[Bug 266570] iwlwifi crashes when connecting to an AP on Intel AX211

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266570

            Bug ID: 266570
           Summary: iwlwifi crashes when connecting to an AP on Intel
                    AX211
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: nc@FreeBSD.org

Created attachment 236774
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=236774&action=edit
Stacktrace

On a HP Spectre x360 16-f1013dx with an Intel AX211 Wi-Fi adapter, when I
connect to an AP (Netgear Orbi Wi-Fi 6 in my case), I get a kernel panic.

Other APs, such as a Google Pixel 6 hotspot also give me a similar issue.

A HP Spectre x360 14-ea0023dx with an Intel AX201 also had a similar issue with
CURRENT, but not to the same extent on 13.1.

<118>Starting wpa_supplicant.
<6>wlan0: ieee80211_new_state_locked: pending SCAN -> AUTH transition lost
<4>Invalid TXQ id
panic: lkpi_sta_auth_to_scan: lsta 0xfffff80001b65800 state not NONE: 0, nstate
1 arg 1

cpuid = 15
time = 1663959560
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe011b80ec60
vpanic() at vpanic+0x151/frame 0xfffffe011b80ecb0
panic() at panic+0x43/frame 0xfffffe011b80ed10
lkpi_sta_auth_to_scan() at lkpi_sta_auth_to_scan+0x253/frame 0xfffffe011b80ed80
lkpi_iv_newstate() at lkpi_iv_newstate+0x1b3/frame 0xfffffe011b80edf0
ieee80211_newstate_cb() at ieee80211_newstate_cb+0x1f5/frame 0xfffffe011b80ee40
taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe011b80eec0
taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe011b80eef0
fork_exit() at fork_exit+0x80/frame 0xfffffe011b80ef30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe011b80ef30
--- trap 0x68ed68ed, rip = 0x9ec89ec89ec89ec8, rsp = 0x5db25db25db25db2, rbp =
0x3ed33ed33ed33ed3 ---

Full core dump attached. I can share more if needed.

-- 
You are receiving this mail because:
You are the assignee for the bug.