Hi,
I've set up an old ALIX box with OpenBSD 6.3 as wifi access point.
Inside is a ral card configured in hostap mode (details below). Every
time I try to connect with a client I get a kernel panic.
Any help would be appreciated.
Thanks,
Michael
#
panic: pool_do_get: mcl2k free list modified: page 0xd1cd2000; item addr
0xd1cd5800; offset 0x0=0x1fa != 0xcc8df8c0
Stopped at db_enter+0x4: popl %ebp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
db_enter() at db_enter+0x4
panic() at panic+0xcc
pool_do_get(d0c549cc,2,f35d2bd4) at pool_do_get+0x25b
pool_get(d0c549cc,2) at pool_get+0x5b
m_clget(d1ccc100,2,800) at m_clget+0x189
rt2661_rx_intr(d179b000) at rt2661_rx_intr+0x116
rt2661_intr(d179b000) at rt2661_intr+0x2b3
intr_handler(f35d2da8,d17952c0) at intr_handler+0x13
Xintr_legacy9() at Xintr_legacy9+0x80
--- interrupt ---
cpu_idle_cycle(d0c6bea4) at cpu_idle_cycle+0xf
https://www.openbsd.org/ddb.html describes the minimum info required in
bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb> trace
db_enter() at db_enter+0x4
panic() at panic+0xcc
pool_do_get(d0c549cc,2,f35d2bd4) at pool_do_get+0x25b
pool_get(d0c549cc,2) at pool_get+0x5b
m_clget(d1ccc100,2,800) at m_clget+0x189
rt2661_rx_intr(d179b000) at rt2661_rx_intr+0x116
rt2661_intr(d179b000) at rt2661_intr+0x2b3
intr_handler(f35d2da8,d17952c0) at intr_handler+0x13
Xintr_legacy9() at Xintr_legacy9+0x80
--- interrupt ---
cpu_idle_cycle(d0c6bea4) at cpu_idle_cycle+0xf
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
25098 212480 1 0 3 0x100083 ttyin ksh
25874 423001 1 0 3 0x100098 poll cron
75679 353165 1 99 3 0x100090 poll sndiod
917 456212 1 110 3 0x100090 poll sndiod
40698 445316 1872 95 3 0x100092 kqread smtpd
22993 356419 1872 103 3 0x100092 kqread smtpd
92670 297697 1872 95 3 0x100092 kqread smtpd
92898 181222 1872 95 3 0x100092 kqread smtpd
91426 307134 1872 95 3 0x100092 kqread smtpd
92290 456035 1872 95 3 0x100092 kqread smtpd
1872 1160 1 0 3 0x100080 kqread smtpd
19380 363505 1 92 3 0x100090 kqread rtadvd
14718 356223 1 77 3 0x100090 poll dhcpd
28760 190166 1 0 3 0x80 select sshd
23116 157160 90661 83 3 0x100092 poll ntpd
90661 19673 10244 83 3 0x100092 poll ntpd
10244 328357 1 0 3 0x100080 poll ntpd
34991 212158 23469 74 3 0x100092 bpf pflogd
23469 137228 1 0 3 0x80 netio pflogd
59968 424281 17751 73 3 0x100090 kqread syslogd
17751 336790 1 0 3 0x100082 netio syslogd
52669 285793 1 0 3 0x80 nanosleep openvpn
34534 497442 1 77 3 0x100090 poll dhclient
99142 254312 1 0 3 0x80 poll dhclient
17573 137182 50932 115 3 0x100092 kqread slaacd
52873 54648 50932 115 3 0x100092 kqread slaacd
50932 342042 1 0 3 0x80 kqread slaacd
9382 169879 0 0 3 0x14200 pgzero zerothread
82825 170708 0 0 3 0x14200 aiodoned aiodoned
48123 428761 0 0 3 0x14200 syncer update
94498 22318 0 0 3 0x14200 cleaner cleaner
92266 167140 0 0 3 0x14200 reaper reaper
65292 489195 0 0 3 0x14200 pgdaemon pagedaemon
31382 37148 0 0 3 0x14200 bored crynlk
9289 103404 0 0 3 0x14200 bored crypto
16887 10131 0 0 3 0x14200 usbtsk usbtask
69467 419826 0 0 3 0x14200 usbatsk usbatsk
56249 366133 0 0 3 0x14200 bored sensors
4025 295423 0 0 3 0x14200 bored softnet
56417 266234 0 0 3 0x14200 bored systqmp
98430 159342 0 0 3 0x14200 bored systq
47552 48723 0 0 3 0x40014200 bored softclock
*39287 62592 0 0 7 0x40014200 idle0
5782 110079 0 0 3 0x14200 kmalloc kmthread
1 285226 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show uvm
Current UVM status:
pagesize=4096 (0x1000), pagemask=0xfff, pageshift=12
61020 VM pages: 4508 active, 13331 inactive, 3043 wired, 24092 free
(3026 zer
o)
min 10% (25) anon, 10% (25) vnode, 5% (12) vtext
pages 0 anon, 0 vnode, 0 vtext
freemin=2034, free-target=2712, inactive-target=0, wired-max=20340
faults=239478, traps=229475, intrs=437235, ctxswitch=90334
fpuswitch=119
