* kernel panic caused by brcmsmac Broadcom driver?
@ 2020-09-02 13:48 Yuji Nakao
0 siblings, 0 replies; only message in thread
From: Yuji Nakao @ 2020-09-02 13:48 UTC (permalink / raw)
To: linux-wireless
[-- Attachment #1: Type: text/plain, Size: 9402 bytes --]
Hello,
Around this one or two weeks, my MacBook Air 2010 installed in Arch
Linux has been caught in kernel panic during data transmission over
wireless connection.
At first, I encountered this issue after upgrading kernel to v5.8, so
I thought the issue was specific to that version. But the issue is
persistent even after downgrading kernel to v5.7.12 and linux-lts
(v5.4.61). I found the similar issue in Arch Forum[0] and this mailing
list[1].
So now, my assumption is this issue comes from other Broadcom driver
updates or my broken hardware.
Here's my kernel panic log and other information with reference to
Kdump ArchWiki[2]. Any suggestions?
[0] https://bbs.archlinux.org/viewtopic.php?id=258428
[1] https://lore.kernel.org/linux-wireless/CAGzOMfGZ9nYk7ESvWYspBOQMWre7WnCVLO4Q6+8mvSQOkoXUKg@mail.gmail.com/
[2] https://wiki.archlinux.org/index.php/Kdump
# Wireless device
% lspci -vnn -d 14e4:
01:00.0 Network controller [0280]: Broadcom Inc. and subsidiaries BCM43224 802.11a/b/g/n [14e4:4353] (rev 01)
Subsystem: Apple Inc. AirPort Extreme [106b:00d1]
Flags: bus master, fast devsel, latency 0, IRQ 22
Memory at 93100000 (64-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: bcma-pci-bridge
Kernel modules: bcma
# Analyze dump file using crash
% crash vmlinux_kdump crash_kdump_200902.dump
...
This GDB was configured as "x86_64-unknown-linux-gnu"...
WARNING: kernel relocated [10MB]: patching 116700 gdb minimal_symbol values
KERNEL: vmlinux_kdump
DUMPFILE: crash_kdump_200902.dump [PARTIAL DUMP]
CPUS: 2
DATE: Wed Sep 2 15:21:00 2020
UPTIME: 00:03:49
LOAD AVERAGE: 0.09, 0.31, 0.16
TASKS: 145
NODENAME: archmba
RELEASE: 5.8.5-arch1-1-kdump
VERSION: #1 SMP PREEMPT Tue, 01 Sep 2020 03:08:29 +0000
MACHINE: x86_64 (1397 Mhz)
MEMORY: 1.7 GB
PANIC: "Oops: 0000 [#1] PREEMPT SMP PTI" (check log for details)
PID: 0
COMMAND: "swapper/1"
TASK: ffff8fc6aa5b0000 (1 of 2) [THREAD_INFO: ffff8fc6aa5b0000]
CPU: 1
STATE: TASK_RUNNING (PANIC)
# Backtrace
crash> bt
PID: 0 TASK: ffff8fc6aa5b0000 CPU: 1 COMMAND: "swapper/1"
#0 [ffffa742800ecab0] machine_kexec at ffffffff81a69fb0
#1 [ffffa742800ecb10] __crash_kexec at ffffffff81b4b8f8
#2 [ffffa742800ecbd8] panic at ffffffff81a9270f
#3 [ffffa742800ecc58] oops_end.cold at ffffffff81a2ef51
#4 [ffffa742800ecc78] no_context at ffffffff81a792a9
#5 [ffffa742800eccf0] exc_page_fault at ffffffff823fe47d
#6 [ffffa742800ecd20] asm_exc_page_fault at ffffffff82600ade
#7 [ffffa742800ecda8] brcms_c_ampdu_dotxstatus at ffffffffc0e4ac33 [brcmsmac]
#8 [ffffa742800ece60] brcms_c_dpc at ffffffffc0e551b6 [brcmsmac]
#9 [ffffa742800ecf48] brcms_dpc at ffffffffc0e49297 [brcmsmac]
#10 [ffffa742800ecf70] tasklet_action_common.constprop.0 at ffffffff81a99531
#11 [ffffa742800ecf98] __softirqentry_text_start at ffffffff828000ff
#12 [ffffa742800ecff0] asm_call_on_stack at ffffffff826010b2
--- <IRQ stack> ---
#13 [ffffa742800a7d38] asm_call_on_stack at ffffffff826010b2
RIP: 0000000000000000 RSP: 0000000000000003 RFLAGS: 358667742e
RAX: ffffffff823fbb91 RBX: ffffa742800a7dc8 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffa742800a7dc8 R8: 0000000000000001 R9: ffffffff81a992ab
R10: 0000000000000040 R11: ffffffff81a2e3cf R12: ffffa742800ed000
R13: ffff8fc6aa5b0000 R14: 0000000000018740 R15: 0000000000000046
ORIG_RAX: 0000000000000000 CS: ffffffff82600c1e SS: ffff8fc6aad36700
bt: WARNING: possibly bogus exception frame
# Crash log (trancated)
crash> log
...
