general protection fault: 0000 [#1] SMP on wl_cfg80211_scan+0x43/0x380 [wl]

Bug #1089114 reported by C de-Avillez
38
This bug affects 7 people
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Confirmed
High
Unassigned

Bug Description

After today's updates for Raring (including the 3.7.0-6 kernel, a boot shows a GPF; the system keeps on, but is unusable (not possible to complete logon to KDE, some commands never end, etc).

*NOTE* Still fails on 3.7.0-7.

Eventually I was able to recover the system by booting from a rescue image, and blacklisting:
wl
mac80211
cfg80211.

My system carries a Broadcom wireless chip:
03:00.0 Network controller: Broadcom Corporation BCM43224 802.11a/b/g/n (rev 01)

This is the error:

Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> wpa_supplicant started
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2) supports 1 scan SSIDs
Dec 11 12:34:16 xango3 NetworkManager[1502]: <warn> Trying to remove a non-existant call id.
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): supplicant interface state: starting -> ready
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): device state change: unavailable -> disconnected (reason 'supplicant-available') [20 30 42]
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): supplicant interface state: ready -> inactive
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2) supports 1 scan SSIDs
11 microcode(F) sparse_keymap ppdev(F) dcdbas scsi_dh snd_page_alloc(F) snd_seq_midi(F) snd_seq_midi_event(F) snd_rawmidi(F) serio_raw(F) snd_seq(F) snd_seq_device(F) snd_timer(F) snd(F) intel_ips lpc_ich soundcore(F) parport_pc(F) mac_hid wmi tpm_rng tpm_tis lp(F) parport(F) dm_crypt(F) nbd(F) hid_logitech_dj usbhid hid ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) ablk_helper(F) cryptd(F) xts(F) lrw(F) gf128mul(F) firewire_ohci sdhci_pci sdhci firewire_core crc_itu_t
Dec 11 12:34:16 xango3 kernel: (F) video(F) e1000e(F)
Dec 11 12:34:16 xango3 kernel: [ 20.514710] CPU 2
Dec 11 12:34:16 xango3 kernel: [ 20.514719] Pid: 1856, comm: wpa_supplicant Tainted: PF O 3.7.0-6-generic #14-Ubuntu Dell Inc. Latitude E6410/0K42JR
Dec 11 12:34:16 xango3 kernel: [ 20.514773] RIP: 0010:[<ffffffffa06a1013>] [<ffffffffa06a1013>] wl_cfg80211_scan+0x43/0x380 [wl]
Dec 11 12:34:16 xango3 kernel: [ 20.514843] RSP: 0018:ffff8802209299e0 EFLAGS: 00010282
Dec 11 12:34:16 xango3 kernel: [ 20.514864] RAX: ffffffffa085db98 RBX: ffff880220929a80 RCX: ffff88022375a1e0
Dec 11 12:34:16 xango3 kernel: [ 20.514888] RDX: ffff88022375a1e0 RSI: ffff880221e20000 RDI: ffff88022375a1e0
Dec 11 12:34:16 xango3 kernel: [ 20.514911] RBP: ffff880220929a08 R08: ffffffff81cb1200 R09: 000000000000007c
Dec 11 12:34:16 xango3 kernel: [ 20.514935] R10: 0000000000000003 R11: 000000000000006e R12: 0086162600000001
Dec 11 12:34:16 xango3 kernel: [ 20.514959] R13: 0000000000000001 R14: ffff880221e20000 R15: 0000000000000000
Dec 11 12:34:16 xango3 kernel: [ 20.514982] FS: 00007ffb86f61740(0000) GS:ffff88022fc80000(0000) knlGS:0000000000000000
Dec 11 12:34:16 xango3 kernel: [ 20.515022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec 11 12:34:16 xango3 kernel: [ 20.515046] CR2: 0000000000fd06e8 CR3: 000000022224a000 CR4: 00000000000007e0
Dec 11 12:34:16 xango3 kernel: [ 20.515072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Dec 11 12:34:16 xango3 kernel: [ 20.515099] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Dec 11 12:34:16 xango3 kernel: [ 20.515123] Process wpa_supplicant (pid: 1856, threadinfo ffff880220928000, task ffff88021c634500)
