1. Patchew
  2. linux
  3. View series

[PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"

Chris Bainbridge posted 1 patch 1 week, 5 days ago 
.../net/wireless/intel/iwlwifi/iwl-trans.c    | 22 +++++++++++++++++--
.../net/wireless/intel/iwlwifi/iwl-trans.h    |  3 +++
2 files changed, 23 insertions(+), 2 deletions(-)
[PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week, 5 days ago 
This reverts commit e769f6f27ffe41331e00b69a33aa8a34db4dd830.

The removal of STATUS_SUSPENDED (which tracks suspend/resume state)
resulted in an intermittent race condition on resume. The fault can be
reproduced by carrying out repeated suspend/resume cycles while passing
traffic through the NIC. A typical failure looks like:

[  141.093986] iwlwifi 0000:01:00.0: Error sending SCAN_CFG_CMD: time out after 2000ms.
[  141.094057] iwlwifi 0000:01:00.0: Current CMD queue read_ptr 441 write_ptr 442
[  141.094864] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[  141.094866] iwlwifi 0000:01:00.0: Transport status: 0x00000042, valid: 6
[  141.094870] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0 ty-a0-gf-a0-89.ucode
[  141.094873] iwlwifi 0000:01:00.0: 0x01000071 | ADVANCED_SYSASSERT
...
[  141.098401] iwlwifi 0000:01:00.0: iwl_mvm_check_rt_status failed, device is gone during suspend

The kernel then oops due to a null pointer dereference in
iwl_mvm_realloc_queues_after_restart().

Fixes: e769f6f27ffe ("wifi: iwlwifi: trans: remove STATUS_SUSPENDED")
Closes: https://yhbt.net/lore/linux-wireless/aTDoDiD55qlUZ0pn@debian.local/
Cc: <stable@vger.kernel.org>
Signed-off-by: Chris Bainbridge <chris.bainbridge@gmail.com>
---
 .../net/wireless/intel/iwlwifi/iwl-trans.c    | 22 +++++++++++++++++--
 .../net/wireless/intel/iwlwifi/iwl-trans.h    |  3 +++
 2 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/drivers/net/wireless/intel/iwlwifi/iwl-trans.c b/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
index cc8a84018f70..f5c4aa165c5b 100644
--- a/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
+++ b/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
@@ -306,6 +306,9 @@ int iwl_trans_send_cmd(struct iwl_trans *trans, struct iwl_host_cmd *cmd)
 		     test_bit(STATUS_RFKILL_OPMODE, &trans->status)))
 		return -ERFKILL;
 
+	if (unlikely(test_bit(STATUS_SUSPENDED, &trans->status)))
+		return -EHOSTDOWN;
+
 	if (unlikely(test_bit(STATUS_FW_ERROR, &trans->status)))
 		return -EIO;
 
@@ -406,6 +409,8 @@ int iwl_trans_start_hw(struct iwl_trans *trans)
 	might_sleep();
 
 	clear_bit(STATUS_TRANS_RESET_IN_PROGRESS, &trans->status);
+	/* opmode may not resume if it detects errors */
+	clear_bit(STATUS_SUSPENDED, &trans->status);
 
 	return iwl_trans_pcie_start_hw(trans);
 }
@@ -505,17 +510,30 @@ iwl_trans_dump_data(struct iwl_trans *trans, u32 dump_mask,
 
 int iwl_trans_d3_suspend(struct iwl_trans *trans, bool reset)
 {
+	int err;
+
 	might_sleep();
 
-	return iwl_trans_pcie_d3_suspend(trans, reset);
+	err = iwl_trans_pcie_d3_suspend(trans, reset);
+
+	if (!err)
+		set_bit(STATUS_SUSPENDED, &trans->status);
+
+	return err;
 }
 IWL_EXPORT_SYMBOL(iwl_trans_d3_suspend);
 
 int iwl_trans_d3_resume(struct iwl_trans *trans, bool reset)
 {
+	int err;
+
 	might_sleep();
 
-	return iwl_trans_pcie_d3_resume(trans, reset);
+	err = iwl_trans_pcie_d3_resume(trans, reset);
+
+	clear_bit(STATUS_SUSPENDED, &trans->status);
+
+	return err;
 }
 IWL_EXPORT_SYMBOL(iwl_trans_d3_resume);
 
diff --git a/drivers/net/wireless/intel/iwlwifi/iwl-trans.h b/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
index a552669db6e2..c4d06a323f9b 100644
--- a/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
+++ b/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
@@ -290,6 +290,8 @@ static inline void iwl_free_rxb(struct iwl_rx_cmd_buffer *r)
  *	the firmware state yet
  * @STATUS_TRANS_RESET_IN_PROGRESS: reset is still in progress, don't
  *	attempt another reset yet
+ * @STATUS_SUSPENDED: device is suspended, don't send commands that
+ *	aren't marked accordingly
  */
 enum iwl_trans_status {
 	STATUS_SYNC_HCMD_ACTIVE,
@@ -303,6 +305,7 @@ enum iwl_trans_status {
 	STATUS_IN_SW_RESET,
 	STATUS_RESET_PENDING,
 	STATUS_TRANS_RESET_IN_PROGRESS,
+	STATUS_SUSPENDED,
 };
 
 static inline int
-- 
2.47.3
RE: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Korenblit, Miriam Rachel 1 week, 5 days ago 
> -----Original Message-----
> From: Chris Bainbridge <chris.bainbridge@gmail.com>
> Sent: Monday, January 26, 2026 1:34 AM
> To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>;
> kvalo@kernel.org
> Cc: Berg, Johannes <johannes.berg@intel.com>; benjamin@sipsolutions.net;
> gustavoars@kernel.org; linux-intel-wifi@intel.com; linux-
> wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> kernel@vger.kernel.org; Chris Bainbridge <chris.bainbridge@gmail.com>;
> stable@vger.kernel.org
> Subject: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> 
> This reverts commit e769f6f27ffe41331e00b69a33aa8a34db4dd830.
> 
> The removal of STATUS_SUSPENDED (which tracks suspend/resume state)
> resulted in an intermittent race condition on resume. The fault can be
> reproduced by carrying out repeated suspend/resume cycles while passing
> traffic through the NIC. A typical failure looks like:
> 
> [  141.093986] iwlwifi 0000:01:00.0: Error sending SCAN_CFG_CMD: time out
> after 2000ms.
> [  141.094057] iwlwifi 0000:01:00.0: Current CMD queue read_ptr 441
> write_ptr 442 [  141.094864] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
> [  141.094866] iwlwifi 0000:01:00.0: Transport status: 0x00000042, valid: 6 [
> 141.094870] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0 ty-
> a0-gf-a0-89.ucode [  141.094873] iwlwifi 0000:01:00.0: 0x01000071 |
> ADVANCED_SYSASSERT ...
> [  141.098401] iwlwifi 0000:01:00.0: iwl_mvm_check_rt_status failed, device is
> gone during suspend
> 
> The kernel then oops due to a null pointer dereference in
> iwl_mvm_realloc_queues_after_restart().
> 
> Fixes: e769f6f27ffe ("wifi: iwlwifi: trans: remove STATUS_SUSPENDED")
> Closes: https://yhbt.net/lore/linux-
> wireless/aTDoDiD55qlUZ0pn@debian.local/
> Cc: <stable@vger.kernel.org>
> Signed-off-by: Chris Bainbridge <chris.bainbridge@gmail.com>
> ---
>  .../net/wireless/intel/iwlwifi/iwl-trans.c    | 22 +++++++++++++++++--
>  .../net/wireless/intel/iwlwifi/iwl-trans.h    |  3 +++
>  2 files changed, 23 insertions(+), 2 deletions(-)
> 
> diff --git a/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
> b/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
> index cc8a84018f70..f5c4aa165c5b 100644
> --- a/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
> +++ b/drivers/net/wireless/intel/iwlwifi/iwl-trans.c
> @@ -306,6 +306,9 @@ int iwl_trans_send_cmd(struct iwl_trans *trans, struct
> iwl_host_cmd *cmd)
>  		     test_bit(STATUS_RFKILL_OPMODE, &trans->status)))
>  		return -ERFKILL;
> 
> +	if (unlikely(test_bit(STATUS_SUSPENDED, &trans->status)))
> +		return -EHOSTDOWN;
> +
>  	if (unlikely(test_bit(STATUS_FW_ERROR, &trans->status)))
>  		return -EIO;
> 
> @@ -406,6 +409,8 @@ int iwl_trans_start_hw(struct iwl_trans *trans)
>  	might_sleep();
> 
>  	clear_bit(STATUS_TRANS_RESET_IN_PROGRESS, &trans->status);
> +	/* opmode may not resume if it detects errors */
> +	clear_bit(STATUS_SUSPENDED, &trans->status);
> 
>  	return iwl_trans_pcie_start_hw(trans);  } @@ -505,17 +510,30 @@
> iwl_trans_dump_data(struct iwl_trans *trans, u32 dump_mask,
> 
>  int iwl_trans_d3_suspend(struct iwl_trans *trans, bool reset)  {
> +	int err;
> +
>  	might_sleep();
> 
> -	return iwl_trans_pcie_d3_suspend(trans, reset);
> +	err = iwl_trans_pcie_d3_suspend(trans, reset);
> +
> +	if (!err)
> +		set_bit(STATUS_SUSPENDED, &trans->status);
> +
> +	return err;
>  }
>  IWL_EXPORT_SYMBOL(iwl_trans_d3_suspend);
> 
>  int iwl_trans_d3_resume(struct iwl_trans *trans, bool reset)  {
> +	int err;
> +
>  	might_sleep();
> 
> -	return iwl_trans_pcie_d3_resume(trans, reset);
> +	err = iwl_trans_pcie_d3_resume(trans, reset);
> +
> +	clear_bit(STATUS_SUSPENDED, &trans->status);
> +
> +	return err;
>  }
>  IWL_EXPORT_SYMBOL(iwl_trans_d3_resume);
> 
> diff --git a/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
> b/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
> index a552669db6e2..c4d06a323f9b 100644
> --- a/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
> +++ b/drivers/net/wireless/intel/iwlwifi/iwl-trans.h
> @@ -290,6 +290,8 @@ static inline void iwl_free_rxb(struct
> iwl_rx_cmd_buffer *r)
>   *	the firmware state yet
>   * @STATUS_TRANS_RESET_IN_PROGRESS: reset is still in progress, don't
>   *	attempt another reset yet
> + * @STATUS_SUSPENDED: device is suspended, don't send commands that
> + *	aren't marked accordingly
>   */
>  enum iwl_trans_status {
>  	STATUS_SYNC_HCMD_ACTIVE,
> @@ -303,6 +305,7 @@ enum iwl_trans_status {
>  	STATUS_IN_SW_RESET,
>  	STATUS_RESET_PENDING,
>  	STATUS_TRANS_RESET_IN_PROGRESS,
> +	STATUS_SUSPENDED,
>  };
> 
>  static inline int
> --
> 2.47.3

Hi Chris, could you please provide the full log?

