netdev - Re: Kernel Panic on high bandwidth transfer over wifi

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <e379d47b-ce58-362c-7223-e91c720185f1@gmail.com>
Date:   Wed, 29 Aug 2018 08:29:23 -0700
From:   Eric Dumazet <eric.dumazet@...il.com>
To:     Nathaniel Munk <nathaniel@...k.com.au>,
        "netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: Kernel Panic on high bandwidth transfer over wifi



On 08/29/2018 04:42 AM, Nathaniel Munk wrote:
> Hi all,
> I'm running Arch Linux on kernel 4.18.5 (same issue on both arch-provided kernel and mainline built-from-source). There is an issue whereby the kernel crashes when transferring at high bandwidths (approx 6mB/s) over a specific wifi connection. I can only reproduce the issue when using the Personal Hotspot on my iPhone 6S+, but can reproduce it very consistently on that connection.
> 
> More often than not, any download reaching this speed will cause a panic, but if the download is immediately terminated at the first error the system can recover (and doing this I have obtained the attached logs). Unfortunately, I have not had access to a second machine to obtain the netconsole printout of the panic.
> 
> As above, high-bandwidth transfers on other wifi networks do not cause the issue (nor on ethernet connections).
> 
> As you can see from the attached log, the issue appears at tcp_recvmsg+0x579 and net_tx_action+0x1fe. At both these positions (net/ipv4/tcp.c:2000 and net/core/dev.c:4279 in mainline 4.18.5), a member of the skb struct is called.
> 
> Thank you for your time (and I apologize if this is spurious or badly worded, this is my first bug report), and please don't hesitate to let me know if there's anything else I can do to help work this out.
> 
> Regards,
> -------------------
> Nathaniel Munk
> nathaniel@...k.com.au
> 

Unfortunately there is no attached log ;)