Ath12k Crash During Interface Removal

Hey there, first time posting.
I’ve had this happen twice where shutting down my PC crashes my WiFi interface,
and fails to show up for a day or two after (Either in Endeavour or Windows)

The kernel logs show a NULL pointer dereference during ath12k_mac_remove_link_interface, originating from a cfg80211 workqueue.

ath12k_pci 0000:09:00.0: failed to enqueue rx buf: -28
WARNING: CPU: 5 PID: 31406 at kernel/workqueue.c:4205 __flush_work+0x345/0x360
Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
RIP: ath12k_mac_remove_link_interface.isra.0+0x3d/0x320 [ath12k]
BUG: kernel NULL pointer dereference, address: 0000000000000000

Here’s my inxi -Fxxc0z | eos-sendlog

Surprisingly the hardware shows in that file but no where else.

Full Journalctl is here

May 11 01:01:51 ms7d53 systemd[1]: Stopping User Login Management...
May 11 01:01:51 ms7d53 systemd[1]: Stopping WPA supplicant...
May 11 01:01:51 ms7d53 wpa_supplicant[859]: p2p-dev-wlan0: CTRL-EVENT-DSCP-POLICY clear_all
May 11 01:01:51 ms7d53 wpa_supplicant[859]: p2p-dev-wlan0: CTRL-EVENT-DSCP-POLICY clear_all
May 11 01:01:51 ms7d53 wpa_supplicant[859]: nl80211: deinit ifname=p2p-dev-wlan0 disabled_11b_rates=0
May 11 01:01:51 ms7d53 wpa_supplicant[859]: p2p-dev-wlan0: CTRL-EVENT-TERMINATING
May 11 01:01:51 ms7d53 kernel: wlan0: deauthenticating from ca:7f:54:37:29:fc by local choice (Reason: 3=DEAUTH_LEAVING)
May 11 01:01:51 ms7d53 systemd[1]: systemd-logind.service: Deactivated successfully.
May 11 01:01:51 ms7d53 systemd[1]: Stopped User Login Management.
May 11 01:01:51 ms7d53 systemd[1]: Stopped target User and Group Name Lookups.
May 11 01:01:51 ms7d53 kernel: ath12k_pci 0000:09:00.0: failed to enqueue rx buf: -28
May 11 01:01:51 ms7d53 wpa_supplicant[859]: nl80211: send_event_marker failed: Source based routing not supported
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9786] device (wlan0): state change: activated -> deactivating (reason 'unmanaged', managed-type: 'full')
May 11 01:01:51 ms7d53 wpa_supplicant[859]: wlan0: CTRL-EVENT-DISCONNECTED bssid=ca:7f:54:37:29:fc reason=3 locally_generated=1
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9787] manager: NetworkManager state is now DISCONNECTING
May 11 01:01:51 ms7d53 dbus-broker-launch[745]: Activation request for 'org.freedesktop.nm_dispatcher' failed.
May 11 01:01:51 ms7d53 NetworkManager[791]: <warn>  [1746950511.9865] dispatcher: (10) failed (after 0.008 sec): Could not activate remote peer 'org.freedesktop.nm_dispatcher': activation request failed: unit is invalid
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9867] device (wlan0): state change: deactivating -> unmanaged (reason 'unmanaged-quitting', managed-type: 'full')
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9867] dhcp4 (wlan0): canceled DHCP transaction
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9867] dhcp4 (wlan0): activation: beginning transaction (timeout in 45 seconds)
May 11 01:01:51 ms7d53 NetworkManager[791]: <info>  [1746950511.9867] dhcp4 (wlan0): state changed no lease
May 11 01:01:51 ms7d53 kernel: ------------[ cut here ]------------
May 11 01:01:51 ms7d53 kernel: WARNING: CPU: 5 PID: 31406 at kernel/workqueue.c:4205 __flush_work+0x345/0x360
