netdev - Fw: [Bug 201933] New: r8169 hangs with Oops/null pointer deref on shutdown

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date:   Sat, 8 Dec 2018 11:26:38 -0800
From:   Stephen Hemminger <stephen@...workplumber.org>
To:     nic_swsd@...ltek.com, hkallweit1@...il.com
Cc:     netdev@...r.kernel.org
Subject: Fw: [Bug 201933] New: r8169 hangs with Oops/null pointer deref on
 shutdown



Begin forwarded message:

Date: Sat, 08 Dec 2018 18:20:01 +0000
From: bugzilla-daemon@...zilla.kernel.org
To: stephen@...workplumber.org
Subject: [Bug 201933] New: r8169 hangs with Oops/null pointer deref on shutdown


https://bugzilla.kernel.org/show_bug.cgi?id=201933

            Bug ID: 201933
           Summary: r8169 hangs with Oops/null pointer deref on shutdown
           Product: Networking
           Version: 2.5
    Kernel Version: 4.20
          Hardware: x86-64
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: normal
          Priority: P1
         Component: Other
          Assignee: stephen@...workplumber.org
          Reporter: adf.lists@...il.com
        Regression: No

On 4.20-rc? halt/reboot r8169 hangs. ip li set down seems to get same error.

Dec  8 16:14:56 ph4 kernel: r8169 0000:06:00.0 enp6s0: Link is Down
Dec  8 16:14:57 ph4 kernel: BUG: unable to handle kernel NULL pointer
dereference at 00000000000003a0
Dec  8 16:14:57 ph4 kernel: PGD 22acfc067 P4D 22acfc067 PUD 232a33067 PMD 0 
Dec  8 16:14:57 ph4 kernel: Oops: 0002 [#1] PREEMPT SMP NOPTI
Dec  8 16:14:57 ph4 kernel: CPU: 2 PID: 22126 Comm: ip Not tainted 4.20.0-rc5
#1
Dec  8 16:14:57 ph4 kernel: Hardware name: To Be Filled By O.E.M. To Be Filled
By O.E.M./970 Extreme3 R2.0, BIOS P1.60 06/05/2014
Dec  8 16:14:57 ph4 kernel: RIP: 0010:queue_work_on+0x4/0x20
Dec  8 16:14:57 ph4 kernel: Code: ff 48 c7 c7 20 55 de 81 e8 02 58 04 00 c6 05
aa 1c 3e 01 01 e9 75 ff ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 53 9c 5b
fa <f0> 48 0f ba 2a 00 73 06 31 c0 53 9d 5b c3 e8 99 fb ff ff b8 01 00
Dec  8 16:14:57 ph4 kernel: RSP: 0018:ffffc90000d473a8 EFLAGS: 00010002
Dec  8 16:14:57 ph4 kernel: RAX: ffff8882362c4000 RBX: 0000000000000002 RCX:
0000000000000000
Dec  8 16:14:57 ph4 kernel: RDX: 00000000000003a0 RSI: ffff88823680d200 RDI:
0000000000000008
Dec  8 16:14:57 ph4 kernel: RBP: ffff8882362c4840 R08: ffff888236400248 R09:
ffff888236400340
Dec  8 16:14:57 ph4 kernel: R10: 0000000000000000 R11: ffffffff82043b28 R12:
ffff8882341ca960
Dec  8 16:14:57 ph4 kernel: R13: ffff8882341ca828 R14: 000000000000001a R15:
ffff8882362c4840
Dec  8 16:14:57 ph4 kernel: FS:  00007f5fc097f700(0000)
GS:ffff888237b00000(0000) knlGS:0000000000000000
Dec  8 16:14:57 ph4 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec  8 16:14:57 ph4 kernel: CR2: 00000000000003a0 CR3: 0000000233440000 CR4:
00000000000006e0
Dec  8 16:14:57 ph4 kernel: Call Trace:
Dec  8 16:14:57 ph4 kernel:  rtl8169_interrupt+0xba/0x260 [r8169]
Dec  8 16:14:57 ph4 kernel:  ? _raw_spin_unlock_irqrestore+0xf/0x30
Dec  8 16:14:57 ph4 kernel:  __free_irq+0x177/0x2d0
Dec  8 16:14:57 ph4 kernel:  free_irq+0x29/0x60
Dec  8 16:14:57 ph4 kernel:  pci_free_irq+0x13/0x20
Dec  8 16:14:57 ph4 kernel:  rtl8169_close+0xe8/0x1f0 [r8169]
Dec  8 16:14:57 ph4 kernel:  __dev_close_many+0x8f/0x100
Dec  8 16:14:57 ph4 kernel:  __dev_change_flags+0xe9/0x210
Dec  8 16:14:57 ph4 kernel:  dev_change_flags+0x29/0x70
Dec  8 16:14:57 ph4 kernel:  do_setlink+0x310/0xf30
Dec  8 16:14:57 ph4 kernel:  ? __nla_parse+0x48/0x190
Dec  8 16:14:57 ph4 kernel:  rtnl_newlink+0x571/0x880
Dec  8 16:14:57 ph4 kernel:  ? __nla_parse+0x48/0x190
Dec  8 16:14:57 ph4 kernel:  ? nla_parse+0x13/0x20
Dec  8 16:14:57 ph4 kernel:  ? rtnl_newlink+0x167/0x880
Dec  8 16:14:57 ph4 kernel:  ? preempt_count_add+0x55/0xb0
Dec  8 16:14:57 ph4 kernel:  ? get_page_from_freelist+0xdf0/0x1130
