Bug 211450 - Fatal trap 12: page fault while in kernel mode (iwm0: firmware error 0x2010000) (Intel 7260)
Summary: Fatal trap 12: page fault while in kernel mode (iwm0: firmware error 0x201000...
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 11.0-BETA2
Hardware: amd64 Any
: --- Affects Only Me
Assignee: freebsd-wireless (Nobody)
URL:
Keywords: crash
Depends on:
Blocks:
 
Reported: 2016-07-30 00:14 UTC by Masachika ISHIZUKA
Modified: 2018-07-03 23:40 UTC (History)
3 users (show)

See Also:


Attachments
part of vmcore.2 (95.93 KB, text/plain)
2018-07-03 23:38 UTC, Zesen Qian
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Masachika ISHIZUKA 2016-07-30 00:14:56 UTC
It is good working on 11.0-BETA2-p1 but I was encountered panic boot 2 times in a week.
First time, I don't use iwm driver and running 'pkg upgrade' for updating 10.3 to 11.0, but I don't set dumpdev and no debug information is not gotten.
Second time, page fault before login prompt at the boot time, the crash dump is as follows.

# freebsd-version -ku
11.0-BETA2
11.0-BETA2-p1
# cat info.0
Dump header from device: /dev/gpt/fbswap
  Architecture: amd64
  Architecture Version: 2
  Dump Length: 448864256
  Blocksize: 512
  Dumptime: Sat Jul 30 08:21:32 2016
  Hostname: carrot.ish.org
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 11.0-BETA2 #0 r303168: Fri Jul 22 02:23:56 UTC 2016
    root@releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC
  Panic String: page fault
  Dump Parity: 4275312696
  Bounds: 0
  Dump Status: good
# head -411 vmcore.0
minidump FreeBSD/amd64¸@ðþÿÿøÿÿüÿÿCopyright (c) 1992-2016 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 11.0-BETA2 #0 r303168: Fri Jul 22 02:23:56 UTC 2016
    root@releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64
FreeBSD clang version 3.8.0 (tags/RELEASE_380/final 262564) (based on LLVM 3.8.0)
VT(efifb): resolution 1920x1080
CPU: Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz (2394.51-MHz K8-class CPU)
  Origin="GenuineIntel"  Id=0x40651  Family=0x6  Model=0x45  Stepping=1
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x7fdafbbf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,SDBG,FMA,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,AVX,F16C,RDRAND>
  AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
  AMD Features2=0x21<LAHF,ABM>
  Structured Extended Features=0x27ab<FSGSBASE,TSCADJ,BMI1,AVX2,SMEP,BMI2,ERMS,INVPCID,NFPUSG>
  XSAVE Features=0x1<XSAVEOPT>
  VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
  TSC: P-state invariant, performance statistics
real memory  = 8589934592 (8192 MB)
avail memory = 8165797888 (7787 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <DELL CL09>
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 hardware threads
random: unblocking device.
ioapic0 <Version 2.0> irqs 0-39 on motherboard
random: entropy device external interface
kbd1 at kbdmux0
netmap: loaded module
module_register_init: MOD_LOAD (vesa, 0xffffffff81018940, 0) error 19
random: registering fast source Intel Secure Key RNG
random: fast provider: "Intel Secure Key RNG"
cryptosoft0: <software crypto> on motherboard
acpi0: <DELL CL09   > on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
cpu1: <ACPI CPU> on acpi0
cpu2: <ACPI CPU> on acpi0
cpu3: <ACPI CPU> on acpi0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
Event timer "HPET" frequency 14318180 Hz quality 550
Event timer "HPET1" frequency 14318180 Hz quality 440
Event timer "HPET2" frequency 14318180 Hz quality 440
Event timer "HPET3" frequency 14318180 Hz quality 440
Event timer "HPET4" frequency 14318180 Hz quality 440
atrtc0: <AT realtime clock> port 0x70-0x77 irq 8 on acpi0
atrtc0: Warning: Couldn't map I/O.
