[Bug 300561] ieee80211_newstate_cb probably shouldn't assert on (some?) INIT state change failures
Date: Fri, 06 Nov 2026 23:34:35 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=300561
Kyle Evans <kevans@freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #277054|text/x-log |text/plain
mime type| |
--- Comment #1 from Kyle Evans <kevans@freebsd.org> ---
Created attachment 277054
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=277054&action=edit
wlandebug +scan +state context
I recreated this again, and we then hit a panic with the assertion removed when
I try to `service netif restart`:
```
panic: vap still running
[...]
#12 0xffffffff80c46319 in vpanic (fmt=<optimized out>,
ap=ap@entry=0xfffffe0185195ab0)
at /usr/src.kbsd/sys/kern/kern_shutdown.c:962
buf = "vap still running", '\000' <repeats 238 times>
__pc = 0x0
__pc = 0x0
__pc = 0x0
other_cpus = {__bits = {2047, 0 <repeats 15 times>}}
td = 0xfffff801e5eaf000
bootopt = <optimized out>
newpanic = <optimized out>
#13 0xffffffff80c46193 in panic (
fmt=0xffffffff81da5340 <cnputs_mtx> "\356\023-\201\377\377\377\377")
at /usr/src.kbsd/sys/kern/kern_shutdown.c:887
ap = {{gp_offset = 8, fp_offset = 48,
overflow_arg_area = 0xfffffe0185195ae0,
reg_save_area = 0xfffffe0185195a80}}
#14 0xffffffff80de4819 in ieee80211_vap_detach (
vap=vap@entry=0xfffff80029b8b000)
at /usr/src.kbsd/sys/net80211/ieee80211.c:777
ifp = 0xfffff80029b87c00
ic = 0xfffffe017be19008
saved_vnet = 0xfffff80001397040
i = 8
#15 0xffffffff851a7d6b in iwx_vap_delete (vap=0xfffff80029b8b000)
at /usr/src.kbsd/sys/dev/iwx/if_iwx.c:10787
ivp = 0xfffff80029b8b000
#16 0xffffffff80df7b72 in wlan_clone_destroy (ifc=<optimized out>,
ifp=0xfffffe0185195800, flags=<optimized out>)
at /usr/src.kbsd/sys/net80211/ieee80211_freebsd.c:177
vap = 0xffffffff81da5340 <cnputs_mtx>
ic = 0x12
#17 0xffffffff80da145c in if_clone_destroyif_flags (
ifc=ifc@entry=0xfffff800015bd100, ifp=ifp@entry=0xfffff80029b87c00,
flags=flags@entry=0) at /usr/src.kbsd/sys/net/if_clone.c:465
saved_vnet = 0xfffff80001397040
unit = 0
err = <optimized out>
#18 0xffffffff80da12ce in if_clone_destroyif (ifc=0xfffff800015bd100,
ifp=0xfffff80029b87c00) at /usr/src.kbsd/sys/net/if_clone.c:481
err = <optimized out>
#19 if_clone_destroy (name=name@entry=0xfffffe0185195d40 "wlan0")
at /usr/src.kbsd/sys/net/if_clone.c:431
ifp = 0xfffff80029b87c00
ifc = 0xfffff800015bd100
err = <optimized out>
```
I had a running tail -F with wlandebug +scan +state as I was trying to capture
another iwx issue (maybe related). 23:21:50 is when it starts to go off the
rails with firmware errors, and then it just goes downhill from there (with
repetition).
--
You are receiving this mail because:
You are the assignee for the bug.