May 11 01:01:51 ms7d53 kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq cmac ccm michael_mic nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vfat fat qrtr_mhi amd_atl intel_rapl_msr intel_rapl_common amdgpu qrtr snd_hda_codec_hdmi ath12k uvcvideo qmi_helpers snd_hda_intel kvm_amd amdxcp videobuf2_vmalloc spd5118 snd_intel_dspcfg mac80211 snd_usb_audio uvc btusb gpu_sched snd_intel_sdw_acpi videobuf2_memops kvm snd_usbmidi_lib drm_panel_backlight_quirks btrtl videobuf2_v4l2 snd_ump snd_hda_codec drm_buddy libarc4 videobuf2_common btintel drm_exec irqbypass snd_hda_core snd_rawmidi btbcm drm_suballoc_helper btmtk snd_hwdep snd_seq_device drm_ttm_helper rapl videodev pcspkr r8169 wmi_bmof cfg80211 ttm snd_pcm bluetooth realtek i2c_piix4 snd_timer i2c_algo_bit k10temp mdio_devres i2c_smbus drm_display_helper mc snd mhi rfkill cec soundcore libphy
May 11 01:01:51 ms7d53 kernel:  joydev mousedev gpio_amdpt amd_3d_vcache gpio_generic acpi_pad mac_hid loop nfnetlink ip_tables x_tables hid_generic polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 usbhid aesni_intel nvme crypto_simd cryptd nvme_core sp5100_tco ccp nvme_auth video wmi dm_mirror dm_region_hash dm_log dm_mod pkcs8_key_parser i2c_dev crypto_user
May 11 01:01:51 ms7d53 kernel: CPU: 5 UID: 0 PID: 31406 Comm: kworker/u32:6 Not tainted 6.14.5-arch1-1 #1 c825d957a847d7ef69fe0c38a80a3824a248efd9
May 11 01:01:51 ms7d53 kernel: Hardware name: Micro-Star International Co., Ltd. MS-7E62/MAG B850 TOMAHAWK MAX WIFI (MS-7E62), BIOS 2.A22 04/22/2025
May 11 01:01:51 ms7d53 kernel: Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
May 11 01:01:51 ms7d53 kernel: RIP: 0010:__flush_work+0x345/0x360
May 11 01:01:51 ms7d53 kernel: Code: 8b 04 24 4c 8b 44 24 08 65 48 8b 15 b5 c1 eb 73 48 85 c0 48 89 54 24 50 0f 85 e3 fe ff ff e9 f1 fd ff ff 0f 0b e9 6d ff ff ff <0f> 0b e9 66 ff ff ff 0f 0b e9 0e ff ff ff e8 78 4e f5 00 0f 1f 84
May 11 01:01:51 ms7d53 kernel: RSP: 0018:ffffa7a78163fd10 EFLAGS: 00010246
May 11 01:01:51 ms7d53 kernel: RAX: 0000000000000000 RBX: ffff9c2b8418e5e8 RCX: 0000000000000000
May 11 01:01:51 ms7d53 kernel: RDX: 0000000000000020 RSI: 0000000000000001 RDI: ffffa7a78163fd68
May 11 01:01:51 ms7d53 kernel: RBP: ffffa7a78163fd20 R08: 0000000000000000 R09: 0000000000000014
May 11 01:01:51 ms7d53 kernel: R10: ffff9c2c6a652140 R11: 0000000000000001 R12: 0000000000000001
May 11 01:01:51 ms7d53 kernel: R13: ffff9c2b800aa005 R14: 0000000000000000 R15: ffff9c2b9ea70378
May 11 01:01:51 ms7d53 kernel: FS:  0000000000000000(0000) GS:ffff9c329e880000(0000) knlGS:0000000000000000
May 11 01:01:51 ms7d53 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 11 01:01:51 ms7d53 kernel: CR2: 00006050aee37c10 CR3: 00000005ed022000 CR4: 0000000000f50ef0
May 11 01:01:51 ms7d53 kernel: PKRU: 55555554
May 11 01:01:51 ms7d53 kernel: Call Trace:
May 11 01:01:51 ms7d53 kernel:  <TASK>
May 11 01:01:51 ms7d53 kernel:  cancel_delayed_work_sync+0x5e/0x80
May 11 01:01:51 ms7d53 kernel:  ath12k_mac_remove_link_interface.isra.0+0x30/0x320 [ath12k 0ba1e213f5f73ed3f02e36db624ec336eaf1a602]
May 11 01:01:51 ms7d53 kernel:  ath12k_scan_vdev_clean_work+0x44/0x100 [ath12k 0ba1e213f5f73ed3f02e36db624ec336eaf1a602]
May 11 01:01:51 ms7d53 kernel:  cfg80211_wiphy_work+0x110/0x190 [cfg80211 979e8524ee9d963c6c7bde3208b9c3301a8a9a67]
May 11 01:01:51 ms7d53 kernel:  process_one_work+0x17c/0x340
May 11 01:01:51 ms7d53 kernel:  worker_thread+0x2d2/0x400
May 11 01:01:51 ms7d53 kernel:  ? __pfx_worker_thread+0x10/0x10
