Search Linux Wireless

Re: iwl4965 oops in 2.6.26-rc5 x86_64

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Jun 7, 2008 at 4:28 PM, Thomas Backlund <tmb@xxxxxxxxxxxx> wrote:
> Tomas Winkler skrev:
>>
>> On Sat, Jun 7, 2008 at 12:43 AM, Thomas Backlund <tmb@xxxxxxxxxxxx> wrote:
>>>
>>> Tomas Winkler skrev:
>>>>
>>>> On Fri, Jun 6, 2008 at 5:51 PM, Thomas Backlund <tmb@xxxxxxxxxxxx>
>>>> wrote:
>>>>>
>>>>> Tomas Winkler skrev:
>>>>>>
>>>>>> On Fri, Jun 6, 2008 at 3:33 PM, Thomas Backlund <tmb@xxxxxxxxxxxx>
>>>>>> wrote:
>>>>>>>
>>>>>>> Thomas Backlund skrev:
>>>>>>>>
>>>>>>>> Tomas Winkler skrev:
>>>>>>>>>
>>>>>>>>> On Fri, Jun 6, 2008 at 3:44 AM, Ian Schram <ischram@xxxxxxxxxx>
>>>>>>>>> wrote:
>>>>>>>>>>
>>>>>>>>>> Isn't this the Oops Joonwoo Park wanted to patch with
>>>>>>>>>>
>>>>>>>>>> "[PATCH] iwlwifi: fix oops on wep key insertion" 27/5/2008
>>>>>>>>>>
>>>>>>>>>> invalid length of webkey that would/should be handled in mac80211?
>>>>>>>>>>
>>>>>>>>>> ian
>>>>>>>>>
>>>>>>>>> Yes, it looks like.
>>>>>>>>
>>>>>>>> Ummm, what has a wep key to do with me trying to access a
>>>>>>>> WPA2-Personal
>>>>>>>> encrypted net ?
>>>>>>
>>>>>> Not sure yet, but mac is trying to assign default/static wep key.
>>>>>>
>>>>>> :iwlcore:iwl_send_static_wepkey_cmd+0xcb/0xd5
>>>>>> :iwlcore:iwl_set_default_wep_key+0xa2/0xbc
>>>>>>
>>>>>> Try to set the encryption explicitly
>>>>>> network={
>>>>>>  psk="*************************"
>>>>>>  scan_ssid=1
>>>>>>  ssid="dlink"
>>>>>>  pairwise=CCMP
>>>>>>  group=CCMP
>>>>>>  }
>>>>>>
>>>>>>
>>>>> That didn't help at all.
>>>>>
>>>>> What's more it prevented the wifi to work on 2.6.24.7 so I had to
>>>>> remove
>>>>> the
>>>>> lines again...
>>>>>
>>>> So what's your AP configuration TKIP?
>>>>
>>> I've switched to clean WPA2-AES on the AP, but it does not do any
>>> difference... I still get the oops...
>>>
>>
>> I would like to see the log of this one
>>
>>>> Second try also with sw decryption:
>>>>
>>>> in /etc/modprobe.conf
>>>> options iwl4965 swcrypto=1
>>>>
>>>
>>> That works.
>>> I now run a clean 2.6.26-rc5
>>>
>> Okay thanks for checking this one.
>>
>>> I also tried to bisect between 2.6.25 and 2.6.26-rc1 and ended up with:
>>>
>>> [root@5720g linux-2.6]# git bisect good
>>> 8318d78a44d49ac1edf2bdec7299de3617c4232e is first bad commit
>>> commit 8318d78a44d49ac1edf2bdec7299de3617c4232e
>>> Author: Johannes Berg <johannes@xxxxxxxxxxxxxxxx>
>>> Date:   Thu Jan 24 19:38:38 2008 +0100
>>>
>>>   cfg80211 API for channels/bitrates, mac80211 and driver conversion
>>>
>>>
>>>
>>> Any more I can provide to help finding the bug ?
>>
>> Just the log from AES try with  I will try to reproduce this as soon
>> as I get to this particular AP and 64 bits kernel.
