From nobody Sat Jul 25 16:51:12 2026 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A34B3306B3D; Wed, 15 Jul 2026 17:22:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=198.175.65.15 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784136176; cv=fail; b=fYfGO71XJU9R5OL01o3Qd3X7Me14Qgju57IM7pIEbtJFDVQC8ukcrBI7PUi3nHSx0pjEnB4Ob3Z6wvVfcxDUoiEEaPjZkbtSjYsAXZ9UqPGxI3T5ciMZf2gyImmLmg+5QFFJ42RIL7D8K8oMAIujc6bBLrewpxOhi/bz95MnWcA= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784136176; c=relaxed/simple; bh=2Tg65/lj+eeFhmQo63EB0Ds8r2yaJRQL8iOZa8Xb8qg=; h=From:To:CC:Subject:Date:Message-ID:References:In-Reply-To: Content-Type:MIME-Version; b=KMVMSaeKUnUr7SjokC509YXGRJZappVfEmmQVQiOTP/6oHpqti0pGTbD+4hhiO2oJhDepBMAQZ+1+RVnedzMKs9UbNXfMU2Z4NM1D9yKsXXmND/zrZTwi42oJuFBwijVtsbR1VmbBpTF7jQy/Z/JfDNi5GXUK3F/JaQR4VYIKwI= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=HPovHerv; arc=fail smtp.client-ip=198.175.65.15 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="HPovHerv" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1784136172; x=1815672172; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=2Tg65/lj+eeFhmQo63EB0Ds8r2yaJRQL8iOZa8Xb8qg=; b=HPovHervJU1rWOk+2WcOa9rXRiQM3CKvE15qGZ4deXOq9bD2gEG3F+DA AkWhrwuMKNy6YSrmoFOVnlmnUtRcc5tbwLNVr5Cw2pviWL/Z5LEHDtG+b oo/zeG7+zLlAysWYh44tvkPgSiQ6brrFte2i4tWpGABfXEjZZTSQGVbrJ G9//+mTjasqe5Sl2KMmmM98rU3iL/gz5dOkZQZpXGU41rET13wvzOm/W+ BFqoZ5W6NedPdIPO6iAxndyzDNnjUbFS7st3cA5puTI9tGh2NOfzTHdJE cE4ZHzailRMUCsjT9Q647ZvFJEvVpnuGVSR/qcCyBLtj2SU1BtjJ/uTI3 g==; X-CSE-ConnectionGUID: 5WBEHXIdQ8S4f5W7Rd+dUA== X-CSE-MsgGUID: cvPwaOF4RIiZyLCmb4uaLQ== X-IronPort-AV: E=McAfee;i="6800,10657,11847"; a="88460422" X-IronPort-AV: E=Sophos;i="6.25,165,1779174000"; d="scan'208,223";a="88460422" Received: from fmviesa005.fm.intel.com ([10.60.135.145]) by orvoesa107.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 15 Jul 2026 10:22:50 -0700 X-CSE-ConnectionGUID: QjE2NU/aS6iuNG5zJ3C+Tw== X-CSE-MsgGUID: gnxJhoiNT/6nCPLZsay0DA== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.25,165,1779174000"; d="scan'208,223";a="261151169" Received: from orsmsx901.amr.corp.intel.com ([10.22.229.23]) by fmviesa005.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 15 Jul 2026 10:22:50 -0700 Received: from ORSMSX903.amr.corp.intel.com (10.22.229.25) by ORSMSX901.amr.corp.intel.com (10.22.229.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Wed, 15 Jul 2026 10:22:49 -0700 Received: from ORSEDG903.ED.cps.intel.com (10.7.248.13) by ORSMSX903.amr.corp.intel.com (10.22.229.