Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#1723 - WARNING: CPU: 0 PID: 0 at backports-2017-11-01/drivers/net/wireless/ath/ath10k/htt_rx.c:1015 0xbf2ca #8490

Closed
openwrt-bot opened this issue Aug 1, 2018 · 5 comments
Labels

Comments

@openwrt-bot
Copy link

rolandd:

I am running openwrt-18.06 on Linksys EA8500 (ipq806x).

I see the following warning in the kernel log (nothing for 10+ minutes in dmesg prior to this, and nothing after):

[ 745.944042] ------------[ cut here ]------------ [ 745.944108] WARNING: CPU: 0 PID: 0 at backports-2017-11-01/drivers/net/wireless/ath/ath10k/htt_rx.c:1015 0xbf2caf0c [ath10k_core@bf2b5000+0x3d000] [ 745.947840] Modules linked in: pppoe ppp_async ath10k_pci ath10k_core ath pppox ppp_generic nf_conntrack_ipv6 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD xt_CT slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_mangle iptable_filter ip_tables crc_ccitt compat ledtrig_usbport ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform ohci_hcd phy_qcom_dwc3 ahci ehci_platform [ 746.009232] sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug [ 746.031433] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.54 #0 [ 746.040610] Hardware name: Generic DT based system [ 746.046865] Function entered at [] from [] [ 746.051463] Function entered at [] from [] [ 746.057278] Function entered at [] from [] [ 746.063094] Function entered at [] from [] [ 746.068908] Function entered at [] from [] [ 746.074768] Function entered at [] from [] [ 746.080544] Function entered at [] from [] [ 746.086374] Function entered at [] from [] [ 746.092173] Function entered at [] from [] [ 746.097989] Function entered at [] from [] [ 746.103805] Function entered at [] from [] [ 746.109621] Function entered at [] from [] [ 746.115436] Function entered at [] from [] [ 746.121253] Exception stack(0xc0a01f48 to 0xc0a01f90) [ 746.127092] 1f40: 00000001 00000000 00000000 c03154c0 ffffe000 c0a03c70 [ 746.132225] 1f60: c0a03c24 00000000 00000000 c092da28 00000000 00000000 c0a01f90 c0a01f98 [ 746.140369] 1f80: c0308844 c0308848 60000013 ffffffff [ 746.148510] Function entered at [] from [] [ 746.153544] Function entered at [] from [] [ 746.159273] Function entered at [] from [] [ 746.165087] Function entered at [] from [] [ 746.170998] ---[ end trace d7b584a1e69fa5ab ]--- [ 746.179889] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 0, skipped old beacon [ 746.181533] ath10k_pci 0000:01:00.0: SWBA overrun on vdev 1, skipped old beacon

not sure what if anything provoked it, and wireless appears to work fine afterwards.

I looked at the backports-2017-11-01 tarball but apparently the source doesn't quite correspond to what I'm actually running (prebuilt binary from openwrt release downloads):

998 static void ath10k_htt_rx_h_undecap_raw(struct ath10k *ar,
999 struct sk_buff *msdu,
1000 struct ieee80211_rx_status *status,
1001 enum htt_rx_mpdu_encrypt_type enctype,
1002 bool is_decrypted)
1003 {
1004 struct ieee80211_hdr *hdr;
1005 struct htt_rx_desc *rxd;
1006 size_t hdr_len;
1007 size_t crypto_len;
1008 bool is_first;
1009 bool is_last;
1010
1011 rxd = (void *)msdu->data - sizeof(rxd);
1012 is_first = !!(rxd->msdu_end.common.info0 &
1013 __cpu_to_le32(RX_MSDU_END_INFO0_FIRST_MSDU));
1014 is_last = !!(rxd->msdu_end.common.info0 &
1015 __cpu_to_le32(RX_MSDU_END_INFO0_LAST_MSDU));
1016
1017 /
Delivered decapped frame:
1018 * [802.11 header]
1019 * [crypto param] <-- can be trimmed if !fcs_err &&
1020 * !decrypt_err && !peer_idx_invalid
1021 * [amsdu header] <-- only if A-MSDU
1022 * [rfc1042/llc]
1023 * [payload]
1024 * [FCS] <-- at end, needs to be trimmed
1025 /
1026
1027 /
This probably shouldn't happen but warn just in case /
1028 if (unlikely(WARN_ON_ONCE(!is_first)))
1029 return;
1030
1031 /
This probably shouldn't happen but warn just in case */
1032 if (unlikely(WARN_ON_ONCE(!(is_first && is_last))))
1033 return;

I suspect one of those two warnings is what is being hit but neither of them is quite at line 1015...

