diff options
| author | Bjoern A. Zeeb <bz@FreeBSD.org> | 2026-02-24 12:55:48 +0000 |
|---|---|---|
| committer | Bjoern A. Zeeb <bz@FreeBSD.org> | 2026-02-24 22:06:18 +0000 |
| commit | fc9369abef6b6993e79b08de832e1d49f81a17b9 (patch) | |
| tree | 1bcf66f842a31d722a45af73d83a68a2a49c7125 /contrib/unifdef/tests/crlf-d.exprc | |
| parent | 5edf24aac1d0978d37d62594f42d87c9f118622b (diff) | |
In certain cases we may tear down state of a node with 'ongoing'
BA sessions. This can trigger a firmware crash with iwlwifi as
reported in [1] when trying to remove the sta from the firmware.
0x2010303A | ADVANCED_SYSASSERT
..
0x00000000 | umac data1 (sta id=0)
..
0x0088030C | last host cmd (STA_RM)
[1] https://lists.freebsd.org/archives/freebsd-wireless/2025-November/003901.html
I hit the same problem while running regression tests after
reworking some LinuxKPI 802.11 sta state machine bits.
Add the missing calls to lkpi_sta_run_to_assoc() and lkpi_sta_run_to_init()
to make sure (through net80211) we call (*ampdu_action) with
IEEE80211_AMPDU_RX_STOP to avoid the firmware crash.
Note: this specific patch was not excessively tested. The upcoming
change to the state machine including this fix has seen more testing
but also only needed the change in one place.
The reason for putting this in upfront is to document the case well.
Reported by: Mohammad Amin (the.madamin20 gmail.com) [1]
Sponsored by: The FreeBSSD Foundation
MFC after: 3 days
Diffstat (limited to 'contrib/unifdef/tests/crlf-d.exprc')
0 files changed, 0 insertions, 0 deletions
