hostap 0.4.7 - iwlist scan kernel panic on ppc when in managed mode

Tue Apr 11 02:18:19 PDT 2006

Greetings to all !

I am getting kernel panics when i using  iwlist scan on a ppc board, when
the card is in managed mode.
In master mode scan works without a problem.
My kernel is stock 2.6.12 (+ some uboot/ppc patches),with wireless
extensions V18 patch and wireless tools V28
Hostap-driver  and hostap-utils are 0.4.7 cross compiled for ppc.

I also tried to scan with the interface allready up and with an ip address
set by ifconfig before doing the scan as have seen some posts stating that
kernel panics can occur if the interface is down.

Bellow are the kernel messages and some system info

Any ideas/help/patches :) more than welcome

Stelios

OWMNR login: Oops: kernel access of bad area, sig: 11 [#1]
NIP: C304EE44 LR: C304EE04 SP: C0DC3C20 REGS: c0dc3b70 TRAP: 0300    Not
tainted
MSR: 00029030 EE: 1 PR: 0 FP: 0 ME: 1 IR/DR: 11
DAR: C309B9D4, DSISR: 00000000
TASK = c1fc3110[2960] 'iwlist' THREAD: c0dc2000
Last syscall: 54
GPR00: 000002FF C0DC3C20 C1FC3110 C0DC3C30 00000000 00000000 C0DC3C40
00000000
GPR08: 722D7465 C305BDCC C1A648F4 0003FC08 88002022 FFFFFFFF 0003D090
7FE937A0
GPR16: 00000020 0000007C 00000001 7FE93CB0 C1A64300 00000001 00000000
C0DD94C0
GPR24: C0DC3C30 C0D62000 C1A648F4 00000001 C0D6102A C0D61032 C0D6103E
C0DD94D2
NIP [c304ee44] __prism2_translate_scan+0x184/0x7e8 [hostap]
LR [c304ee04] __prism2_translate_scan+0x144/0x7e8 [hostap]
Call trace:

 [c304f608] prism2_ioctl_giwscan+0x160/0x6fc [hostap]

 [c01fa1d0] wireless_process_ioctl+0x6a0/0x924

 [c01ee0cc] dev_ioctl+0x394/0x608

 [c01e186c] sock_ioctl+0xd0/0x2fc

 [c0074e10] do_ioctl+0x88/0x9c

 [c0074edc] vfs_ioctl+0xb8/0x400

 [c0075264] sys_ioctl+0x40/0x74

 [c0002e40] ret_from_syscall+0x0/0x48

Kernel panic - not syncing: Aiee, killing interrupt handler!

 <0>Rebooting in 180 seconds..<6>wifi0: SW TICK stuck? bits=0x0 EvStat=8000
IntEn=e09f

root at OWMNR:~# dmesg

Linux version 2.6.12 (stelios at Athena) (gcc version 3.4.4) #1 Mon Apr 10
11:14:17 EEST 2006

On node 0 totalpages: 8192

  DMA zone: 8192 pages, LIFO batch:3

  Normal zone: 0 pages, LIFO batch:1

  HighMem zone: 0 pages, LIFO batch:1

Built 1 zonelists

Kernel command line: root=/dev/hda2 console=ttyS0,115200

PID hash table entries: 256 (order: 8, 4096 bytes)

Console: colour dummy device 80x25

Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)

Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)

Memory: 29056k available (2460k kernel code, 776k data, 128k init, 0k
highmem)

Calibrating delay loop... 528.38 BogoMIPS (lpj=264192)

Mount-cache hash table entries: 512

NET: Registered protocol family 16

PCI: Probing PCI hardware

PCI: Cannot allocate resource region 4 of device 0000:00:04.0

SCSI subsystem initialized

Linux Kernel Card Services

  options:  [pci] [cardbus]

usbcore: registered new driver usbfs

usbcore: registered new driver hub

VFS: Disk quotas dquot_6.5.1

Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)

devfs: 2004-01-31 Richard Gooch (rgooch at atnf.csiro.au)

devfs: boot_options: 0x0

Initializing Cryptographic API

Serial: 8250/16550 driver $Revision: 1.90 $ 6 ports, IRQ sharing disabled

ttyS0 at MMIO 0x0 (irq = 0) is a 16550A

ttyS1 at MMIO 0x0 (irq = 1) is a 16550A

io scheduler noop registered

io scheduler anticipatory registered

io scheduler deadline registered

io scheduler cfq registered

RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize

loop: loaded (max 8 devices)

mal0: Initialized, 1 tx channels, 1 rx channels

emac: IBM EMAC Ethernet driver, version 2.0

Maintained by Benjamin Herrenschmidt <benh at kernel.crashing.org>

eth0: IBM emac, MAC de:ad:be:ef:00:00

eth0: Found Generic MII PHY (0x09)

Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2

ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx

PDC20265: IDE controller at PCI slot 0000:00:04.0

PDC20265: chipset revision 2

PDC20265: not 100% native mode: will probe irqs later

PDC20265: (U)DMA Burst Bit DISABLED Primary PCI Mode Secondary PCI Mode.

    ide0: BM-DMA at 0x1000-0x1007, BIOS settings: hda:pio, hdb:pio

    ide1: BM-DMA at 0x1008-0x100f, BIOS settings: hdc:pio, hdd:pio

Probing IDE interface ide0...

hda: FCF256UIM, CFA DISK drive

ide0 at 0x1f0-0x1f7,0x3f6 on irq 31

Probing IDE interface ide1...

hda: max request size: 128KiB

hda: 510976 sectors (261 MB) w/1KiB Cache, CHS=998/16/32

hda: cache flushes not supported

 /dev/ide/host0/bus0/target0/lun0: p1 p2

usbmon: debugs is not available

ohci_hcd: 2004 Nov 08 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI)

usbcore: registered new driver usblp

drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver

Initializing USB Mass Storage driver...