Miri
Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week, 5 days ago 
On Mon, Jan 26, 2026 at 07:15:54AM +0000, Korenblit, Miriam Rachel wrote:
> 
> Hi Chris, could you please provide the full log?
> 
> Miri

Sure, for 6.18.0 see https://lore.kernel.org/linux-wireless/aTDoDiD55qlUZ0pn@debian.local/

For a more recent commit, this time with KASAN enabled:

[ 3706.202608] ACPI: EC: interrupt unblocked
[ 3706.274784] [drm] PCIE GART of 1024M enabled.
[ 3706.274793] [drm] PTB located at 0x000000F41FC00000
[ 3706.274842] amdgpu 0000:03:00.0: amdgpu: SMU is resuming...
[ 3706.276624] amdgpu 0000:03:00.0: amdgpu: dpm has been disabled
[ 3706.277785] amdgpu 0000:03:00.0: amdgpu: SMU is resumed successfully!
[ 3706.370297] [drm] DM_MST: Differing MST start on aconnector: 000000001fdf7997 [id: 116]
[ 3706.383907] nvme nvme0: 8/0/0 default/read/poll queues
[ 3706.594989] usb 1-3: reset high-speed USB device number 3 using xhci_hcd
[ 3706.935077] usb 1-1: reset high-speed USB device number 2 using xhci_hcd
[ 3707.315021] amdgpu 0000:03:00.0: amdgpu: ring gfx uses VM inv eng 0 on hub 0
[ 3707.315029] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.0 uses VM inv eng 1 on hub 0
[ 3707.315032] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.0 uses VM inv eng 4 on hub 0
[ 3707.315034] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.0 uses VM inv eng 5 on hub 0
[ 3707.315036] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.0 uses VM inv eng 6 on hub 0
[ 3707.315038] amdgpu 0000:03:00.0: amdgpu: ring comp_1.0.1 uses VM inv eng 7 on hub 0
[ 3707.315039] amdgpu 0000:03:00.0: amdgpu: ring comp_1.1.1 uses VM inv eng 8 on hub 0
[ 3707.315041] amdgpu 0000:03:00.0: amdgpu: ring comp_1.2.1 uses VM inv eng 9 on hub 0
[ 3707.315043] amdgpu 0000:03:00.0: amdgpu: ring comp_1.3.1 uses VM inv eng 10 on hub 0
[ 3707.315045] amdgpu 0000:03:00.0: amdgpu: ring kiq_0.2.1.0 uses VM inv eng 11 on hub 0
[ 3707.315047] amdgpu 0000:03:00.0: amdgpu: ring sdma0 uses VM inv eng 0 on hub 8
[ 3707.315049] amdgpu 0000:03:00.0: amdgpu: ring vcn_dec uses VM inv eng 1 on hub 8
[ 3707.315051] amdgpu 0000:03:00.0: amdgpu: ring vcn_enc0 uses VM inv eng 4 on hub 8
[ 3707.315053] amdgpu 0000:03:00.0: amdgpu: ring vcn_enc1 uses VM inv eng 5 on hub 8
[ 3707.315055] amdgpu 0000:03:00.0: amdgpu: ring jpeg_dec uses VM inv eng 6 on hub 8
[ 3707.448025] usb 1-1.5: reset high-speed USB device number 6 using xhci_hcd
[ 3707.636137] usb 1-1.3: reset high-speed USB device number 4 using xhci_hcd
[ 3707.655263] iwlwifi 0000:01:00.0: Error sending SYSTEM_STATISTICS_CMD: time out after 2000ms.
[ 3707.655322] iwlwifi 0000:01:00.0: Current CMD queue read_ptr 6126 write_ptr 6127
[ 3707.656132] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[ 3707.656135] iwlwifi 0000:01:00.0: Transport status: 0x00000042, valid: 6
[ 3707.656139] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0 ty-a0-gf-a0-89.ucode
[ 3707.656144] iwlwifi 0000:01:00.0: 0x01000071 | ADVANCED_SYSASSERT          
[ 3707.656148] iwlwifi 0000:01:00.0: 0x000002F0 | trm_hw_status0
[ 3707.656151] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1
[ 3707.656153] iwlwifi 0000:01:00.0: 0x004DAD04 | branchlink2
[ 3707.656156] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink1
[ 3707.656159] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink2
[ 3707.656161] iwlwifi 0000:01:00.0: 0x00016AD2 | data1
[ 3707.656164] iwlwifi 0000:01:00.0: 0x00000010 | data2
[ 3707.656167] iwlwifi 0000:01:00.0: 0x00000000 | data3
[ 3707.656169] iwlwifi 0000:01:00.0: 0x00000000 | beacon time
[ 3707.656172] iwlwifi 0000:01:00.0: 0xDA85A336 | tsf low
[ 3707.656175] iwlwifi 0000:01:00.0: 0x00000000 | tsf hi
[ 3707.656177] iwlwifi 0000:01:00.0: 0x00000000 | time gp1
[ 3707.656180] iwlwifi 0000:01:00.0: 0xDA872EF8 | time gp2
[ 3707.656182] iwlwifi 0000:01:00.0: 0x00000001 | uCode revision type
[ 3707.656185] iwlwifi 0000:01:00.0: 0x00000059 | uCode version major
[ 3707.656188] iwlwifi 0000:01:00.0: 0x7F71C7F4 | uCode version minor
[ 3707.656190] iwlwifi 0000:01:00.0: 0x00000000 | hw version
[ 3707.656193] iwlwifi 0000:01:00.0: 0x00000000 | board version
[ 3707.656196] iwlwifi 0000:01:00.0: 0x804AF800 | hcmd
[ 3707.656198] iwlwifi 0000:01:00.0: 0x00020000 | isr0
[ 3707.656201] iwlwifi 0000:01:00.0: 0x00000000 | isr1
[ 3707.656203] iwlwifi 0000:01:00.0: 0x48F04002 | isr2
[ 3707.656206] iwlwifi 0000:01:00.0: 0x00C3000C | isr3
[ 3707.656208] iwlwifi 0000:01:00.0: 0x00000000 | isr4
[ 3707.656211] iwlwifi 0000:01:00.0: 0x00C90103 | last cmd Id
[ 3707.656214] iwlwifi 0000:01:00.0: 0x00016AD2 | wait_event
[ 3707.656216] iwlwifi 0000:01:00.0: 0x00000000 | l2p_control
[ 3707.656219] iwlwifi 0000:01:00.0: 0x00000000 | l2p_duration
[ 3707.656221] iwlwifi 0000:01:00.0: 0x00000000 | l2p_mhvalid
[ 3707.656224] iwlwifi 0000:01:00.0: 0x00000000 | l2p_addr_match
[ 3707.656226] iwlwifi 0000:01:00.0: 0x00000018 | lmpm_pmg_sel
[ 3707.656229] iwlwifi 0000:01:00.0: 0x00000000 | timestamp
[ 3707.656231] iwlwifi 0000:01:00.0: 0x00003054 | flow_handler
[ 3707.656566] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[ 3707.656568] iwlwifi 0000:01:00.0: Transport status: 0x00000042, valid: 7
[ 3707.656571] iwlwifi 0000:01:00.0: 0x211010B8 | ADVANCED_SYSASSERT
[ 3707.656574] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1
[ 3707.656577] iwlwifi 0000:01:00.0: 0x804838BE | umac branchlink2
[ 3707.656580] iwlwifi 0000:01:00.0: 0xC00814E0 | umac interruptlink1
[ 3707.656582] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink2
[ 3707.656585] iwlwifi 0000:01:00.0: 0x00000002 | umac data1
[ 3707.656587] iwlwifi 0000:01:00.0: 0xDEADBEEF | umac data2
[ 3707.656590] iwlwifi 0000:01:00.0: 0xDEADBEEF | umac data3
[ 3707.656593] iwlwifi 0000:01:00.0: 0x00000059 | umac major
[ 3707.656595] iwlwifi 0000:01:00.0: 0x7F71C7F4 | umac minor
[ 3707.656598] iwlwifi 0000:01:00.0: 0xDA872EF3 | frame pointer
[ 3707.656600] iwlwifi 0000:01:00.0: 0xC0886C04 | stack pointer
[ 3707.656603] iwlwifi 0000:01:00.0: 0x00ED01D3 | last host cmd
[ 3707.656606] iwlwifi 0000:01:00.0: 0x00000000 | isr status reg
[ 3707.656926] iwlwifi 0000:01:00.0: IML/ROM dump:
[ 3707.656928] iwlwifi 0000:01:00.0: 0x00000B03 | IML/ROM error/state
[ 3707.657055] iwlwifi 0000:01:00.0: 0x00008E8A | IML/ROM data1
[ 3707.657184] iwlwifi 0000:01:00.0: 0x00000090 | IML/ROM WFPM_AUTH_KEY_0
[ 3707.657309] iwlwifi 0000:01:00.0: Fseq Registers:
[ 3707.657593] iwlwifi 0000:01:00.0: 0x60000000 | FSEQ_ERROR_CODE
[ 3707.657655] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_TOP_INIT_VERSION
[ 3707.657717] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_CNVIO_INIT_VERSION
[ 3707.657780] iwlwifi 0000:01:00.0: 0x0000A652 | FSEQ_OTP_VERSION
[ 3707.657842] iwlwifi 0000:01:00.0: 0x00000002 | FSEQ_TOP_CONTENT_VERSION
[ 3707.657903] iwlwifi 0000:01:00.0: 0x4552414E | FSEQ_ALIVE_TOKEN
[ 3707.657965] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVI_ID
[ 3707.658027] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVR_ID
[ 3707.658089] iwlwifi 0000:01:00.0: 0x00400410 | CNVI_AUX_MISC_CHIP
[ 3707.658155] iwlwifi 0000:01:00.0: 0x00400410 | CNVR_AUX_MISC_CHIP
[ 3707.658219] iwlwifi 0000:01:00.0: 0x00009061 | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
[ 3707.658283] iwlwifi 0000:01:00.0: 0x00000061 | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
[ 3707.658345] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_PREV_CNVIO_INIT_VERSION
[ 3707.658406] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_WIFI_FSEQ_VERSION
[ 3707.658468] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_BT_FSEQ_VERSION
[ 3707.658529] iwlwifi 0000:01:00.0: 0x000000E6 | FSEQ_CLASS_TP_VERSION
[ 3707.658894] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0xc0080040
[ 3707.658956] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd0
[ 3707.660021] iwlwifi 0000:01:00.0: iwl_mvm_check_rt_status failed, device is gone during suspend
[ 3707.660495] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[ 3707.660498] iwlwifi 0000:01:00.0: Transport status: 0x00000642, valid: 6
[ 3707.660501] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0 ty-a0-gf-a0-89.ucode
[ 3707.660504] iwlwifi 0000:01:00.0: 0x01000071 | ADVANCED_SYSASSERT          
[ 3707.660507] iwlwifi 0000:01:00.0: 0x000002F0 | trm_hw_status0
[ 3707.660510] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1
[ 3707.660512] iwlwifi 0000:01:00.0: 0x004DAD04 | branchlink2
[ 3707.660515] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink1
[ 3707.660518] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink2
[ 3707.660521] iwlwifi 0000:01:00.0: 0x00016AD2 | data1
[ 3707.660523] iwlwifi 0000:01:00.0: 0x00000010 | data2
[ 3707.660526] iwlwifi 0000:01:00.0: 0x00000000 | data3
[ 3707.660529] iwlwifi 0000:01:00.0: 0x00000000 | beacon time
[ 3707.660531] iwlwifi 0000:01:00.0: 0xDA85A336 | tsf low
[ 3707.660534] iwlwifi 0000:01:00.0: 0x00000000 | tsf hi
[ 3707.660537] iwlwifi 0000:01:00.0: 0x00000000 | time gp1
[ 3707.660539] iwlwifi 0000:01:00.0: 0xDA872EF8 | time gp2
[ 3707.660542] iwlwifi 0000:01:00.0: 0x00000001 | uCode revision type
[ 3707.660545] iwlwifi 0000:01:00.0: 0x00000059 | uCode version major
[ 3707.660547] iwlwifi 0000:01:00.0: 0x7F71C7F4 | uCode version minor
[ 3707.660550] iwlwifi 0000:01:00.0: 0x00000000 | hw version
[ 3707.660553] iwlwifi 0000:01:00.0: 0x00000000 | board version
[ 3707.660555] iwlwifi 0000:01:00.0: 0x804AF800 | hcmd
[ 3707.660558] iwlwifi 0000:01:00.0: 0x00020000 | isr0
[ 3707.660561] iwlwifi 0000:01:00.0: 0x00000000 | isr1
[ 3707.660563] iwlwifi 0000:01:00.0: 0x48F04002 | isr2
[ 3707.660566] iwlwifi 0000:01:00.0: 0x00C3000C | isr3
[ 3707.660568] iwlwifi 0000:01:00.0: 0x00000000 | isr4
[ 3707.660571] iwlwifi 0000:01:00.0: 0x00C90103 | last cmd Id
[ 3707.660574] iwlwifi 0000:01:00.0: 0x00016AD2 | wait_event
[ 3707.660576] iwlwifi 0000:01:00.0: 0x00000000 | l2p_control
[ 3707.660579] iwlwifi 0000:01:00.0: 0x00000000 | l2p_duration
[ 3707.660581] iwlwifi 0000:01:00.0: 0x00000000 | l2p_mhvalid
[ 3707.660584] iwlwifi 0000:01:00.0: 0x00000000 | l2p_addr_match
[ 3707.660587] iwlwifi 0000:01:00.0: 0x00000018 | lmpm_pmg_sel
[ 3707.660589] iwlwifi 0000:01:00.0: 0x00000000 | timestamp
[ 3707.660592] iwlwifi 0000:01:00.0: 0x00003054 | flow_handler
[ 3707.660931] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[ 3707.660934] iwlwifi 0000:01:00.0: Transport status: 0x00000642, valid: 7
[ 3707.660937] iwlwifi 0000:01:00.0: 0x211010B8 | ADVANCED_SYSASSERT
[ 3707.660940] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1
[ 3707.660943] iwlwifi 0000:01:00.0: 0x804838BE | umac branchlink2
[ 3707.660945] iwlwifi 0000:01:00.0: 0xC00814E0 | umac interruptlink1
[ 3707.660948] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink2
[ 3707.660951] iwlwifi 0000:01:00.0: 0x00000002 | umac data1
[ 3707.660953] iwlwifi 0000:01:00.0: 0xDEADBEEF | umac data2
[ 3707.660956] iwlwifi 0000:01:00.0: 0xDEADBEEF | umac data3
[ 3707.660959] iwlwifi 0000:01:00.0: 0x00000059 | umac major
[ 3707.660961] iwlwifi 0000:01:00.0: 0x7F71C7F4 | umac minor
[ 3707.660964] iwlwifi 0000:01:00.0: 0xDA872EF3 | frame pointer
[ 3707.660967] iwlwifi 0000:01:00.0: 0xC0886C04 | stack pointer
[ 3707.660970] iwlwifi 0000:01:00.0: 0x00ED01D3 | last host cmd
[ 3707.660972] iwlwifi 0000:01:00.0: 0x00000000 | isr status reg
[ 3707.661290] iwlwifi 0000:01:00.0: IML/ROM dump:
[ 3707.661293] iwlwifi 0000:01:00.0: 0x00000B03 | IML/ROM error/state
[ 3707.661418] iwlwifi 0000:01:00.0: 0x00008E8A | IML/ROM data1
[ 3707.661546] iwlwifi 0000:01:00.0: 0x00000090 | IML/ROM WFPM_AUTH_KEY_0
[ 3707.661669] iwlwifi 0000:01:00.0: Fseq Registers:
[ 3707.661905] iwlwifi 0000:01:00.0: 0x60000000 | FSEQ_ERROR_CODE
[ 3707.661967] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_TOP_INIT_VERSION
[ 3707.662029] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_CNVIO_INIT_VERSION
[ 3707.662091] iwlwifi 0000:01:00.0: 0x0000A652 | FSEQ_OTP_VERSION
[ 3707.662153] iwlwifi 0000:01:00.0: 0x00000002 | FSEQ_TOP_CONTENT_VERSION
[ 3707.662214] iwlwifi 0000:01:00.0: 0x4552414E | FSEQ_ALIVE_TOKEN
[ 3707.662276] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVI_ID
[ 3707.662338] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVR_ID
