System crashes on connect [4.7.0-1-ARCH]

[intxcc]

Used:

• Arch Linux 64 Bit with latest updates
• Netgear A6210
• mt7662u_sta

Just tried to build the driver for the newest kernel with this patch https://github.com/jurobystricky/Netgear-A6210/issues/24. Using NetworkManager everything seems fine at first, although the Mac is shown as 00:00:00:00:00:00. When trying to connect to an access point mt7662u_sta crashes, then X11 and then the whole system.

[  747.328092] usb 2-1.2: new high-speed USB device number 4 using ehci-pci
[  747.989645] rtusb init rt2870 --->
[  747.990002] 
               === pAd = ffffc90000d73000, size = 1292952 ===

[  747.990008] driver version: 3.0.0.1 (Aug 11 2016 23:43:18) .
[  747.990756] ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a
[  748.001389] RtmpChipOpsEepromHook::e2p_type=0, inf_Type=2
[  748.001404] RtmpEepromGetDefault::e2p_dafault=1
[  748.001883] NVM is EFUSE mode
[  748.001888] Endpoint(8) is for In-band Command
[  748.001891] Endpoint(4) is for WMM0 AC0
[  748.001904] Endpoint(5) is for WMM0 AC1
[  748.001906] Endpoint(6) is for WMM0 AC2
[  748.001908] Endpoint(7) is for WMM0 AC3
[  748.001910] Endpoint(9) is for WMM1 AC0
[  748.001912] Endpoint(84) is for Data-In
[  748.001924] Endpoint(85) is for Command Rsp
[  748.002156] 80211> CurTxPower = 20 dBm
[  748.002160] ====> Radar Channel 52
[  748.002162] ====> Radar Channel 54
[  748.002173] ====> Radar Channel 56
[  748.002175] ====> Radar Channel 60
[  748.002177] ====> Radar Channel 62
[  748.002178] ====> Radar Channel 64
[  748.002180] ====> Radar Channel 100
[  748.002182] ====> Radar Channel 104
[  748.002184] 80211> TxStream = 0
[  748.002860] usbcore: registered new interface driver rt2870
[  779.838334] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  779.839457] -->RTUSBVendorReset
[  779.859658] <--RTUSBVendorReset
[  779.861832] ...........andes_usb_chk_crc
[  779.955330] andes_usb_reset_wmt
[  779.976164] -->RTUSBVendorReset
[  779.996381] <--RTUSBVendorReset
[  779.996927] fw version:0.0.00 build:1
[  779.996934] build time:201406241830____
[  779.996949] fw for E3 IC
[  779.996953] ilm length = 59312(bytes)
[  779.996955] dlm length = 32068(bytes)
[  779.998012] loading fw........
[  780.060071] cfg_mode=5
[  780.060292] Key1Str is Invalid key length(0) or Type(0)
[  780.060308] Key2Str is Invalid key length(0) or Type(0)
[  780.060323] Key3Str is Invalid key length(0) or Type(0)
[  780.060339] Key4Str is Invalid key length(0) or Type(0)
[  780.060757] USBAggregation = 1
[  780.060761] 1. Phy Mode = 31
[  780.060763] NVM is Efuse and its size =1d[1e0-1fc] 
[  780.089975] get_chl_grp:illegal channel (167)
[  780.089992] get_chl_grp:illegal channel (167)
[  780.089995] get_chl_grp:illegal channel (169)
[  780.089997] get_chl_grp:illegal channel (169)
[  780.090000] get_chl_grp:illegal channel (171)
[  780.090002] get_chl_grp:illegal channel (171)
[  780.090004] get_chl_grp:illegal channel (173)
[  780.090006] get_chl_grp:illegal channel (173)
[  780.092468] Country Region from e2p = ffff
[  780.105729] mt76x2_get_external_lna_gain::LNA type=0x0, BLNAGain=0xffffff8d, ALNAGain0=0xffffff89, ALNAGain1=0xffffff88, ALNAGain2=0xffffff87