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43 via Frontend Transport; Wed, 15 Jul 2026 10:22:49 -0700 Received: from MW6PR02CU001.outbound.protection.outlook.com (52.101.48.65) by edgegateway.intel.com (134.134.137.113) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.43; Wed, 15 Jul 2026 10:22:48 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=mxGAQFlNY0ekTs2fudftop0CMzozj7N3D0qWf7niiC8Cbiub7N//oF+beFFeMpgYXUyo83xJUH3JiBBEzalYj6+JP73NjleGZhsYSnpYzzWdpZEnAEYkKCnkIi6QGuqI7rQGXZXa1u+oejB7VEVALwEPWeIrJUUtuXLbvLnO7XV/IF/WRTzl/RVj/pJYzTbXa9uYqGOfmOCHnyCaLeJVi5ywAz1QZ7/oPhacp5+vdEP0OelxCcTSGmFOrQ1XsyH6tDf9+LJ8GQTvx+IzbUISVY8Vl6qoEQO3YKkiNK6FLNt6DgypNh3qsbYx/5hsGMi+RrE4kI/woz+uH8HGt/L+jQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=DssTBJRNDhPj3G5P9RfVNfeBzY81v/0OaUQ9+cbyXrE=; b=bgZYHU8Il5Pz1iFCG2u35lkrmHYjZF399R9JW35Xh+Hs4Z38whjoQqixmOeIOdww8JtRZQYUIgvTXBv/emMOCCTFW2vPiiLIHouCpj4dQ8aH2SBofugILIqVTOc1rTClITO7TjINHh6M3Le2qf47hyQfx1NRl1XhxXODkxhewFUk3TgvZexpjQHIvKSCrPchPKf1HY4KvDxbsVlhMb/S1+Nz/yN2Que3cP7tbOcTd42+qCaU8xe6iiNK616eVArdLxWNAjSJTqXaZF4OcC0Xt9ym4VYE0FPdBbpLEsfk4vKEYsD/7rU9D/xJPhV/z/s+xmJTAmh/1BqBpAh1t3Dbgw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Received: from DS0PR11MB7880.namprd11.prod.outlook.com (2603:10b6:8:f3::14) by SJ0PR11MB6767.namprd11.prod.outlook.com (2603:10b6:a03:47e::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.9; Wed, 15 Jul 2026 17:22:45 +0000 Received: from DS0PR11MB7880.namprd11.prod.outlook.com ([fe80::7485:4354:e91d:2]) by DS0PR11MB7880.namprd11.prod.outlook.com ([fe80::7485:4354:e91d:2%2]) with mapi id 15.21.0223.011; Wed, 15 Jul 2026 17:22:44 +0000 From: "Korenblit, Miriam Rachel" To: =?utf-8?B?TWFyZWsgTWFyY3p5a293c2tpLUfDs3JlY2tp?= CC: "linux-wireless@vger.kernel.org" , "linux-kernel@vger.kernel.org" Subject: RE: kernel BUG at mm/slub.c:634 (kfree) when unbinding device from iwlwifi Thread-Topic: kernel BUG at mm/slub.c:634 (kfree) when unbinding device from iwlwifi Thread-Index: AQHdFGbavA6vvN+4lU2AaJWcbJsoz7Zu1AOA Date: Wed, 15 Jul 2026 17:22:44 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DS0PR11MB7880:EE_|SJ0PR11MB6767:EE_ x-ms-office365-filtering-correlation-id: 9f964cc9-538e-43bb-7947-08dee295af1e x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|6049299003|23010399003|10067099003|18002099003|56012099006|11063799006|22082099003|38070700021|4053099003; x-microsoft-antispam-message-info: Zc2ubeFtHL1K4qPVny+X3JjcUmmLSUelhE7g9ceskcag2qoB+KKgamuu3Kgv+T4UOBlXa+Fj79545svGnHScbBy3nN4yP23p/OOscHgJlD7Ukh0jWnkH42vZeaux826ElP/Rdmu9thwhvy4/sNNuiKQUIIWOgZyWgKzp4wfFpIKehbWOUsyoI5FlV/gmx2W8Yti69mPnlYZRQxrjPbyV7D8arw8Vm7ZrvgvWe6YQDV0YQtVX7tsYlG308ml37LNoQD1wSx65cw5MQAmGxnXTXdDLxDA3Nk0dW2JBvoGAyeZodXnAyiHXhsKNP3Ur6lAoeAC1ukt50vTZ577c1X7/X7jqjlQOpNwM51YfsNPAL/R83rLZxQVsBDb+/VSDZachiS37epk43uYAw3L03moNbQOCC8l7bpzidyYmHbyY/EpqOGyCUNh3pCASzfT2H7u2aPqgbNZi0sG9hejZwl1kd7bUkzKB5ZoD2N6UcJIZQqDuGaia+0haIu6zlpBNK45nNXjceYdu3KAu2GJrBvk5sQqpjSB3dQG6xZ7qb0F0S1l7/OM9ijlLTEglmaraO/CWF7q+wme2esvXruGQgVj+++spVPtFJmWl/FJUiMcgAxVNmBM4lmGa2eB30DXYgjj51LqCPA30gYeGsSgBnD8BSaRIgcG8OvwG9BN9BhSj5+jAgNAjN39fCATGftnGCXBVbvEr7V07ihgt08LUlP7z0074+Lxf3+rvafAuMaK0UR0= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS0PR11MB7880.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(6049299003)(23010399003)(10067099003)(18002099003)(56012099006)(11063799006)(22082099003)(38070700021)(4053099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?SExwTXFNWWlZUFA0TFVBV1dNdUdGZUxRRGhLZFNhOVJvOFMwL1FPbHVLWUNN?= =?utf-8?B?a0xwYnliS0gzOUNHY0FDTFR3Rk93Q2RDUSt5RnR5L2ZYOEhXdVZuTHpkRnNh?= =?utf-8?B?WUFldEErOXI5UGlvZ1QxM0k5a1lPQWxST3lXSkYxMEEwQUpqeHpabXNLZjJR?= =?utf-8?B?NHBVenYwR3ZReWIzU3o3bVJjYnlsdnZ2RnFDelBHK1A5Sm1Ja0dkZDNvRitk?= =?utf-8?B?MENyNmM4NWg0emdqNDVnU2pPOTFxYTlGMWRmRlU2QWs5VisvaU5YVVFRT3Jx?= =?utf-8?B?M01veEZCeFVqNXJaaFVZemtFU24rNUV1QXBmbGNPTVliZmF1RlFJSCtTQ3I5?= =?utf-8?B?bkJkNDl1OWpBaHVuY2luU1JHOXo1R0JGOWtEQUJ3SVFmb2hTWHNjKzBkWCtF?= =?utf-8?B?a2tKTjVUMm5mb0RHR24rcFl3Z1loTU1QZmhCL0NlamltMmsxbzJGWEVMK2Nh?= =?utf-8?B?ajZuVWV0cW5aNHN4b1VNZFJpdDlsTXZJQ0kveTExQXcrdEVJVW5OQjRMbFZW?= =?utf-8?B?Qy8zNU5ucnNOdXUvOVU3Wm52SS9yUThLZ1lPOTFuSkRiNERDL2dHcnhLNFhI?= =?utf-8?B?OHRiZ1c1UnZiVjl5QnNwNGpDS3pyNmJZc2sxQXkwVVpXcjhwT1JQN2VBd1dR?= =?utf-8?B?eDRiVS80TDdKRzBBUTFkNmlPZzA4dHQ1Vjl4dWtxRU9IUERLYytCblFaUVla?= =?utf-8?B?NnZ0NjRrVk9FMkI4L1ZTSE5yTGFYdDhGUkdkT2Y3RDJhSnpseHZqMkw5M3Rw?= =?utf-8?B?ZzM0alE5RTFENDR1Sm9jK2FwQkZzZ05OeXBDY0ZGdUpONHIvZXovNElUQUpU?= =?utf-8?B?bzhzTmlYZ0Z1cVdtSUJnbW5wSlBBR3hKRENHS0pBSXIxc1FCdzkzNlpEN1Nz?= =?utf-8?B?cjFqaVJUZ0c5ZmtwVkxHdGJwbkY2YWFCNlJNTklKcXRsQUtDNnpDSjFTWTI0?= =?utf-8?B?NWF1elh4TFUyVlp1ako4bjEzOVpPN2RFV25KTDcwQlpHUzhxUG1FSEhFYTE2?= =?utf-8?B?OHVFeXBKZ3BYai9kL2xLaW9iYXlvVVJOZzgvTFdmTEs5b01EdGRvdDdScFVm?= =?utf-8?B?dXZobEx4S3V6NTdmbC9jU3BFNnF6UVdXem1KdHJTRUlLVVpVNHBoRlBCYmNt?= =?utf-8?B?U211ZHJNY0s0NU5HUjVRcU1XUmhJWXlKMmdmTkFlWHZVamZKSVJnSzlwT2Jj?= =?utf-8?B?dVZVUUpDK1VZSytBTzJkRUpXY2hjK09oWW1pZE1KYUJMNk9ETVU5OWp0aTNE?= =?utf-8?B?VkJlQTRuWVZGZHdNeHFMUjErQ0VjNTdHUENobk8wOGwwNGVzUEhwVEpxNWhJ?= =?utf-8?B?bkpGclpaeFpvYWIrWkFBRXB4YVJ1K0R6cGl0a1F0UzFSMnBXMmJNR1RGazhF?= =?utf-8?B?dkFUMFJuTVdvSGgyMHlWZ3BZQXFSTnFvZFpNYzU0NjcvTlRPWWRBbC9TUkVq?= =?utf-8?B?cFRMU3MxcnRacU1oSUNXUUViWDhucDRjRllzR1JiUmpEUnR0ckpZTWhhMWw0?= =?utf-8?B?b3daWUd4Vk1NcEVPMVU2RVEzNnZib3hLR3BtNVdSSFFMckdGUUErbVN3bzZV?= =?utf-8?B?S0dLSWoveW11OU96TkgzZjVnZFhTZ09jK0tLeW9sNFowV0N0QzJ6RFZKSTNw?= =?utf-8?B?NjBkUlAzYmc5Nkd1UWowL1VtdmZZa09HUXp0YXJIMWJaTmw4QlhJd3JQWSs2?