usbcore: registered new driver usb-storage

USB Mass Storage support registered.

usbcore: registered new driver hiddev

usbcore: registered new driver usbhid

drivers/usb/input/hid-core.c: v2.01:USB HID core driver

pegasus: v0.6.12 (2005/01/13), Pegasus/Pegasus II USB Ethernet driver

usbcore: registered new driver pegasus

usbcore: registered new driver usbnet

mice: PS/2 mouse device common for all mice

i2c /dev entries driver

IBM IIC driver v2.1

ibm-iic0: using standard (100 kHz) mode

NET: Registered protocol family 2

IP: routing cache hash table of 512 buckets, 4Kbytes

TCP established hash table entries: 2048 (order: 2, 16384 bytes)

TCP bind hash table entries: 2048 (order: 1, 8192 bytes)

TCP: Hash tables configured (established 2048 bind 2048)

NET: Registered protocol family 1

NET: Registered protocol family 17

 /dev/ide/host0/bus0/target0/lun0: p1 p2

 /dev/ide/host0/bus0/target0/lun0: p1 p2

VFS: Mounted root (ext2 filesystem) readonly.

Freeing unused kernel memory: 128k init

eth0: Link is Up

eth0: Speed: 100, Full duplex.

VFS: Can't find an ext2 filesystem on dev ram0.

EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended

VFS: Can't find an ext2 filesystem on dev ram0.

hostap_crypt: registered algorithm 'NULL'

hostap_pci: 0.4.4 - 2005-08-21 (Jouni Malinen <jkmaline at cc.hut.fi>)

hostap_pci: Registered netdevice wifi0

wifi0: Original COR value: 0x0

prism2_hw_init: initialized in 196 ms

wifi0: NIC: id=0x8013 v1.0.0

wifi0: PRI: id=0x15 v1.0.7

wifi0: STA: id=0x1f v1.3.6

wifi0: defaulting to host-based encryption as a workaround for firmware bug
in Host AP mode  WEP

wifi0: defaulting to bogus WDS frame as a workaround for firmware bug in
Host AP mode WDS

wifi0: Intersil Prism2.5 PCI: mem=0xbffff000, irq=30

wifi0: registered netdevice wlan0

eth0: Link is Up

eth0: Speed: 100, Full duplex.

process `snmpd' is using obsolete setsockopt SO_BSDCOMPAT

prism2_download: dl_cmd=6 start_addr=0x003f0000 num_areas=3

wifi0: test Genesis mode with HCR 0x1f

wifi0: Original COR value: 0x0

Readback test failed, HCR 0x1f write 00 e1 a1 ff read 00 c1 a1 c1

wifi0: test Genesis mode with HCR 0x0f

wifi0: Original COR value: 0xa1

Readback test succeeded, HCR 0x0f

prism2_hw_init: initialized in 6 ms

wifi0: NIC: id=0x8013 v1.0.0

wifi0: PRI: id=0x15 v1.1.4

Could not get RID for component STA

wifi0: Failed to read STA f/w version - only Primary f/w present

prism2_download: dl_cmd=5 start_addr=0x003f0c01 num_areas=3

prism2_hw_init: initialized in 28 ms

wifi0: NIC: id=0x8013 v1.0.0

wifi0: PRI: id=0x15 v1.1.4

wifi0: STA: id=0x1f v1.7.4

lspci
oot at OWMNR:~# lspci -vv

00:03.0 Class 0280: 1260:3873 (rev 01)

Subsystem: 1260:3873

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-

Status: Cap+ 66Mhz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR-  <PERR-

Latency: 128, cache line size 08

Interrupt: pin A routed to IRQ 30

Region 0: Memory at bffff000 (32-bit, prefetchable) [size=4K]

Capabilities: [dc] Power Management version 2

Flags: PMEClk- DSI- D1+ D2+ AuxCurrent=0mA PME(D0+,D1+,D2+,D3hot+,D3cold-)

Status: D0 PME-Enable- DSel=0 DScale=0 PME-

00:04.0 Class 0101: 105a:0d30 (rev 02) (prog-if 8a [Master SecP PriP])

Subsystem: 105a:4d33

Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B-

Status: Cap+ 66Mhz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort-
<MAbort- >SERR-  <PERR-

Latency: 128

Interrupt: pin A routed to IRQ 31

Region 0: I/O ports at <ignored>

Region 1: I/O ports at <ignored>

Region 2: I/O ports at <ignored>

Region 3: I/O ports at <ignored>

Region 4: I/O ports at 1000 [size=64]

Region 5: Memory at 80020000 (32-bit, non-prefetchable) [size=128K]

Expansion ROM at <unassigned> [disabled] [size=16K]

Capabilities: [58] Power Management version 1

Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-)

Status: D0 PME-Enable- DSel=0 DScale=0 PME-

root at OWMNR:~# iwconfig --version
iwconfig  Wireless-Tools version 28
          Compatible with Wireless Extension v11 to v20.

Kernel    Currently compiled with Wireless Extension v18.

wifi0     Recommend Wireless Extension v18 or later,
          Currently compiled with Wireless Extension v18.

wlan0     Recommend Wireless Extension v18 or later,
          Currently compiled with Wireless Extension v18.

prism firmware
wifi0: NIC: id=0x8013 v1.0.0
wifi0: PRI: id=0x15 v1.1.4
wifi0: NIC: id=0x8013 v1.0.0
wifi0: PRI: id=0x15 v1.1.4
wifi0: STA: id=0x1f v1.7.4