iwl_trans_pcie_tx page faults are roughly 5% of the page faults seen in 10032.86.0 (and probably earlier releases too...I just haven't looked there).

It's notable that this bug seems to be the only remaining "significant" kernel crash signature that I'm seeing with iwlwifi in my kernel crash report spelunking.


fgrep iwl_trans_pcie */10032.86.0/feedback-*-kernel-10032.86.0-201802*.txt 

(some spurious output removed by hand)
CHELL/10032.86.0/feedback-CHELL-kernel-10032.86.0-20180213.txt:     10 iwl_trans_pcie_tx+0xeae/0x1084 [iwlwifi]
GNAWTY/10032.86.0/feedback-GNAWTY-kernel-10032.86.0-20180213.txt:     50 iwl_trans_pcie_tx+0xd94/0xf48 [iwlwifi]
GNAWTY/10032.86.0/feedback-GNAWTY-kernel-10032.86.0-20180213.txt:     66 iwl_trans_pcie_tx+0x2df/0xf48 [iwlwifi]
PAINE/10032.86.0/feedback-PAINE-kernel-10032.86.0-20180213.txt:     50 iwl_trans_pcie_tx+0x338/0x1017 [iwlwifi]
PAINE/10032.86.0/feedback-PAINE-kernel-10032.86.0-20180213.txt:     59 iwl_trans_pcie_tx+0xe47/0x1017 [iwlwifi]
SWANKY/10032.86.0/feedback-SWANKY-kernel-10032.86.0-20180213.txt:     23 iwl_trans_pcie_tx+0x201/0xf87 [iwlwifi]
SWANKY/10032.86.0/feedback-SWANKY-kernel-10032.86.0-20180213.txt:     30 iwl_trans_pcie_tx+0xbf9/0xf87 [iwlwifi]
TERRA/10032.86.0/feedback-TERRA-kernel-10032.86.0-20180213.txt:     75 iwl_trans_pcie_tx+0xeae/0x1084 [iwlwifi]
TERRA/10032.86.0/feedback-TERRA-kernel-10032.86.0-20180213.txt:     80 iwl_trans_pcie_tx+0x359/0x1084 [iwlwifi]

There appear to be two different signatures related to this page fault on three different kernel versions:
CHELL  3.18
GNAWTY 4.4
PAINE  3.14
SWANKY 4.4
TERRA  3.18
[See https://www.chromium.org/chromium-os/developer-information-for-chrome-os-devices]

Three example stack traces below (sorry, I have to deal with some other urgent issues - just ask if you can consume more stack traces - tell me which of the above you want examples for)

If it's useful to fork off another bug to deal with the second signature (see stack traces below) please do. I'm just looking at this from the "crash reports" PoV. And this stinks like a race condition between Soft IRQ level code (handles TX "completion") and some other teardown in base level code. But it's possible this is the same race but in one case IRQ "wins" and in the other base level code "wins".


CAVEAT: Note that some of the TERRA crash reports are for the previous release (likely 10032.77.0) and I'll assume that's true for other platforms too:

find  TERRA/10032.86.0/ -name \*.kcrash | xargs fgrep -m1 "Linux version" | sed -e 's/.*Linux version //' -e 's/ (.*//' | sort | uniq -c
    261 3.18.0-13101-g57e8190
   4012 3.18.0-16288-g64d05cf80004

# Just looking for the version counts more because it catches:
#    CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.18.0-13101-g57e8190 #1" output

find  TERRA/10032.86.0/ -name \*.kcrash | xargs fgrep -m1 "3.18.0-13101-g57e8190" | cut -d '/' -f 3 | uniq -c
      3 memory_corruption
     18 page_fault
      2 gpf0000
    377 NULL_pointer
      3 hung_tasks
      1 watchdog


===== Example stack trace/dmesg iwl_trans_pcie_tx+0xeae/0x1084 for TERRA 3.18 kernel =====
<5>[    0.000000] Linux version 3.18.0-16288-g64d05cf80004 (chrome-bot@cros-beefy264-c2) (gcc version 4.9.x 20150123 (prerelease) (4.9.2_cos_gg_4.9.2-r166-0c5a656a1322e137fa4a251f2ccc6c4022918c0a_4.9.2-r166) ) #1 SMP PREEMPT Mon Jan 8 23:22:23 PST 2018

<7>[    2.130277] iwlwifi 0000:02:00.0: irq 313 for MSI/MSI-X
<4>[    2.135478] iwlwifi 0000:02:00.0: Direct firmware load for iwl-dbg-cfg.ini failed with error -2
...