@openwrt-bot
Copy link
Author

esters:

Good day,

I noticed the same issue on My TP-Link Archer C2600. Here is the device information and dmesg information. I also note that sometimes the router looses Wifi functionality or even reboots:

DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='18.06.2'
DISTRIB_REVISION='r7676-cddd7b4c77'
DISTRIB_TARGET='ipq806x/generic'
DISTRIB_ARCH='arm_cortex-a15_neon-vfpv4'
DISTRIB_DESCRIPTION='OpenWrt 18.06.2 r7676-cddd7b4c77'
DISTRIB_TAINTS=''

[38685.610107] ------------[ cut here ]------------
[38685.610159] WARNING: CPU: 0 PID: 0 at backports-2017-11-01/drivers/net/wireless/ath/ath10k/htt_rx.c:1015 0xbf444f0c [ath10k_core@bf42f000+0x3d000]
[38685.613842] Modules linked in: ath10k_pci ath10k_core ath nf_conntrack_ipv6 mac80211 lz4 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY wireguard nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache lz4_decompress lz4_compress iptable_mangle iptable_filter ipt_ECN ip_tables compat sch_cake nf_conntrack act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_tbf sch_htb
[38685.675379] sch_hfsc sch_ingress ledtrig_usbport ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables ifb ip6_udp_tunnel udp_tunnel zram zsmalloc usb_storage ext4 jbd2 mbcache crc32c_generic leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform ohci_hcd phy_qcom_dwc3 ahci ehci_platform sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug
[38685.715186] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.95 #0
[38685.737321] Hardware name: Generic DT based system
[38685.743319] Function entered at [] from []
[38685.747917] Function entered at [] from []
[38685.753733] Function entered at [] from []
[38685.759549] Function entered at [] from []
[38685.765361] Function entered at [] from []
[38685.771240] Function entered at [] from []
[38685.776997] Function entered at [] from []
[38685.782836] Function entered at [] from []
[38685.788627] Function entered at [] from []
[38685.794444] Function entered at [] from []
[38685.800259] Function entered at [] from []
[38685.806075] Function entered at [] from []
[38685.811889] Function entered at [] from []
[38685.817707] Exception stack(0xc0a01f48 to 0xc0a01f90)
[38685.823545] 1f40: 00000001 00000000 00000000 c0315200 ffffe000 c0a03c74
[38685.828676] 1f60: c0a03c28 00000000 00000000 c092da28 00000000 00000000 c0a01f90 c0a01f98
[38685.836820] 1f80: c030876c c0308770 60000013 ffffffff
[38685.844965] Function entered at [] from []
[38685.849998] Function entered at [] from []
[38685.855728] Function entered at [] from []
[38685.861541] Function entered at [] from []
[38685.867448] ---[ end trace cab36240ed5c14c7 ]---

@openwrt-bot
Copy link
Author

dfberger:

Same, also on an Archer C2600 running 18.06.2 - spontaneous reboots every few days, often the (remote) logs are empty, occasionally they catch that warning before the oops.