Dec 11 12:34:16 xango3 kernel: [ 20.515159] Stack:
Dec 11 12:34:16 xango3 kernel: [ 20.515175] ffff880220929a80 ffff88022375a000 0000000000000001 ffff880221e20000
Dec 11 12:34:16 xango3 kernel: [ 20.515226] 0000000000000000 ffff880220929a60 ffffffffa01deb35 000000000000007c
Dec 11 12:34:16 xango3 kernel: [ 20.515275] 0000000000000004 ffff88022206f400 ffff88022375a1e0 ffffffffa01ef3e0
Dec 11 12:34:16 xango3 kernel: [ 20.515327] Call Trace:
Dec 11 12:34:16 xango3 kernel: [ 20.515354] [<ffffffffa01deb35>] nl80211_trigger_scan+0x485/0x610 [cfg80211]
Dec 11 12:34:16 xango3 kernel: [ 20.515385] [<ffffffff815b9920>] genl_rcv_msg+0x250/0x2d0
Dec 11 12:34:16 xango3 kernel: [ 20.515408] [<ffffffff815b96d0>] ? genl_rcv+0x30/0x30
Dec 11 12:34:16 xango3 kernel: [ 20.515434] [<ffffffff815b92e9>] netlink_rcv_skb+0xa9/0xc0
Dec 11 12:34:16 xango3 kernel: [ 20.515457] [<ffffffff815b96c1>] genl_rcv+0x21/0x30
Dec 11 12:34:16 xango3 kernel: [ 20.515479] [<ffffffff815b8c21>] netlink_unicast+0x1a1/0x220
Dec 11 12:34:16 xango3 kernel: [ 20.515502] [<ffffffff815b8f91>] netlink_sendmsg+0x2f1/0x3b0
Dec 11 12:34:16 xango3 kernel: [ 20.515529] [<ffffffff8157948c>] sock_sendmsg+0xbc/0xf0
Dec 11 12:34:16 xango3 kernel: [ 20.515554] [<ffffffff8119af00>] ? __pollwait+0xf0/0xf0
Dec 11 12:34:16 xango3 kernel: [ 20.515576] [<ffffffff8157986c>] __sys_sendmsg+0x3ac/0x3c0
Dec 11 12:34:16 xango3 kernel: [ 20.515601] [<ffffffff8101daee>] ? fpu_finit+0x1e/0x30
Dec 11 12:34:16 xango3 kernel: [ 20.515623] [<ffffffff8101de11>] ? init_fpu+0x61/0xc0
Dec 11 12:34:16 xango3 kernel: [ 20.515645] [<ffffffff8101ed98>] ? __restore_xstate_sig+0x238/0x530
Dec 11 12:34:16 xango3 kernel: [ 20.515670] [<ffffffff810144ed>] ? do_signal+0x19d/0x990
Dec 11 12:34:16 xango3 kernel: [ 20.515695] [<ffffffff8106ad7b>] ? recalc_sigpending+0x1b/0x60
Dec 11 12:34:16 xango3 kernel: [ 20.515718] [<ffffffff8157b709>] sys_sendmsg+0x49/0x90
Dec 11 12:34:16 xango3 kernel: [ 20.515742] [<ffffffff816ab81d>] system_call_fastpath+0x1a/0x1f
Dec 11 12:34:16 xango3 kernel: [ 20.515764] Code: 4c 89 65 e0 4c 89 6d e8 4c 89 7d f8 48 8b 86 50 02 00 00 48 85 c0 0f 84 e7 02 00 00 4c 8b 20 4d 85 e4 0f 84 db 02 00 00 48 85 d2 <49> 8b 9c 24 60 06 00 00 0f 84 bf 02 00 00 f6 c3 01 49 89 94 24
Dec 11 12:34:16 xango3 kernel: [ 20.516131] RIP [<ffffffffa06a1013>] wl_cfg80211_scan+0x43/0x380 [wl]
Dec 11 12:34:16 xango3 kernel: [ 20.516176] RSP <ffff8802209299e0>
Dec 11 12:34:16 xango3 kernel: [ 20.516223] ---[ end trace d936bdb24cea685f ]---
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> wpa_supplicant stopped
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): supplicant interface state: inactive -> down
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): device state change: disconnected -> unavailable (reason 'supplicant-failed') [30 20 10]
Dec 11 12:34:16 xango3 NetworkManager[1502]: <info> (eth2): deactivating device (reason 'supplicant-failed') [10]
Dec 11 12:34:16 xango3 ntpd_intres[1595]: host name not found: 0.ubuntu.pool.ntp.org
Dec 11 12:34:16 xango3 ntpd_intres[1595]: host name not found: 1.ubuntu.pool.ntp.org
Dec 11 12:34:16 xango3 ntpd_intres[1595]: host name not found: 2.ubuntu.pool.ntp.org
Dec 11 12:34:16 xango3 ntpd_intres[1595]: host name not found: 3.ubuntu.pool.ntp.org
Dec 11 12:34:16 xango3 ntpd_intres[1595]: host name not found: ntp.ubuntu.com
Dec 11 12:34:16 xango3 acpid: client connected from 1725[0:0]

