bluetooth disconnection corrupts memory and causes kernel panic
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
Medium
|
Chris J Arges | ||
Raring |
Won't Fix
|
Medium
|
Unassigned | ||
Saucy |
Fix Released
|
Medium
|
Chris J Arges |
Bug Description
This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit ecbbfd44.
To reproduce:
1) Pair a bluetooth device that is capable of being easily powered down (a phone for example)
2) Configure /etc/bluetooth/
rfcomm0 {
bind no;
device XX:XX:XX:XX:XX:XX;
channel XX;
comment "phone";
}
3) Type 'rfcomm connect 0'.
4) On the device power down the bluetooth component or power down the device.
5) Eventually the machine will crash, I've found that exec'ing another program will cause the crash easily.
ProblemType: KernelCrash
DistroRelease: Ubuntu 13.10
Package: linux-image-
ProcVersionSign
Uname: Linux 3.9.0-4-generic x86_64
ApportVersion: 2.10.2-0ubuntu1
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
Date: Tue Jun 11 12:22:26 2013
HibernationDevice: RESUME=
InstallationDate: Installed on 2013-06-05 (5 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Alpha amd64 (20130605)
MachineType: LENOVO 42872WU
MarkForUpload: True
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=
PulseList:
Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not accessible: Permission denied
No PulseAudio daemon running, or not running as session daemon.
RelatedPackageV
linux-
linux-
linux-firmware 1.109
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 11/01/2011
dmi.bios.vendor: LENOVO
dmi.bios.version: 8DET55WW (1.25 )
dmi.board.
dmi.board.name: 42872WU
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.
dmi.modalias: dmi:bvnLENOVO:
dmi.product.name: 42872WU
dmi.product.
dmi.sys.vendor: LENOVO
--
The actual crash:
[ 507.050158] Bluetooth: TIOCGSERIAL is not supported
[ 513.902765] ------------[ cut here ]------------
[ 513.902781] WARNING: at /build/
[ 513.902784] Hardware name: 42872WU
[ 513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm parport_pc(F) crc32_pclmul(F) ghash_clmulni_
[ 513.902871] Pid: 863, comm: modem-manager Tainted: GF 3.9.0-4-generic #9-Ubuntu
[ 513.902873] Call Trace:
[ 513.902883] [<ffffffff81058
[ 513.902889] [<ffffffff81058
[ 513.902894] [<ffffffff81075
[ 513.902900] [<ffffffff81078
[ 513.902909] [<ffffffffa0513
[ 513.902916] [<ffffffff8117d
[ 513.902922] [<ffffffff81078
[ 513.902928] [<ffffffff81078
[ 513.902935] [<ffffffff81419
[ 513.902940] [<ffffffff8141a
[ 513.902946] [<ffffffff81413
[ 513.902953] [<ffffffff81195
[ 513.902958] [<ffffffff81195
[ 513.902964] [<ffffffff81079
[ 513.902970] [<ffffffff81013
[ 513.902977] [<ffffffff816db
[ 513.902980] ---[ end trace df6aa8116aaf35db ]---
[ 536.981969] BUG: unable to handle kernel paging request at 000000fffffffe00
[ 536.982013] IP: [<ffffffff8117f
[ 536.982050] PGD 0
[ 536.982061] Oops: 0000 [#1] SMP
[ 536.982079] Modules linked in: intel_powerclamp coretemp kvm_intel kvm parport_pc(F) crc32_pclmul(F) ghash_clmulni_
[ 536.982464] CPU 3
[ 536.982476] Pid: 1586, comm: dbus-daemon Tainted: GF W 3.9.0-4-generic #9-Ubuntu LENOVO 42872WU/42872WU
[ 536.982522] RIP: 0010:[<
[ 536.982567] RSP: 0018:ffff880116
[ 536.982591] RAX: 0000000000000000 RBX: ffff8800d3ce3c00 RCX: 000000000000c011
[ 536.982623] RDX: 000000000000c010 RSI: 0000000000000000 RDI: 0000000000017080
[ 536.982657] RBP: ffff880116709a10 R08: ffff88011e2d7080 R09: ffff880119802a00
[ 536.982688] R10: ffff880119810400 R11: 0000000000000246 R12: 00000000000106d0
[ 536.982719] R13: 000000fffffffe00 R14: 0000000000000200 R15: 00000000ffffffff
[ 536.982751] FS: 00007fab0e00880
[ 536.982787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 536.982812] CR2: 000000fffffffe00 CR3: 0000000116606000 CR4: 00000000000407e0
[ 536.982844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 536.982875] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 536.982907] Process dbus-daemon (pid: 1586, threadinfo ffff880116708000, task ffff880113de45f0)
[ 536.982945] Stack:
[ 536.982954] 0000000000000001 ffff880119802a00 ffffffff815be9ae ffff8800d3ce3c00
[ 536.982991] ffff880116709a6f 00000000000004d0 0000000000000200 00000000ffffffff
[ 536.983026] ffff880116709a50 ffffffff815be741 ffffffff815be97e ffff8800d3ce3c00
[ 536.983062] Call Trace:
[ 536.983078] [<ffffffff815be
[ 536.983105] [<ffffffff815be
[ 536.983135] [<ffffffff815be
[ 536.983162] [<ffffffff815be
[ 536.983188] [<ffffffff815b9
[ 536.983218] [<ffffffff815bf
[ 536.983244] [<ffffffff816d2
[ 536.983270] [<ffffffff815ba
[ 536.983300] [<ffffffff8165f
[ 536.983328] [<ffffffff815b5
[ 536.983353] [<ffffffff815b5
[ 536.983380] [<ffffffff81098
[ 536.983408] [<ffffffff815c2
[ 536.983434] [<ffffffff815b5
[ 536.983461] [<ffffffff811da
[ 536.983492] [<ffffffff81043
[ 536.983522] [<ffffffff811da
[ 536.983554] [<ffffffff811da
[ 536.983578] [<ffffffff815b7
[ 536.984924] [<ffffffff816db
[ 536.986258] Code: 49 63 41 18 66 66 66 66 90 4c 89 e8 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 1f 44 00 00 49 63 41 20 48 8d 4a 01 49 8b 39 <49> 8b 5c 05 00 4c 89 e8 65 48 0f c7 0f 0f 94 c0 84 c0 0f 84 65
[ 536.989223] RIP [<ffffffff8117f
[ 536.990667] RSP <ffff8801167099d0>
[ 536.992062] CR2: 000000fffffffe00
description: | updated |
tags: | added: cherry-pick |
tags: | added: bios-outdated-1.38 |
Changed in linux (Ubuntu Raring): | |
status: | Confirmed → In Progress |
Changed in linux (Ubuntu Raring): | |
assignee: | Chris J Arges (arges) → nobody |
status: | In Progress → Confirmed |
status: | Confirmed → New |
This change was made by a bot.