= =?utf-8?B?WFNLUFRnOGhFaXdoaWV3VkgzNi9vQWR3NGR2eTljODR1aVIvVmZzYTdxTTE2?= =?utf-8?B?UHBQeG9ud2FkUDNtV3hGR2NqMEFVK2VIeUVFNzFXK25wSjZ2MTZudzhrNzNw?= =?utf-8?B?UWUwdkJCeUF6cTd0WHVFOUV0dkxENnV0b2hNZzFjU2lkSUQ4QXdiRENiVFZN?= =?utf-8?B?dG1Zb2dOYjBCWmFOY3hsOEZEMUh4WEgrb2U5NFhaMnNjMHJ3NjQzMjM4c3R5?= =?utf-8?B?RnB3QUZKS2xDKzJNWThSd2I5TTZKaGdzbEg2cHNwLzAyKzNQZGVqZ2R1Q0ZE?= =?utf-8?B?Rmgwc3RjUHVBNHJYN1dIYjRLRFF3UVFBalFWeVdXN3l1cjYvK1d6R3dEaytw?= =?utf-8?B?ZzhjaXZrTHBVcXNOS3VPVExJTHpCYVZxUjFiL2dveEhldGtQUk1MUTFLN2FC?= =?utf-8?B?d01SOUEzanpNaDdxL2g0L1crbEpGeHVKUCtDaFdXZGE3QXd6bGNoZFNWV1dq?= =?utf-8?B?bEVNS0NyYnJ6NzJIYnI0emtxVzM0Rjg1ekhibzZLYkNwT09ZQjRkOTZ1Rjdo?= =?utf-8?B?K3lzVWRlRGd6VkVXWG5wdlptV05HakYzdStZbUFqaFhEUVlBR1MreTdJT1pO?= =?utf-8?B?TERsWHBDYkM5U0FIUmx6VUlmWjVoelc5R0lweDh0RittV0kvMlh6elVWbnBs?= =?utf-8?Q?3HjIIQAdVMD6VgPg=3D?= Content-Type: multipart/mixed; boundary="_002_DS0PR11MB788064B1ADCB2A98542F75A1A3F82DS0PR11MB7880namp_" Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: GDi8o4o+OBuOhza/N2znn/oCDEIPoRqXP+gaW+1++Wr9B+A78DU/sUqH1ZZMz22A97HRj9daFHqAViKAy9YCTZVHuhy3vmtHFXTM3NgjDKl/zHGpw0RVXtELntTS1XAOdb8jzhBdAHj0zCGkjNJqI4pRDq2143O2FPOhRTX0/IBB1h6p72uoqtVvG4zl4JA3OUaUK+v3qCMkDghQNuoiO2JJudoss/ZzpBc82uFOJeHJwEOUZCSsVlw1dLnrPEIb+uuBG1TscmRw+9/hYtdI0DHyYZl55043RYUHk7FzFMTjJF4KYph8zT4PV6fh5V9GlsPokW+CjXsnR15LRuqWNg== X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DS0PR11MB7880.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9f964cc9-538e-43bb-7947-08dee295af1e X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2026 17:22:44.9074 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6cOfSaFQwzE4Dn3J66HgPSvXgf8YEiis5QABUWw1JRkOFK0teuv7AX/51+c6/d1L2RDQiOXnD5UEGkrCnrhWg71rGO4c1AI52EfoxY7LbYBihoRhEdkRxDPRaVY9IAAo X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB6767 X-OriginatorOrg: intel.com --_002_DS0PR11MB788064B1ADCB2A98542F75A1A3F82DS0PR11MB7880namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 > -----Original Message----- > From: Marek Marczykowski-G=C3=B3recki > Sent: Wednesday, July 15, 2026 5:33 PM > To: Korenblit, Miriam Rachel > Cc: linux-wireless@vger.kernel.org; linux-kernel@vger.kernel.org > Subject: kernel BUG at mm/slub.c:634 (kfree) when unbinding device from i= wlwifi >=20 > Hello, >=20 > I get a kernel panic when unbinding device (8086:0085) from the iwlwifi d= river > (via writing to the "unbind" file in sysfs), while the wifi connection is= active. I can > reproduce it on Thinkpad X230, but other devices might be affected too. T= he > specific crash is: >=20 > [ 286.908182] kernel BUG at mm/slub.c:634! > [ 286.908201] Oops: invalid opcode: 0000 [#1] SMP PTI > [ 286.908221] CPU: 1 UID: 0 