kernel crashes due to rtl8192ee driver on ubuntu 15.10
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Expired
|
Undecided
|
Unassigned |
Bug Description
After upgrading for 14.04 to 15.10 (through 15.04), my system became unstable with random crashes.
System: Lenovo L440
lspci:
00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor DRAM Controller (rev 06)
00:02.0 VGA compatible controller: Intel Corporation 4th Gen Core Processor Integrated Graphics Controller (rev 06)
00:03.0 Audio device: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor HD Audio Controller (rev 06)
00:14.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB xHCI (rev 05)
00:16.0 Communication controller: Intel Corporation 8 Series/C220 Series Chipset Family MEI Controller #1 (rev 04)
00:19.0 Ethernet controller: Intel Corporation Ethernet Connection I217-V (rev 05)
00:1a.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB EHCI #2 (rev 05)
00:1b.0 Audio device: Intel Corporation 8 Series/C220 Series Chipset High Definition Audio Controller (rev 05)
00:1c.0 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #1 (rev d5)
00:1c.1 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #2 (rev d5)
00:1c.2 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #3 (rev d5)
00:1c.4 PCI bridge: Intel Corporation 8 Series/C220 Series Chipset Family PCI Express Root Port #5 (rev d5)
00:1d.0 USB controller: Intel Corporation 8 Series/C220 Series Chipset Family USB EHCI #1 (rev 05)
00:1f.0 ISA bridge: Intel Corporation HM86 Express LPC Controller (rev 05)
00:1f.2 SATA controller: Intel Corporation 8 Series/C220 Series Chipset Family 6-port SATA Controller 1 [AHCI mode] (rev 05)
00:1f.3 SMBus: Intel Corporation 8 Series/C220 Series Chipset Family SMBus Controller (rev 05)
02:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8192EE PCIe Wireless Network Adapter
08:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. RTS5227 PCI Express Card Reader (rev 01)
Below you can find a traceback from a crash under kernel 4.2.0-19
[ 2390.551649] BUG: unable to handle kernel NULL pointer dereference at (null)
[ 2390.551710] IP: [<ffffffffc0730
[ 2390.551758] PGD 0
[ 2390.551772] Oops: 0000 [#1] SMP
[ 2390.551795] Modules linked in: drbg ansi_cprng ctr ccm ip6table_filter ip6_tables iptable_filter ip_tables x_tables binfmt_misc rfcomm bnep nls_iso8859_1 intel_rapl iosf_mbi x86_pkg_
[ 2390.552294] autofs4 hid_generic usbhid hid rtsx_pci_sdmmc i915 ahci e1000e psmouse rtsx_pci i2c_algo_bit libahci drm_kms_helper ptp pps_core drm wmi video
[ 2390.552393] CPU: 2 PID: 0 Comm: swapper/2 Tainted: G W 4.2.0-19-generic #23-Ubuntu
[ 2390.552440] Hardware name: LENOVO 20ATCTO1WW/
[ 2390.552485] task: ffff880119c9b700 ti: ffff880119cb0000 task.ti: ffff880119cb0000
[ 2390.552527] RIP: 0010:[<
[ 2390.552585] RSP: 0018:ffff88011f
[ 2390.552615] RAX: ffffffffc0732f60 RBX: 0000000000000000 RCX: 0000000000000007
[ 2390.552653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff880034e406a0
[ 2390.552693] RBP: ffff88011f283900 R08: ffff88011f2838c4 R09: 0000160000000000
[ 2390.552733] R10: ffffea0002ad4180 R11: 0000000000000001 R12: ffff880034e406a0
[ 2390.552772] R13: 00000000000000a2 R14: ffff88004b4cbe00 R15: ffff880034e41440
[ 2390.552809] FS: 000000000000000
[ 2390.552852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2390.552882] CR2: 0000000000000000 CR3: 0000000002c0c000 CR4: 00000000001406e0
[ 2390.552920] Stack:
[ 2390.552933] ffffffffc0590fbf 0000000000000002 0000000000000000 0b80404001283900
[ 2390.552979] e3beecd6839eaf48 ffffffff81ceb500 0000000000000000 ffff88004b4cbe00
[ 2390.553026] ffff880034e406a0 ffff88004b4cbe00 ffff880034e41440 ffff88011f283b00
[ 2390.553072] Call Trace:
[ 2390.553087] <IRQ>
[ 2390.553104] [<ffffffffc0590
[ 2390.553147] [<ffffffffc0593
[ 2390.553189] [<ffffffff815db
[ 2390.553226] [<ffffffff81625
[ 2390.553260] [<ffffffff81626
[ 2390.553297] [<ffffffff810bc
