8086:4224 Panic after enabling rtap_iface in ipw2200 driver (ipw_handle_promiscuous_tx / skb_put)

[Vittorio Gambaletta (VittGam)]

1) Enable the rtap_iface of the ipw2200 driver by echoing 1 in /sys/module/ipw2200/drivers/pci:ipw2200/*/rtap_iface

2) ifconfig rtap0 up

3) Use the eth1 wireless interface (eg. send some data, connect to a network) or even just run ifconfig many times

4) A kernel panic occurs.

I'm attaching two screenshots of the panic, took one on 3.0.0-16-generic and one on 3.0.0-16-generic-tuxonice.

uname -a is:
Linux VittGamLaptop2 3.0.0-16-generic-tuxonice #29~ppa1-Ubuntu SMP Fri Mar 9 10:57:58 UTC 2012 i686 i686 i386 GNU/Linux

The computer is an IBM Thinkpad X41. The ipw2200 module I use is the stock module that comes with the Ubuntu kernel.

The bug still exists with:
linux-image-3.4.0-999-generic-pae_3.4.0-999.201205170406_i386.deb 17-May-2012 08:27

As per https://bugzilla.kernel.org/show_bug.cgi?id=43255#c5 :
A patch fixing this bug was merged upstream at Linux v3.7-rc2:
commit bf11315eeda510ea4fc1a2bf972d8155d31d89b4
Author: Stanislav Yakovlev <email address hidden>
Date: Mon Oct 15 14:14:32 2012 +0000
    net/wireless: ipw2200: Fix panic occurring in ipw_handle_promiscuous_tx().

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: linux-image-3.0.0-16-generic 3.0.0-16.29
ProcVersionSignature: Ubuntu 3.0.0-16.29-generic 3.0.20
Uname: Linux 3.0.0-16-generic i686
NonfreeKernelModules: hsfengine
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
ApportVersion: 1.23-0ubuntu4
Architecture: i386
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: vittgam 2543 F.... pulseaudio
Card0.Amixer.info:
 Card hw:0 'ICH6'/'Intel ICH6 with AD1981B at irq 22'
   Mixer name : 'Analog Devices AD1981B'
   Components : 'AC97a:41445374'
   Controls : 26
   Simple ctrls : 18
Card29.Amixer.info:
 Card hw:29 'ThinkPadEC'/'ThinkPad Console Audio Control at EC reg 0x30, fw 74HT27WW-1.02'
   Mixer name : 'ThinkPad EC 74HT27WW-1.02'
   Components : ''
   Controls : 2
   Simple ctrls : 1
Card29.Amixer.values:
 Simple mixer control 'Console',0
   Capabilities: pvolume pvolume-joined pswitch pswitch-joined penum
   Playback channels: Mono
   Limits: Playback 0 - 14
   Mono: Playback 7 [50%] [on]
Date: Thu May 17 07:31:57 2012
HibernationDevice: RESUME=UUID=53b9be93-a8fd-4c41-ae67-b155d332d52b
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release i386 (20111012)
MachineType: IBM 252563G
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcEnviron:
 PATH=(custom, no user)
 LANG=it_IT.UTF-8
 SHELL=/bin/bash
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.0.0-16-generic root=UUID=a56df869-5dc4-4fd4-b185-70c063a596b3 ro quiet splash elevator=noop vt.handoff=7
PulseSinks: Error: command ['pacmd', 'list-sinks'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
PulseSources: Error: command ['pacmd', 'list-sources'] failed with exit code 1: No PulseAudio daemon running, or not running as session daemon.
RelatedPackageVersions:
 linux-restricted-modules-3.0.0-16-generic N/A
 linux-backports-modules-3.0.0-16-generic N/A
 linux-firmware 1.60
SourcePackage: linux
StagingDrivers: zram
UpgradeStatus: No upgrade log present (probably fresh install)
WifiSyslog:

