[oneric] Kernel oops when using rt2800usb

[Christian Lins]

When using the rt2800usb module provided by linux-image-3.0.0-10-generic on an RT2770 device the system hangs after a few minutes when transmitting a lot of data via wifi.

The system log shows kernel oopses, see kern.log.

With a self-compiled linux-3.1-rc4 the problem does not occur.
---
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC2: christian 2391 F.... pulseaudio
 /dev/snd/controlC1: christian 2391 F.... pulseaudio
CRDA: Error: [Errno 2] Datei oder Verzeichnis nicht gefunden
Card0.Amixer.info:
 Card hw:0 'Generic'/'HD-Audio Generic at 0xfe01c000 irq 53'
   Mixer name : 'ATI R6xx HDMI'
   Components : 'HDA:1002aa01,00aa0100,00100200'
   Controls : 4
   Simple ctrls : 1
Card0.Amixer.values:
 Simple mixer control 'IEC958',0
   Capabilities: pswitch pswitch-joined penum
   Playback channels: Mono
   Mono: Playback [on]
Card1.Amixer.info:
 Card hw:1 'Generic_1'/'HD-Audio Generic at 0xfe020000 irq 16'
   Mixer name : 'Realtek ALC889'
   Components : 'HDA:10ec0889,1458a102,00100004'
   Controls : 37
   Simple ctrls : 22
Card2.Amixer.info:
 Card hw:2 'HD'/'Creative Technology Ltd. VF0700 Live! Cam Chat HD at usb-0000:00:12.2-4.2, high'
   Mixer name : 'USB Mixer'
   Components : 'USB041e:4088'
   Controls : 2
   Simple ctrls : 1
Card2.Amixer.values:
 Simple mixer control 'Mic',0
   Capabilities: cvolume cvolume-joined cswitch cswitch-joined penum
   Capture channels: Mono
   Limits: Capture 0 - 5632
   Mono: Capture 4974 [88%] [-2.58dB] [on]
DistroRelease: Ubuntu 11.10
HibernationDevice: RESUME=UUID=1de9e73b-60a0-4cf5-8f8f-186d384884b1
InstallationMedia: Kubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
MachineType: Gigabyte Technology Co., Ltd. GA-A75M-UD2H
Package: linux (not installed)
ProcEnviron:
 LANGUAGE=de_DE
 LANG=de_DE.UTF-8
 LC_MESSAGES=de_DE.UTF-8
 SHELL=/bin/bash
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.0.0-10-generic root=UUID=4c9d3fc1-09ce-4dbc-b7b7-deb42a0ce6af ro quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 3.0.0-10.16-generic 3.0.4
RelatedPackageVersions:
 linux-restricted-modules-3.0.0-10-generic N/A
 linux-backports-modules-3.0.0-10-generic N/A
 linux-firmware 1.60
RfKill:
 0: phy0: Wireless LAN
  Soft blocked: no
  Hard blocked: no
Tags: oneiric
Uname: Linux 3.0.0-10-generic x86_64
UpgradeStatus: Upgraded to oneiric on 2011-09-01 (4 days ago)
UserGroups: adm admin cdrom dialout fuse lpadmin plugdev sambashare
dmi.bios.date: 07/12/2011
dmi.bios.vendor: Award Software International, Inc.
dmi.bios.version: F3
dmi.board.name: GA-A75M-UD2H
dmi.board.vendor: Gigabyte Technology Co., Ltd.
dmi.chassis.type: 3
dmi.chassis.vendor: Gigabyte Technology Co., Ltd.
dmi.modalias: dmi:bvnAwardSoftwareInternational,Inc.:bvrF3:bd07/12/2011:svnGigabyteTechnologyCo.,Ltd.:pnGA-A75M-UD2H:pvr:rvnGigabyteTechnologyCo.,Ltd.:rnGA-A75M-UD2H:rvr:cvnGigabyteTechnologyCo.,Ltd.:ct3:cvr:
dmi.product.name: GA-A75M-UD2H
dmi.sys.vendor: Gigabyte Technology Co., Ltd.