[ 3707.662401] iwlwifi 0000:01:00.0: 0x00400410 | CNVI_AUX_MISC_CHIP
[ 3707.662466] iwlwifi 0000:01:00.0: 0x00400410 | CNVR_AUX_MISC_CHIP
[ 3707.662541] iwlwifi 0000:01:00.0: 0x00009061 | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
[ 3707.662770] iwlwifi 0000:01:00.0: 0x00000061 | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
[ 3707.662832] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_PREV_CNVIO_INIT_VERSION
[ 3707.662893] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_WIFI_FSEQ_VERSION
[ 3707.662956] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_BT_FSEQ_VERSION
[ 3707.663017] iwlwifi 0000:01:00.0: 0x000000E6 | FSEQ_CLASS_TP_VERSION
[ 3707.663203] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0xc0080040
[ 3707.663267] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd0
[ 3707.663331] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 4 fired (delay=0ms).
[ 3708.074557] usb 1-1.3.5: reset high-speed USB device number 10 using xhci_hcd
[ 3708.225056] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 4 fired (delay=0ms).
[ 3708.270765] usb 1-1.3.4: reset high-speed USB device number 8 using xhci_hcd
[ 3708.801001] usb 1-1.3.2: reset high-speed USB device number 7 using xhci_hcd
[ 3709.034210] iwlwifi 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x20
[ 3709.034301] iwlwifi 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x1f
[ 3709.034374] iwlwifi 0000:01:00.0: WFPM_AUTH_KEY_0: 0x90
[ 3709.034454] iwlwifi 0000:01:00.0: CNVI_SCU_SEQ_DATA_DW9: 0x0
[ 3709.257815] usb 1-1.3.2.1: reset full-speed USB device number 9 using xhci_hcd
[ 3709.447487] usb 1-1.3.2.3: reset full-speed USB device number 11 using xhci_hcd
[ 3709.635731] usb 1-1.3.2.4: reset high-speed USB device number 12 using xhci_hcd
[ 3710.026286] usb 1-1.3.2.3.1: reset low-speed USB device number 13 using xhci_hcd
[ 3710.566575] usb 1-1.3.2.3.4: reset low-speed USB device number 14 using xhci_hcd
[ 3710.931672] OOM killer enabled.
[ 3710.931678] Restarting tasks: Starting
[ 3710.932001] usb 1-4: USB disconnect, device number 15
[ 3710.938201] Restarting tasks: Done
[ 3710.938271] efivarfs: resyncing variable state
[ 3710.957965] efivarfs: finished resyncing variable state
[ 3710.958074] random: crng reseeded on system resumption
[ 3711.059848] PM: suspend exit
[ 3711.094289] usb 1-4: new full-speed USB device number 16 using xhci_hcd
[ 3711.107258] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN
[ 3711.107285] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 3711.107297] CPU: 1 UID: 0 PID: 1560 Comm: wpa_supplicant Not tainted 6.19.0-rc6-00339-g62085877ae65 #373 PREEMPT(voluntary) 
[ 3711.107307] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 3711.107314] RIP: 0010:iwl_mvm_get_wd_timeout+0x10a/0x180 [iwlmvm]
[ 3711.107379] Code: df 48 c1 ea 03 80 3c 02 00 75 6d 49 8b 85 30 01 00 00 48 0f ba e0 26 73 27 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 21 31 c0 83 7d 00 03 44 0f 44 e0
[ 3711.107388] RSP: 0018:ffff888128caeb68 EFLAGS: 00010256
[ 3711.107399] RAX: dffffc0000000000 RBX: ffff88812864c140 RCX: ffffffffc56a2bf4
[ 3711.107404] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812864c140
[ 3711.107410] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10250c9828
[ 3711.107414] R10: ffff88812864c147 R11: 0000000000000002 R12: 0000000000002710
[ 3711.107418] R13: ffff88812864c010 R14: dffffc0000000000 R15: ffff888136ffb0e8
[ 3711.107423] FS:  00007f76a0ff9880(0000) GS:ffff8883e7d30000(0000) knlGS:0000000000000000
[ 3711.107430] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3711.107434] CR2: 0000357c0c75f000 CR3: 00000001215c2000 CR4: 0000000000750ef0
[ 3711.107440] PKRU: 55555554
[ 3711.107445] Call Trace:
[ 3711.107458]  <TASK>
[ 3711.107466]  iwl_mvm_realloc_queues_after_restart+0x96/0x5a0 [iwlmvm]
[ 3711.107499]  ? kasan_save_stack+0x3b/0x50
[ 3711.107521]  ? kasan_save_stack+0x2c/0x50
[ 3711.107526]  ? kasan_save_track+0x10/0x30
[ 3711.107534]  ? sta_info_insert_rcu+0x6fc/0x22e0 [mac80211]
[ 3711.107688]  ? iwl_mvm_sta_alloc_queue_tvqm.isra.0+0x2f0/0x2f0 [iwlmvm]
[ 3711.107720]  ? genl_family_rcv_msg_doit+0x1dd/0x2b0
[ 3711.107735]  ? lock_is_held_type+0xd5/0x130
[ 3711.107751]  iwl_mvm_mld_add_sta+0x499/0xf60 [iwlmvm]
[ 3711.107781]  iwl_mvm_mac_sta_state_common+0x390/0x2590 [iwlmvm]
[ 3711.107814]  drv_sta_state+0x288/0x16b0 [mac80211]
[ 3711.107934]  sta_info_insert_rcu+0x11e5/0x22e0 [mac80211]
[ 3711.108025]  ? drv_link_info_changed+0x3ea/0x6c0 [mac80211]
[ 3711.108113]  sta_info_insert+0xb/0x70 [mac80211]
[ 3711.108197]  ieee80211_prep_connection+0xc44/0x1300 [mac80211]
[ 3711.108294]  ieee80211_mgd_auth+0xa28/0x1530 [mac80211]
[ 3711.108383]  ? ieee80211_mlme_notify_scan_completed+0x430/0x430 [mac80211]
[ 3711.108466]  ? __local_bh_enable_ip+0xab/0x130
[ 3711.108479]  ? rcu_is_watching+0x11/0xb0
[ 3711.108494]  ? __cfg80211_get_bss+0x687/0xcf0 [cfg80211]
[ 3711.108646]  ? lock_is_held_type+0xd5/0x130
[ 3711.108662]  cfg80211_mlme_auth+0x457/0x8e0 [cfg80211]
[ 3711.108751]  nl80211_authenticate+0xa25/0x1050 [cfg80211]
[ 3711.108836]  ? nl80211_parse_key+0xe80/0xe80 [cfg80211]
[ 3711.108923]  ? nl80211_pre_doit+0x50a/0x7a0 [cfg80211]
[ 3711.109000]  genl_family_rcv_msg_doit+0x1dd/0x2b0
[ 3711.109017]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x230/0x230
[ 3711.109025]  ? genl_get_cmd+0x339/0x740
[ 3711.109035]  ? apparmor_capable+0xf0/0x2e0
[ 3711.109047]  ? security_capable+0x7b/0x150
[ 3711.109057]  genl_rcv_msg+0x428/0x6f0
[ 3711.109064]  ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0
[ 3711.109072]  ? nl80211_join_mesh+0x1060/0x1060 [cfg80211]
[ 3711.109152]  ? nl80211_parse_key+0xe80/0xe80 [cfg80211]
[ 3711.109229]  ? nlmsg_trim+0x60/0x60 [cfg80211]
[ 3711.109308]  ? __lock_acquire+0x459/0x2170
[ 3711.109319]  netlink_rcv_skb+0x123/0x380
[ 3711.109328]  ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0
[ 3711.109335]  ? lock_acquire+0x178/0x2f0
[ 3711.109343]  ? netlink_ack+0xd80/0xd80
[ 3711.109353]  ? netlink_deliver_tap+0xcb/0xa70
[ 3711.109360]  ? netlink_deliver_tap+0x14c/0xa70
[ 3711.109368]  genl_rcv+0x24/0x40
[ 3711.109375]  netlink_unicast+0x5bf/0x970
[ 3711.109382]  ? netlink_attachskb+0x940/0x940
[ 3711.109391]  ? __check_object_size+0x3bc/0x630
[ 3711.109403]  netlink_sendmsg+0x754/0xc10
[ 3711.109412]  ? netlink_unicast+0x970/0x970
[ 3711.109420]  ? find_held_lock+0x2b/0x80
[ 3711.109428]  ? netlink_unicast+0x970/0x970
[ 3711.109435]  __sock_sendmsg+0xc1/0x150
[ 3711.109447]  ____sys_sendmsg+0x617/0x900
[ 3711.109453]  ? copy_msghdr_from_user+0x26f/0x430
[ 3711.109460]  ? kernel_sendmsg+0x30/0x30
[ 3711.109465]  ? move_addr_to_kernel+0xf0/0xf0
[ 3711.109472]  ? lock_acquire+0x178/0x2f0
[ 3711.109481]  ? __lock_acquire+0x459/0x2170
[ 3711.109488]  ? lock_acquire+0x178/0x2f0
[ 3711.109494]  ___sys_sendmsg+0xfc/0x180
[ 3711.109501]  ? copy_msghdr_from_user+0x430/0x430
[ 3711.109506]  ? lock_acquire+0x178/0x2f0
[ 3711.109516]  ? _copy_from_user+0x3e/0x90
[ 3711.109533]  __sys_sendmsg+0x120/0x1b0
[ 3711.109541]  ? __sys_sendmsg_sock+0x20/0x20
[ 3711.109551]  ? lock_release+0x17b/0x2a0
[ 3711.109560]  do_syscall_64+0x95/0x830
[ 3711.109571]  ? rcu_is_watching+0x11/0xb0
[ 3711.109580]  ? kfree+0x2d2/0x5c0
[ 3711.109588]  ? do_syscall_64+0x1dc/0x830
[ 3711.109596]  ? do_sock_setsockopt+0x1be/0x3a0
[ 3711.109603]  ? do_sock_setsockopt+0x1be/0x3a0
[ 3711.109610]  ? move_addr_to_user+0x140/0x140
[ 3711.109617]  ? entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 3711.109624]  ? lockdep_hardirqs_on+0x78/0x100
[ 3711.109635]  ? __sys_setsockopt+0x141/0x1f0
[ 3711.109644]  ? entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 3711.109649]  ? lockdep_hardirqs_on+0x78/0x100
[ 3711.109656]  ? do_syscall_64+0x1dc/0x830
[ 3711.109662]  ? entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 3711.109668]  ? lockdep_hardirqs_on+0x78/0x100
[ 3711.109675]  ? do_syscall_64+0x1dc/0x830
[ 3711.109680]  ? lockdep_hardirqs_on+0x78/0x100
[ 3711.109686]  ? do_syscall_64+0x1dc/0x830
[ 3711.109692]  ? do_syscall_64+0x1dc/0x830
[ 3711.109698]  ? lockdep_hardirqs_on+0x78/0x100
[ 3711.109704]  ? do_syscall_64+0x1dc/0x830
[ 3711.109709]  ? irqentry_exit+0xec/0x670
[ 3711.109718]  entry_SYSCALL_64_after_hwframe+0x4b/0x53
[ 3711.109723] RIP: 0033:0x7f76a129a687
[ 3711.109735] Code: 48 89 fa 4c 89 df e8 58 b3 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 3711.109742] RSP: 002b:00007ffd261d3450 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[ 3711.109751] RAX: ffffffffffffffda RBX: 00007f76a0ff9880 RCX: 00007f76a129a687
[ 3711.109756] RDX: 0000000000000000 RSI: 00007ffd261d34d0 RDI: 0000000000000006
[ 3711.109761] RBP: 000056466bf8abc0 R08: 0000000000000000 R09: 0000000000000000
[ 3711.109766] R10: 0000000000000000 R11: 0000000000000202 R12: 000056466bed6140
[ 3711.109770] R13: 00007ffd261d34d0 R14: 0000000000000000 R15: 00007ffd261d35b4
[ 3711.109779]  </TASK>
[ 3711.109784] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat x_tables nf_tables br_netfilter bridge stp llc ccm overlay qrtr rfcomm cmac algif_hash algif_skcipher af_alg bnep binfmt_misc ext4 mbcache jbd2 nls_ascii nls_cp437 vfat fat iwlmvm snd_hda_codec_generic snd_hda_codec_hdmi amd_atl mac80211 intel_rapl_msr snd_acp3x_pdm_dma intel_rapl_common snd_acp3x_rn snd_soc_dmic snd_hda_intel snd_usb_audio snd_soc_core snd_hda_codec snd_usbmidi_lib libarc4 snd_intel_dspcfg uvcvideo kvm_amd snd_compress snd_hwdep snd_rawmidi btusb videobuf2_vmalloc btrtl videobuf2_memops snd_seq_device snd_pci_acp6x snd_hda_core kvm btintel uvc snd_pci_acp5x iwlwifi btbcm videobuf2_v4l2 snd_pcm irqbypass btmtk videodev snd_rn_pci_acp3x bluetooth snd_timer rapl snd_acp_config ecdh_generic cfg80211 pcspkr snd wmi_bmof ecc videobuf2_common snd_soc_acpi ee1004 k10temp snd_pci_acp3x sg mc
[ 3711.110032]  rfkill ccp soundcore battery ac button amd_pmc acpi_tad joydev evdev msr parport_pc ppdev lp parport fuse nvme_fabrics efi_pstore configfs nfnetlink efivarfs autofs4 crc32c_cryptoapi btrfs blake2b libblake2b xor raid6_pq dm_crypt hid_microsoft ff_memless hid_cmedia r8153_ecm cdc_ether usbnet dm_mod r8152 mii libphy mdio_bus sd_mod uas usb_storage scsi_mod usbhid scsi_common amdgpu drm_client_lib i2c_algo_bit drm_ttm_helper ttm drm_exec drm_suballoc_helper drm_buddy drm_panel_backlight_quirks gpu_sched amdxcp hid_multitouch drm_display_helper ucsi_acpi hid_generic typec_ucsi drm_kms_helper xhci_pci roles cec xhci_hcd sp5100_tco i2c_hid_acpi nvme ghash_clmulni_intel typec rc_core serio_raw amd_sfh watchdog i2c_hid usbcore nvme_core i2c_piix4 crc16 video thunderbolt i2c_smbus hid fan usb_common wmi drm aesni_intel
[ 3711.110300] ---[ end trace 0000000000000000 ]---
[ 3711.312579] usb 1-4: New USB device found, idVendor=04f3, idProduct=0c00, bcdDevice= 2.83
[ 3711.312602] usb 1-4: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 3711.312607] usb 1-4: Product: ELAN:ARM-M4
[ 3711.312613] usb 1-4: Manufacturer: ELAN
[ 3711.422307] RIP: 0010:iwl_mvm_get_wd_timeout+0x10a/0x180 [iwlmvm]
[ 3711.422432] Code: df 48 c1 ea 03 80 3c 02 00 75 6d 49 8b 85 30 01 00 00 48 0f ba e0 26 73 27 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 21 31 c0 83 7d 00 03 44 0f 44 e0
[ 3711.422441] RSP: 0018:ffff888128caeb68 EFLAGS: 00010256
[ 3711.422454] RAX: dffffc0000000000 RBX: ffff88812864c140 RCX: ffffffffc56a2bf4
[ 3711.422459] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812864c140
[ 3711.422464] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10250c9828
[ 3711.422469] R10: ffff88812864c147 R11: 0000000000000002 R12: 0000000000002710
[ 3711.422473] R13: ffff88812864c010 R14: dffffc0000000000 R15: ffff888136ffb0e8
[ 3711.422478] FS:  00007f76a0ff9880(0000) GS:ffff8883e7d30000(0000) knlGS:0000000000000000
[ 3711.422485] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3711.422490] CR2: 0000357c0c75f000 CR3: 00000001215c2000 CR4: 0000000000750ef0
[ 3711.422497] PKRU: 55555554
[ 3711.592217] ==================================================================
[ 3711.592242] BUG: KASAN: slab-use-after-free in mutex_can_spin_on_owner+0x197/0x1b0
[ 3711.592264] Read of size 4 at addr ffff888133300034 by task kworker/3:2/425817

