Re: iwlwifi crash on connection

On Fri, 21 Nov 2025, Mohammad Amin wrote:

Hi,

> Hi, thanks for your works and good luck.
> As I posted in https://forums.freebsd.org/threads/iwlwifi-caused-a-kernel-panic.100121/, I wanted to report a crash that happened when I connect to my iPhone’s hotspot.
> I’m running FreeBSD 15.0-RC2 on my Legion 5 2022 Intel variant, which has an AX211 wireless card.
> iwlwifi0@pci0:0:20:3:    class=0x028000 rev=0x01 hdr=0x00 vendor=0x8086 device=0x51f0 subvendor=0x8086 subdevice=0x0094
>    vendor     = 'Intel Corporation'
>    device     = 'Alder Lake-P PCH CNVi WiFi'
>    class      = network
>
> Nov 20 16:06:28 localhost kernel: WARNING IS_ERR_OR_NULL(sta) failed at /usr/src/sys/contrib/dev/iwlwifi/mvm/rxmq.c:722

This is an interesting one.

It's a "remove STA" command which failed but according to the backtrace it failed
in the "mld" part of the driver ; the above WARNING is from the "mvm" part of the
driver  (Intel recently split them up into the two).

Can I ask you to go another step and open a PR on https://bugs.freebsd.org/ for this (you can just put the email into the description) as I may have to track this beyond email.

/bz

> Nov 20 16:06:28 localhost kernel: #0 0xffffffff80df3abb at linux_dump_stack+0x1b
> Nov 20 16:06:28 localhost kernel: #1 0xffffffff8472344a at iwl_trans_pcie_send_hcmd+0x43a
> Nov 20 16:06:28 localhost kernel: #2 0xffffffff847008a4 at iwl_trans_send_cmd+0x84
> Nov 20 16:06:28 localhost kernel: #3 0xffffffff8476c0e9 at iwl_mvm_send_cmd_pdu+0x49
> Nov 20 16:06:28 localhost kernel: #4 0xffffffff84742321 at iwl_mvm_mld_rm_sta+0x391
> Nov 20 16:06:28 localhost kernel: #5 0xffffffff84735fc7 at iwl_mvm_mac_sta_state_common+0xcf7
> Nov 20 16:06:28 localhost kernel: #6 0xffffffff80ded8a8 at lkpi_80211_mo_sta_state+0xa8
> Nov 20 16:06:28 localhost kernel: #7 0xffffffff80de7d43 at _lkpi_sta_assoc_to_down+0x5d3
> Nov 20 16:06:28 localhost kernel: #8 0xffffffff80ddcd5e at lkpi_sta_assoc_to_auth+0xe
> Nov 20 16:06:28 localhost kernel: #9 0xffffffff80dead7e at lkpi_iv_newstate+0x43e
> Nov 20 16:06:28 localhost kernel: #10 0xffffffff80d127e8 at ieee80211_newstate_cb+0x1f8
> Nov 20 16:06:28 localhost kernel: #11 0xffffffff80bd4a42 at taskqueue_run_locked+0x182
> Nov 20 16:06:28 localhost kernel: #12 0xffffffff80bd5c12 at taskqueue_thread_loop+0xc2
> Nov 20 16:06:28 localhost kernel: #13 0xffffffff80b274cb at fork_exit+0x7b
> Nov 20 16:06:28 localhost kernel: #14 0xffffffff81050b6e at fork_trampoline+0xe
> Nov 20 16:06:28 localhost kernel: iwlwifi0: Failed to remove station. Id=0
> Nov 20 16:06:28 localhost kernel: iwlwifi0: Failed to send MAC_CONFIG_CMD (action:2): -5
> Nov 20 16:06:28 localhost kernel: iwlwifi0: failed to update MAC 0xfffffe019666ef12M
> Nov 20 16:06:28 localhost kernel: iwlwifi0: failed to update power mode
> Nov 20 16:06:28 localhost kernel: iwlwifi0: Failed to send LINK_CONFIG_CMD (action:2): -5
> Nov 20 16:06:28 localhost kernel: iwlwifi0: Failed to send LINK_CONFIG_CMD (action:3): -5
> Nov 20 16:06:28 localhost kernel: iwlwifi0: Failed to send LINK_CONFIG_CMD (action:1): -5
> Nov 20 16:06:28 localhost kernel: iwlwifi0: PHY ctxt cmd error. ret=-5
> Nov 20 16:06:28 localhost kernel: iwlwifi0: lkpi_ic_ampdu_rx_stop: lsta 0 ni 0xfffffe0198069000 vap 0xfffffe019666e010, lsta is NULL
> Nov 20 16:06:28 localhost syslogd: last message repeated 3 times
> Nov 20 16:06:28 localhost kernel: iwlwifi0: WRT: Collecting data: ini trigger 4 fired (delay=0ms).

-- 
Bjoern A. Zeeb                                                     r15:7