Return-path: Received: from mail-ig0-f193.google.com ([209.85.213.193]:36579 "EHLO mail-ig0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750732AbbLTC32 (ORCPT ); Sat, 19 Dec 2015 21:29:28 -0500 Received: by mail-ig0-f193.google.com with SMTP id rx7so2158085igc.3 for ; Sat, 19 Dec 2015 18:29:28 -0800 (PST) MIME-Version: 1.0 Date: Sat, 19 Dec 2015 21:29:27 -0500 Message-ID: (sfid-20151220_032932_620378_60593839) Subject: Panic in rtl8192ee on 4.2 kernel (Ubuntu 15.10) From: Rich To: linux-wireless@vger.kernel.org Content-Type: text/plain; charset=UTF-8 Sender: linux-wireless-owner@vger.kernel.org List-ID: Hi all, (Apologies if this is the wrong place, but [1] said I should send my report here.) I've got a Lenovo ThinkPad T440 running Ubuntu 15.10 here, and under load, the rtl8192ee wireless driver will panic after a few minutes. The kernel is the Ubuntu 4.2.0-22-generic amd64 kernel. I went looking for the current equivalent of what was formerly compat-drivers/linux-backports-modules/compat-wireless, and will try the new location for wireless-testing next, but wanted to forward on the panic while doing so. The lspci -v entry for the card: 03:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8192EE PCIe Wireless Network Adapter Subsystem: Realtek Semiconductor Co., Ltd. Device 001b Flags: bus master, fast devsel, latency 0, IRQ 48 I/O ports at 3000 [size=256] Memory at f0400000 (64-bit, non-prefetchable) [size=16K] Capabilities: [40] Power Management version 3 Capabilities: [50] MSI: Enable+ Count=1/1 Maskable- 64bit+ Capabilities: [70] Express Endpoint, MSI 00 Capabilities: [100] Advanced Error Reporting Capabilities: [140] Device Serial Number 01-91-81-fe-ff-4c-e0-00 Capabilities: [150] Latency Tolerance Reporting Capabilities: [158] L1 PM Substates Kernel driver in use: rtl8192ee The panic: BUG: unable to handle kernel NULL pointer dereference at (null) IP: [] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee] PGD 0 Oops: 0000 [#1] SMP Modules linked in: rfcomm drbg ansi_cprng ctr ccm bnep nls_iso8859_1 intel_rapl iosf_mbi x86_pkg_temp_thermal arc4 intel_powerclamp rtl8192ee btcoexist coretemp rtl_pci rtlwifi kvm_intel kvm mac80211 btusb cfg80211 uvcvideo snd_hda_codec_hdmi btrtl btbcm btintel crct10dif_pclmul crc32_pclmul videobuf2_vmalloc videobuf2_memops videobuf2_core v4l2_common snd_hda_codec_realtek snd_hda_codec_generic bluetooth snd_hda_intel videodev snd_hda_codec rtsx_pci_ms media aesni_intel snd_hda_core thinkpad_acpi memstick aes_x86_64 lrw gf128mul glue_helper nvram snd_seq_midi snd_hwdep snd_seq_midi_event snd_rawmidi snd_pcm snd_seq ablk_helper snd_seq_device cryptd snd_timer snd input_leds soundcore joydev shpchp mei_me mei serio_raw lpc_ich mac_hid intel_smartconnect efi_pstore parport_pc ppdev lp parport CPU: 2 PID: 0 Comm: swapper/2 Tainted: G W 4.2.0-21-generic #25-Ubuntu Hardware name: LENOVO 20B6CTO1WW/20B6CTO1WW, BIOS GJET64WW (2.14 ) 11/12/2013 task: ffff880119c9b700 ti: ffff880119cb0000 task.ti: ffff880119cb0000 RIP: 