BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1
CPU: 0 PID: 7393 Comm: modprobe Not tainted 5.1.0+ #34
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014
RIP: 0010:acpi_ut_update_object_reference+0xda/0x1e8
Code: 4c 89 e7 eb ea 48 8b 7b 18 48 85 ff 0f 84 95 00 00 00 4c 8b 67 38 44 89 ee e8 dd fb ff ff 4c 89 e7 eb e6 48 8b 43 18 44 89 e2 <48> 8b 3c d0 48 85 ff 75 0b 41 ff c4 44 3b 63 2c 72 e7 eb 66 8a 47
RSP: 0018:ffffc90001c9f550 EFLAGS: 00010283
RAX: 0000000000000000 RBX: ffff8882310d7288 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8882310d7288
RBP: ffffc90001c9f580 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000001 R11: 000000003ef29b78 R12: 0000000000000000
R13: 0000000000000001 R14: ffff88823122e000 R15: 0000000000000000
FS: 00007f4469ead540(0000) GS:ffff888237a00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000022c2b5000 CR4: 00000000000006f0
Call Trace:
acpi_ut_remove_reference+0x29/0x2c
acpi_ut_copy_iobject_to_iobject+0xd7/0xee
acpi_ds_store_object_to_local+0x9a/0x181
acpi_ex_store+0x233/0x279
? acpi_ds_create_operands+0x74/0xdb
acpi_ex_opcode_1A_1T_1R+0x3c3/0x4fc
acpi_ds_exec_end_op+0xd1/0x419
acpi_ps_parse_loop+0x532/0x5d0
acpi_ps_parse_aml+0x93/0x2c8
acpi_ps_execute_method+0x16d/0x1b2
acpi_ns_evaluate+0x1c1/0x26c
acpi_ut_evaluate_object+0x7d/0x1a4
acpi_rs_get_prt_method_data+0x30/0x66
acpi_get_irq_routing_table+0x3d/0x56
acpi_pci_irq_find_prt_entry+0x8d/0x300
? trace_hardirqs_on+0x3f/0x110
acpi_pci_irq_lookup+0x35/0x1f0
acpi_pci_irq_enable+0x72/0x1e0
? pci_read_config_word+0x2e/0x30
pcibios_enable_device+0x2e/0x40
do_pci_enable_device+0x5c/0x100
pci_enable_device_flags+0xe0/0x130
pci_enable_device+0xe/0x10
e1000_probe+0xd2/0xfc0 [e1000
? trace_hardirqs_on+0x3f/0x110
local_pci_probe+0x41/0x90
pci_device_probe+0x14c/0x1b0
really_probe+0x1d4/0x2d0
driver_probe_device+0x50/0xf0
device_driver_attach+0x54/0x60
__driver_attach+0x7e/0xd0
? device_driver_attach+0x60/0x60
bus_for_each_dev+0x68/0xc0
driver_attach+0x19/0x20
bus_add_driver+0x15e/0x200
driver_register+0x5b/0xf0
__pci_register_driver+0x66/0x70
? 0xffffffffa0179000
e1000_init_module+0x50/0x1000 [e1000
? 0xffffffffa0179000
do_one_initcall+0x6c/0x3cc
? do_init_module+0x22/0x207
? rcu_read_lock_sched_held+0x97/0xb0
? kmem_cache_alloc_trace+0x325/0x3b0
do_init_module+0x5b/0x207
load_module+0x1e34/0x2560
? m_show+0x1d0/0x1d0
__do_sys_finit_module+0xc5/0xd0
__x64_sys_finit_module+0x15/0x20
do_syscall_64+0x6b/0x1d0
entry_SYSCALL_64_after_hwframe+0x49/0xbe
In acpi_ut_copy_iobject_to_iobject, if
acpi_ut_copy_ipackage_to_ipackage failed with
AE_NO_MEMORY, acpi_ut_remove_reference will be
called and in which calls acpi_ut_update_object_reference,
then it try to dereference 'object->package.elements[i]'
which trigger NULL pointer dereference.
Reported-by: Hulk Robot <[email protected]>
Fixes: 8aa5e56eeb61 ("ACPICA: Utilities: Fix memory leak in acpi_ut_copy_iobject_to_iobject")
Signed-off-by: YueHaibing <[email protected]>
---
drivers/acpi/acpica/utcopy.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/drivers/acpi/acpica/utcopy.c b/drivers/acpi/acpica/utcopy.c
index 1fb8327..038d518 100644
--- a/drivers/acpi/acpica/utcopy.c
+++ b/drivers/acpi/acpica/utcopy.c
@@ -895,7 +895,6 @@
dest_obj->common.type = source_obj->common.type;
dest_obj->common.flags = source_obj->common.flags;
- dest_obj->package.count = source_obj->package.count;
/*
* Create the object array and walk the source package tree
@@ -909,6 +908,8 @@
return_ACPI_STATUS(AE_NO_MEMORY);
}
+ dest_obj->package.count = source_obj->package.count;
+
/*
* Copy the package element-by-element by walking the package "tree".