[ 3711.592283] CPU: 3 UID: 0 PID: 425817 Comm: kworker/3:2 Tainted: G      D             6.19.0-rc6-00339-g62085877ae65 #373 PREEMPT(voluntary) 
[ 3711.592291] Tainted: [D]=DIE
[ 3711.592293] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[ 3711.592298] Workqueue: events iwl_mvm_tcm_work [iwlmvm]
[ 3711.592348] Call Trace:
[ 3711.592351]  <TASK>
[ 3711.592354]  dump_stack_lvl+0x6a/0x90
[ 3711.592364]  print_report+0x174/0x4f2
[ 3711.592371]  ? __virt_addr_valid+0x208/0x420
[ 3711.592380]  ? mutex_can_spin_on_owner+0x197/0x1b0
[ 3711.592385]  kasan_report+0xdb/0x180
[ 3711.592394]  ? mutex_can_spin_on_owner+0x197/0x1b0
[ 3711.592402]  mutex_can_spin_on_owner+0x197/0x1b0
[ 3711.592407]  __mutex_lock+0x32c/0x2150
[ 3711.592415]  ? psi_avgs_work+0x9c/0x200
[ 3711.592422]  ? iwl_mvm_recalc_tcm+0xa14/0x1990 [iwlmvm]
[ 3711.592445]  ? collect_percpu_times+0x554/0x960
[ 3711.592452]  ? mutex_lock_io_nested+0x1cc0/0x1cc0
[ 3711.592457]  ? collect_percpu_times+0x135/0x960
[ 3711.592466]  ? iwl_mvm_recalc_tcm+0x1ab/0x1990 [iwlmvm]
[ 3711.592490]  ? rcu_is_watching+0x11/0xb0
[ 3711.592498]  ? lock_release+0x211/0x2a0
[ 3711.592506]  ? iwl_mvm_recalc_tcm+0xa14/0x1990 [iwlmvm]
[ 3711.592527]  iwl_mvm_recalc_tcm+0xa14/0x1990 [iwlmvm]
[ 3711.592554]  ? update_load_avg+0x1e6/0x2020
[ 3711.592560]  ? sched_clock+0xc/0x20
[ 3711.592565]  ? sched_clock_cpu+0x68/0x530
[ 3711.592571]  ? iwl_mvm_tcm_load_percentage+0x20/0x20 [iwlmvm]
[ 3711.592593]  ? rcu_is_watching+0x11/0xb0
[ 3711.592598]  ? lock_acquire+0x2aa/0x2f0
[ 3711.592602]  ? rcu_is_watching+0x11/0xb0
[ 3711.592607]  ? _raw_spin_unlock_irq+0x24/0x50
[ 3711.592615]  process_one_work+0x849/0x1420
[ 3711.592624]  ? pwq_dec_nr_in_flight+0xe00/0xe00
[ 3711.592632]  ? assign_work+0x168/0x240
[ 3711.592638]  worker_thread+0x5ef/0xfd0
[ 3711.592646]  ? process_one_work+0x1420/0x1420
[ 3711.592650]  kthread+0x3ad/0x760
[ 3711.592655]  ? kthread_is_per_cpu+0xb0/0xb0
[ 3711.592659]  ? ret_from_fork+0x71/0x800
[ 3711.592663]  ? ret_from_fork+0x71/0x800
[ 3711.592668]  ? _raw_spin_unlock_irq+0x24/0x50
[ 3711.592673]  ? kthread_is_per_cpu+0xb0/0xb0
[ 3711.592678]  ret_from_fork+0x54a/0x800
[ 3711.592682]  ? exit_thread+0x70/0x70
[ 3711.592687]  ? __switch_to+0x36f/0xd60
[ 3711.592693]  ? kthread_is_per_cpu+0xb0/0xb0
[ 3711.592698]  ret_from_fork_asm+0x11/0x20
[ 3711.592708]  </TASK>