<6>[    2.181184] iwlwifi 0000:02:00.0: loaded firmware version 29.588277.0 op_mode iwlmvm
<6>[    2.199326] iwlwifi 0000:02:00.0: Detected Intel(R) Dual Band Wireless AC 7265, REV=0x210
<6>[    2.206344] iwlwifi 0000:02:00.0: L1 Enabled - LTR Enabled
<6>[    2.207001] iwlwifi 0000:02:00.0: L1 Enabled - LTR Enabled
...
<6>[ 2208.313157] cfg80211: Calling CRDA for country: US
<28>[ 2208.329680] udevd[6570]: Process '/sbin/crda' failed with exit code 234.
<6>[ 2208.334160] cfg80211: Regulatory domain changed to country: US
<6>[ 2208.334179] cfg80211:  DFS Master region: unset
<6>[ 2208.334187] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
<6>[ 2208.334203] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
<6>[ 2208.334215] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
<6>[ 2208.334228] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
<6>[ 2208.334241] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2300 mBm), (0 s)
<6>[ 2208.334254] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
<6>[ 2208.334266] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
<6>[ 2208.334328] cfg80211: Calling CRDA for country: US
<6>[ 2208.343351] cfg80211: Regulatory domain changed to country: US
<6>[ 2208.343369] cfg80211:  DFS Master region: unset
<6>[ 2208.343377] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
<6>[ 2208.343393] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
<6>[ 2208.343406] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
<6>[ 2208.343419] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
<6>[ 2208.343431] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2300 mBm), (0 s)
<6>[ 2208.343444] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
<6>[ 2208.343456] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
<7>[ 2288.358570] SELinux: initialized (dev proc, type proc), uses genfs_contexts
<6>[ 2296.036230] wlan0: disconnect from AP 00:00:00:00:00:02 for new auth to 00:00:00:00:00:03
<1>[ 2296.041013] BUG: unable to handle kernel paging request at ffff880075c46140
<1>[ 2296.041036] IP: [<ffffffffc02bab31>] iwl_trans_pcie_tx+0xeae/0x1084 [iwlwifi]
<4>[ 2296.041063] PGD 7b39067 PUD 17ffff067 PMD 76732063 PTE 8000000075c46061
...
