This looks similar to: https://bugzilla.kernel.org/show_bug.cgi?id=204643
I hit the following WARNING while playing with network manager's new activate
hotspot UI functionality and then disabling all radio (nmcli radio wifi off):
[ 1157.323257] wlan1: deauthenticating from 34:31:XX:XX:XX:XX by local choice
(Reason: 3=DEAUTH_LEAVING)
[ 1157.323301] ------------[ cut here ]------------
[ 1157.323302] TX on unused queue 5
[ 1157.323343] WARNING: CPU: 3 PID: 6784 at
../drivers/net/wireless/intel/iwlwifi/pcie/tx.c:2346
iwl_trans_pcie_tx+0xa1e/0x1150 [iwlwifi]
[ 1157.323344] Modules linked in: tun ip6t_rpfilter ip6t_REJECT nf_reject_ipv6
ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw
ip6table_security iptablet
[ 1157.323376] snd_hda_core dell_smm_hwmon fat kvm snd_hwdep dell_wmi
dell_smbios irqbypass iwlwifi dcdbas joydev snd_pcm snd_timer sparse_keymap
mei_me cfg80211 dell_wmi_d]
[ 1157.323412] CPU: 3 PID: 6784 Comm: kworker/3:1 Not tainted
5.3.18-lp152.19-default #1 openSUSE Leap 15.2 (unreleased)
[ 1157.323413] Hardware name: Dell Inc. Latitude E7450/0YGN55, BIOS A21
05/16/2019
[ 1157.323434] Workqueue: events cfg80211_rfkill_sync_work [cfg80211]
[ 1157.323444] RIP: 0010:iwl_trans_pcie_tx+0xa1e/0x1150 [iwlwifi]
[ 1157.323447] Code: 80 3d 2b 65 03 00 00 b8 ea ff ff ff 0f 85 25 f8 ff ff 89
ce 48 c7 c7 49 6e d8 c0 89 04 24 c6 05 0d 65 03 00 01 e8 42 94 33 e1 <0f> 0b 8b
04 24 e9 03 f8 c
[ 1157.323448] RSP: 0018:ffff9f66404bf7f0 EFLAGS: 00010282
[ 1157.323449] RAX: 0000000000000000 RBX: 0000000000000005 RCX:
0000000000000006
[ 1157.323450] RDX: 0000000000000007 RSI: 0000000000000096 RDI:
ffff93915e399a10
[ 1157.323451] RBP: ffff939155e59e28 R08: 000000000000065e R09:
0000000000000001
[ 1157.323452] R10: 0000000000000005 R11: 0000000000000001 R12:
ffff9390f1cc4b00
[ 1157.323453] R13: 0000000000000005 R14: 0000000000000037 R15:
ffff9391566683e8
[ 1157.323454] FS: 0000000000000000(0000) GS:ffff93915e380000(0000)
knlGS:0000000000000000
[ 1157.323455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1157.323456] CR2: 00007f8e2af0a000 CR3: 00000002ba00a005 CR4:
00000000003606e0
[ 1157.323457] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
0000000000000000
[ 1157.323458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:
0000000000000400
[ 1157.323459] Call Trace:
[ 1157.323473] ? iwl_mvm_set_tx_cmd+0x1a2/0x480 [iwlmvm]
[ 1157.323483] ? iwl_mvm_get_tx_rate.isra.21+0x44/0xe0 [iwlmvm]
[ 1157.323491] ? iwl_mvm_get_tx_ant+0x43/0x80 [iwlmvm]
[ 1157.323499] ? iwl_mvm_set_tx_params+0x11f/0x4e0 [iwlmvm]
[ 1157.323507] iwl_mvm_tx_mpdu+0x207/0x600 [iwlmvm]
[ 1157.323516] iwl_mvm_tx_skb_sta+0x1ed/0x480 [iwlmvm]
[ 1157.323524] iwl_mvm_tx_skb+0x17/0x40 [iwlmvm]
[ 1157.323532] iwl_mvm_mac_itxq_xmit+0x7a/0xf0 [iwlmvm]
[ 1157.323559] ieee80211_queue_skb+0x2da/0x420 [mac80211]
[ 1157.323582] ieee80211_tx+0xd9/0x130 [mac80211]
[ 1157.323604] __ieee80211_tx_skb_tid_band+0x58/0x70 [mac80211]
[ 1157.323627] ieee80211_send_deauth_disassoc+0xfd/0x130 [mac80211]
[ 1157.323649] ieee80211_set_disassoc+0x3a0/0x5e0 [mac80211]
[ 1157.323679] ieee80211_mgd_deauth+0x113/0x230 [mac80211]
[ 1157.323701] cfg80211_mlme_deauth+0xaf/0x1c0 [cfg80211]
[ 1157.323720] cfg80211_mlme_down+0x7b/0x90 [cfg80211]
[ 1157.323739] cfg80211_disconnect+0x11f/0x1d0 [cfg80211]
[ 1157.323754] cfg80211_leave+0x26/0x40 [cfg80211]
[ 1157.323767] cfg80211_netdev_notifier_call+0x258/0x5b0 [cfg80211]
[ 1157.323774] ? iwl_mvm_set_tim+0x50/0x50 [iwlmvm]
[ 1157.323794] ? __iterate_interfaces+0x78/0x110 [mac80211]
[ 1157.323800] ? iwl_mvm_set_tim+0x50/0x50 [iwlmvm]
[ 1157.323817] ? __iterate_interfaces+0x78/0x110 [mac80211]
[ 1157.323831] ? ieee80211_iterate_active_interfaces_atomic+0xd/0x10
[mac80211]
[ 1157.323838] ? iwl_mvm_recalc_multicast+0x45/0x70 [iwlmvm]
[ 1157.323841] ? rtnl_is_locked+0x11/0x20
[ 1157.323843] ? inetdev_event+0x46/0x5c0
[ 1157.323850] ? iwl_mvm_configure_filter+0x61/0x80 [iwlmvm]
[ 1157.323853] notifier_call_chain+0x47/0x70
[ 1157.323855] __dev_close_many+0x5f/0x110
[ 1157.323857] dev_close_many+0x7c/0x120
[ 1157.323859] dev_close.part.104+0x3e/0x70
[ 1157.323874] cfg80211_shutdown_all_interfaces+0x6d/0xc0 [cfg80211]
[ 1157.323886] cfg80211_rfkill_sync_work+0x29/0x30 [cfg80211]
[ 1157.323889] process_one_work+0x1f4/0x3e0
[ 1157.323892] worker_thread+0x2d/0x3e0
[ 1157.323894] ? process_one_work+0x3e0/0x3e0
[ 1157.323895] kthread+0x10d/0x130
[ 1157.323897] ? kthread_park+0xa0/0xa0
[ 1157.323899] ret_from_fork+0x35/0x40
[ 1157.323902] ---[ end trace 3217541a75ee82c3 ]---
I've not been able to reproduce it so far, but will update when/if I get a
clear procedure.