[ 3711.592789] Allocated by task 1:
[ 3711.592796]  kasan_save_stack+0x2c/0x50
[ 3711.592804]  kasan_save_track+0x10/0x30
[ 3711.592810]  __kasan_slab_alloc+0x62/0x70
[ 3711.592817]  kmem_cache_alloc_node_noprof+0x249/0x730
[ 3711.592825]  copy_process+0x36f/0x65f0
[ 3711.592832]  kernel_clone+0xca/0x6d0
[ 3711.592839]  __do_sys_clone3+0x168/0x1b0
[ 3711.592846]  do_syscall_64+0x95/0x830
[ 3711.592853]  entry_SYSCALL_64_after_hwframe+0x4b/0x53

[ 3711.592863] Freed by task 0:
[ 3711.592868]  kasan_save_stack+0x2c/0x50
[ 3711.592875]  kasan_save_track+0x10/0x30
[ 3711.592882]  kasan_save_free_info+0x37/0x50
[ 3711.592889]  __kasan_slab_free+0x3b/0x60
[ 3711.592895]  kmem_cache_free+0x187/0x630
[ 3711.592901]  rcu_do_batch+0x37a/0xd90
[ 3711.592908]  rcu_core+0x6e1/0xaa0
[ 3711.592914]  handle_softirqs+0x1e0/0x780
[ 3711.592921]  __irq_exit_rcu+0xff/0x200
[ 3711.592928]  irq_exit_rcu+0xa/0x20
[ 3711.592934]  sysvec_apic_timer_interrupt+0x89/0xb0
[ 3711.592941]  asm_sysvec_apic_timer_interrupt+0x16/0x20

[ 3711.592952] Last potentially related work creation:
[ 3711.592957]  kasan_save_stack+0x2c/0x50
[ 3711.592963]  kasan_record_aux_stack+0x88/0x90
[ 3711.592970]  __call_rcu_common.constprop.0+0xc9/0x1090
[ 3711.592977]  rcu_do_batch+0x37a/0xd90
[ 3711.592983]  rcu_core+0x6e1/0xaa0
[ 3711.592989]  handle_softirqs+0x1e0/0x780
[ 3711.592996]  run_ksoftirqd+0x37/0x60
[ 3711.593002]  smpboot_thread_fn+0x2f7/0x990
[ 3711.593010]  kthread+0x3ad/0x760
[ 3711.593015]  ret_from_fork+0x54a/0x800
[ 3711.593021]  ret_from_fork_asm+0x11/0x20

[ 3711.593031] Second to last potentially related work creation:
[ 3711.593035]  kasan_save_stack+0x2c/0x50
[ 3711.593041]  kasan_record_aux_stack+0x88/0x90
[ 3711.593048]  __call_rcu_common.constprop.0+0xc9/0x1090
[ 3711.593054]  release_task+0xccc/0x1800
[ 3711.593061]  wait_consider_task+0x10e8/0x3680
[ 3711.593067]  __do_wait+0x603/0x740
[ 3711.593074]  do_wait+0x187/0x400
[ 3711.593080]  kernel_waitid+0xdc/0x110
[ 3711.593086]  __do_sys_waitid+0x18c/0x1b0
[ 3711.593093]  do_syscall_64+0x95/0x830
[ 3711.593099]  entry_SYSCALL_64_after_hwframe+0x4b/0x53

[ 3711.593109] The buggy address belongs to the object at ffff888133300000
                which belongs to the cache task_struct of size 9304
[ 3711.593116] The buggy address is located 52 bytes inside of
                freed 9304-byte region [ffff888133300000, ffff888133302458)

[ 3711.593127] The buggy address belongs to the physical page:
[ 3711.593132] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133300
[ 3711.593139] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 3711.593145] memcg:ffff888181817701
[ 3711.593149] flags: 0x17ffffc0000040(head|node=0|zone=2|lastcpupid=0x1fffff)
[ 3711.593159] page_type: f5(slab)
[ 3711.593166] raw: 0017ffffc0000040 ffff8881008b6b40 dead000000000100 dead000000000122
[ 3711.593173] raw: 0000000000000000 0000000000030003 00000000f5000000 ffff888181817701
[ 3711.593179] head: 0017ffffc0000040 ffff8881008b6b40 dead000000000100 dead000000000122
[ 3711.593185] head: 0000000000000000 0000000000030003 00000000f5000000 ffff888181817701
[ 3711.593191] head: 0017ffffc0000003 ffffea0004ccc001 00000000ffffffff 00000000ffffffff
[ 3711.593196] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 3711.593201] page dumped because: kasan: bad access detected

[ 3711.593209] Memory state around the buggy address:
[ 3711.593214]  ffff8881332fff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 3711.593219]  ffff8881332fff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 3711.593224] >ffff888133300000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3711.593229]                                      ^
[ 3711.593234]  ffff888133300080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3711.593239]  ffff888133300100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3711.593243] ==================================================================
RE: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Korenblit, Miriam Rachel 1 week, 5 days ago 


> -----Original Message-----
> From: Chris Bainbridge <chris.bainbridge@gmail.com>
> Sent: Monday, January 26, 2026 10:42 AM
> To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> kernel@vger.kernel.org; stable@vger.kernel.org
> Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> 
> On Mon, Jan 26, 2026 at 07:15:54AM +0000, Korenblit, Miriam Rachel wrote:
> >
> > Hi Chris, could you please provide the full log?
> >
> > Miri
> 
> Sure, for 6.18.0 see https://lore.kernel.org/linux-
> wireless/aTDoDiD55qlUZ0pn@debian.local/
> 
> 
Thanks!

could you please test if the attached patch eliminates the panic? 
From 42490ba7e9adecd3a4f67f3aa748b5868c90bd49 Mon Sep 17 00:00:00 2001
From: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Date: Mon, 26 Jan 2026 15:36:24 +0200
Subject: [PATCH] wifi: iwlwifi: mvm: cleanup IWL_MVM_STATUS_IN_HW_RESTART in
 resume
Organization: Intel Israel (74) Limited

In suspend without wowlan, if we had an assert before resume, then
restart_work is pending and IWL_MVM_STATUS_HW_RESTART_REQUESTED is set.

Since restart work is on the system_freezable_wq, it will not be executed
before the resume.

In resume, mac80211 cancels the pending restart work, becuase the resume
process restarts the hw anyway.

Then drv_start is called, in which iwlmvm sets
IWL_MVM_STATUS_IN_HW_RESTART, but doesn't clear it anywhere if we were
able to restart the hw.

Fix it by clearing IWL_MVM_STATUS_IN_HW_RESTART also when
iwl_mvm_mac_reconfig_complete is called with IEEE80211_RECONFIG_TYPE_SUSPEND,
and not just with IEEE80211_RECONFIG_TYPE_RESTART.

Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Change-Id: I6435100c880975ce95cac2dbdf5ec160098a2291
---
 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
index d806b8e50ec0..a6d0c53b94e0 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
@@ -1467,6 +1467,8 @@ void iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw,
 {
 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
 
+	clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
+
 	switch (reconfig_type) {
 	case IEEE80211_RECONFIG_TYPE_RESTART:
 		iwl_mvm_restart_complete(mvm);
-- 
2.34.1
Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week, 4 days ago 
On Mon, 26 Jan 2026 at 13:45, Korenblit, Miriam Rachel
<miriam.rachel.korenblit@intel.com> wrote:
>
>
>
> > -----Original Message-----
> > From: Chris Bainbridge <chris.bainbridge@gmail.com>
> > Sent: Monday, January 26, 2026 10:42 AM
> > To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> > Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> > benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> > linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> > kernel@vger.kernel.org; stable@vger.kernel.org
> > Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> >
> > On Mon, Jan 26, 2026 at 07:15:54AM +0000, Korenblit, Miriam Rachel wrote:
> > >
> > > Hi Chris, could you please provide the full log?
> > >
> > > Miri
> >
> > Sure, for 6.18.0 see https://lore.kernel.org/linux-
> > wireless/aTDoDiD55qlUZ0pn@debian.local/
> >
> >
> Thanks!
>
> could you please test if the attached patch eliminates the panic?

Yes, that seems to work fine.

Reported-and-tested-by: Chris Bainbridge <chris.bainbridge@gmail.com>
RE: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Korenblit, Miriam Rachel 1 week, 4 days ago 


> -----Original Message-----
> From: Chris Bainbridge <chris.bainbridge@gmail.com>
> Sent: Tuesday, January 27, 2026 12:05 AM
> To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> kernel@vger.kernel.org; stable@vger.kernel.org
> Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> 
> On Mon, 26 Jan 2026 at 13:45, Korenblit, Miriam Rachel
> <miriam.rachel.korenblit@intel.com> wrote:
> >
> >
> >
> > > -----Original Message-----
> > > From: Chris Bainbridge <chris.bainbridge@gmail.com>
> > > Sent: Monday, January 26, 2026 10:42 AM
> > > To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> > > Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> > > benjamin@sipsolutions.net; gustavoars@kernel.org;
> > > linux-intel-wifi@intel.com; linux-wireless@vger.kernel.org;
> > > netdev@vger.kernel.org; linux- kernel@vger.kernel.org;
> > > stable@vger.kernel.org
> > > Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove
> STATUS_SUSPENDED"
> > >
> > > On Mon, Jan 26, 2026 at 07:15:54AM +0000, Korenblit, Miriam Rachel wrote:
> > > >
> > > > Hi Chris, could you please provide the full log?
> > > >
> > > > Miri
> > >
> > > Sure, for 6.18.0 see https://lore.kernel.org/linux-
> > > wireless/aTDoDiD55qlUZ0pn@debian.local/
> > >
> > >
> > Thanks!
> >
> > could you please test if the attached patch eliminates the panic?
> 
> Yes, that seems to work fine.
> 
> Reported-and-tested-by: Chris Bainbridge <chris.bainbridge@gmail.com>

Just making sure: have you been able to reproduce the assert (ADVANCED_SYSASSERT in the log), and then the panic didn't happen?