>>
>
> with wpa_supplicant.conf:
> network={
>   psk="*************************"
>   scan_ssid=1
>   ssid="dlink"
>   pairwise=CCMP
>   group=CCMP
> }
>
> I also rebuilt the 2.6.26-rc5 with enabled mac* and iwl* debug options, so
> the configs are:
>
> [thomas@5720g 1]$ grep MAC8 config-2.6.26-0.rc5.1mdvsmp
> CONFIG_MAC80211=m
> CONFIG_MAC80211_RC_DEFAULT_PID=y
> # CONFIG_MAC80211_RC_DEFAULT_NONE is not set
> CONFIG_MAC80211_RC_DEFAULT="pid"
> CONFIG_MAC80211_RC_PID=y
> CONFIG_MAC80211_MESH=y
> CONFIG_MAC80211_LEDS=y
> CONFIG_MAC80211_DEBUGFS=y
> CONFIG_MAC80211_DEBUG_PACKET_ALIGNMENT=y
> CONFIG_MAC80211_DEBUG=y
> CONFIG_MAC80211_HT_DEBUG=y
> CONFIG_MAC80211_VERBOSE_DEBUG=y
> # CONFIG_MAC80211_LOWTX_FRAME_DUMP is not set
> CONFIG_MAC80211_DEBUG_COUNTERS=y
> CONFIG_MAC80211_IBSS_DEBUG=y
> CONFIG_MAC80211_VERBOSE_PS_DEBUG=y
> CONFIG_MAC80211_VERBOSE_MPL_DEBUG=y
>
> [thomas@5720g 1]$ grep IWL config-2.6.26-0.rc5.1mdvsmp
> CONFIG_IWLWIFI=m
> CONFIG_IWLCORE=m
> CONFIG_IWLWIFI_LEDS=y
> CONFIG_IWLWIFI_RFKILL=y
> CONFIG_IWL4965=m
> CONFIG_IWL4965_HT=y
> CONFIG_IWL4965_LEDS=y
> CONFIG_IWL4965_SPECTRUM_MEASUREMENT=y
> CONFIG_IWL4965_SENSITIVITY=y
> CONFIG_IWLWIFI_DEBUG=y
> CONFIG_IWLWIFI_DEBUGFS=y
> CONFIG_IWL3945=m
> CONFIG_IWL3945_SPECTRUM_MEASUREMENT=y
> CONFIG_IWL3945_LEDS=y
> CONFIG_IWL3945_DEBUG=y
>
>
> Here is the log:
>
> Jun  7 16:05:30 5720g kernel: firmware: requesting iwlwifi-4965-1.ucode
> Jun  7 16:05:30 5720g kernel: Registered led device: iwl-phy0:radio
> Jun  7 16:05:30 5720g kernel: Registered led device: iwl-phy0:assoc
> Jun  7 16:05:30 5720g kernel: Registered led device: iwl-phy0:RX
> Jun  7 16:05:30 5720g kernel: Registered led device: iwl-phy0:TX
> Jun  7 16:05:31 5720g kernel: phy0: HW CONFIG: freq=2412
> Jun  7 16:05:31 5720g kernel: ADDRCONF(NETDEV_UP): wlan0: link is not ready
> Jun  7 16:05:31 5720g kernel: phy0: HW CONFIG: freq=2412
> Jun  7 16:05:31 5720g kernel: BUG: unable to handle kernel NULL pointer
> dereference at 0000000000000000
> Jun  7 16:05:31 5720g kernel: IP: [<ffffffffa026e036>]
> :iwl4965:iwl4965_enqueue_hcmd+0x175/0x2c2
> Jun  7 16:05:31 5720g kernel: PGD 0
> Jun  7 16:05:31 5720g kernel: Oops: 0000 [1] SMP
> Jun  7 16:05:31 5720g kernel: CPU 1
> Jun  7 16:05:31 5720g kernel: Modules linked in: af_packet kvm_intel kvm
> snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device
> snd_pcm_oss snd_mixer_oss ipv6 xt_tcpudp iptable_filter ip_tables x_tables
> binfmt_misc loop dm_mod cpufreq_ondemand cpufreq_conservative
> cpufreq_powersave acpi_cpufreq freq_table tifm_sd tifm_7xx1 tifm_core nvram
> pcmcia ohci1394 ieee1394 mmc_block battery ac arc4 ecb crypto_blkcipher
> firewire_ohci firewire_core video container yenta_socket rsrc_nonstatic
> crc_itu_t sdhci output snd_hda_intel pcmcia_core snd_pcsp iwl4965 mmc_core
> snd_pcm firmware_class nsc_ircc thermal button joydev rtc_cmos snd_timer
