iwl3945 (intel Wireless 3945ABG) bug

[Saku Ytti]

I see this message after some time using computer:

[ 2810.259868] BUG: unable to handle kernel NULL pointer dereference at (null)
[ 2810.259881] IP: [<ffffffffa03570d6>] iwl3945_get_channels_for_scan+0xc6/0x210 [iwl3945]
[ 2810.259899] PGD 21ddd067 PUD 21ddc067 PMD 0
[ 2810.259908] Oops: 0000 [#1] SMP
[ 2810.259914] last sysfs file: /sys/devices/system/cpu/cpu1/cache/index2/shared_cpu_map
[ 2810.259921] CPU 1
[ 2810.259924] Modules linked in: binfmt_misc rfcomm sco bridge stp bnep l2cap snd_hda_codec_si3054 snd_hda_codec_analog vga16fb vgastate tpm_infineon arc4 snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi iwl3945 joydev snd_seq_midi_event pcmcia snd_seq i915 iwlcore mac80211 drm_kms_helper btusb snd_timer snd_seq_device bluetooth ppdev tifm_7xx1 hp_wmi tpm_tis drm yenta_socket i2c_algo_bit sdhci_pci sdhci pcmcia_rsrc tifm_core tpm psmouse snd parport_pc led_class pcmcia_core tpm_bios video cfg80211 serio_raw soundcore output snd_page_alloc intel_agp lp parport ohci1394 ieee1394 tg3
[ 2810.260018]
[ 2810.260024] Pid: 786, comm: iwl3945 Not tainted 2.6.35-2-generic #3-Ubuntu 30AA/HP Compaq nc6320 (EV073AV)
[ 2810.260030] RIP: 0010:[<ffffffffa03570d6>] [<ffffffffa03570d6>] iwl3945_get_channels_for_scan+0xc6/0x210 [iwl3945]
[ 2810.260044] RSP: 0018:ffff88006a13dcf0 EFLAGS: 00010296
[ 2810.260049] RAX: ffff880021fbe200 RBX: 0000000000000000 RCX: 0000000000000000
[ 2810.260055] RDX: 0000000000000001 RSI: 00000000c80d0000 RDI: ffff88006b2f1380
[ 2810.260060] RBP: ffff88006a13dd50 R08: 0000000000000000 R09: 0000000000000000
[ 2810.260065] R10: 0000000074d21900 R11: 0000000000000000 R12: ffff88006b2f1380
[ 2810.260070] R13: ffff88006a3f10f2 R14: 0000000000000000 R15: 0000000000000001
[ 2810.260077] FS: 0000000000000000(0000) GS:ffff880001f00000(0000) knlGS:0000000000000000
[ 2810.260083] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 2810.260088] CR2: 0000000000000000 CR3: 0000000021dd9000 CR4: 00000000000006e0
[ 2810.260093] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2810.260098] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2810.260104] Process iwl3945 (pid: 786, threadinfo ffff88006a13c000, task ffff88006b668000)
[ 2810.260109] Stack:
[ 2810.260112] ffff88006a13dd30 00ff0058ff060057 ffff88006a13dd01 ffffffff81052fdb
[ 2810.260120] <0> ffff88006a13de2c 0021000000000282 ffff88006a13dd30 ffff88006b2f1380
[ 2810.260129] <0> 0000000000000000 ffff88006a3f1000 0000000000000000 ffff88006a3f10d8
[ 2810.260140] Call Trace:
[ 2810.260152] [<ffffffff81052fdb>] ? load_balance+0xbb/0x4f0
[ 2810.260164] [<ffffffffa0357562>] iwl3945_request_scan+0x342/0x560 [iwl3945]
[ 2810.260185] [<ffffffffa02f95b9>] iwl_bg_start_internal_scan+0xc9/0xf0 [iwlcore]
[ 2810.260202] [<ffffffffa02f94f0>] ? iwl_bg_start_internal_scan+0x0/0xf0 [iwlcore]
[ 2810.260211] [<ffffffff81078695>] run_workqueue+0xc5/0x1a0
[ 2810.260218] [<ffffffff81078813>] worker_thread+0xa3/0x110
[ 2810.260226] [<ffffffff8107d510>] ? autoremove_wake_function+0x0/0x40
[ 2810.260233] [<ffffffff81078770>] ? worker_thread+0x0/0x110
[ 2810.260240] [<ffffffff8107cfb6>] kthread+0x96/0xa0
[ 2810.260248] [<ffffffff8100aee4>] kernel_thread_helper+0x4/0x10
[ 2810.260255] [<ffffffff8107cf20>] ? kthread+0x0/0xa0
[ 2810.260262] [<ffffffff8100aee0>] ? kernel_thread_helper+0x0/0x10
[ 2810.260266] Code: 88 55 ab 41 8d 56 ff 66 89 55 a8 eb 16 0f 1f 84 00 00 00 00 00 41 83 c7 01 44 39 78 0c 0f 86 c2 00 00 00 49 63 d7 4c 8b 74 d0 38 <41> 39 1e 75 e5 41 0f b7 56 06 89 de 4c 89 e7 44 89 45 a0 41 88
[ 2810.260340] RIP [<ffffffffa03570d6>] iwl3945_get_channels_for_scan+0xc6/0x210 [iwl3945]
[ 2810.260352] RSP <ffff88006a13dcf0>
[ 2810.260355] CR2: 0000000000000000
[ 2810.260361] ---[ end trace 4c8c7085f46be631 ]---

