kernel crashes due to rtl8192ee driver on ubuntu 15.10

Bug #1527603 reported by Christos
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

After upgrading for 14.04 to 15.10 (through 15.04), my system became unstable with random crashes.

System: Lenovo L440
lspci:
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor DRAM Controller (rev 06)
00:02.0 VGA compatible controller: Intel Corporation 4th Gen Core Processor Integrated Graphics Controller (rev 06)
00:03.0 Audio device: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor HD Audio Controller (rev 06)
00:14.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB xHCI (rev 05)
00:16.0 Communication controller: Intel Corporation 8 Series/C220 Series Chipset Family MEI Controller #1 (rev 04)
00:19.0 Ethernet controller: Intel Corporation Ethernet Connection I217-V (rev 05)
00:1a.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB EHCI #2 (rev 05)
00:1b.0 Audio device: Intel Corporation 8 Series/C220 Series Chipset High Definition Audio Controller (rev 05)
00:1c.0 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #1 (rev d5)
00:1c.1 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #2 (rev d5)
00:1c.2 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #3 (rev d5)
00:1c.4 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #5 (rev d5)
00:1d.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB EHCI #1 (rev 05)
00:1f.0 ISA bridge: Intel Corporation HM86 Express LPC Controller (rev 05)
00:1f.2 SATA controller: Intel Corporation 8 Series/C220 Series Chipset Family 6-port SATA Controller 1 [AHCI mode] (rev 05)
00:1f.3 SMBus: Intel Corporation 8 Series/C220 Series Chipset Family SMBus Controller (rev 05)
02:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8192EE PCIe Wireless Network Adapter
08:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. RTS5227 PCI Express Card Reader (rev 01)