* This handles nested packages of arbitrary depth.
--
1.8.3.1
> -----Original Message-----
> From: YueHaibing [mailto:[email protected]]
> Sent: Wednesday, May 8, 2019 8:07 AM
> To: Moore, Robert <[email protected]>; Schmauss, Erik
> <[email protected]>; Wysocki, Rafael J <[email protected]>;
> [email protected]
> Cc: [email protected]; [email protected]; linux-
> [email protected]; YueHaibing <[email protected]>
> Subject: [PATCH] ACPICA: acpica: Fix possible NULL pointer dereference in
> acpi_ut_remove_reference
>
> BUG: kernel NULL pointer dereference, address: 0000000000000000
> #PF: supervisor read access in kernel mode
> #PF: error_code(0x0000) - not-present page PGD 0 P4D 0
> Oops: 0000 [#1
> CPU: 0 PID: 7393 Comm: modprobe Not tainted 5.1.0+ #34 Hardware name:
> QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-
> prebuilt.qemu-project.org 04/01/2014
> RIP: 0010:acpi_ut_update_object_reference+0xda/0x1e8
> Code: 4c 89 e7 eb ea 48 8b 7b 18 48 85 ff 0f 84 95 00 00 00 4c 8b 67 38 44 89 ee
> e8 dd fb ff ff 4c 89 e7 eb e6 48 8b 43 18 44 89 e2 <48> 8b 3c d0 48 85 ff 75 0b 41
> ff c4 44 3b 63 2c 72 e7 eb 66 8a 47
> RSP: 0018:ffffc90001c9f550 EFLAGS: 00010283
> RAX: 0000000000000000 RBX: ffff8882310d7288 RCX: 0000000000000000
> RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8882310d7288
> RBP: ffffc90001c9f580 R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000001 R11: 000000003ef29b78 R12: 0000000000000000
> R13: 0000000000000001 R14: ffff88823122e000 R15: 0000000000000000
> FS: 00007f4469ead540(0000) GS:ffff888237a00000(0000)
> knlGS:0000000000000000
> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 0000000000000000 CR3: 000000022c2b5000 CR4: 00000000000006f0 Call
> Trace:
> acpi_ut_remove_reference+0x29/0x2c
> acpi_ut_copy_iobject_to_iobject+0xd7/0xee
> acpi_ds_store_object_to_local+0x9a/0x181
> acpi_ex_store+0x233/0x279
> ? acpi_ds_create_operands+0x74/0xdb
> acpi_ex_opcode_1A_1T_1R+0x3c3/0x4fc
> acpi_ds_exec_end_op+0xd1/0x419
> acpi_ps_parse_loop+0x532/0x5d0
> acpi_ps_parse_aml+0x93/0x2c8
> acpi_ps_execute_method+0x16d/0x1b2
> acpi_ns_evaluate+0x1c1/0x26c
> acpi_ut_evaluate_object+0x7d/0x1a4
> acpi_rs_get_prt_method_data+0x30/0x66
> acpi_get_irq_routing_table+0x3d/0x56
> acpi_pci_irq_find_prt_entry+0x8d/0x300
> ? trace_hardirqs_on+0x3f/0x110
> acpi_pci_irq_lookup+0x35/0x1f0
> acpi_pci_irq_enable+0x72/0x1e0
> ? pci_read_config_word+0x2e/0x30
> pcibios_enable_device+0x2e/0x40
> do_pci_enable_device+0x5c/0x100
> pci_enable_device_flags+0xe0/0x130
> pci_enable_device+0xe/0x10
> e1000_probe+0xd2/0xfc0 [e1000
> ? trace_hardirqs_on+0x3f/0x110
> local_pci_probe+0x41/0x90
> pci_device_probe+0x14c/0x1b0
> really_probe+0x1d4/0x2d0
> driver_probe_device+0x50/0xf0
> device_driver_attach+0x54/0x60
> __driver_attach+0x7e/0xd0
> ? device_driver_attach+0x60/0x60
> bus_for_each_dev+0x68/0xc0
> driver_attach+0x19/0x20
> bus_add_driver+0x15e/0x200
> driver_register+0x5b/0xf0
> __pci_register_driver+0x66/0x70
> ? 0xffffffffa0179000
> e1000_init_module+0x50/0x1000 [e1000
> ? 0xffffffffa0179000
> do_one_initcall+0x6c/0x3cc
> ? do_init_module+0x22/0x207
> ? rcu_read_lock_sched_held+0x97/0xb0
> ? kmem_cache_alloc_trace+0x325/0x3b0
> do_init_module+0x5b/0x207
> load_module+0x1e34/0x2560
> ? m_show+0x1d0/0x1d0
> __do_sys_finit_module+0xc5/0xd0
> __x64_sys_finit_module+0x15/0x20
> do_syscall_64+0x6b/0x1d0
> entry_SYSCALL_64_after_hwframe+0x49/0xbe
>
> In acpi_ut_copy_iobject_to_iobject, if
> acpi_ut_copy_ipackage_to_ipackage failed with AE_NO_MEMORY,
> acpi_ut_remove_reference will be called and in which calls
> acpi_ut_update_object_reference, then it try to dereference 'object-
> >package.elements[i]'
> which trigger NULL pointer dereference.