Dec  8 16:14:57 ph4 kernel:  ? kmem_cache_alloc+0x37/0x180
Dec  8 16:14:57 ph4 kernel:  rtnetlink_rcv_msg+0x141/0x380
Dec  8 16:14:57 ph4 kernel:  ? rtnl_calcit.isra.25+0x120/0x120
Dec  8 16:14:57 ph4 kernel:  netlink_rcv_skb+0x48/0x120
Dec  8 16:14:57 ph4 kernel:  netlink_unicast+0x1be/0x270
Dec  8 16:14:57 ph4 kernel:  netlink_sendmsg+0x2b7/0x3f0
Dec  8 16:14:57 ph4 kernel:  ? netlink_unicast+0x270/0x270
Dec  8 16:14:57 ph4 kernel:  ___sys_sendmsg+0x10b/0x310
Dec  8 16:14:57 ph4 kernel:  ? dev_ioctl+0x19d/0x410
Dec  8 16:14:57 ph4 kernel:  ? preempt_count_add+0x74/0xb0
Dec  8 16:14:57 ph4 kernel:  ? __inode_wait_for_writeback+0x7a/0xe0
Dec  8 16:14:57 ph4 kernel:  ? init_wait_var_entry+0x40/0x40
Dec  8 16:14:57 ph4 kernel:  ? preempt_count_add+0x74/0xb0
Dec  8 16:14:57 ph4 kernel:  ? _raw_spin_lock+0xe/0x30
Dec  8 16:14:57 ph4 kernel:  ? _raw_spin_unlock+0xd/0x30
Dec  8 16:14:57 ph4 kernel:  ? __dentry_kill+0x11a/0x160
Dec  8 16:14:57 ph4 kernel:  __sys_sendmsg+0x64/0xb0
Dec  8 16:14:57 ph4 kernel:  do_syscall_64+0x6b/0x1c0
Dec  8 16:14:57 ph4 kernel:  entry_SYSCALL_64_after_hwframe+0x44/0xa9
Dec  8 16:14:57 ph4 kernel: RIP: 0033:0x7f5fc00c1110
Dec  8 16:14:57 ph4 kernel: Code: 8b 15 84 3d 2b 00 f7 d8 64 89 02 48 c7 c0 ff
ff ff ff eb cd 66 0f 1f 44 00 00 83 3d d9 96 2b 00 00 75 10 b8 2e 00 00 00 0f
05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 ae b4 00 00 48 89 04 24
Dec  8 16:14:57 ph4 kernel: RSP: 002b:00007ffd05cb11e8 EFLAGS: 00000246
ORIG_RAX: 000000000000002e
Dec  8 16:14:57 ph4 kernel: RAX: ffffffffffffffda RBX: 000000005c0bee01 RCX:
00007f5fc00c1110
Dec  8 16:14:57 ph4 kernel: RDX: 0000000000000000 RSI: 00007ffd05cb1250 RDI:
0000000000000003
Dec  8 16:14:57 ph4 kernel: RBP: 0000000000000000 R08: 0000000000000001 R09:
fefefeff77686d74
Dec  8 16:14:57 ph4 kernel: R10: 00000000000005e1 R11: 0000000000000246 R12:
0000000000000001
Dec  8 16:14:57 ph4 kernel: R13: 0000000000676200 R14: 00007ffd05cb1f18 R15:
00007ffd05cb19c8
Dec  8 16:14:57 ph4 kernel: Modules linked in: amdgpu snd_usb_audio
snd_usbmidi_lib snd_rawmidi snd_seq_device mfd_core chash i2c_algo_bit
gpu_sched snd_hda_codec_realtek drm_kms_helper snd_hda_codec_hdmi
snd_hda_codec_generic snd_hda_intel snd_hda_codec syscopyarea sysfillrect
snd_hda_core sysimgblt realtek snd_hwdep fb_sys_fops snd_pcm snd_timer snd ttm
xhci_pci drm xhci_hcd r8169 e100 serio_raw k10temp libphy mii
drm_panel_orientation_quirks joydev soundcore i2c_piix4 acpi_cpufreq
Dec  8 16:14:57 ph4 kernel: CR2: 00000000000003a0
Dec  8 16:14:57 ph4 kernel: ---[ end trace 2457a68e913c7a5f ]---
Dec  8 16:14:57 ph4 kernel: RIP: 0010:queue_work_on+0x4/0x20
Dec  8 16:14:57 ph4 kernel: Code: ff 48 c7 c7 20 55 de 81 e8 02 58 04 00 c6 05
aa 1c 3e 01 01 e9 75 ff ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 53 9c 5b
fa <f0> 48 0f ba 2a 00 73 06 31 c0 53 9d 5b c3 e8 99 fb ff ff b8 01 00
Dec  8 16:14:57 ph4 kernel: RSP: 0018:ffffc90000d473a8 EFLAGS: 00010002
Dec  8 16:14:57 ph4 kernel: RAX: ffff8882362c4000 RBX: 0000000000000002 RCX:
0000000000000000
Dec  8 16:14:57 ph4 kernel: RDX: 00000000000003a0 RSI: ffff88823680d200 RDI:
0000000000000008
Dec  8 16:14:57 ph4 kernel: RBP: ffff8882362c4840 R08: ffff888236400248 R09:
ffff888236400340
Dec  8 16:14:57 ph4 kernel: R10: 0000000000000000 R11: ffffffff82043b28 R12:
ffff8882341ca960
Dec  8 16:14:57 ph4 kernel: R13: ffff8882341ca828 R14: 000000000000001a R15:
ffff8882362c4840
Dec  8 16:14:57 ph4 kernel: FS:  00007f5fc097f700(0000)
GS:ffff888237b00000(0000) knlGS:0000000000000000
Dec  8 16:14:57 ph4 kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec  8 16:14:57 ph4 kernel: CR2: 00000000000003a0 CR3: 0000000233440000 CR4:
00000000000006e0

-- 
You are receiving this mail because:
You are the assignee for the bug.