Below you can find a traceback from a crash under kernel 4.2.0-19

[ 2390.551649] BUG: unable to handle kernel NULL pointer dereference at (null)
[ 2390.551710] IP: [<ffffffffc07300cf>] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee]
[ 2390.551758] PGD 0
[ 2390.551772] Oops: 0000 [#1] SMP
[ 2390.551795] Modules linked in: drbg ansi_cprng ctr ccm ip6table_filter ip6_tables iptable_filter ip_tables x_tables binfmt_misc rfcomm bnep nls_iso8859_1 intel_rapl iosf_mbi x86_pkg_temp_thermal intel_powerclamp coretemp kvm uvcvideo crct10dif_pclmul crc32_pclmul videobuf2_vmalloc cryptd videobuf2_memops videobuf2_core v4l2_common arc4 joydev serio_raw rtl8192ee videodev btcoexist rtl_pci rtlwifi input_leds snd_hda_codec_hdmi lpc_ich mac80211 media snd_hda_codec_realtek snd_hda_codec_generic rtsx_pci_ms btusb btrtl cfg80211 btbcm memstick btintel bluetooth snd_hda_intel shpchp snd_hda_codec snd_hda_core snd_hwdep mei_me mei snd_pcm thinkpad_acpi ie31200_edac edac_core nvram snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device snd_timer snd soundcore mac_hid parport_pc ppdev lp parport
[ 2390.552294] autofs4 hid_generic usbhid hid rtsx_pci_sdmmc i915 ahci e1000e psmouse rtsx_pci i2c_algo_bit libahci drm_kms_helper ptp pps_core drm wmi video
[ 2390.552393] CPU: 2 PID: 0 Comm: swapper/2 Tainted: G W 4.2.0-19-generic #23-Ubuntu
[ 2390.552440] Hardware name: LENOVO 20ATCTO1WW/20ATCTO1WW, BIOS J4ET67WW(1.67) 08/13/2014
[ 2390.552485] task: ffff880119c9b700 ti: ffff880119cb0000 task.ti: ffff880119cb0000
[ 2390.552527] RIP: 0010:[<ffffffffc07300cf>] [<ffffffffc07300cf>] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee]
[ 2390.552585] RSP: 0018:ffff88011f2838a8 EFLAGS: 00010046
[ 2390.552615] RAX: ffffffffc0732f60 RBX: 0000000000000000 RCX: 0000000000000007
[ 2390.552653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880034e406a0
[ 2390.552693] RBP: ffff88011f283900 R08: ffff88011f2838c4 R09: 0000160000000000
[ 2390.552733] R10: ffffea0002ad4180 R11: 0000000000000001 R12: ffff880034e406a0
[ 2390.552772] R13: 00000000000000a2 R14: ffff88004b4cbe00 R15: ffff880034e41440
[ 2390.552809] FS: 0000000000000000(0000) GS:ffff88011f280000(0000) knlGS:0000000000000000
[ 2390.552852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2390.552882] CR2: 0000000000000000 CR3: 0000000002c0c000 CR4: 00000000001406e0
[ 2390.552920] Stack:
[ 2390.552933] ffffffffc0590fbf 0000000000000002 0000000000000000 0b80404001283900
[ 2390.552979] e3beecd6839eaf48 ffffffff81ceb500 0000000000000000 ffff88004b4cbe00
[ 2390.553026] ffff880034e406a0 ffff88004b4cbe00 ffff880034e41440 ffff88011f283b00
[ 2390.553072] Call Trace:
[ 2390.553087] <IRQ>
[ 2390.553104] [<ffffffffc0590fbf>] ? _rtl_pci_init_one_rxdesc+0x1df/0x240 [rtl_pci]
[ 2390.553147] [<ffffffffc05933a3>] _rtl_pci_rx_interrupt+0x4f3/0x790 [rtl_pci]
[ 2390.553189] [<ffffffff815db88e>] ? usb_hcd_link_urb_to_ep+0x1e/0xa0
[ 2390.553226] [<ffffffff8162556e>] ? prepare_transfer+0x11e/0x130
[ 2390.553260] [<ffffffff81626c1a>] ? xhci_queue_bulk_tx+0x35a/0x9e0
[ 2390.553297] [<ffffffff810bcaa8>] ? __wake_up+0x48/0x60
[ 2390.553327] [<ffffffffc0593819>] _rtl_pci_interrupt+0x1d9/0x3b1 [rtl_pci]
[ 2390.553368] [<ffffffff813da795>] ? find_next_bit+0x15/0x20
[ 2390.553402] [<ffffffff810d4204>] handle_irq_event_percpu+0x74/0x180
[ 2390.553437] [<ffffffff810d4359>] handle_irq_event+0x49/0x70
[ 2390.553468] [<ffffffff810d76d1>] handle_edge_irq+0x81/0x150
[ 2390.553496] [<ffffffff810172b5>] handle_irq+0x25/0x40
[ 2390.553523] [<ffffffff817f2def>] do_IRQ+0x4f/0xe0
[ 2390.553550] [<ffffffff817f0d6b>] common_interrupt+0x6b/0x6b
[ 2390.553579] [<ffffffff810b6411>] ? load_balance+0x181/0x960
[ 2390.553609] [<ffffffff810b63f9>] ? load_balance+0x169/0x960
[ 2390.553640] [<ffffffff810b775e>] rebalance_domains+0x22e/0x2a0
[ 2390.553670] [<ffffffff810b795e>] run_rebalance_domains+0x18e/0x1d0
[ 2390.553703] [<ffffffff8107f846>] __do_softirq+0xf6/0x250
[ 2390.553731] [<ffffffff8107fb13>] irq_exit+0xa3/0xb0
[ 2390.553757] [<ffffffff817f2ec6>] smp_apic_timer_interrupt+0x46/0x60
[ 2390.555471] [<ffffffff817f105b>] apic_timer_interrupt+0x6b/0x70
[ 2390.557217] <EOI>
[ 2390.557239] [<ffffffff81686fe0>] ? cpuidle_enter_state+0x130/0x270
[ 2390.560644] [<ffffffff81686fbb>] ? cpuidle_enter_state+0x10b/0x270
[ 2390.562380] [<ffffffff81687157>] cpuidle_enter+0x17/0x20
[ 2390.564117] [<ffffffff810bd472>] call_cpuidle+0x32/0x60
[ 2390.565809] [<ffffffff81687133>] ? cpuidle_select+0x13/0x20
[ 2390.567521] [<ffffffff810bd708>] cpu_startup_entry+0x268/0x320
[ 2390.569126] [<ffffffff8104d3d3>] start_secondary+0x183/0x1c0
[ 2390.570720] Code: 00 84 d2 74 14 84 c9 74 37 80 f9 02 0f 85 79 01 00 00 41 8b 00 89 46 30 c3 80 f9 06 0f 84 6b 01 00 00 80 f9 07 0f 85 60 01 00 00 <8b> 06 25 00 40 00 80 0d 18 20 00 00 89 06 41 8b 00 89 46 04 c3
[ 2390.574328] RIP [<ffffffffc07300cf>] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee]
[ 2390.575953] RSP <ffff88011f2838a8>
[ 2390.577534] CR2: 0000000000000000

