Bug 1367781

Created attachment 1191628 [details]
dmesg output

Description of problem:
WiFi constantly disconnects and reconnects, until it remains down.
Lenovo Thinkpad T61 with iwl4965.

Version-Release number of selected component (if applicable):
kernel-4.6.6-300.fc24.x86_64
kernel-core-4.6.6-300.fc24.x86_64
kernel-debug-core-4.6.6-300.fc24.x86_64
kernel-debug-modules-extra-4.6.6-300.fc24.x86_64
kernel-debug-modules-4.6.6-300.fc24.x86_64
kernel-headers-4.6.6-300.fc24.x86_64
kernel-modules-4.6.6-300.fc24.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Run XFCE session with NetworkManager applet in the panel

Actual results:
Get various disconnects, until the applet shows no wifis anymore at all

Expected results:
Stable WiFi, like with the 4.6.4 kernel

Additional info:
I think it started with the 4.6.5 kernel, happens also with 4.6.6.

Full dmesg output attached (I had to switch to wired to be able to file this bug report); some relevant lines:

iwl4965 0000:03:00.0: Error sending C_ADD_STA: time out after 500ms.
iwl4965 0000:03:00.0: Error sending C_ADD_STA: time out after 500ms.
wls3: failed to remove key (0, 4c:72:b9:29:ec:e8) from hardware (-110)
iwl4965 0000:03:00.0: Error sending C_RXON: time out after 500ms.
iwl4965 0000:03:00.0: Error setting new RXON (-110)
iwl4965 0000:03:00.0: Error sending C_ADD_STA: time out after 500ms.
iwl4965 0000:03:00.0: HARDWARE GONE?? INTA == 0xffffffff
WARNING: CPU: 1 PID: 39 at drivers/net/wireless/intel/iwlegacy/common.c:116 _il_grab_nic_access+0xa2/0xb0 [iwlegacy]
Timeout waiting for ucode processor access (CSR_GP_CNTRL 0xffffffff)
CPU: 1 PID: 39 Comm: kworker/1:1 Not tainted 4.6.6-300.fc24.x86_64+debug #1
Hardware name: LENOVO 766313U/766313U, BIOS 7LETC5WW (2.25 ) 11/14/2008
Workqueue: pciehp-3 pciehp_power_thread
 0000000000000086 00000000d3b880a1 ffff880139c233c8 ffffffff81458cb5
 ffff880139c23418 0000000000000000 ffff880139c23408 ffffffff810b2a7b
 0000007400000000 0000000000000000 ffff880096b82860 0000000000000082
Call Trace:
 [<ffffffff81458cb5>] dump_stack+0x86/0xc1
 [<ffffffff810b2a7b>] __warn+0xcb/0xf0
 [<ffffffff810b2aff>] warn_slowpath_fmt+0x5f/0x80
 [<ffffffffc07201b2>] _il_grab_nic_access+0xa2/0xb0 [iwlegacy]
 [<ffffffffc0720335>] il_wr_prph+0x35/0x90 [iwlegacy]
 [<ffffffffc07717af>] il4965_txq_agg_disable+0x5f/0x220 [iwl4965]
 [<ffffffffc0771b00>] il4965_tx_agg_stop+0x190/0x300 [iwl4965]
 [<ffffffffc0771e93>] il4965_mac_ampdu_action+0x223/0x2c0 [iwl4965]
 [<ffffffffc062780b>] drv_ampdu_action+0xdb/0x320 [mac80211]
 [<ffffffffc063a7a9>] ___ieee80211_stop_tx_ba_session+0x159/0x300 [mac80211]
 [<ffffffffc063b237>] __ieee80211_stop_tx_ba_session+0x37/0x50 [mac80211]
