Repository navigation
Mac Pro (M2 Ultra, J180d): slab corruption oops and Wi-Fi failure on 7.2.12-402.asahi.fc44 #663
Description
System
- Mac Pro 2023 (Mac14,8, J180d), M2 Ultra, Fedora Asahi Remix 44 (16K kernel), m1n1 1.9.9
- Stock kernel
kernel-16k-7.2.12-402.asahi.fc44with its own DTBs (/boot/dtb→dtb-7.2.12-402.asahi.fc44.aarch64+16k) - Kernel command line (
root=omitted):ro rootflags=subvol=root rhgb quiet drm.panic_screen=kmsg udmabuf.size_limit_mb=1024 modprobe.blacklist=amdgpu - An AMD PCIe graphics card is installed in slot 1; its driver is blacklisted, so it stays unbound.
Problem
On the first boot of 7.2.12 the kernel oopses in the SLUB allocator ~10 s into boot, following a corrupted
freelist pointer (0x39801b713b186989, with dead000000000100/dead000000000122 in x24/x25), while
firewalld stats a file on btrfs. Wi-Fi (BCM4388) then fails to register and Bluetooth fails to probe.
The same machine on kernel-16k-7.1.13-402.asahi.fc44 boots cleanly with working Wi-Fi.
Logs
Oops (9.996 s):
Unable to handle kernel paging request at virtual address 39801b713b186989
Internal error: Oops: 0000000096000004 [#1] SMP
CPU: 5 UID: 0 PID: 1041 Comm: firewalld Tainted: G S 7.2.12-402.asahi.fc44.aarch64+16k #1 PREEMPT(lazy)
pc : __refill_objects_node+0x124/0x3e0
lr : __refill_objects_node+0xf0/0x3e0
x26: ffffff7fc015e180 x25: dead000000000122 x24: dead000000000100
x2 : ffff00000e168658 x1 : 39801b713b186989 x0 : 39801b713b186951
Call trace:
__refill_objects_node+0x124/0x3e0 (P)
refill_objects+0x78/0x148
__pcs_replace_empty_main+0x1e4/0x390
kmem_cache_alloc_noprof+0x430/0x500
security_inode_alloc+0x30/0x1e0
inode_init_always_gfp+0x178/0x260
alloc_inode+0x44/0xd8
iget5_locked_rcu+0x140/0x1c0
btrfs_iget+0x70/0x148
btrfs_lookup_dentry+0x1e8/0x3c0
...
__arm64_sys_newfstatat+0x24/0x38
Wi-Fi and Bluetooth (after the oops):
brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4388/4 wl0: Jun 11 2023 06:02:28 version 23.20.95.0.40.50.92 FWID 01-da9eb52a
ieee80211 phy0: brcmf_c_set_joinpref_default: Set join_pref error (-52)
WARNING: net/wireless/core.c:1112 at wiphy_register+0xa4c/0xad0 [cfg80211], CPU#6: kworker/6:10/963
wiphy_register+0xa4c/0xad0 [cfg80211] (P)
brcmf_cfg80211_attach+0x20c/0x6c0 [brcmfmac]
brcmf_bus_started+0x1c0/0x3c0 [brcmfmac]
brcmf_attach+0xc8/0x1e0 [brcmfmac]
brcmf_pcie_setup+0x420/0x5f0 [brcmfmac]
brcmfmac 0001:08:00.0: brcmf_pcie_setup: Dongle setup failed
hci_bcm4377 0001:08:00.1: no brcm,taurus-bf-cal-blob property
hci_bcm4377 0001:08:00.1: probe with driver hci_bcm4377 failed with error -2
Full kernel log of that boot: dmesg-7.2.12-402.asahi.fc44.txt (attached).
Notes
- Seen on one boot of the stock 7.2.12 kernel; I went back to 7.1.13 afterwards.
- The oops happens while die-1 PCIe drivers (xhci, atlantic, brcmfmac) are probing; the faulting allocation
itself (security_inode_alloc) is only where the corrupted freelist was found.
Upload Files
dmesg-7.2.12-402.asahi.fc44.txt
Please agree to the following
- I have reproduced this on Fedora Asahi Remix
- I have isolated this issue to software vendored by Asahi Linux
- I am not acting as a meat proxy for an LLM
Activity
yiminyuan commentedon Nov 2, 2026
@jannau I think this comes from 1143d0263e3a. Removed 2-line change at 1143d0263e3a#diff-40b9c2bebc721455243fd57b294fce64173e3b09c75ea524ce86095607928fe2R556-R557 and recompiled the kernel, I got no DART faults, and Wi-Fi then worked. I applied my local patches on top it, my AMDGPU worked again.