<4>[ 2296.045075] Call Trace:
<4>[ 2296.045095]  [<ffffffffc02f5b8a>] ? iwl_mvm_set_tx_cmd+0x2f5/0x309 [iwlmvm]
<4>[ 2296.045116]  [<ffffffffc02f5240>] ? iwl_mvm_rx_frame_release+0x65b/0xcb0 [iwlmvm]
<4>[ 2296.045139]  [<ffffffffc02f5ef3>] ? iwl_mvm_set_tx_cmd_rate+0x355/0x996 [iwlmvm]
<4>[ 2296.045161]  [<ffffffffc02f52ff>] iwl_mvm_rx_frame_release+0x71a/0xcb0 [iwlmvm]
<4>[ 2296.045183]  [<ffffffffc02f6829>] iwl_mvm_tx_skb_non_sta+0x2f5/0x347 [iwlmvm]
<4>[ 2296.045204]  [<ffffffffc02e7ac8>] iwl_mvm_unref+0x52e/0x54d [iwlmvm]
<4>[ 2296.045230]  [<ffffffffc02543c3>] __iwl7000_ieee80211_proberesp_get+0x94b/0x1cbf [iwl7000_mac80211]
<4>[ 2296.045258]  [<ffffffffc02544ea>] __iwl7000_ieee80211_proberesp_get+0xa72/0x1cbf [iwl7000_mac80211]
<4>[ 2296.045286]  [<ffffffffc02577c4>] __iwl7000_ieee80211_tx_prepare_skb+0x22b/0x24e [iwl7000_mac80211]
<4>[ 2296.045314]  [<ffffffffc025787e>] ieee80211_xmit+0x97/0xa0 [iwl7000_mac80211]
<4>[ 2296.045340]  [<ffffffffc0258500>] __ieee80211_tx_skb_tid_band+0x5d/0x157 [iwl7000_mac80211]
<4>[ 2296.045366]  [<ffffffffc0250da2>] __iwl7000_ieee80211_sta_ps_transition+0x2007/0x20bb [iwl7000_mac80211]
<4>[ 2296.045389]  [<ffffffff86e789d3>] ? cpumask_next_and+0x20/0x3e
<4>[ 2296.045413]  [<ffffffffc0251d58>] __iwl7000_ieee80211_mark_rx_ba_filtered_frames+0xf02/0x1203 [iwl7000_mac80211]
<4>[ 2296.045442]  [<ffffffffc0251f1a>] __iwl7000_ieee80211_mark_rx_ba_filtered_frames+0x10c4/0x1203 [iwl7000_mac80211]
<4>[ 2296.045472]  [<ffffffffc0252410>] __iwl7000_ieee80211_rx_napi+0x3b7/0x483 [iwl7000_mac80211]
<4>[ 2296.045496]  [<ffffffffc02f319b>] iwl_mvm_rx_rx_mpdu+0x781/0x7be [iwlmvm]
<4>[ 2296.045513]  [<ffffffff86e88043>] ? bsearch+0x4b/0x7b
<4>[ 2296.045531]  [<ffffffffc02ec6aa>] iwl_mvm_enter_d0i3+0x6a9/0x12f8 [iwlmvm]
<4>[ 2296.045552]  [<ffffffffc02b5629>] iwl_pci_unregister_driver+0x147e/0x177b [iwlwifi]
<4>[ 2296.045574]  [<ffffffffc02b6761>] iwl_pcie_irq_handler+0x4e7/0x715 [iwlwifi]
<4>[ 2296.045591]  [<ffffffff86ca4094>] ? irq_thread_dtor+0xa9/0xa9
<4>[ 2296.045604]  [<ffffffff86ca40b4>] irq_thread_fn+0x20/0x40
<4>[ 2296.045617]  [<ffffffff86ca4265>] irq_thread+0x191/0x210
<4>[ 2296.045632]  [<ffffffff872a4ee0>] ? __schedule+0x3e8/0x574
<4>[ 2296.045645]  [<ffffffff86ca3feb>] ? wake_threads_waitq+0x2d/0x2d
<4>[ 2296.045658]  [<ffffffff86ca40d4>] ? irq_thread_fn+0x40/0x40
<4>[ 2296.045673]  [<ffffffff86c7df22>] kthread+0x10e/0x116
<4>[ 2296.045687]  [<ffffffff86c66156>] ? do_exit+0x93e/0x964
<4>[ 2296.045700]  [<ffffffff86c7de14>] ? __kthread_parkme+0x67/0x67
<4>[ 2296.045714]  [<ffffffff872a837c>] ret_from_fork+0x7c/0xb0
<4>[ 2296.045727]  [<ffffffff86c7de14>] ? __kthread_parkme+0x67/0x67
<4>[ 2296.045738] Code: 49 83 7d 00 00 eb e2 e8 89 c4 ff ff 49 63 86 f0 00 00 00 b9 05 00 00 00 48 8b 75 88 48 c1 e0 06 49 03 46 08 48 89 c7 48 8b 45 88 <f3> a5 49 63 96 f0 00 00 00 66 44 8b 48 04 49 63 8e 04 01 00 00 
<1>[ 2296.045868] RIP  [<ffffffffc02bab31>] iwl_trans_pcie_tx+0xeae/0x1084 [iwlwifi]
<4>[ 2296.045887]  RSP <ffff8801778b35a8>
<4>[ 2296.045895] CR2: ffff880075c46140
<4>[ 2296.045904] ---[ end trace 2d46a7c1a1be834a ]---



===== Example stack trace/dmesg iwl_trans_pcie_tx+0x359/0x1084 for TERRA 3.18 kernel =====
<5>[ 0.000000] Linux version 3.18.0-16288-g64d05cf80004 (chrome-bot@cros-beefy264-c2) (gcc version 4.9.x 20150123 (prerelease) (4.9.2_cos_gg_4.9.2-r166-0c5a656a1322e137fa4a251f2ccc6c4022918c0a_4.9.2-r166) ) #1 SMP PREEMPT Mon Jan 8 23:22:23 PST 2018
...