 [<ffffffffc06386af>] ieee80211_sta_tear_down_BA_sessions+0x3f/0x70 [mac80211]
 [<ffffffffc06292ee>] __sta_info_destroy_part1+0x6e/0xa60 [mac80211]
 [<ffffffffc062ee15>] __sta_info_flush+0x155/0x1b0 [mac80211]
 [<ffffffffc068ac4b>] ieee80211_set_disassoc+0xcb/0x440 [mac80211]
 [<ffffffffc0692d87>] ieee80211_mgd_deauth+0x307/0x7d0 [mac80211]
 [<ffffffffc064a6d8>] ieee80211_deauth+0x18/0x20 [mac80211]
 [<ffffffffc04fd1ca>] cfg80211_mlme_deauth+0x11a/0x350 [cfg80211]
 [<ffffffffc04fd816>] cfg80211_mlme_down+0x86/0xd0 [cfg80211]
 [<ffffffffc050342f>] cfg80211_disconnect+0x34f/0x360 [cfg80211]
 [<ffffffff8126b84d>] ? kfree+0x26d/0x2e0
 [<ffffffffc04c8ad1>] __cfg80211_leave+0xb1/0x1a0 [cfg80211]
 [<ffffffffc04c8bf0>] cfg80211_leave+0x30/0x40 [cfg80211]
 [<ffffffffc04c8f5e>] cfg80211_netdev_notifier_call+0x35e/0x7e0 [cfg80211]
 [<ffffffff8113098d>] ? debug_lockdep_rcu_enabled+0x1d/0x20
 [<ffffffff8115a006>] ? __module_address+0x56/0x130
 [<ffffffffc04c8c00>] ? cfg80211_leave+0x40/0x40 [cfg80211]
 [<ffffffff8115a0f2>] ? __module_text_address+0x12/0x60
 [<ffffffff810db99e>] notifier_call_chain+0x3e/0xb0
 [<ffffffff810dba36>] raw_notifier_call_chain+0x16/0x20
 [<ffffffff81775885>] call_netdevice_notifiers_info+0x35/0x60
 [<ffffffff81775c2d>] __dev_close_many+0x6d/0x110
 [<ffffffff81775d56>] dev_close_many+0x86/0x130
 [<ffffffff81778265>] dev_close.part.80+0x45/0x70
 [<ffffffff817782aa>] dev_close+0x1a/0x20
 [<ffffffffc04c83b4>] cfg80211_shutdown_all_interfaces+0x44/0xa0 [cfg80211]
 [<ffffffffc0645fa7>] ieee80211_remove_interfaces+0x57/0x1b0 [mac80211]
 [<ffffffffc0620b9a>] ieee80211_unregister_hw+0x4a/0x120 [mac80211]
 [<ffffffffc076b9c6>] il4965_pci_remove+0x1f6/0x210 [iwl4965]
 [<ffffffff814b08f9>] pci_device_remove+0x39/0xc0
 [<ffffffff815c20a1>] __device_release_driver+0xa1/0x160
 [<ffffffff815c2185>] device_release_driver+0x25/0x40
 [<ffffffff814a92ba>] pci_stop_bus_device+0x8a/0xa0
 [<ffffffff814a93b2>] pci_stop_and_remove_bus_device+0x12/0x20
 [<ffffffff814c41dd>] pciehp_unconfigure_device+0xad/0x1b0
 [<ffffffff814c3c85>] pciehp_disable_slot+0x55/0xe0
 [<ffffffff814c3da3>] pciehp_power_thread+0x93/0xb0
 [<ffffffff810d2ac2>] process_one_work+0x242/0x700
 [<ffffffff810d2a3a>] ? process_one_work+0x1ba/0x700
 [<ffffffff810d2fce>] worker_thread+0x4e/0x490
 [<ffffffff810d2f80>] ? process_one_work+0x700/0x700
 [<ffffffff810d2f80>] ? process_one_work+0x700/0x700
 [<ffffffff810da3c1>] kthread+0x101/0x120
 [<ffffffff811113c5>] ? trace_hardirqs_on_caller+0xf5/0x1b0
 [<ffffffff818d0bb2>] ret_from_fork+0x22/0x50
 [<ffffffff810da2c0>] ? kthread_create_on_node+0x250/0x250
---[ end trace c14d0bc37c05cc35 ]---