softint=163156, syscalls=445802, kmapent=15
fault counts:
noram=0, noanon=0, noamap=0, pgwait=0, pgrele=0
ok relocks(total)=17827(17828), anget(retries)=76125(0),
amapcopy=78321
neighbor anon/obj pg=4139/73735, gets(lock/unlock)=40907/17828
cases: anon=62076, anoncow=14049, obj=38158, prcopy=2748,
przero=122447
daemon and swap counts:
woke=0, revs=0, scans=0, obscans=0, anscans=0
busy=0, freed=0, reactivate=0, deactivate=0
pageouts=0, pending=0, nswget=0
nswapdev=1, nanon=0, nanonneeded=0 nfreeanon=0
swpages=66527, swpginuse=0, swpgonly=0 paging=0
kernel pointers:
objs(kern)=0xd0c09340
ddb> show bcstats
Current Buffer Cache status:
numbufs 3031 busymapped 0, delwri 1
kvaslots 762 avail kva slots 762
bufpages 12118, dmapages 12118, dirtypages 4
pendingreads 0, pendingwrites 0
highflips 0, highflops 0, dmaflips 0
ddb> boot reboot
panic: mtx 0xd0c549cc: locking against myself
Stopped at db_enter+0x4: popl %ebp
db_enter() at db_enter+0x4
panic() at panic+0xcc
__mtx_enter(d0c549cc) at __mtx_enter+0x3c
pool_put(d0c549cc,d17a9800) at pool_put+0x1b
m_extfree_pool(d17a9800,800,d0c549cc) at m_extfree_pool+0xe
m_extfree(d1bfeb00) at m_extfree+0x66
m_free(d1bfeb00) at m_free+0xaa
ml_purge(f35d28e0) at ml_purge+0x26
ifq_purge(d17981dc) at ifq_purge+0x75
if_down(d179803c) at if_down+0x55
if_downall() at if_downall+0x3c
boot(4804) at boot+0x77
__stack_smash_handler(4804,d0c055f4) at __stack_smash_handler
db_reboot(4804) at db_reboot+0x2a
ddb> boot reboot
rebooting...
# dmesg
OpenBSD 6.3 (GENERIC) #490: Sat Mar 24 14:31:33 MDT 2018
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD"
586-class) 499 MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX,MMXX,3DNOW2,3DNOW
real mem = 267931648 (255MB)
avail mem = 249106432 (237MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe0000/0xa800
cpu0 at mainbus0: (uniprocessor)
mtrr: K6-family MTRR support (2 registers)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x31
glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
vr0 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 10,
address 00:0d:b9:12:7a:08
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI
0x004063, model 0x0034
ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 9, address
00:12:0e:61:48:b4
ral0: MAC/BBP RT2561C, RF RT5225
glxpcib0 at pci0 dev 15 function 0 "AMD CS5536 ISA" rev 0x03: rev 3,
32-bit 3579545Hz timer, watchdog, gpio, i2c
gpio0 at glxpcib0: 32 pins
iic0 at glxpcib0
maxtmp0 at iic0 addr 0x4c: lm86
pciide0 at pci0 dev 15 function 2 "AMD CS5536 IDE" rev 0x01: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFH-004G>
wd0: 1-sector PIO, LBA48, 3825MB, 7835184 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 15 function 4 "AMD CS5536 USB" rev 0x02: irq 15,
version 1.0, legacy support
ehci0 at pci0 dev 15 function 5 "AMD CS5536 USB" rev 0x02: irq 15
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "AMD EHCI root hub" rev
2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 configuration 1 interface 0 "AMD OHCI root hub" rev
1.00/1.00 addr 1
nvram: invalid checksum
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on wd0a (a8f0772702c75214.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
clock: unknown CMOS layout
# /var/run/dmesg.boot
OpenBSD 6.3 (GENERIC) #490: Sat Mar 24 14:31:33 MDT 2018
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Geode(TM) Integrated Processor by AMD PCS ("AuthenticAMD"
586-class) 499 MHz
cpu0: FPU,DE,PSE,TSC,MSR,CX8,SEP,PGE,CMOV,CFLUSH,MMX,MMXX,3DNOW2,3DNOW
real mem = 267931648 (255MB)
avail mem = 249106432 (237MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: date 12/10/07, BIOS32 rev. 0 @ 0xfceb2
pcibios0 at bios0: rev 2.1 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xe0000/0xa800
cpu0 at mainbus0: (uniprocessor)
mtrr: K6-family MTRR support (2 registers)