[  780.105739] 2. Phy Mode = 31
[  780.105743] 3. Phy Mode = 31
[  780.105972] andes_usb_fw_init
[  780.281858] AntCfgInit: primary/secondary ant 0/1
[  780.281868] andes_load_cr:cr_type(2)
[  780.283114] ChipStructAssign(): MT76x2 hook !
[  780.283123] ---> InitFrequencyCalibration
[  780.283127] InitFrequencyCalibrationMode:Unknow mode = 3
[  780.283131] InitFrequencyCalibration: frequency offset in the EEPROM = 168
[  780.283144] <--- InitFrequencyCalibration
[  780.283160] RTMPSetPhyMode: channel is out of range, use first channel=1 
[  780.283163] RTMPSetPhyMode: Update for STA
[  780.287358] MCS Set = ff ff 00 00 01
[  780.287479] 80211> re-init bands...
[  780.287483] 80211> CurTxPower = 20 dBm
[  780.287497] ====> Radar Channel 52
[  780.287500] ====> Radar Channel 54
[  780.287502] ====> Radar Channel 56
[  780.287504] ====> Radar Channel 60
[  780.287506] ====> Radar Channel 62
[  780.287508] ====> Radar Channel 64
[  780.287510] ====> Radar Channel 100
[  780.287512] ====> Radar Channel 104
[  780.287515] 80211> TxStream = 2
[  780.287529] Chan 167 (frq 5835): not allowed!
[  780.287532] Chan 169 (frq 5845): not allowed!
[  780.287534] Chan 171 (frq 5855): not allowed!
[  780.287537] Chan 173 (frq 5865): not allowed!
[  780.287539] Chan 184 (frq 4920): not allowed!
[  780.287541] Chan 188 (frq 4940): not allowed!
[  780.287544] Chan 192 (frq 4960): not allowed!
[  780.287546] Chan 196 (frq 4980): not allowed!
[  780.287548] Chan 208 (frq 6040): not allowed!
[  780.287550] Chan 212 (frq 6060): not allowed!
[  780.287552] Chan 216 (frq 6080): not allowed!
[  780.287555] RTMPDrvOpen(1):Check if PDMA is idle!
[  780.287733] RTMPDrvOpen(2):Check if PDMA is idle!
[  780.288729] CFG80211DRV_IoctlHandle: CMD_RTPRIV_IOCTL_80211_NETDEV_EVENT
[  780.315984] andes_usb_erasefw
[  780.316108] ==>rlt_wlan_chip_onoff(): OnOff:0, Reset= 0, pAd->WlanFunCtrl:0x20b, Reg-WlanFunCtrl=0x20b
[  780.323176] receive cmd msg fail(-2)
[  780.323260] tx_kickout_fail_count = 0
[  780.323265] tx_timeout_fail_count = 0
[  780.323267] rx_receive_fail_count = 0
[  780.323269] alloc_cmd_msg = 10
[  780.323272] free_cmd_msg = 10
[  780.378880] RTMP_TimerListRelease: release timer obj ffffc90000df54b0!
[  780.378887] RTMP_TimerListRelease: release timer obj ffffc90000df5528!
[  780.378890] RTMP_TimerListRelease: release timer obj ffffc90000df55a0!
[  780.378892] RTMP_TimerListRelease: release timer obj ffffc90000df5438!
[  780.378894] RTMP_TimerListRelease: release timer obj ffffc90000df52d0!
[  780.378896] RTMP_TimerListRelease: release timer obj ffffc90000df5348!
[  780.378898] RTMP_TimerListRelease: release timer obj ffffc90000d86fa0!
[  780.378900] RTMP_TimerListRelease: release timer obj ffffc90000d75d78!
[  780.378902] RTMP_TimerListRelease: release timer obj ffffc90000d75df8!
[  780.378904] RTMP_TimerListRelease: release timer obj ffffc90000d87128!
[  780.378906] RTMP_TimerListRelease: release timer obj ffffc90000d86eb0!
[  780.378908] RTMP_TimerListRelease: release timer obj ffffc90000d870b0!
[  780.390663] ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 0, pAd->WlanFunCtrl:0x208, Reg-WlanFunCtrl=0x209
[  780.392128] -->RTUSBVendorReset