[ 229.888324] BUG: unable to handle page fault for address: ffffa742800ed01f
[ 229.888471] #PF: supervisor read access in kernel mode
[ 229.888549] #PF: error_code(0x0000) - not-present page
[ 229.888625] PGD 6a4e9067 P4D 6a4e9067 PUD 6a4ec067 PMD 6a4ed067 PTE 0
[ 229.888726] Oops: 0000 [#1] PREEMPT SMP PTI
[ 229.888793] CPU: 1 PID: 0 Comm: swapper/1 Kdump: loaded Not tainted 5.8.5-arch1-1-kdump #1
[ 229.888906] Hardware name: Apple Inc. MacBookAir3,1/Mac-942452F5819B1C1B, BIOS MBA31.88Z.0061.B07.1201241641 01/24/12
[ 229.889087] RIP: 0010:brcms_c_ampdu_dotxstatus+0x343/0x9f0 [brcmsmac]
[ 229.889182] Code: 54 24 20 66 81 e2 ff 0f 41 83 e4 07 89 d1 0f b7 d2 66 c1 e9 03 0f b7 c9 4c 8d 5c 0c 48 49 8b 4d 10 48 8b 79 68 41 57 44 89 e1 <41> 0f b6 33 41 d3 e0 48 c7 c1 38 e0 ea c0 48 83 c7 10 44 21 c6 4c
[ 229.889421] RSP: 0018:ffffa742800ecdd0 EFLAGS: 00010207
[ 229.889499] RAX: 0000000000000019 RBX: 000000000000000b RCX: 0000000000000006
[ 229.889596] RDX: 0000000000000ffe RSI: 0000000000000004 RDI: ffff8fc6ad776800
[ 229.889693] RBP: ffff8fc6855acb00 R08: 0000000000000001 R09: 00000000000005d9
[ 229.889791] R10: 00000000fffffffe R11: ffffa742800ed01f R12: 0000000000000006
[ 229.889889] R13: ffff8fc68d75a000 R14: 00000000000005db R15: 0000000000000019
[ 229.889989] FS: 0000000000000000(0000) GS:ffff8fc6aad00000(0000) knlGS:0000000000000000
[ 229.890100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 229.890181] CR2: ffffa742800ed01f CR3: 000000002480a000 CR4: 00000000000406e0
[ 229.890279] Call Trace:
[ 229.890327] <IRQ>
[ 229.890399] brcms_c_dpc+0xb46/0x1020 [brcmsmac]
[ 229.890499] ? wlc_intstatus+0xc8/0x180 [brcmsmac]
[ 229.890583] ? __raise_softirq_irqoff+0x1a/0x80
[ 229.890674] brcms_dpc+0x37/0xd0 [brcmsmac]
[ 229.890743] tasklet_action_common.constprop.0+0x51/0xb0
[ 229.890828] __do_softirq+0xff/0x340
[ 229.890892] ? handle_level_irq+0x1a0/0x1a0
[ 229.890956] asm_call_on_stack+0x12/0x20
[ 229.891017] </IRQ>
[ 229.891061] do_softirq_own_stack+0x5f/0x80
[ 229.891127] irq_exit_rcu+0xcb/0x120
[ 229.891186] common_interrupt+0xd1/0x200
[ 229.891251] asm_common_interrupt+0x1e/0x40
[ 229.891320] RIP: 0010:cpuidle_enter_state+0xb3/0x420
[ 229.891396] Code: 65 8b 3d d0 de e1 7d e8 8b a3 8d ff 49 89 c7 66 66 66 66 90 31 ff e8 bc b1 8d ff 80 7c 24 0f 00 0f 85 06 02 00 00 fb 66 66 90 <66> 66 90 45 85 e4 0f 88 e9 01 00 00 49 63 d4 4c 2b 7c 24 10 48 8d
[ 229.891534] RSP: 0018:ffffa742800a7e78 EFLAGS: 00000246
[ 229.891534] RAX: ffff8fc6aad00000 RBX: ffff8fc6aad36700 RCX: 00000035866772ed
[ 229.891534] RDX: 0000000000000141 RSI: ffffffff82d6accf RDI: ffffffff82d74e41
[ 229.891534] RBP: ffffffff830c9f20 R08: 000000358667742e R09: 0000000000000018
[ 229.891534] R10: 0000000000000442 R11: 00000000000008fb R12: 0000000000000003
[ 229.891534] R13: ffff8fc6aad36700 R14: 0000000000000003 R15: 000000358667742e
[ 229.891534] ? cpuidle_enter_state+0xa4/0x420