Event timer "RTC" frequency 32768 Hz quality 0
attimer0: <AT timer> port 0x40-0x43,0x50-0x53 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0
acpi_ec0: <Embedded Controller: GPE 0xa> port 0x62,0x66 on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
vgapci0: <VGA-compatible display> port 0xf000-0xf03f mem 0xf7800000-0xf7bfffff,0xe0000000-0xefffffff irq 16 at device 2.0 on pci0
acpi_video0: <ACPI video extension> on vgapci0
vgapci0: Boot video device
hdac0: <Intel Haswell HDA Controller> mem 0xf7d14000-0xf7d17fff irq 16 at device 3.0 on pci0
xhci0: <Intel Panther Point USB 3.0 controller> mem 0xf7d00000-0xf7d0ffff irq 16 at device 20.0 on pci0
xhci0: 32 bytes context size, 64-bit DMA
xhci0: Port routing mask set to 0xffffffff
usbus0 on xhci0
pci0: <simple comms> at device 22.0 (no driver attached)
hdac1: <Intel Lynx Point-LP HDA Controller> mem 0xf7d10000-0xf7d13fff irq 22 at device 27.0 on pci0
pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0
pcib1: [GIANT-LOCKED]
pcib2: <ACPI PCI-PCI bridge> irq 18 at device 28.2 on pci0
pci1: <ACPI PCI bus> on pcib2
iwm0: <Intel Dual Band Wireless AC 7260> mem 0xf7c00000-0xf7c01fff irq 18 at device 0.0 on pci1
ehci0: <Intel Lynx Point LP USB 2.0 controller USB> mem 0xf7d1b000-0xf7d1b3ff irq 23 at device 29.0 on pci0
usbus1: EHCI version 1.0
usbus1 on ehci0
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
ahci0: <Intel Lynx Point-LP AHCI SATA controller> port 0xf0b0-0xf0b7,0xf0a0-0xf0a3,0xf090-0xf097,0xf080-0xf083,0xf060-0xf07f mem 0xf7d1a000-0xf7d1a7ff irq 19 at device 31.2 on pci0
ahci0: AHCI v1.30 with 3 6Gbps ports, Port Multiplier not supported
ahcich0: <AHCI channel> at channel 0 on ahci0
acpi_button0: <Power Button> on acpi0
acpi_lid0: <Control Method Lid Switch> on acpi0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model Synaptics Touchpad, device ID 0
battery0: <ACPI Control Method Battery> on acpi0
acpi_acad0: <AC Adapter> on acpi0
ppc0: cannot reserve I/O port range
est0: <Enhanced SpeedStep Frequency Control> on cpu0
est1: <Enhanced SpeedStep Frequency Control> on cpu1
est2: <Enhanced SpeedStep Frequency Control> on cpu2
est3: <Enhanced SpeedStep Frequency Control> on cpu3
fuse-freebsd: version 0.4.4, FUSE ABI 7.8
Timecounters tick every 1.000 msec
nvme cam probe device init
hdacc0: <Intel Haswell HDA CODEC> at cad 0 on hdac0
hdaa0: <Intel Haswell Audio Function Group> at nid 1 on hdacc0
pcm0: <Intel Haswell (HDMI/DP 8ch)> at nid 3 on hdaa0
hdacc1: <Realtek (0x0668) HDA CODEC> at cad 0 on hdac1
hdaa1: <Realtek (0x0668) Audio Function Group> at nid 1 on hdacc1
pcm1: <Realtek (0x0668) (Analog 2.0+HP/2.0)> at nid 20,21 and 18 on hdaa1
pcm2: <Realtek (0x0668) (Left Analog Mic)> at nid 27 on hdaa1
usbus0: 5.0Gbps Super Speed USB v3.0
usbus1: 480Mbps High Speed USB v2.0
ugen0.1: <0x8086> at usbus0
uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
ugen1.1: <Intel> at usbus1
uhub1: <Intel EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1
iwm0: revision: 0x140, firmware 25.228 (API ver. 9)
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <LITEONIT LMT-256M6M mSATA 256GB DM8110F> ATA8-ACS SATA 3.x device
ada0: Serial Number TW0XXM305508536E0419
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 8192bytes)
ada0: Command Queueing enabled
ada0: 244198MB (500118192 512 byte sectors)
SMP: AP CPU #1 Launched!