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 1 function 0 "AMD Geode LX" rev 0x31
glxsb0 at pci0 dev 1 function 2 "AMD Geode LX Crypto" rev 0x00: RNG AES
vr0 at pci0 dev 9 function 0 "VIA VT6105M RhineIII" rev 0x96: irq 10,
address 00:0d:b9:12:7a:08
ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 3: OUI
0x004063, model 0x0034
ral0 at pci0 dev 12 function 0 "Ralink RT2561S" rev 0x00: irq 9, address
00:12:0e:61:48:b4
ral0: MAC/BBP RT2561C, RF RT5225
glxpcib0 at pci0 dev 15 function 0 "AMD CS5536 ISA" rev 0x03: rev 3,
32-bit 3579545Hz timer, watchdog, gpio, i2c
gpio0 at glxpcib0: 32 pins
iic0 at glxpcib0
maxtmp0 at iic0 addr 0x4c: lm86
pciide0 at pci0 dev 15 function 2 "AMD CS5536 IDE" rev 0x01: DMA,
channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDCFH-004G>
wd0: 1-sector PIO, LBA48, 3825MB, 7835184 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4
pciide0: channel 1 ignored (disabled)
ohci0 at pci0 dev 15 function 4 "AMD CS5536 USB" rev 0x02: irq 15,
version 1.0, legacy support
ehci0 at pci0 dev 15 function 5 "AMD CS5536 USB" rev 0x02: irq 15
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "AMD EHCI root hub" rev
2.00/1.00 addr 1
isa0 at glxpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
usb1 at ohci0: USB revision 1.0
uhub1 at usb1 configuration 1 interface 0 "AMD OHCI root hub" rev
1.00/1.00 addr 1
nvram: invalid checksum
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
root on wd0a (a8f0772702c75214.a) swap on wd0b dump on wd0b
WARNING: / was not properly unmounted
clock: unknown CMOS layout
# hostname.ral0
media autoselect mode 11g mediaopt hostap
nwid ALIXBOX
wpa wpakey "<censored>"
up
# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 32768
index 3 priority 0 llprio 3
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
inet 127.0.0.1 netmask 0xff000000
vr0: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST>
mtu 1500
lladdr 00:0d:b9:12:7a:08
index 1 priority 0 llprio 3
media: Ethernet autoselect (none)
status: no carrier
enc0: flags=0<>
index 2 priority 0 llprio 3
groups: enc
status: active
ral0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu
1500
lladdr 00:12:0e:61:48:b4
index 4 priority 4 llprio 3
groups: wlan
media: IEEE802.11 autoselect mode 11g hostap
status: active
ieee80211: nwid ALIXBOX chan 1 bssid 00:12:0e:61:48:b4 wpakey
wpaprotos wpa2 wpaakms psk wpaciphers ccmp wpagroupcipher ccmp
bridge0: flags=41<UP,RUNNING>
index 5 llprio 3
groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
rstp
vr0 flags=3<LEARNING,DISCOVER>
port 1 ifpriority 0 ifcost 0
vether0 flags=3<LEARNING,DISCOVER>
port 8 ifpriority 0 ifcost 0
bridge1: flags=41<UP,RUNNING>
index 6 llprio 3
groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
rstp
ral0 flags=3<LEARNING,DISCOVER>
port 4 ifpriority 0 ifcost 0
vether1 flags=3<LEARNING,DISCOVER>
port 9 ifpriority 0 ifcost 0
tun0: flags=8011<UP,POINTOPOINT,MULTICAST> mtu 1500
index 7 priority 0 llprio 3
groups: tun openvpn
status: down
vether0:
flags=208943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,AUTOCONF6>
mtu 1500
lladdr fe:e1:ba:d0:14:65
index 8 priority 0 llprio 3
groups: vether egress
media: Ethernet autoselect
status: active
inet6 fe80::5abe:c70d:908e:e705%vether0 prefixlen 64 scopeid 0x8
inet 192.168.2.154 netmask 0xffffff00 broadcast 192.168.2.255
vether1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu
1500
lladdr fe:e1:ba:d1:c0:a3
index 9 priority 0 llprio 3
groups: vether
media: Ethernet autoselect
status: active
inet 192.168.234.1 netmask 0xffffff00 broadcast 192.168.234.255
inet6 fe80::fbcd:3f1c:5e58:94dd%vether1 prefixlen 64 scopeid 0x9
inet6 fd70:6e76:706e:a8ea::1 prefixlen 64
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33172
index 10 priority 0 llprio 3
groups: pflog
