mt7996 stil crashes in mt7996_mac_tx_free #998
Description
On the latest OpenWrt snapshot, there are still daily crashes in mt7996 on the same code line (just shifted 4 lines down after 5f61f34) after several hours of use. This time not leading to a KP, though.
[90128.074789] WARNING: CPU: 2 PID: 1523 at mt7996_mac_wtbl_lmac_addr+0x5b0/0x7c0 [mt7996e]
[90128.082890] Modules linked in: pppoe ppp_async option nft_fib_inet nf_flow_table_inet iscsi_tcp cdc_mbim wireguard usb_wwan rndis_host qmi_wwan pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_queue nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_compat nft_chain_nat nf_tables nf_conntrack_netlink mt7996e(O) mt76_connac_lib(O) mt76(O) mac80211(O) libiscsi_tcp libiscsi libchacha20poly1305 ipt_REJECT chacha_neon cfg80211(O) cdc_ncm cdc_ether xt_time xt_tcpudp xt_state xt_quota xt_pkttype xt_physdev xt_owner xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_cgroup xt_addrtype xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_CT usbserial usbnet slhc sfp scsi_transport_iscsi rtc_pcf8563 poly1305_neon nfnetlink_queue nfnetlink nf_reject_ipv4 nf_log_syslog nf_flow_table mdio_i2c libcurve25519_generic libchacha iptable_nat iptable_mangle iptable_filter ipheth ip_tables compat(O) cdc_wdm
[90128.083057] br_netfilter at24 crypto_safexcel ntfs3 configs pwm_fan i2c_mux_pca954x i2c_mux ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 ip6_udp_tunnel udp_tunnel udp_diag tcp_diag raw_diag inet_diag veth tun nls_utf8 xxhash_generic sha512_arm64 sha1_ce sha1_generic seqiv md5 geniv des_generic libdes blake2b_generic authencesn authenc uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd nvme nvme_core gpio_button_hotplug(O) exfat btrfs xor xor_neon raid6_pq libcrc32c usbcore usb_common aquantia crc_itu_t mii
[90128.228764] CPU: 2 UID: 0 PID: 1523 Comm: napi/phy0-10 Tainted: G O 6.12.40 #0
[90128.237367] Tainted: [O]=OOT_MODULE
[90128.240844] Hardware name: Banana Pi BPI-R4 (2x SFP+) (DT)
[90128.246317] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[90128.253267] pc : mt7996_mac_wtbl_lmac_addr+0x5b0/0x7c0 [mt7996e]
[90128.259276] lr : mt7996_mac_wtbl_lmac_addr+0x510/0x7c0 [mt7996e]
[90128.265276] sp : ffffffc0815dbb40
[90128.268580] x29: ffffffc0815dbb40 x28: 0000000000000005 x27: 0000000000000000
[90128.275708] x26: 0000000000000004 x25: 0000000000000002 x24: ffffff80ca3a1018
[90128.282833] x23: ffffff80c99a63b8 x22: ffffff80ca3a1018 x21: ffffff80ca3a1018
[90128.289959] x20: 000000000006043f x19: ffffff80c99a1fe0 x18: 0000000000000000
[90128.297085] x17: 0000000000000028 x16: 0000000000000001 x15: 0000000000007fd0
[90128.304211] x14: ffffffc0815f2320 x13: ffffff80c99a62c0 x12: 0000000000000000
[90128.311337] x11: 0000000000000040 x10: ffffff80c99a62c8 x9 : ffffff80c99a62c0
[90128.318462] x8 : ffffff80cbc594b0 x7 : 0000000000000000 x6 : 0000000000000000
[90128.325588] x5 : ffffff80cbc59488 x4 : ffffff80cbc59510 x3 : 000000000000000b
[90128.332713] x2 : ffffff80c919d400 x1 : 0000000000000000 x0 : 0000000000000000
[90128.339838] Call trace:
[90128.342276] mt7996_mac_wtbl_lmac_addr+0x5b0/0x7c0 [mt7996e]
[90128.347933] mt7996_rx_check+0xb0/0xc4 [mt7996e]
[90128.352545] mt76_dma_rx_poll+0x434/0xc7c [mt76]
[90128.357160] __napi_poll+0x34/0x174
[90128.360642] napi_threaded_poll_loop+0xa0/0x1a4
[90128.365162] napi_threaded_poll+0x70/0x7c
[90128.369161] kthread+0xd8/0xdc
[90128.372210] ret_from_fork+0x10/0x20
[90128.375779] ---[ end trace 0000000000000000 ]---