Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx> writes: > On Tue, Aug 27, 2024 at 11:30:01AM +0200, Felix Fietkau wrote: >> In some cases MCU messages can get lost. Instead of failing completely, >> attempt to recover by re-sending them. >> >> Signed-off-by: Felix Fietkau <nbd@xxxxxxxx> > > Hi, > > KernelCI has identified a regression originating from this patch. I've verified > that reverting it fixes the issue. > > Regression's impact: Unable to boot > > Affected platforms: > * mt8186-corsola-steelix-sku131072 > > Relevant kernel logs: > > [ 3.457006] ------------[ cut here ]------------ > [ 3.466050] kernel BUG at net/core/skbuff.c:2255! > [ 3.466055] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP > [ 3.466059] Modules linked in: mt7921s mtk_vcodec_dbgfs mt76_sdio > mtk_jpeg mtk_vcodec_common mt7921_common mtk_jpeg_enc_hw > [ 3.484734] mt792x_lib mt76_connac_lib mtk_vpu mtk_jpeg_dec_hw v4l2_mem2mem > [ 3.496464] mt76 videobuf2_dma_contig btmtksdio cros_ec_rpmsg btmtk > videobuf2_memops cbmem mac80211 libarc4 bluetooth videobuf2_v4l2 > videodev > [ 3.510198] ecdh_generic cros_ec_sensors cros_ec_lid_angle cfg80211 ecc > [ 3.522273] videobuf2_common mediatek_drm cros_ec_sensors_core > crct10dif_ce industrialio_triggered_buffer > [ 3.534348] kfifo_buf leds_cros_ec cros_ec_typec cros_ec_chardev mc > [ 3.545814] sbs_battery elan_i2c phy_mtk_mipi_dsi_drv mtk_mmsys mtk_svs > [ 3.562574] drm_dma_helper rfkill snd_sof_mt8186 mtk_adsp_common > [ 3.574821] snd_sof_xtensa_dsp snd_sof_of snd_sof mtk_scp > [ 3.594963] mtk_mutex mtk_rpmsg hid_multitouch mtk_scp_ipi lvts_thermal mt6577_auxadc > [ 3.610771] snd_sof_utils mtk_wdt coreboot_table > [ 3.626141] ramoops reed_solomon pwm_bl backlight > [ 3.637694] > [ 3.637698] CPU: 4 UID: 0 PID: 235 Comm: mt76-sdio-txrx Not tainted 6.11.0-rc7-next-20240913 #1 > [ 3.651764] Hardware name: Google Steelix board (DT) > [ 3.651767] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) > [ 3.664875] pc : pskb_expand_head+0x2cc/0x3c4 > [ 3.729971] usb 1-1: new high-speed USB device number 2 using xhci-mtk > [ 3.733209] lr : mt76s_tx_run_queue+0x27c/0x410 [mt76_sdio] > [ 3.744152] sp : ffff8000810d3c30 > [ 3.756220] x29: ffff8000810d3c30 x28: 0000000000000000 > [ 3.765341] x27: ffff6a16c81a7780 > [ 3.778973] x26: 0000000000000000 x25: ffff6a16cc2576b0 x24: 0000000000000140 > [ 3.790005] x23: ffff6a16cb910080 > [ 3.799991] x22: 0000000000000028 > [ 3.816224] x21: ffff6a16cc252000 > [ 3.821005] x20: 0000000000000000 x19: ffff6a16c81a4300 x18: 0000000000000000 > [ 3.858429] x17: ffffc9f99aab0000 x16: ffffa01e5a692f5c x15: 0000000000000000 > [ 3.865556] x14: 0000000000000352 x13: 0000000000000352 x12: 0000000000000001 > [ 3.872682] x11: 0000000000000057 x10: ffff6a16c8aeeb88 x9 : ffff6a16c81a4300 > [ 3.879808] x8 : ffff6a16c8aeeb98 x7 : ffff6a17f6d91428 x6 : 0000000000000001 > [ 3.886935] x5 : 0000000000000000 x4 : ffff6a16c827b3c0 x3 : 0000000000000820 > [ 3.894060] x2 : 0000000000000200 x1 : 0000000000000002 x0 : ffff6a16c81a4300 > [ 3.901186] Call trace: > [ 3.903621] pskb_expand_head+0x2cc/0x3c4 > [ 3.907622] mt76s_tx_run_queue+0x27c/0x410 [mt76_sdio] > [ 3.912839] mt76s_txrx_worker+0xc8/0xde4 [mt76_sdio] > [ 3.917881] mt7921s_txrx_worker+0x5c/0xec [mt7921s] > [ 3.922839] __mt76_worker_fn+0x80/0x120 [mt76] > [ 3.927380] kthread+0x114/0x118 > [ 3.930601] ret_from_fork+0x10/0x20 > [ 3.934171] Code: 17ffffb5 f9002bfb d4210000 f9002bfb (d4210000) > [ 3.940252] ---[ end trace 0000000000000000 ]--- > [ 3.948178] note: mt76-sdio-txrx [235] exited with irqs disabled > [ 3.954227] note: mt76-sdio-txrx [235] exited with preempt_count 1 > [ 3.960491] ------------[ cut here ]------------ > > [ 11.486135] ------------[ cut here ]------------ > [ 11.490749] WARNING: CPU: 7 PID: 54 at kernel/kthread.c:657 kthread_park+0xa4/0xd0 > [ 11.498319] Modules linked in: ip_tables x_tables ipv6 ax88796b > asix onboard_usb_dev panel_edp uvcvideo uvc videobuf2_vmalloc > mtk_vcodec_dec_hw mtk_vcodec_dec v4l2_vp9 mtk_vcodec_enc v4l2_h264 > mt7921s mtk_jpeg mtk_vcodec_dbgfs btmtksdio mtk_vcodec_common > mt76_sdio mtk_jpeg_enc_hw mtk_vpu mtk_jpeg_dec_hw btmtk mt7921_common > mt792x_lib v4l2_mem2mem cros_ec_rpmsg videobuf2_dma_contig cbmem > mt76_connac_lib videobuf2_memops videobuf2_v4l2 mt76 mac80211 > bluetooth crct10dif_ce videodev ecdh_generic cros_ec_lid_angle > videobuf2_common cros_ec_sensors ecc libarc4 mc mediatek_drm > leds_cros_ec cros_ec_sensors_core cfg80211 mtk_mutex > phy_mtk_mipi_dsi_drv mtk_mmsys drm_dma_helper > industrialio_triggered_buffer sbs_battery rfkill cros_ec_chardev > kfifo_buf snd_sof_mt8186 hid_multitouch mtk_adsp_common cros_ec_typec > elan_i2c snd_sof_xtensa_dsp snd_sof_of snd_sof mtk_wdt mtk_scp > snd_sof_utils lvts_thermal mtk_svs mt6577_auxadc pwm_bl backlight > mtk_rpmsg mtk_scp_ipi ramoops reed_solomon coreboot_table > [ 11.585320] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G D W > 6.11.0-rc7-next-20240913 #1 > [ 11.585329] Tainted: [D]=DIE, [W]=WARN > [ 11.585331] Hardware name: Google Steelix board (DT) > [ 11.585334] Workqueue: events mt7921_init_work [mt7921_common] > [ 11.585349] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) > [ 11.616606] pc : kthread_park+0xa4/0xd0 > [ 11.620431] lr : mt7921s_init_reset+0x80/0x24c [mt7921s] > [ 11.625731] sp : ffff800080473cd0 > [ 11.629032] x29: ffff800080473cd0 x28: 0000000000000000 x27: 0000000000000000 > [ 11.636153] x26: ffff559736df45a8 x25: ffff559606502148 x24: ffff55960650a148 > [ 11.643274] x23: 000000000041f23c x22: ffff559606502000 x21: ffff559606507738 > [ 11.650394] x20: 0000000000000000 x19: ffff5596086e9140 x18: 0000000000000001 > [ 11.657515] x17: 000000040044ffff x16: ffffb34762ec4fbc x15: 0000000000000000 > [ 11.664636] x14: 00000000000001cc x13: 0000000000000000 x12: 0000000000000000 > [ 11.671757] x11: 0000000000000001 x10: 0000000000000a90 x9 : ffff800080473bb0 > [ 11.678878] x8 : ffff559736debcc0 x7 : ffff559736df4c40 x6 : 00000000000249f0 > [ 11.685998] x5 : ffff559606502068 x4 : ffff559606502060 x3 : ffff559606507740 > [ 11.693119] x2 : ffff559606507740 x1 : 0000000000005800 x0 : 000000000020804c > [ 11.700240] Call trace: > [ 11.702673] kthread_park+0xa4/0xd0 > [ 11.706150] mt7921s_init_reset+0x80/0x24c [mt7921s] > [ 11.711100] mt7921_init_work+0x190/0x240 [mt7921_common] > [ 11.716486] process_one_work+0x14c/0x28c > [ 11.720483] worker_thread+0x2d0/0x3d8 > [ 11.724219] kthread+0x114/0x118 > [ 11.727435] ret_from_fork+0x10/0x20 > [ 11.731000] ---[ end trace 0000000000000000 ]--- > [ 11.848160] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 > [ 11.856958] Mem abort info: > [ 11.859747] ESR = 0x0000000096000004 > [ 11.863490] EC = 0x25: DABT (current EL), IL = 32 bits > [ 11.868795] SET = 0, FnV = 0 > [ 11.871842] EA = 0, S1PTW = 0 > [ 11.874976] FSC = 0x04: level 0 translation fault > [ 11.879847] Data abort info: > [ 11.882721] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 > [ 11.888199] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 > [ 11.893247] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 > [ 11.898555] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010815f000 > [ 11.904993] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000 > [ 11.918032] Modules linked in: ip_tables x_tables ipv6 ax88796b > asix onboard_usb_dev panel_edp uvcvideo uvc videobuf2_vmalloc > mtk_vcodec_dec_hw mtk_vcodec_dec v4l2_vp9 mtk_vcodec_enc v4l2_h264 > mt7921s mtk_jpeg mtk_vcodec_dbgfs btmtksdio mtk_vcodec_common > mt76_sdio mtk_jpeg_enc_hw mtk_vpu mtk_jpeg_dec_hw btmtk mt7921_common > mt792x_lib v4l2_mem2mem cros_ec_rpmsg videobuf2_dma_contig cbmem > mt76_connac_lib videobuf2_memops videobuf2_v4l2 mt76 mac80211 > bluetooth crct10dif_ce videodev ecdh_generic cros_ec_lid_angle > videobuf2_common cros_ec_sensors ecc libarc4 mc mediatek_drm > leds_cros_ec cros_ec_sensors_core cfg80211 mtk_mutex > phy_mtk_mipi_dsi_drv mtk_mmsys drm_dma_helper > industrialio_triggered_buffer sbs_battery rfkill cros_ec_chardev > kfifo_buf snd_sof_mt8186 hid_multitouch mtk_adsp_common cros_ec_typec > elan_i2c snd_sof_xtensa_dsp snd_sof_of snd_sof mtk_wdt mtk_scp > snd_sof_utils lvts_thermal mtk_svs mt6577_auxadc pwm_bl backlight > mtk_rpmsg mtk_scp_ipi ramoops reed_solomon coreboot_table > [ 12.005017] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G D W > 6.11.0-rc7-next-20240913 #1 > [ 12.014835] Tainted: [D]=DIE, [W]=WARN > [ 12.018572] Hardware name: Google Steelix board (DT) > [ 12.023523] Workqueue: events mt7921_init_work [mt7921_common] > [ 12.029355] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) > [ 12.036305] pc : kthread_unpark+0x1c/0xb4 > [ 12.040311] lr : mt7921s_init_reset+0xc0/0x24c [mt7921s] > [ 12.045614] sp : ffff800080473cc0 > [ 12.048915] x29: ffff800080473cc0 x28: 0000000000000000 x27: 0000000000000000 > [ 12.056040] x26: ffff559736df45a8 x25: ffff559606502148 x24: ffff55960650a148 > [ 12.063163] x23: 000000000041f23c x22: ffff559606502000 x21: ffff5596065076b0 > [ 12.070288] x20: ffff559606507800 x19: 0000000000000000 x18: ffff55973eea827c > [ 12.077411] x17: 00000000000a9818 x16: ffffb34762ec4a30 x15: 0000000000000000 > [ 12.084535] x14: ffff559600304580 x13: 0000000000000050 x12: 0000000000000001 > [ 12.091659] x11: 0000000000000001 x10: 0000000000000a90 x9 : ffff800080473850 > [ 12.098783] x8 : 0000000000000100 x7 : ffff559736078000 x6 : 0000000000000018 > [ 12.105907] x5 : 00000000ffff8f00 x4 : 00ffffffffffffff x3 : 0000000000001099 > [ 12.113031] x2 : 00000000fffee699 x1 : 000000000020804c x0 : ffff5596086e9140 > [ 12.120155] Call trace: > [ 12.122590] kthread_unpark+0x1c/0xb4 > [ 12.126244] mt7921s_init_reset+0xc0/0x24c [mt7921s] > [ 12.131197] mt7921_init_work+0x190/0x240 [mt7921_common] > [ 12.136587] process_one_work+0x14c/0x28c > [ 12.140585] worker_thread+0x2d0/0x3d8 > [ 12.144323] kthread+0x114/0x118 > [ 12.147542] ret_from_fork+0x10/0x20 > [ 12.151111] Code: f9000bf3 b9402c01 36a804c1 f942cc13 (f9400261) > [ 12.157190] ---[ end trace 0000000000000000 ]--- > > (Full logs available here: http://0x0.st/XxI-.txt) > > Happy to provide any other details necessary. > > Please add > Reported-by: Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx> #KernelCI > when fixing this. > > #regzbot introduced: next-20240909..next-20240910 > #regzbot title: Boot regression on mt8186-corsola-steelix-sku131072 > due to bug in mcu message sending logic in mt76 I don't see this in regzbot so let's try again: #regzbot introduced: 3688c18b65ae ^ -- https://patchwork.kernel.org/project/linux-wireless/list/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches
