Hi, Thomas
I need to set the channel first before bringing up the mesh0 interface "iw
dev mesh0 set channel 149 HT20". But I encounter the kernel oops after the
link between two mesh nodes are established. It comes from
"ieee80211_crypto_wep_encrypt".
Any ideas?
Regards,
Chun-Yeow
# ----------
mgtk: hexdump
ee c2 84 70 44 7f 3e 33 26 2e 1a ad 3e 61 e6 8c
----------
----------
Fixed Information Elements in this STA hexdump
01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16 18 1b 24 2c 30 36
42 48 60 6c
----------
setting freq 5745, mode 1 (seq num=1315497265)
meshd: Starting mesh with mesh id = open80211s
nlerror, cmd 69, seq 1315497266: Transport endpoint is not connected
NL80211_CMD_NEW_PEER_CANDIDATE(1315497257.117621)
tx_frame(0x42b2f0, 0x7fb29d48, 128)
tx frame (seq num=1315497269)
----------
tx frame hexdump
b0 00 00 00 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c 0a 0b 6b 7d
e3 b9 00 00 03 00 01 00 00 00 13 00 c7 bf 02 43 81 69 2e 4f
75 79 12 ce ee d0 03 70 82 46 4a 8c c1 0c 46 6f 52 b9 e5 8c
9e ae 8d bc e0 cb c1 ee 62 6a 7f 94 fd 6a 24 99 7f 59 f7 1e
26 71 5f 5b c8 bc 7b 6b 1f 0a 2f 6d 48 1e a6 c4 8e da a2 5e
5b 6c d9 bf 3e 42 bb da b8 02 f8 9d 0d 89 cf f3 4b 85 02 30
52 ae 77 d1 0c b3 4b c6
----------
new unauthed sta (seq num=1315497270)
NL80211_CMD_TX_STATUS (1315497257.143421)
NL80211_CMD_NEW_STATION (1315497257.143494)
NL80211_CMD_FRAME (1315497257.167819)
----------
rx frame hexdump
b0 00 3c 00 0a 0b 6b b6 5c 3c 0a 0b 6b 7d e3 b9 0a 0b 6b b6
5c 3c 70 01 03 00 01 00 00 00 13 00 1c ba cc 40 fa 44 3a d7
77 a0 b8 eb b4 25 a1 90 33 64 60 06 e4 cf 95 46 ae b6 34 27
96 0f f6 28 0d ac 6c 81 89 97 d0 d3 27 b0 9b de 31 35 db 32
92 ab 46 e2 1e 17 88 0f 7a 50 c8 7d 5f fe 72 49 13 96 2a 5a
4d de 89 b8 ea 5c 04 80 ba 82 47 86 0f 95 27 bf d6 ee 69 5c
50 ac 14 44 79 b5 d3 b3
----------
tx_frame(0x42b2f0, 0x7fb29e3c, 64)
tx frame (seq num=1315497271)
----------
tx frame hexdump
b0 00 00 00 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c 0a 0b 6b 7d
e3 b9 00 00 03 00 02 00 00 00 01 00 37 1f 46 74 51 25 dd f6
e8 ae 89 34 e1 23 0a c0 9c af f8 d0 43 82 02 a7 9b 56 5c 3d
26 a0 5a 40
----------
NL80211_CMD_FRAME (1315497257.210496)
----------
rx frame hexdump
b0 00 3c 00 0a 0b 6b b6 5c 3c 0a 0b 6b 7d e3 b9 0a 0b 6b b6
5c 3c 80 01 03 00 02 00 00 00 01 00 6f 42 bb aa 4a dd 20 ed
ef 91 ae 51 98 6e c4 c7 6b 5e 40 25 42 f1 a0 a4 42 4d 9e 5e
5a 32 a3 8f
----------
fin: 0, key len:32 peer:0a:0b:6b:7d:e3:b9 me:0a:0b:6b:b6:5c:3c
----------
pmk hexdump
db c1 e5 fa 6a 94 43 53 fb b7 be ac c0 79 ed 5c f0 85 0b 77
7f 25 d0 55 2e 66 91 a0 50 17 2c 67
----------
----------
aek context: hexdump
00 0f ac 08 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c
----------
----------
aek: hexdump
2b b7 51 1a 31 9b c0 b3 32 cc ad 7c 4c 22 d7 89 de 83 70 79
30 d6 20 f3 c7 1a c2 9d 8a d8 bb 31
----------
Mesh plink: starting establishment with 0a:0b:6b:7d:e3:b9
Mesh plink: Sending plink action 1
