| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <1397415102.1555.7.camel@vger.seibold.net>
Date: Sun, 13 Apr 2014 20:51:42 +0200
From: Stefani Seibold <stefani@...bold.net>
To: linux-usb <linux-usb@...r.kernel.org>,
"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
Greg KH <greg@...ah.com>,
Alan Stern <stern@...land.harvard.edu>
Subject: EHCI hotplug kernel crash in kernel 3.14 and 3.13
A hot plug of an USB 2.0 EHCI controller cardbus card will result in a
kernel crash. This is the kernel log of a vanilla 3.14 x86_64 kernel. I
will attach my kernel config.
[ 70.418181] pcmcia_socket pcmcia_socket0: pccard: CardBus card inserted into slot 0
[ 70.418209] pci 0000:04:00.0: [1033:0035] type 00 class 0x0c0310
[ 70.418239] pci 0000:04:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[ 70.418359] pci 0000:04:00.0: supports D1 D2
[ 70.418362] pci 0000:04:00.0: PME# supported from D0 D1 D2 D3hot
[ 70.418500] pci 0000:04:00.1: [1033:0035] type 00 class 0x0c0310
[ 70.418529] pci 0000:04:00.1: reg 0x10: [mem 0x00000000-0x00000fff]
[ 70.418653] pci 0000:04:00.1: supports D1 D2
[ 70.418655] pci 0000:04:00.1: PME# supported from D0 D1 D2 D3hot
[ 70.418756] pci 0000:04:00.2: [1033:00e0] type 00 class 0x0c0320
[ 70.418784] pci 0000:04:00.2: reg 0x10: [mem 0x00000000-0x000000ff]
[ 70.418912] pci 0000:04:00.2: supports D1 D2
[ 70.418915] pci 0000:04:00.2: PME# supported from D0 D1 D2 D3hot
[ 70.419040] pci 0000:04:00.0: BAR 0: assigned [mem 0xf1400000-0xf1400fff]
[ 70.419051] pci 0000:04:00.1: BAR 0: assigned [mem 0xf1401000-0xf1401fff]
[ 70.419059] pci 0000:04:00.2: BAR 0: assigned [mem 0xf1402000-0xf14020ff]
[ 70.419112] pci 0000:04:00.0: enabling device (0000 -> 0002)
[ 70.419350] pci 0000:04:00.1: enabling device (0000 -> 0002)
[ 70.419508] pci 0000:04:00.2: enabling device (0000 -> 0002)
[ 70.419755] ehci-pci 0000:04:00.2: EHCI Host Controller
[ 70.419874] ehci-pci 0000:04:00.2: new USB bus registered, assigned bus number 9
[ 70.419980] ehci-pci 0000:04:00.2: irq 19, io mem 0xf1402000
[ 70.422796] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 70.424894] ohci-pci: OHCI PCI platform driver
[ 70.425072] ehci-pci 0000:04:00.2: USB 2.0 started, EHCI 0.95
[ 70.425132] usb usb9: New USB device found, idVendor=1d6b, idProduct=0002
[ 70.425135] usb usb9: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[ 70.425138] usb usb9: Product: EHCI Host Controller
[ 70.425141] usb usb9: Manufacturer: Linux 3.14.0 ehci_hcd
[ 70.425144] usb usb9: SerialNumber: 0000:04:00.2
[ 70.425332] hub 9-0:1.0: USB hub found
[ 70.425344] hub 9-0:1.0: 5 ports detected
[ 70.425556] BUG: unable to handle kernel NULL pointer dereference at 0000000000000040
[ 70.425560] IP: [<ffffffff814947cc>] usb_set_configuration+0x1c/0x7d0
[ 70.425568] PGD 30d571067 PUD 30d570067 PMD 0
[ 70.425572] Oops: 0000 [#1] PREEMPT SMP
[ 70.425576] Modules linked in: ohci_pci(+) ohci_hcd rfcomm btusb ppdev intel_agp intel_gtt 8250 video parport_pc parport serial_core nvidia(PO) drm agpgart
[ 70.425604] CPU: 3 PID: 83 Comm: pccardd Tainted: P O 3.14.0 #1
[ 70.425607] Hardware name: Dell Inc. Precision M6400 /0G841G, BIOS A13 06/05/2013
[ 70.425609] task: ffff88030eefe150 ti: ffff88030ef86000 task.ti: ffff88030ef86000
[ 70.425611] RIP: 0010:[<ffffffff814947cc>] [<ffffffff814947cc>] usb_set_configuration+0x1c/0x7d0
[ 70.425615] RSP: 0018:ffff88030ef87ba0 EFLAGS: 00010286
[ 70.425617] RAX: ffff88030c7ce800 RBX: 0000000000000000 RCX: ffff88030ea57000