ProblemType: BugDistroRelease: Ubuntu 13.04
Package: linux-image-3.7.0-6-generic 3.7.0-6.14
ProcVersionSignature: Ubuntu 3.7.0-6.14-generic 3.7.0
Uname: Linux 3.7.0-6-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.7-0ubuntu1
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: cerdea 4854 F.... pulseaudio
 /dev/snd/controlC0: cerdea 4854 F.... pulseaudio
 /dev/snd/pcmC0D0c: cerdea 4854 F...m pulseaudio
 /dev/snd/pcmC0D0p: cerdea 4854 F...m pulseaudio
CRDA: Error: command ['iw', 'reg', 'get'] failed with exit code 1: nl80211 not found.
CheckboxSubmission: c8a7d84e13c3b258e707f056604eb0e0
CheckboxSystem: d00f84de8a555815fa1c4660280da308
Date: Tue Dec 11 14:57:31 2012
HibernationDevice: RESUME=UUID=5aeaf922-8187-4663-b93d-08b2df7b025e
InstallationDate: Installed on 2012-07-02 (162 days ago)
InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Alpha amd64 (20120701)
MachineType: Dell Inc. Latitude E6410
MarkForUpload: True
ProcFB:

ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.7.0-6-generic root=/dev/mapper/hostname--vg-hostname--root ro recovery nomodeset
RelatedPackageVersions:
 linux-restricted-modules-3.7.0-6-generic N/A
 linux-backports-modules-3.7.0-6-generic N/A
 linux-firmware 1.98
RfKill:
 0: hci0: Bluetooth
  Soft blocked: no
  Hard blocked: noSourcePackage: linux
UpgradeStatus: Upgraded to raring on 2012-11-19 (22 days ago)
dmi.bios.date: 07/30/2012
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A13
dmi.board.name: 0K42JR
dmi.board.vendor: Dell Inc.
dmi.board.version: A01
dmi.chassis.type: 9
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvrA13:bd07/30/2012:svnDellInc.:pnLatitudeE6410:pvr0001:rvnDellInc.:rn0K42JR:rvrA01:cvnDellInc.:ct9:cvr:
dmi.product.name: Latitude E6410
dmi.product.version: 0001
dmi.sys.vendor: Dell Inc.

Revision history for this message
C de-Avillez (hggdh2) wrote :
Revision history for this message
C de-Avillez (hggdh2) wrote :
Changed in linux (Ubuntu):
importance: Undecided → High
tags: added: regression-update
tags: added: wl-cfg80211-scan
Revision history for this message
Brad Figg (brad-figg) wrote : Status changed to Confirmed

This change was made by a bot.

Changed in linux (Ubuntu):
status: New → Confirmed
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Hey Carlos,

It would be good if we can narrow down the last good kernel and first bad kernel. It sounds like you are seeing this on:
 3.7.0-5 and 3.7.0-6.

3.7.0-5 was rebased to upstream v3.7-rc8, so it would be good to test the following kernels:

v3.7-rc5: http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.7-rc5-raring/
v3.7-rc6: http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.7-rc6-raring/
v3.7-rc7: http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.7-rc7-raring/

You don't have to test every kernel, just up until the kernel that first has this bug.

Thanks in advance!

tags: added: performing-bisect
Revision history for this message
C de-Avillez (hggdh2) wrote :

All of rc5, 6, and 7 fail the same. Interestingly, previous kernels do not fail -- because there is no 'wl.ko' anymore for them. Today I did download and install a new Broadcom STA source package -- 6.20.155.1+bdcom-0ubuntu1. It seems it was built only for the 3.7.x kernels.

Revision history for this message
C de-Avillez (hggdh2) wrote :

Undupping from bug 1089157 -- that bug is on kernel 3.7.0-5, and downgrading bcmwl to 5.100.82.112+bdcom-0ubuntu4 works.

On 3.7.0-6, bcmwl at versions 5.100.82.112+bdcom-0ubuntu4, 6.20.155.1+bdcom-0ubuntu1, and 6.20.155.1+bdcom-0ubuntu2 cause a kernel crash.

Revision history for this message
Alan (alanjas) wrote :

5.1 works.. 6.2.. crash :-(

Ubuntu 13.04 Raring

uname -a
Linux alan-pc 3.7.0-5-generic #13-Ubuntu SMP Tue Dec 4 18:20:53 UTC 2012 i686 i686 i686 GNU/Linux

lspci -vvnn | grep 14e4
04:00.0 Network controller [0280]: Broadcom Corporation BCM43225 802.11b/g/n [14e4:4357] (rev 01)

Revision history for this message
Alan (alanjas) wrote :

My dmesg file..