SMP: AP CPU #3 Launched!
SMP: AP CPU #2 Launched!
Timecounter "TSC-low" frequency 1197255846 Hz quality 1000
Trying to mount root from ufs:/dev/gpt/fbroot [rw]...
<118>Setting hostuuid: 4c4c4544-004d-3610-8042-b8c04f4e5831.
<118>Setting hostid: 0xca70255f.
<118>Starting file system checks:
<118>/dev/gpt/fbroot: FILE SYSTEM CLEAN; SKIPPING CHECKS
<118>/dev/gpt/fbroot: clean, 796782 free (3238 frags, 99193 blocks, 0.3% fragmentation)
<118>/dev/gpt/fbusr: FILE SYSTEM CLEAN; SKIPPING CHECKS
<118>/dev/gpt/fbusr: clean, 2408360 free (6976 frags, 300173 blocks, 0.2% fragmentation)
<118>/dev/gpt/fbvar: FILE SYSTEM CLEAN; SKIPPING CHECKS
<118>/dev/gpt/fbvar: clean, 1788712 free (5064 frags, 222956 blocks, 0.2% fragmentation)
<118>/dev/gpt/fbhome: FILE SYSTEM CLEAN; SKIPPING CHECKS
<118>/dev/gpt/fbhome: clean, 3373313 free (17561 frags, 419469 blocks, 0.4% fragmentation)
<118>/dev/gpt/fblocal: FILE SYSTEM CLEAN; SKIPPING CHECKS
<118>/dev/gpt/fblocal: clean, 11163213 free (196837 frags, 1370797 blocks, 1.2% fragmentation)
<118>Mounting local filesystems:.
<118>ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat /usr/local/lib/compat/pkg /usr/local/lib/fcitx/qt /usr/local/lib/ffmpeg0 /usr/local/lib/gcc46 /usr/local/lib/gcc48 /usr/local/lib/graphviz /usr/local/lib/mysql /usr/local/lib/nss /usr/local/lib/perl5/5.20/mach/CORE /usr/local/lib/qt4 /usr/local/llvm33/lib /usr/local/llvm36/lib /usr/local/llvm37/lib
<118>32-bit compatibility ldconfig path: /usr/lib32 /usr/local/lib32/compat
<118>Setting hostname: carrot.ish.org.
<118>Setting up harvesting: [UMA],[FS_ATIME],SWI,INTERRUPT,NET_NG,NET_ETHER,NET_TUN,MOUSE,KEYBOARD,ATTACH,CACHED
<118>Feeding entropy: 
uhub0: 13 ports with 13 removable, self powered
uhub1: 2 ports with 2 removable, self powered
ugen0.2: <vendor 0x05e3> at usbus0
uhub2: <vendor 0x05e3 product 0x0610, class 9/0, rev 2.10/41.15, addr 1> on usbus0
uhub2: MTT enabled
<118>.
wlan0: Ethernet address: 5c:51:4f:11:73:f3
<118>Created wlan(4) interfaces: wlan0.
<118>Created clone interfaces: lagg0.
<118>Starting wpa_supplicant.
<118>ifconfig: SIOCSLAGGPORT: Invalid argument
ugen1.2: <vendor 0x8087> at usbus1
uhub3: <vendor 0x8087 product 0x8000, class 9/0, rev 2.00/0.04, addr 2> on usbus1
uhub2: 4 ports with 1 removable, self powered
uhub3: 8 ports with 8 removable, self powered
ugen0.3: <Logitech> at usbus0
ugen0.4: <vendor 0x8087> at usbus0
<118>Starting Network: lo0 wlan0 lagg0.