<7>[ 2.162348] iwlwifi 0000:02:00.0: irq 313 for MSI/MSI-X
<4>[ 2.166088] iwlwifi 0000:02:00.0: Direct firmware load for iwl-dbg-cfg.ini failed with error -2
<6>[ 2.166503] platform vpd: Driver vpd requests probe deferral
<7>[ 2.177356] SELinux: initialized (dev loop2, type squashfs), uses xattr
<6>[ 2.186336] iwlwifi 0000:02:00.0: loaded firmware version 29.588277.0 op_mode iwlmvm
<6>[ 2.217278] iwlwifi 0000:02:00.0: Detected Intel(R) Dual Band Wireless AC 7265, REV=0x210
...
<6>[ 309.906721] wlan0: authenticate with 00:00:00:00:00:04
<6>[ 309.913463] wlan0: send auth to 00:00:00:00:00:04 (try 1/3)
<6>[ 309.914006] wlan0: aborting authentication with 00:00:00:00:00:04 by local choice (Reason: 3=DEAUTH_LEAVING)
<1>[ 309.914568] BUG: unable to handle kernel paging request at ffff8800764e00b8
<1>[ 309.914586] IP: [<ffffffffc0585fdc>] iwl_trans_pcie_tx+0x359/0x1084 [iwlwifi]
<4>[ 309.914608] PGD 3c339067 PUD 17fffe067 PMD 178fd7063 PTE 80000000764e0061
...
<4>[ 309.918336] Hardware name: GOOGLE Terra, BIOS Google_Terra.7287.154.102 08/19/2017
...
<4>[ 309.918359] RIP: 0010:[<ffffffffc0585fdc>] [<ffffffffc0585fdc>] iwl_trans_pcie_tx+0x359/0x1084 [iwlwifi]
...