[  780.412263] <--RTUSBVendorReset
[  780.414484] ...........andes_usb_chk_crc
[  780.507643] andes_usb_reset_wmt
[  780.528442] -->RTUSBVendorReset
[  780.548620] <--RTUSBVendorReset
[  780.549121] fw version:0.0.00 build:1
[  780.549126] build time:201406241830____
[  780.549143] fw for E3 IC
[  780.549147] ilm length = 59312(bytes)
[  780.549149] dlm length = 32068(bytes)
[  780.550460] loading fw........
[  780.611849] cfg_mode=5
[  780.612274] Key1Str is Invalid key length(0) or Type(0)
[  780.612306] Key2Str is Invalid key length(0) or Type(0)
[  780.612338] Key3Str is Invalid key length(0) or Type(0)
[  780.612371] Key4Str is Invalid key length(0) or Type(0)
[  780.613130] USBAggregation = 1
[  780.613134] 1. Phy Mode = 31
[  780.613136] NVM is Efuse and its size =1d[1e0-1fc] 
[  780.642880] get_chl_grp:illegal channel (167)
[  780.642888] get_chl_grp:illegal channel (167)
[  780.642891] get_chl_grp:illegal channel (169)
[  780.642894] get_chl_grp:illegal channel (169)
[  780.642896] get_chl_grp:illegal channel (171)
[  780.642898] get_chl_grp:illegal channel (171)
[  780.642901] get_chl_grp:illegal channel (173)
[  780.642903] get_chl_grp:illegal channel (173)
[  780.645373] Country Region from e2p = ffff
[  780.657875] mt76x2_get_external_lna_gain::LNA type=0x0, BLNAGain=0xffffff8d, ALNAGain0=0xffffff89, ALNAGain1=0xffffff88, ALNAGain2=0xffffff87
[  780.657881] 2. Phy Mode = 31
[  780.657885] 3. Phy Mode = 31
[  780.658122] andes_usb_fw_init
[  780.835138] AntCfgInit: primary/secondary ant 0/1
[  780.835157] andes_load_cr:cr_type(2)
[  780.836523] ChipStructAssign(): MT76x2 hook !
[  780.836755] ---> InitFrequencyCalibration
[  780.836760] InitFrequencyCalibrationMode:Unknow mode = 3
[  780.836765] InitFrequencyCalibration: frequency offset in the EEPROM = 168
[  780.836768] <--- InitFrequencyCalibration
[  780.836788] RTMPSetPhyMode: channel is out of range, use first channel=1 
[  780.836791] RTMPSetPhyMode: Update for STA
[  780.841135] MCS Set = ff ff 00 00 01
[  780.841257] 80211> re-init bands...
[  780.841261] 80211> CurTxPower = 20 dBm
[  780.841265] ====> Radar Channel 52
[  780.841267] ====> Radar Channel 54
[  780.841269] ====> Radar Channel 56
[  780.841272] ====> Radar Channel 60
[  780.841274] ====> Radar Channel 62
[  780.841276] ====> Radar Channel 64
[  780.841279] ====> Radar Channel 100
[  780.841281] ====> Radar Channel 104
[  780.841285] 80211> TxStream = 2
[  780.841300] Chan 167 (frq 5835): not allowed!
[  780.841303] Chan 169 (frq 5845): not allowed!
[  780.841305] Chan 171 (frq 5855): not allowed!
[  780.841308] Chan 173 (frq 5865): not allowed!
[  780.841310] Chan 184 (frq 4920): not allowed!
[  780.841313] Chan 188 (frq 4940): not allowed!
[  780.841315] Chan 192 (frq 4960): not allowed!
[  780.841318] Chan 196 (frq 4980): not allowed!
[  780.841321] Chan 208 (frq 6040): not allowed!
[  780.841323] Chan 212 (frq 6060): not allowed!
[  780.841326] Chan 216 (frq 6080): not allowed!
[  780.841329] RTMPDrvOpen(1):Check if PDMA is idle!
[  780.841511] RTMPDrvOpen(2):Check if PDMA is idle!
[  780.853817] IPv6: ADDRCONF(NETDEV_UP): wlp3s0: link is not ready
[  780.862878] IPv6: ADDRCONF(NETDEV_UP): enp0s25: link is not ready
