slub_debug=F output indicates bug in ath11k: corrupting kmalloc-1k

Christopher Klooz py0xc3 at my.mail.de
Mon Jun 5 14:58:06 PDT 2023


Please see the full slub_debug=F `journalctl -r`: 
https://gitlab.com/py0xc31/public-tmp-storage/-/blob/main/slub_debug-F/HIT/slub_debug_HIT.log

Extracts from related `journalctl -r`:

```
...
Jun 05 18:56:20 fedora.domain kernel: Hardware name: LENOVO 
21CHCTO1WW/21CHCTO1WW, BIOS R23ET60W (1.30 ) 09/14/2022
Jun 05 18:56:20 fedora.domain kernel: CPU: 1 PID: 13592 Comm: 
kworker/u32:6 Tainted: G    B              6.3.5-200.fc38.x86_64 #1
Jun 05 18:56:20 fedora.domain kernel: Slab 0xffffeffd4d324000 objects=32 
used=10 fp=0xffff8fd10c901400 
flags=0x17ffffc0010200(slab|head|node=0|zone=2|lastcpupid=0x1fffff)
Jun 05 18:56:20 fedora.domain kernel: 
-----------------------------------------------------------------------------
Jun 05 18:56:20 fedora.domain kernel: BUG kmalloc-1k (Tainted: G 
B             ): Wrong object count. Counter is 10 but counted were 28
Jun 05 18:56:20 fedora.domain kernel: 
=============================================================================
Jun 05 18:56:20 fedora.domain kernel: Disabling lock debugging due to 
kernel taint
...
```

```
...
Jun 05 18:56:20 fedora.domain kernel: Object 0xffff8fd10c902000 
@offset=8192 fp=0xc5d6e3752d901092
Jun 05 18:56:20 fedora.domain kernel: Slab 0xffffeffd4d324000 objects=32 
used=10 fp=0xffff8fd10c901400 
flags=0x17ffffc0010200(slab|head|node=0|zone=2|lastcpupid=0x1fffff)
Jun 05 18:56:20 fedora.domain kernel: 
-----------------------------------------------------------------------------
Jun 05 18:56:20 fedora.domain kernel: BUG kmalloc-1k (Not tainted): 
Freechain corrupt
Jun 05 18:56:20 fedora.domain kernel: 
=============================================================================
Jun 05 18:56:17 fedora.domain kernel: ath11k_pci 0000:02:00.0: Failed to 
set the requested Country regulatory setting
Jun 05 18:56:17 fedora.domain kernel: ath11k_pci 0000:02:00.0: Failed to 
set the requested Country regulatory setting
...
```

-> After the issues: cat /proc/sys/kernel/tainted -> 32

-> Normally: cat /proc/sys/kernel/tainted -> 0

The problem/bug has been handled and identified in: 
https://bugzilla.redhat.com/show_bug.cgi?id=2193110 (relevant are mostly 
the comments of today)

Thanks to Yi Hao for helping to identify the bug!

Thanks & regards,
Chris




More information about the ath11k mailing list