[Bug 278655] net80211: psq cleanup bug

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278655

--- Comment #4 from Doug Ambrisko <ambrisko@FreeBSD.org> ---
Created attachment 250517
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=250517&action=edit
After running my "panic.sh" script several times I hit the cb run after lock is
destroyed.

The script I use to trigger the panic is
#!/bin/sh

set -x 

sync; sync; sync
sudo /bin/echo || exit 1

sudo /etc/rc.d/dhclient stop wlan0
sudo /etc/rc.d/wpa_supplicant stop wlan0
sleep 1
sudo killall -9 wpa_supplicant
sleep 2
sudo ifconfig wlan0 destroy
if kldstat | grep iwlwifi
then
        sudo devctl detach `pciconf -l | awk '/iwlwifi/ { print $1 }' | sed -e
's/:$//' -e 's/^.*@//'`
fi
sudo kldunload if_iwlwifi.ko 
sudo kldload if_iwlwifi.ko
sudo ifconfig wlan0 create wlandev iwlwifi0 wlanmode sta regdomain FCC country
US
sleep 1
sudo /etc/rc.d/wpa_supplicant restart wlan0
sleep 1
ifconfig wlan0
sleep 1
ifconfig wlan0
sleep 10

It doesn't happen every time.  I added debug printf's to trace where the call
back gets registered and run after the lock is destroyed.

I've also seen what appears to be leaking in that the init for the psq lock is
called more then the clean up.  I don't have that printf enabled in this log.

-- 
You are receiving this mail because:
You are the assignee for the bug.