PID: 1959 Comm: prepare-suspend Not tain= ted > 6.18.15-1.qubes.fc41.x86_64 #1 PREEMPT(full) > [ 286.908255] Hardware name: Xen HVM domU, BIOS 4.19.4 03/17/2026 > [ 286.908275] RIP: 0010:kfree+0x3a8/0x470 > [ 286.908292] Code: 5d 41 5e 41 5f 5d e9 67 bb ff ff 4d 89 f1 41 b8 = 01 00 00 00 > 48 89 d9 48 89 da 4c 89 ee 4c 89 e7 e8 ad 2c 00 00 e9 bd fd ff ff <0f> 0b= 89 c8 4c > 8d 04 03 40 f6 c6 80 0f 84 41 ff ff ff 83 e6 08 0f > [ 286.908347] RSP: 0018:ffffcfce8280bb50 EFLAGS: 00010246 > [ 286.908365] RAX: ffff8b2dcef2c800 RBX: ffff8b2dcef2c800 RCX: > ffff8b2dcef2c830 > [ 286.908389] RDX: 00000000000be001 RSI: 0000000000000000 RDI: > ffff8b2dcef2c880 > [ 286.908414] RBP: ffffcfce8280bba0 R08: ffff8b2dcef2c860 R09: > 0000000000000000 > [ 286.908438] R10: ffff8b2dcef2c860 R11: 0000000000000000 R12: > ffff8b2dd2841600 > [ 286.908462] R13: fffff077003bcb00 R14: ffffffffc093c480 R15: > 0000000000000060 > [ 286.908487] FS: 00007b10286cd740(0000) GS:ffff8b2e19c6c000(0000) > knlGS:0000000000000000 > [ 286.908511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > [ 286.908532] CR2: 00007fb93027bc70 CR3: 00000000034f0005 CR4: > 00000000001706f0 > [ 286.908559] Call Trace: > [ 286.908570] > [ 286.908581] ? _raw_spin_unlock_bh+0xe/0x20 > [ 286.908599] iwl_pcie_txq_free+0x130/0x170 [iwlwifi] > [ 286.908644] iwl_pcie_tx_free+0x66/0xe0 [iwlwifi] > [ 286.908681] iwl_trans_pcie_free+0x1df/0x250 [iwlwifi] > [ 286.908719] pci_device_remove+0x42/0xb0 > [ 286.908736] device_release_driver_internal+0x19c/0x200 > [ 286.908755] unbind_store+0xa1/0xb0 > [ 286.908771] kernfs_fop_write_iter+0x150/0x200 > [ 286.908790] vfs_write+0x25d/0x450 > [ 286.908806] ksys_write+0x6b/0xe0 > [ 286.908825] do_syscall_64+0x84/0x800 > [ 286.908842] ? syscall_exit_work+0x108/0x140 > [ 286.908861] ? do_syscall_64+0xbb/0x800 > [ 286.908876] ? ksys_dup3+0x63/0xf0 > [ 286.908892] ? syscall_exit_work+0x108/0x140 > [ 286.911388] ? do_syscall_64+0xbb/0x800 > [ 286.911408] ? do_sys_openat2+0xa4/0xe0 > [ 286.911423] ? syscall_exit_work+0x108/0x140 > [ 286.911443] ? do_syscall_64+0xbb/0x800 > [ 286.911458] entry_SYSCALL_64_after_hwframe+0x76/0x7e > [ 286.911477] RIP: 0033:0x7b102873ec5e > [ 286.911493] Code: 4d 89 d8 e8 34 bd 00 00 4c 8b 5d f8 41 8b 93 08 = 03 00 00 > 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 = c3 83 e2 > 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa > [ 286.911549] RSP: 002b:00007ffd94bc3100 EFLAGS: 00000202 ORIG_RAX: > 0000000000000001 > [ 286.911575] RAX: ffffffffffffffda RBX: 00007b10288ba5c0 RCX: > 00007b102873ec5e > [ 286.911600] RDX: 000000000000000d RSI: 00006385db4f8020 RDI: > 0000000000000001 > [ 286.911625] RBP: 00007ffd94bc3110 R08: 