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: ubuntu-release-upgrader-core 1:15.10.14.2
ProcVersionSignature: Ubuntu 4.2.0-19.23-generic 4.2.6
Uname: Linux 4.2.0-19-generic x86_64
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
CrashDB: ubuntu
CurrentDesktop: i3
Date: Wed Dec 16 14:33:04 2015
InstallationDate: Installed on 2014-11-19 (391 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
PackageArchitecture: all
SourcePackage: ubuntu-release-upgrader
Symptom: dist-upgrade
UpgradeStatus: Upgraded to wily on 2015-11-21 (25 days ago)
VarLogDistupgradeAptclonesystemstate.tar.gz:
 Error: command ['pkexec', 'cat', '/var/log/dist-upgrade/apt-clone_system_state.tar.gz'] failed with exit code 127: polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
 Error executing command as another user: Not authorized

 This incident has been reported.
VarLogDistupgradeTermlog:
---
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: olethros 1737 F.... pulseaudio
 /dev/snd/controlC0: olethros 1737 F.... pulseaudio
CurrentDesktop: i3
DistroRelease: Ubuntu 15.10
HibernationDevice: RESUME=UUID=ce11a4e6-2c0c-4f92-875e-942b2bc77356
InstallationDate: Installed on 2014-11-19 (398 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
MachineType: LENOVO 20ATCTO1WW
Package: linux (not installed)
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.2.0-22-generic.efi.signed root=UUID=aaaf9c33-5889-4c08-ad19-2e65be657e20 ro quiet splash crashkernel=384M-:128M crashkernel=384M-:128M vt.handoff=7
ProcVersionSignature: Ubuntu 4.2.0-22.27-generic 4.2.6
RelatedPackageVersions:
 linux-restricted-modules-4.2.0-22-generic N/A
 linux-backports-modules-4.2.0-22-generic N/A
 linux-firmware 1.149.3
Tags: wily
Uname: Linux 4.2.0-22-generic x86_64
UpgradeStatus: Upgraded to wily on 2015-11-21 (31 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 08/13/2014
dmi.bios.vendor: LENOVO
dmi.bios.version: J4ET67WW(1.67)
dmi.board.asset.tag: Not Available
dmi.board.name: 20ATCTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0E50512 STD
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvrJ4ET67WW(1.67):bd08/13/2014:svnLENOVO:pn20ATCTO1WW:pvrThinkPadL440:rvnLENOVO:rn20ATCTO1WW:rvrSDK0E50512STD:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 20ATCTO1WW
dmi.product.version: ThinkPad L440
dmi.sys.vendor: LENOVO
---
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
AudioDevicesInUse:
 USER PID ACCESS COMMAND
 /dev/snd/controlC1: olethros 1737 F.... pulseaudio
 /dev/snd/controlC0: olethros 1737 F.... pulseaudio
CurrentDesktop: i3
DistroRelease: Ubuntu 15.10
HibernationDevice: RESUME=UUID=ce11a4e6-2c0c-4f92-875e-942b2bc77356
InstallationDate: Installed on 2014-11-19 (398 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
MachineType: LENOVO 20ATCTO1WW
Package: linux (not installed)
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.2.0-22-generic.efi.signed root=UUID=aaaf9c33-5889-4c08-ad19-2e65be657e20 ro quiet splash crashkernel=384M-:128M crashkernel=384M-:128M vt.handoff=7
ProcVersionSignature: Ubuntu 4.2.0-22.27-generic 4.2.6
RelatedPackageVersions:
 linux-restricted-modules-4.2.0-22-generic N/A
 linux-backports-modules-4.2.0-22-generic N/A
 linux-firmware 1.149.3
Tags: wily
Uname: Linux 4.2.0-22-generic x86_64
UpgradeStatus: Upgraded to wily on 2015-11-21 (31 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 08/13/2014
dmi.bios.vendor: LENOVO
dmi.bios.version: J4ET67WW(1.67)
dmi.board.asset.tag: Not Available
dmi.board.name: 20ATCTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0E50512 STD
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvrJ4ET67WW(1.67):bd08/13/2014:svnLENOVO:pn20ATCTO1WW:pvrThinkPadL440:rvnLENOVO:rn20ATCTO1WW:rvrSDK0E50512STD:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 20ATCTO1WW
dmi.product.version: ThinkPad L440
dmi.sys.vendor: LENOVO