<4>[ 309.918525] Call Trace:
<4>[ 309.918531] <IRQ>
<4>[ 309.918537] [<ffffffffc05c1b8a>] ? iwl_mvm_set_tx_cmd+0x2f5/0x309 [iwlmvm]
<4>[ 309.918564] [<ffffffffc05c1253>] ? iwl_mvm_rx_frame_release+0x66e/0xcb0 [iwlmvm]
<4>[ 309.918582] [<ffffffffc05c1c58>] ? iwl_mvm_set_tx_cmd_rate+0xba/0x996 [iwlmvm]
<4>[ 309.918599] [<ffffffffc05c1ef3>] ? iwl_mvm_set_tx_cmd_rate+0x355/0x996 [iwlmvm]
<4>[ 309.918617] [<ffffffffc05c12ff>] iwl_mvm_rx_frame_release+0x71a/0xcb0 [iwlmvm]
<4>[ 309.918634] [<ffffffffc05c2829>] iwl_mvm_tx_skb_non_sta+0x2f5/0x347 [iwlmvm]
<4>[ 309.918650] [<ffffffffc05b3ac8>] iwl_mvm_unref+0x52e/0x54d [iwlmvm]
<4>[ 309.918671] [<ffffffffc050b3c3>] __iwl7000_ieee80211_proberesp_get+0x94b/0x1cbf [iwl7000_mac80211]
<4>[ 309.918692] [<ffffffffc050b4ea>] __iwl7000_ieee80211_proberesp_get+0xa72/0x1cbf [iwl7000_mac80211]
<4>[ 309.918714] [<ffffffffc050f48d>] ieee80211_tx_pending+0x1c4/0x1da [iwl7000_mac80211]
<4>[ 309.918732] [<ffffffffbb4afd63>] ? run_timer_softirq+0x21f/0x242
<4>[ 309.918745] [<ffffffffbb4683dd>] tasklet_action+0x9d/0xac
<4>[ 309.918758] [<ffffffffbbaab280>] __do_softirq+0x120/0x26d
<4>[ 309.918770] [<ffffffffbbaaa03c>] do_softirq_own_stack+0x1c/0x30
<4>[ 309.918779] <EOI>
<4>[ 309.918783] [<ffffffffbb467ebd>] do_softirq+0x2e/0x34
<4>[ 309.918797] [<ffffffffbb467f33>] __local_bh_enable_ip+0x70/0x8d
<4>[ 309.918810] [<ffffffffbbaa7d93>] _raw_spin_unlock_bh+0x1c/0x1e
<4>[ 309.918825] [<ffffffffc05b28f1>] iwl_mvm_rx_mfuart_notif+0x244c/0x3079 [iwlmvm]
<4>[ 309.918843] [<ffffffffc04e94ea>] drv_sta_state+0xdf/0x296 [iwl7000_mac80211]
<4>[ 309.918861] [<ffffffffc04edcd1>] sta_set_sinfo+0x787/0x85e [iwl7000_mac80211]
<4>[ 309.918879] [<ffffffffc04eddd2>] __sta_info_destroy+0x2a/0x34 [iwl7000_mac80211]
<4>[ 309.918897] [<ffffffffc04ede18>] sta_info_destroy_addr+0x3c/0x5c [iwl7000_mac80211]
<4>[ 309.918916] [<ffffffffc052905d>] __iwl7000_ieee80211_chswitch_done+0x6db/0x1170 [iwl7000_mac80211]
<4>[ 309.918936] [<ffffffffc052ecf9>] ieee80211_mgd_deauth+0xc9/0x235 [iwl7000_mac80211]
<4>[ 309.918956] [<ffffffffc05002ba>] __iwl7000_ieee80211_csa_finish+0x5f4/0x36eb [iwl7000_mac80211]
<4>[ 309.918976] [<ffffffffc04ae018>] cfg80211_mlme_deauth+0xca/0xfb [cfg80211]
<4>[ 309.918992] [<ffffffffc049b753>] cfg80211_check_station_change+0x14b5/0x17f8 [cfg80211]
<4>[ 309.919010] [<ffffffffbb9e493a>] genl_family_rcv_msg+0x28f/0x303
<4>[ 309.919022] [<ffffffffbb9e49f5>] genl_rcv_msg+0x47/0x63
<4>[ 309.919033] [<ffffffffbb9e49ae>] ? genl_family_rcv_msg+0x303/0x303
<4>[ 309.919044] [<ffffffffbb9e4085>] netlink_rcv_skb+0x48/0x8a
<4>[ 309.919054] [<ffffffffbb9e469b>] genl_rcv+0x29/0x39
<4>[ 309.919064] [<ffffffffbb9e3b53>] netlink_unicast+0x11e/0x1a9
<4>[ 309.919075] [<ffffffffbb9e3f04>] netlink_sendmsg+0x326/0x37c
<4>[ 309.919088] [<ffffffffbb9a5285>] __sock_sendmsg_nosec+0x25/0x27
<4>[ 309.919100] [<ffffffffbb9a7bd2>] sock_sendmsg+0x7d/0xb2
<4>[ 309.919113] [<ffffffffbb530033>] ? might_fault+0x3e/0x40
<4>[ 309.919123] [<ffffffffbb9a8bd0>] ? move_addr_to_kernel+0x4e/0x6c
<4>[ 309.919135] [<ffffffffbb530033>] ? might_fault+0x3e/0x40
<4>[ 309.919146] [<ffffffffbb9a8ae1>] ___sys_sendmsg+0x271/0x312
<4>[ 309.919157] [<ffffffffbb9a8ee4>] ? SYSC_sendto+0x15b/0x188
<4>[ 309.919169] [<ffffffffbb9a9070>] __sys_sendmsg+0x51/0x83
<4>[ 309.919180] [<ffffffffbb9a90bb>] SyS_sendmsg+0x19/0x1b
<4>[ 309.919191] [<ffffffffbbaa8452>] system_call_fastpath+0x1c/0x21
...
