[Bug 294237] bwn(4) panics on attach on arm64
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 04 Apr 2026 00:55:55 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294237
Bug ID: 294237
Summary: bwn(4) panics on attach on arm64
Product: Base System
Version: CURRENT
Hardware: arm64
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: wireless
Assignee: wireless@FreeBSD.org
Reporter: bz@FreeBSD.org
Blocks: 287712
bwn_pci0: <Broadcom BCM43224 802.11n Dual-Band Wireless> mem
0x47200000-0x47203fff at device 0.0 on pci34
bhndb0: <PCI-BHND bridge> on bwn_pci0
bwn_pci0: attempting to allocate 1 MSI vectors (1 supported)
bwn_pci0: using IRQ 141 for MSI
bhndb0: Using MSI interrupts on bwn_pci0
bhndb0: PCIe/v2 WLAN resource configuration
bhnd0: <BCM43224 BCMA bus> on bhndb0
bcma_erom_next_corecfg erom[0x8]: core0: Broadcom ChipCommon I/O Controller
(cid=800, rev=34, unit=0)
bcma_erom_next_corecfg erom[0x1c]: core1: Broadcom 802.11 MAC/PHY/Radio
(cid=812, rev=23, unit=0)
bcma_erom_next_corecfg erom[0x30]: core2: Broadcom PCIe Bridge (cid=820,
rev=15, unit=0)
bcma_erom_next_corecfg erom[0x60]: core3: ARM BP135 AMBA3 AXI to APB Bridge
(cid=135, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x70]: core4: ARM BP135 AMBA3 AXI to APB Bridge
(cid=135, rev=0, unit=1)
bcma_erom_next_corecfg erom[0x84]: core5: ARM PL367 OOB Interrupt Router
(cid=367, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x90]: core6: ARM PL366 Device Enumeration ROM
(cid=366, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x9c]: core7: ARM PL301 AMBA3 Interconnect
(cid=301, rev=0, unit=0)
bcma_erom_next_corecfg erom[0xa8]: core8: ARM Unmapped Address Ranges (cid=fff,
rev=0, unit=0)
bhnd_chipc0: <Broadcom ChipCommon I/O Controller, rev 34> mem
0x18000000-0x18000fff,0x18100000-0x18100fff irq 0 at core 0 on bhnd0
bhnd_chipc0: MIPSEB: no | BP64: yes
bhnd_chipc0: UARTs: 0 | UGPIO: no
bhnd_chipc0: UARTClk: 0x00 | Flash: 0
bhnd_chipc0: SPROM: yes | OTP: yes
bhnd_chipc0: CFIsz: 0x00 | OTPsz: 0x02
bhnd_chipc0: ExtBus: 0x00 | PwrCtrl: no
bhnd_chipc0: PLL: 0x00 | JTAGM: yes
bhnd_chipc0: PMU: yes | ECI: no
bhnd_chipc0: SECI: no | GSIO: no
bhnd_chipc0: AOB: no | BootROM: no
bhnd_nvram0: <SPROM/OTP> mem 0x18000800-0x18000bff on bhnd_chipc0
Fatal data abort:
x0: 0x0000000000000000
x1: 0xffff0001d356e800
x2: 0x0000000000000000
x3: 0xffff00013112aaf0
x4: 0x0000000000000040
x5: 0x0000000000000040
x6: 0x000000000000003f
x7: 0x0000000000000000
x8: 0xffff0001d356e800
x9: 0xffff000000d41358 (memmap_bus + 0x0)
x10: 0x0000000000000000
x11: 0x000000000000007e
x12: 0x0000000000000000
x13: 0x0000000000000006
x14: 0x0000002faa146000
x15: 0xffff000001080240 (w_locklistdata + 0x39d78)
x16: 0xffff00020b7d65d4 (bhnd_nvram_iores_read + 0x0)
x17: 0xffff00020b7d5cac ($x + 0x0)
x18: 0xffff000045275000 (end + 0x440d0000)
x19: 0xffff00013112aaf0
x20: 0xffff00020b7a7088 (bhnd_nvram_crc8_tab + 0x0)
x21: 0xffffa0205de324c0
x22: 0x0000000000000000
x23: 0xffff00020b7f9c08 (bhnd_sprom_layouts + 0x0)
x24: 0x00000000000000ff
x25: 0x0000000000000080
x26: 0x0000000000000080
x27: 0xffff0000009d0e21 (notify.prefix + 0x3d5e5)
x28: 0x0000000000000000
x29: 0xffff00013112aa90
sp: 0xffff00013112aa90
lr: 0xffff00020b7d6700 (bhnd_nvram_iores_read + 0x12c)
elr: 0x0000000000000000
spsr: 0x0000000060000005
far: 0x0000000000000000
esr: 0x0000000086000004
panic: vm_fault failed: 0x0 error 1
cpuid = 1
time = 1775263124
KDB: stack backtrace:
db_trace_self() at db_trace_self
db_trace_self_wrapper() at db_trace_self_wrapper+0x38
vpanic() at vpanic+0x1a0
panic() at panic+0x48
data_abort() at data_abort+0x3ec
handle_el1h_sync() at handle_el1h_sync+0x18
--- exception, esr 0x86000004
(null)() at 0
bhnd_nvram_sprom_ident() at bhnd_nvram_sprom_ident+0xfc
bhnd_nvram_sprom_new() at bhnd_nvram_sprom_new+0x20
bhnd_nvram_data_new() at bhnd_nvram_data_new+0x60
bhnd_nvram_store_parse_new() at bhnd_nvram_store_parse_new+0x24
bhnd_sprom_attach() at bhnd_sprom_attach+0xe0
chipc_sprom_attach() at chipc_sprom_attach+0xb4
device_attach() at device_attach+0x4c0
bus_attach_children() at bus_attach_children+0x5c
chipc_attach() at chipc_attach+0xfd4
device_attach() at device_attach+0x4c0
bhnd_bus_probe_children() at bhnd_bus_probe_children+0x54
bhnd_generic_attach() at bhnd_generic_attach+0x40
bcma_bhndb_attach() at bcma_bhndb_attach+0x20
device_attach() at device_attach+0x4c0
bus_attach_children() at bus_attach_children+0x5c
bhndb_pci_attach() at bhndb_pci_attach+0x994
device_attach() at device_attach+0x4c0
bhndb_attach_bridge() at bhndb_attach_bridge+0x30
bwn_pci_attach() at bwn_pci_attach+0x54
device_attach() at device_attach+0x4c0
pci_driver_added() at pci_driver_added+0x110
devclass_driver_added() at devclass_driver_added+0x48
devclass_add_driver() at devclass_add_driver+0x144
module_register_init() at module_register_init+0xb4
linker_load_module() at linker_load_module+0xb20
kern_kldload() at kern_kldload+0x18c
sys_kldload() at sys_kldload+0x6c
do_el0_sync() at do_el0_sync+0x5f8
handle_el0_sync() at handle_el0_sync+0x4c
--- exception, esr 0x56000000
KDB: enter: panic
[ thread pid 3567 tid 100267 ]
Stopped at kdb_enter+0x48: str xzr, [x19, #3072]
Referenced Bugs:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287712
[Bug 287712] bwi, bwn, .. meta-bug
--
You are receiving this mail because:
You are the assignee for the bug.