Wireless issues - Atheros AR9280 HostAP mode on 5GHz - OPNsense crashes

[adamast0r]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• [X] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• [X] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Describe the bug

When using a very supported wireless card (WLE200NX (Atheros AR9280) in AP mode in 5HGz OPNsense will crash. The wireless card is not defective since I got recently a new Atheros AR9280 which is not even from the same vendor, both crash with the same frequency. This issue has been discussed on other ticket related with the web interface problems configuring 5GHz - https://github.com/opnsense/core/issues/5765

To Reproduce

Steps to reproduce the behavior:

1. Go to Interfaces: Wireless: Devices -> add new device
2. Select 5HGz
3. Configure as HostAP mode

Alternatively just configure in the command line:

ifconfig ath0_wlan1 down;
ifconfig ath0_wlan1 mode 11na;
ifconfig ath0_wlan1 channel 36:ht
ifconfig ath0_wlan1 up;

In both configurations it is likelly that the OPNsense will crash, there are exceptions when it does not crash and that keeps working fine.

Expected behavior

Not crash when a wireless AP is configured for 5GHz.

Describe alternatives you considered

No alternative, just try multiple times - crash , reboot and try again.

Relevant log files

Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address	= 0x0
fault code		= supervisor write data, page not present
instruction pointer	= 0x20:0xffffffff80e1f4b0
stack pointer	        = 0x28:0xfffffe0062c95d40
frame pointer	        = 0x28:0xfffffe0062c95d90
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 12 (irq40: ath0)
trap number		= 12
panic: page fault
cpuid = 2
time = 1698872847
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0062c95b00
vpanic() at vpanic+0x151/frame 0xfffffe0062c95b50
panic() at panic+0x43/frame 0xfffffe0062c95bb0
trap_fatal() at trap_fatal+0x387/frame 0xfffffe0062c95c10
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe0062c95c70
calltrap() at calltrap+0x8/frame 0xfffffe0062c95c70
--- trap 0xc, rip = 0xffffffff80e1f4b0, rsp = 0xfffffe0062c95d40, rbp = 0xfffffe0062c95d90 ---
ieee80211_beacon_update() at ieee80211_beacon_update+0x7f0/frame 0xfffffe0062c95d90
ath_beacon_generate() at ath_beacon_generate+0x46/frame 0xfffffe0062c95de0
ath_beacon_proc() at ath_beacon_proc+0x241/frame 0xfffffe0062c95e30
ath_intr() at ath_intr+0x4b3/frame 0xfffffe0062c95e60
ithread_loop() at ithread_loop+0x25a/frame 0xfffffe0062c95ef0
fork_exit() at fork_exit+0x7e/frame 0xfffffe0062c95f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0062c95f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic

Additional context

There has been a discussion on a previous ticket - https://github.com/opnsense/core/issues/5765. I am just creating this one so this is better tracked. @fichtner has already some patch that can be tested.

Environment

OPNsense 23.7.8_1-amd64 (amd64, OpenSSL). PCengines APU2 with WLE200NX a/b/g/n wireless card - https://www.pcengines.ch/wle200nx.htm Other Generic AR9280 card not from Compex