<1>[ 309.919304] RIP [<ffffffffc0585fdc>] iwl_trans_pcie_tx+0x359/0x1084 [iwlwifi]
<4>[ 309.919319] RSP <ffff88017fd03bc8>
<4>[ 309.919325] CR2: ffff8800764e00b8
<4>[ 309.919333] ---[ end trace 574f29c78cdeeb79 ]---



===== Example stack trace/dmesg iwl_trans_pcie_tx+0x2df/0xf48 for GNAWTY 4.4 kernel =====
<5>[    0.000000] Linux version 4.4.86-11979-g09b49365a3c4 (chrome-bot@cros-beefy213-c2) (gcc version 4.9.x 20150123 (prerelease) (4.9.2_cos_gg_4.9.2-r166-0c5a656a1322e137fa4a251f2ccc6c4022918c0a_4.9.2-r166) ) #1 SMP PREEMPT Mon Jan 8 23:14:58 PST 2018
...
<7>[    0.000000] DMI: GOOGLE Gnawty, BIOS Google_Gnawty.5216.239.123 04/23/2017
...
<4>[    2.446975] iwlwifi 0000:01:00.0: Direct firmware load for iwl-dbg-cfg.ini failed with error -2
<6>[    2.542068] iwlwifi 0000:01:00.0: loaded firmware version 17.589903.0 op_mode iwlmvm
<6>[    2.578573] cfg80211: World regulatory domain updated:
<6>[    2.578583] cfg80211:  DFS Master region: unset
<6>[    2.578586] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
<6>[    2.578592] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
<6>[    2.578596] cfg80211:   (2457000 KHz - 2482000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
<6>[    2.578600] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
<6>[    2.578604] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
<6>[    2.578609] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (0 s)
<6>[    2.578613] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
<6>[    2.578617] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
<6>[    2.578621] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
...
<6>[    2.755602] iwlwifi 0000:01:00.0: Detected Intel(R) Dual Band Wireless AC 7260, REV=0x144
<6>[    2.761064] iwlwifi 0000:01:00.0: L1 Enabled - LTR Disabled
<6>[    2.761318] iwlwifi 0000:01:00.0: L1 Enabled - LTR Disabled
<6>[    2.774120] iwlwifi 0000:01:00.0: base HW address: 00:00:00:00:00:01
<7>[    2.985765] ieee80211 phy0: Selected rate control algorithm 'iwl-mvm-rs'
...
<3>[   29.323366] iwlwifi 0000:01:00.0: No association and the time event is over already...