<118>lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
<118>   options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
<118>   inet6 ::1 prefixlen 128 
<118>   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
<118>   inet 127.0.0.1 netmask 0xff000000 
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>   groups: lo 
<118>wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
<118>   status: no carrier
<118>   ssid "" channel 1 (2412 MHz 11g)
<118>   regdomain JAPAN country JP authmode WPA1+WPA2/802.11i privacy MIXED
<118>   deftxkey UNDEF txpower 23 bmiss 10 scanvalid 60 protmode CTS wme
<118>   roaming MANUAL bintval 0
<118>   groups: wlan 
<118>lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   options=800000<>
<118>   ether 00:00:00:00:00:00
<118>   inet6 fe80::5e51:4fff:fe11:73f3%lagg0 prefixlen 64 scopeid 0x3 
<118>   nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
<118>   media: Ethernet autoselect
<118>   status: no carrier
<118>   groups: lagg 
<118>   laggproto failover lagghash l2,l3,l4
<118>Starting devd.
<118>wpa_supplicant already running?  (pid=313).
<118>Starting Network: wlan0.
<118>wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
<118>   status: no carrier
<118>   ssid "" channel 1 (2412 MHz 11g)
<118>   regdomain JAPAN country JP authmode WPA1+WPA2/802.11i privacy MIXED
<118>   deftxkey UNDEF txpower 23 bmiss 10 scanvalid 60 protmode CTS wme
<118>   roaming MANUAL bintval 0
<118>   groups: wlan 
<118>add host 127.0.0.1: gateway lo0 fib 0: route already in table
<118>route: writing to routing socket: Network is unreachable
<118>add net default: gateway 192.168.1.1 fib 0: Network is unreachable
<118>add host ::1: gateway lo0 fib 0: route already in table
<118>add net fe80::: gateway ::1
<118>add net ff02::: gateway ::1
<118>add net ::ffff:0.0.0.0: gateway ::1
<118>add net ::0.0.0.0: gateway ::1
ipfw2 (+ipv6) initialized, divert loadable, nat loadable, default to deny, logging disabled
<118>00100 allow ip from any to any via lo0
<118>00200 deny ip from any to 127.0.0.0/8
<118>00300 deny ip from 127.0.0.0/8 to any
<118>00400 deny ip from any to ::1
<118>00500 deny ip from ::1 to any
<118>00600 allow ip4 from any to any
<118>00700 allow ipv6-icmp from any to any
<118>00800 allow ip from fe80::/10 to ff02::/16
<118>00900 allow ip from me to ff02::/16
<118>01000 allow udp from fe80::/10 to me dst-port 546
<118>01100 allow tcp from any to any established
<118>01200 allow ip from any to any frag
<118>01300 allow tcp from any to any dst-port 25 setup
<118>01400 allow tcp from me to any setup
<118>01500 deny tcp from any to any setup
<118>01600 allow udp from me to any dst-port 53 keep-state
<118>01700 allow udp from me 53 to any
<118>01800 allow udp from me to any dst-port 123 keep-state
<118>01900 deny ip from any to any
<118>Firewall rules loaded.
<118>Firewall logging enabled.
<118>Starting local_unbound.
<118>Waiting for nameserver to start...[1469834478] unbound-control[582:0] warning: control-enable is 'no' in the config file.
<118>[1469834478] unbound-control[582:0] error: connect: Connection refused for 127.0.0.1
<118>.
ugen0.5: <Generic> at usbus0
ugen0.6: <Intel Corporation> at usbus0
<118>[1469834479] unbound-control[588:0] warning: control-enable is 'no' in the config file.
<118>[1469834479] unbound-control[588:0] error: connect: Connection refused for 127.0.0.1
<118>.
ugen0.7: <vendor 0x05e3> at usbus0
uhub4: <> on usbus0
iwm0: iwm_update_edca: called
iwm0: iwm_update_edca: called
<5>wlan0: link state changed to UP
uhub4: 4 ports with 1 removable, self powered
<118>[1469834480] unbound-control[595:0] warning: control-enable is 'no' in the config file.