[ 70.425619] RDX: ffff88030dcb6800 RSI: 0000000000000001 RDI: 0000000000000000
[ 70.425620] RBP: ffff88030ef87c38 R08: ffff88030dfa6910 R09: 0000000000000000
[ 70.425622] R10: 0000000000004e2e R11: 0000000000000000 R12: 0000000000000000
[ 70.425624] R13: 0000000000000000 R14: ffffffff814a0b80 R15: ffff88030c7ce800
[ 70.425626] FS: 0000000000000000(0000) GS:ffff88031fd80000(0000) knlGS:0000000000000000
[ 70.425628] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 70.425630] CR2: 0000000000000040 CR3: 000000030c714000 CR4: 00000000000407e0
[ 70.425631] Stack:
[ 70.425632] ffffffff81340110 ffffffff814a0b80 ffff88030ef87bc8 ffffffff817b3858
[ 70.425636] ffff88030dcb6898 ffff88030ef87c00 ffffffff813d6daf ffff88030f429000
[ 70.425640] 000000010ef87bf0 ffffffff813d4737 ffff88030ef87c00 ffffffff8133f19a
[ 70.425644] Call Trace:
[ 70.425650] [<ffffffff81340110>] ? pci_do_find_bus+0x70/0x70
[ 70.425653] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425659] [<ffffffff817b3858>] ? klist_iter_exit+0x18/0x30
[ 70.425663] [<ffffffff813d6daf>] ? bus_find_device+0x7f/0xb0
[ 70.425666] [<ffffffff813d4737>] ? put_device+0x17/0x20
[ 70.425669] [<ffffffff8133f19a>] ? pci_dev_put+0x1a/0x20
[ 70.425672] [<ffffffff81340361>] ? pci_get_dev_by_id+0x61/0x90
[ 70.425675] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425679] [<ffffffff814a0bcb>] ehci_post_add+0x4b/0x60
[ 70.425682] [<ffffffff814a0070>] for_each_companion+0x80/0xa0
[ 70.425685] [<ffffffff814a0504>] usb_hcd_pci_probe+0x474/0x4e0
[ 70.425688] [<ffffffff8133f614>] pci_device_probe+0x84/0xe0
[ 70.425692] [<ffffffff813d89f6>] driver_probe_device+0x76/0x240
[ 70.425695] [<ffffffff813d8bc0>] ? driver_probe_device+0x240/0x240
[ 70.425698] [<ffffffff813d8bfb>] __device_attach+0x3b/0x40
[ 70.425701] [<ffffffff813d6cb3>] bus_for_each_drv+0x63/0xa0
[ 70.425704] [<ffffffff813d8938>] device_attach+0x88/0xa0
[ 70.425710] [<ffffffff81336d4d>] pci_bus_add_device+0x3d/0x60
[ 70.425714] [<ffffffff81337129>] pci_bus_add_devices+0x39/0xa0
[ 70.425717] [<ffffffff817b7055>] cb_alloc+0xd5/0xf0
[ 70.425722] [<ffffffff8147b2c0>] socket_insert+0xf0/0x110
[ 70.425725] [<ffffffff8147baaf>] pccardd+0x23f/0x400
[ 70.425728] [<ffffffff8147b870>] ? pcmcia_socket_uevent+0x30/0x30
[ 70.425732] [<ffffffff810a91f2>] kthread+0xd2/0xf0
[ 70.425735] [<ffffffff810a9120>] ? kthread_create_on_node+0x180/0x180
[ 70.425739] [<ffffffff817c996c>] ret_from_fork+0x7c/0xb0
[ 70.425742] [<ffffffff810a9120>] ? kthread_create_on_node+0x180/0x180
[ 70.425744] Code: 8f ff ff ff e9 9c fe ff ff 66 0f 1f 44 00 00 66 66 66 66 90 55 48 89 e5 41 57 41 56 41 55 41 54 49 89 fc 53 48 83 ec 70 89 75 ac <48> 8b 47 40 f6 87 4c 04 00 00 08 48 89 45 80 0f 84 97 00 00 00
[ 70.425784] RIP [<ffffffff814947cc>] usb_set_configuration+0x1c/0x7d0
[ 70.425788] RSP <ffff88030ef87ba0>
[ 70.425790] CR2: 0000000000000040
[ 70.425792] ---[ end trace cc8b88e5a9bc6642 ]---
[ 70.425805] ------------[ cut here ]------------
[ 70.425810] WARNING: CPU: 3 PID: 83 at kernel/smp.c:210 smp_call_function_single+0x15d/0x1a0()
[ 70.425811] Modules linked in: ohci_pci(+) ohci_hcd rfcomm btusb ppdev intel_agp intel_gtt 8250 video parport_pc parport serial_core nvidia(PO) drm agpgart
[ 70.425826] CPU: 3 PID: 83 Comm: pccardd Tainted: P D O 3.14.0 #1
[ 70.425827] Hardware name: Dell Inc. Precision M6400 /0G841G, BIOS A13 06/05/2013
[ 70.425829] 0000000000000009 ffff88030ef87758 ffffffff817ba834 0000000000000000