0010:[] [] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee] RSP: 0018:ffff88011f283508 EFLAGS: 00010046 RAX: ffffffffc058cf60 RBX: 0000000000000000 RCX: 0000000000000007 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8800d56306a0 RBP: ffff88011f283560 R08: ffff88011f283524 R09: 0000160000000000 R10: ffffea0001993380 R11: 0000000000000000 R12: ffff8800d56306a0 R13: 0000000000000195 R14: ffff880086713100 R15: ffff8800d5631440 FS: 0000000000000000(0000) GS:ffff88011f280000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000002c0c000 CR4: 00000000001406e0 Stack: ffffffffc054afbf ffff8800664cee00 0000000000000000 d32dc04001283560 fdf6cd13473e1849 ffff8800b770cf00 0000000000000000 ffff880086713100 ffff8800d56306a0 ffff880086713100 ffff8800d5631440 ffff88011f283760 Call Trace: [] ? _rtl_pci_init_one_rxdesc+0x1df/0x240 [rtl_pci] [] _rtl_pci_rx_interrupt+0x4f3/0x790 [rtl_pci] [] _rtl_pci_interrupt+0x1d9/0x3b1 [rtl_pci] [] handle_irq_event_percpu+0x74/0x180 [] handle_irq_event+0x49/0x70 [] handle_edge_irq+0x81/0x150 [] handle_irq+0x25/0x40 [] do_IRQ+0x4f/0xe0 [] common_interrupt+0x6b/0x6b [] ? tcp_parse_md5sig_option+0x11/0x70 [] tcp_v4_rcv+0x76c/0xa70 [] ? handle_irq_event_percpu+0x11c/0x180 [] ip_local_deliver_finish+0xa4/0x1f0 [] ip_local_deliver+0x55/0xc0 [] ? tcp_v4_early_demux+0x109/0x170 [] ip_rcv_finish+0x81/0x340 [] ? common_interrupt+0x6b/0x6b [] ip_rcv+0x2a2/0x3d0 [] ? packet_rcv+0x43/0x400 [] __netif_receive_skb_core+0x725/0xa00 [] ? irq_exit+0x6b/0xb0 [] __netif_receive_skb+0x18/0x60 [] netif_receive_skb_internal+0x32/0xa0 [] netif_receive_skb_sk+0x1c/0x60 [] ieee80211_deliver_skb+0x11f/0x1b0 [mac80211] [] ieee80211_rx_handlers+0xd3b/0x2460 [mac80211] [] ? handle_irq_event+0x54/0x70 [] ? handle_edge_irq+0x81/0x150 [] ieee80211_prepare_and_rx_handle+0x1b4/0xa90 [mac80211] [] ? irq_exit+0x6b/0xb0 [] ? common_interrupt+0x6b/0x6b [] ieee80211_rx+0x2e8/0x8b0 [mac80211] [] ieee80211_tasklet_handler+0xc3/0xd0 [mac80211] [] tasklet_action+0xdf/0x100 [] __do_softirq+0xf6/0x250 [] irq_exit+0xa3/0xb0 [] do_IRQ+0x58/0xe0 [] common_interrupt+0x6b/0x6b [] ? call_cpuidle+0x33/0x60 [] ? cpu_startup_entry+0x268/0x320 [] start_secondary+0x183/0x1c0 Code: 00 84 d2 74 14 84 c9 74 37 80 f9 02 0f 85 79 01 00 00 41 8b 00 89 46 30 c3 80 f9 06 0f 84 6b 01 00 00 80 f9 07 0f 85 60 01 00 00 <8b> 06 25 00 40 00 80 0d 18 20 00 00 89 06 41 8b 00 89 46 04 c3 RIP [] rtl92ee_set_desc+0x2f/0x1d0 [rtl8192ee] RSP CR2: 0000000000000000 I've got a vmcore from kdump weighing in at about 100 MB if that would be useful to someone. Please let me know if there's anything else of use I can contribute; I'm going to go try poking around in the source after I confirm that wireless-testing doesn't help with this, but thought I'd report it, since I could only find one other report of someone encountering a similar panic [2]. Thanks, - Rich Ercolani PS: Please CC me on any replies, as I'm not on linux-wireless. [1] - https://wireless.wiki.kernel.org/en/users/Documentation/Reporting_bugs [2] - https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/1527603