this happens during normal usage as well)
3. Wait for kernel panic.



Attached is a screenshot of the backtrace (please excuse the quality, I only
had a phone camera available), and am available to help as needed, although
response may take anywhere from instant to a few days. No longer than 3 days
usually.

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

--- Comment #1 from Nathaniel Barragan <***@gmail.com> ---
Created attachment 224058
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=224058&action=edit
Screenshot of backtrace

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

--- Comment #2 from Nathaniel Barragan <***@gmail.com> ---
System Specs: Lenovo ThinkPad T61 with Intel PRO/Wireless 4965 AG

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

***@catwhisker.org changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |***@catwhisker.org

--- Comment #3 from ***@catwhisker.org ---
Hmm... I use an iwn(4) NIC on my laptop, on which I track head (and stable/12
and (since it was branches) stable/13) daily, performing source-based updates
in-place. And when clang/llvm gets rebuilt, it's running head solidly for
quite a while.... I have no iwn-related panics at all in the last couple of
years that I recall, and no panics recently.

Most recent:
FreeBSD g1-55.catwhisker.org 14.0-CURRENT FreeBSD 14.0-CURRENT #210
main-n246006-5e98cae661f3: Mon Apr 12 05:32:14 PDT 2021
***@g1-55.catwhisker.org:/common/S4/obj/usr/src/amd64.amd64/sys/CANARY amd64
1400008 1400008

FreeBSD g1-55.catwhisker.org 13.0-STABLE FreeBSD 13.0-STABLE #205
stable/13-n245198-659d71186597: Mon Apr 12 05:53:14 PDT 2021
***@g1-55.catwhisker.org:/common/S3/obj/usr/src/amd64.amd64/sys/CANARY amd64
1300500 1300500

FreeBSD g1-55.catwhisker.org 12.2-STABLE FreeBSD 12.2-STABLE #1005
stable/12-n232956-5fb6cfadcd9: Mon Apr 12 03:35:30 PDT 2021
***@g1-55.catwhisker.org:/common/S1/obj/usr/src/amd64.amd64/sys/CANARY amd64
1202505 1202505

And:

***@pci0:3:0:0: class=0x028000 card=0x11218086 chip=0x422b8086 rev=0x35
hdr=0x00
vendor = 'Intel Corporation'
device = 'Centrino Ultimate-N 6300'
class = network

g1-55(12.2-S)[10] ifconfig wlan0
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
ether 3c:a9:f4:ba:87:c4
inet 172.17.1.55 netmask 0xffff0000 broadcast 172.17.255.255
groups: wlan
ssid lmdhw-net channel 149 (5745 MHz 11a) bssid 04:18:d6:21:22:1f
regdomain FCC country US authmode WPA2/802.11i privacy ON
deftxkey UNDEF AES-CCM 2:128-bit AES-CCM 3:128-bit txpower 23 bmiss 10
mcastrate 6 mgmtrate 6 scanvalid 60 wme roaming MANUAL
parent interface: iwn0
media: IEEE 802.11 Wireless Ethernet OFDM/36Mbps mode 11a
status: associated
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>


[while running stable/12]

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

Bjoern A. Zeeb <***@FreeBSD.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |***@FreeBSD.org

--- Comment #4 from Bjoern A. Zeeb <***@FreeBSD.org> ---
(In reply to david from comment #3)

David is on 11a; try setting mod to 11a and forget about 11n and s if the
problem goes away.

[b***@freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=255012

--- Comment #5 from Nathaniel Barragan <***@gmail.com> ---
I am also on 11a and I still have this issue.