<118>[1469834480] unbound-control[595:0] error: connect: Connection refused for 127.0.0.1
<118>.
ugen0.8: <ASIX Elec. Corp.> at usbus0
axge0: <NetworkInterface> on usbus0
ums0: <Logitech USB-PS2 Optical Mouse, class 0/0, rev 2.00/19.00, addr 2> on usbus0
ums0: 4 buttons and [XYZ] coordinates ID=0
ubt0: <vendor 0x8087 product 0x07dc, class 224/1, rev 2.00/0.01, addr 3> on usbus0
uhid0: <Intel Corporation IntelR Sensor Solution, class 0/0, rev 2.00/0.01, addr 5> on usbus0
WARNING: attempt to domain_add(bluetooth) after domainfinalize()
WARNING: attempt to domain_add(netgraph) after domainfinalize()
miibus0: <MII bus> on axge0
rgephy0: <RTL8169S/8110S/8211 1000BASE-T media interface> PHY 3 on miibus0
rgephy0:  none, 10baseT, 10baseT-FDX, 10baseT-FDX-flow, 100baseTX, 100baseTX-FDX, 100baseTX-FDX-flow, 1000baseT-FDX, 1000baseT-FDX-master, 1000baseT-FDX-flow, 1000baseT-FDX-flow-master, auto, auto-flow
ue0: <USB Ethernet> on axge0
ue0: Ethernet address: 00:90:fe:bf:53:71
<5>ue0: link state changed to DOWN
<118>[1469834481] unbound-control[666:0] warning: control-enable is 'no' in the config file.
<118>[1469834481] unbound-control[666:0] error: connect: Connection refused for 127.0.0.1
<118>.[1469834482] unbound-control[728:0] warning: control-enable is 'no' in the config file.
<118>[1469834482] unbound-control[728:0] error: connect: Connection refused for 127.0.0.1
<118> giving up
<118>Starting rtsold.
<118>Creating and/or trimming log files.
<118>Starting syslogd.
<118>No core dumps found.
<118>Additional ABI support: linux.
<5>ue0: link state changed to UP
<118>NFS access cache time=60
<118>Clearing /tmp (X related).
<118>Starting nfsuserd.
<118>Recovering vi editor sessions:.
<118>Updating motd:.
<118>fusefs is already running.
<118>Mounting late filesystems:.
<118>Starting ntpd.
<118>Starting powerd.
<118>Starting default moused.
<118>Jul 30 08:21:25 carrot ntpd[948]: leapsecond file ('/var/db/ntpd.leap-seconds.list'): expired less than 59 days ago
<118>Starting dbus.
<118>Starting hald.
<118>Configuring vt: keymap blanktime.
<118>Performing sanity check on sshd configuration.
<118>Starting sshd.
<118>Starting sendmail_submit.
<118>Starting sendmail_msp_queue.
<118>Starting cron.
<118>Starting nfscbd.
<7>ifa_maintain_loopback_route: deletion failed for interface lo0: 48
<118>Stopping wpa_supplicant.
<118>Waiting for PIDS: 313
<5>wlan0: link state changed to DOWN
<118>.
<118>Stopping Network: lo0 wlan0 lagg0 ue0.
<118>lo0: flags=8048<LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
<118>   options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>   groups: lo 
<118>wlan0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
<118>   status: no carrier
<118>   ssid "" channel 36 (5180 MHz 11a)
<118>   regdomain JAPAN country JP authmode OPEN privacy OFF txpower 23
<118>   bmiss 10 mcastrate 6 mgmtrate 6 scanvalid 60 wme
<118>   groups: wlan 
<118>lagg0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   options=800000<>
<118>   ether 00:00:00:00:00:00
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>   media: Ethernet autoselect
<118>   status: no carrier
<118>   groups: lagg 
<118>   laggproto failover lagghash l2,l3,l4
<118>ue0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   options=8000b<RXCSUM,TXCSUM,VLAN_MTU,LINKSTATE>
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: Ethernet autoselect (1000baseT <full-duplex>)
<118>   status: active
<118>Destroyed wlan(4) interfaces: wlan0.
<118>Destroyed clone interfaces: lagg0.
wlan0: Ethernet address: 5c:51:4f:11:73:f3
<118>Created wlan(4) interfaces: wlan0.
<118>Created clone interfaces: lagg0.
<5>lagg0: link state changed to UP
<5>ue0: link state changed to DOWN
<5>lagg0: link state changed to DOWN
<118>wpa_supplicant already running?  (pid=1379).
<118>Starting Network: lo0 ue0 wlan0 lagg0.