> iwlcore irda snd i2c_i801 rtc_core iTCO_wdt rfkill crc_ccitt evdev soundcore
> rtc_lib serio_raw acer_wmi processor mac80211 wmi sr_mod iTCO_vendor_support
> snd_page_alloc i2c_core intel_agp cdrom led_class sg cfg80211 tg3
> ide_generic piix ide_core ata_piix ahci libata dock sd_mod scsi_mod ext3 jbd
> uhci_hcd ohci_hcd ehci_hcd usbcore [last unloaded: nf_conntrack]
> Jun  7 16:05:31 5720g kernel: Pid: 10, comm: events/1 Not tainted
> 2.6.26-0.rc5.1mdvsmp #1
> Jun  7 16:05:31 5720g kernel: RIP: 0010:[<ffffffffa026e036>]
> [<ffffffffa026e036>] :iwl4965:iwl4965_enqueue_hcmd+0x175/0x2c2
> Jun  7 16:05:31 5720g kernel: RSP: 0018:ffff81013fb15b60  EFLAGS: 00010086
> Jun  7 16:05:31 5720g kernel: RAX: 0000000000000000 RBX: ffff8100bf84c300
> RCX: 0000000000000064
> Jun  7 16:05:31 5720g kernel: RDX: 0000000000000022 RSI: 0000000000000000
> RDI: ffff8100bf84c318
> Jun  7 16:05:31 5720g kernel: RBP: ffff81013fb15bd0 R08: ffff8100bf941100
> R09: 0000000000000300
> Jun  7 16:05:31 5720g kernel: R10: ffff81013fb15a10 R11: ffff81013fb10a78
> R12: ffff81013fb15cf0
> Jun  7 16:05:31 5720g kernel: R13: 00000000a0290068 R14: ffff81013e1021c0
> R15: ffff8101364a1a20
> Jun  7 16:05:31 5720g kernel: FS:  0000000000000000(0000)
> GS:ffff81013fab8ac0(0000) knlGS:0000000000000000
> Jun  7 16:05:31 5720g kernel: CS:  0010 DS: 0018 ES: 0018 CR0:
> 000000008005003b
> Jun  7 16:05:31 5720g kernel: CR2: 0000000000000000 CR3: 0000000000201000
> CR4: 00000000000026e0
> Jun  7 16:05:31 5720g kernel: DR0: 0000000000000000 DR1: 0000000000000000
> DR2: 0000000000000000
> Jun  7 16:05:31 5720g kernel: DR3: 0000000000000000 DR6: 00000000ffff0ff0
> DR7: 0000000000000400
> Jun  7 16:05:31 5720g kernel: Process events/1 (pid: 10, threadinfo
> ffff81013fb14000, task ffff81013fb102c0)
> Jun  7 16:05:31 5720g kernel: Stack:  ffff81013fb14000 ffffffff806f7ed8
> 0000000000000001 ffffffff806f8660
> Jun  7 16:05:31 5720g kernel:  ffffffff806f8648 ffffffff8075bb50
> ffff81013e102c08 000000023fb10a10
> Jun  7 16:05:31 5720g kernel:  0000000000000006 ffff8101364a1a00
> ffff81013fb15cf0 ffff81013e1021c0
> Jun  7 16:05:31 5720g kernel: Call Trace:
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa021357e>]
> :iwlcore:iwl_send_cmd_sync+0x94/0x313
> Jun  7 16:05:31 5720g kernel:  [<ffffffff80257ed5>] ?
> __lock_acquire+0xbee/0xd5a
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa021384e>]
> :iwlcore:iwl_send_cmd+0x16/0x18
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa0284784>]
> :iwl4965:iwl_send_static_wepkey_cmd+0xcb/0xd5
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa0284832>]
> :iwl4965:iwl_set_default_wep_key+0xa4/0xbe
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa026d14b>]
> :iwl4965:iwl4965_mac_set_key+0x1c9/0x2d3
> Jun  7 16:05:31 5720g kernel:  [<ffffffff803049ed>] ?
