[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2014-07-06 Thread Jussi Saarinen
I managed to find one more bug report similar to this one. So now there
are at least four bug reports (including this one) here in Launchpad on
this problem:

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1144322

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1165433

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1189998

https://bugs.launchpad.net/ubuntu/+source/linux-lts-raring/+bug/1256811

Anyway, if these are about the same bug that I think they are, the bug
has now been completely fixed in kernel version 3.14, though kernel
version 3.12 included some of the fix. Also there was one previous fix
that is also needed that I think was backported to stable before 3.12.

I think I manged to list all the necessary commits, Here are links to
the commits, in case they need to be backported:

The first fix (pre 3.12?):
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1d9e689c934bd5ecb0f273c6c65e0655c5cfee5f

The fixes in 3.12:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=396dc223dd36edd218650d042a07c5e61f022c5b

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ebe937f74b8a72cf3ceeae5c2194a160bb092901

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54b926a1434e817ca84cb090f36b56763e192470

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cad348a17e170451ea8688b532a6ca3e98c63b60

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ece3150dea382c7c961fe2604332ed3474960d25

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ffe6b68cc5999a3f91a15b6667e69e14186e337d

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=29cd718beba999bda4bdbbf59b5a4d25c07e1547

And finally the fixes in 3.14:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5b899241874dcc1a2b932a668731c80a3a869575

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e228b63390536f5b737056059a9a04ea016b1abf

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4a2fb3ecc7467c775b154813861f25a0ddc11aa0

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f86772af6a0f643d3e13eb3f4f9213ae0c333ee4

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Fix Released
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Fix Released

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-10-08 Thread Chris J Arges
** Changed in: linux (Ubuntu Raring)
 Assignee: Chris J Arges (arges) = (unassigned)

** Changed in: linux (Ubuntu Raring)
   Status: In Progress = Confirmed

** Changed in: linux (Ubuntu Raring)
   Status: Confirmed = New

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Fix Released
Status in “linux” source package in Raring:
  New
Status in “linux” source package in Saucy:
  Fix Released

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-10-07 Thread Chris J Arges
** Changed in: linux (Ubuntu Raring)
   Status: Confirmed = In Progress

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Fix Released
Status in “linux” source package in Raring:
  In Progress
Status in “linux” source package in Saucy:
  Fix Released

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] tty_ldisc_release+0x17/0x90
  [  513.902946]  [814131ed] tty_release+0x46d/0x5c0
  [  513.902953]  [81195da1] 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-07 Thread Launchpad Bug Tracker
This bug was fixed in the package linux - 3.11.0-5.11

---
linux (3.11.0-5.11) saucy; urgency=low

  * Release tracker
- LP: #1221886

  [ Adam Lee ]

  * SAUCE: Bluetooth: Add support for 04ca:2007
- LP: #1153448
  * SAUCE: Bluetooth: Add support for 105b:e065
- LP: #1161261

  [ Gavin Guo ]

  * SAUCE: Bluetooth: Add support for Broadcom 413c:8143
- LP: #1166113

  [ Upstream Kernel Changes ]

  * igb: Reset the link when EEE setting changed
- LP: #1219619
  * igb: Read register for latch_on without return value
- LP: #1219619
  * igb: Added rcu_lock to avoid race
- LP: #1219619
  * igb: don't allow SR-IOV without MSI-X
- LP: #1219619
  * igb: Update MTU so that it is always at least a standard frame size
- LP: #1219619
  * igb: Refactor of init_nvm_params
- LP: #1219619
  * igb: Refactor NVM read functions to accommodate devices with no flash
- LP: #1219619
  * igb: Add device support for flashless SKU of i210 device
- LP: #1219619
  * igb: Fix get_fw_version function for all parts
- LP: #1219619
  * igb: Add macro for size of RETA indirection table
- LP: #1219619
  * igb: Expose RSS indirection table for ethtool
- LP: #1219619
  * igb: Don't look for a PBA in the iNVM when flashless
- LP: #1219619
  * igb: Implementation of 1-sec delay for i210 devices
- LP: #1219619
  * igb: New PHY_ID for i354 device
- LP: #1219619
  * igb: M88E1543 PHY downshift implementation
- LP: #1219619
  * igb: No PHPM support in i354 devices
- LP: #1219619
  * igb: Support to get 2_5G link status for appropriate media type
- LP: #1219619
  * igb: Get speed and duplex for 1G non_copper devices
- LP: #1219619
  * igb: Implementation to report advertised/supported link on i354 devices
- LP: #1219619
  * igb: Update version number
- LP: #1219619
  * Bluetooth: Take proper tty_struct references
- LP: #1189998
  * Bluetooth: Remove the device from the list in the destructor
- LP: #1189998
  * Bluetooth: Move the tty initialization and cleanup out of open/close
- LP: #1189998
  * Bluetooth: Implement .activate, .shutdown and .carrier_raised methods
- LP: #1189998
  * Bluetooth: Fix the reference counting of tty_port
- LP: #1189998
  * Bluetooth: Purge the dlc-tx_queue to avoid circular dependency
- LP: #1189998

  [ Wen-chien Jesse Sung ]