[ 2390.553327] [<ffffffffc0593
[ 2390.553368] [<ffffffff813da
[ 2390.553402] [<ffffffff810d4
[ 2390.553437] [<ffffffff810d4
[ 2390.553468] [<ffffffff810d7
[ 2390.553496] [<ffffffff81017
[ 2390.553523] [<ffffffff817f2
[ 2390.553550] [<ffffffff817f0
[ 2390.553579] [<ffffffff810b6
[ 2390.553609] [<ffffffff810b6
[ 2390.553640] [<ffffffff810b7
[ 2390.553670] [<ffffffff810b7
[ 2390.553703] [<ffffffff8107f
[ 2390.553731] [<ffffffff8107f
[ 2390.553757] [<ffffffff817f2
[ 2390.555471] [<ffffffff817f1
[ 2390.557217] <EOI>
[ 2390.557239] [<ffffffff81686
[ 2390.560644] [<ffffffff81686
[ 2390.562380] [<ffffffff81687
[ 2390.564117] [<ffffffff810bd
[ 2390.565809] [<ffffffff81687
[ 2390.567521] [<ffffffff810bd
[ 2390.569126] [<ffffffff8104d
[ 2390.570720] Code: 00 84 d2 74 14 84 c9 74 37 80 f9 02 0f 85 79 01 00 00 41 8b 00 89 46 30 c3 80 f9 06 0f 84 6b 01 00 00 80 f9 07 0f 85 60 01 00 00 <8b> 06 25 00 40 00 80 0d 18 20 00 00 89 06 41 8b 00 89 46 04 c3
[ 2390.574328] RIP [<ffffffffc0730
[ 2390.575953] RSP <ffff88011f2838a8>
[ 2390.577534] CR2: 0000000000000000
ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: ubuntu-
ProcVersionSign
Uname: Linux 4.2.0-19-generic x86_64
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
CrashDB: ubuntu
CurrentDesktop: i3
Date: Wed Dec 16 14:33:04 2015
InstallationDate: Installed on 2014-11-19 (391 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
PackageArchitec
SourcePackage: ubuntu-
Symptom: dist-upgrade
UpgradeStatus: Upgraded to wily on 2015-11-21 (25 days ago)
VarLogDistupgra
Error: command ['pkexec', 'cat', '/var/log/
Error executing command as another user: Not authorized
This incident has been reported.
VarLogDistupgra
---
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
/dev/snd/
CurrentDesktop: i3
DistroRelease: Ubuntu 15.10
HibernationDevice: RESUME=
InstallationDate: Installed on 2014-11-19 (398 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
MachineType: LENOVO 20ATCTO1WW
Package: linux (not installed)
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=
ProcVersionSign
RelatedPackageV
linux-
linux-
linux-firmware 1.149.3
Tags: wily
Uname: Linux 4.2.0-22-generic x86_64
UpgradeStatus: Upgraded to wily on 2015-11-21 (31 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 08/13/2014
dmi.bios.vendor: LENOVO
dmi.bios.version: J4ET67WW(1.67)
dmi.board.
dmi.board.name: 20ATCTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0E50512 STD
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.
dmi.modalias: dmi:bvnLENOVO:
dmi.product.name: 20ATCTO1WW
dmi.product.
dmi.sys.vendor: LENOVO
---
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
/dev/snd/
CurrentDesktop: i3
DistroRelease: Ubuntu 15.10
HibernationDevice: RESUME=
InstallationDate: Installed on 2014-11-19 (398 days ago)
InstallationMedia: Ubuntu 14.10 "Utopic Unicorn" - Release amd64 (20141022.1)
MachineType: LENOVO 20ATCTO1WW
Package: linux (not installed)
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=
ProcVersionSign
RelatedPackageV
linux-
linux-
linux-firmware 1.149.3
Tags: wily
Uname: Linux 4.2.0-22-generic x86_64
UpgradeStatus: Upgraded to wily on 2015-11-21 (31 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
_MarkForUpload: True
dmi.bios.date: 08/13/2014
dmi.bios.vendor: LENOVO
dmi.bios.version: J4ET67WW(1.67)
dmi.board.
dmi.board.name: 20ATCTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0E50512 STD
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.
dmi.modalias: dmi:bvnLENOVO:
dmi.product.name: 20ATCTO1WW
dmi.product.
dmi.sys.vendor: LENOVO
affects: | ubuntu-release-upgrader (Ubuntu) → linux (Ubuntu) |
This patch should fix the reported panic due to NULL dereference. Under low-memory conditions, it may not be possible to allocate a new skb. In that case, the code is supposed to reuse the old one. For the RTL8192EE, which has a unique descriptor buffer flow, the initialization of a buffer descriptor was missed.