catch crash log

since commit: f1e1e67d97d1e9a8bb01b59ab20c45ebc985a958

crash on mt7621 + mt7612e + mt7603
log:

<7>[   43.726153] phy1-sta0: Limiting TX power to 30 (30 - 0) dBm as advertised by e2:ef:02:96:cb:0e
<6>[   44.958361] IPv6: ADDRCONF(NETDEV_CHANGE): phy1-sta0: link becomes ready
<6>[ 6528.721727] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
<6>[ 6528.729742] br-lan: port 1(lan1) entered blocking state
<6>[ 6528.734954] br-lan: port 1(lan1) entered forwarding state
<6>[ 6531.027140] mtk_soc_eth 1e100000.ethernet wan: Link is Down
<6>[ 6531.037118] br-lan: port 5(wan) entered disabled state
<6>[ 6590.900182] mt7530-mdio mdio-bus:1f lan1: Link is Down
<6>[ 6590.905725] br-lan: port 1(lan1) entered disabled state
<6>[ 6593.192199] mt7530-mdio mdio-bus:1f lan1: Link is Up - 10Mbps/Full - flow control off
<6>[ 6593.200148] br-lan: port 1(lan1) entered blocking state
<6>[ 6593.205363] br-lan: port 1(lan1) entered forwarding state
<6>[14301.372598] mt7530-mdio mdio-bus:1f lan1: Link is Down
<6>[14301.378145] br-lan: port 1(lan1) entered disabled state
<6>[14304.040509] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
<6>[14304.048529] br-lan: port 1(lan1) entered blocking state
<6>[14304.053782] br-lan: port 1(lan1) entered forwarding state
<6>[14344.604747] mt76x2e 0000:02:00.0: Firmware Version: 0.0.00
<6>[14344.610287] mt76x2e 0000:02:00.0: Build: 1
<6>[14344.614475] mt76x2e 0000:02:00.0: Build Time: 201607111443____
<6>[14344.642679] mt76x2e 0000:02:00.0: Firmware running!
<6>[14344.648879] ieee80211 phy1: Hardware restart was requested
<1>[14344.655921] CPU 2 Unable to handle kernel paging request at virtual address 00000004, epc == 843b4ef0, ra == 843b4ed8
<4>[14344.666617] Oops[#1]:
<4>[14344.668909] CPU: 2 PID: 111 Comm: kworker/2:2 Not tainted 5.15.145 #0
<4>[14344.675350] Workqueue: events cfg80211_stop_iface [cfg80211]
<4>[14344.681157] $ 0   : 00000000 00000001 82fd5a40 00000000
<4>[14344.686409] $ 4   : 00000000 00000000 00000000 00000000
<4>[14344.691649] $ 8   : 00000000 8036e6fc 00000000 1ee1d200
<4>[14344.696887] $12   : 00000002 00000000 00000402 82fd5a68
<4>[14344.702137] $16   : 842b97a0 80e99c10 82fd5964 842b97b4
<4>[14344.707382] $20   : 82fd57cc 00000000 80e8d070 00000000
<4>[14344.712650] $24   : 00000040 00000000                  
<4>[14344.717894] $28   : 80e98000 80e99c00 80860000 843b4ed8
<4>[14344.723142] Hi    : 0004cc86
<4>[14344.726025] Lo    : 8a15a40b
<4>[14344.728892] epc   : 843b4ef0 mt76_wcid_cleanup+0x88/0x1a4 [mt76]
<4>[14344.734953] ra    : 843b4ed8 mt76_wcid_cleanup+0x70/0x1a4 [mt76]
<4>[14344.741027] Status: 1100fc03	KERNEL EXL IE 
<4>[14344.745222] Cause : 4080000c (ExcCode 03)
<4>[14344.749218] BadVA : 00000004
<4>[14344.752084] PrId  : 0001992f (MIPS 1004Kc)
<4>[14344.756164] Modules linked in: ksmbd qcserial pppoe ppp_async option cdc_mbim wireguard usb_wwan sierra_net sierra rndis_host qmi_wwan pptp pppox ppp_mppe ppp_generic nft_fib_inet mt76x2e mt76x2_common mt76x02_lib mt7603e mt76 mac80211 libchacha20poly1305 ipt_REJECT huawei_cdc_ncm cfg80211 cdc_ncm cdc_ether xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_HL xt_DSCP xt_CLASSIFY usbserial usbnet usblp ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_fsm ts_bm tcp_scalable tcp_bbr slhc sch_cake poly1305_mips nft_tproxy nft_socket nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject_bridge nft_reject nft_redir nft_quota nft_queue nft_objref nft_numgen nft_nat nft_meta_bridge nft_masq nft_log nft_limit nft_hash
