This kernel is larded up with a fair amount of my patches, so it could be my bug. But, in case someone sees something similar, here's my crash: It hit this BUG_ON in core.h: static inline struct cfg80211_registered_device *wiphy_to_dev(struct wiphy *wiphy) { BUG_ON(!wiphy); return container_of(wiphy, struct cfg80211_registered_device, wiphy); } Test system was 32 ath10k stations, and I had just rebooted the AP machine... ------------[ cut here ]------------ kernel BUG at /mnt/sda/home/greearb/git/linux-3.14.dev.y/net/wireless/core.h:91! invalid opcode: 0000 [#1] PREEMPT SMP Modules linked in: ath10k_pci ath10k_core ath5k ath9k ath9k_common ath9k_hw ath mac80211 cfg80211 nf_nat_ipv4 nf_nat] CPU: 3 PID: 9663 Comm: kworker/u8:2 Tainted: G WC O 3.14.0+ #17 Hardware name: To be filled by O.E.M. To be filled by O.E.M./HURONRIVER, BIOS 4.6.5 05/02/2012 ath10k: Creating vdev id: 17 map: 3230793728 ath10k: mac vdev create 17 (add interface) type 2 subtype 0 ath10k: ep 2 used 1 credits, remaining 5 dbg 1896910865 (0x71109011) ath10k: ep 2 used 1 credits, remaining 4 dbg 1896910874 (0x7110901a) ath10k: ep 2 used 1 credits, remaining 3 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 2 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 1 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910874 (0x7110901a) ath10k: ep 2 got 1 credits tot 1 ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910874 (0x7110901a) ath10k: mac vdev 17 cts_prot 0 ath10k: ep 2 got 5 credits tot 5 ath10k: ep 2 got 1 credits tot 6 ath10k: ep 2 used 1 credits, remaining 5 dbg 1896910874 (0x7110901a) ath10k: mac vdev 17 slot_time 1 ath10k: ep 2 used 1 credits, remaining 4 dbg 1896910874 (0x7110901a) ath10k: mac vdev 17 preamble 1n ath10k: ep 2 used 1 credits, remaining 3 dbg 1896910874 (0x7110901a) ath10k: ep 2 used 1 credits, remaining 2 dbg 1896910857 (0x71109009) ath10k: ep 2 used 1 credits, remaining 1 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910896 (0x71109030) ath10k: ep 2 got 1 credits tot 1 ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910857 (0x71109009) ath10k: ep 2 got 6 credits tot 6 ath10k: ep 2 used 1 credits, remaining 5 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 4 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 3 dbg 1896910857 (0x71109009) ath10k: ep 2 used 1 credits, remaining 2 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 1 dbg 1896910896 (0x71109030) ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910857 (0x71109009) ath10k: ep 2 got 1 credits tot 1 ath10k: ep 2 used 1 credits, remaining 0 dbg 1896910896 (0x71109030) ath10k: ep 2 got 6 credits tot 6 ath10k: ep 2 used 1 credits, remaining 5 dbg 1896910896 (0x71109030) ath10k: ep 2 got 1 credits tot 6 IPv6: ADDRCONF(NETDEV_UP): sta217: link is not ready Workqueue: phy1 ieee80211_scan_work [mac80211] task: ffff88021622c2a0 ti: ffff8800d579e000 task.ti: ffff8800d579e000 RIP: 0010:[<ffffffffa0bbb15a>] [<ffffffffa0bbb15a>] wiphy_to_dev+0x9/0x14 [cfg80211] RSP: 0018:ffff8800d579fce8 EFLAGS: 00010246 RAX: ffff8800d4849401 RBX: ffff880214b96000 RCX: 000000018010000e RDX: 000000018010000f RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8800d579fce8 R08: 0000000000000006 R09: ffffffffa0bfb868 R10: ffffffffa0bfb868 R11: 0000000000000000 R12: ffff8800d54ea500 R13: ffff8800d5480a01 R14: 0000000000000022 R15: ffff8800d54ea4a8 FS: 0000000000000000(0000) GS:ffff88021fb80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000003a59154cc5 CR3: 0000000001a0d000 CR4: 00000000000407e0 Stack: ffff8800d579fd08 ffffffffa0bbb604 ffff8800d54e88c0 ffff8800d54ea500 ffff8800d579fd38 ffffffffa0bfacd6 ffff8800d54e88c0 ffff8800d54ea578 ffff8800d5480a80 ffff8800d54ea420 ffff8800d579fd98 ffffffffa0bfbc27 Call Trace: [<ffffffffa0bbb604>] cfg80211_scan_done+0x16/0x5e [cfg80211] [<ffffffffa0bfacd6>] __ieee80211_scan_completed+0xec/0x1c8 [mac80211] [<ffffffffa0bfbc27>] ieee80211_scan_work+0x3fa/0x411 [mac80211] [<ffffffff810d7a9e>] process_one_work+0x1cb/0x2ee [<ffffffff810d7a33>] ? process_one_work+0x160/0x2ee [<ffffffff810d4e95>] ? spin_lock_irq+0x9/0xb [<ffffffff810d7f95>] worker_thread+0x12f/0x1fd [<ffffffff810d7e66>] ? rescuer_thread+0x27b/0x27b [<ffffffff810d7e66>] ? rescuer_thread+0x27b/0x27b [<ffffffff810dd251>] kthread+0xc4/0xcc [<ffffffff810dd18d>] ? __kthread_parkme+0x5c/0x5c [<ffffffff815dabcc>] ret_from_fork+0x7c/0xb0 Thanks, Ben -- Ben Greear <greearb@xxxxxxxxxxxxxxx> Candela Technologies Inc http://www.candelatech.com -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html