Kernel Oops - unable to handle kernel paging request at ff0e0300 ; EIP is at __ticket_spin_lock+0x8/0x20

[hidinginthemountains]

http://ubuntuforums.org/showpost.php?p=8477317&postcount=4 documents the begining of my trying to fix this (includes some log snippets).

While I don't seem to be able to intentionally reproduce the lock-up, I can say that it seems to happen most often when running sound (or video that includes sound), and frequently when streaming. Sometimes it locks up with the CapsLock blinking, other times the caps lock doesn't blink, but the system is similarly non-responsive. I have also had it spontaneously reset my laptop.

I tried Karmic about a month ago and had similar issues (though more severe -- to the point that I couldn't even stay with it long enough to make any progress). Intrepid did not have these problems for me. Jaunty (and also an install of Mint7 that I tried) show this behavior.

Sorry I don't have more to go on, I will gladly provide any further logs or info (I'm working under the assumption that using "ubuntu-bug linux" to initiate this report will have given you the starting material).

ProblemType: Bug
Architecture: i386
DistroRelease: Ubuntu 9.04
HibernationDevice: RESUME=UUID=f58c875c-c683-4ade-a973-067e0e849b09
MachineType: TOSHIBA Satellite A100
NonfreeKernelModules: ath_hal
Package: linux-image-2.6.28-17-generic 2.6.28-17.58
ProcCmdLine: root=UUID=dfa9f950-b3a1-4a67-8331-8c8d10fb921c ro splash
ProcEnviron:
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.28-17.58-generic
SourcePackage: linux

[hidinginthemountains (hidinginthemountains)]

As near as I can tell, the following is related to the last of these incidents:

Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740377] BUG: unable to handle kernel paging request at ff0e0300
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740394] IP: [<c0122c38>] __ticket_spin_lock+0x8/0x20
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740414] *pde = 00000000
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740420] Oops: 0002 [#1] SMP
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740424] last sysfs file: /sys/devices/LNXSYSTM:00/device:00/PNP0C0A:00/power_supply/BAT0/charge_full
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740431] Dumping ftrace buffer:
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740435] (ftrace buffer empty)
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740438] Modules linked in: binfmt_misc radeon ppdev drm bridge stp bnep sbp2 lp parport joydev snd_hda_intel snd_usb_audio snd_pcm_oss snd_mixer_oss snd_seq_dummy snd_pcm snd_usb_lib snd_seq_oss snd_hwdep gspca_zc3xx snd_seq_midi snd_rawmidi gspca_main pcmcia snd_seq_midi_event videodev psmouse snd_seq snd_timer snd_seq_device v4l1_compat serio_raw yenta_socket rsrc_nonstatic wlan_scan_sta pcspkr video pcmcia_core snd soundcore snd_page_alloc i2c_piix4 ath_rate_sample input_polldev output shpchp ati_agp agpgart ath_pci wlan ath_hal(P) usbhid ohci1394 ieee1394 8139too 8139cp mii fbcon tileblit font bitblit softcursor
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740486]
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740491] Pid: 3093, comm: Xorg Tainted: P (2.6.28-17-generic #58-Ubuntu) Satellite A100
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740495] EIP: 0060:[<c0122c38>] EFLAGS: 00013092 CPU: 0
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740498] EIP is at __ticket_spin_lock+0x8/0x20
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740501] EAX: ff0e0300 EBX: f6351c90 ECX: 00000005 EDX: 00000100
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740504] ESI: 00003292 EDI: 00000000 EBP: f6351b0c ESP: f6351b0c
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740506] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740509] Process Xorg (pid: 3093, ti=f6350000 task=f63725b0 task.ti=f6350000)
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740512] Stack:
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740514] f6351b14 c0122d58 f6351b24 c05003ee f6351c90 ff0e0300 f6351b34 c014f159
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740521] f3fce700 f6351bf0 f6351b50 c01cc4e4 ff0e0300 f3fc9300 f3fce700 f6351bf0
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740527] f3fc9300 f6351b60 c04999f7 c053f0a0 00001000 f6351b6c c04220ef 0000000c
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740534] Call Trace:
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740537] [<c0122d58>] ? default_spin_lock_flags+0x8/0x10
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740542] [<c05003ee>] ? _spin_lock_irqsave+0x2e/0x40
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740549] [<c014f159>] ? add_wait_queue+0x19/0x50
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740557] [<c01cc4e4>] ? __pollwait+0x64/0xe0
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740565] [<c04999f7>] ? unix_poll+0x17/0xb0
Dec 10 18:16:49 stoke-buntu kernel: [ 3063.740572] [<c04220ef>] ? sock_pol...

[Neil Perry (nperry)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. This bug did not have a package associated with it, which is important for ensuring that it gets looked at by the proper developers. You can learn more about finding the right package at https://wiki.ubuntu.com/Bugs/FindRightPackage . I have classified this bug as a bug in linux.

You said you were having this issue in Karmic, could you please attach the logs from karmic using `apport-collect 495322`

[hidinginthemountains (hidinginthemountains)]

Architecture: i386
Dependencies:

DistroRelease: Ubuntu 9.04
NonfreeKernelModules: ath_hal
Package: linux None [modified: /var/lib/dpkg/info/linux.list]
PackageArchitecture: i386
ProcEnviron:
 SHELL=/bin/bash
 LANG=en_CA.UTF-8
Uname: Linux 2.6.28-17-generic i686
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[hidinginthemountains (hidinginthemountains)]

I don't think I can do that for you. I only used Karmic for a few days. The crashes/panics were so frequent that my system was effectively unusable, and for that reason I went back to earlier versions.

I can only say this anecdotally, but the problems I had in Karmic seemed like simply more frequent versions of the same problems I'm having intermittently in Jaunty/Mint7 (I no longer have Mint7 installed, only Jaunty and a Vista partition are on this laptop).

In the hopes that the output is useful to you, I have run apport-collect on this installation.

[Micah Gersten (micahg)]

Thanks for reporting this bug and any supporting documentation. Since this bug has enough information provided for a developer to begin work, I'm going to mark it as Triaged and let them handle it from here. Thanks for taking the time to make Ubuntu better! Please report any other issues you may find.

[hidinginthemountains (hidinginthemountains)]

Had another panic (complete with blinking Caps Lock). At the time I was browsing a few pages in Firefox, text-chatting in Skype, and listening to music on Rhythmbox. Time of the panic was 16:39 (Dec 13)

I had to do a hard shutdown, so I don't really see anything in the logs. I can reupload them if you think it would help, but I'm including the only thing that I can identify as anomolous.

this from messages:
Dec 13 15:49:09 stoke-buntu kernel: [ 8440.317535] process `skype.real' is using obsolete setsockopt SO_BSDCOMPAT
Dec 13 16:08:48 stoke-buntu -- MARK --
Dec 13 16:28:48 stoke-buntu -- MARK --
Dec 13 16:40:30 stoke-buntu syslogd 1.5.0#5ubuntu3: restart.

this from daemon.log:
Dec 13 16:32:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: completed -> disconnected
Dec 13 16:32:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: disconnected -> associated
Dec 13 16:32:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: associated -> completed
Dec 13 16:36:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: completed -> disconnected
Dec 13 16:36:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: disconnected -> associated
Dec 13 16:36:07 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: associated -> completed
Dec 13 16:40:38 stoke-buntu ntpd[3085]: ntpd 4.2.4p4@1.1520-o Fri Dec 4 18:11:46 UTC 2009 (1)

this from auth.log:
ec 13 16:20:01 stoke-buntu dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.42" (uid=1000 pid=4396 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.84" (uid=0 pid=12151 comm="/USR/SBIN/CRON "))
Dec 13 16:20:02 stoke-buntu CRON[12151]: pam_unix(cron:session): session closed for user root
Dec 13 16:30:01 stoke-buntu CRON[12511]: pam_unix(cron:session): session opened for user root by (uid=0)
Dec 13 16:30:01 stoke-buntu dbus-daemon: Rejected send message, 1 matched rules; type="method_call", sender=":1.42" (uid=1000 pid=4396 comm="/usr/lib/indicator-applet/indicator-applet --oaf-a") interface="org.freedesktop.DBus.Properties" member="Get" error name="(unset)" requested_reply=0 destination=":1.85" (uid=0 pid=12511 comm="/USR/SBIN/CRON "))
Dec 13 16:30:02 stoke-buntu CRON[12511]: pam_unix(cron:session): session closed for user root
Dec 13 16:40:42 stoke-buntu dbus-daemon: Rejected send message, 4 matched rules; type="error", sender=":1.10" (uid=0 pid=3356 comm="/sbin/wpa_supplicant -u -f /var/log/wpa_supplicant") interface="(unset)" member="(unset)" error name="fi.epitest.hostap.WPASupplicant.InvalidInterface" requested_reply=0 destination=":1.7" (uid=0 pid=3352 comm="/usr/sbin/NetworkManager --pid-file /var/run/Netwo"))
Dec 13 16:40:54 stoke-buntu gdm[3319]: pam_unix(gdm:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=ian
Dec 13 16:41:01 stoke-buntu gdm[3319]: pam_unix(gdm:session): session opened for user ian by (uid=0)
Dec 13 16:41:02 stoke-buntu gdm[3319]: pam_ck_connector(gdm:sessi...