<4>[14344.756893]  nft_fwd_netdev nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_dup_netdev nft_ct nft_counter nft_compat nft_chain_nat nfnetlink_queue nf_tproxy_ipv6 nf_tproxy_ipv4 nf_tables nf_socket_ipv6 nf_socket_ipv4 nf_reject_ipv4 nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_log_syslog nf_dup_netdev nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_pptp nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast nf_conntrack_bridge ts_kmp nf_conntrack_amanda nf_conncount macvlan libcurve25519_generic libcrc32c ipvlan iptable_nat iptable_mangle iptable_filter ipt_ECN ipheth ip_tables crc_ccitt compat chacha_mips cdc_wdm br_netfilter natflow natcap nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 fuse ntfs3 sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact ledtrig_usbport cryptodev xt_set ip_set_list_set ip_set_hash_netportnet
<4>[14344.843782]  ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ipmac ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 nfsv4 cifs_arc4 asn1_decoder nfs msdos ip6_gre ip_gre gre sit ip6_tunnel oid_registry tunnel6 tunnel4 ip_tunnel tun ovpn_dco_v2 udp_tunnel ip6_udp_tunnel lockd sunrpc grace autofs4 dns_resolver nls_utf8 nls_iso8859_1 nls_cp437 crypto_user algif_skcipher algif_rng algif_hash algif_aead af_alg sha512_generic sha256_generic libsha256 sha1_generic seqiv jitterentropy_rng drbg md5 crypto_hw_eip93 hmac ecb des_generic libdes cmac authencesn authenc arc4 uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd ohci_platform ohci_hcd softdog fsl_mph_dr_of ehci_platform ehci_fsl sd_mod scsi_mod scsi_common ehci_hcd
<4>[14344.931418]  gpio_button_hotplug vfat fat ext4 mbcache jbd2 exfat usbcore nls_base usb_common mii crc32c_generic [last unloaded: ksmbd]
<4>[14345.030335] Process kworker/2:2 (pid: 111, threadinfo=091994b0, task=de6f8c23, tls=00000000)
<4>[14345.038761] Stack : 80b04ba0 842b97a0 00000000 82fd5964 80e99c10 80e99c10 00000000 842b9454
<4>[14345.047149]         00000000 00000010 842b97a0 82fd5964 00000010 843b5114 836be800 82fd5034
<4>[14345.055531]         836be800 00000001 82fd57cc 80e8d070 842b9c1c 842b97a0 82fd57cc 80e8c4c0
<4>[14345.063913]         842b89e0 843b5240 00000048 00000001 00000001 82fd5000 82fd5000 00000000
<4>[14345.072296]         842b84a0 80e8c4c0 82fd57cc 8430bfd4 80e99c8c 0000000f 00000000 80fb7580
<4>[14345.080674]         ...
<4>[14345.083128] Call Trace:
<4>[14345.085564] [<843b4ef0>] mt76_wcid_cleanup+0x88/0x1a4 [mt76]
<4>[14345.091248] [<843b5114>] __mt76_sta_remove+0x84/0xe8 [mt76]
<4>[14345.096835] [<843b5240>] mt76_sta_state+0xc8/0x1dc [mt76]
<4>[14345.102252] [<8430bfd4>] sta_set_sinfo+0x1088/0x1190 [mac80211]
<4>[14345.108523] 
<4>[14345.110010] Code: 00000000  8e4300e0  8e4400dc <ac830004> ac640000  ae4200dc  ae4200e0  0c1b7349  264400f0 
<4>[14345.119790] 
<4>[14345.121374] ---[ end trace 84e9f81e2e404c4d ]---

Start with the reported commit f1e1e67d97d1e9a8bb01b59ab20c45ebc985a958 and the mt76_wcid_cleanup, __mt76_sta_remove, and mt76_sta_state trace entries. Reproduce the crash on the listed mt7621, mt7612e, and mt7603 setup, then verify that restarting the interface no longer produces the kernel paging fault in cfg80211_stop_iface.