Revision history for this message
Christos (christos-dimitrakakis) wrote :
Revision history for this message
Larry Finger (larry-finger-lwfinger) wrote :

This patch should fix the reported panic due to NULL dereference. Under low-memory conditions, it may not be possible to allocate a new skb. In that case, the code is supposed to reuse the old one. For the RTL8192EE, which has a unique descriptor buffer flow, the initialization of a buffer descriptor was missed.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "patch_rtl8192ee.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
Revision history for this message
Christos (christos-dimitrakakis) wrote : Re: [Bug 1527603] Re: kernel crashes due to rtl8192ee driver on ubuntu 15.10

Awesome. This seems to be already in your git repo, so I'll just install
that.

Cheers, and enjoy the holidays
Christos

On 2015-12-22 00:01, Larry Finger wrote:
> This patch should fix the reported panic due to NULL dereference. Under
> low-memory conditions, it may not be possible to allocate a new skb. In
> that case, the code is supposed to reuse the old one. For the RTL8192EE,
> which has a unique descriptor buffer flow, the initialization of a
> buffer descriptor was missed.
>
>
> ** Patch added: "patch_rtl8192ee.patch"
> https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1527603/+attachment/4538625/+files/patch_rtl8192ee.patch
>

--
Christos Dimitrakakis
| Univ-Lille/INRIA-SequeL/Cristal | Chalmers/DIT/LAB | Harvard/SEAS |
https://sites.google.com/site/christosdimitrakakis/

affects: ubuntu-release-upgrader (Ubuntu) → linux (Ubuntu)
Revision history for this message
Brad Figg (brad-figg) wrote : Missing required logs.

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1527603

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status: New → Incomplete
Revision history for this message
Christos (christos-dimitrakakis) wrote : AlsaInfo.txt

apport information

tags: added: apport-collected
description: updated
Revision history for this message
Christos (christos-dimitrakakis) wrote : CRDA.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : CurrentDmesg.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : IwConfig.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : JournalErrors.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : Lspci.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : Lsusb.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcCpuinfo.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcEnviron.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcInterrupts.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcModules.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : PulseList.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : RfKill.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : UdevDb.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : UdevLog.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : WifiSyslog.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : AlsaInfo.txt

apport information

description: updated
Revision history for this message
Christos (christos-dimitrakakis) wrote : CRDA.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : CurrentDmesg.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : IwConfig.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : JournalErrors.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : Lspci.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : Lsusb.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcCpuinfo.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcEnviron.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcInterrupts.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : ProcModules.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : PulseList.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : RfKill.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : UdevDb.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : UdevLog.txt

apport information

Revision history for this message
Christos (christos-dimitrakakis) wrote : WifiSyslog.txt

apport information

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for linux (Ubuntu) because there has been no activity for 60 days.]

Changed in linux (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.