Hi,

I've set up an old ALIX box with OpenBSD 6.3 as wifi access point. Inside is a ral card configured in hostap mode (details below). Every time I try to connect with a client I get a kernel panic.


Any help would be appreciated.

Thanks,
Michael


#
panic: pool_do_get: mcl2k free list modified: page 0xd1cd2000; item addr 0xd1cd5800; offset 0x0=0x1fa != 0xcc8df8c0
Stopped at      db_enter+0x4:   popl    %ebp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
db_enter() at db_enter+0x4
panic() at panic+0xcc
pool_do_get(d0c549cc,2,f35d2bd4) at pool_do_get+0x25b
pool_get(d0c549cc,2) at pool_get+0x5b
m_clget(d1ccc100,2,800) at m_clget+0x189
rt2661_rx_intr(d179b000) at rt2661_rx_intr+0x116
rt2661_intr(d179b000) at rt2661_intr+0x2b3
intr_handler(f35d2da8,d17952c0) at intr_handler+0x13
Xintr_legacy9() at Xintr_legacy9+0x80
--- interrupt ---
cpu_idle_cycle(d0c6bea4) at cpu_idle_cycle+0xf
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

ddb> trace
db_enter() at db_enter+0x4
panic() at panic+0xcc
pool_do_get(d0c549cc,2,f35d2bd4) at pool_do_get+0x25b
pool_get(d0c549cc,2) at pool_get+0x5b
m_clget(d1ccc100,2,800) at m_clget+0x189
rt2661_rx_intr(d179b000) at rt2661_rx_intr+0x116
rt2661_intr(d179b000) at rt2661_intr+0x2b3
intr_handler(f35d2da8,d17952c0) at intr_handler+0x13
Xintr_legacy9() at Xintr_legacy9+0x80
--- interrupt ---
cpu_idle_cycle(d0c6bea4) at cpu_idle_cycle+0xf

ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 25098  212480      1      0  3    0x100083  ttyin         ksh
 25874  423001      1      0  3    0x100098  poll          cron
 75679  353165      1     99  3    0x100090  poll          sndiod
   917  456212      1    110  3    0x100090  poll          sndiod
 40698  445316   1872     95  3    0x100092  kqread        smtpd
 22993  356419   1872    103  3    0x100092  kqread        smtpd
 92670  297697   1872     95  3    0x100092  kqread        smtpd
 92898  181222   1872     95  3    0x100092  kqread        smtpd
 91426  307134   1872     95  3    0x100092  kqread        smtpd
 92290  456035   1872     95  3    0x100092  kqread        smtpd
  1872    1160      1      0  3    0x100080  kqread        smtpd
 19380  363505      1     92  3    0x100090  kqread        rtadvd
 14718  356223      1     77  3    0x100090  poll          dhcpd
 28760  190166      1      0  3        0x80  select        sshd
 23116  157160  90661     83  3    0x100092  poll          ntpd
 90661   19673  10244     83  3    0x100092  poll          ntpd
 10244  328357      1      0  3    0x100080  poll          ntpd
 34991  212158  23469     74  3    0x100092  bpf           pflogd
 23469  137228      1      0  3        0x80  netio         pflogd
 59968  424281  17751     73  3    0x100090  kqread        syslogd
 17751  336790      1      0  3    0x100082  netio         syslogd
 52669  285793      1      0  3        0x80  nanosleep     openvpn
 34534  497442      1     77  3    0x100090  poll          dhclient
 99142  254312      1      0  3        0x80  poll          dhclient
 17573  137182  50932    115  3    0x100092  kqread        slaacd
 52873   54648  50932    115  3    0x100092  kqread        slaacd
 50932  342042      1      0  3        0x80  kqread        slaacd
  9382  169879      0      0  3     0x14200  pgzero        zerothread
 82825  170708      0      0  3     0x14200  aiodoned      aiodoned
 48123  428761      0      0  3     0x14200  syncer        update
 94498   22318      0      0  3     0x14200  cleaner       cleaner
 92266  167140      0      0  3     0x14200  reaper        reaper
 65292  489195      0      0  3     0x14200  pgdaemon      pagedaemon
 31382   37148      0      0  3     0x14200  bored         crynlk
  9289  103404      0      0  3     0x14200  bored         crypto
 16887   10131      0      0  3     0x14200  usbtsk        usbtask
 69467  419826      0      0  3     0x14200  usbatsk       usbatsk
 56249  366133      0      0  3     0x14200  bored         sensors
  4025  295423      0      0  3     0x14200  bored         softnet
 56417  266234      0      0  3     0x14200  bored         systqmp
 98430  159342      0      0  3     0x14200  bored         systq
 47552   48723      0      0  3  0x40014200  bored         softclock
*39287   62592      0      0  7  0x40014200                idle0
  5782  110079      0      0  3     0x14200  kmalloc       kmthread
     1  285226      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper

ddb> show uvm
Current UVM status:
  pagesize=4096 (0x1000), pagemask=0xfff, pageshift=12
61020 VM pages: 4508 active, 13331 inactive, 3043 wired, 24092 free (3026 zer
o)
  min  10% (25) anon, 10% (25) vnode, 5% (12) vtext
  pages  0 anon, 0 vnode, 0 vtext
  freemin=2034, free-target=2712, inactive-target=0, wired-max=20340
faults=239478, traps=229475, intrs=437235, ctxswitch=90334 fpuswitch=119
  softint=163156, syscalls=445802, kmapent=15
  fault counts:
    noram=0, noanon=0, noamap=0, pgwait=0, pgrele=0
ok relocks(total)=17827(17828), anget(retries)=76125(0), amapcopy=78321
    neighbor anon/obj pg=4139/73735, gets(lock/unlock)=40907/17828
cases: anon=62076, anoncow=14049, obj=38158, prcopy=2748, przero=122447
  daemon and swap counts:
    woke=0, revs=0, scans=0, obscans=0, anscans=0
    busy=0, freed=0, reactivate=0, deactivate=0
    pageouts=0, pending=0, nswget=0
    nswapdev=1, nanon=0, nanonneeded=0 nfreeanon=0
    swpages=66527, swpginuse=0, swpgonly=0 paging=0
  kernel pointers:
    objs(kern)=0xd0c09340

ddb> show bcstats
Current Buffer Cache status:
numbufs 3031 busymapped 0, delwri 1
kvaslots 762 avail kva slots 762
bufpages 12118, dmapages 12118, dirtypages 4
pendingreads 0, pendingwrites 0
highflips 0, highflops 0, dmaflips 0

ddb> boot reboot
panic: mtx 0xd0c549cc: locking against myself
Stopped at      db_enter+0x4:   popl    %ebp
db_enter() at db_enter+0x4
panic() at panic+0xcc
__mtx_enter(d0c549cc) at __mtx_enter+0x3c
pool_put(d0c549cc,d17a9800) at pool_put+0x1b
m_extfree_pool(d17a9800,800,d0c549cc) at m_extfree_pool+0xe
m_extfree(d1bfeb00) at m_extfree+0x66
m_free(d1bfeb00) at m_free+0xaa
ml_purge(f35d28e0) at ml_purge+0x26
ifq_purge(d17981dc) at ifq_purge+0x75
if_down(d179803c) at if_down+0x55
if_downall() at if_downall+0x3c
boot(4804) at boot+0x77
__stack_smash_handler(4804,d0c055f4) at __stack_smash_handler
db_reboot(4804) at db_reboot+0x2a

ddb> boot reboot
rebooting...

# dmesg
OpenBSD 6.3 (GENERIC) #490: Sat Mar 24 14:31:33 MDT 2018
    dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD" 586-class) 499 MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX,MMXX,3DNOW2,3DNOW
real mem  = 267931648 (255MB)
avail mem = 249106432 (237MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe0000/0xa800
cpu0 at mainbus0: (uniprocessor)
mtrr: K6-family MTRR support (2 registers)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x31
glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
vr0 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 10, address 00:0d:b9:12:7a:08 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 9, address 00:12:0e:61:48:b4
ral0: MAC/BBP RT2561C, RF RT5225
glxpcib0 at pci0 dev 15 function 0 "AMD CS5536 ISA" rev 0x03: rev 3, 32-bit 3579545Hz timer, watchdog, gpio, i2c
gpio0 at glxpcib0: 32 pins
iic0 at glxpcib0
maxtmp0 at iic0 addr 0x4c: lm86
pciide0 at pci0 dev 15 function 2 "AMD CS5536 IDE" rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFH-004G>
wd0: 1-sector PIO, LBA48, 3825MB, 7835184 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 15 function 4 "AMD CS5536 USB" rev 0x02: irq 15, version 1.0, legacy support
ehci0 at pci0 dev 15 function 5 "AMD CS5536 USB" rev 0x02: irq 15
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "AMD EHCI root hub" rev 2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 configuration 1 interface 0 "AMD OHCI root hub" rev 1.00/1.00 addr 1
nvram: invalid checksum
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on wd0a (a8f0772702c75214.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
clock: unknown CMOS layout

