test0r
b9f90c30e1
Diagnosed via KFENCE splat on ohm (6.19.10-danctnix1, PineTab2): sdio_tx_work passes block-size-aligned length to dma_map_sg while the underlying skb linear head is only tx_buffer->len long. Fix: driver-owned DMA bounce page, memcpy + zero-pad per TX buffer. Both Mobian paths and drivers/staging/bes2600/ paths variants, checkpatch-clean.