<6>[   29.323393] wlan0: Connection to AP 00:00:00:00:00:02 lost
<6>[   29.355161] cfg80211: World regulatory domain updated:
<6>[   29.355171] cfg80211:  DFS Master region: unset
<6>[   29.355174] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
<6>[   29.355180] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
<6>[   29.355184] cfg80211:   (2457000 KHz - 2482000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
<6>[   29.355188] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
<6>[   29.355192] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
<6>[   29.355197] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (0 s)
<6>[   29.355201] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
<6>[   29.355205] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
<6>[   29.355209] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
<6>[   29.362528] cfg80211: Regulatory domain changed to country: US
<6>[   29.362538] cfg80211:  DFS Master region: unset
<6>[   29.362542] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
<6>[   29.362548] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A)
<6>[   29.362552] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 1700 mBm), (N/A)
<6>[   29.362556] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2300 mBm), (0 s)
<6>[   29.362560] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2300 mBm), (0 s)
<6>[   29.364238] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A)
<6>[   29.364247] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)
<6>[   29.402247] wlan0: authenticate with 00:00:00:00:00:03
<6>[   29.404490] wlan0: send auth to 00:00:00:00:00:03 (try 1/3)
<6>[   29.404754] wlan0: aborting authentication with 00:00:00:00:00:03 by local choice (Reason: 3=DEAUTH_LEAVING)
<1>[   29.404924] BUG: unable to handle kernel paging request at ffff880071a18368
<1>[   29.404932] IP: [<ffffffffc00f6135>] iwl_trans_pcie_tx+0x2df/0xf48 [iwlwifi]
<4>[   29.404944] PGD 17162067 PUD 17165067 PMD 71a52063 PTE 8000000071a18061
...
<4>[   29.408195] Call Trace:
<4>[   29.408199]  <IRQ>
<4>[   29.408210]  [<ffffffffc01c62a1>] ? iwl_mvm_rx_frame_release+0x6b5/0xccd [iwlmvm]
<4>[   29.408220]  [<ffffffffc01c6c7c>] ? iwl_mvm_set_tx_cmd_rate+0xba/0x94b [iwlmvm]
<4>[   29.408230]  [<ffffffffc01c6ecd>] ? iwl_mvm_set_tx_cmd_rate+0x30b/0x94b [iwlmvm]
<4>[   29.408239]  [<ffffffffc01c634b>] iwl_mvm_rx_frame_release+0x75f/0xccd [iwlmvm]
<4>[   29.408248]  [<ffffffffc01c7800>] iwl_mvm_tx_skb_non_sta+0x2f3/0x345 [iwlmvm]
<4>[   29.408256]  [<ffffffffc01b8ab1>] iwl_mvm_unref+0x534/0x551 [iwlmvm]
<4>[   29.408271]  [<ffffffffc0149f71>] __iwl7000_ieee80211_proberesp_get+0xc79/0x1fe3 [iwl7000_mac80211]
<4>[   29.408284]  [<ffffffffc014a096>] __iwl7000_ieee80211_proberesp_get+0xd9e/0x1fe3 [iwl7000_mac80211]
<4>[   29.408296]  [<ffffffffc014e209>] ieee80211_tx_pending+0x1b8/0x1ce [iwl7000_mac80211]
<4>[   29.408304]  [<ffffffff9626e7da>] tasklet_action+0x97/0xa6
<4>[   29.408311]  [<ffffffff9690a1f6>] __do_softirq+0x136/0x293