> debugfs_remove+0xd5/0xda
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa017e3ca>]
> :mac80211:__ieee80211_key_todo+0x124/0x226
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa017e57a>]
> :mac80211:ieee80211_key_todo+0x17/0x25
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa017e591>]
> :mac80211:key_todo+0x9/0xb
> Jun  7 16:05:31 5720g kernel:  [<ffffffff80247104>] run_workqueue+0xfc/0x203
> Jun  7 16:05:31 5720g kernel:  [<ffffffffa017e588>] ?
> :mac80211:key_todo+0x0/0xb
> Jun  7 16:05:31 5720g kernel:  [<ffffffff802472eb>] worker_thread+0xe0/0xf1
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8024acac>] ?
> autoremove_wake_function+0x0/0x38
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8024720b>] ? worker_thread+0x0/0xf1
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8024a97b>] kthread+0x49/0x76
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8020d248>] child_rip+0xa/0x12
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8020c7dc>] ? restore_args+0x0/0x30
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8024a932>] ? kthread+0x0/0x76
> Jun  7 16:05:31 5720g kernel:  [<ffffffff8020d23e>] ? child_rip+0x0/0x12
> Jun  7 16:05:31 5720g kernel:
> Jun  7 16:05:31 5720g kernel:
> Jun  7 16:05:31 5720g kernel: Code: 69 c8 80 01 00 00 41 8a 04 24 4c 89 cb
> 49 03 9e c0 44 00 00 88 43 14 48 89 df f3 a5 48 8d 7b 18 41 0f b7 4c 24 02
> 49 8b 74 24 18 <f3> a4 c6 43 15 00 41 0f b6 96 94 44 00 00 89 d0 80 cc 04 f6
> 43
> Jun  7 16:05:31 5720g kernel: RIP  [<ffffffffa026e036>]
> :iwl4965:iwl4965_enqueue_hcmd+0x175/0x2c2
> Jun  7 16:05:31 5720g kernel:  RSP <ffff81013fb15b60>
> Jun  7 16:05:31 5720g kernel: CR2: 0000000000000000
> Jun  7 16:05:31 5720g kernel: ---[ end trace 61cbfb837f7cd04e ]---
>
>
>
>
>> One more thing is suspicious in the WEP key try is that I don't see
>> this can ever happen. The command that should be here iis
>> wlcore:iwl_send_cmd_async
>> Jun  5 19:55:06 5720g kernel:  [<ffffffffa018ee37>]
>> :iwlcore:iwl_send_cmd_sync+0x94/0x257
>> Jun  5 19:55:06 5720g kernel:  [<ffffffff80257ed5>] ?
>> __lock_acquire+0xbee/0xd5a
>> Jun  5 19:55:06 5720g kernel:  [<ffffffffa018f04b>]
>> :iwlcore:iwl_send_cmd+0x16/0x1b
>> Jun  5 19:55:06 5720g kernel:  [<ffffffffa0218c41>]
>> :iwl4965:iwl_send_static_wepkey_cmd+0xcb/0xd5
>> Jun  5 19:55:06 5720g kernel:  [<ffffffffa0218cef>]
>> :iwl4965:iwl_set_default_wep_key+0xa4/0xbe
>> Jun  5 19:55:06 5720g kernel:  [<ffffffffa020ae00>]
>> :iwl4965:iwl4965_mac_set_key+0xf1/0x137
>>
>> The code there looks like this
>>
>> int iwl_send_static_wepkey_cmd(struct iwl_priv *priv, u8 send_if_empty)
>> {
>>        int i, not_empty = 0;
>>        u8 buff[sizeof(struct iwl_wep_cmd) +
>>                sizeof(struct iwl_wep_key) * WEP_KEYS_MAX];
>>        struct iwl_wep_cmd *wep_cmd = (struct iwl_wep_cmd *)buff;
>>        size_t cmd_size  = sizeof(struct iwl_wep_cmd);
>>        struct iwl_host_cmd cmd = {
>>                .id = REPLY_WEPKEY,
>>                .data = wep_cmd,
>>                .meta.flags = CMD_ASYNC,
>> -----------------------------------------
>> this is async
>>        };
>>
>> Thanks
>> Tomas
>>

I'm not sure what distro are you running I haven't seen this
ifcfg-wlan0 config options
on my system but can it be that ifcg-wlan0 tries to set wep key which
will conflict
with wpa_supplicant setting. Can you try to remove this line from that file

ifcfg-wlan0 -
--- cut ---
WIRELESS_ENC_KEY='s:*************************'


Thanks
Tomas
--
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux