Bug 236918 - Crash: in iwn_ampdu_tx_stop (or ieee80211_ht_node_cleanup)
Summary: Crash: in iwn_ampdu_tx_stop (or ieee80211_ht_node_cleanup)
Status: In Progress
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 12.0-RELEASE
Hardware: Any Any
: --- Affects Only Me
Assignee: Bjoern A. Zeeb
URL:
Keywords: IntelNetworking, crash, needs-qa
Depends on:
Blocks: 277512
  Show dependency treegraph
 
Reported: 2019-03-31 21:03 UTC by admin-freebsd-bugzilla
Modified: 2024-03-05 20:21 UTC (History)
3 users (show)

See Also:
koobs: mfc-stable12?
koobs: mfc-stable11?


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description admin-freebsd-bugzilla 2019-03-31 21:03:44 UTC
had a crash and wanted to share the dump;
maybe it's just cosmic rays.


(kgdb) bt
#0  __curthread () at ./machine/pcpu.h:230
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80b9b14b in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:446
#3  0xffffffff80b9b5c3 in vpanic (fmt=<optimized out>, ap=0xfffffe00005804e0)
    at /usr/src/sys/kern/kern_shutdown.c:872
#4  0xffffffff80b9b3b3 in panic (fmt=<unavailable>)
    at /usr/src/sys/kern/kern_shutdown.c:799
#5  0xffffffff8107496f in trap_fatal (frame=0xfffffe00005806d0, 
    eva=18643131248044) at /usr/src/sys/amd64/amd64/trap.c:929
#6  0xffffffff810749c9 in trap_pfault (frame=0xfffffe00005806d0, usermode=0)
    at /usr/src/sys/amd64/amd64/trap.c:765
#7  0xffffffff81073fee in trap (frame=0xfffffe00005806d0)
    at /usr/src/sys/amd64/amd64/trap.c:441
#8  <signal handler called>
#9  0xffffffff80645a7a in iwn_ampdu_tx_stop (ni=<optimized out>, 
    tap=0xfffffe01078683d8) at /usr/src/sys/dev/iwn/if_iwn.c:7424
#10 0xffffffff80cdc774 in ampdu_tx_stop (tap=<optimized out>)
    at /usr/src/sys/net80211/ieee80211_ht.c:2035
#11 ieee80211_ht_node_cleanup (ni=0xfffffe0107868000)
    at /usr/src/sys/net80211/ieee80211_ht.c:1190
#12 0xffffffff80cf0db2 in node_cleanup (ni=0xfffffe0107868000)
    at /usr/src/sys/net80211/ieee80211_node.c:1208
#13 0xffffffff80cf3253 in ieee80211_sta_leave (ni=0xfffffe0107868000)
    at /usr/src/sys/net80211/ieee80211_node.c:1049
#14 0xffffffff80d05726 in sta_newstate (vap=0xfffff8003dbe7000, 
    nstate=IEEE80211_S_AUTH, arg=1728)
    at /usr/src/sys/net80211/ieee80211_sta.c:373
#15 0xffffffff8064dcd3 in iwn_newstate (vap=0xfffff8003dbe7000, 
    nstate=IEEE80211_S_AUTH, arg=1728) at /usr/src/sys/dev/iwn/if_iwn.c:2948
#16 0xffffffff80cfd4b9 in ieee80211_newstate_cb (xvap=0xfffff8003dbe7000, 
    npending=<optimized out>) at /usr/src/sys/net80211/ieee80211_proto.c:2037
#17 0xffffffff80bf9cb4 in taskqueue_run_locked (queue=0xfffff80004874200)
    at /usr/src/sys/kern/subr_taskqueue.c:465
#18 0xffffffff80bfae18 in taskqueue_thread_loop (arg=<optimized out>)
    at /usr/src/sys/kern/subr_taskqueue.c:757
#19 0xffffffff80b5bf33 in fork_exit (
    callout=0xffffffff80bfad80 <taskqueue_thread_loop>, arg=0xfffffe000079d148, 
    frame=0xfffffe0000580ac0) at /usr/src/sys/kern/kern_fork.c:1057
#20 <signal handler called>




root@deathbolt:/usr/obj # kgdb /boot/kernel/kernel /var/crash/vmcore.0

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0x10f4b1372dac
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff80645a7a
stack pointer	        = 0x28:0xfffffe0000580790
frame pointer	        = 0x28:0xfffffe00005807c0
code segment		= base rx0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 0 (iwn0 net80211 taskq)
trap number		= 12
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&dev->mode_config.connection_mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:622
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
<4>WARN_ON(!mutex_is_locked(&dev->struct_mutex))
                  
<4>WARN_ON(!mutex_is_locked(&fbc->lock))WARN_ON(!mutex_is_locked(&fbc->lock))
panic: page fault
cpuid = 1
time = 1554037650
KDB: stack backtrace:
#0 0xffffffff80be7977 at kdb_backtrace+0x67
#1 0xffffffff80b9b563 at vpanic+0x1a3
#2 0xffffffff80b9b3b3 at panic+0x43
#3 0xffffffff8107496f at trap_fatal+0x35f
#4 0xffffffff810749c9 at trap_pfault+0x49
#5 0xffffffff81073fee at trap+0x29e
#6 0xffffffff8104f1d5 at calltrap+0x8
#7 0xffffffff80cdc774 at ieee80211_ht_node_cleanup+0x94
#8 0xffffffff80cf0db2 at node_cleanup+0x162
#9 0xffffffff80cf3253 at ieee80211_sta_leave+0x13
#10 0xffffffff80d05726 at sta_newstate+0x596
#11 0xffffffff8064dcd3 at iwn_newstate+0x733
#12 0xffffffff80cfd4b9 at ieee80211_newstate_cb+0x199
#13 0xffffffff80bf9cb4 at taskqueue_run_locked+0x154
#14 0xffffffff80bfae18 at taskqueue_thread_loop+0x98
#15 0xffffffff80b5bf33 at fork_exit+0x83
#16 0xffffffff810501be at fork_trampoline+0xe
Uptime: 1d2h42m59s
Dumping 3086 out of 12015 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at ./machine/pcpu.h:230
230	./machine/pcpu.h: No such file or directory.
Comment 1 admin-freebsd-bugzilla 2019-04-08 18:29:58 UTC
after a wakeup

and a service netif restart


(kgdb) bt
#0  sched_switch (td=0xfffff80010ab2000, newtd=0xfffff80006f29000, 
    flags=<optimized out>) at /usr/src/sys/kern/sched_ule.c:2112
#1  0xffffffff80ba6de1 in mi_switch (flags=<optimized out>, newtd=0x0)
    at /usr/src/sys/kern/kern_synch.c:439
#2  0xffffffff80bf5c45 in sleepq_catch_signals (wchan=0xfffff8001033b980, 
    pri=-2048) at /usr/src/sys/kern/subr_sleepqueue.c:515
#3  0xffffffff80bf578f in sleepq_wait_sig (wchan=<unavailable>, 
    pri=<unavailable>) at /usr/src/sys/kern/subr_sleepqueue.c:706
#4  0xffffffff833e124b in linux_add_to_sleepqueue (wchan=0xfffff8001033b980, 
    task=0xfffff8001033b980, wmesg=<optimized out>, timeout=0, 
    state=<optimized out>)
    at /usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c:62
#5  0xffffffff833e135b in linux_schedule_timeout (timeout=0)
    at /usr/src/sys/compat/linuxkpi/common/src/linux_schedule.c:315
#6  0xffffffff8327762f in g4x_update_wm (dev=<optimized out>)
    at /usr/src/sys/dev/drm2/i915/intel_pm.c:1400
#7  0xffffffff833dd918 in linux_kthread_fn (arg=<optimized out>)
    at /usr/src/sys/compat/linuxkpi/common/src/linux_kthread.c:156
#8  0xffffffff80b5bf33 in fork_exit (
    callout=0xffffffff833dd8d0 <linux_kthread_fn>, arg=0x0, 
    frame=0xfffffe006ea8bac0) at /usr/src/sys/kern/kern_fork.c:1057
#9  <signal handler called>
(kgdb) quit


eathbolt] - [~] - [2019-04-08 08:22:57]
└─[0] <> sudo kgdb /boot/kernel/kernel /var/crash/vmcore.last 
Passwort: 
GNU gdb (GDB) 8.2.1 [GDB v8.2.1 for FreeBSD]
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd12.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /boot/kernel/kernel...Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug...done.
done.

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address	= 0xffffffcfd237154c
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff80645a7a
stack pointer	        = 0x28:0xfffffe0000580790
frame pointer	        = 0x28:0xfffffe00005807c0
code segment		= base rx0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 0 (iwn0 net80211 taskq)
trap number		= 12
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&dev->mode_config.connection_mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:622
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
<4>WARN_ON(!mutex_is_locked(&dev->struct_mutex))
                    
<4>WARN_ON(!mutex_is_locked(&fbc->lock))WARN_ON(!mutex_is_locked(&fbc->lock))
panic: page fault
cpuid = 1
time = 1554745763
KDB: stack backtrace:
#0 0xffffffff80be7977 at kdb_backtrace+0x67
#1 0xffffffff80b9b563 at vpanic+0x1a3
#2 0xffffffff80b9b3b3 at panic+0x43
#3 0xffffffff8107496f at trap_fatal+0x35f
#4 0xffffffff810749c9 at trap_pfault+0x49
#5 0xffffffff81073fee at trap+0x29e
#6 0xffffffff8104f1d5 at calltrap+0x8
#7 0xffffffff80cdc774 at ieee80211_ht_node_cleanup+0x94
#8 0xffffffff80cf0db2 at node_cleanup+0x162
#9 0xffffffff80cf3253 at ieee80211_sta_leave+0x13
#10 0xffffffff80d05275 at sta_newstate+0xe5
#11 0xffffffff8064dcd3 at iwn_newstate+0x733
#12 0xffffffff80cfd4b9 at ieee80211_newstate_cb+0x199
#13 0xffffffff80bf9cb4 at taskqueue_run_locked+0x154
#14 0xffffffff80bfae18 at taskqueue_thread_loop+0x98
#15 0xffffffff80b5bf33 at fork_exit+0x83
#16 0xffffffff810501be at fork_trampoline+0xe
Uptime: 2d3h13m48s
Dumping 2904 out of 12015 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at ./machine/pcpu.h:230
230	./machine/pcpu.h: No such file or directory.
Comment 2 admin-freebsd-bugzilla 2019-04-12 10:53:51 UTC
root@deathbolt:~ # kgdb /boot/kernel/kernel /var/crash/vmcore.last 
GNU gdb (GDB) 8.2.1 [GDB v8.2.1 for FreeBSD]
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-portbld-freebsd12.0".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /boot/kernel/kernel...Reading symbols from /usr/lib/debug//boot/kernel/kernel.debug...done.
done.

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address	= 0xeaa18da712c
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff80645a7a
stack pointer	        = 0x28:0xfffffe0000580790
frame pointer	        = 0x28:0xfffffe00005807c0
code segment		= base rx0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 0 (iwn0 net80211 taskq)
trap number		= 12
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&crtc->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:577
WARNING !drm_modeset_is_locked(&dev->mode_config.connection_mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:622
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
WARNING !drm_modeset_is_locked(&plane->mutex) failed at /wrkdirs/usr/ports/graphics/drm-fbsd12.0-kmod/work/kms-drm-4192575/drivers/gpu/drm/drm_atomic_helper.c:821
<4>WARN_ON(!mutex_is_locked(&dev->struct_mutex))
                    
