https://bugzilla.kernel.org/show_bug.cgi?id=194843 --- Comment #8 from Johannes Hirte (johannes.hirte@xxxxxxxxxxxxx) --- (In reply to Michel Dänzer from comment #7) > I wonder if there might be memory corruption going on, in which case > enabling CONFIG_KASAN for the kernel build might give more clues. I was testing the last days with KASAN enabled and didn't hit one hang or other BUG message in the logs. Today I've upgraded the RAM from one 4G module to two 8G modules and now the first hit directly after boot: [ 104.834811] wlp2s0: authenticate with 02:a0:f9:37:8e:a6 [ 104.838674] ================================================================== [ 104.838715] BUG: KASAN: global-out-of-bounds in iwl_mvm_mac_ctxt_cmd_common+0x14b5/0x1610 [iwlmvm] at addr ffffffffa0d4a336 [ 104.838724] Read of size 2 by task wpa_supplicant/4039 [ 104.838739] Address belongs to variable iwl_drv_exit+0xf66f/0x339 [iwlwifi] [ 104.838750] CPU: 2 PID: 4039 Comm: wpa_supplicant Not tainted 4.11.0-rc7-kasan-00001-g73080f5e1d5b #171 [ 104.838755] Hardware name: HP HP ProBook 645 G2/80FE, BIOS N77 Ver. 01.07 11/01/2016 [ 104.838760] Call Trace: [ 104.838772] dump_stack+0x4f/0x66 [ 104.838781] kasan_report+0x4da/0x510 [ 104.838798] ? iwl_mvm_mac_ctxt_cmd_common+0x14b5/0x1610 [iwlmvm] [ 104.838805] ? update_curr+0x14b/0x490 [ 104.838812] ? wake_atomic_t_function+0x2b0/0x2b0 [ 104.838819] __asan_report_load2_noabort+0x14/0x20 [ 104.838835] iwl_mvm_mac_ctxt_cmd_common+0x14b5/0x1610 [iwlmvm] [ 104.838854] ? iwl_mvm_channel_switch_noa_notif+0x40f/0x410 [iwlmvm] [ 104.838870] ? iwl_mvm_mac_ctxt_send_beacon+0xcb0/0xcb0 [iwlmvm] [ 104.838885] ? iwl_mvm_send_cmd_pdu+0x91/0xb0 [iwlmvm] [ 104.838901] ? iwl_mvm_send_cmd+0x160/0x160 [iwlmvm] [ 104.838917] iwl_mvm_mac_ctxt_cmd_sta+0xd1/0xe70 [iwlmvm] [ 104.838933] ? iwl_mvm_mac_ctxt_cmd_common+0x1610/0x1610 [iwlmvm] [ 104.838949] ? iwl_mvm_phy_ctxt_apply.constprop.3+0x31f/0x5d0 [iwlmvm] [ 104.838966] ? iwl_mvm_ref_taken+0x150/0x150 [iwlmvm] [ 104.838982] iwl_mvm_mac_ctx_send+0x68/0x110 [iwlmvm] [ 104.838996] iwl_mvm_mac_ctxt_changed+0x68/0x180 [iwlmvm] [ 104.839011] iwl_mvm_bss_info_changed+0x2f8/0xec0 [iwlmvm] [ 104.839043] ieee80211_bss_info_change_notify+0x177/0x4c0 [mac80211] [ 104.839070] ? __ieee80211_recalc_txpower+0x111/0x320 [mac80211] [ 104.839097] ieee80211_assign_vif_chanctx+0x7ce/0xf80 [mac80211] [ 104.839123] ieee80211_vif_use_channel+0x3ad/0x780 [mac80211] [ 104.839149] ieee80211_prep_connection+0x55b/0x1cf0 [mac80211] [ 104.839174] ? ieee80211_handle_bss_capability+0x220/0x220 [mac80211] [ 104.839182] ? __kmalloc+0x126/0x220 [ 104.839207] ieee80211_mgd_auth+0x69d/0xdd0 [mac80211] [ 104.839232] ? ieee80211_mlme_notify_scan_completed+0x1c0/0x1c0 [mac80211] [ 104.839261] ieee80211_auth+0x13/0x20 [mac80211] [ 104.839291] cfg80211_mlme_auth+0x2a7/0x6b0 [cfg80211] [ 104.839298] ? unwind_get_return_address+0x1e0/0x1e0 [ 104.839319] ? cfg80211_rx_mgmt+0x710/0x710 [cfg80211] [ 104.839342] ? parse_station_flags.isra.36+0x490/0x490 [cfg80211] [ 104.839363] nl80211_authenticate+0x8f7/0xfe0 [cfg80211] [ 104.839385] ? nl80211_parse_key+0xe70/0xe70 [cfg80211] [ 104.839406] ? nl80211_pre_doit+0xcd/0x560 [cfg80211] [ 104.839414] ? nla_parse+0xde/0x210 [ 104.839422] genl_family_rcv_msg+0x5c8/0x10f0 [ 104.839429] ? __alloc_skb+0x31f/0x560 [ 104.839435] ? genl_rcv+0x40/0x40 [ 104.839443] ? try_to_wake_up+0xb8/0x1080 [ 104.839450] ? alloc_skb_with_frags+0x8d/0x4c0 [ 104.839458] genl_rcv_msg+0x9b/0x120 [ 104.839465] netlink_rcv_skb+0x23b/0x340 [ 104.839471] ? genl_family_rcv_msg+0x10f0/0x10f0 [ 104.839477] genl_rcv+0x23/0x40 [ 104.839483] netlink_unicast+0x438/0x620 [ 104.839489] ? netlink_attachskb+0x640/0x640 [ 104.839497] netlink_sendmsg+0x86f/0xb60 [ 104.839503] ? netlink_broadcast+0x10/0x10 [ 104.839510] ? netlink_broadcast+0x10/0x10 [ 104.839516] sock_sendmsg+0xb5/0xf0 [ 104.839522] ___sys_sendmsg+0x6a2/0x8c0 [ 104.839529] ? ___sys_recvmsg+0x333/0x590 [ 104.839535] ? SYSC_sendto+0x300/0x300 [ 104.839541] ? sock_sendmsg+0xb5/0xf0 [ 104.839547] ? sock_write_iter+0x1e0/0x3b0 [ 104.839553] ? _raw_spin_unlock_irq+0x39/0x60 [ 104.839559] ? sock_sendmsg+0xf0/0xf0 [ 104.839567] ? __vfs_write+0x299/0x620 [ 104.839573] ? vfs_dedupe_get_page.isra.20+0x1d0/0x1d0 [ 104.839580] ? __fdget+0xe/0x10 [ 104.839587] __sys_sendmsg+0xc1/0x140 [ 104.839592] ? __sys_sendmsg+0xc1/0x140 [ 104.839598] ? SyS_shutdown+0x170/0x170 [ 104.839605] ? vfs_write+0x305/0x490 [ 104.839613] ? exit_to_usermode_loop+0x75/0xf0 [ 104.839620] SyS_sendmsg+0xd/0x20 [ 104.839626] entry_SYSCALL_64_fastpath+0x13/0x94 [ 104.839632] RIP: 0033:0x7fb02a23fad7 [ 104.839637] RSP: 002b:00007ffdd3d73b28 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.839645] RAX: ffffffffffffffda RBX: 000000000185daf0 RCX: 00007fb02a23fad7 [ 104.839649] RDX: 0000000000000000 RSI: 00007ffdd3d73b80 RDI: 0000000000000006 [ 104.839654] RBP: 00007fb02a4e6ae0 R08: 0000000000000000 R09: 00000000000000a6 [ 104.839658] R10: 0000000001867d90 R11: 0000000000000246 R12: 0000000000000000 [ 104.839663] R13: 0000000000000003 R14: 0000000000000011 R15: 000000000185d8c0 [ 104.839669] Memory state around the buggy address: [ 104.839676] ffffffffa0d4a200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.839682] ffffffffa0d4a280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.839687] >ffffffffa0d4a300: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 00 [ 104.839691] ^ [ 104.839696] ffffffffa0d4a380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.839702] ffffffffa0d4a400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.839705] ================================================================== [ 104.839709] Disabling lock debugging due to kernel taint [ 104.843536] wlp2s0: send auth to 02:a0:f9:37:8e:a6 (try 1/3) [ 104.849308] wlp2s0: authenticated -- You are receiving this mail because: You are watching the assignee of the bug. _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx https://lists.freedesktop.org/mailman/listinfo/dri-devel
