netdev - ppp/pppoe, still panic 4.15.3 in ppp

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Wed, 14 Feb 2018 15:17:23 +0200
From:   Denys Fedoryshchenko <nuclearcat@...learcat.com>
To:     Linux Kernel Network Developers <netdev@...r.kernel.org>
Subject: ppp/pppoe, still panic 4.15.3 in ppp_push

Hi,

Upgraded kernel to 4.15.3, still it crashes after while (several hours, 
cannot do bisect, as it is production server).

dev ppp # gdb ppp_generic.o
GNU gdb (Gentoo 7.12.1 vanilla) 7.12.1
<<skipped>>
Reading symbols from ppp_generic.o...done.
(gdb) list *ppp_push+0x73
0x681 is in ppp_push (drivers/net/ppp/ppp_generic.c:1663).
1658			list = list->next;
1659			pch = list_entry(list, struct channel, clist);
1660
1661			spin_lock(&pch->downl);
1662			if (pch->chan) {
1663				if (pch->chan->ops->start_xmit(pch->chan, skb))
1664					ppp->xmit_pending = NULL;
1665			} else {
1666				/* channel got unregistered */
1667				kfree_skb(skb);



Feb 14 08:32:00 <srv> [17937.863304] general protection fault: 0000 [#1] 
SMP
Feb 14 08:32:00 <srv> [17937.863638] Modules linked in: pppoe pppox 
ppp_generic slhc netconsole configfs coretemp nf_nat_pptp 
nf_nat_proto_gre nf_conntrack_pptp nf_conntrack_proto_gre tun xt_TEE 
nf_dup_ipv4 x
t_REDIRECT nf_nat_redirect xt_nat xt_TCPMSS ipt_REJECT nf_reject_ipv4 
xt_set xt_string xt_connmark xt_DSCP xt_mark xt_tcpudp ip_set_hash_net 
ip_set_hash_ip ip_set nfnetlink iptable_mangle iptable_filter iptable_na
t nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack 
ip_tables x_tables 8021q garp mrp stp llc ixgbe dca
Feb 14 08:32:00 <srv> [17937.865619] CPU: 6 PID: 12543 Comm: accel-pppd 
Not tainted 4.15.3-build-0134 #4
Feb 14 08:32:00 <srv> [17937.866211] Hardware name: HP ProLiant DL320e 
Gen8 v2, BIOS P80 04/02/2015
Feb 14 08:32:00 <srv> [17937.866542] RIP: 0010:ppp_push+0x73/0x4ec 
[ppp_generic]
Feb 14 08:32:00 <srv> [17937.866865] RSP: 0018:ffffc90001fa7d50 EFLAGS: 
00010282
Feb 14 08:32:00 <srv> [17937.867191] RAX: 0fd54d16ec030000 RBX: 
ffff8803eeb207b8 RCX: 0000000000000101
Feb 14 08:32:00 <srv> [17937.867517] RDX: 0000000000000000 RSI: 
ffff8803f9fb5000 RDI: ffff8803eed1e443
Feb 14 08:32:00 <srv> [17937.867844] RBP: ffff8803f9fb5000 R08: 
0000000000000001 R09: 00000000ffffffff
Feb 14 08:32:00 <srv> [17937.868171] R10: 00007f0a75fba758 R11: 
0000000000000293 R12: 0000000000008021
Feb 14 08:32:00 <srv> [17937.868499] R13: ffff8804144c7880 R14: 
0000000000008021 R15: ffff8804144c7800
Feb 14 08:32:00 <srv> [17937.868824] FS:  00007f0a7ecd8700(0000) 
GS:ffff880434180000(0000) knlGS:0000000000000000
Feb 14 08:32:00 <srv> [17937.869408] CS:  0010 DS: 0000 ES: 0000 CR0: 
0000000080050033
Feb 14 08:32:00 <srv> [17937.869729] CR2: 00007fa87a187978 CR3: 
000000042a6cd005 CR4: 00000000001606e0
Feb 14 08:32:00 <srv> [17937.870053] Call Trace:
Feb 14 08:32:00 <srv> [17937.870375]  ? 
__kmalloc_node_track_caller+0xb5/0xd6
Feb 14 08:32:00 <srv> [17937.870700]  __ppp_xmit_process+0x35/0x4c6 
[ppp_generic]
Feb 14 08:32:00 <srv> [17937.871025]  ppp_xmit_process+0x35/0x88 
[ppp_generic]
Feb 14 08:32:00 <srv> [17937.871350]  ppp_write+0xb1/0xbb [ppp_generic]
Feb 14 08:32:00 <srv> [17937.871678]  __vfs_write+0x1c/0x118
Feb 14 08:32:00 <srv> [17937.872003]  ? SyS_epoll_ctl+0x399/0x871
Feb 14 08:32:00 <srv> [17937.872328]  vfs_write+0xc6/0x169
Feb 14 08:32:00 <srv> [17937.872654]  SyS_write+0x48/0x81
Feb 14 08:32:00 <srv> [17937.872980]  do_syscall_64+0x5f/0xea
Feb 14 08:32:00 <srv> [17937.873310]  
entry_SYSCALL_64_after_hwframe+0x21/0x86
Feb 14 08:32:00 <srv> [17937.873638] RIP: 0033:0x7f0a7e4bfb2d
Feb 14 08:32:00 <srv> [17937.873963] RSP: 002b:00007f0a7ecd7b00 EFLAGS: 
00000293 ORIG_RAX: 0000000000000001
Feb 14 08:32:00 <srv> [17937.874554] RAX: ffffffffffffffda RBX: 
00007f0a7d00b1e3 RCX: 00007f0a7e4bfb2d
Feb 14 08:32:00 <srv> [17937.874881] RDX: 000000000000000c RSI: 
00007f0a74175c80 RDI: 0000000000003ef8
Feb 14 08:32:00 <srv> [17937.875207] RBP: 00007f0a7ecd7b30 R08: 
0000000000000000 R09: 000055776e7a5e40
Feb 14 08:32:00 <srv> [17937.875536] R10: 00007f0a75fba758 R11: 
0000000000000293 R12: 00007f0a7550dd18
Feb 14 08:32:00 <srv> [17937.875863] R13: 00007ffd4c941eaf R14: 
0000000000000000 R15: 00007f0a7ecd8700
Feb 14 08:32:00 <srv> [17937.876190] Code: 94 00 00 00 49 89 ff 0f ba e0 
0a 72 43 48 8b 5f 68 48 8d 7b e8 e8 88 4f 84 e1 48 8b 7b b8 48 85 ff 74 
10 48 8b 47 08 48 8b 34 24 <ff> 10 85 c0 75 0b eb 14 48 8b 3c 2
4 e8 d8 6c 76 e1 49 c7 87 c8
Feb 14 08:32:00 <srv> [17937.877071] RIP: ppp_push+0x73/0x4ec 
[ppp_generic] RSP: ffffc90001fa7d50
Feb 14 08:32:00 <srv> [17937.877435] ---[ end trace 30a3cc6a49109783 
]---
Feb 14 08:32:00 <srv> [17937.878370] Kernel panic - not syncing: Fatal 
exception in interrupt
Feb 14 08:32:00 <srv> [17937.878715] Kernel Offset: disabled
Feb 14 08:32:00 <srv> [17937.879771] Rebooting in 5 seconds..