<4>WARN_ON(!mutex_is_locked(&fbc->lock))WARN_ON(!mutex_is_locked(&fbc->lock))
panic: page fault
cpuid = 2
time = 1555062663
KDB: stack backtrace:
#0 0xffffffff80be7977 at kdb_backtrace+0x67
#1 0xffffffff80b9b563 at vpanic+0x1a3
#2 0xffffffff80b9b3b3 at panic+0x43
#3 0xffffffff8107496f at trap_fatal+0x35f
#4 0xffffffff810749c9 at trap_pfault+0x49
#5 0xffffffff81073fee at trap+0x29e
#6 0xffffffff8104f1d5 at calltrap+0x8
#7 0xffffffff80cdc774 at ieee80211_ht_node_cleanup+0x94
#8 0xffffffff80cf0db2 at node_cleanup+0x162
#9 0xffffffff80cf3253 at ieee80211_sta_leave+0x13
#10 0xffffffff80d05726 at sta_newstate+0x596
#11 0xffffffff8064dcd3 at iwn_newstate+0x733
#12 0xffffffff80cfd4b9 at ieee80211_newstate_cb+0x199
#13 0xffffffff80bf9cb4 at taskqueue_run_locked+0x154
#14 0xffffffff80bfae18 at taskqueue_thread_loop+0x98
#15 0xffffffff80b5bf33 at fork_exit+0x83
#16 0xffffffff810501be at fork_trampoline+0xe
Uptime: 3d6h51m13s
Dumping 3152 out of 12015 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at ./machine/pcpu.h:230
230	./machine/pcpu.h: No such file or directory.
(kgdb) bt
#0  __curthread () at ./machine/pcpu.h:230
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:366
#2  0xffffffff80b9b14b in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:446
#3  0xffffffff80b9b5c3 in vpanic (fmt=<optimized out>, ap=0xfffffe00005804e0) at /usr/src/sys/kern/kern_shutdown.c:872
#4  0xffffffff80b9b3b3 in panic (fmt=<unavailable>) at /usr/src/sys/kern/kern_shutdown.c:799
#5  0xffffffff8107496f in trap_fatal (frame=0xfffffe00005806d0, eva=16123724198188) at /usr/src/sys/amd64/amd64/trap.c:929
#6  0xffffffff810749c9 in trap_pfault (frame=0xfffffe00005806d0, usermode=0) at /usr/src/sys/amd64/amd64/trap.c:765
#7  0xffffffff81073fee in trap (frame=0xfffffe00005806d0) at /usr/src/sys/amd64/amd64/trap.c:441
#8  <signal handler called>
#9  0xffffffff80645a7a in iwn_ampdu_tx_stop (ni=<optimized out>, tap=0xfffffe009fcf43d8) at /usr/src/sys/dev/iwn/if_iwn.c:7424
#10 0xffffffff80cdc774 in ampdu_tx_stop (tap=<optimized out>) at /usr/src/sys/net80211/ieee80211_ht.c:2035
#11 ieee80211_ht_node_cleanup (ni=0xfffffe009fcf4000) at /usr/src/sys/net80211/ieee80211_ht.c:1190
#12 0xffffffff80cf0db2 in node_cleanup (ni=0xfffffe009fcf4000) at /usr/src/sys/net80211/ieee80211_node.c:1208
#13 0xffffffff80cf3253 in ieee80211_sta_leave (ni=0xfffffe009fcf4000) at /usr/src/sys/net80211/ieee80211_node.c:1049
#14 0xffffffff80d05726 in sta_newstate (vap=0xfffff800107fb000, nstate=IEEE80211_S_AUTH, arg=1728) at /usr/src/sys/net80211/ieee80211_sta.c:373
#15 0xffffffff8064dcd3 in iwn_newstate (vap=0xfffff800107fb000, nstate=IEEE80211_S_AUTH, arg=1728) at /usr/src/sys/dev/iwn/if_iwn.c:2948
#16 0xffffffff80cfd4b9 in ieee80211_newstate_cb (xvap=0xfffff800107fb000, npending=<optimized out>) at /usr/src/sys/net80211/ieee80211_proto.c:2037
#17 0xffffffff80bf9cb4 in taskqueue_run_locked (queue=0xfffff80004866200) at /usr/src/sys/kern/subr_taskqueue.c:465
#18 0xffffffff80bfae18 in taskqueue_thread_loop (arg=<optimized out>) at /usr/src/sys/kern/subr_taskqueue.c:757
#19 0xffffffff80b5bf33 in fork_exit (callout=0xffffffff80bfad80 <taskqueue_thread_loop>, arg=0xfffffe000079d148, frame=0xfffffe0000580ac0) at /usr/src/sys/kern/kern_fork.c:1057
#20 <signal handler called>
Comment 3 Adrian Chadd freebsd_committer freebsd_triage 2019-05-25 14:59:27 UTC
oh, it's likely not cosmic rays. there's lots of races still :(

What's line 7424 in if_iwn.c ?
Comment 4 admin-freebsd-bugzilla 2019-05-26 18:37:55 UTC
    7424 >-------if (sc->txq[qid].queued != 0)¶
       1 >------->-------return;¶

/usr/src/sys/dev/iwn/if_iwn.c

haven't had crashes in a while though
Comment 5 Adrian Chadd freebsd_committer freebsd_triage 2019-05-26 19:45:01 UTC
(In reply to admin-freebsd-bugzilla from comment #4)

ok, sounds like qid is invalid. if it happens again there print qid.


-a
Comment 6 Bjoern A. Zeeb freebsd_committer freebsd_triage 2023-10-29 22:48:51 UTC
If this is still reproducible I probably know what the cause is.
But then I would wonder how anyone could use iwn with 11n really.

Given there was no reply to comment #5, can we please have an update if this is still relevant?