0000000000000000 R09: > 0000000000000000 > [ 286.911650] R10: 0000000000000000 R11: 0000000000000202 R12: > 000000000000000d > [ 286.911674] R13: 000000000000000d R14: 00006385db4f8020 R15: > 00006385db4f5b30 > [ 286.911701] > [ 286.911711] Modules linked in: iwldvm iwlwifi mac80211 ehci_pci eh= ci_hcd > nft_nat nft_flow_offload nf_flow_table_inet nf_flow_table qrtr > nf_conntrack_netlink nft_reject_ipv6 nf_reject_ipv6 nft_reject_ipv4 > nf_reject_ipv4 nft_reject nft_ct nft_masq nft_chain_nat nf_nat nf_conntra= ck > nf_defrag_ipv6 nf_defrag_ipv4 nf_tables joydev libarc4 intel_rapl_msr > intel_rapl_common polyval_clmulni ghash_clmulni_intel cfg80211 e1000e > ata_generic rfkill i2c_piix4 pata_acpi i2c_smbus pcspkr floppy vfat fat s= erio_raw > xen_scsiback target_core_mod xen_netback xen_privcmd xen_gntdev > xen_gntalloc xen_blkback xen_evtchn i2c_dev fuse loop nfnetlink overlay > xen_blkfront [last unloaded: iwlwifi] > [ 286.911967] ---[ end trace 0000000000000000 ]--- >=20 > This is running in a VM (HVM) under Xen, with relevant PCI device attache= d, but I > don't think it's relevant for this bug. >=20 > I've got reports about the issue in Linux 6.18.15 initially (after updati= ng from > 6.12), but later tests identified it's a regression somewhere between 6.1= 5.11 and > 6.16.8. Hi, could you please test the attached patch?=20 It is based on 6.18 >=20 > The crash still happen on 7.0.14, although it looks different there: >=20 > [ 106.379541] ------------[ cut here ]------------ > [ 106.379572] kernel BUG at mm/slub.c:542! > [ 106.379596] Oops: invalid opcode: 0000 [#1] SMP PTI > [ 106.379618] CPU: 1 UID: 0 PID: 240 Comm: kworker/1:2 Not tainted 7= .0.14- > 1.qubes.fc41.x86_64 #1 PREEMPT(full) > [ 106.379656] Hardware name: Xen HVM domU, BIOS 4.19.4 06/09/2026 > [ 106.379680] Workqueue: slub_flushwq flush_cpu_sheaves > [ 106.379711] RIP: 0010:build_detached_freelist+0x1d0/0x210 > [ 106.379733] Code: 41 5c 41 5d c3 cc cc cc cc 31 d2 4d 85 c0 0f 85 = b2 fe ff ff > 48 89 04 24 e8 7d fd ff ff 48 c7 03 00 00 00 00 48 8b 04 24 eb d0 <0f> 0b= 48 85 d2 > 74 e3 48 89 13 4c 8b 42 08 e9 8c fe ff ff 0f 0b 31 > [ 106.379795] RSP: 0000:ffffcebd804c3c88 EFLAGS: 00010246 > [ 106.379815] RAX: 000000000000001d RBX: ffffcebd804c3cb8 RCX: > ffff8e6240fcf000 > [ 106.379843] RDX: ffff8e6240fcf000 RSI: 000000000000001d RDI: > 0000000000000003 > [ 106.379870] RBP: ffffffff80000000 R08: 0000000080000000 R09: > ffff8e6240fcf030 > [ 106.379898] R10: ffffcebd804c3d10 R11: 0000000000000000 R12: > ffff8e6242a68b00 > [ 106.379925] R13: ffff8e6242a68aff R14: 000000000000001c R15: > 0000000000000000 > [ 106.379953] FS: 0000000000000000(0000) GS:ffff8e62a837a000(0000) > knlGS:0000000000000000 > [ 106.379981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 > [ 106.380004] CR2: 0000767e599f2fd0 CR3: 000000000c1d2001 CR4: > 00000000001706f0 > [ 106.380035] Call Trace: > [ 106.380047] > [ 106.380060] __kmem_cache_free_bulk.part.0+0x60/0xe0 > [ 106.380085] __sheaf_flush_main_batch+0xa1/0xe0 > [ 106.380110] flush_cpu_sheaves+0xc3/0xe0 > [ 106.380129] process_one_work+0x198/0x390 > [ 106.380149] worker_thread+0x1af/0x320 > [ 106.380168] ? __pfx_worker_thread+0x10/0x10 > [ 106.380190] kthread+0xe3/0x120 > [ 106.380207] ? __pfx_kthread+0x10/0x10 > [ 106.380223] ret_from_fork+0x19e/0x260 > [ 106.380241] ? __pfx_kthread+0x10/0x10 > [ 106.380257] ret_from_fork_asm+0x1a/0x30 > [ 106.380276] > [ 106.380287] Modules linked in: nft_nat nft_flow_offload nf_flow_ta= ble_inet > nf_flow_table nf_conntrack_netlink nft_reject_ipv6 nf_reject_ipv6 qrtr > nft_reject_ipv4 nf_reject_ipv4 nft_reject nft_ct nft_masq nft_chain_nat n= f_nat > nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables vfat fat intel_rapl_= msr > iwldvm intel_rapl_common ghash_clmulni_intel mac80211 libarc4 iwlwifi joy= dev > cfg80211 ehci_pci pcspkr e1000e ehci_hcd rfkill floppy ata_generic i2c_pi= ix4 > pata_acpi i2c_smbus serio_raw xen_scsiback target_core_mod xen_netback > xen_privcmd xen_gntdev xen_gntalloc xen_blkback xen_evtchn i2c_dev loop f= use > nfnetlink zram lz4hc_compress lz4_compress overlay xen_blkfront > [ 106.381851] ---[ end trace 0000000000000000 ]--- >=20 > This one doesn't have obvious relation to iwlwifi, but I suspect it's at = least related. >=20 > There are some more call traces at > https://github.com/QubesOS/qubes-issues/issues/10845 but they look pretty > similar. >=20 > -- > Best Regards, > Marek Marczykowski-G=C3=B3recki > Invisible Things Lab Tested-by: Marek Marczykowski-G=C3=B3recki --_002_DS0PR11MB788064B1ADCB2A98542F75A1A3F82DS0PR11MB7880namp_ Content-Type: application/octet-stream; name="0001-wifi-iwlwifi-trans-don-t-memset-trans-conf-when-it-i.patch" Content-Description: 0001-wifi-iwlwifi-trans-don-t-memset-trans-conf-when-it-i.patch Content-Disposition: attachment; filename="0001-wifi-iwlwifi-trans-don-t-memset-trans-conf-when-it-i.patch"; size=2148; creation-date="Wed, 15 Jul 2026 17:15:08 GMT"; modification-date="Wed, 15 Jul 2026 17:22:44 GMT" Content-Transfer-Encoding: base64 RnJvbSA1MTliNTI3YTliODNmZDA3MmU3NDYxMTE3NmIwODE3MDcwOWU0MDAxIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBNaXJpIEtvcmVuYmxpdCA8bWlyaWFtLnJhY2hlbC5rb3JlbmJs aXRAaW50ZWwuY29tPgpEYXRlOiBXZWQsIDE1IEp1bCAyMDI2IDIwOjE5OjMzICswMzAwClN1Ympl Y3Q6IFtQQVRDSF0gd2lmaTogaXdsd2lmaTogdHJhbnM6IGRvbid0IG1lbXNldCB0cmFuczo6Y29u