[Bug 286219] iwlwifi(4) kernel panic lkpi_sta_auth_to_scan with Intel Wireless 7260, 8086:08b1:8086:c060
Date: Wed, 11 Mar 2026 16:54:28 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286219
--- Comment #18 from commit-hook@FreeBSD.org ---
A commit in branch stable/15 references this bug:
URL:
https://cgit.FreeBSD.org/src/commit/?id=86417d5b061f7d385a09ae557504e8ef306ecbf9
commit 86417d5b061f7d385a09ae557504e8ef306ecbf9
Author: Bjoern A. Zeeb <bz@FreeBSD.org>
AuthorDate: 2026-03-08 12:48:51 +0000
Commit: Bjoern A. Zeeb <bz@FreeBSD.org>
CommitDate: 2026-03-11 16:53:24 +0000
LinuxKPI: 802.11: lkpi_sta_auth_to_scan() fail graciously on lsta == NULL
Usually after a firmware crash, we see reports of crashes in
lkpi_sta_auth_to_scan(). One of the last ones was in the PR
mentioned below.
These crashes are often attributed as the problem while the real
problem happened before.
At this point try avoid the NULL pointer and to fail graciously if
lvif->iv_bss (lsta) is no longer set. This way users have a chance
to possibly recover using netif restart wlan0 rather than dealing
with a panic.
See if this helps us to better track down the original problems
rather than the follow-up crash.
On a debug kernel the KASSERT should normally have caught that
condition as well but we see panics on page faults were the log
line was there but then the lsta->ni deref has happened, which is
after the KASSERT. I have not checked if this is a reordering problem
or if the people reporting had IEEE80211_DEBUG on but not INVARIANTS.
Sponsored by: The FreeBSD Foundation
PR: 286219 #c11
(cherry picked from commit 53c69fd933dc49f69d5603fb27ce51064ebe681e)
sys/compat/linuxkpi/common/src/linux_80211.c | 26 +++++++++++++++++++-------
1 file changed, 19 insertions(+), 7 deletions(-)
--
You are receiving this mail because:
You are the assignee for the bug.