Bug 294237 - bwn(4) panics on attach on arm64
Summary: bwn(4) panics on attach on arm64
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: wireless (show other bugs)
Version: 16.0-CURRENT
Hardware: arm64 Any
: --- Affects Only Me
Assignee: freebsd-wireless (Nobody)
URL:
Keywords:
Depends on:
Blocks: broadcom-native-wifi-PRs
  Show dependency treegraph
 
Reported: 2026-04-04 00:55 UTC by Bjoern A. Zeeb
Modified: 2026-04-04 00:55 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Bjoern A. Zeeb freebsd_committer freebsd_triage 2026-04-04 00:55:55 UTC
bwn_pci0: <Broadcom BCM43224 802.11n Dual-Band Wireless> mem 0x47200000-0x47203fff at device 0.0 on pci34
bhndb0: <PCI-BHND bridge> on bwn_pci0
bwn_pci0: attempting to allocate 1 MSI vectors (1 supported)
bwn_pci0: using IRQ 141 for MSI
bhndb0: Using MSI interrupts on bwn_pci0
bhndb0: PCIe/v2 WLAN resource configuration
bhnd0: <BCM43224 BCMA bus> on bhndb0
bcma_erom_next_corecfg erom[0x8]: core0: Broadcom ChipCommon I/O Controller (cid=800, rev=34, unit=0)
bcma_erom_next_corecfg erom[0x1c]: core1: Broadcom 802.11 MAC/PHY/Radio (cid=812, rev=23, unit=0)
bcma_erom_next_corecfg erom[0x30]: core2: Broadcom PCIe Bridge (cid=820, rev=15, unit=0)
bcma_erom_next_corecfg erom[0x60]: core3: ARM BP135 AMBA3 AXI to APB Bridge (cid=135, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x70]: core4: ARM BP135 AMBA3 AXI to APB Bridge (cid=135, rev=0, unit=1)
bcma_erom_next_corecfg erom[0x84]: core5: ARM PL367 OOB Interrupt Router (cid=367, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x90]: core6: ARM PL366 Device Enumeration ROM (cid=366, rev=0, unit=0)
bcma_erom_next_corecfg erom[0x9c]: core7: ARM PL301 AMBA3 Interconnect (cid=301, rev=0, unit=0)
bcma_erom_next_corecfg erom[0xa8]: core8: ARM Unmapped Address Ranges (cid=fff, rev=0, unit=0)
bhnd_chipc0: <Broadcom ChipCommon I/O Controller, rev 34> mem 0x18000000-0x18000fff,0x18100000-0x18100fff irq 0 at core 0 on bhnd0
bhnd_chipc0: MIPSEB:  no    | BP64:  yes
bhnd_chipc0: UARTs:   0     | UGPIO: no
bhnd_chipc0: UARTClk: 0x00  | Flash: 0
bhnd_chipc0: SPROM:   yes   | OTP:   yes
bhnd_chipc0: CFIsz:   0x00  | OTPsz: 0x02
bhnd_chipc0: ExtBus:  0x00  | PwrCtrl: no
bhnd_chipc0: PLL:     0x00  | JTAGM: yes
bhnd_chipc0: PMU:     yes   | ECI:   no
bhnd_chipc0: SECI:    no    | GSIO:  no
bhnd_chipc0: AOB:     no    | BootROM: no
bhnd_nvram0: <SPROM/OTP> mem 0x18000800-0x18000bff on bhnd_chipc0
Fatal data abort:
  x0: 0x0000000000000000
  x1: 0xffff0001d356e800
  x2: 0x0000000000000000
  x3: 0xffff00013112aaf0
  x4: 0x0000000000000040
  x5: 0x0000000000000040
  x6: 0x000000000000003f
  x7: 0x0000000000000000
  x8: 0xffff0001d356e800
  x9: 0xffff000000d41358 (memmap_bus + 0x0)
 x10: 0x0000000000000000
 x11: 0x000000000000007e
 x12: 0x0000000000000000
 x13: 0x0000000000000006
 x14: 0x0000002faa146000
 x15: 0xffff000001080240 (w_locklistdata + 0x39d78)
 x16: 0xffff00020b7d65d4 (bhnd_nvram_iores_read + 0x0)
 x17: 0xffff00020b7d5cac ($x + 0x0)
 x18: 0xffff000045275000 (end + 0x440d0000)
 x19: 0xffff00013112aaf0
 x20: 0xffff00020b7a7088 (bhnd_nvram_crc8_tab + 0x0)
 x21: 0xffffa0205de324c0
 x22: 0x0000000000000000
 x23: 0xffff00020b7f9c08 (bhnd_sprom_layouts + 0x0)
 x24: 0x00000000000000ff
 x25: 0x0000000000000080
 x26: 0x0000000000000080
 x27: 0xffff0000009d0e21 (notify.prefix + 0x3d5e5)
 x28: 0x0000000000000000
 x29: 0xffff00013112aa90
  sp: 0xffff00013112aa90
  lr: 0xffff00020b7d6700 (bhnd_nvram_iores_read + 0x12c)
 elr: 0x0000000000000000
spsr: 0x0000000060000005
 far: 0x0000000000000000
 esr: 0x0000000086000004
panic: vm_fault failed: 0x0 error 1
cpuid = 1
time = 1775263124
KDB: stack backtrace:
db_trace_self() at db_trace_self
db_trace_self_wrapper() at db_trace_self_wrapper+0x38
vpanic() at vpanic+0x1a0
panic() at panic+0x48
data_abort() at data_abort+0x3ec
handle_el1h_sync() at handle_el1h_sync+0x18
--- exception, esr 0x86000004
(null)() at 0
bhnd_nvram_sprom_ident() at bhnd_nvram_sprom_ident+0xfc
bhnd_nvram_sprom_new() at bhnd_nvram_sprom_new+0x20
bhnd_nvram_data_new() at bhnd_nvram_data_new+0x60
bhnd_nvram_store_parse_new() at bhnd_nvram_store_parse_new+0x24
bhnd_sprom_attach() at bhnd_sprom_attach+0xe0
chipc_sprom_attach() at chipc_sprom_attach+0xb4
device_attach() at device_attach+0x4c0
bus_attach_children() at bus_attach_children+0x5c
chipc_attach() at chipc_attach+0xfd4
device_attach() at device_attach+0x4c0
bhnd_bus_probe_children() at bhnd_bus_probe_children+0x54
bhnd_generic_attach() at bhnd_generic_attach+0x40
bcma_bhndb_attach() at bcma_bhndb_attach+0x20
device_attach() at device_attach+0x4c0
bus_attach_children() at bus_attach_children+0x5c
bhndb_pci_attach() at bhndb_pci_attach+0x994
device_attach() at device_attach+0x4c0
bhndb_attach_bridge() at bhndb_attach_bridge+0x30
bwn_pci_attach() at bwn_pci_attach+0x54
device_attach() at device_attach+0x4c0
pci_driver_added() at pci_driver_added+0x110
devclass_driver_added() at devclass_driver_added+0x48
devclass_add_driver() at devclass_add_driver+0x144
module_register_init() at module_register_init+0xb4
linker_load_module() at linker_load_module+0xb20
kern_kldload() at kern_kldload+0x18c
sys_kldload() at sys_kldload+0x6c
do_el0_sync() at do_el0_sync+0x5f8
handle_el0_sync() at handle_el0_sync+0x4c
--- exception, esr 0x56000000
KDB: enter: panic
[ thread pid 3567 tid 100267 ]
Stopped at      kdb_enter+0x48: str     xzr, [x19, #3072]