ZiB3aGVuIGl0IGlzCiBzdGlsbCBuZWVkZWQKT3JnYW5pemF0aW9uOiBJbnRlbCBJc3JhZWwgKDc0 KSBMaW1pdGVkCgpDdXJyZW50bHksIHRyYW5zOjpjb25mIGlzIGNsZWFyZWQgaW4gb3Btb2RlX2xl YXZlKCksIHdoaWNoIG1lYW5zIHRoYXQKaW4gdGhlIHJlc3Qgb2YgdGhlIHJlbW92ZSgpIGl0IHdp bGwgYmUgemVyb2VkLgoKQnV0IHNvbWUgb2YgdGhlIGZyZWVpbmcgY29kZSBzdGlsbCBuZWVkcyBz b21lIGRhdGEgZnJvbSBpdCwgZm9yIGV4YW1wbGUKdGhlIGNtZF9xdWV1ZSBpZC4KCkZvciBvbGRl ciBkZXZpY2VzIHRoYXQgdGhlaXIgY21kX3F1ZXVlIGlkIGlzIG5vdCAwLCBpdCBjYW4gY2F1c2Ug dXMgdG8KZnJlZSBxdWV1ZSAwIGFzIGl0IHdhcyBhIGNvbW1hbmQgcXVldWUuCgpBIGNvbW1hbmQg cXVldWUgaXMgZGlmZmVyZW50IGZyb20gYSByZWd1bGFyIHF1ZXVlLCB0aGUgZmlyc3QgaGFzIGl0 cyBjbWQgYXMKcmVndWxhciBrbWFsbG9jJ2VkIG1lbW9yeSB3aGlsZSBhIHJlZ3VsYXIgcXVldWUg aGFzIGl0IGZyb20gYQprbWVtX2NhY2hlLCBzbyB0aGUgdHdvIHNob3VsZCBiZSBmcmVlZCBkaWZm ZXJlbnRseS4KClRvIGF2b2lkIHRoYXQsIGNsZWFyIHRoZSB0cmFuczo6Y29uZiBiZWZvcmUgd2Ug Y2FsbCB0aGUgb3Btb2RlCmluc3RlYWQuCgpTaWduZWQtb2ZmLWJ5OiBNaXJpIEtvcmVuYmxpdCA8 bWlyaWFtLnJhY2hlbC5rb3JlbmJsaXRAaW50ZWwuY29tPgotLS0KIGRyaXZlcnMvbmV0L3dpcmVs ZXNzL2ludGVsL2l3bHdpZmkvaXdsLWRydi5jICAgfCAyICsrCiBkcml2ZXJzL25ldC93aXJlbGVz cy9pbnRlbC9pd2x3aWZpL2l3bC10cmFucy5jIHwgMSAtCiAyIGZpbGVzIGNoYW5nZWQsIDIgaW5z ZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQoKZGlmZiAtLWdpdCBhL2RyaXZlcnMvbmV0L3dpcmVs ZXNzL2ludGVsL2l3bHdpZmkvaXdsLWRydi5jIGIvZHJpdmVycy9uZXQvd2lyZWxlc3MvaW50ZWwv aXdsd2lmaS9pd2wtZHJ2LmMKaW5kZXggNjA3ZmNlYTZmNGVmLi40MWZjNDVkYWE3MjYgMTAwNjQ0 Ci0tLSBhL2RyaXZlcnMvbmV0L3dpcmVsZXNzL2ludGVsL2l3bHdpZmkvaXdsLWRydi5jCisrKyBi L2RyaXZlcnMvbmV0L3dpcmVsZXNzL2ludGVsL2l3bHdpZmkvaXdsLWRydi5jCkBAIC0xNTQ5LDYg KzE1NDksOCBAQCBfaXdsX29wX21vZGVfc3RhcnQoc3RydWN0IGl3bF9kcnYgKmRydiwgc3RydWN0 IGl3bHdpZmlfb3Btb2RlX3RhYmxlICpvcCkKIAkJZGJnZnNfZGlyID0gZHJ2LT5kYmdmc19vcF9t b2RlOwogI2VuZGlmCiAKKwkJbWVtc2V0KCZkcnYtPnRyYW5zLT5jb25mLCAwLCBzaXplb2YoZHJ2 LT50cmFucy0+Y29uZikpOworCiAJCW9wX21vZGUgPSBvcHMtPnN0YXJ0KGRydi0+dHJhbnMsIGRy di0+dHJhbnMtPmNmZywKIAkJCQkgICAgICZkcnYtPmZ3LCBkYmdmc19kaXIpOwogCmRpZmYgLS1n aXQgYS9kcml2ZXJzL25ldC93aXJlbGVzcy9pbnRlbC9pd2x3aWZpL2l3bC10cmFucy5jIGIvZHJp dmVycy9uZXQvd2lyZWxlc3MvaW50ZWwvaXdsd2lmaS9pd2wtdHJhbnMuYwppbmRleCA1MjMyZjY2 YzJkNTIuLmIyNWQ1NGNmY2ZiNyAxMDA2NDQKLS0tIGEvZHJpdmVycy9uZXQvd2lyZWxlc3MvaW50 ZWwvaXdsd2lmaS9pd2wtdHJhbnMuYworKysgYi9kcml2ZXJzL25ldC93aXJlbGVzcy9pbnRlbC9p d2x3aWZpL2l3bC10cmFucy5jCkBAIC00MjMsNyArNDIzLDYgQEAgdm9pZCBpd2xfdHJhbnNfb3Bf bW9kZV9sZWF2ZShzdHJ1Y3QgaXdsX3RyYW5zICp0cmFucykKIAljYW5jZWxfZGVsYXllZF93b3Jr X3N5bmMoJnRyYW5zLT5yZXN0YXJ0LndrKTsKIAogCXRyYW5zLT5vcF9tb2RlID0gTlVMTDsKLQlt ZW1zZXQoJnRyYW5zLT5jb25mLCAwLCBzaXplb2YodHJhbnMtPmNvbmYpKTsKIAogCXRyYW5zLT5z dGF0ZSA9IElXTF9UUkFOU19OT19GVzsKIH0KLS0gCjIuMzQuMQoK --_002_DS0PR11MB788064B1ADCB2A98542F75A1A3F82DS0PR11MB7880namp_--