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 842955

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Christian Lins (cli)]

apport information

[Leann Ogasawara (leannogasawara)]

Hi Christian,

I believe this might be resolved with the following upstream commit (which was included as of v3.1-rc4). Give me a bit and I'll get a test kernel built for you to try. Thanks.

commit 674db1344443204b6ce3293f2df8fd1b7665deea
Author: Stanislaw Gruszka <email address hidden>
Date: Wed Aug 10 15:32:24 2011 +0200

    rt2x00: fix crash in rt2800usb_get_txwi

[Leann Ogasawara (leannogasawara)]

Hi Christian,

I've place a test kernel at the following location. Please test and let me know your results. Thanks.

http://people.canonical.com/~ogasawara/lp842955/

[Christian Lins (cli)]

Hi Leann,

thanks for your kernel package. I'm afraid it's not working either, but it crashes in another function (full log attached):

Sep 7 19:57:31 zaphod kernel: [ 401.021190] BUG: unable to handle kernel NULL pointer dereference at 00000000000000e0
Sep 7 19:57:31 zaphod kernel: [ 401.021328] IP: [<ffffffffa03df05d>] rt2800usb_write_tx_desc+0xd/0x70 [rt2800usb]
Sep 7 19:57:31 zaphod kernel: [ 401.021454] PGD 0
Sep 7 19:57:31 zaphod kernel: [ 401.021488] Oops: 0000 [#1] SMP
Sep 7 19:57:31 zaphod kernel: [ 401.021543] CPU 2
Sep 7 19:57:31 zaphod kernel: [ 401.021575] Modules linked in: nls_iso8859_1 nls_cp437 vfat fat bnep rfcomm bluetooth pci_stub vboxpci vboxnetadp vboxnetflt vboxdrv kvm_amd kvm speedstep_lib dm_crypt binfmt_misc arc4 snd_hda_codec_realtek rt2800usb rt2800lib crc_ccitt rt2x00usb rt2x00lib mac80211 cfg80211 joydev snd_hda_codec_hdmi uvcvideo videodev snd_usb_audio v4l2_compat_ioctl32 snd_usbmidi_lib ppdev snd_hda_intel snd_hda_codec snd_seq_midi snd_hwdep snd_rawmidi snd_pcm serio_raw snd_seq_midi_event snd_seq k10temp i2c_piix4 snd_timer snd_seq_device parport_pc snd soundcore snd_page_alloc it87 hwmon_vid lp parport usb_storage uas usbhid hid radeon firewire_ohci firewire_core crc_itu_t ahci libahci ttm drm_kms_helper drm r8169 i2c_algo_bit xhci_hcd
Sep 7 19:57:31 zaphod kernel: [ 401.022672]
Sep 7 19:57:31 zaphod kernel: [ 401.022699] Pid: 2771, comm: ssh Not tainted 3.0.0-11-generic #17~lp842955 Gigabyte Technology Co., Ltd. GA-A75M-UD2H/GA-A75M-UD2H
Sep 7 19:57:31 zaphod kernel: [ 401.022883] RIP: 0010:[<ffffffffa03df05d>] [<ffffffffa03df05d>] rt2800usb_write_tx_desc+0xd/0x70 [rt2800usb]
Sep 7 19:57:31 zaphod kernel: [ 401.023040] RSP: 0018:ffff880188b8f6c8 EFLAGS: 00010286
Sep 7 19:57:31 zaphod kernel: [ 401.023120] RAX: ffffffffa03e11c0 RBX: ffff88018b6d78f0 RCX: 0000000000000007
Sep 7 19:57:31 zaphod kernel: [ 401.023227] RDX: 0000000000000000 RSI: ffff880188b8f6d8 RDI: ffff8801e3379120
Sep 7 19:57:31 zaphod kernel: [ 401.023334] RBP: ffff880188b8f6c8 R08: 0000000000000004 R09: ffff88013b2ce700
Sep 7 19:57:31 zaphod kernel: [ 401.023441] R10: 65cc31cac0000b45 R11: b24305bc00004188 R12: ffff8801e0f15d38
Sep 7 19:57:31 zaphod kernel: [ 401.027541] R13: ffff8801e3379120 R14: 0000000000000000 R15: ffff8801e2e04670
Sep 7 19:57:31 zaphod kernel: [ 401.030830] FS: 00007f6184f757e0(0000) GS:ffff8801eec80000(0000) knlGS:00000000f676bac0
Sep 7 19:57:31 zaphod kernel: [ 401.030830] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Sep 7 19:57:31 zaphod kernel: [ 401.030830] CR2: 00000000000000e0 CR3: 000000018cfab000 CR4: 00000000000006e0
Sep 7 19:57:31 zaphod kernel: [ 401.030830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Sep 7 19:57:31 zaphod kernel: [ 401.030830] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Sep 7 19:57:31 zaphod kernel: [ 401.030830] Process ssh (pid: 2771, threadinfo ffff880188b8e000, task ffff8801e03ec560)
Sep 7 19:57:31 zaphod kernel: [ 401.030830] Stack:
Sep 7 19:57:31 zaphod kernel: [ 401.030830] ffff880188b8f728 ffffffffa03f0225 0000000000003e88 07000007001a05fe
Sep 7 19:57:31 zaphod kernel: [ 401.030...