[  781.049806] 80211> CFG80211_OpsPmksaFlush ==>
[  781.065661] IPv6: ADDRCONF(NETDEV_UP): wlp3s0: link is not ready
[  781.132664] TX0 power compensation = 0x38
[  781.132919] TX1 power compensation = 0x38
[ 1327.937283] CFG80211DRV_IoctlHandle: CMD_RTPRIV_IOCTL_80211_NETDEV_EVENT
[ 1327.937321] BUG: unable to handle kernel paging request at 0000000f0013a355
[ 1327.937387] IP: [<ffffffffa0b3e4ad>] CFG80211DRV_IoctlHandle+0x138d/0x1400 [mt7662u_sta]
[ 1327.937465] PGD ab32c067 PUD 0 
[ 1327.937495] Oops: 0000 [#1] PREEMPT SMP
[ 1327.937523] Modules linked in: mt7662u_sta(O) iwldvm mac80211 iwlwifi cfg80211 ctr ccm fuse uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_core videodev media wacom joydev mousedev msr snd_hda_codec_hdmi snd_hda_codec_conexant snd_hda_codec_generic arc4 mei_wdt iTCO_wdt intel_rapl iTCO_vendor_support x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm evdev input_leds mac_hid irqbypass intel_cstate intel_rapl_perf psmouse serio_raw pcspkr thermal wmi i915 thinkpad_acpi nvram drm_kms_helper snd_hda_intel battery snd_hda_codec rfkill ac fjes drm snd_hda_core snd_hwdep e1000e snd_pcm button intel_gtt snd_timer video syscopyarea snd soundcore sysfillrect sysimgblt fb_sys_fops ptp pps_core i2c_i801 i2c_algo_bit mei_me mei lpc_ich shpchp tpm_tis tpm sch_fq_codel vboxnetflt(O)
[ 1327.938203]  vboxnetadp(O) pci_stub vboxpci(O) vboxdrv(O) acpi_call(O) ip_tables x_tables ext4 crc16 jbd2 mbcache algif_skcipher af_alg dm_crypt dm_mod sd_mod usbhid hid atkbd libps2 crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd ahci libahci libata scsi_mod sdhci_pci sdhci ehci_pci led_class ehci_hcd mmc_core usbcore usb_common i8042 serio jitterentropy_rng sha256_ssse3 sha256_generic hmac drbg ansi_cprng [last unloaded: cfg80211]
[ 1327.938633] CPU: 2 PID: 1639 Comm: NetworkManager Tainted: G           O    4.7.0-1-ARCH #1
[ 1327.938688] Hardware name: LENOVO 4299Y48/4299Y48, BIOS 8DET50WW (1.20 ) 07/07/2011
[ 1327.938738] task: ffff8800a6c90000 ti: ffff8800ce170000 task.ti: ffff8800ce170000
[ 1327.938787] RIP: 0010:[<ffffffffa0b3e4ad>]  [<ffffffffa0b3e4ad>] CFG80211DRV_IoctlHandle+0x138d/0x1400 [mt7662u_sta]
[ 1327.938872] RSP: 0018:ffff8800ce173b58  EFLAGS: 00010282
[ 1327.938908] RAX: 000000000000003c RBX: 0000000f00000004 RCX: 0000000000000000
[ 1327.938955] RDX: 0000000000000000 RSI: ffff88011e28dbe8 RDI: ffff88011e28dbe8
[ 1327.939002] RBP: ffff8800ce173c10 R08: 00000000000003ff R09: 74636f495f565244
[ 1327.939049] R10: 0000000000000000 R11: 444d43203a656c64 R12: ffff8800d4906000
[ 1327.939095] R13: 0000000000005078 R14: ffff8800ce173d08 R15: 0000000f00000004
[ 1327.939142] FS:  00007f1cf237b840(0000) GS:ffff88011e280000(0000) knlGS:0000000000000000
[ 1327.939195] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1327.939234] CR2: 0000000f0013a355 CR3: 00000000d6757000 CR4: 00000000000406e0
[ 1327.939280] Stack:
[ 1327.939297]  0000000000000000 000000003f59f4ac ffff8800ce173ba8 ffffffffa091695a
[ 1327.939355]  ffffffffa02af6ea ffff8800d4906850 ffff8800a6c50000 ffff8800d4906000
[ 1327.939414]  0000000000000009 0000000000000287 0000000000000287 ffff8800ce173bd8
[ 1327.939472] Call Trace:
