Public bug reported:
This bug also exists in vanilla kernels up to 3.6.9.
How to reproduce:
# ifconfig eth1 down
# ifconfig eth1 up
Dirty workaround:
Disable the following lines in tg3.c and rebuild the module:
#ifdef CONFIG_NET_POLL_CONTROLLER
.ndo_poll_controller = tg3_poll_controller,
#endif
More info:
# lspci
00:00.0 Host bridge: Intel Corporation 3200/3210 Chipset DRAM Controller (rev
01)
00:01.0 PCI bridge: Intel Corporation 3200/3210 Chipset Host-Primary PCI
Express Bridge (rev 01)
00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1
(rev 02)
00:1c.4 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 5
(rev 02)
00:1c.5 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 6
(rev 02)
00:1d.0 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #1 (rev 02)
00:1d.1 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #2 (rev 02)
00:1d.2 USB controller: Intel Corporation 82801I (ICH9 Family) USB UHCI
Controller #3 (rev 02)
00:1d.7 USB controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI
Controller #1 (rev 02)
00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev 92)
00:1f.0 ISA bridge: Intel Corporation 82801IR (ICH9R) LPC Interface Controller
(rev 02)
00:1f.2 IDE interface: Intel Corporation 82801IR/IO/IH (ICH9R/DO/DH) 4 port
SATA Controller [IDE mode] (rev 02)
03:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5721 Gigabit
Ethernet PCI Express (rev 21)
04:00.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5721 Gigabit
Ethernet PCI Express (rev 21)
05:05.0 VGA compatible controller: Advanced Micro Devices [AMD] nee ATI ES1000
(rev 02)
Kernel traceback:
Dec 7 11:19:53 node2-dev kernel: [ 1056.236044] tg3 0000:04:00.0: BAR 0: set
to [mem 0xdfef0000-0xdfefffff 64bit] (PCI address [0xdfef0000-0xdfefffff])
Dec 7 11:19:53 node2-dev kernel: [ 1056.236083] BUG: unable to handle kernel
NULL pointer dereference at (null)
Dec 7 11:19:53 node2-dev kernel: [ 1056.236087] IP: [<ffffffffa0053a98>]
tg3_interrupt+0x28/0x1e0 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236098] PGD 1248d9067 PUD 124698067
PMD 0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236102] Oops: 0000 [#1] SMP
Dec 7 11:19:53 node2-dev kernel: [ 1056.236106] CPU 2
Dec 7 11:19:53 node2-dev kernel: [ 1056.236107] Modules linked in: radeon ttm
drm_kms_helper drm i2c_algo_bit psmouse i3200_edac edac_core mac_hid dcdbas
serio_raw lp parport netconsole configfs raid10 raid456 async_pq async_xor xor
async_memcpy async_raid6_recov tg3 raid6_pq async_tx raid1 raid0 multipath
linear
Dec 7 11:19:53 node2-dev kernel: [ 1056.236124]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236127] Pid: 1433, comm: ifconfig Not
tainted 3.2.0-34-generic #53-Ubuntu Dell Inc. PowerEdge R200/0TY019
Dec 7 11:19:53 node2-dev kernel: [ 1056.236132] RIP: 0010:[<ffffffffa0053a98>]
[<ffffffffa0053a98>] tg3_interrupt+0x28/0x1e0 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236140] RSP: 0018:ffff88012843f7c8
EFLAGS: 00010082
Dec 7 11:19:53 node2-dev kernel: [ 1056.236143] RAX: 0000000000000000 RBX:
ffff88012481a800 RCX: 00000000152e152d
Dec 7 11:19:53 node2-dev kernel: [ 1056.236146] RDX: 0000000000000000 RSI:
ffff88012481a800 RDI: 000000000000002c
Dec 7 11:19:53 node2-dev kernel: [ 1056.236148] RBP: ffff88012843f7e8 R08:
ffff880127c588a0 R09: 0000000000000010
Dec 7 11:19:53 node2-dev kernel: [ 1056.236151] R10: 0000000000000006 R11:
0000000000000000 R12: ffff88012481a780
Dec 7 11:19:53 node2-dev kernel: [ 1056.236154] R13: 0000000000000000 R14:
ffff88012481a780 R15: 0000000000000010
Dec 7 11:19:53 node2-dev kernel: [ 1056.236157] FS: 00007f364f37b700(0000)
GS:ffff88012fd00000(0000) knlGS:0000000000000000
Dec 7 11:19:53 node2-dev kernel: [ 1056.236160] CS: 0010 DS: 0000 ES: 0000
CR0: 000000008005003b
Dec 7 11:19:53 node2-dev kernel: [ 1056.236163] CR2: 0000000000000000 CR3:
00000001247f7000 CR4: 00000000000006e0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236165] DR0: 0000000000000000 DR1:
0000000000000000 DR2: 0000000000000000
Dec 7 11:19:53 node2-dev kernel: [ 1056.236168] DR3: 0000000000000000 DR6:
00000000ffff0ff0 DR7: 0000000000000400
Dec 7 11:19:53 node2-dev kernel: [ 1056.236171] Process ifconfig (pid: 1433,
threadinfo ffff88012843e000, task ffff880125760000)
Dec 7 11:19:53 node2-dev kernel: [ 1056.236173] Stack:
Dec 7 11:19:53 node2-dev kernel: [ 1056.236175] 0000000000000000
ffff88012481ab50 ffff88012481a000 ffff88012481a780
Dec 7 11:19:53 node2-dev kernel: [ 1056.236180] ffff88012843f818
ffffffffa0053ca9 ffff88012481a000 ffff880124935ae8
Dec 7 11:19:53 node2-dev kernel: [ 1056.236184] ffff88012462b080
ffff88012462b000 ffff88012843f838 ffffffff81558f58
Dec 7 11:19:53 node2-dev kernel: [ 1056.236189] Call Trace:
Dec 7 11:19:53 node2-dev kernel: [ 1056.236196] [<ffffffffa0053ca9>]
tg3_poll_controller+0x59/0x80 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236203] [<ffffffff81558f58>]
netpoll_poll_dev.part.22+0x28/0xb0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236207] [<ffffffff81559154>]
netpoll_send_skb_on_dev+0x174/0x260
Dec 7 11:19:53 node2-dev kernel: [ 1056.236212] [<ffffffff81559472>]
netpoll_send_udp+0x232/0x250
Dec 7 11:19:53 node2-dev kernel: [ 1056.236217] [<ffffffffa00b3333>]
write_msg+0xc3/0x120 [netconsole]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236222] [<ffffffff810670d7>]
__call_console_drivers+0x97/0xb0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236226] [<ffffffff810672dc>]
_call_console_drivers+0x4c/0x80
Dec 7 11:19:53 node2-dev kernel: [ 1056.236230] [<ffffffff81067561>]
call_console_drivers+0xe1/0x110
Dec 7 11:19:53 node2-dev kernel: [ 1056.236233] [<ffffffff81067736>]
console_unlock+0x86/0x180
Dec 7 11:19:53 node2-dev kernel: [ 1056.236237] [<ffffffff81067a16>]
vprintk+0x1e6/0x4a0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236241] [<ffffffff8165bdce>] ?