May 11 01:01:51 ms7d53 kernel:  kthread+0xec/0x230
May 11 01:01:51 ms7d53 kernel:  ? __pfx_kthread+0x10/0x10
May 11 01:01:51 ms7d53 kernel:  ret_from_fork+0x31/0x50
May 11 01:01:51 ms7d53 kernel:  ? __pfx_kthread+0x10/0x10
May 11 01:01:51 ms7d53 kernel:  ret_from_fork_asm+0x1a/0x30
May 11 01:01:51 ms7d53 kernel:  </TASK>
May 11 01:01:51 ms7d53 kernel: ---[ end trace 0000000000000000 ]---
May 11 01:01:51 ms7d53 kernel: BUG: kernel NULL pointer dereference, address: 0000000000000000
May 11 01:01:51 ms7d53 kernel: #PF: supervisor read access in kernel mode
May 11 01:01:51 ms7d53 kernel: #PF: error_code(0x0000) - not-present page
May 11 01:01:51 ms7d53 kernel: PGD 0 P4D 0 
May 11 01:01:52 ms7d53 kernel: Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI
May 11 01:01:52 ms7d53 kernel: CPU: 5 UID: 0 PID: 31406 Comm: kworker/u32:6 Tainted: G        W          6.14.5-arch1-1 #1 c825d957a847d7ef69fe0c38a80a3824a248efd9
May 11 01:01:52 ms7d53 kernel: Tainted: [W]=WARN
May 11 01:01:52 ms7d53 kernel: Hardware name: Micro-Star International Co., Ltd. MS-7E62/MAG B850 TOMAHAWK MAX WIFI (MS-7E62), BIOS 2.A22 04/22/2025
May 11 01:01:52 ms7d53 kernel: Workqueue: events_unbound cfg80211_wiphy_work [cfg80211]
May 11 01:01:52 ms7d53 kernel: RIP: 0010:ath12k_mac_remove_link_interface.isra.0+0x3d/0x320 [ath12k]
May 11 01:01:52 ms7d53 kernel: Code: 81 c7 d8 01 00 00 48 83 ec 08 48 8b af e0 00 00 00 4c 8b a7 40 fe ff ff e8 10 a3 4b cb f6 05 c9 c2 37 00 10 0f 85 0c 02 00 00 <83> 7d 00 01 0f 84 2b 02 00 00 48 8b ab b8 02 00 00 4c 89 e7 4d 8b
May 11 01:01:52 ms7d53 kernel: RSP: 0018:ffffa7a78163fdb8 EFLAGS: 00010246
May 11 01:01:52 ms7d53 kernel: RAX: 0000000000000000 RBX: ffff9c2b8418e410 RCX: 0000000000000000
May 11 01:01:52 ms7d53 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9c2b8418e5e8
May 11 01:01:52 ms7d53 kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000014
May 11 01:01:52 ms7d53 kernel: R10: ffff9c2c6a652140 R11: 0000000000000001 R12: 0000000000000000
May 11 01:01:52 ms7d53 kernel: R13: ffff9c2b800aa005 R14: 0000000000000000 R15: ffff9c2b9ea70378
May 11 01:01:52 ms7d53 kernel: FS:  0000000000000000(0000) GS:ffff9c329e880000(0000) knlGS:0000000000000000
May 11 01:01:52 ms7d53 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 11 01:01:52 ms7d53 kernel: CR2: 0000000000000000 CR3: 00000005ed022000 CR4: 0000000000f50ef0
May 11 01:01:52 ms7d53 kernel: PKRU: 55555554
May 11 01:01:52 ms7d53 kernel: Call Trace:
May 11 01:01:52 ms7d53 kernel:  <TASK>
May 11 01:01:52 ms7d53 kernel:  ath12k_scan_vdev_clean_work+0x44/0x100 [ath12k 0ba1e213f5f73ed3f02e36db624ec336eaf1a602]
May 11 01:01:52 ms7d53 kernel:  cfg80211_wiphy_work+0x110/0x190 [cfg80211 979e8524ee9d963c6c7bde3208b9c3301a8a9a67]
May 11 01:01:52 ms7d53 kernel:  process_one_work+0x17c/0x340
May 11 01:01:52 ms7d53 kernel:  worker_thread+0x2d2/0x400
May 11 01:01:52 ms7d53 kernel:  ? __pfx_worker_thread+0x10/0x10
May 11 01:01:52 ms7d53 kernel:  kthread+0xec/0x230
May 11 01:01:52 ms7d53 kernel:  ? __pfx_kthread+0x10/0x10
May 11 01:01:52 ms7d53 kernel:  ret_from_fork+0x31/0x50
May 11 01:01:52 ms7d53 kernel:  ? __pfx_kthread+0x10/0x10
May 11 01:01:52 ms7d53 kernel:  ret_from_fork_asm+0x1a/0x30
May 11 01:01:52 ms7d53 kernel:  </TASK>
May 11 01:01:52 ms7d53 kernel: Modules linked in: snd_seq_dummy snd_hrtimer snd_seq cmac ccm michael_mic nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vfat fat qrtr_mhi amd_atl intel_rapl_msr intel_rapl_common amdgpu qrtr snd_hda_codec_hdmi ath12k uvcvideo qmi_helpers snd_hda_intel kvm_amd amdxcp videobuf2_vmalloc spd5118 snd_intel_dspcfg mac80211 snd_usb_audio uvc btusb gpu_sched snd_intel_sdw_acpi videobuf2_memops kvm snd_usbmidi_lib drm_panel_backlight_quirks btrtl videobuf2_v4l2 snd_ump snd_hda_codec drm_buddy libarc4 videobuf2_common btintel drm_exec irqbypass snd_hda_core snd_rawmidi btbcm drm_suballoc_helper btmtk snd_hwdep snd_seq_device drm_ttm_helper rapl videodev pcspkr r8169 wmi_bmof cfg80211 ttm snd_pcm bluetooth realtek i2c_piix4 snd_timer i2c_algo_bit k10temp mdio_devres i2c_smbus drm_display_helper mc snd mhi rfkill cec soundcore libphy
May 11 01:01:52 ms7d53 kernel:  joydev mousedev gpio_amdpt amd_3d_vcache gpio_generic acpi_pad mac_hid loop nfnetlink ip_tables x_tables hid_generic polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 sha256_ssse3 sha1_ssse3 usbhid aesni_intel nvme crypto_simd cryptd nvme_core sp5100_tco ccp nvme_auth video wmi dm_mirror dm_region_hash dm_log dm_mod pkcs8_key_parser i2c_dev crypto_user
May 11 01:01:52 ms7d53 kernel: CR2: 0000000000000000
May 11 01:01:52 ms7d53 kernel: ---[ end trace 0000000000000000 ]---
May 11 01:01:52 ms7d53 kernel: RIP: 0010:ath12k_mac_remove_link_interface.isra.0+0x3d/0x320 [ath12k]
May 11 01:01:52 ms7d53 kernel: Code: 81 c7 d8 01 00 00 48 83 ec 08 48 8b af e0 00 00 00 4c 8b a7 40 fe ff ff e8 10 a3 4b cb f6 05 c9 c2 37 00 10 0f 85 0c 02 00 00 <83> 7d 00 01 0f 84 2b 02 00 00 48 8b ab b8 02 00 00 4c 89 e7 4d 8b
May 11 01:01:52 ms7d53 kernel: RSP: 0018:ffffa7a78163fdb8 EFLAGS: 00010246
May 11 01:01:52 ms7d53 kernel: RAX: 0000000000000000 RBX: ffff9c2b8418e410 RCX: 0000000000000000
May 11 01:01:52 ms7d53 kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9c2b8418e5e8
May 11 01:01:52 ms7d53 kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000014
May 11 01:01:52 ms7d53 kernel: R10: ffff9c2c6a652140 R11: 0000000000000001 R12: 0000000000000000
May 11 01:01:52 ms7d53 kernel: R13: ffff9c2b800aa005 R14: 0000000000000000 R15: ffff9c2b9ea70378
May 11 01:01:52 ms7d53 kernel: FS:  0000000000000000(0000) GS:ffff9c329e880000(0000) knlGS:0000000000000000
May 11 01:01:52 ms7d53 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 11 01:01:52 ms7d53 kernel: CR2: 0000000000000000 CR3: 00000005ed022000 CR4: 0000000000f50ef0
May 11 01:01:52 ms7d53 kernel: PKRU: 55555554
May 11 01:01:52 ms7d53 kernel: note: kworker/u32:6[31406] exited with irqs disabled
May 11 01:03:21 ms7d53 systemd[1]: wpa_supplicant.service: State 'stop-sigterm' timed out. Killing.
May 11 01:03:21 ms7d53 systemd[1]: wpa_supplicant.service: Killing process 859 (wpa_supplicant) with signal SIGKILL.
May 11 01:03:21 ms7d53 systemd[1]: NetworkManager.service: State 'stop-sigterm' timed out. Killing.
May 11 01:03:21 ms7d53 systemd[1]: NetworkManager.service: Killing process 791 (NetworkManager) with signal SIGKILL.

There seem to be some problems with the drivers of the ath12k , see also this topic.

Also this line from your hardware specs indicates there is no driver loaded.
Foxconn Band Simultaneous Wireless driver: ath12k_pci v: N/A

Thanks for the help, Looks like it was a regression in linux-firmware

Downgrading linux-firmware to 20250408.c1a774f3-1 solved the issue

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.