<4>[   29.408316]  [<ffffffff9690943c>] do_softirq_own_stack+0x1c/0x30
<4>[   29.408320]  <EOI>
<4>[   29.408324]  [<ffffffff9626e2d3>] do_softirq+0x2b/0x30
<4>[   29.408329]  [<ffffffff9626e343>] __local_bh_enable_ip+0x6b/0x85
<4>[   29.408334]  [<ffffffff96907302>] _raw_spin_unlock_bh+0x1c/0x1e
<4>[   29.408342]  [<ffffffffc01b78d8>] iwl_mvm_rx_mfuart_notif+0x2433/0x305e [iwlmvm]
<4>[   29.408353]  [<ffffffffc01285f0>] drv_sta_state+0xfa/0x2e9 [iwl7000_mac80211]
<4>[   29.408364]  [<ffffffffc012ce62>] sta_set_sinfo+0x76d/0x844 [iwl7000_mac80211]
<4>[   29.408375]  [<ffffffffc012cf60>] __sta_info_destroy+0x27/0x2e [iwl7000_mac80211]
<4>[   29.408386]  [<ffffffffc012cfa0>] sta_info_destroy_addr+0x39/0x56 [iwl7000_mac80211]
<4>[   29.408398]  [<ffffffffc0167240>] __iwl7000_ieee80211_chswitch_done+0x891/0x10cf [iwl7000_mac80211]
<4>[   29.408409]  [<ffffffffc016cbd5>] ieee80211_mgd_deauth+0xc9/0x235 [iwl7000_mac80211]
<4>[   29.408421]  [<ffffffffc013eedc>] __iwl7000_ieee80211_csa_finish+0x4d2/0x3789 [iwl7000_mac80211]
<4>[   29.408431]  [<ffffffffc009d66e>] cfg80211_mlme_deauth+0xeb/0x11c [cfg80211]
<4>[   29.408440]  [<ffffffffc0088a80>] cfg80211_check_station_change+0x1413/0x19c6 [cfg80211]
<4>[   29.408446]  [<ffffffff9683f9eb>] genl_family_rcv_msg+0x2a5/0x319
<4>[   29.408454]  [<ffffffff9635aca3>] ? kmem_cache_free+0xa6/0x11d
<4>[   29.408459]  [<ffffffff9683faa3>] genl_rcv_msg+0x44/0x5d
<4>[   29.408464]  [<ffffffff9683fa5f>] ? genl_family_rcv_msg+0x319/0x319
<4>[   29.408468]  [<ffffffff9683f0c7>] netlink_rcv_skb+0x47/0x88
<4>[   29.408473]  [<ffffffff9683f737>] genl_rcv+0x28/0x37
<4>[   29.408477]  [<ffffffff9683ebc7>] netlink_unicast+0x120/0x1b0
<4>[   29.408482]  [<ffffffff9683ef65>] netlink_sendmsg+0x30e/0x338
<4>[   29.408488]  [<ffffffff967ff755>] sock_sendmsg+0x33/0x41
<4>[   29.408493]  [<ffffffff967ffe9a>] ___sys_sendmsg+0x1b2/0x247
<4>[   29.408499]  [<ffffffff96277aae>] ? __set_current_blocked+0x49/0x4e
<4>[   29.408505]  [<ffffffff9628d86c>] ? __might_sleep+0x9f/0xa6
<4>[   29.408510]  [<ffffffff9628d86c>] ? __might_sleep+0x9f/0xa6
<4>[   29.408515]  [<ffffffff9628d86c>] ? __might_sleep+0x9f/0xa6
<4>[   29.408520]  [<ffffffff96341b8e>] ? __might_fault+0x35/0x37
<4>[   29.408525]  [<ffffffff968bf066>] ? unix_ioctl+0x69/0x75
<4>[   29.408530]  [<ffffffff967fc983>] ? sock_do_ioctl+0x25/0x42
<4>[   29.408535]  [<ffffffff9680026f>] __sys_sendmsg+0x51/0x83
<4>[   29.408540]  [<ffffffff9680026f>] ? __sys_sendmsg+0x51/0x83
<4>[   29.408545]  [<ffffffff968002ba>] SyS_sendmsg+0x19/0x1b
<4>[   29.408550]  [<ffffffff969076cb>] entry_SYSCALL_64_fastpath+0x1c/0x8f
<4>[   29.408554] Code: 11 c0 31 c0 e8 e7 47 17 d6 c6 05 71 27 02 00 01 48 63 83 f0 00 00 00 48 8b 4d 98 41 83 e6 1f 41 c1 e6 08 48 6b c0 28 48 03 43 18 <4c> 89 60 08 48 63 83 f0 00 00 00 48 6b c0 28 48 03 43 18 48 89
<1>[   29.408642] RIP  [<ffffffffc00f6135>] iwl_trans_pcie_tx+0x2df/0xf48 [iwlwifi]
<4>[   29.408651]  RSP <ffff88007ad03c30>
<4>[   29.408654] CR2: ffff880071a18368
<4>[   29.408658] ---[ end trace f18ad5932311b92f ]---