# /var/run/dmesg.boot
OpenBSD 6.3 (GENERIC) #490: Sat Mar 24 14:31:33 MDT 2018
    dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD" 586-class) 499 MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX,MMXX,3DNOW2,3DNOW
real mem  = 267931648 (255MB)
avail mem = 249106432 (237MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe0000/0xa800
cpu0 at mainbus0: (uniprocessor)
mtrr: K6-family MTRR support (2 registers)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x31
glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
vr0 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 10, address 00:0d:b9:12:7a:08 ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI 0x004063, model 0x0034 ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 9, address 00:12:0e:61:48:b4
ral0: MAC/BBP RT2561C, RF RT5225
glxpcib0 at pci0 dev 15 function 0 "AMD CS5536 ISA" rev 0x03: rev 3, 32-bit 3579545Hz timer, watchdog, gpio, i2c
gpio0 at glxpcib0: 32 pins
iic0 at glxpcib0
maxtmp0 at iic0 addr 0x4c: lm86
pciide0 at pci0 dev 15 function 2 "AMD CS5536 IDE" rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFH-004G>
wd0: 1-sector PIO, LBA48, 3825MB, 7835184 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 15 function 4 "AMD CS5536 USB" rev 0x02: irq 15, version 1.0, legacy support
ehci0 at pci0 dev 15 function 5 "AMD CS5536 USB" rev 0x02: irq 15
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "AMD EHCI root hub" rev 2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 configuration 1 interface 0 "AMD OHCI root hub" rev 1.00/1.00 addr 1
nvram: invalid checksum
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on wd0a (a8f0772702c75214.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
clock: unknown CMOS layout

# hostname.ral0
media autoselect mode 11g mediaopt hostap
nwid ALIXBOX
wpa wpakey "<censored>"
up

# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 32768
        index 3 priority 0 llprio 3
        groups: lo
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
        inet 127.0.0.1 netmask 0xff000000
vr0: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:0d:b9:12:7a:08
        index 1 priority 0 llprio 3
        media: Ethernet autoselect (none)
        status: no carrier
enc0: flags=0<>
        index 2 priority 0 llprio 3
        groups: enc
        status: active
ral0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        lladdr 00:12:0e:61:48:b4
        index 4 priority 4 llprio 3
        groups: wlan
        media: IEEE802.11 autoselect mode 11g hostap
        status: active
ieee80211: nwid ALIXBOX chan 1 bssid 00:12:0e:61:48:b4 wpakey wpaprotos wpa2 wpaakms psk wpaciphers ccmp wpagroupcipher ccmp
bridge0: flags=41<UP,RUNNING>
        index 5 llprio 3
        groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
        vr0 flags=3<LEARNING,DISCOVER>
                port 1 ifpriority 0 ifcost 0
        vether0 flags=3<LEARNING,DISCOVER>
                port 8 ifpriority 0 ifcost 0
bridge1: flags=41<UP,RUNNING>
        index 6 llprio 3
        groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto rstp
        ral0 flags=3<LEARNING,DISCOVER>
                port 4 ifpriority 0 ifcost 0
        vether1 flags=3<LEARNING,DISCOVER>
                port 9 ifpriority 0 ifcost 0
tun0: flags=8011<UP,POINTOPOINT,MULTICAST> mtu 1500
        index 7 priority 0 llprio 3
        groups: tun openvpn
        status: down
vether0: flags=208943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,AUTOCONF6> mtu 1500
        lladdr fe:e1:ba:d0:14:65
        index 8 priority 0 llprio 3
        groups: vether egress
        media: Ethernet autoselect
        status: active
        inet6 fe80::5abe:c70d:908e:e705%vether0 prefixlen 64 scopeid 0x8
        inet 192.168.2.154 netmask 0xffffff00 broadcast 192.168.2.255
vether1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500
        lladdr fe:e1:ba:d1:c0:a3
        index 9 priority 0 llprio 3
        groups: vether
        media: Ethernet autoselect
        status: active
        inet 192.168.234.1 netmask 0xffffff00 broadcast 192.168.234.255
        inet6 fe80::fbcd:3f1c:5e58:94dd%vether1 prefixlen 64 scopeid 0x9
        inet6 fd70:6e76:706e:a8ea::1 prefixlen 64
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33172
        index 10 priority 0 llprio 3
        groups: pflog

Reply via email to