kernel splats on Linux 6.7.0

[chewitt]

The following kernel WARNING splats are seen on Linux 6.7.0:

[   30.551232] ------------[ cut here ]------------
[   30.551242] WARNING: CPU: 3 PID: 555 at net/wireless/nl80211.c:19298 cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   30.551367] Modules linked in: ir_rc6_decoder ir_nec_decoder 8189es(O) governor_simpleondemand meson_vdec(C) videobuf2_dma_contig videobuf2_memops cfg80211 lima v4l2_mem2mem drm_shmem_helper videobuf2_v4l2 rfkill videobuf2_common meson_ir rtc_meson_vrtc pkcs8_key_parser fuse nfnetlink
[   30.551495] CPU: 3 PID: 555 Comm: RTW_CMD_THREAD Tainted: G         C O       6.7.0 #1
[   30.551508] Hardware name: Amlogic Meson GXBB P201 Development Board (DT)
[   30.551518] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   30.551530] pc : cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   30.551612] lr : cfg80211_ch_switch_notify+0x144/0x1a8 [cfg80211]
[   30.551695] sp : ffff800082ebbc90
[   30.551704] x29: ffff800082ebbc90 x28: ffff80007a236b28 x27: ffff800082326218
[   30.551730] x26: 0000000000000001 x25: ffff00000a559700 x24: ffff800082ebbd28
[   30.551756] x23: 0000000000000000 x22: ffff00000a559000 x21: ffff00000485b000
[   30.551782] x20: 0000000000000000 x19: ffff00000ffd5800 x18: ffffffffffffffff
[   30.551807] x17: 163d000000000000 x16: 0000000000000000 x15: ffffffffffffffff
[   30.551833] x14: 0000000000000000 x13: ffff8000819da308 x12: 00000000000006ba
[   30.551858] x11: 000000000000023e x10: ffff800081a8a308 x9 : 0000000000000040
[   30.551883] x8 : ffff00000a5598a8 x7 : ffff00000a5598d8 x6 : 00000000000003e8
[   30.551909] x5 : ffff00000ffd53e8 x4 : 0000000000000000 x3 : ffff80008171a008
[   30.551934] x2 : 0000000000000000 x1 : ffff7fffa58d1000 x0 : 0000000000000000
[   30.551959] Call trace:
[   30.551968]  cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   30.552051]  rtw_cfg80211_ch_switch_notify+0xf4/0x138 [8189es]
[   30.552332]  rtw_chk_start_clnt_join+0xec/0x154 [8189es]
[   30.552517]  join_cmd_hdl+0x230/0x358 [8189es]
[   30.552692]  rtw_cmd_thread+0x48c/0x5fc [8189es]
[   30.552868]  kthread+0xfc/0x108
[   30.552884]  ret_from_fork+0x10/0x20
[   30.552900] ---[ end trace 0000000000000000 ]---
[   30.553030] ------------[ cut here ]------------
[   30.553047] WARNING: CPU: 3 PID: 555 at net/wireless/nl80211.c:19306 cfg80211_ch_switch_notify+0x1a0/0x1a8 [cfg80211]
[   30.553170] Modules linked in: ir_rc6_decoder ir_nec_decoder 8189es(O) governor_simpleondemand meson_vdec(C) videobuf2_dma_contig videobuf2_memops cfg80211 lima v4l2_mem2mem drm_shmem_helper videobuf2_v4l2 rfkill videobuf2_common meson_ir rtc_meson_vrtc pkcs8_key_parser fuse nfnetlink
[   30.553299] CPU: 3 PID: 555 Comm: RTW_CMD_THREAD Tainted: G        WC O       6.7.0 #1
[   30.553311] Hardware name: Amlogic Meson GXBB P201 Development Board (DT)
[   30.553322] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   30.553333] pc : cfg80211_ch_switch_notify+0x1a0/0x1a8 [cfg80211]
[   30.553416] lr : cfg80211_ch_switch_notify+0x144/0x1a8 [cfg80211]
[   30.553497] sp : ffff800082ebbc90
[   30.553506] x29: ffff800082ebbc90 x28: ffff80007a236b28 x27: ffff800082326218
[   30.553532] x26: 0000000000000001 x25: ffff00000a559700 x24: ffff800082ebbd28
[   30.553558] x23: 0000000000000000 x22: ffff00000a559000 x21: ffff00000485b000
[   30.553584] x20: 0000000000000000 x19: ffff00000ffd5800 x18: ffffffffffffffff
[   30.553609] x17: 163d000000000000 x16: 0000000000000000 x15: ffffffffffffffff
[   30.553634] x14: 0000000000000000 x13: ffff8000819da308 x12: 00000000000006ba
[   30.553660] x11: 000000000000023e x10: ffff800081a8a308 x9 : 0000000000000040
[   30.553685] x8 : ffff00000a5598a8 x7 : ffff00000a5598d8 x6 : 00000000000003e8
[   30.553710] x5 : ffff00000ffd53e8 x4 : 0000000000000000 x3 : ffff80008171a008
[   30.553735] x2 : 0000000000000000 x1 : ffff7fffa58d1000 x0 : 0000000000000000
[   30.553761] Call trace:
[   30.553769]  cfg80211_ch_switch_notify+0x1a0/0x1a8 [cfg80211]
[   30.553852]  rtw_cfg80211_ch_switch_notify+0xf4/0x138 [8189es]
[   30.554142]  rtw_chk_start_clnt_join+0xec/0x154 [8189es]
[   30.554341]  join_cmd_hdl+0x230/0x358 [8189es]
[   30.554530]  rtw_cmd_thread+0x48c/0x5fc [8189es]
[   30.554717]  kthread+0xfc/0x108
[   30.554732]  ret_from_fork+0x10/0x20
[   30.554746] ---[ end trace 0000000000000000 ]---
[   30.554863] ------------[ cut here ]------------
[   30.554876] WARNING: CPU: 3 PID: 555 at net/wireless/nl80211.c:3786 nl80211_send_chandef+0x180/0x190 [cfg80211]
[   30.555006] Modules linked in: ir_rc6_decoder ir_nec_decoder 8189es(O) governor_simpleondemand meson_vdec(C) videobuf2_dma_contig videobuf2_memops cfg80211 lima v4l2_mem2mem drm_shmem_helper videobuf2_v4l2 rfkill videobuf2_common meson_ir rtc_meson_vrtc pkcs8_key_parser fuse nfnetlink
[   30.555132] CPU: 3 PID: 555 Comm: RTW_CMD_THREAD Tainted: G        WC O       6.7.0 #1
[   30.555144] Hardware name: Amlogic Meson GXBB P201 Development Board (DT)
[   30.555153] pstate: a0000005 (NzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   30.555165] pc : nl80211_send_chandef+0x180/0x190 [cfg80211]
[   30.555253] lr : nl80211_send_chandef+0x34/0x190 [cfg80211]
[   30.555336] sp : ffff800082ebbbd0
[   30.555344] x29: ffff800082ebbbd0 x28: ffff00000a559000 x27: 0000000000000000
[   30.555370] x26: ffff00000ffd5800 x25: ffff80007a112230 x24: ffff00001413b014
[   30.555396] x23: 0000000000000000 x22: ffff800082ebbd28 x21: 0000000000000058
[   30.555421] x20: ffff00000923a400 x19: ffff800082ebbd28 x18: ffffffffffffffff
[   30.555447] x17: 163d000000000000 x16: 0000000000000000 x15: ffffffffffffffff
[   30.555473] x14: 0000000000000000 x13: ffff8000819da308 x12: 00000000000006ba
[   30.555499] x11: 000000000000023e x10: 0000000000000001 x9 : 0000000000000000
[   30.555524] x8 : 0000000000000003 x7 : 0000000000000000 x6 : 0000000000000003
[   30.555549] x5 : 00000000ffffe000 x4 : ffff800082ebbc88 x3 : 000000000000001c
[   30.555574] x2 : 0000000000000000 x1 : 000000000000098f x0 : 0000000000000000
[   30.555601] Call trace:
[   30.555609]  nl80211_send_chandef+0x180/0x190 [cfg80211]
[   30.555697]  nl80211_ch_switch_notify.constprop.0+0xd4/0x1fc [cfg80211]
[   30.555779]  cfg80211_ch_switch_notify+0xdc/0x1a8 [cfg80211]
[   30.555860]  rtw_cfg80211_ch_switch_notify+0xf4/0x138 [8189es]
[   30.556154]  rtw_chk_start_clnt_join+0xec/0x154 [8189es]
[   30.556359]  join_cmd_hdl+0x230/0x358 [8189es]
[   30.556544]  rtw_cmd_thread+0x48c/0x5fc [8189es]
[   30.556727]  kthread+0xfc/0x108
[   30.556743]  ret_from_fork+0x10/0x20
[   30.556758] ---[ end trace 0000000000000000 ]---