If yes, please test the attached patch, which is supposed to fix the assert itself. With this, you are not even supposed to see an assert.

Miri
From 74ff1670ee94e69bc78a8e553cfe27995811f645 Mon Sep 17 00:00:00 2001
From: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Date: Tue, 27 Jan 2026 06:58:56 +0200
Subject: [PATCH] wifi: iwlwifi: mvm: pause TCM on fast resume
Organization: Intel Israel (74) Limited

Not pausing it means that we can have work queued into a non-freezable
workqueue, which, in resume, are re-activated before the driver's
resume.
The TCM work might send command to the FW before we resumed the device,
leading to an assert.

Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Change-Id: I44df9cf9183b5143df8078131e0d87c0fd7e1763
---
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/d3.c b/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
index f5a41f275d99..110690da63ee 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
@@ -3214,6 +3214,8 @@ void iwl_mvm_fast_suspend(struct iwl_mvm *mvm)
 
 	IWL_DEBUG_WOWLAN(mvm, "Starting fast suspend flow\n");
 
+	iwl_mvm_pause_tcm(mvm, true);
+
 	mvm->fast_resume = true;
 	set_bit(IWL_MVM_STATUS_IN_D3, &mvm->status);
 
@@ -3270,6 +3272,8 @@ int iwl_mvm_fast_resume(struct iwl_mvm *mvm)
 		mvm->trans->state = IWL_TRANS_NO_FW;
 	}
 
+	iwl_mvm_resume_tcm(mvm);
+
 out:
 	clear_bit(IWL_MVM_STATUS_IN_D3, &mvm->status);
 	mvm->fast_resume = false;
-- 
2.34.1
Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week, 4 days ago 
On Tue, Jan 27, 2026 at 05:05:31AM +0000, Korenblit, Miriam Rachel wrote:
> 
> Just making sure: have you been able to reproduce the assert (ADVANCED_SYSASSERT in the log), and then the panic didn't happen?

Yes, the ADVANCED_SYSASSERT was logged but there was no subsequent null pointer
dereference.

> If yes, please test the attached patch, which is supposed to fix the assert itself. With this, you are not even supposed to see an assert.

I ran this through 15 suspend/resume cycles with network traffic. The
ADVANCED_SYSASSERT did not occur, so it looks like the patch does fix
the SYSASSERT. There was a warning logged once out of the 15 cycles:

[  454.184873] ------------[ cut here ]------------
[  454.184894] WR pointer moved while flushing 216 -> 239
[  454.184898] WARNING: drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c:2570 at iwl_trans_pcie_wait_txq_empty+0x4f7/0x6d0 [iwlwifi], CPU#9: kworker/u64:38/4331
[  454.184927] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat x_tables nf_tables br_netfilter bridge stp llc ccm overlay qrtr rfcomm cmac algif_hash algif_skcipher af_alg bnep binfmt_misc ext4 mbcache jbd2 nls_ascii nls_cp437 vfat fat snd_acp3x_pdm_dma snd_soc_dmic snd_acp3x_rn snd_hda_codec_generic snd_soc_core intel_rapl_msr snd_compress amd_atl intel_rapl_common snd_hda_codec_hdmi iwlmvm mac80211 snd_hda_intel libarc4 snd_usb_audio uvcvideo kvm_amd snd_hda_codec snd_pci_acp6x btusb videobuf2_vmalloc snd_usbmidi_lib snd_intel_dspcfg snd_pci_acp5x btrtl videobuf2_memops snd_rawmidi snd_hwdep btintel kvm btbcm uvc snd_seq_device snd_hda_core btmtk irqbypass videobuf2_v4l2 snd_rn_pci_acp3x iwlwifi snd_pcm rapl videodev snd_acp_config bluetooth pcspkr cfg80211 snd_soc_acpi snd_timer wmi_bmof ecdh_generic videobuf2_common ee1004 ecc k10temp snd_pci_acp3x mc snd
[  454.185174]  rfkill soundcore ccp ac battery sg button amd_pmc acpi_tad joydev evdev msr parport_pc ppdev lp parport nvme_fabrics fuse efi_pstore configfs nfnetlink efivarfs autofs4 crc32c_cryptoapi btrfs blake2b libblake2b xor raid6_pq dm_crypt hid_microsoft ff_memless hid_cmedia r8153_ecm cdc_ether usbnet dm_mod r8152 mii libphy mdio_bus sd_mod uas usb_storage scsi_mod usbhid scsi_common amdgpu drm_client_lib i2c_algo_bit drm_ttm_helper ttm drm_exec drm_suballoc_helper drm_buddy drm_panel_backlight_quirks gpu_sched amdxcp hid_multitouch drm_display_helper ucsi_acpi hid_generic typec_ucsi drm_kms_helper roles xhci_pci sp5100_tco video xhci_hcd typec cec i2c_hid_acpi watchdog i2c_hid amd_sfh ghash_clmulni_intel serio_raw rc_core usbcore nvme thunderbolt hid i2c_piix4 crc16 i2c_smbus nvme_core fan usb_common drm wmi aesni_intel
[  454.185402] CPU: 9 UID: 0 PID: 4331 Comm: kworker/u64:38 Not tainted 6.19.0-rc6-00341-gf1d1ad131417 #406 PREEMPT(voluntary)
[  454.185408] Hardware name: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 12/18/2024
[  454.185412] Workqueue: async async_run_entry_fn
[  454.185423] RIP: 0010:iwl_trans_pcie_wait_txq_empty+0x4fe/0x6d0 [iwlwifi]
[  454.185446] Code: 48 c7 04 03 00 00 00 00 48 81 c4 88 00 00 00 89 d0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 8d 3d 99 65 09 00 0f b6 d3 40 0f b6 f6 <67> 48 0f b9 3a ba 92 ff ff ff eb bb 48 89 c7 e8 8e 7a 05 de e9 4e
[  454.185450] RSP: 0018:ffff888110abf488 EFLAGS: 00010297
[  454.185456] RAX: fffffbfff4a42250 RBX: 00000000000033ef RCX: 0000000000000006
[  454.185460] RDX: 00000000000000ef RSI: 00000000000000d8 RDI: ffffffffc4c207b0
[  454.185464] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  454.185468] R10: 000000000000335f R11: 0000000000000006 R12: ffffed102c4293b0
[  454.185471] R13: ffff888162149c00 R14: ffff888162149d80 R15: ffff888162149d00
[  454.185475] FS:  0000000000000000(0000) GS:ffff8883e3d30000(0000) knlGS:0000000000000000
[  454.185479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  454.185483] CR2: 00007ff3d9400000 CR3: 00000002b9b2d000 CR4: 0000000000750ef0
[  454.185487] PKRU: 55555554
[  454.185490] Call Trace:
[  454.185494]  <TASK>
[  454.185506]  ? iwl_trans_pcie_rxq_dma_data+0x220/0x220 [iwlwifi]
[  454.185530]  ? __local_bh_enable_ip+0xab/0x130
[  454.185540]  iwl_mvm_wait_sta_queues_empty+0x8c/0xd0 [iwlmvm]
[  454.185568]  iwl_mvm_mac_flush+0x668/0xd20 [iwlmvm]
[  454.185591]  ? lock_is_held_type+0xd5/0x130
[  454.185602]  __ieee80211_flush_queues+0x3cd/0x7c0 [mac80211]
[  454.185679]  ieee80211_set_disassoc+0x123f/0x1ac0 [mac80211]
[  454.185752]  ? ieee80211_powersave_allowed+0x360/0x360 [mac80211]
[  454.185818]  ? unwind_next_frame+0x2e2/0x1ea0
[  454.185830]  ieee80211_mgd_deauth.cold+0xa3/0x71e [mac80211]
[  454.185900]  ? __lock_acquire+0x459/0x2170
[  454.185908]  ? ieee80211_mgd_assoc+0x4ae0/0x4ae0 [mac80211]
[  454.185988]  ? lock_is_held_type+0xd5/0x130
[  454.185999]  cfg80211_mlme_deauth+0x33b/0x890 [cfg80211]
[  454.186080]  ? cfg80211_mlme_assoc+0xa50/0xa50 [cfg80211]
[  454.186164]  cfg80211_mlme_down+0x17a/0x240 [cfg80211]
[  454.186236]  ? cfg80211_mlme_disassoc+0x540/0x540 [cfg80211]
[  454.186315]  cfg80211_disconnect+0x50f/0x800 [cfg80211]
[  454.186393]  wiphy_suspend+0x1f8/0x350 [cfg80211]
[  454.186472]  ? rdev_suspend+0x2a0/0x2a0 [cfg80211]
[  454.186544]  dpm_run_callback+0xfc/0x410
[  454.186554]  ? dpm_async_suspend_superior+0x2e0/0x2e0
[  454.186561]  ? pm_verb+0x90/0x90
[  454.186566]  ? _raw_spin_unlock_irqrestore+0x48/0x60
[  454.186578]  device_suspend+0x37b/0x1080
[  454.186587]  ? async_suspend_late+0x30/0x30
[  454.186594]  ? seqcount_lockdep_reader_access.constprop.0+0x82/0x90
[  454.186601]  ? lockdep_hardirqs_on+0x78/0x100
[  454.186612]  ? device_suspend+0x1080/0x1080
[  454.186616]  async_suspend+0x19/0x30
[  454.186622]  async_run_entry_fn+0x93/0x500
[  454.186633]  process_one_work+0x849/0x1420
[  454.186651]  ? pwq_dec_nr_in_flight+0xe00/0xe00
[  454.186665]  ? assign_work+0x168/0x240
[  454.186670]  ? lock_is_held_type+0xd5/0x130
[  454.186679]  worker_thread+0x5ef/0xfd0
[  454.186697]  ? process_one_work+0x1420/0x1420
[  454.186701]  kthread+0x3ad/0x760
[  454.186709]  ? kthread_is_per_cpu+0xb0/0xb0
[  454.186713]  ? ret_from_fork+0x71/0x800
[  454.186719]  ? ret_from_fork+0x71/0x800
[  454.186725]  ? _raw_spin_unlock_irq+0x24/0x50
[  454.186732]  ? kthread_is_per_cpu+0xb0/0xb0
[  454.186739]  ret_from_fork+0x54a/0x800
[  454.186746]  ? exit_thread+0x70/0x70
[  454.186754]  ? __switch_to+0x36f/0xd60
[  454.186761]  ? kthread_is_per_cpu+0xb0/0xb0
[  454.186768]  ret_from_fork_asm+0x11/0x20
[  454.186789]  </TASK>
[  454.186792] irq event stamp: 1499703
[  454.186795] hardirqs last  enabled at (1499709): [<ffffffffa241cdee>] __up_console_sem+0x5e/0x70
[  454.186802] hardirqs last disabled at (1499714): [<ffffffffa241cdd3>] __up_console_sem+0x43/0x70
[  454.186808] softirqs last  enabled at (1498148): [<ffffffffc4b8a152>] iwl_trans_pcie_wait_txq_empty+0x432/0x6d0 [iwlwifi]
[  454.186831] softirqs last disabled at (1498146): [<ffffffffc4b8a00f>] iwl_trans_pcie_wait_txq_empty+0x2ef/0x6d0 [iwlwifi]
[  454.186852] ---[ end trace 0000000000000000 ]---

I think that this is probably a different bug though - checking previous
logs with journalctl, I see the same warning occurred once with
6.17.0-06871-gf79e772258df which predates the "remove STATUS_SUSPENDED"
commit.
Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week ago 
Hi,

I've been running a kernel with both of the suspend fixes (pause TCM on
fast resume, cleanup IWL_MVM_STATUS_IN_HW_RESTART in resume) here for
the last few days. I just experienced this fault - not from
suspend/resume this time though, the laptop wasn't doing anything
particular at the time, so no idea how to reproduce it.
Maybe it's related though (?) as it has the same
"Error sending SYSTEM_STATISTICS_CMD: time out after 2000ms."
It recovered ok, wifi was functional afterwards.