Jul 8 23:49:48 portcullis kernel: [217271.301591] Unable to handle kernel NULL pointer dereference at virtual address 00000000
Jul 8 23:49:48 portcullis kernel: [217271.301634] pgd = c0204000
Jul 8 23:49:48 portcullis kernel: [217271.309074] [00000000] *pgd=00000000
Jul 8 23:49:49 portcullis kernel: [217271.312260] Internal error: Oops: 80000007 [#1] SMP ARM
Jul 8 23:49:49 portcullis kernel: [217271.315180] Modules linked in: pppoe ppp_async ath10k_pci ath10k_core ath pppox ppp_generic nf_conntrack_ipv6 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY wireguard slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache iptable_mangle iptable_filter ipt_ECN ip_tables crc_ccitt compat br_netfilter act_connmark nf_conntrack act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow
Jul 8 23:49:49 portcullis kernel: [217271.369243] cls_route cls_fw sch_tbf sch_htb sch_hfsc sch_ingress ledtrig_usbport xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport ip_set_hash_netnet ip_set_hash_net ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables ifb ip6_udp_tunnel udp_tunnel sit tunnel4 ip_tunnel usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform ohci_hcd phy_qcom_dwc3 ahci ehci_platform sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug f2fs ext4 jbd2 mbcache crc32c_generic crc32_generic
Jul 8 23:49:49 portcullis kernel: [217271.440873] CPU: 0 PID: 26056 Comm: kworker/0:1 Tainted: G W 4.14.95 #0
Jul 8 23:49:49 portcullis kernel: [217271.463096] Hardware name: Generic DT based system
Jul 8 23:49:49 portcullis kernel: [217271.470834] Workqueue: events 0xc06467e0
Jul 8 23:49:49 portcullis kernel: [217271.475505] task: dd64ed00 task.stack: d8e04000
Jul 8 23:49:49 portcullis kernel: [217271.479676] pc : [<00000000>] lr : [] psr: a0000013
Jul 8 23:49:49 portcullis kernel: [217271.484361] sp : d8e05d50 ip : 00000000 fp : dcc23228
Jul 8 23:49:49 portcullis kernel: [217271.490697] r10: 00000000 r9 : ffffffff r8 : 00000002
Jul 8 23:49:49 portcullis kernel: [217271.495994] r7 : d8e05dd4 r6 : 20000013 r5 : 00000006 r4 : c0a64960
Jul 8 23:49:49 portcullis kernel: [217271.501288] r3 : 00000000 r2 : 1fffa6f0 r1 : 20000013 r0 : c0a20728

@openwrt-bot
Copy link
Author

ynezz:

Same, also on an Archer C2600 running 18.06.2

Please try to reproduce the problem on 18.06.4 and ideally on snapshot images as well, as it's more likely, that someone would be able to decypher the stack trace properly and then maybe fix the problem.

@openwrt-bot
Copy link
Author

esters:

Good day,

The same crash happens on 18.06.4

DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='18.06.4'
DISTRIB_REVISION='r7808-ef686b7292'
DISTRIB_TARGET='ipq806x/generic'
DISTRIB_ARCH='arm_cortex-a15_neon-vfpv4'
DISTRIB_DESCRIPTION='OpenWrt 18.06.4 r7808-ef686b7292'
DISTRIB_TAINTS=''

425580.698063] ------------[ cut here ]------------
[425580.698105] WARNING: CPU: 0 PID: 0 at backports-2017-11-01/drivers/net/wireless/ath/ath10k/htt_rx.c:1015 0xbf445eec [ath10k_core@bf430000+0x3d000]
[425580.701780] Modules linked in: ath10k_pci ath10k_core ath nf_conntrack_ipv6 mac80211 lz4 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY wireguard nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache lz4_decompress lz4_compress iptable_mangle iptable_filter ipt_ECN ip_tables compat sch_cake nf_conntrack act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_tbf sch_htb
[425580.763508] sch_hfsc sch_ingress ledtrig_usbport ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables ifb ip6_udp_tunnel udp_tunnel zram zsmalloc usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform ohci_hcd phy_qcom_dwc3 ahci ehci_platform sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug ext4 jbd2 mbcache crc32c_generic
[425580.803421] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.131 #0
[425580.825541] Hardware name: Generic DT based system
[425580.831618] Function entered at [] from []
[425580.836388] Function entered at [] from []
[425580.842292] Function entered at [] from []
[425580.848194] Function entered at [] from []
[425580.854094] Function entered at [] from []
[425580.860060] Function entered at [] from []
[425580.865904] Function entered at [] from []
[425580.871833] Function entered at [] from []
[425580.877708] Function entered at [] from []
[425580.883611] Function entered at [] from []
[425580.889513] Function entered at [] from []
[425580.895415] Function entered at [] from []
[425580.901315] Function entered at [] from []
[425580.907220] Exception stack(0xc0a01f48 to 0xc0a01f90)
[425580.913147] 1f40: 00000001 00000000 00000000 c0314f40 ffffe000 c0a03c74
[425580.918365] 1f60: c0a03c28 00000000 00000000 c092ea28 00000000 00000000 c0a01f90 c0a01f98
[425580.926596] 1f80: c03086ac c03086b0 60000013 ffffffff
[425580.934826] Function entered at [] from []
[425580.939945] Function entered at [] from []
[425580.945763] Function entered at [] from []
[425580.951663] Function entered at [] from []
[425580.957697] ---[ end trace 452e9a4812cf018f ]---