  * SAUCE: Bluetooth: Support for loading broadcom patchram firmware
- LP: #1065400
  * SAUCE: Bluetooth: Add support for 13d3:3388 and 13d3:3389
- LP: #1065400
 -- Tim Gardner tim.gard...@canonical.com   Thu, 05 Sep 2013 08:06:17 -0600

** Changed in: linux (Ubuntu Saucy)
   Status: Confirmed = Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Fix Released
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Fix Released

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-06 Thread Chris J Arges
Sent pull request for saucy.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] tty_ldisc_release+0x17/0x90
  [  513.902946]  [814131ed] tty_release+0x46d/0x5c0
  [  513.902953]  [81195da1] __fput+0xe1/0x230
  [  513.902958]  [81195fbe] 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-05 Thread Jussi Saarinen
Sorry, forgot the links to the commits:

https://git.kernel.org/cgit/linux/kernel/git/davem/net-
next.git/commit/?id=e7abfe40928f4f8c1aa908477c36c13843bd1a57

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cc998ff8811530be521f6b316f37ab7676a07938

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-05 Thread Jussi Saarinen
Gianluca Azolin's patches were merged to net-next day before yesterday.
And yesterday they were merged to Linus' master branch. So patches will
be in 3.12 rc1.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] tty_ldisc_release+0x17/0x90
  [  513.902946]  

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-04 Thread Christopher M. Penalver
** Tags added: bios-outdated-1.38

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] tty_ldisc_release+0x17/0x90
  [  513.902946]  [814131ed] tty_release+0x46d/0x5c0
  [  513.902953]  [81195da1] __fput+0xe1/0x230
  [  513.902958]  [81195fbe] 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-09-02 Thread Jussi Saarinen
Gianluca Anzolin writes on bluetooth-linux mailing list that though his
tty refcount patch series is needed, more work is required to fix the
problem. If I understood his mailing list message correctly, the system
locks up when the device is released even after his patches have been
applied.

Source:

http://marc.info/?l=linux-bluetoothm=137788497602145w=2

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-08-29 Thread Jussi Saarinen
There are at least three similar bug reports on this problem:

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1144322

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1165433

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1189998

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-08-29 Thread Jussi Saarinen
ekin wrote:
 This bug seems similar to bug 1165433. By the way, the patch referred
 to in comment #4 is still being  reviewed and revised it seems. See
 for instance http://marc.info/?a=12747661669r=1w=2

The fix being discussed on Bluetooth mailing list has already been
merged to bluetooth-next (and wireless-next). The fix should find its
way to mainline kernel (probably 3.12).

http://marc.info/?l=linux-bluetoothm=137699050920055w=2

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=1f088c00f11cd5b09e215cf31010ed3854f62b9a

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=befa7d049165e6d47859fb827ee5671354f30284

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=33040aa77f9ba8f0e3120f2e15917a74aef7ee07

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=e5e5db0dcfb07cf40cbec7e198443a8f67a844c2

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=77f577d52aefb92c350f65c4228958415a05510f

https://git.kernel.org/cgit/linux/kernel/git/bluetooth/bluetooth-
next.git/commit/?id=288f2fc4203559d225d84f1a0308198ad7a06c65

http://marc.info/?l=linux-bluetoothm=137719621522631w=2

https://git.kernel.org/cgit/linux/kernel/git/linville/wireless-
next.git/commit/?id=69b307a48a5e10d5fd53dbbfae1c700da356bd5d

However, the patch series is apparently too extensive to consider for
-stable [1]. So another solution is required for stable kernels. Though
no one seems to know what the right solution for stable kernels is [2].

[1] http://marc.info/?l=linux-bluetoothm=137762583515880w=2

[2] http://marc.info/?l=linux-bluetoothm=137768948602122w=2

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-08-17 Thread ekin
This bug seems similar to bug 1165433. By the way, the patch referred to
in comment #4 is still being reviewed and revised it seems. See for
instance http://marc.info/?a=12747661669r=1w=2

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] 

[Kernel-packages] [Bug 1189998] Re: bluetooth disconnection corrupts memory and causes kernel panic

2013-07-20 Thread Christopher M. Penalver
** Tags added: cherry-pick

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1189998

Title:
  bluetooth disconnection corrupts memory and causes kernel panic

Status in “linux” package in Ubuntu:
  Confirmed
Status in “linux” source package in Raring:
  Confirmed
Status in “linux” source package in Saucy:
  Confirmed

Bug description:
  This bug is present on kernels v3.8-rc1 and beyond and was exposed by commit 
ecbbfd44.
  To reproduce:

  1) Pair a bluetooth device that is capable of being easily powered down (a 
phone for example)
  2) Configure /etc/bluetooth/rfcomm.conf to connect to device. For example:
  rfcomm0 {
  bind no;
  device XX:XX:XX:XX:XX:XX;
  channel XX;
  comment phone;
  }
  3) Type 'rfcomm connect 0'.
  4) On the device power down the bluetooth component or power down the device.
  5) Eventually the machine will crash, I've found that exec'ing another 
program will cause the crash easily.