C de-Avillez (hggdh2)
description: updated
Gema Gomez (gema)
tags: added: rls-r-incoming
Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

The v3.8-rc2 kernel is now available. Can you test this latest kernel to see if the bug still exists?

One other question, in comment #5 you mention that previous kernels do not fail. Does that mean v3.7-rc4 does not exhibit the bug?

[0] http://kernel.ubuntu.com/~kernel-ppa/mainline/v3.8-rc2-raring/

Changed in linux (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
C de-Avillez (hggdh2) wrote :
Download full text (6.1 KiB)

Fails the same on 3.8 RC2:

Jan 9 14:07:50 xango3 kernel: [ 388.374077] general protection fault: 0000 [#1] SMP
Jan 9 14:07:50 xango3 kernel: [ 388.374285] Modules linked in: lib80211_crypt_tkip wl(POF) lib80211 cfg80211 pci_stub vboxpci(OF) vboxnetadp(OF) vboxnetflt(OF) vboxdrv(OF) nfnetlink_log nfnetlink ip6table_filter ip6_tables ebtable_nat ebtables xt_state ipt_REJECT xt_CHECKSUM iptable_mangle xt_tcpudp iptable_filter ipt_MASQUERADE iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables bridge stp llc bnep rfcomm snd_hda_codec_hdmi nvidia(POF) uvcvideo videobuf2_vmalloc snd_hda_codec_idt snd_hda_intel videobuf2_memops snd_hda_codec videobuf2_core snd_hwdep joydev coretemp videodev snd_pcm snd_page_alloc snd_seq_midi kvm_intel snd_seq_midi_event btusb snd_rawmidi kvm snd_seq bluetooth snd_seq_device snd_timer snd psmouse dm_multipath dell_laptop soundcore lpc_ich microcode dcdbas dell_wmi sparse_keymap serio_raw intel_ips scsi_dh wmi ppdev mac_hid parport_pc tpm_rng tpm_tis lp parport dm_crypt nbd hid_logitech_dj usbhid hid ghash_clmulni_intel aesni_intel aes_x86_64 ablk_hel
Jan 9 14:07:50 xango3 kernel: per cryptd xts lrw gf128mul video sdhci_pci sdhci firewire_ohci firewire_core crc_itu_t e1000e
Jan 9 14:07:50 xango3 kernel: [ 388.380425] CPU 3
Jan 9 14:07:50 xango3 kernel: [ 388.380489] Pid: 4141, comm: wpa_supplicant Tainted: PF O 3.8.0-030800rc2-generic #201301022235 Dell Inc. Latitude E6410/0K42JR
Jan 9 14:07:50 xango3 kernel: [ 388.380664] RIP: 0010:[<ffffffffa0f66783>] [<ffffffffa0f66783>] wl_cfg80211_scan+0x43/0x380 [wl]
Jan 9 14:07:50 xango3 kernel: [ 388.380867] RSP: 0018:ffff880222a81970 EFLAGS: 00010286
Jan 9 14:07:50 xango3 kernel: [ 388.380946] RAX: ffffffffa1122b98 RBX: ffff88021ff57800 RCX: 0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.381029] RDX: ffff880220bf3200 RSI: ffff88021ff57800 RDI: ffff880220bf3200
Jan 9 14:07:50 xango3 kernel: [ 388.381110] RBP: ffff880222a81998 R08: 0000000000000003 R09: 0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.381193] R10: ffffffffa11223a0 R11: 000000000000006e R12: 0086162600000001
Jan 9 14:07:50 xango3 kernel: [ 388.381275] R13: ffff880222a81a20 R14: ffff88021ff57800 R15: 0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.381359] FS: 00007f0cd8ec9740(0000) GS:ffff88022fcc0000(0000) knlGS:0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.381457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Jan 9 14:07:50 xango3 kernel: [ 388.381537] CR2: 0000000001ea8058 CR3: 0000000221f8b000 CR4: 00000000000007e0
Jan 9 14:07:50 xango3 kernel: [ 388.381620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.381703] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Jan 9 14:07:50 xango3 kernel: [ 388.381785] Process wpa_supplicant (pid: 4141, threadinfo ffff880222a80000, task ffff88021f831720)
Jan 9 14:07:50 xango3 kernel: [ 388.381884] Stack:
Jan 9 14:07:50 xango3 kernel: [ 388.381959] ffff88021ff57800 ffff880220bf3000 ffff880222a81a20 0000000000000000
Jan 9 14:07:50 xango3 kernel: [ 388.382282]...

Read more...

Changed in linux (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Chris Johnston (cjohnston) wrote :

I'm also having this issue. Please let me know if I can help with testing/finding a fix.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.