dmi.bios.date: 12/14/2006
dmi.bios.vendor: IBM
dmi.bios.version: 74ET64WW (2.09 )
dmi.board.name: 252563G
dmi.board.vendor: IBM
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: IBM
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnIBM:bvr74ET64WW(2.09):bd12/14/2006:svnIBM:pn252563G:pvrThinkPadX41:rvnIBM:rn252563G:rvrNotAvailable:cvnIBM:ct10:cvrNotAvailable:
dmi.product.name: 252563G
dmi.product.version: ThinkPad X41
dmi.sys.vendor: IBM
---
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.25.
ApportVersion: 2.0.1-0ubuntu7
Architecture: i386
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: ubuntu 3211 F.... pulseaudio
Card0.Amixer.info:
 Card hw:0 'ICH6'/'Intel ICH6 with AD1981B at irq 22'
   Mixer name : 'Analog Devices AD1981B'
   Components : 'AC97a:41445374'
   Controls : 26
   Simple ctrls : 18
Card29.Amixer.info:
 Card hw:29 'ThinkPadEC'/'ThinkPad Console Audio Control at EC reg 0x30, fw 74HT27WW-1.02'
   Mixer name : 'ThinkPad EC 74HT27WW-1.02'
   Components : ''
   Controls : 2
   Simple ctrls : 1
Card29.Amixer.values:
 Simple mixer control 'Console',0
   Capabilities: pvolume pvolume-joined pswitch pswitch-joined penum
   Playback channels: Mono
   Limits: Playback 0 - 14
   Mono: Playback 14 [100%] [on]
CasperVersion: 1.316
DistroRelease: Ubuntu 12.10
LiveMediaBuild: Ubuntu 12.10 "Quantal Quetzal" - Alpha i386 (20120517)
MachineType: IBM 252563G
Package: linux (not installed)
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 LANG=it_IT.UTF-8
 SHELL=/bin/bash
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: file=/cdrom/preseed/ubuntu.seed boot=casper initrd=/casper/initrd.lz quiet splash -- debian-installer/language=it keyboard-configuration/layoutcode?=it
ProcVersionSignature: Ubuntu 3.4.0-1.3-generic-pae 3.4.0-rc5
RelatedPackageVersions:
 linux-restricted-modules-3.4.0-1-generic-pae N/A
 linux-backports-modules-3.4.0-1-generic-pae N/A
 linux-firmware 1.80
SourcePackage: linux
Tags: quantal running-unity quantal
Uname: Linux 3.4.0-1-generic-pae i686
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 12/14/2006
dmi.bios.vendor: IBM
dmi.bios.version: 74ET64WW (2.09 )
dmi.board.name: 252563G
dmi.board.vendor: IBM
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: IBM
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnIBM:bvr74ET64WW(2.09):bd12/14/2006:svnIBM:pn252563G:pvrThinkPadX41:rvnIBM:rn252563G:rvrNotAvailable:cvnIBM:ct10:cvrNotAvailable:
dmi.product.name: 252563G
dmi.product.version: ThinkPad X41
dmi.sys.vendor: IBM

[penalvch (penalvch)]

VittGam, thank you for reporting this and helping make Ubuntu better. Please be sure to confirm this issue exists with the latest development release of Ubuntu. ISO CD images are available from http://cdimage.ubuntu.com/daily/current/ . If the issue remains, please run the following command in the development release from a Terminal (Applications->Accessories->Terminal). It will automatically gather and attach updated debug information to this report.

apport-collect -p linux <replace-with-bug-number>

Also, if you could test the latest upstream kernel available that would be great. It will allow additional upstream developers to examine the issue. Refer to https://wiki.ubuntu.com/KernelMainlineBuilds . Once you've tested the upstream kernel, please remove the 'needs-upstream-testing' tag. This can be done by clicking on the yellow pencil icon next to the tag located at the bottom of the bug description and deleting the 'needs-upstream-testing' text.

If this bug is fixed in the mainline kernel, please add the following tag 'kernel-fixed-upstream'.

If the mainline kernel does not fix this bug, please add the tag: 'kernel-bug-exists-upstream'.

If you are unable to test the mainline kernel, for example it will not boot, please add the tag: 'kernel-unable-to-test-upstream'.

Please let us know your results. Thanks in advance.

[Vittorio Gambaletta (VittGam) (vittgam)]

Is it okay if I use the live CD at http://cdimage.ubuntu.com/daily-live/current/ instead of the alternate CD you linked?

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

apport information

[Vittorio Gambaletta (VittGam) (vittgam)]

It crashed on the latest daily build of the 12.10 Live CD with kernel 3.4.0-1-generic-pae. I've ran apport, and I'm now going to attaching a screenshot of the panic.

[Vittorio Gambaletta (VittGam) (vittgam)]

The bug still exists with the latest mainline kernel as of now:

linux-image-3.4.0-999-generic-pae_3.4.0-999.201205170406_i386.deb 17-May-2012 08:27

I noted that the bug is hard to trigger starting from kernel 3.2; with 3.0 it triggered randomly, while now it triggers regularly only and only if I run sudo apt-get update...

[penalvch (penalvch)]

Marking Triaged as mainline tested.

[Julian Wiedmann (jwiedmann)]

VittGam,

the patch you mentioned has trickled down from upstream to all releases by now - could you please confirm that this issue is fixed?

[penalvch (penalvch)]

Vittorio G, the upstream patch is available in Precise+ as per http://kernel.ubuntu.com/git?p=ubuntu/ubuntu-precise.git;a=commit;h=bf11315eeda510ea4fc1a2bf972d8155d31d89b4 . Hence, this report is considered closed. If this did not address your issue, please execute the following in a terminal:
apport-collect 1000567