[hidinginthemountains (hidinginthemountains)]

this while watching a movie in VLC:

Dec 13 23:06:57 stoke-buntu kernel: [23214.341275] *pde = 00000000
Dec 13 23:06:57 stoke-buntu kernel: [23214.341290] Dumping ftrace buffer:
Dec 13 23:06:57 stoke-buntu kernel: [23214.341293] (ftrace buffer empty)
Dec 13 23:06:57 stoke-buntu kernel: [23214.341295] Modules linked in: binfmt_misc radeon drm ppdev bridge stp bnep sbp2 lp parport joydev snd_hda_intel pcmcia snd_usb_audio snd_pcm_oss snd_mixer_oss snd_pcm snd_usb_lib snd_seq_dummy snd_seq_oss snd_seq_midi snd_seq_midi_event wlan_scan_sta snd_seq snd_rawmidi ath_rate_sample snd_timer snd_seq_device ati_agp ath_pci yenta_socket rsrc_nonstatic snd_hwdep agpgart wlan ath_hal(P) pcmcia_core snd soundcore snd_page_alloc gspca_zc3xx i2c_piix4 pcspkr psmouse video shpchp serio_raw input_polldev gspca_main output videodev v4l1_compat usbhid ohci1394 ieee1394 8139too 8139cp mii fbcon tileblit font bitblit softcursor
Dec 13 23:06:57 stoke-buntu kernel: [23214.341343]
Dec 13 23:06:57 stoke-buntu kernel: [23214.341347] Pid: 3325, comm: Xorg Tainted: P (2.6.28-17-generic #58-Ubuntu) Satellite A100
Dec 13 23:06:57 stoke-buntu kernel: [23214.341351] EIP: 0060:[<c049bbd0>] EFLAGS: 00013246 CPU: 0
Dec 13 23:06:57 stoke-buntu kernel: [23214.341354] EIP is at unix_stream_sendmsg+0x100/0x350
Dec 13 23:06:57 stoke-buntu kernel: [23214.341357] EAX: 00000000 EBX: f0a5ddbc ECX: 00000040 EDX: f0a5de3c
Dec 13 23:06:57 stoke-buntu kernel: [23214.341359] ESI: f350f300 EDI: f350f300 EBP: f0a5dde4 ESP: f0a5dd94
Dec 13 23:06:57 stoke-buntu kernel: [23214.341362] DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Dec 13 23:06:57 stoke-buntu kernel: [23214.341369] f0a5dda8 f0a5de3c 00000000 f330eaec f0a5de1c f312ce00 c04285fd 00000000
Dec 13 23:06:57 stoke-buntu kernel: [23214.341535] ---[ end trace b836e76c2e669722 ]---
Dec 13 23:06:57 stoke-buntu kernel: [23214.364918] [drm] Num pipes: 2
Dec 13 23:06:59 stoke-buntu kernel: [23216.283864] [drm] Setting GART location based on new memory map
Dec 13 23:06:59 stoke-buntu kernel: [23216.284526] [drm] Loading R300 Microcode
Dec 13 23:06:59 stoke-buntu kernel: [23216.284562] [drm] Num pipes: 2
Dec 13 23:06:59 stoke-buntu kernel: [23216.284570] [drm] writeback test succeeded in 1 usecs
Dec 13 23:07:02 stoke-buntu bonobo-activation-server (ian-27350): could not associate with desktop session: Failed to connect to socket /tmp/dbus-3tqUgnY5Ml: Connection refused
Dec 13 23:07:11 stoke-buntu pulseaudio[27510]: pid.c: Stale PID file, overwriting.
Dec 13 23:07:12 stoke-buntu pulseaudio[27510]: alsa-util.c: Device hw:1 doesn't support 44100 Hz, changed to 16000 Hz.
Dec 13 23:07:12 stoke-buntu pulseaudio[27510]: alsa-util.c: Device hw:1 doesn't support 2 channels, changed to 1.

the movie stopped simultaneously with the screen blanking and I was plopped out at the GDM to log back in.

deamon.log
ec 13 22:38:58 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: disconnected -> associated
Dec 13 22:38:58 stoke-buntu NetworkManager: <info> (ath0): supplicant connection state: associated -> completed
Dec 13 22:47:17 stoke-buntu vlc[26514]: skins2: : skin: VLC 0.8.5 Default Skin author: aLtgLasS
Dec 13 22:47:1...

[hidinginthemountains (hidinginthemountains)]

FYI: I am upgrading to Karmic now, which will leave me likely unable to test any solutions offered here. What should be done with this thread? Keep it open for a while in case I have the problem in Karmic as well? Please advise.