<118>lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
<118>   options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
<118>   inet6 ::1 prefixlen 128 
<118>   inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1 
<118>   inet 127.0.0.1 netmask 0xff000000 
<118>   nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
<118>   groups: lo 
<118>ue0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   options=8000b<RXCSUM,TXCSUM,VLAN_MTU,LINKSTATE>
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: Ethernet autoselect (none)
<118>   status: no carrier
<118>wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   ether 5c:51:4f:11:73:f3
<118>   nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
<118>   media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
<118>   status: no carrier
<118>   ssid "" channel 1 (2412 MHz 11g)
<118>   regdomain JAPAN country JP authmode WPA1+WPA2/802.11i privacy MIXED
<118>   deftxkey UNDEF txpower 23 bmiss 10 scanvalid 60 protmode CTS wme
<118>   roaming MANUAL bintval 0
<118>   groups: wlan 
<118>lagg0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
<118>   ether 5c:51:4f:11:73:f3
<118>   inet6 fe80::5e51:4fff:fe11:73f3%lagg0 prefixlen 64 scopeid 0x3 
<118>   inet 192.168.1.8 netmask 0xffffff00 broadcast 192.168.1.255 
<118>   nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
<118>   media: Ethernet autoselect
<118>   status: no carrier
<118>   groups: lagg 
<118>   laggproto failover lagghash l2,l3,l4
<118>   laggport: wlan0 flags=0<>
<118>   laggport: ue0 flags=1<MASTER>
<118>Starting background file system checks in 60 seconds.
<118>Starting autounmountd.
<118>Starting automountd.
<5>ue0: link state changed to UP
<5>lagg0: link state changed to UP
iwm0: iwm_update_edca: called
iwm0: iwm_update_edca: called
<5>wlan0: link state changed to UP
<118>
<118>Sat Jul 30 08:21:32 JST 2016
iwm0: firmware error 0x2010000, cmd 0x4


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address   = 0x0
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff8223cc33
stack pointer           = 0x28:0xfffffe02295cd8b0
frame pointer           = 0x28:0xfffffe02295cd9e0
code segment            = base rx0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 12 (irq268: iwm0)
trap number             = 12
panic: page fault
cpuid = 2
KDB: stack backtrace:
#0 0xffffffff80b1f607 at kdb_backtrace+0x67
#1 0xffffffff80ad70b2 at vpanic+0x182
#2 0xffffffff80ad6f23 at panic+0x43
#3 0xffffffff80f9cd51 at trap_fatal+0x351
#4 0xffffffff80f9cf43 at trap_pfault+0x1e3
#5 0xffffffff80f9c4ec at trap+0x26c
#6 0xffffffff80f7f671 at calltrap+0x8
#7 0xffffffff80a9125f at intr_event_execute_handlers+0x20f
#8 0xffffffff80a914c6 at ithread_loop+0xc6
#9 0xffffffff80a8dea5 at fork_exit+0x85
#10 0xffffffff80f7fbae at fork_trampoline+0xe
Uptime: 19s
Dumping 428 out of 8064 MB:
Comment 1 Kurt Jaeger freebsd_committer 2016-08-06 19:05:32 UTC
Can you still reproduce it with BETA4 ?
Comment 2 Zesen Qian 2018-07-03 23:38:05 UTC
Created attachment 194867 [details]
part of vmcore.2
Comment 3 Zesen Qian 2018-07-03 23:40:08 UTC
I added the part of vmcore when it crashed as attachment.

Here is some info about my system:

riaqn@thinkpad ~> freebsd-version -ku
11.2-RELEASE
11.2-RELEASE
riaqn@thinkpad ~> sudo cat /var/crash/info.2
Dump header from device: /dev/ada0p3
  Architecture: amd64
  Architecture Version: 2
  Dump Length: 509345792
  Blocksize: 512
  Dumptime: Sun Jul  1 12:27:19 2018
  Hostname: thinkpad.riaqn.org
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 11.2-RELEASE #0 r335510: Fri Jun 22 04:32:14 UTC 2018
    root@releng2.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC
  Panic String: page fault
  Dump Parity: 3006087772
  Bounds: 2
  Dump Status: good