Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Sep 2022 19:17:08 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 266570] iwlwifi crashes when connecting to an AP on Intel AX211
Message-ID:  <bug-266570-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D266570

            Bug ID: 266570
           Summary: iwlwifi crashes when connecting to an AP on Intel
                    AX211
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: nc@FreeBSD.org

Created attachment 236774
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D236774&action=
=3Dedit
Stacktrace

On a HP Spectre x360 16-f1013dx with an Intel AX211 Wi-Fi adapter, when I
connect to an AP (Netgear Orbi Wi-Fi 6 in my case), I get a kernel panic.

Other APs, such as a Google Pixel 6 hotspot also give me a similar issue.

A HP Spectre x360 14-ea0023dx with an Intel AX201 also had a similar issue =
with
CURRENT, but not to the same extent on 13.1.

<118>Starting wpa_supplicant.
<6>wlan0: ieee80211_new_state_locked: pending SCAN -> AUTH transition lost
<4>Invalid TXQ id
panic: lkpi_sta_auth_to_scan: lsta 0xfffff80001b65800 state not NONE: 0, ns=
tate
1 arg 1

cpuid =3D 15
time =3D 1663959560
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe011b80e=
c60
vpanic() at vpanic+0x151/frame 0xfffffe011b80ecb0
panic() at panic+0x43/frame 0xfffffe011b80ed10
lkpi_sta_auth_to_scan() at lkpi_sta_auth_to_scan+0x253/frame 0xfffffe011b80=
ed80
lkpi_iv_newstate() at lkpi_iv_newstate+0x1b3/frame 0xfffffe011b80edf0
ieee80211_newstate_cb() at ieee80211_newstate_cb+0x1f5/frame 0xfffffe011b80=
ee40
taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe011b80eec0
taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe011b80e=
ef0
fork_exit() at fork_exit+0x80/frame 0xfffffe011b80ef30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe011b80ef30
--- trap 0x68ed68ed, rip =3D 0x9ec89ec89ec89ec8, rsp =3D 0x5db25db25db25db2=
, rbp =3D
0x3ed33ed33ed33ed3 ---

Full core dump attached. I can share more if needed.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-266570-227>