[Bug 273985] iwlwifi crash on ifconfig wlan0 destroy

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 20 Sep 2023 19:19:40 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273985

            Bug ID: 273985
           Summary: iwlwifi crash on ifconfig wlan0 destroy
           Product: Base System
           Version: 13.2-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: wireless
          Assignee: wireless@FreeBSD.org
          Reporter: che@bein.link

FreeBSD-13.2-RELEASE-p3. amd64. ThinkPad T14s gen 1.

As many people have mentioned, iwlwifi isn't that stable. In my case,
__sometimes__ (more often after total connectivity loss or UDP failure) iwlwifi
crashes the system on wlan0 destruction. Here's the backtrace:

(lldb) bt
* thread #1, name = '(pid 3984) ifconfig (crashed)'
  * frame #0: 0xffffffff80c065ae kernel`doadump + 46
    frame #1: 0xffffffff80c0638a kernel`kern_reboot + 1082
    frame #2: 0xffffffff80c0682e kernel`vpanic + 446
    frame #3: 0xffffffff80c06663 kernel`panic + 67
    frame #4: 0xffffffff810b1fa7 kernel`trap_fatal + 903
    frame #5: 0xffffffff810b1fff kernel`trap_pfault + 79
    frame #6: 0xffffffff81088ed8 kernel`calltrap + 8
    frame #7: 0xfffffe012388e1b0
    frame #8: 0xffffffff80d8f873 kernel`ieee80211_node_psq_drain + 243
    frame #9: 0xffffffff80d83907 kernel`node_cleanup + 167
    frame #10: 0xffffffff80d83825 kernel`node_free + 37
    frame #11: 0xffffffff80d83f3b kernel`ieee80211_node_vdetach + 43
    frame #12: 0xffffffff80d5bd7b kernel`ieee80211_vap_detach + 1099
    frame #13: 0xffffffff80e47d7b kernel`lkpi_ic_vap_delete + 171
    frame #14: 0xffffffff80d22931 kernel`ifc_simple_destroy_wrapper + 33
    frame #15: 0xffffffff80d21c59 kernel`if_clone_destroyif_flags + 201
    frame #16: 0xffffffff80d21b31 kernel`if_clone_destroy + 273
    frame #17: 0xffffffff80d1f07f kernel`ifioctl + 1775
    frame #18: 0xffffffff80c748fd kernel`kern_ioctl + 621
    frame #19: 0xffffffff80c745e0 kernel`sys_ioctl + 256
    frame #20: 0xffffffff810b289c kernel`amd64_syscall + 268
    frame #21: 0xffffffff810897eb kernel`fast_syscall_common + 248

It's similar to what I've seen in similar PRs, but not exactly the same.

-- 
You are receiving this mail because:
You are the assignee for the bug.