  ProblemType: KernelCrash
  DistroRelease: Ubuntu 13.10
  Package: linux-image-3.9.0-4-generic
  ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
  Uname: Linux 3.9.0-4-generic x86_64
  ApportVersion: 2.10.2-0ubuntu1
  Architecture: amd64
  AudioDevicesInUse:
   USERPID ACCESS COMMAND
   /dev/snd/controlC0:  ubuntu 1537 F pulseaudio
  Date: Tue Jun 11 12:22:26 2013
  HibernationDevice: RESUME=UUID=8c8e9f7c-b216-4ead-a5da-8e267ab136ac
  InstallationDate: Installed on 2013-06-05 (5 days ago)
  InstallationMedia: Ubuntu 13.10 Saucy Salamander - Alpha amd64 (20130605)
  MachineType: LENOVO 42872WU
  MarkForUpload: True
  ProcFB: 0 inteldrmfb
  ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.9.0-4-generic 
root=UUID=94d4ed1f-8182-4805-8d5b-6944f6f1c428 ro 
crashkernel=384M-2G:64M,2G-:128M debug ignore_loglevel
  PulseList:
   Error: command ['pacmd', 'list'] failed with exit code 1: Home directory not 
accessible: Permission denied
   No PulseAudio daemon running, or not running as session daemon.
  RelatedPackageVersions:
   linux-restricted-modules-3.9.0-4-generic N/A
   linux-backports-modules-3.9.0-4-generic  N/A
   linux-firmware   1.109
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  dmi.bios.date: 11/01/2011
  dmi.bios.vendor: LENOVO
  dmi.bios.version: 8DET55WW (1.25 )
  dmi.board.asset.tag: Not Available
  dmi.board.name: 42872WU
  dmi.board.vendor: LENOVO
  dmi.board.version: Not Available
  dmi.chassis.asset.tag: No Asset Information
  dmi.chassis.type: 10
  dmi.chassis.vendor: LENOVO
  dmi.chassis.version: Not Available
  dmi.modalias: 
dmi:bvnLENOVO:bvr8DET55WW(1.25):bd11/01/2011:svnLENOVO:pn42872WU:pvrThinkPadX220:rvnLENOVO:rn42872WU:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
  dmi.product.name: 42872WU
  dmi.product.version: ThinkPad X220
  dmi.sys.vendor: LENOVO

  --

  The actual crash:
  [  507.050158] Bluetooth: TIOCGSERIAL is not supported
  [  513.902765] [ cut here ]
  [  513.902781] WARNING: at /build/buildd/linux-3.9.0/kernel/workqueue.c:602 
get_work_pool+0x81/0x90()
  [  513.902784] Hardware name: 42872WU
  [  513.902786] Modules linked in: intel_powerclamp coretemp kvm_intel kvm 
parport_pc(F) crc32_pclmul(F) ghash_clmulni_intel(F) ppdev(F) rfcomm 
aesni_intel(F) aes_x86_64(F) bnep xts(F) lrw(F) gf128mul(F) ablk_helper(F) 
cryptd(F) joydev(F) arc4(F) uvcvideo iwldvm snd_hda_codec_hdmi 
snd_hda_codec_conexant videobuf2_vmalloc videobuf2_memops videobuf2_core 
mac80211 snd_hda_intel thinkpad_acpi videodev snd_hda_codec nvram(F) 
snd_hwdep(F) snd_pcm(F) iwlwifi snd_page_alloc(F) snd_seq_midi(F) 
snd_seq_midi_event(F) snd_rawmidi(F) snd_seq(F) snd_seq_device(F) btusb 
snd_timer(F) psmouse(F) snd(F) bluetooth mei cfg80211 serio_raw(F) soundcore(F) 
microcode(F) tpm_tis lpc_ich mac_hid lp(F) parport(F) i915 i2c_algo_bit 
drm_kms_helper e1000e(F) ptp(F) pps_core(F) drm sdhci_pci sdhci ahci(F) 
libahci(F) wmi video(F)
  [  513.902871] Pid: 863, comm: modem-manager Tainted: GF
3.9.0-4-generic #9-Ubuntu
  [  513.902873] Call Trace:
  [  513.902883]  [810584c0] warn_slowpath_common+0x70/0xa0
  [  513.902889]  [810585aa] warn_slowpath_null+0x1a/0x20
  [  513.902894]  [810750f1] get_work_pool+0x81/0x90
  [  513.902900]  [810780c4] flush_work+0x24/0x160
  [  513.902909]  [a051330e] ? rfcomm_dev_destruct+0x7e/0xb0 [rfcomm]
  [  513.902916]  [8117d0ed] ? kfree+0xfd/0x130
  [  513.902922]  [81078274] __cancel_work_timer+0x74/0xb0
  [  513.902928]  [810782c0] cancel_work_sync+0x10/0x20
  [  513.902935]  [814196bd] tty_ldisc_halt+0x1d/0x30
  [  513.902940]  [8141a437] tty_ldisc_release+0x17/0x90
  [  513.902946]  [814131ed] tty_release+0x46d/0x5c0
  [  513.902953]  [81195da1] __fput+0xe1/0x230
  [  513.902958]  [81195fbe]