Panic [page fault] in _ieee80211_crypto_delkey(): stable/10/amd64 @r286878

[David Wolfskill]

I was minding my own business in a staff meeting this afternoon, and my
laptop rebooted; seems it got a panic.  I've copied the core.txt.0 file
to <http://www.catwhisker.org/~david/FreeBSD/stable_10/>, along with a
verbose dmesg.boot from this morning and output of "pciconf -l -v".

This was running:
FreeBSD localhost 10.2-STABLE FreeBSD 10.2-STABLE #122  r286878M/286880:1002500: Tue Aug 18 04:06:33 PDT 2015     root at g1-252.catwhisker.org:/common/S1/obj/usr/src/sys/CANARY  amd64

Excerpts from core.txt.0:

panic: page fault
...
Unread portion of the kernel message buffer:
panic: page fault
cpuid = 2
KDB: stack backtrace:
#0 0xffffffff80946e00 at kdb_backtrace+0x60
#1 0xffffffff8090a9e6 at vpanic+0x126
#2 0xffffffff8090a8b3 at panic+0x43
#3 0xffffffff80c8467b at trap_fatal+0x36b
#4 0xffffffff80c8497d at trap_pfault+0x2ed
#5 0xffffffff80c8401a at trap+0x47a
#6 0xffffffff80c6a1b2 at calltrap+0x8
#7 0xffffffff809eff5e at ieee80211_crypto_delkey+0x1e
#8 0xffffffff80a04d45 at ieee80211_ioctl_delkey+0x65
#9 0xffffffff80a03bd2 at ieee80211_ioctl_set80211+0x572
#10 0xffffffff80a2c323 at in_control+0x203
#11 0xffffffff809cd57b at ifioctl+0x15eb
#12 0xffffffff8095ecf5 at kern_ioctl+0x255
#13 0xffffffff8095e9f0 at sys_ioctl+0x140
#14 0xffffffff80c84f97 at amd64_syscall+0x357
#15 0xffffffff80c6a49b at Xfast_syscall+0xfb
Uptime: 9h45m0s
...
Loaded symbols for /usr/local/modules/rtc.ko
#0  doadump (textdump=<value optimized out>) at pcpu.h:219
219     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff8090a642 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:451
#2  0xffffffff8090aa25 in vpanic (fmt=<value optimized out>, 
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:758
#3  0xffffffff8090a8b3 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:687
#4  0xffffffff80c8467b in trap_fatal (frame=<value optimized out>, 
    eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:851
#5  0xffffffff80c8497d in trap_pfault (frame=0xfffffe060d88b510, 
    usermode=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:674
#6  0xffffffff80c8401a in trap (frame=0xfffffe060d88b510)
    at /usr/src/sys/amd64/amd64/trap.c:440
#7  0xffffffff80c6a1b2 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:236
#8  0xffffffff809f003a in _ieee80211_crypto_delkey ()
    at /usr/src/sys/net80211/ieee80211_crypto.c:105
#9  0xffffffff809eff5e in ieee80211_crypto_delkey (vap=0xfffffe03d9070000, 
    key=0xfffffe03d9070800) at /usr/src/sys/net80211/ieee80211_crypto.c:461
#10 0xffffffff80a04d45 in ieee80211_ioctl_delkey (vap=0xfffffe03d9070000, 
    ireq=<value optimized out>)
    at /usr/src/sys/net80211/ieee80211_ioctl.c:1252
#11 0xffffffff80a03bd2 in ieee80211_ioctl_set80211 ()
    at /usr/src/sys/net80211/ieee80211_ioctl.c:2814
#12 0xffffffff80a2c323 in in_control (so=<value optimized out>, 
    cmd=9214790412651315593, data=0xfffffe060d88bb80 "", ifp=0x3, 
    td=<value optimized out>) at /usr/src/sys/netinet/in.c:308
#13 0xffffffff809cd57b in ifioctl (so=0xfffffe03d9070800, cmd=2149607914, 
    data=0xfffffe060d88b8e0 "wlan0", td=0xfffff80170abb940)
    at /usr/src/sys/net/if.c:2770
#14 0xffffffff8095ecf5 in kern_ioctl (td=0xfffff80170abb940, 
    fd=<value optimized out>, com=18446741891212314624) at file.h:320
#15 0xffffffff8095e9f0 in sys_ioctl (td=0xfffff80170abb940, 
    uap=0xfffffe060d88ba40) at /usr/src/sys/kern/sys_generic.c:718
#16 0xffffffff80c84f97 in amd64_syscall (td=0xfffff80170abb940, traced=0)
    at subr_syscall.c:134
#17 0xffffffff80c6a49b in Xfast_syscall ()
    at /usr/src/sys/amd64/amd64/exception.S:396
#18 0x00000008012a2f9a in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb) 


Physical 802.11 hardware is iwn(4).

I can copy the vmcore.0 file itself after I get home -- it's ~625MB,
and I'd rather not try to get that through over a WAN before I need
to catch the shuttle to get home. :-}

Peace,
david
-- 
David H. Wolfskill				david at catwhisker.org
Those who would murder in the name of God or prophet are blasphemous cowards.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 949 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20150818/502ee161/attachment.bin>