Protecting frame from 0a:0b:6b:b6:5c:3c to 0a:0b:6b:7d:e3:b9
Checking tricky lengths of protected frame 72, 98
----------
SIV- Put AAD[3]: hexdump
0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16 18 1b
24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30 32 31 31 73
71 08 00 00 00 00 00 00 00 00 75 14 01 00 63 e8 e4 79 ce 84
7b ad 69 26 ed 19 cb ba a2 f5 a5 00
----------
tx_frame(0x42b2f0, 0xb46770, 212)
tx frame (seq num=1315497272)
----------
tx frame hexdump
d0 00 00 00 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c 0a 0b 6b b6
5c 3c 00 00 0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c
12 16 18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30
32 31 31 73 71 08 00 00 00 00 00 00 00 00 75 14 01 00 63 e8
e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00 8c 10 4b a9
21 40 8d f3 b4 e8 5c d8 dd bb e5 54 51 76 b1 fe d5 15 f3 a2
50 5e 76 7a 7b b6 47 ac 6f c5 1f 62 7c f5 d7 52 ae 33 e7 2a
59 d9 36 d6 05 85 54 1e 0e 19 f5 5c e6 b6 3b 33 ee 53 62 27
74 72 28 a4 5f 6b fb f4 b6 a1 f9 8c 66 4c 29 1e 1f ee 69 44
99 ca ad d0 e5 53 03 18 c6 25 f1 af fa bf 91 41 0c 27 3c 22
2e 6a ee 08 47 c1 90 ac c5 d0 e4 b1
----------
NL80211_CMD_TX_STATUS (1315497257.216565)
NL80211_CMD_TX_STATUS (1315497257.216664)
Mesh plink timer for 0a:0b:6b:7d:e3:b9 fired on state OPN-SNT
Mesh plink:retries 0 of 10
Mesh plink for 0a:0b:6b:7d:e3:b9 (retry, timeout): 0 1000
Mesh plink: Sending plink action 1
Protecting frame from 0a:0b:6b:b6:5c:3c to 0a:0b:6b:7d:e3:b9
Checking tricky lengths of protected frame 72, 98
----------
SIV- Put AAD[3]: hexdump
0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16 18 1b
24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30 32 31 31 73
71 08 00 00 00 00 00 00 00 00 75 14 01 00 63 e8 e4 79 ce 84
7b ad 69 26 ed 19 cb ba a2 f5 a5 00
----------
tx_frame(0x42b2f0, 0xb3c170, 212)
tx frame (seq num=1315497273)
----------
tx frame hexdump
d0 00 00 00 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c 0a 0b 6b b6
5c 3c 00 00 0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c
12 16 18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30
32 31 31 73 71 08 00 00 00 00 00 00 00 00 75 14 01 00 63 e8
e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00 8c 10 4b a9
21 40 8d f3 b4 e8 5c d8 dd bb e5 54 51 76 b1 fe d5 15 f3 a2
50 5e 76 7a 7b b6 47 ac 6f c5 1f 62 7c f5 d7 52 ae 33 e7 2a
59 d9 36 d6 05 85 54 1e 0e 19 f5 5c e6 b6 3b 33 ee 53 62 27
74 72 28 a4 5f 6b fb f4 b6 a1 f9 8c 66 4c 29 1e 1f ee 69 44
99 ca ad d0 e5 53 03 18 c6 25 f1 af fa bf 91 41 0c 27 3c 22
2e 6a ee 08 47 c1 90 ac c5 d0 e4 b1
----------
NL80211_CMD_FRAME (1315497258.217957)
----------
rx frame hexdump
d0 00 2c 00 0a 0b 6b b6 5c 3c 0a 0b 6b 7d e3 b9 0a 0b 6b 7d
e3 b9 a0 01 0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c
12 16 18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30
32 31 31 73 71 08 00 00 00 00 00 00 00 00 75 14 01 00 e7 0d
e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00 8c 10 67 26