After this, many thing don't work anymore like mtr or sudo, chromium is not working. Processes can't also be killed:

[ytti@lintukoto ~]% ps aux|egrep -i "(mtr|sudo)"
ytti 5126 0.0 0.0 15652 464 pts/3 D+ 10:47 0:00 mtr www.xyz.com
root 5135 0.0 0.0 20528 960 pts/4 D+ 10:47 0:00 sudo -s
ytti 5178 0.0 0.0 7688 852 pts/5 S+ 10:51 0:00 egrep -i (mtr|sudo)
[ytti@lintukoto ~]%

[ytti@lintukoto ~]% ps aux|grep -i chromium
ytti 2176 2.4 0.0 0 0 ? Zl 10:03 1:11 [chromium-browse] <defunct>
ytti 2177 0.2 0.0 0 0 ? Z 10:03 0:08 [chromium-browse] <defunct>
ytti 2270 7.9 0.0 0 0 ? Z 10:03 3:51 [chromium-browse] <defunct>
ytti 5201 0.0 0.0 7696 852 pts/5 R+ 10:51 0:00 grep --color=auto -i chromium
[ytti@lintukoto ~]%

Load as reported by 'uptime' keep climbing, from tens to hundreds. Existing ssh sessions work just fine, UI is very responsive. I suspect load I/O wait for stuck network calls.
But as existing ssh works and ping works (mtr not) it is not everything that is stuck just something.

2.6.35-2 and 2.6.35-1 experience this 2.6.34-5 does not.

Easiest way to trigger is just to surf web with chromium, it seems to be trigger more likely with more activity. But perfectly normal use for me and it'll trigger several times during evening.
I haven't found way to recover, other than cold power down (soft shutdown just remain stuck).

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: linux-image-2.6.35-2-generic 2.6.35-2.3
Regression: Yes
Reproducible: Yes
ProcVersionSignature: Ubuntu 2.6.35-2.3-generic 2.6.35-rc2
Uname: Linux 2.6.35-2-generic x86_64
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.23.
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC0: ytti 1214 F.... pulseaudio
 /dev/snd/pcmC0D0p: ytti 1214 F...m pulseaudio
CRDA:
 country 98:
  (2402 - 2482 @ 40), (N/A, 17)
Card0.Amixer.info:
 Card hw:0 'Intel'/'HDA Intel at 0xe8580000 irq 44'
   Mixer name : 'Analog Devices AD1981'
   Components : 'HDA:11d41981,103c30aa,00100200 HDA:11c13026,103c30aa,00100700'
   Controls : 13
   Simple ctrls : 11
Date: Thu Jun 17 17:22:14 2010
MachineType: Hewlett-Packard HP Compaq nc6320 (EV073AV)
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.35-2-generic root=UUID=6f302a41-c2a8-4320-b1e1-fe945726f677 ro crashkernel=384M-2G:64M,2G-:128M quiet splash
RelatedPackageVersions: linux-firmware 1.36
SourcePackage: linux
WifiSyslog:
 Jun 17 16:54:19 lintukoto kernel: [ 1784.703779] lo: Disabled Privacy Extensions
 Jun 17 16:59:35 lintukoto kernel: [ 2100.124802] lo: Disabled Privacy Extensions
 Jun 17 17:20:00 lintukoto kernel: [ 3325.345989] lo: Disabled Privacy Extensions
 Jun 17 17:21:18 lintukoto kernel: [ 3403.997008] lo: Disabled Privacy Extensions
WpaSupplicantLog:

dmi.bios.date: 12/15/2006
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 68YDU Ver. F.0B
dmi.board.name: 30AA
dmi.board.vendor: Hewlett-Packard
dmi.board.version: KBC Version 58.12
dmi.chassis.asset.tag: HUB7140H0S
dmi.chassis.type: 10
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr68YDUVer.F.0B:bd12/15/2006:svnHewlett-Packard:pnHPCompaqnc6320(EV073AV):pvrF.0B:rvnHewlett-Packard:rn30AA:rvrKBCVersion58.12:cvnHewlett-Packard:ct10:cvr:
dmi.product.name: HP Compaq nc6320 (EV073AV)
dmi.product.version: F.0B
dmi.sys.vendor: Hewlett-Packard

[Jeremy Foshee (jeremyfoshee)]

Hi Saku,

If you could also please test the latest upstream kernel available that would be great. It will allow additional upstream developers to examine the issue. Refer to https://wiki.ubuntu.com/KernelMainlineBuilds . Once you've tested the upstream kernel, please remove the 'needs-upstream-testing' tag. This can be done by clicking on the yellow pencil icon next to the tag located at the bottom of the bug description and deleting the 'needs-upstream-testing' text. Please let us know your results.

Thanks in advance.

    [This is an automated message. Apologies if it has reached you inappropriately; please just reply to this message indicating so.]

[Saku Ytti (ubuntu-ip)]

I cannot trigger the bug anymore in 2.6.35-4-generic

[Saku Ytti (ubuntu-ip)]

I cannot trigger this bug after upgrade to 2.6.35-4-generic.