[CGarces]

@chewitt please test again after the last PR.

[chewitt]

@CGarces thanks, I've updated the ES/FS drivers in my private image for testing. I'm only missing Linux 6.7 compile patches for RTL81292DU now.. then I can bump the Amlogic kernel in the LE repo. Any ideas?

[CGarces]

Try #105

[chewitt]

@CGarces the user reports the splat is still happening with the bumped driver:

[   25.963412] ------------[ cut here ]------------
[   25.963422] WARNING: CPU: 1 PID: 566 at net/wireless/nl80211.c:19298 cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   25.963556] Modules linked in: ir_rc6_decoder ir_nec_decoder 8189es(O) meson_vdec(C) videobuf2_dma_contig governor_simpleondemand videobuf2_memops cfg80211 v4l2_mem2mem rfkill lima drm_shmem_helper videobuf2_v4l2 videobuf2_common meson_ir rtc_meson_vrtc pkcs8_key_parser fuse nfnetlink
[   25.963685] CPU: 1 PID: 566 Comm: RTW_CMD_THREAD Tainted: G         C O       6.7.1 #1
[   25.963698] Hardware name: Amlogic Meson GXBB P201 Development Board (DT)
[   25.963708] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[   25.963719] pc : cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   25.963802] lr : cfg80211_ch_switch_notify+0x144/0x1a8 [cfg80211]
[   25.963888] sp : ffff800082d13c50
[   25.963896] x29: ffff800082d13c50 x28: ffff80007a1c5818 x27: ffff8000822fe220
[   25.963922] x26: 00000000000012e0 x25: ffff00000b234700 x24: ffff800082d13ce8
[   25.963948] x23: 0000000000000000 x22: ffff00000b234000 x21: ffff000004c9e000
[   25.963973] x20: 0000000000000000 x19: ffff00000fbf0800 x18: ffffffffffffffff
[   25.963998] x17: 3a6d756e5f706120 x16: 2c303a6d756e5f61 x15: ffffffffffffffff
[   25.964023] x14: 0000000000000000 x13: ffff80008197a308 x12: 000000000000074d
[   25.964048] x11: 000000000000026f x10: ffff800081a2a308 x9 : 0000000000000040
[   25.964073] x8 : ffff00000b2348a8 x7 : ffff00000b2348d8 x6 : 00000000000003e8
[   25.964098] x5 : ffff00000fbf03e8 x4 : 0000000000000000 x3 : ffff8000816ba008
[   25.964123] x2 : 0000000000000000 x1 : ffff7fffa5907000 x0 : 0000000000000000
[   25.964149] Call trace:
[   25.964157]  cfg80211_ch_switch_notify+0x148/0x1a8 [cfg80211]
[   25.964248]  rtw_cfg80211_ch_switch_notify+0xfc/0x140 [8189es]
[   25.964563]  rtw_chk_start_clnt_join+0x49c/0x4c8 [8189es]
[   25.964771]  join_cmd_hdl+0x230/0x358 [8189es]
[   25.964978]  rtw_cmd_thread+0x48c/0x5fc [8189es]
[   25.965177]  kthread+0xfc/0x108
[   25.965192]  ret_from_fork+0x10/0x20
[   25.965208] ---[ end trace 0000000000000000 ]---
[   25.965434] ------------[ cut here ]------------

The full dmesg log is here: https://paste.libreelec.tv/literate-bedbug.log

[CGarces]

If the error is reproducible, can you please try this?