f1 ae 95 17 28 d2 da d2 a3 8d 7c c6 af 51 85 96 44 e4 bb 7f
c9 d1 ca bf 4f cc 3e fd 5e 6d 2a 89 ad 6b 33 cb fb ef dd 8b
67 62 76 ff fb 99 26 06 c9 f6 8f f7 f5 5c 5f 90 f8 93 47 a7
9a 96 c6 35 5c 5a be 2c 02 ac ed 11 45 04 a7 14 31 ad 10 ef
e0 1e ca bb 0e 0d 61 27 0f df a9 7f 7f f7 8f f9 3b 8d 78 8b
6e ce d8 07 cd 82 b3 7c ef cf 08 a7
----------
Checking protection to 0a:0b:6b:b6:5c:3c from 0a:0b:6b:7d:e3:b9
Len checking cat-to-mic len:72 ampe ie full length: 98
----------
SIV- Got AAD[3]: hexdump
0f 01 10 00 01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16 18 1b
24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30 32 31 31 73
71 08 00 00 00 00 00 00 00 00 75 14 01 00 e7 0d e4 79 ce 84
7b ad 69 26 ed 19 cb ba a2 f5 a5 00
----------
----------
AMPE IE: hexdump
8b 60 00 0f ac 04 8f 2e 67 05 b7 19 f4 9f 91 92 62 fa 9e 66
16 f6 9c 7b 65 87 a6 8d a9 d3 dd 0f 0e af 1d f5 c5 5e 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 f9 7a e8 00 6d 73 8e 71 81 38
1c c0 a9 eb a4 b8 00 00 00 00 00 00 00 00 ff ff ff ff
----------
----------
Received mgtk: hexdump
f9 7a e8 00 6d 73 8e 71 81 38 1c c0 a9 eb a4 b8
----------
TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 0a:0b:6b:7d:e3:b9 OPN-SNT
59491 3559 1
Mesh plink: Sending plink action 2
Protecting frame from 0a:0b:6b:b6:5c:3c to 0a:0b:6b:7d:e3:b9
Checking tricky lengths of protected frame 76, 98
----------
SIV- Put AAD[3]: hexdump
0f 02 10 00 00 00 01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16
18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30 32 31
31 73 71 08 00 00 00 00 00 00 00 00 75 16 01 00 63 e8 e7 0d
e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00
----------
tx_frame(0x42b2f0, 0xb46770, 216)
tx frame (seq num=1315497274)
----------
tx frame hexdump
d0 00 00 00 0a 0b 6b 7d e3 b9 0a 0b 6b b6 5c 3c 0a 0b 6b b6
5c 3c 00 00 0f 02 10 00 00 00 01 08 02 03 04 05 06 09 0b 0c
32 0c 12 16 18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e
38 30 32 31 31 73 71 08 00 00 00 00 00 00 00 00 75 16 01 00
63 e8 e7 0d e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00
8c 10 b2 81 4c 6e 18 d4 02 05 a9 26 f0 aa 8a 63 ff 55 f7 25
67 1f 26 b4 b1 65 f1 60 6a fc 74 b5 67 1d a2 b4 31 05 ec cc
f7 6b 3a fe d3 66 d2 b5 bd 4d 3f 98 27 71 4d 28 92 30 1d e2
6a 44 d5 37 43 79 a1 a5 03 1f cc 0e 84 d8 92 0e 75 1f 7b 4a
d2 f0 1e 1f c0 ae 17 0a b0 94 b3 bf 28 19 a7 2a 07 a5 d2 ee
1a 7b bf 32 2f 8a 8d e1 40 72 30 2b 66 4f 03 48
----------
NL80211_CMD_TX_STATUS (1315497258.557661)
NL80211_CMD_TX_STATUS (1315497258.557767)
NL80211_CMD_FRAME (1315497258.557846)
----------
rx frame hexdump
d0 00 2c 00 0a 0b 6b b6 5c 3c 0a 0b 6b 7d e3 b9 0a 0b 6b 7d
e3 b9 b0 01 0f 02 10 00 00 00 01 08 02 03 04 05 06 09 0b 0c
32 0c 12 16 18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e
38 30 32 31 31 73 71 08 00 00 00 00 00 00 00 00 75 16 01 00
e7 0d 63 e8 e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00
8c 10 d7 2f 80 1e fd 6f dc ca 79 76 dc 37 76 78 db 62 dc fa
