From nobody Mon Dec 11 19:15:49 2023 X-Original-To: wireless@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Sps0P5rt3z53yvM for ; Mon, 11 Dec 2023 19:15:49 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Sps0P3WDpz4cnk for ; Mon, 11 Dec 2023 19:15:49 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1702322149; a=rsa-sha256; cv=none; b=ChIqrUyRqxkTOXOId+S1Dvw7RXAhYmSBKTBJPvZBGHn9/9GWF0I+9xtJP/l2kprkVr/t1Z hwO0ryTURuveihmanE4Jy95zMwy0o8yLUZePP0U+0bZWftOrDccI7cXwhByC1+k/8IsVbG 7xRnf/kHJv6W+dPTO069I1kjLvYiPh5+Nmn1gij7IYl5dfwWOGtRtktgAF798yFPryAX0p IDbyWTUq44AYYDAwDXvmGQ2BwtjunKXvGDFI2P4ZP587PxzF/yRy5IM97AN99d1P3ZiTFn nZKbCNlqt4i9iVfYCUlJLM336sIrBgz0P+e6jwRgv7lU3ViEYEpakVZrDLWhZw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1702322149; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=aXTlHZFtvh1hxglgLEOs9iSfu8dBWdA0Wh7Ki28eVbA=; b=RZVTpqsD0c5Gro1b6wBzIpeQl15MzFSkNulLtctrHwNOHvQ+69RT7fPxfsB6Zxhibf8AXJ 7hmBixmus0QLyJqfK0Ts39k1nL8DlquGfDPIQR4MyzKNe5pYX2z4qm55NRTSOc+aHQwv1a L/qC8tPWtAsm7L1R94QK7UwwnQu5w5sQP6eP6/USkkbe5WziuqsGfp+kQXaKQZo5FmSF1t yI8s7re4fqDszKbqIGvAVJAVZRbxSPPf/REDdMEcnMmeD/mrx/0U4u+F+AGHfmnOmQ0nZS 3KDEXSjy9xmRk3uMOWCMqmZ7yJWgTOOCg6dpv89nEo1On42jLFLZcejHG64qcg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Sps0P2Tv9zjrt for ; Mon, 11 Dec 2023 19:15:49 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 3BBJFnoG066954 for ; Mon, 11 Dec 2023 19:15:49 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 3BBJFnE9066953 for wireless@FreeBSD.org; Mon, 11 Dec 2023 19:15:49 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: wireless@FreeBSD.org Subject: [Bug 273985] iwlwifi: AX201: crash (kernel panic) on ifconfig wlan0 destroy Date: Mon, 11 Dec 2023 19:15:49 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.2-RELEASE X-Bugzilla-Keywords: crash, needs-qa X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: cc@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: wireless@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Discussions List-Archive: https://lists.freebsd.org/archives/freebsd-wireless List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-wireless@freebsd.org X-BeenThere: freebsd-wireless@freebsd.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D273985 Cheng Cui changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cc@FreeBSD.org --- Comment #8 from Cheng Cui --- Also hit this crash reliably. root@n1_iwl_vm:~ # uname -a FreeBSD n1_iwl_vm 15.0-CURRENT FreeBSD 15.0-CURRENT #19 main-488bc7e9a: Tue= Nov 21 11:42:00 EST 2023=20=20=20=20 root@n1_iwl_vm:/usr/obj/usr/src/amd64.amd64/sys/GENERIC amd64 root@n1_iwl_vm:~ #=20 root@n1_iwl_vm:~ # ifconfig wlan0 destroy Fatal trap 9: general protection fault while in kernel mode cpuid =3D 0; apic id =3D 00 instruction pointer =3D 0x20:0xffffffff80b2a5c8 stack pointer =3D 0x28:0xfffffe0074741a40 frame pointer =3D 0x28:0xfffffe0074741a80 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 1139 (ifconfig) rdi: deadc0dedeadc0f6 rsi: fffff8000598d740 rdx: 0000000000000000 rcx: 0000000000000865 r8: 0000000000000001 r9: 0000000000010000 rax: 0000000000000001 rbx: deadc0dedeadc10e rbp: fffffe0074741a80 r10: 0000000000000001 r11: 0000000000010000 r12: 0000000000000865 r13: deadc0dedeadc0de r14: deadc0dedeadc10e r15: ffffffff8116aaf8 trap number =3D 9 panic: general protection fault cpuid =3D 0 time =3D 1702316103 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0074741= 780 vpanic() at vpanic+0x132/frame 0xfffffe00747418b0 panic() at panic+0x43/frame 0xfffffe0074741910 trap_fatal() at trap_fatal+0x40c/frame 0xfffffe0074741970 calltrap() at calltrap+0x8/frame 0xfffffe0074741970 --- trap 0x9, rip =3D 0xffffffff80b2a5c8, rsp =3D 0xfffffe0074741a40, rbp = =3D 0xfffffe0074741a80 --- __mtx_lock_flags() at __mtx_lock_flags+0x48/frame 0xfffffe0074741a80 _ieee80211_free_node() at _ieee80211_free_node+0x34/frame 0xfffffe0074741ac0 ieee80211_node_vdetach() at ieee80211_node_vdetach+0x2b/frame 0xfffffe0074741ae0 ieee80211_vap_detach() at ieee80211_vap_detach+0x612/frame 0xfffffe0074741b= 20 lkpi_ic_vap_delete() at lkpi_ic_vap_delete+0xae/frame 0xfffffe0074741b50 wlan_clone_destroy() at wlan_clone_destroy+0x12/frame 0xfffffe0074741b60 if_clone_destroyif_flags() at if_clone_destroyif_flags+0x6a/frame 0xfffffe0074741ba0 if_clone_destroy() at if_clone_destroy+0x100/frame 0xfffffe0074741be0 ifioctl() at ifioctl+0x8a5/frame 0xfffffe0074741cd0 kern_ioctl() at kern_ioctl+0x286/frame 0xfffffe0074741d30 sys_ioctl() at sys_ioctl+0x152/frame 0xfffffe0074741e00 amd64_syscall() at amd64_syscall+0x153/frame 0xfffffe0074741f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0074741f30 --- syscall (54, FreeBSD ELF64, ioctl), rip =3D 0x3c753c0388a, rsp =3D 0x3c74f4a9a38, rbp =3D 0x3c74f4a9a70 --- KDB: enter: panic [ thread pid 1139 tid 100090 ] Stopped at kdb_enter+0x32: movq $0,0xe2ab23(%rip) db> dump Dumping 338 out of 6111 MB:..5%..15%..24%..34%..43%..53%..62%..71%..81%..95% Dump complete db> --=20 You are receiving this mail because: You are the assignee for the bug.=