[Leann Ogasawara (leannogasawara)]

Thanks Christian,

Looks like there's one additional patch I should pull in (see below). I'm building a second test kernel right now. I'll post it here when it's ready. Thanks.

commit 4b1bfb7d2d125af6653d6c2305356b2677f79dc6
Author: Stanislaw Gruszka <email address hidden>
Date: Wed Aug 10 15:32:22 2011 +0200

    rt2x00: fix crash in rt2800usb_write_tx_desc

[Leann Ogasawara (leannogasawara)]

Hi Christian,

I've placed the next test kernel at the same location, just versioned it as v2, ie 3.0.0-11.17~lp842955v2

http://people.canonical.com/~ogasawara/lp842955/

Please test and let me know your results. Thanks.

[Christian Lins (cli)]

Hi Leann,

I'm running your kernel for over an hour and I have transmitted several gigabytes data over wifi. As far as I can see, it works fine :)

Thanks!

[Leann Ogasawara (leannogasawara)]

Hi Christian,

Thanks for the quick turn around with the testing. I've gone ahead and submitted the patches to the Ubuntu kernel-team mailing list for consideration. Thanks.

https://lists.ubuntu.com/archives/kernel-team/2011-September/016953.html

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.0.0-11.17

---------------
linux (3.0.0-11.17) oneiric; urgency=low

  [ Chase Douglas ]

  * SAUCE: HID: magicmouse: Set resolution of touch surfaces

  [ Jiri Kosina ]

  * SAUCE: HID: add MacBookAir4, 2 to hid_have_special_driver[]

  [ Joshua V. Dillon ]

  * SAUCE: HID: add support for MacBookAir4,2 keyboard.

  [ Leann Ogasawara ]

  * [Config] Add aufs to virtual flavor inclusion list
    - LP: #844159

  [ Luke Yelavich ]

  * [Config] Disable legacy IDE drivers on powerpc

  [ Upstream Kernel Changes ]

  * drm/i915: set GFX_MODE to pre-Ivybridge default value even on Ivybridge
  * rt2x00: Move rt2800_txdone and rt2800_txdone_entry_check to rt2800usb.
    - LP: #842955
  * rt2x00: fix crash in rt2800usb_get_txwi
    - LP: #842955
  * rt2x00: fix crash in rt2800usb_write_tx_desc
    - LP: #842955
 -- Leann Ogasawara <email address hidden> Tue, 06 Sep 2011 10:18:13 -0700