[Richard Huddleston (rhuddusa)]

i believe i'm seeing the same issue on Lucid while running rsync

Linux box05 2.6.32-23-server #37-Ubuntu SMP Fri Jun 11 09:11:11 UTC 2010 x86_64 GNU/Linux

 BUG: unable to handle kernel paging request at 0000000000001f00
 IP: [<ffffffff81039719>] __ticket_spin_lock+0x9/0x20
 PGD 119669067 PUD 11b228067 PMD 0
 Oops: 0002 [#1] SMP
 last sysfs file: /sys/devices/pci0000:00/0000:00:1c.7/0000:03:00.0/local_cpus
 CPU 1
 Modules linked in: ppdev nfsd exportfs nfs lockd nfs_acl autofs4 auth_rpcgss snd_hda_codec_realtek max6650 coretemp snd_hda_intel nbd snd_hda_codec snd_hwdep snd_pcm sunrpc joydev snd_timer snd psmouse soundcore serio_raw snd_page_alloc nvidia(P) lp parport raid10 raid456 async_pq async_xor xor async_memcpy async_raid6_recov pata_marvell usbhid hid raid6_pq async_tx raid1 raid0 ahci e1000e multipath linear
 Pid: 18736, comm: rsync Tainted: P 2.6.32-23-server #37-Ubuntu
 RIP: 0010:[<ffffffff81039719>] [<ffffffff81039719>] __ticket_spin_lock+0x9/0x20
 RSP: 0018:ffff8801136d7988 EFLAGS: 00010006
 RAX: 0000000000000100 RBX: 00000000000018c0 RCX: 00000000000000c0
 RDX: 000000000000003f RSI: 000000000000000e RDI: 0000000000001f00
 RBP: ffff8801136d7988 R08: 0000000000000000 R09: ffff8801178186b0
 R10: ffff88011ae2cf00 R11: dead000000200200 R12: ffffea000274f058
 R13: 0000000000000660 R14: 0000000000000002 R15: ffff880005851be0
 FS: 00007f5ea6d3a700(0000) GS:ffff880005840000(0000) knlGS:0000000000000000
 CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
 CR2: 0000000000001f00 CR3: 00000001179dc000 CR4: 00000000000006e0
 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
 Process rsync (pid: 18736, threadinfo ffff8801136d6000, task ffff8801078a5bc0)
 Stack:
  ffff8801136d7998 ffffffff81559c25 ffff8801136d7a18 ffffffff810ff29a
 <0> ffff8801136d79e8 00000000000000d1 00000003136d7af8 0000000000000001
 <0> 0000000202dd17f8 0000000000000003 00000000136d79e8 00000000000000d3
 Call Trace:
  [<ffffffff81559c25>] _spin_lock_irq+0x15/0x20
  [<ffffffff810ff29a>] ____pagevec_lru_add+0x18a/0x200
  [<ffffffff810ff368>] __lru_cache_add+0x58/0x70
  [<ffffffff810f4808>] add_to_page_cache_lru+0x68/0x80
  [<ffffffff811777b0>] mpage_readpages+0xd0/0x150
  [<ffffffff811e0330>] ? ext4_get_block+0x0/0x120
  [<ffffffff811e0330>] ? ext4_get_block+0x0/0x120
  [<ffffffff810fa819>] ? __alloc_pages_nodemask+0xd9/0x180
  [<ffffffff811dbf0d>] ext4_readpages+0x1d/0x20
  [<ffffffff810fe27b>] __do_page_cache_readahead+0x13b/0x210
  [<ffffffff810fe371>] ra_submit+0x21/0x30
  [<ffffffff810fe725>] ondemand_readahead+0x115/0x240
  [<ffffffff810fe8e0>] page_cache_async_readahead+0x90/0xd0
  [<ffffffff810f5451>] T.805+0x1e1/0x400
  [<ffffffff810f5726>] generic_file_aio_read+0xb6/0x1d0
  [<ffffffff8114445a>] do_sync_read+0xfa/0x140
  [<ffffffff81085090>] ? autoremove_wake_function+0x0/0x40
  [<ffffffff8108f819>] ? ktime_get_ts+0xa9/0xe0
  [<ffffffff81252096>] ? security_file_permission+0x16/0x20
  [<ffffffff81144d45>] vfs_read+0xb5/0x1a0
  [<ffffffff81144f01>] sys_read+0x51/0x80
  [<ffffffff810131b2>] system_call_fastpath+0x16/0x1b
 Code: 00 00 48 c7 c2 1e 95 03 81 48 c7 c1 ...

[Brad Figg (brad-figg)]

This bug was filed against a series that is no longer supported and so is being marked as Won't Fix. If this issue still exists in a supported series, please file a new bug.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.