[ 70.425833] ffff88030ef87790 ffffffff8108789d 0000000000000003 0000000000000003
[ 70.425836] ffffffff81ce3e90 ffffffff8113be00 0000000000000001 ffff88030ef877a0
[ 70.425840] Call Trace:
[ 70.425845] [<ffffffff817ba834>] dump_stack+0x4d/0x6f
[ 70.425849] [<ffffffff8108789d>] warn_slowpath_common+0x7d/0xa0
[ 70.425853] [<ffffffff8113be00>] ? task_clock_event_add+0x40/0x40
[ 70.425856] [<ffffffff8108797a>] warn_slowpath_null+0x1a/0x20
[ 70.425859] [<ffffffff810eeafd>] smp_call_function_single+0x15d/0x1a0
[ 70.425863] [<ffffffff810b53fa>] ? enqueue_task+0x3a/0x60
[ 70.425866] [<ffffffff811399c4>] task_function_call+0x44/0x50
[ 70.425870] [<ffffffff8113ef00>] ? perf_cgroup_switch+0x1a0/0x1a0
[ 70.425873] [<ffffffff8113bfd0>] perf_cgroup_exit+0x20/0x30
[ 70.425877] [<ffffffff811000e3>] cgroup_exit+0xd3/0x100
[ 70.425880] [<ffffffff81089afb>] do_exit+0x2ab/0xa20
[ 70.425884] [<ffffffff810d4461>] ? kmsg_dump+0xc1/0xd0
[ 70.425887] [<ffffffff817c32fa>] oops_end+0x8a/0xd0
[ 70.425889] [<ffffffff817b8213>] no_context+0x212/0x21f
[ 70.425892] [<ffffffff817b82a0>] __bad_area_nosemaphore+0x80/0x1d6
[ 70.425895] [<ffffffff817b8409>] bad_area_nosemaphore+0x13/0x15
[ 70.425898] [<ffffffff817c55ce>] __do_page_fault+0x3ae/0x560
[ 70.425903] [<ffffffff81310cef>] ? idr_get_empty_slot+0x16f/0x3a0
[ 70.425906] [<ffffffff813112c4>] ? ida_get_new_above+0x1d4/0x200
[ 70.425909] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425912] [<ffffffff817c578c>] do_page_fault+0xc/0x10
[ 70.425915] [<ffffffff817c2892>] page_fault+0x22/0x30
[ 70.425918] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425921] [<ffffffff814947cc>] ? usb_set_configuration+0x1c/0x7d0
[ 70.425924] [<ffffffff81340110>] ? pci_do_find_bus+0x70/0x70
[ 70.425927] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425930] [<ffffffff817b3858>] ? klist_iter_exit+0x18/0x30
[ 70.425933] [<ffffffff813d6daf>] ? bus_find_device+0x7f/0xb0
[ 70.425936] [<ffffffff813d4737>] ? put_device+0x17/0x20
[ 70.425939] [<ffffffff8133f19a>] ? pci_dev_put+0x1a/0x20
[ 70.425942] [<ffffffff81340361>] ? pci_get_dev_by_id+0x61/0x90
[ 70.425945] [<ffffffff814a0b80>] ? hcd_pci_suspend_noirq+0xa0/0xa0
[ 70.425948] [<ffffffff814a0bcb>] ehci_post_add+0x4b/0x60
[ 70.425951] [<ffffffff814a0070>] for_each_companion+0x80/0xa0
[ 70.425953] [<ffffffff814a0504>] usb_hcd_pci_probe+0x474/0x4e0
[ 70.425957] [<ffffffff8133f614>] pci_device_probe+0x84/0xe0
[ 70.425960] [<ffffffff813d89f6>] driver_probe_device+0x76/0x240
[ 70.425963] [<ffffffff813d8bc0>] ? driver_probe_device+0x240/0x240
[ 70.425966] [<ffffffff813d8bfb>] __device_attach+0x3b/0x40
[ 70.425971] [<ffffffff813d6cb3>] bus_for_each_drv+0x63/0xa0
[ 70.425974] [<ffffffff813d8938>] device_attach+0x88/0xa0
[ 70.425978] [<ffffffff81336d4d>] pci_bus_add_device+0x3d/0x60
[ 70.425981] [<ffffffff81337129>] pci_bus_add_devices+0x39/0xa0
[ 70.425984] [<ffffffff817b7055>] cb_alloc+0xd5/0xf0
[ 70.425988] [<ffffffff8147b2c0>] socket_insert+0xf0/0x110
[ 70.425991] [<ffffffff8147baaf>] pccardd+0x23f/0x400
[ 70.425994] [<ffffffff8147b870>] ? pcmcia_socket_uevent+0x30/0x30
[ 70.425997] [<ffffffff810a91f2>] kthread+0xd2/0xf0
[ 70.426000] [<ffffffff810a9120>] ? kthread_create_on_node+0x180/0x180
[ 70.426003] [<ffffffff817c996c>] ret_from_fork+0x7c/0xb0
[ 70.426006] [<ffffffff810a9120>] ? kthread_create_on_node+0x180/0x180
[ 70.426008] ---[ end trace cc8b88e5a9bc6643 ]---
Download attachment "kernel.config.gz" of type "application/gzip" (28748 bytes)
Powered by blists - more mailing lists