From nobody Tue Jan 28 18:29:07 2025 X-Original-To: wireless@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4YjDMR1H97z5lw05 for ; Tue, 28 Jan 2025 18:29:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4YjDMR14Dhz3Tym for ; Tue, 28 Jan 2025 18:29:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738088947; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cS+HdxWYuqOI/y9uOelgrSVQLIHNT98KcFG6nk1Y2cQ=; b=bFFe7YvcJ/3W3gdZCiAhqbtqPNhlGWlo3Lj0OS/CRgR5/PSQRRUuj6ybqHALXgl1/LRPIX QoWMDFZgvjiV/hbVTG2qzzn15g4mCnKlpH5IYzoDTPPY2qwUPZkvhTWt5jRTuZQDWl91c5 2nE+irp2HqKvQcEkdXuufvLeBHDAsTKCOPyE07vGmotVd4VXwub/676JMmjODKZX1115ED Lc32/AQHhWAZ+my1fpt9jCrdaP70DFeyIhofQZef6JNl4+eHyMYcbpkXP72gYJJ7xLuo3S JZ9gh4vyc/tFfZSiUMGW4+YDKF04q02gjgrgeUv1Qhhx6VGYoEiw7aoJvYfSnw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1738088947; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=cS+HdxWYuqOI/y9uOelgrSVQLIHNT98KcFG6nk1Y2cQ=; b=yvjrvhWZ1ZMxTeUHhjkMFdSAGH05Sz6OINwzKixDxUnm5blZ/osbSX0vv44IpCZFYnvCSK 3Co3p+PZS3yUQ1ZK40ePXZRa5DH3a6agfIsRrkIVFyaxP0lE/H0Q5GEjNCxn2SBIAA/DEa m13uxo2u671hodw63s5CCr6nmRQphefW6fz7Ysj03aOP15Ue44H6fplS8SKaH52hdxOsWq NAjCxU+ogfehUnDu5A9eLjSS3jTxL5tnra1+T6HlPaUD0B6JYjVZNa9V6kPkVYlwendveZ +kGIOVayuZ3yGxn+CSL6VVgj1x51ZihqxJxxSpabKaCG3Yu4+INEORJp/Tcp7Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1738088947; a=rsa-sha256; cv=none; b=ZbQTMFCPx1WUdOUXU8J4w8yEivpfCZuVSnWH3TMsO8Hs+Kvwa5lXRDuHDD6z8zY8bPj8GR BmCol/uGzbpzPbl8V/Lf9Zja0TfulD2isBQKzJKuIeV/Q8TIFtVFBSixST1jmjjid3xyxR vsF/o4KTIV+MCqqOXmDREP8nC+lxUeC98NOw8rHttrpWI9EH4kX6Icb2N/CGnYnuaCPzr+ LlbVxBmBPLVKcgKrAwhb6n322MczAzNDk9KPpuPDHBQ0XUkC2K3SaA3vvX1dabxsQnfXqV TKSQkk0h2+yGrAJKCDFjajcAznVnOaBdv/6T/AQIPQW8lRD1ryycdRrhBywRAg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4YjDMR0SlQzBFD for ; Tue, 28 Jan 2025 18:29:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 50SIT6gi033909 for ; Tue, 28 Jan 2025 18:29:06 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 50SIT6pf033908 for wireless@FreeBSD.org; Tue, 28 Jan 2025 18:29:06 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: wireless@FreeBSD.org Subject: [Bug 284421] iwlwifi: kernel panic: lkpi_sta_scan_to_auth:1346: mo_sta_state(NONE) failed: -5 Date: Tue, 28 Jan 2025 18:29:07 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: wireless X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: mshirk@daemon-security.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: wireless@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-wireless List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-wireless@freebsd.org Sender: owner-freebsd-wireless@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284421 Bug ID: 284421 Summary: iwlwifi: kernel panic: lkpi_sta_scan_to_auth:1346: mo_sta_state(NONE) failed: -5 Product: Base System Version: CURRENT Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: wireless Assignee: wireless@FreeBSD.org Reporter: mshirk@daemon-security.com Discovered on HardenedBSD 15-CURRENT, and verified on the following FreeBSD 15-CURRENT build from FreeBSD-15.0-CURRENT-amd64-20250116-054c5ddf587a-274800-bootonly.iso Hardware Information: Dell Precision 7510 Laptop [1] CPU: Intel(R) Xeon(R) CPU E3-1505M v5 @ 2.80GHz (2800.00-MHz K8-class C= PU) [1] Origin=3D"GenuineIntel" Id=3D0x506e3 Family=3D0x6 Model=3D0x5e St= epping=3D3 [1]=20=20 Features=3D0xbfebfbff [1]=20=20 Features2=3D0x7ffafbff [1] AMD Features=3D0x2c100800 [1] AMD Features2=3D0x121 [1] Structured Extended Features=3D0x29c6fbf [1] Structured Extended Features3=3D0xbc002e00 [1] XSAVE Features=3D0xf [1] IA32_ARCH_CAPS=3D0xc04 [1] VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID [1] TSC: P-state invariant, performance statistics [1] real memory =3D 34359738368 (32768 MB) [1] avail memory =3D 33213587456 (31674 MB) [1] Event timer "LAPIC" quality 600 [1] ACPI APIC Table: [1] FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs [1] FreeBSD/SMP: 1 package(s) x 4 core(s) x 2 hardware threads [1] FreeBSD/SMP Online: 1 package(s) x 4 core(s) [8] iwlwifi0: mem 0xdc300000-0xdc301fff at device 0.0 on pci2 [8] iwlwifi0: Detected crf-id 0xbadcafe, cnv-id 0x3000000 wfpm id 0x80000000 [8] iwlwifi0: PCI dev 24f3/0050, rev=3D0x201, rfid=3D0xd55555d5 [8] iwlwifi0: Detected Intel(R) Dual Band Wireless AC 8260 [8] iwlwifi0: successfully loaded firmware image 'iwlwifi-8000C-36.ucode' [8] iwlwifi0: loaded firmware version 36.ca7b901d.0 8000C-36.ucode op_mode iwlmvm [8] iwlwifi0: base HW address: e4:b3:18:32:7f:8f, OTP minor version: 0x0 pciconf -lv hostb0@pci0:0:0:0: class=3D0x060000 rev=3D0x07 hdr=3D0x00 vendor=3D0x8= 086 device=3D0x1918 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D 'Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Host Bridge/DRAM Registers' class =3D bridge subclass =3D HOST-PCI pcib1@pci0:0:1:0: class=3D0x060400 rev=3D0x07 hdr=3D0x01 vendor=3D0x8= 086 device=3D0x1901 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '6th-10th Gen Core Processor PCIe Controller (x16)' class =3D bridge subclass =3D PCI-PCI none0@pci0:0:4:0: class=3D0x118000 rev=3D0x07 hdr=3D0x00 vendor=3D0x8= 086 device=3D0x1903 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D 'Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Therm= al Subsystem' class =3D dasp xhci0@pci0:0:20:0: class=3D0x0c0330 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa12f subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family USB 3.0 xHCI Controller' class =3D serial bus subclass =3D USB pchtherm0@pci0:0:20:2: class=3D0x118000 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa131 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family Thermal Subsystem' class =3D dasp none1@pci0:0:22:0: class=3D0x078000 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa13a subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family MEI Controller' class =3D simple comms ahci0@pci0:0:23:0: class=3D0x010400 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0x2822 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D 'SATA Controller [RAID mode]' class =3D mass storage subclass =3D RAID pcib2@pci0:0:28:0: class=3D0x060400 rev=3D0xf1 hdr=3D0x01 vendor=3D0x8= 086 device=3D0xa111 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family PCI Express Root = Port' class =3D bridge subclass =3D PCI-PCI pcib3@pci0:0:28:2: class=3D0x060400 rev=3D0xf1 hdr=3D0x01 vendor=3D0x8= 086 device=3D0xa112 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family PCI Express Root = Port' class =3D bridge subclass =3D PCI-PCI pcib4@pci0:0:28:4: class=3D0x060400 rev=3D0xf1 hdr=3D0x01 vendor=3D0x8= 086 device=3D0xa114 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family PCI Express Root = Port' class =3D bridge subclass =3D PCI-PCI isab0@pci0:0:31:0: class=3D0x060100 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa150 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D 'CM236 Chipset LPC/eSPI Controller' class =3D bridge subclass =3D PCI-ISA none2@pci0:0:31:2: class=3D0x058000 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa121 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family Power Management Controller' class =3D memory hdac1@pci0:0:31:3: class=3D0x040300 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa170 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family HD Audio Controll= er' class =3D multimedia subclass =3D HDA ichsmb0@pci0:0:31:4: class=3D0x0c0500 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0xa123 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D '100 Series/C230 Series Chipset Family SMBus' class =3D serial bus subclass =3D SMBus em0@pci0:0:31:6: class=3D0x020000 rev=3D0x31 hdr=3D0x00 vendor=3D0x8= 086 device=3D0x15b7 subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Intel Corporation' device =3D 'Ethernet Connection (2) I219-LM' class =3D network subclass =3D ethernet vgapci0@pci0:1:0:0: class=3D0x030000 rev=3D0xa2 hdr=3D0x00 vendor=3D0x1= 0de device=3D0x13b0 subvendor=3D0x1028 subdevice=3D0x16d9 vendor =3D 'NVIDIA Corporation' device =3D 'GM107GLM [Quadro M2000M]' class =3D display subclass =3D VGA hdac0@pci0:1:0:1: class=3D0x040300 rev=3D0xa1 hdr=3D0x00 vendor=3D0x1= 0de device=3D0x0fbc subvendor=3D0x1028 subdevice=3D0x16d9 vendor =3D 'NVIDIA Corporation' device =3D 'GM107 High Definition Audio Controller [GeForce 940MX]' class =3D multimedia subclass =3D HDA iwlwifi0@pci0:2:0:0: class=3D0x028000 rev=3D0x3a hdr=3D0x00 vendor=3D0x8= 086 device=3D0x24f3 subvendor=3D0x8086 subdevice=3D0x0050 vendor =3D 'Intel Corporation' device =3D 'Wireless 8260' class =3D network rtsx0@pci0:3:0:0: class=3D0xff0000 rev=3D0x01 hdr=3D0x00 vendor=3D0x1= 0ec device=3D0x525a subvendor=3D0x1028 subdevice=3D0x06d9 vendor =3D 'Realtek Semiconductor Co., Ltd.' device =3D 'RTS526A PCI Express Card Reader' Setup of network from rc.conf (note that iwm is blocked from loading) devmatch_blocklist=3D"if_iwm" wlans_iwlwifi0=3D"wlan0" ifconfig_wlan0=3D"WPA SYNCDHCP" (also if I set a static IP address). wpa_supplicant with scan_ssid=3D1, network set to SSID and a fun passphrase (I have also tested with base wpa_supplicant and the port) Reproducing the issue: This is a laptop, and typically after starting the laptop, starting X11, I = lock the laptop and close the lid typically accessing from another laptop (server laptop, its got Xeons in it). For a long time before iwlwifi, even with the= iwm kernel module, the "wlan0" interface would just drop, pointing to another i= ssue of a loss of a network connection. This would cause me to have to do "servi= ce netif restart" to bring the "wlan0" interface back online. Now with the pus= h to using iwlwifi, I switched over and have found that when iwlwifi runs into an issue, stopping "netif" or running "ifconfig wlan0 down" will lead to the s= ame panic as show below. As this was HardenedBSD, I fired up a live image of FreeBSD-15-CURRENT from 2025Jan16 and ran through the same wireless setup to block if_iwm, load wlan0 with the iwlwifi driver and found that eventually = the same panic condition occurs NOTE FOR REPRODUCTION: I typically leave the laptop setup like this overnig= ht so it may take a while to reproduce the panic.=20 Log data from panic Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] wlan0: link state changed to DOWN Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Microcode SW error detected. Restarting 0x2000000. Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Start IWL Error L= og Dump: Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Transport status: 0x0000004B, valid: 6 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Loaded firmware version: 36.ca7b901d.0 8000C-36.ucode Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x000021A0 | ADVANCED_SYSASSERT=20=20=20=20=20=20=20=20=20=20 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x000002A0 | trm_hw_status0 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | trm_hw_status1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0002438C | branchlink2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00039C22 | interruptlink1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | interruptlink2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000030 | data1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | data2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | data3 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x1E007F14 | beac= on time Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x75697806 | tsf = low Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x000001A7 | tsf = hi Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | time= gp1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x81841222 | time= gp2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000001 | uCode revision type Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000024 | uCode version major Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xCA7B901D | uCode version minor Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000201 | hw version Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x18489001 | board version Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x001C0118 | hcmd Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00022080 | isr0 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | isr1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x08201802 | isr2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x004150C0 | isr3 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | isr4 