@openwrt-bot
Copy link
Author

esters:

Good day,

The same crash happens on 18.06.5

root@C2600:/home/esters# cat /etc/openwrt_release
DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='18.06.5'
DISTRIB_REVISION='r7897-9d401013fc'
DISTRIB_TARGET='ipq806x/generic'
DISTRIB_ARCH='arm_cortex-a15_neon-vfpv4'
DISTRIB_DESCRIPTION='OpenWrt 18.06.5 r7897-9d401013fc'
DISTRIB_TAINTS=''


[43408.805432] ------------[ cut here ]------------
[43408.805468] WARNING: CPU: 0 PID: 0 at backports-2017-11-01/drivers/net/wireless/ath/ath10k/htt_rx.c:1015 0xbf445eec [ath10k_core@bf430000+0x3d000]
[43408.809232] Modules linked in: ath10k_pci ath10k_core ath nf_conntrack_ipv6 mac80211 lz4 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY wireguard nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache lz4_decompress lz4_compress iptable_mangle iptable_filter ipt_ECN ip_tables compat sch_cake nf_conntrack act_skbedit act_mirred em_u32 cls_u32 cls_tcindex cls_flow cls_route cls_fw sch_tbf sch_htb
[43408.870691] sch_hfsc sch_ingress ledtrig_usbport ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables ifb ip6_udp_tunnel udp_tunnel zram zsmalloc usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_of_simple ohci_platform ohci_hcd phy_qcom_dwc3 ahci ehci_platform sd_mod ahci_platform libahci_platform libahci libata scsi_mod ehci_hcd gpio_button_hotplug ext4 jbd2 mbcache crc32c_generic
[43408.910516] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.151 #0
[43408.932642] Hardware name: Generic DT based system
[43408.938638] Function entered at [] from []
[43408.943320] Function entered at [] from []
[43408.949139] Function entered at [] from []
[43408.954952] Function entered at [] from []
[43408.960766] Function entered at [] from []
[43408.966642] Function entered at [] from []
[43408.972401] Function entered at [] from []
[43408.978240] Function entered at [] from []
[43408.984032] Function entered at [] from []
[43408.989847] Function entered at [] from []
[43408.995663] Function entered at [] from []
[43409.001479] Function entered at [] from []
[43409.007294] Function entered at [] from []
[43409.013110] Exception stack(0xc0a01f48 to 0xc0a01f90)
[43409.018950] 1f40: 00000001 00000000 00000000 c0314f60 ffffe000 c0a03c74
[43409.024079] 1f60: c0a03c28 00000000 00000000 c092da28 00000000 00000000 c0a01f90 c0a01f98
[43409.032225] 1f80: c03086ac c03086b0 60000013 ffffffff
[43409.040368] Function entered at [] from []
[43409.045404] Function entered at [] from []
[43409.051133] Function entered at [] from []
[43409.056946] Function entered at [] from []
[43409.062889] ---[ end trace ff3c9fb3c1eb833b ]---

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant