I tested linux 7.0.0-43.43 from resolute-proposed and the fix works for me.
My setup is Ubuntu 26.04.1 with a WCN7850 (17cb:1107, firmware WLAN.HMT.1.1.c7-00108) connected to a TP-Link Wi-Fi 7 router on its MLO SSID, which uses 6 GHz (320 MHz), 5 GHz and 2.4 GHz links. I used the stock in-tree ath12k module from linux-modules-7.0.0-43-generic; the P/O taint flags come from zfs and nvidia. Since I couldn't trigger a firmware crash on demand (simulate_fw_crash is blocked by lockdown with Secure Boot on), I unloaded and reloaded the driver with modprobe -r ath12k_wifi7 while associated on MLO and passing traffic. That goes through ath12k_pci_remove into ath12k_dp_rx_reo_cmd_list_cleanup, the same cleanup function that ath12k_core_restart reached in my 7.0.0-34 crashes, where a single restart produced 33 iommu_dma_unmap_phys WARNINGs. I did this three times, with 3, 3 and 2 links active, and got no WARNINGs at all, and the kernel taint stayed unchanged. I also switched between the MLO SSID and a single-link SSID repeatedly, with 14 multi-link associations and disconnects in total, and again saw no WARNINGs. No firmware restart happened during these tests, so the original restart trigger itself wasn't hit. I'm changing the tag to verification-done-resolute-linux. ** Tags removed: verification-needed-resolute-linux ** Tags added: verification-done-resolute-linux -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2169101 Title: ath12k: WCN7850 MLO double DMA-unmap/free of REO queue buffer on firmware restart corrupts memory (needs upstream 4a1b53417739) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2169101/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