[37410.975565] iwlwifi 0000:01:00.0: Error sending SYSTEM_STATISTICS_CMD: time out after 2000ms.
[37410.975741] iwlwifi 0000:01:00.0: Current CMD queue read_ptr 39088 write_ptr 39089
[37410.977474] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[37410.977480] iwlwifi 0000:01:00.0: Transport status: 0x0000004A, valid: 6
[37410.977486] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0 ty-a0-gf-a0-89.ucode
[37410.977491] iwlwifi 0000:01:00.0: 0x00000084 | NMI_INTERRUPT_UNKNOWN
[37410.977497] iwlwifi 0000:01:00.0: 0x00008210 | trm_hw_status0
[37410.977502] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1
[37410.977506] iwlwifi 0000:01:00.0: 0x004DAD04 | branchlink2
[37410.977511] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink1
[37410.977515] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink2
[37410.977520] iwlwifi 0000:01:00.0: 0x00016AD2 | data1
[37410.977524] iwlwifi 0000:01:00.0: 0x01000000 | data2
[37410.977529] iwlwifi 0000:01:00.0: 0x00000000 | data3
[37410.977533] iwlwifi 0000:01:00.0: 0x70C01827 | beacon time
[37410.977538] iwlwifi 0000:01:00.0: 0xAD47B7F5 | tsf low
[37410.977542] iwlwifi 0000:01:00.0: 0x0000066B | tsf hi
[37410.977547] iwlwifi 0000:01:00.0: 0x00000000 | time gp1
[37410.977551] iwlwifi 0000:01:00.0: 0xB3FD3A22 | time gp2
[37410.977555] iwlwifi 0000:01:00.0: 0x00000001 | uCode revision type
[37410.977560] iwlwifi 0000:01:00.0: 0x00000059 | uCode version major
[37410.977565] iwlwifi 0000:01:00.0: 0x7F71C7F4 | uCode version minor
[37410.977569] iwlwifi 0000:01:00.0: 0x00000420 | hw version
[37410.977574] iwlwifi 0000:01:00.0: 0x00C80002 | board version
[37410.977578] iwlwifi 0000:01:00.0: 0x80F3FD26 | hcmd
[37410.977583] iwlwifi 0000:01:00.0: 0x24020000 | isr0
[37410.977587] iwlwifi 0000:01:00.0: 0x00000000 | isr1
[37410.977591] iwlwifi 0000:01:00.0: 0x40F84002 | isr2
[37410.977596] iwlwifi 0000:01:00.0: 0x04C3081C | isr3
[37410.977600] iwlwifi 0000:01:00.0: 0x00000000 | isr4
[37410.977604] iwlwifi 0000:01:00.0: 0x0326001C | last cmd Id
[37410.977609] iwlwifi 0000:01:00.0: 0x00016AD2 | wait_event
[37410.977613] iwlwifi 0000:01:00.0: 0x00000080 | l2p_control
[37410.977618] iwlwifi 0000:01:00.0: 0x00010014 | l2p_duration
[37410.977622] iwlwifi 0000:01:00.0: 0x0000003F | l2p_mhvalid
[37410.977627] iwlwifi 0000:01:00.0: 0x00001800 | l2p_addr_match
[37410.977631] iwlwifi 0000:01:00.0: 0x00000008 | lmpm_pmg_sel
[37410.977635] iwlwifi 0000:01:00.0: 0x00000000 | timestamp
[37410.977640] iwlwifi 0000:01:00.0: 0x06647878 | flow_handler
[37410.977678] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
[37410.977682] iwlwifi 0000:01:00.0: Transport status: 0x0000004A, valid: 7
[37410.977687] iwlwifi 0000:01:00.0: 0x20000066 | NMI_INTERRUPT_HOST
[37410.977692] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1
[37410.977697] iwlwifi 0000:01:00.0: 0x804838BE | umac branchlink2
[37410.977701] iwlwifi 0000:01:00.0: 0x804A5D36 | umac interruptlink1
[37410.977706] iwlwifi 0000:01:00.0: 0x804A5D36 | umac interruptlink2
[37410.977710] iwlwifi 0000:01:00.0: 0x01000000 | umac data1
[37410.977715] iwlwifi 0000:01:00.0: 0x804A5D36 | umac data2
[37410.977719] iwlwifi 0000:01:00.0: 0x00000000 | umac data3
[37410.977723] iwlwifi 0000:01:00.0: 0x00000059 | umac major
[37410.977728] iwlwifi 0000:01:00.0: 0x7F71C7F4 | umac minor
[37410.977732] iwlwifi 0000:01:00.0: 0xB3FD3A20 | frame pointer
[37410.977736] iwlwifi 0000:01:00.0: 0xC0886258 | stack pointer
[37410.977741] iwlwifi 0000:01:00.0: 0x00B0020F | last host cmd
[37410.977745] iwlwifi 0000:01:00.0: 0x00000400 | isr status reg
[37410.977759] iwlwifi 0000:01:00.0: IML/ROM dump:
[37410.977764] iwlwifi 0000:01:00.0: 0x00000B03 | IML/ROM error/state
[37410.977778] iwlwifi 0000:01:00.0: 0x00008EBB | IML/ROM data1
[37410.977792] iwlwifi 0000:01:00.0: 0x00000090 | IML/ROM WFPM_AUTH_KEY_0
[37410.977802] iwlwifi 0000:01:00.0: Fseq Registers:
[37410.977868] iwlwifi 0000:01:00.0: 0x60000000 | FSEQ_ERROR_CODE
[37410.977875] iwlwifi 0000:01:00.0: 0x80440007 | FSEQ_TOP_INIT_VERSION
[37410.977882] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_CNVIO_INIT_VERSION
[37410.977889] iwlwifi 0000:01:00.0: 0x0000A652 | FSEQ_OTP_VERSION
[37410.977896] iwlwifi 0000:01:00.0: 0x00000002 | FSEQ_TOP_CONTENT_VERSION
[37410.977902] iwlwifi 0000:01:00.0: 0x4552414E | FSEQ_ALIVE_TOKEN
[37410.977909] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVI_ID
[37410.977915] iwlwifi 0000:01:00.0: 0x00400410 | FSEQ_CNVR_ID
[37410.977922] iwlwifi 0000:01:00.0: 0x00400410 | CNVI_AUX_MISC_CHIP
[37410.977930] iwlwifi 0000:01:00.0: 0x00400410 | CNVR_AUX_MISC_CHIP
[37410.977939] iwlwifi 0000:01:00.0: 0x00009061 | CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
[37410.977948] iwlwifi 0000:01:00.0: 0x00000061 | CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
[37410.977954] iwlwifi 0000:01:00.0: 0x00080009 | FSEQ_PREV_CNVIO_INIT_VERSION
[37410.977961] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_WIFI_FSEQ_VERSION
[37410.977968] iwlwifi 0000:01:00.0: 0x00440007 | FSEQ_BT_FSEQ_VERSION
[37410.977974] iwlwifi 0000:01:00.0: 0x000000E6 | FSEQ_CLASS_TP_VERSION
[37410.977988] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0x804a57fc
[37410.977995] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd0
[37410.978994] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 4 fired (delay=0ms).
[37411.452630] iwlwifi 0000:01:00.0: Device error - SW reset
[37411.452783] ieee80211 phy0: Hardware restart was requested
[37411.699230] iwlwifi 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x20
[37411.699393] iwlwifi 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x1f
[37411.699479] iwlwifi 0000:01:00.0: WFPM_AUTH_KEY_0: 0x90
[37411.699553] iwlwifi 0000:01:00.0: CNVI_SCU_SEQ_DATA_DW9: 0x0
[37411.837813] iwlwifi 0000:01:00.0: restart completed
RE: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Korenblit, Miriam Rachel 6 days, 20 hours ago 

