When iwl_txq_update_write_ptr fails, you have a huge problem: the skb is linked on the queue, the write_ptr has been incremented, but you pretend you can just free it. johannes