>
> Reported-by: Hulk Robot <[email protected]>
> Fixes: 8aa5e56eeb61 ("ACPICA: Utilities: Fix memory leak in
> acpi_ut_copy_iobject_to_iobject")
> Signed-off-by: YueHaibing <[email protected]>
> ---
> drivers/acpi/acpica/utcopy.c | 3 ++-
> 1 file changed, 2 insertions(+), 1 deletion(-)
>
> diff --git a/drivers/acpi/acpica/utcopy.c b/drivers/acpi/acpica/utcopy.c index
> 1fb8327..038d518 100644
> --- a/drivers/acpi/acpica/utcopy.c
> +++ b/drivers/acpi/acpica/utcopy.c
> @@ -895,7 +895,6 @@
>
> dest_obj->common.type = source_obj->common.type;
> dest_obj->common.flags = source_obj->common.flags;
> - dest_obj->package.count = source_obj->package.count;
>
> /*
> * Create the object array and walk the source package tree @@ -
> 909,6 +908,8 @@
> return_ACPI_STATUS(AE_NO_MEMORY);
> }
>
> + dest_obj->package.count = source_obj->package.count;
> +
> /*
> * Copy the package element-by-element by walking the package
> "tree".
> * This handles nested packages of arbitrary depth.
> --
> 1.8.3.1
>
Please provide the acpidump as well as the dmesg
Thanks,
Erik
On 2019/5/9 3:52, Schmauss, Erik wrote:
>
>
>> -----Original Message-----
>> From: YueHaibing [mailto:[email protected]]
>> Sent: Wednesday, May 8, 2019 8:07 AM
>> To: Moore, Robert <[email protected]>; Schmauss, Erik
>> <[email protected]>; Wysocki, Rafael J <[email protected]>;
>> [email protected]
>> Cc: [email protected]; [email protected]; linux-
>> [email protected]; YueHaibing <[email protected]>
>> Subject: [PATCH] ACPICA: acpica: Fix possible NULL pointer dereference in
>> acpi_ut_remove_reference
>>
>> BUG: kernel NULL pointer dereference, address: 0000000000000000
>> #PF: supervisor read access in kernel mode
>> #PF: error_code(0x0000) - not-present page PGD 0 P4D 0
>> Oops: 0000 [#1
>> CPU: 0 PID: 7393 Comm: modprobe Not tainted 5.1.0+ #34 Hardware name:
>> QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-
>> prebuilt.qemu-project.org 04/01/2014
>> RIP: 0010:acpi_ut_update_object_reference+0xda/0x1e8
>> Code: 4c 89 e7 eb ea 48 8b 7b 18 48 85 ff 0f 84 95 00 00 00 4c 8b 67 38 44 89 ee
>> e8 dd fb ff ff 4c 89 e7 eb e6 48 8b 43 18 44 89 e2 <48> 8b 3c d0 48 85 ff 75 0b 41
>> ff c4 44 3b 63 2c 72 e7 eb 66 8a 47
>> RSP: 0018:ffffc90001c9f550 EFLAGS: 00010283
>> RAX: 0000000000000000 RBX: ffff8882310d7288 RCX: 0000000000000000
>> RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8882310d7288
>> RBP: ffffc90001c9f580 R08: 0000000000000000 R09: 0000000000000000
>> R10: 0000000000000001 R11: 000000003ef29b78 R12: 0000000000000000
>> R13: 0000000000000001 R14: ffff88823122e000 R15: 0000000000000000
>> FS: 00007f4469ead540(0000) GS:ffff888237a00000(0000)
>> knlGS:0000000000000000
>> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
>> CR2: 0000000000000000 CR3: 000000022c2b5000 CR4: 00000000000006f0 Call
>> Trace:
>> acpi_ut_remove_reference+0x29/0x2c
>> acpi_ut_copy_iobject_to_iobject+0xd7/0xee
>> acpi_ds_store_object_to_local+0x9a/0x181
>> acpi_ex_store+0x233/0x279
>> ? acpi_ds_create_operands+0x74/0xdb
>> acpi_ex_opcode_1A_1T_1R+0x3c3/0x4fc
>> acpi_ds_exec_end_op+0xd1/0x419
>> acpi_ps_parse_loop+0x532/0x5d0
>> acpi_ps_parse_aml+0x93/0x2c8
>> acpi_ps_execute_method+0x16d/0x1b2