c9 26 05 e3 f2 b8 1e 62 db fa c0 33 c6 0b a6 43 9e ff a1 b2
e9 6c 06 e8 70 0a ec da e3 13 c8 12 b4 2c 80 cf 0b 50 36 9c
7b 81 83 7d 60 3d a3 e0 f9 6d 70 61 a3 5a 67 57 a6 a2 41 2b
b2 2d 0d 1d 3f 13 ea c9 c7 dc 49 b7 a0 a2 d0 be d0 20 dd 24
e6 a3 85 aa 22 7a 74 c5 5a 4f 04 7b 19 1e 14 27
----------
Checking protection to 0a:0b:6b:b6:5c:3c from 0a:0b:6b:7d:e3:b9
Len checking cat-to-mic len:76 ampe ie full length: 98
----------
SIV- Got AAD[3]: hexdump
0f 02 10 00 00 00 01 08 02 03 04 05 06 09 0b 0c 32 0c 12 16
18 1b 24 2c 30 36 42 48 60 6c 72 0a 6f 70 65 6e 38 30 32 31
31 73 71 08 00 00 00 00 00 00 00 00 75 16 01 00 e7 0d 63 e8
e4 79 ce 84 7b ad 69 26 ed 19 cb ba a2 f5 a5 00
----------
----------
AMPE IE: hexdump
8b 60 00 0f ac 04 8f 2e 67 05 b7 19 f4 9f 91 92 62 fa 9e 66
16 f6 9c 7b 65 87 a6 8d a9 d3 dd 0f 0e af 1d f5 c5 5e 4a fb
01 ee 1b 4a 3f 80 7c 78 4f 26 1e 2f d5 53 d6 c6 fe 81 5b 20
ee c1 07 99 5d 47 5e ed ae e9 f9 7a e8 00 6d 73 8e 71 81 38
1c c0 a9 eb a4 b8 00 00 00 00 00 00 00 00 ff ff ff ff
----------
----------
Received mgtk: hexdump
f9 7a e8 00 6d 73 8e 71 81 38 1c c0 a9 eb a4 b8
----------
TODO: return available peer link slots
Mesh plink (peer, state, llid, plid, event): 0a:0b:6b:7d:e3:b9 OPN-RCVD
59491 3559 4
----------
mtk context: hexdump
4a fb 01 ee 1b 4a 3f 80 7c 78 4f 26 1e 2f d5 53 d6 c6 fe 81
5b 20 ee c1 07 99 5d 47 5e ed ae e9 8f 2e 67 05 b7 19 f4 9f
91 92 62 fa 9e 66 16 f6 9c 7b 65 87 a6 8d a9 d3 dd 0f 0e af
1d f5 c5 5e e7 0d 63 e8 00 0f ac 08 0a 0b 6b 7d e3 b9 0a 0b
6b b6 5c 3c
----------
----------
mtk: hexdump
ab 91 79 ce 47 6c 0a a1 b8 d5 b1 2d 1e 86 9f 04
----------
estab with 0a:0b:6b:7d:e3:b9
set auth flag (seq num=1315497283)
set plink state (seq num=1315497284)
mesh plink with 0a:0b:6b:7d:e3:b9 established
Mesh plink timer for 0a:0b:6b:7d:e3:b9 fired on state ESTAB
Timeout for peer 0a:0b:6b:7d:e3:b9 in state 4
CPU 0 Unable to handle kernel paging request at virtual address 00000007,
epc == 830850c4, ra == 830850c0
Oops[#1]:
Cpu 0
$ 0 : 00000000 00000000 00000000 830850ac
$ 4 : 82ca9428 82ca9430 00000000 00000008
$ 8 : 00000001 00000001 83a75800 5c3c0a0b
$12 : 00000000 00000185 00000014 00000000
$16 : 8302ff00 82ca940e 8302ff18 00000000
$20 : 83a75800 0000001a 8301d998 000001b3
$24 : 00000002 80246774
$28 : 83024000 830259e8 82ca9444 830850c0
Hi : 00000012
Lo : 00000000
epc : 830850c4 ieee80211_crypto_wep_encrypt+0x3b0/0x4c0 [mac80211]
Not tainted
ra : 830850c0 ieee80211_crypto_wep_encrypt+0x3ac/0x4c0 [mac80211]
Status: 1000fc03 KERNEL EXL IE
Cause : 00800008
BadVA : 00000007
PrId : 00019374 (MIPS 24Kc)
...
...
Call Trace:
[<830850c4>] ieee80211_crypto_wep_encrypt+0x3b0/0x4c0 [mac80211]
Code: 0c056f70 00408821 8e42001c
30420020 14400035 0000b021 24050001 00002021
Disabling lock debugging due to kernel taint
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..
_______________________________________________
Devel mailing list
[email protected]
http://open80211s.com/mailman/listinfo/devel
