2023-02-24 01:11:20

by Ben Greear

[permalink] [raw]
Subject: Intel ax210 crash in 6.2.0+ kernel.

Hello,

We just started testing on 6.2, and hit the crash below. We have some modest changes to ax210 radio,
so could be us... Curious if anyone has seen similar?

I guess 'pkt' is corrupted?

And for what its worth, I am pretty sure we have seen something similar on older kernels,
though rarely.

general protection fault, probably for non-canonical address 0x5088000000000: 0P
CPU: 2 PID: 25 Comm: ksoftirqd/2 Tainted: G W 6.2.0+ #3
Hardware name: Default string Default string/SKYBAY, BIOS 5.12 08/04/2020
RIP: 0010:iwl_pcie_rx_handle+0x2a4/0x8f0 [iwlwifi]
Code: 01 da 48 b8 00 00 00 00 80 88 ff ff 49 c1 fa 06 89 54 24 58 48 63 d2 49 c3
RSP: 0018:ffffc90000167d30 EFLAGS: 00010207
RAX: ffff888000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000160000000000
RBP: ffff88812b080168 R08: 0000000000000000 R09: 000000000000000a
R10: 0005088000000000 R11: ffffffff82fcf040 R12: ffffc90000167d80
R13: ffff88810f50c028 R14: ffff888124159420 R15: 0005088000000000
FS: 0000000000000000(0000) GS:ffff88845dc80000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000031e3208 CR3: 000000000260f002 CR4: 00000000003706e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
iwl_pcie_napi_poll_msix+0x24/0xc0 [iwlwifi]
__napi_poll+0x21/0x150
net_rx_action+0x28e/0x2e0
__do_softirq+0xbc/0x28e
? sort_range+0x20/0x20
run_ksoftirqd+0x1f/0x30
smpboot_thread_fn+0xc2/0x1a0
Loading Candela Technologies 6.2.0+ COM1 115200 8n1 ...


(gdb) l *(iwl_pcie_rx_handle+0x2a4)
0x9294 is in iwl_pcie_rx_handle (/home/greearb/git/linux-6.2.dev.y/drivers/net/wireless/intel/iwlwifi/pcie/rx.c:1303).
1298 .truesize = max_len,
1299 };
1300
1301 pkt = rxb_addr(&rxcb);
1302
1303 if (pkt->len_n_flags == cpu_to_le32(FH_RSCSR_FRAME_INVALID)) {
1304 IWL_DEBUG_RX(trans,
1305 "Q %d: RB end marker at offset %d\n",
1306 rxq->id, offset);
1307 break;


Thanks,
Ben

--
Ben Greear <[email protected]>
Candela Technologies Inc http://www.candelatech.com