[Bug 290636] kernel panic in linuxkpi_ieee80211_next_txq

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=290636

            Bug ID: 290636
           Summary: kernel panic in linuxkpi_ieee80211_next_txq
           Product: Base System
           Version: 15.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: wireless
          Assignee: wireless@FreeBSD.org
          Reporter: arved@FreeBSD.org

#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff83d86ee0 in vt_drmfb_postswitch () from /boot/modules/drm.ko
#3  0xffffffff809afac5 in vt_window_switch (vw=vw@entry=0xffffffff818a37e8
<vt_conswindow>)
   at /usr/src/sys/dev/vt/vt_core.c:626
#4  0xffffffff809b0ebf in vtterm_cngrab (tm=<unavailable>,  
   tm@entry=<error reading variable: value is not available>) at
/usr/src/sys/dev/vt/vt_core.c:2059
#5  0xffffffff80b022a6 in cngrab () at /usr/src/sys/kern/kern_cons.c:407
#6  0xffffffff80b7364e in vpanic (fmt=0xffffffff811d3167 "%s",
ap=ap@entry=0xfffffe00cacd2bb0)
   at /usr/src/sys/kern/kern_shutdown.c:946
#7  0xffffffff80b73563 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#8  0xffffffff8107bf69 in trap_fatal (frame=<optimized out>, eva=<optimized
out>)
   at /usr/src/sys/amd64/amd64/trap.c:969
#9  0xffffffff8107bf69 in trap_pfault (frame=0xfffffe00cacd2c30,
usermode=false, signo=<optimized out>,  
   ucode=<optimized out>)
#10 <signal handler called>
#11 0xffffffff80de9483 in linuxkpi_ieee80211_next_txq
(hw=hw@entry=0xfffffe01217a44c0, ac=ac@entry=2 '\002')
   at /usr/src/sys/compat/linuxkpi/common/src/linux_80211.c:8652
#12 0xffffffff83e05f66 in ieee80211_next_txq (hw=0xfffffe01217a44c0, ac=2
'\002')
   at /usr/src/sys/compat/linuxkpi/common/include/net/mac80211.h:1425
#13 rtw89_core_txq_schedule (rtwdev=0xfffffe01217a4580, ac=2 '\002',
reinvoke=<optimized out>)
   at /usr/src/sys/contrib/dev/rtw89/core.c:3170
#14 rtw89_core_txq_work (w=<optimized out>) at
/usr/src/sys/contrib/dev/rtw89/core.c:3215
#15 0xffffffff80e09d44 in linux_work_fn (context=0xfffffe01217a4f70,
pending=<optimized out>)
   at /usr/src/sys/compat/linuxkpi/common/src/linux_work.c:308
#16 0xffffffff80bd6f12 in taskqueue_run_locked
(queue=queue@entry=0xfffff80001d95400)
   at /usr/src/sys/kern/subr_taskqueue.c:517
#17 0xffffffff80bd80e2 in taskqueue_thread_loop
(arg=arg@entry=0xfffff8000174b580)
   at /usr/src/sys/kern/subr_taskqueue.c:829
#18 0xffffffff80b299fb in fork_exit (callout=0xffffffff80bd8020
<taskqueue_thread_loop>,  
   arg=0xfffff8000174b580, frame=0xfffffe00cacd2f40) at
/usr/src/sys/kern/kern_fork.c:1153
#19 <signal handler called>

(kgdb) fr 11
#11 0xffffffff80de9483 in linuxkpi_ieee80211_next_txq
(hw=hw@entry=0xfffffe01217a44c0, ac=ac@entry=2 '\002')
   at /usr/src/sys/compat/linuxkpi/common/src/linux_80211.c:8652
8652            TAILQ_REMOVE(&lhw->scheduled_txqs[ac], ltxq, txq_entry);
(kgdb) p lhw
$1 = (struct lkpi_hw *) 0xfffffe01217a4240
(kgdb) p ac
$2 = 2 '\002'
(kgdb) p ltxq
$3 = (struct lkpi_txq *) 0xfffff801b5563700
(kgdb) p txq_entry
No symbol "txq_entry" in current context.
(kgdb) p lhw->scheduled_txqs[ac]
$4 = {tqh_first = 0xfffff801b5563700, tqh_last = 0x0}
(kgdb)

-- 
You are receiving this mail because:
You are the assignee for the bug.