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x001B019F | last= cmd Id Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | wait_event Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x000000C0 | l2p_control Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00018000 | l2p_duration Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0000003F | l2p_mhvalid Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | l2p_addr_match Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0000000D | lmpm_pmg_sel Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x10032207 | timestamp Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00005868 | flow_handler Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Start IWL Error L= og Dump: Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Transport status: 0x0000004B, valid: 7 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000070 | NMI_INTERRUPT_LMAC_FATAL Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | umac branchlink1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC0086B3C | umac branchlink2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC0083D08 | umac interruptlink1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC0083D08 | umac interruptlink2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000800 | umac data1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC0083D08 | umac data2 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xDEADBEEF | umac data3 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000024 | umac major Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xCA7B901D | umac minor Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC088628C | frame pointer Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xC088628C | stack pointer Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x001C0118 | last host cmd Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000000 | isr status reg Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: IML/ROM dump: Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0000388D | IML/= ROM error/state Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x00000003 | IML/= ROM data1 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Fseq Registers: Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xB53B3237 | FSEQ_ERROR_CODE Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xE1F88FF3 | FSEQ_TOP_INIT_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x1178C508 | FSEQ_CNVIO_INIT_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0000A056 | FSEQ_OTP_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xE7C9BF72 | FSEQ_TOP_CONTENT_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x5FDFD166 | FSEQ_ALIVE_TOKEN Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xBA753032 | FSEQ_CNVI_ID Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0F29E1C6 | FSEQ_CNVR_ID Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x03000000 | CNVI_AUX_MISC_CHIP Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0BADCAFE | CNVR_AUX_MISC_CHIP Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0BADCAFE | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0BADCAFE | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x0DE0E006 | FSEQ_PREV_CNVIO_INIT_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x3E7DA3F7 | FSEQ_WIFI_FSEQ_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0x4BCF3FE2 | FSEQ_BT_FSEQ_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: 0xAFBEB866 | FSEQ_CLASS_TP_VERSION Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: Collecting data: trigger 2 fired. Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: FW error in SYNC = CMD ADD_STA Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #0 0xffffffff80e3d4d6 at linux_dump_stack+0x26 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #1 0xffffffff842d483b at iwl_trans_pcie_send_hcmd+0x45b Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #2 0xffffffff842632c8 at iwl_trans_send_cmd+0x88 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #3 0xffffffff842b01a3 at iwl_mvm_send_cmd_status+0x53 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #4 0xffffffff842b02ba at iwl_mvm_send_cmd_pdu_status+0x5a Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #5 0xffffffff8429bf6a at iwl_mvm_sta_send_to_fw+0x37a Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #6 0xffffffff8429eb56 at iwl_mvm_add_sta+0x186 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #7 0xffffffff8427ec08 at iwl_mvm_mac_sta_state_common+0x658 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #8 0xffffffff80e37547 at lkpi_80211_mo_sta_state+0xa7 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #9 0xffffffff80e2c8da at lkpi_sta_scan_to_auth+0x55a Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #10 0xffffffff80e2ce5b at lkpi_sta_run_to_auth+0x1b Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #11 0xffffffff80e36800 at lkpi_iv_newstate+0x2d0 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #12 0xffffffff80d4c1ed at ieee80211_newstate_cb+0x2ad Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #13 0xffffffff80bf72d7 at taskqueue_run_locked+0x1c7 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #14 0xffffffff80bf8233 at taskqueue_thread_loop+0xd3 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #15 0xffffffff80b3ede7 at fork_exit+0x87 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] #16 0xffffffff810bfdae at fork_trampoline+0xe Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: lkpi_sta_scan_to_auth:1346: mo_sta_state(NONE) failed: -5 Jan 21 12:56:39 15-CURRENT-HOST kernel: [15067] iwlwifi0: lkpi_iv_newstate: error -1 during state transition 5 (RUN) -> 2 (AUTH) Jan 21 14:08:18 15-CURRENT-HOST i3lock[39544]: in _pam_exec(): pam_sm_setcr= ed: pam_get_authtok(): authentication token not available Jan 21 14:10:08 15-CURRENT-HOST syslogd: kernel boot file is /boot/kernel/kernel Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] iwlwifi0: lkpi_sta_auth_to_scan:1462: lvif 0xfffffe0143dfb000 vap 0xfffffe0143dfb010 iv_bss 0xfffffe0143e05000 lvif_bss 0 lvif_bss->ni 0 synched 0 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] panic: lkpi_sta_auth_to_sca= n: lsta 0 ni 0 lvif 0xfffffe0143dfb000 vap 0xfffffe0143dfb010 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378]=20 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] cpuid =3D 2 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] time =3D 1737486510 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] __HardenedBSD_version =3D 1= 500001 __FreeBSD_version =3D 1500029 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] version =3D FreeBSD 15.0-CURRENT-HBSD #0 : Wed Jan 1 10:44:22 UTC 2025 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378]=20=20=20=20 root@hbsd-os-build-01:/usr/obj/usr/src/amd64.amd64/sys/HARDENEDBSD Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] KDB: stack backtrace: Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] db_trace_self_wrapper() at db_trace_self_wrapper+0x36/frame 0xfffffe010671eb50 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] vpanic() at vpanic+0x13b/fr= ame 0xfffffe010671ec80 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] panic() at panic+0x43/frame 0xfffffe010671ece0 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] lkpi_sta_auth_to_scan() at lkpi_sta_auth_to_scan+0x47c/frame 0xfffffe010671ed70 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] lkpi_iv_newstate() at lkpi_iv_newstate+0x2d0/frame 0xfffffe010671ede0 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] ieee80211_newstate_cb() at ieee80211_newstate_cb+0x2ad/frame 0xfffffe010671ee30 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] taskqueue_run_locked() at taskqueue_run_locked+0x1c7/frame 0xfffffe010671eec0 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] taskqueue_thread_loop() at taskqueue_thread_loop+0xd3/frame 0xfffffe010671eef0 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] fork_exit() at fork_exit+0x87/frame 0xfffffe010671ef30 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe010671ef30 Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] --- trap 0xc, rip =3D 0x9534f5f6ba, rsp =3D 0x7cd9b152aa78, rbp =3D 0x7cd9b152aa90 --- Jan 21 14:10:08 15-CURRENT-HOST kernel: [19378] KDB: enter: panic --=20 You are receiving this mail because: You are the assignee for the bug.=