#109

[chewitt]

@CGarces still splatting with #109 added to the image via local patch https://paste.libreelec.tv/unbiased-cattle.log

[Shestoperd]

I have a similar problem on kernel 6.12. The module still works.

[   34.796167] 8189es: loading out-of-tree module taints kernel.
[   35.166074] bFWReady == _FALSE call reset 8051...
[   35.609229] sun4i-emac 1c0b000.ethernet end0: renamed from eth0
[   45.831756] ------------[ cut here ]------------
[   45.836507] WARNING: CPU: 0 PID: 327 at net/wireless/nl80211.c:19581 cfg80211_ch_switch_notify+0x1cc/0x1d4 [cfg80211]
[   45.847761] Modules linked in: evdev sun4i_gpadc_iio 8189es(O) sun4i_codec axp20x_pek snd_soc_core ac97_bus snd_pcm_dmaengine snd_pcm sun4i_ts snd_timer sun4i_gpadc sun4i_ss sunxi_wdt sunxi_cedrus(C) videobuf2_dma_contig v4l2_mem2mem videobuf2_memops videobuf2_v4l2 videobuf2_common sun4i_emac mdio_sun4i uio_pdrv_genirq uio cfg80211 rfkill sch_fq_codel fuse dm_mod nfnetlink ip_tables x_tables sun4i_backend lima sun4i_drm_hdmi sun4i_drm sun4i_frontend sun4i_tcon sun8i_tcon_top display_connector
[   45.891612] CPU: 0 UID: 0 PID: 327 Comm: RTW_CMD_THREAD Tainted: G         C O       6.12.1-2-armv7-ARCH #1
[   45.901361] Tainted: [C]=CRAP, [O]=OOT_MODULE
[   45.905716] Hardware name: Allwinner sun4i/sun5i Families
[   45.911113] Call trace:
[   45.911128]  unwind_backtrace from show_stack+0x10/0x14
[   45.918917]  show_stack from dump_stack_lvl+0x50/0x64
[   45.923991]  dump_stack_lvl from __warn+0x7c/0xd4
[   45.928721]  __warn from warn_slowpath_fmt+0x160/0x1ec
[   45.933874]  warn_slowpath_fmt from cfg80211_ch_switch_notify+0x1cc/0x1d4 [cfg80211]
[   45.941929]  cfg80211_ch_switch_notify [cfg80211] from rtw_cfg80211_ch_switch_notify+0x100/0x150 [8189es]
[   45.953583]  rtw_cfg80211_ch_switch_notify [8189es] from rtw_chk_start_clnt_join+0x23c/0x37c [8189es]
[   45.964646]  rtw_chk_start_clnt_join [8189es] from join_cmd_hdl+0x230/0x348 [8189es]
[   45.973843]  join_cmd_hdl [8189es] from rtw_cmd_thread+0x158/0x42c [8189es]
[   45.982189]  rtw_cmd_thread [8189es] from kthread+0xf8/0x128
[   45.988586]  kthread from ret_from_fork+0x14/0x28
[   45.993307] Exception stack(0xf0c6dfb0 to 0xf0c6dff8)
[   45.998365] dfa0:                                     00000000 00000000 00000000 00000000
[   46.006540] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   46.014713] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[   46.021460] ---[ end trace 0000000000000000 ]---

$ nmcli c
NAME                UUID                                  TYPE      DEVICE
XxXxXxXxX           b9f07e79-83ac-4db5-80e0-56fb6711cf8d  wifi      wlan0
lo                  98998680-29ea-4d65-a33d-507cbc1f7166  loopback  lo
Wired connection 1  2b457ac6-5e3b-321c-9be7-ef9a93481e36  ethernet  --

$ nmcli d
DEVICE         TYPE      STATE                   CONNECTION
wlan0          wifi      connected               XxXxXxXxX
lo             loopback  connected (externally)  lo
wlan1          wifi      disconnected            --
p2p-dev-wlan1  wifi-p2p  disconnected            --
end0           ethernet  unavailable             --