_raw_spin_lock+0xe/0x20
Dec 7 11:19:53 node2-dev kernel: [ 1056.236246] [<ffffffff8164328c>]
printk+0x51/0x53
Dec 7 11:19:53 node2-dev kernel: [ 1056.236251] [<ffffffff813f2d2f>]
__dev_printk+0x4f/0x90
Dec 7 11:19:53 node2-dev kernel: [ 1056.236255] [<ffffffff813f2dc3>]
_dev_info+0x53/0x60
Dec 7 11:19:53 node2-dev kernel: [ 1056.236260] [<ffffffff813396f5>]
pci_update_resource+0x135/0x200
Dec 7 11:19:53 node2-dev kernel: [ 1056.236265] [<ffffffff81333057>]
pci_raw_set_power_state+0x117/0x220
Dec 7 11:19:53 node2-dev kernel: [ 1056.236268] [<ffffffff81333cb1>]
pci_set_power_state+0x51/0xf0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236275] [<ffffffffa0057385>]
tg3_power_up+0x35/0x180 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236281] [<ffffffffa005a840>]
tg3_open+0x70/0x500 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236285] [<ffffffff8154517f>]
__dev_open+0x8f/0xf0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236289] [<ffffffff81545431>]
__dev_change_flags+0xa1/0x180
Dec 7 11:19:53 node2-dev kernel: [ 1056.236292] [<ffffffff815455c8>]
dev_change_flags+0x28/0x70
Dec 7 11:19:53 node2-dev kernel: [ 1056.236297] [<ffffffff815a9575>]
devinet_ioctl+0x5c5/0x710
Dec 7 11:19:53 node2-dev kernel: [ 1056.236301] [<ffffffff81545c76>] ?
dev_ioctl+0x266/0x3b0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236305] [<ffffffff815a9ae5>]
inet_ioctl+0x75/0x90
Dec 7 11:19:53 node2-dev kernel: [ 1056.236309] [<ffffffff8152a270>]
sock_do_ioctl+0x30/0x70
Dec 7 11:19:53 node2-dev kernel: [ 1056.236313] [<ffffffff8152b729>]
sock_ioctl+0x79/0x2f0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236318] [<ffffffff811623ff>] ?
kmem_cache_free+0x2f/0x110
Dec 7 11:19:53 node2-dev kernel: [ 1056.236322] [<ffffffff8118a49a>]
do_vfs_ioctl+0x8a/0x340
Dec 7 11:19:53 node2-dev kernel: [ 1056.236325] [<ffffffff81183565>] ?
putname+0x35/0x50
Dec 7 11:19:53 node2-dev kernel: [ 1056.236329] [<ffffffff8117770c>] ?
do_sys_open+0x17c/0x240
Dec 7 11:19:53 node2-dev kernel: [ 1056.236333] [<ffffffff8118a7e1>]
sys_ioctl+0x91/0xa0
Dec 7 11:19:53 node2-dev kernel: [ 1056.236337] [<ffffffff816643c2>]
system_call_fastpath+0x16/0x1b
Dec 7 11:19:53 node2-dev kernel: [ 1056.236339] Code: ff 66 90 55 48 89 e5 48
83 ec 20 48 89 5d e0 4c 89 65 e8 4c 89 6d f0 4c 89 75 f8 66 66 66 66 90 4c 8b
6e 68 4c 8b 66 60 48 89 f3 <41> f6 45 00 01 0f 84 29 01 00 00 ba 01 00 00 00 be
04 02 00 00
Dec 7 11:19:53 node2-dev kernel: [ 1056.236367] RIP [<ffffffffa0053a98>]
tg3_interrupt+0x28/0x1e0 [tg3]
Dec 7 11:19:53 node2-dev kernel: [ 1056.236374] RSP <ffff88012843f7c8>
Dec 7 11:19:53 node2-dev kernel: [ 1056.236375] CR2: 0000000000000000
Dec 7 11:19:53 node2-dev kernel: [ 1056.236611] ---[ end trace
acc9a1f00f3fc43c ]---
** Affects: linux (Ubuntu)
Importance: Undecided
Status: New
** Tags: kernel-bug precise
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1087727
Title:
kernel/tg3 ethernet driver: null pointer dereference in
tg3_poll_controller
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1087727/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
