mirror of
https://github.com/outbackdingo/mt76.git
synced 2026-10-24 13:26:48 +00:00
Felix Fietkau
d3b243c548
roc_phy on the shared per-interface data names the phy of the one started last, which may have ended or moved on to another interface since. Both users take it at face value: an interface going away aborts whatever it names, and cancelling one for an interface acts on it without asking whose it is. Aborting a stranger's leaves the interface's own outstanding one behind, and its work then runs once the interface is gone, tearing the link down through the freed bss_conf: Unable to handle kernel paging request at virtual address 000043c218ce0afd Workqueue: phy0 mt76_roc_complete_work [mt76] pc : mt76_connac_mcu_sta_basic_tlv+0xdc/0x260 [mt76_connac_lib] Call trace: mt76_connac_mcu_sta_basic_tlv mt7996_mcu_add_sta mt7996_vif_link_destroy mt7996_vif_link_remove mt76_put_vif_phy_link mt76_roc_complete mt76_roc_complete_work Check the interface before acting on it in both places. Signed-off-by: Felix Fietkau <[email protected]>