[ 1327.939503]  [<ffffffffa091695a>] ? cfg80211_disconnect+0x1ea/0x200 [cfg80211]
[ 1327.939562]  [<ffffffffa02af6ea>] ? __ext4_ext_dirty+0x6a/0x90 [ext4]
[ 1327.939607]  [<ffffffff814bb059>] ? skb_dequeue+0x59/0x70
[ 1327.939646]  [<ffffffff815c5664>] ? wireless_nlevent_flush+0x54/0x90
[ 1327.939707]  [<ffffffffa0b07ea5>] RTMP_COM_IoctlHandle+0x6b5/0x780 [mt7662u_sta]
[ 1327.939758]  [<ffffffff8154b99d>] ? inetdev_event+0x3d/0x500
[ 1327.939811]  [<ffffffffa0b36d86>] CFG80211NetdevNotifierEvent+0x106/0x190 [mt7662u_sta]
[ 1327.939873]  [<ffffffff8109a34a>] notifier_call_chain+0x4a/0x70
[ 1327.939956]  [<ffffffff8109a486>] raw_notifier_call_chain+0x16/0x20
[ 1327.940009]  [<ffffffff814cb6c5>] call_netdevice_notifiers_info+0x35/0x60
[ 1327.940082]  [<ffffffff814cba55>] __dev_close_many+0x55/0x100
[ 1327.940134]  [<ffffffff814cbb8c>] dev_close_many+0x8c/0x130
[ 1327.940187]  [<ffffffff814d0fca>] dev_close.part.19+0x4a/0x70
[ 1327.940241]  [<ffffffff814d100a>] dev_close+0x1a/0x20
[ 1327.940301]  [<ffffffffa08e6d55>] cfg80211_shutdown_all_interfaces+0x45/0xb0 [cfg80211]
[ 1327.940360]  [<ffffffffa08e6e26>] cfg80211_rfkill_set_block+0x26/0x30 [cfg80211]
[ 1327.940412]  [<ffffffffa057af19>] rfkill_set_block+0x89/0x130 [rfkill]
[ 1327.940456]  [<ffffffffa057b173>] rfkill_fop_write+0x103/0x1a0 [rfkill]
[ 1327.942553]  [<ffffffff811f94d7>] __vfs_write+0x37/0x140
[ 1327.944652]  [<ffffffff811fa2a6>] vfs_write+0xb6/0x1a0
[ 1327.946727]  [<ffffffff811fb725>] SyS_write+0x55/0xc0
[ 1327.948771]  [<ffffffff815dd732>] entry_SYSCALL_64_fastpath+0x1a/0xa4
[ 1327.950794] Code: 63 e0 e9 c5 fa ff ff 48 c7 c7 98 d8 b7 a0 e8 47 1f 63 e0 e9 d8 f4 ff ff 48 c7 c6 60 2e b6 a0 48 c7 c7 48 d9 b7 a0 e8 2f 1f 63 e0 <80> bb 51 a3 13 00 01 0f 85 eb ed ff ff 83 3d bf 7e 06 00 01 0f 
[ 1327.955115] RIP  [<ffffffffa0b3e4ad>] CFG80211DRV_IoctlHandle+0x138d/0x1400 [mt7662u_sta]
[ 1327.957189]  RSP <ffff8800ce173b58>
[ 1327.959150] CR2: 0000000f0013a355
[ 1327.969373] ---[ end trace 75d2d708fd76d3fd ]---

[jadenPete]

Linux kernel panics? Now I haven't seen that in a long time...

[intxcc]

Yes, me neither. At first I thought the error might come from these dmesg lines.

[...]
[  780.287550] Chan 212 (frq 6060): not allowed!
[...]

But even if this has something to do with a misconfiguration, the driver shouldn't be able to crash the whole system.

Edit: Btw, iwlwifi is loaded via "modprobe iwlwifi 11n_disable=0". Maybe this has something to do with it?

[jadenPete]

Oh I also have those issues to with the dmesg lines. I am strongly convinced it is why I can't get 5Ghz working on my Netgear WNDA3100v3. Those channels in dmesg are where my 5Ghz network is in, and where 5Ghz is. 2.4Ghz works though, because it is channels 1-14. (1-11 in the USA). I know it is not a problem with my card, because it works in Windoze.

[jadenPete]

I have also heard that this driver doesn't do well with newer kernels. Try this updated fork I use. It has DKMS support, is updated with the latest commits, fixed the GCC warning messages, and has AUR support (I think). It also is patched for newer kernels!

[bobberb]

I encountered this on my arch-ification of a box today. Will check the fork and report back.