> -----Original Message-----
> From: Chris Bainbridge <chris.bainbridge@gmail.com>
> Sent: Saturday, January 31, 2026 1:44 AM
> To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> kernel@vger.kernel.org; stable@vger.kernel.org
> Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> 
> Hi,
> 
> I've been running a kernel with both of the suspend fixes (pause TCM on fast
> resume, cleanup IWL_MVM_STATUS_IN_HW_RESTART in resume) here for the
> last few days. I just experienced this fault - not from suspend/resume this time
> though, the laptop wasn't doing anything particular at the time, so no idea how to
> reproduce it.
> Maybe it's related though (?) as it has the same "Error sending
> SYSTEM_STATISTICS_CMD: time out after 2000ms."
> It recovered ok, wifi was functional afterwards.
> 
> [37410.975565] iwlwifi 0000:01:00.0: Error sending SYSTEM_STATISTICS_CMD:
> time out after 2000ms.
> [37410.975741] iwlwifi 0000:01:00.0: Current CMD queue read_ptr 39088
> write_ptr 39089 [37410.977474] iwlwifi 0000:01:00.0: Start IWL Error Log Dump:
> [37410.977480] iwlwifi 0000:01:00.0: Transport status: 0x0000004A, valid: 6
> [37410.977486] iwlwifi 0000:01:00.0: Loaded firmware version: 89.7f71c7f4.0
> ty-a0-gf-a0-89.ucode [37410.977491] iwlwifi 0000:01:00.0: 0x00000084 |
> NMI_INTERRUPT_UNKNOWN [37410.977497] iwlwifi 0000:01:00.0:
> 0x00008210 | trm_hw_status0 [37410.977502] iwlwifi 0000:01:00.0:
> 0x00000000 | trm_hw_status1 [37410.977506] iwlwifi 0000:01:00.0:
> 0x004DAD04 | branchlink2 [37410.977511] iwlwifi 0000:01:00.0: 0x004D092A |
> interruptlink1 [37410.977515] iwlwifi 0000:01:00.0: 0x004D092A | interruptlink2
> [37410.977520] iwlwifi 0000:01:00.0: 0x00016AD2 | data1 [37410.977524]
> iwlwifi 0000:01:00.0: 0x01000000 | data2 [37410.977529] iwlwifi 0000:01:00.0:
> 0x00000000 | data3 [37410.977533] iwlwifi 0000:01:00.0: 0x70C01827 | beacon
> time [37410.977538] iwlwifi 0000:01:00.0: 0xAD47B7F5 | tsf low
> [37410.977542] iwlwifi 0000:01:00.0: 0x0000066B | tsf hi [37410.977547]
> iwlwifi 0000:01:00.0: 0x00000000 | time gp1 [37410.977551] iwlwifi
> 0000:01:00.0: 0xB3FD3A22 | time gp2 [37410.977555] iwlwifi 0000:01:00.0:
> 0x00000001 | uCode revision type [37410.977560] iwlwifi 0000:01:00.0:
> 0x00000059 | uCode version major [37410.977565] iwlwifi 0000:01:00.0:
> 0x7F71C7F4 | uCode version minor [37410.977569] iwlwifi 0000:01:00.0:
> 0x00000420 | hw version [37410.977574] iwlwifi 0000:01:00.0: 0x00C80002 |
> board version [37410.977578] iwlwifi 0000:01:00.0: 0x80F3FD26 | hcmd
> [37410.977583] iwlwifi 0000:01:00.0: 0x24020000 | isr0 [37410.977587] iwlwifi
> 0000:01:00.0: 0x00000000 | isr1 [37410.977591] iwlwifi 0000:01:00.0:
> 0x40F84002 | isr2 [37410.977596] iwlwifi 0000:01:00.0: 0x04C3081C | isr3
> [37410.977600] iwlwifi 0000:01:00.0: 0x00000000 | isr4 [37410.977604] iwlwifi
> 0000:01:00.0: 0x0326001C | last cmd Id [37410.977609] iwlwifi 0000:01:00.0:
> 0x00016AD2 | wait_event [37410.977613] iwlwifi 0000:01:00.0: 0x00000080 |
> l2p_control [37410.977618] iwlwifi 0000:01:00.0: 0x00010014 | l2p_duration
> [37410.977622] iwlwifi 0000:01:00.0: 0x0000003F | l2p_mhvalid
> [37410.977627] iwlwifi 0000:01:00.0: 0x00001800 | l2p_addr_match
> [37410.977631] iwlwifi 0000:01:00.0: 0x00000008 | lmpm_pmg_sel
> [37410.977635] iwlwifi 0000:01:00.0: 0x00000000 | timestamp [37410.977640]
> iwlwifi 0000:01:00.0: 0x06647878 | flow_handler [37410.977678] iwlwifi
> 0000:01:00.0: Start IWL Error Log Dump:
> [37410.977682] iwlwifi 0000:01:00.0: Transport status: 0x0000004A, valid: 7
> [37410.977687] iwlwifi 0000:01:00.0: 0x20000066 | NMI_INTERRUPT_HOST
> [37410.977692] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1
> [37410.977697] iwlwifi 0000:01:00.0: 0x804838BE | umac branchlink2
> [37410.977701] iwlwifi 0000:01:00.0: 0x804A5D36 | umac interruptlink1
> [37410.977706] iwlwifi 0000:01:00.0: 0x804A5D36 | umac interruptlink2
> [37410.977710] iwlwifi 0000:01:00.0: 0x01000000 | umac data1 [37410.977715]
> iwlwifi 0000:01:00.0: 0x804A5D36 | umac data2 [37410.977719] iwlwifi
> 0000:01:00.0: 0x00000000 | umac data3 [37410.977723] iwlwifi 0000:01:00.0:
> 0x00000059 | umac major [37410.977728] iwlwifi 0000:01:00.0: 0x7F71C7F4 |
> umac minor [37410.977732] iwlwifi 0000:01:00.0: 0xB3FD3A20 | frame pointer
> [37410.977736] iwlwifi 0000:01:00.0: 0xC0886258 | stack pointer
> [37410.977741] iwlwifi 0000:01:00.0: 0x00B0020F | last host cmd
> [37410.977745] iwlwifi 0000:01:00.0: 0x00000400 | isr status reg
> [37410.977759] iwlwifi 0000:01:00.0: IML/ROM dump:
> [37410.977764] iwlwifi 0000:01:00.0: 0x00000B03 | IML/ROM error/state
> [37410.977778] iwlwifi 0000:01:00.0: 0x00008EBB | IML/ROM data1
> [37410.977792] iwlwifi 0000:01:00.0: 0x00000090 | IML/ROM
> WFPM_AUTH_KEY_0 [37410.977802] iwlwifi 0000:01:00.0: Fseq Registers:
> [37410.977868] iwlwifi 0000:01:00.0: 0x60000000 | FSEQ_ERROR_CODE
> [37410.977875] iwlwifi 0000:01:00.0: 0x80440007 | FSEQ_TOP_INIT_VERSION
> [37410.977882] iwlwifi 0000:01:00.0: 0x00080009 |
> FSEQ_CNVIO_INIT_VERSION [37410.977889] iwlwifi 0000:01:00.0: 0x0000A652
> | FSEQ_OTP_VERSION [37410.977896] iwlwifi 0000:01:00.0: 0x00000002 |
> FSEQ_TOP_CONTENT_VERSION [37410.977902] iwlwifi 0000:01:00.0:
> 0x4552414E | FSEQ_ALIVE_TOKEN [37410.977909] iwlwifi 0000:01:00.0:
> 0x00400410 | FSEQ_CNVI_ID [37410.977915] iwlwifi 0000:01:00.0: 0x00400410
> | FSEQ_CNVR_ID [37410.977922] iwlwifi 0000:01:00.0: 0x00400410 |
> CNVI_AUX_MISC_CHIP [37410.977930] iwlwifi 0000:01:00.0: 0x00400410 |
> CNVR_AUX_MISC_CHIP [37410.977939] iwlwifi 0000:01:00.0: 0x00009061 |
> CNVR_SCU_SD_REGS_SD_REG_DIG_DCDC_VTRIM
> [37410.977948] iwlwifi 0000:01:00.0: 0x00000061 |
> CNVR_SCU_SD_REGS_SD_REG_ACTIVE_VDIG_MIRROR
> [37410.977954] iwlwifi 0000:01:00.0: 0x00080009 |
> FSEQ_PREV_CNVIO_INIT_VERSION [37410.977961] iwlwifi 0000:01:00.0:
> 0x00440007 | FSEQ_WIFI_FSEQ_VERSION [37410.977968] iwlwifi 0000:01:00.0:
> 0x00440007 | FSEQ_BT_FSEQ_VERSION [37410.977974] iwlwifi 0000:01:00.0:
> 0x000000E6 | FSEQ_CLASS_TP_VERSION [37410.977988] iwlwifi 0000:01:00.0:
> UMAC CURRENT PC: 0x804a57fc [37410.977995] iwlwifi 0000:01:00.0: LMAC1
> CURRENT PC: 0xd0 [37410.978994] iwlwifi 0000:01:00.0: WRT: Collecting data:
> ini trigger 4 fired (delay=0ms).
> [37411.452630] iwlwifi 0000:01:00.0: Device error - SW reset [37411.452783]
> ieee80211 phy0: Hardware restart was requested [37411.699230] iwlwifi
> 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x20 [37411.699393] iwlwifi
> 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x1f [37411.699479] iwlwifi
> 0000:01:00.0: WFPM_AUTH_KEY_0: 0x90 [37411.699553] iwlwifi 0000:01:00.0:
> CNVI_SCU_SEQ_DATA_DW9: 0x0 [37411.837813] iwlwifi 0000:01:00.0: restart
> completed

Not sure it is related.

Can you open a Bugzilla? With the fw dump and trace-cmd?
RE: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Korenblit, Miriam Rachel 1 week, 4 days ago 

> -----Original Message-----
> From: Chris Bainbridge <chris.bainbridge@gmail.com>
> Sent: Tuesday, January 27, 2026 2:22 PM
> To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> kernel@vger.kernel.org; stable@vger.kernel.org
> Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> 
> On Tue, Jan 27, 2026 at 05:05:31AM +0000, Korenblit, Miriam Rachel wrote:
> >
> > Just making sure: have you been able to reproduce the assert
> (ADVANCED_SYSASSERT in the log), and then the panic didn't happen?
> 
> Yes, the ADVANCED_SYSASSERT was logged but there was no subsequent null
> pointer dereference.
> 
> > If yes, please test the attached patch, which is supposed to fix the assert itself.
> With this, you are not even supposed to see an assert.
> 
> I ran this through 15 suspend/resume cycles with network traffic. The
> ADVANCED_SYSASSERT did not occur, so it looks like the patch does fix the
> SYSASSERT. There was a warning logged once out of the 15 cycles:
> 
> I think that this is probably a different bug though - checking previous logs with
> journalctl, I see the same warning occurred once with 6.17.0-06871-
> gf79e772258df which predates the "remove STATUS_SUSPENDED"
> commit.

Thanks for the help!

Regarding the warning, please open Bugzilla ticket for that

Miri
Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
Posted by Chris Bainbridge 1 week, 4 days ago 
On Tue, Jan 27, 2026 at 01:22:06PM +0000, Korenblit, Miriam Rachel wrote:
> 
> 
> > -----Original Message-----
> > From: Chris Bainbridge <chris.bainbridge@gmail.com>
> > Sent: Tuesday, January 27, 2026 2:22 PM
> > To: Korenblit, Miriam Rachel <miriam.rachel.korenblit@intel.com>
> > Cc: kvalo@kernel.org; Berg, Johannes <johannes.berg@intel.com>;
> > benjamin@sipsolutions.net; gustavoars@kernel.org; linux-intel-wifi@intel.com;
> > linux-wireless@vger.kernel.org; netdev@vger.kernel.org; linux-
> > kernel@vger.kernel.org; stable@vger.kernel.org
> > Subject: Re: [PATCH] Revert "wifi: iwlwifi: trans: remove STATUS_SUSPENDED"
> > 
> > On Tue, Jan 27, 2026 at 05:05:31AM +0000, Korenblit, Miriam Rachel wrote:
> > >
> > > Just making sure: have you been able to reproduce the assert
> > (ADVANCED_SYSASSERT in the log), and then the panic didn't happen?
> > 
> > Yes, the ADVANCED_SYSASSERT was logged but there was no subsequent null
> > pointer dereference.
> > 
> > > If yes, please test the attached patch, which is supposed to fix the assert itself.
> > With this, you are not even supposed to see an assert.
> > 
> > I ran this through 15 suspend/resume cycles with network traffic. The
> > ADVANCED_SYSASSERT did not occur, so it looks like the patch does fix the
> > SYSASSERT. There was a warning logged once out of the 15 cycles:
> > 
> > I think that this is probably a different bug though - checking previous logs with
> > journalctl, I see the same warning occurred once with 6.17.0-06871-
> > gf79e772258df which predates the "remove STATUS_SUSPENDED"
> > commit.
> 
> Thanks for the help!
> 
> Regarding the warning, please open Bugzilla ticket for that
> 
> Miri

Sure, ticket is https://bugzilla.kernel.org/show_bug.cgi?id=221017

Patchew 2.1-devel-b67e4c2

© 2016 - 2026 Red Hat, Inc.