[ 229.891534] cpuidle_enter+0x29/0x40
[ 229.891534] do_idle+0x1fb/0x2c0
[ 229.910611] cpu_startup_entry+0x19/0x20
[ 229.910611] start_secondary+0x178/0x1c0
[ 229.917360] secondary_startup_64+0xb6/0xc0
[ 229.920686] Modules linked in: btusb btrtl btbcm btintel bluetooth ecdh_generic input_leds ecc crc16 mousedev hid_generic usbhid hid brcmsmac brcmutil uvcvideo b43 videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common videodev mc cordic apple_mfi_fastcharge nouveau mac80211 cpufreq_ondemand ssb mmc_core cfg80211 pcmcia rfkill ccm algif_aead pcmcia_core des_generic libdes rng_core arc4 libarc4 nft_ct cbc nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ecb algif_skcipher kvm_intel nft_limit cmac nf_tables md4 algif_hash nfnetlink af_alg coretemp mxm_wmi wmi i2c_algo_bit kvm ttm drm_kms_helper snd_hda_codec_hdmi applesmc snd_hda_codec_cirrus snd_hda_codec_generic ledtrig_audio nls_iso8859_1 nls_cp437 vfat snd_hda_intel snd_intel_dspcfg fat snd_hda_codec snd_hda_core cec irqbypass snd_hwdep pcspkr rc_core snd_pcm snd_timer syscopyarea sysfillrect snd bcma sysimgblt fb_sys_fops soundcore sbs sbshc evdev mac_hid ac acpi_cpufreq drm fuse pkcs8_key_parser crypto_user agpgart ip_tables
[ 229.920686] x_tables xfs libcrc32c crc32c_generic ohci_pci ehci_pci ehci_hcd ohci_hcd
[ 229.950604] CR2: ffffa742800ed01f
[ 229.950604] ---[ end trace c95ca5e232e4ae06 ]---
[ 229.950604] RIP: 0010:brcms_c_ampdu_dotxstatus+0x343/0x9f0 [brcmsmac]
[ 229.960606] Code: 54 24 20 66 81 e2 ff 0f 41 83 e4 07 89 d1 0f b7 d2 66 c1 e9 03 0f b7 c9 4c 8d 5c 0c 48 49 8b 4d 10 48 8b 79 68 41 57 44 89 e1 <41> 0f b6 33 41 d3 e0 48 c7 c1 38 e0 ea c0 48 83 c7 10 44 21 c6 4c
[ 229.967258] RSP: 0018:ffffa742800ecdd0 EFLAGS: 00010207
[ 229.967258] RAX: 0000000000000019 RBX: 000000000000000b RCX: 0000000000000006
[ 229.967258] RDX: 0000000000000ffe RSI: 0000000000000004 RDI: ffff8fc6ad776800
[ 229.967258] RBP: ffff8fc6855acb00 R08: 0000000000000001 R09: 00000000000005d9
[ 229.967258] R10: 00000000fffffffe R11: ffffa742800ed01f R12: 0000000000000006
[ 229.967258] R13: ffff8fc68d75a000 R14: 00000000000005db R15: 0000000000000019
[ 229.967258] FS: 0000000000000000(0000) GS:ffff8fc6aad00000(0000) knlGS:0000000000000000
[ 229.967258] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 229.967258] CR2: ffffa742800ed01f CR3: 000000002480a000 CR4: 00000000000406e0
[ 229.967258] Kernel panic - not syncing: Fatal exception in interrupt
[ 229.967258] Kernel Offset: 0xa00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[-- Attachment #2.1: Type: text/plain, Size: 0 bytes --]
[-- Attachment #2.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2020-09-02 14:58 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-02 13:48 kernel panic caused by brcmsmac Broadcom driver? Yuji Nakao
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).