>> acpi_ns_evaluate+0x1c1/0x26c
>> acpi_ut_evaluate_object+0x7d/0x1a4
>> acpi_rs_get_prt_method_data+0x30/0x66
>> acpi_get_irq_routing_table+0x3d/0x56
>> acpi_pci_irq_find_prt_entry+0x8d/0x300
>> ? trace_hardirqs_on+0x3f/0x110
>> acpi_pci_irq_lookup+0x35/0x1f0
>> acpi_pci_irq_enable+0x72/0x1e0
>> ? pci_read_config_word+0x2e/0x30
>> pcibios_enable_device+0x2e/0x40
>> do_pci_enable_device+0x5c/0x100
>> pci_enable_device_flags+0xe0/0x130
>> pci_enable_device+0xe/0x10
>> e1000_probe+0xd2/0xfc0 [e1000
>> ? trace_hardirqs_on+0x3f/0x110
>> local_pci_probe+0x41/0x90
>> pci_device_probe+0x14c/0x1b0
>> really_probe+0x1d4/0x2d0
>> driver_probe_device+0x50/0xf0
>> device_driver_attach+0x54/0x60
>> __driver_attach+0x7e/0xd0
>> ? device_driver_attach+0x60/0x60
>> bus_for_each_dev+0x68/0xc0
>> driver_attach+0x19/0x20
>> bus_add_driver+0x15e/0x200
>> driver_register+0x5b/0xf0
>> __pci_register_driver+0x66/0x70
>> ? 0xffffffffa0179000
>> e1000_init_module+0x50/0x1000 [e1000
>> ? 0xffffffffa0179000
>> do_one_initcall+0x6c/0x3cc
>> ? do_init_module+0x22/0x207
>> ? rcu_read_lock_sched_held+0x97/0xb0
>> ? kmem_cache_alloc_trace+0x325/0x3b0
>> do_init_module+0x5b/0x207
>> load_module+0x1e34/0x2560
>> ? m_show+0x1d0/0x1d0
>> __do_sys_finit_module+0xc5/0xd0
>> __x64_sys_finit_module+0x15/0x20
>> do_syscall_64+0x6b/0x1d0
>> entry_SYSCALL_64_after_hwframe+0x49/0xbe
>>
>> In acpi_ut_copy_iobject_to_iobject, if
>> acpi_ut_copy_ipackage_to_ipackage failed with AE_NO_MEMORY,
>> acpi_ut_remove_reference will be called and in which calls
>> acpi_ut_update_object_reference, then it try to dereference 'object-
>>> package.elements[i]'
>> which trigger NULL pointer dereference.
>>
>> Reported-by: Hulk Robot <[email protected]>
>> Fixes: 8aa5e56eeb61 ("ACPICA: Utilities: Fix memory leak in
>> acpi_ut_copy_iobject_to_iobject")
>> Signed-off-by: YueHaibing <[email protected]>
>> ---
>> drivers/acpi/acpica/utcopy.c | 3 ++-
>> 1 file changed, 2 insertions(+), 1 deletion(-)
>>
>> diff --git a/drivers/acpi/acpica/utcopy.c b/drivers/acpi/acpica/utcopy.c index
>> 1fb8327..038d518 100644
>> --- a/drivers/acpi/acpica/utcopy.c
>> +++ b/drivers/acpi/acpica/utcopy.c
>> @@ -895,7 +895,6 @@
>>
>> dest_obj->common.type = source_obj->common.type;
>> dest_obj->common.flags = source_obj->common.flags;
>> - dest_obj->package.count = source_obj->package.count;
>>
>> /*
>> * Create the object array and walk the source package tree @@ -
>> 909,6 +908,8 @@
>> return_ACPI_STATUS(AE_NO_MEMORY);
>> }
>>
>> + dest_obj->package.count = source_obj->package.count;
>> +
>> /*
>> * Copy the package element-by-element by walking the package
>> "tree".
>> * This handles nested packages of arbitrary depth.
>> --
>> 1.8.3.1
>>
>
> Please provide the acpidump as well as the dmesg
acpidump is attached and full CallTrace as below:
[ 1325.207834][ T5707] modprobe (5707) used greatest stack depth: 11672 bytes left
[ 1325.210188][ T5710] e1000 0000:00:03.0 enp0s3: renamed from eth0
finit_module(3, "", 0[ 1325.409956][ T5733] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI
[ 1325.411224][ T5733] e1000: Copyright (c) 1999-2006 Intel Corporation.
[ 1325.412416][ T5733] FAULT_INJECTION: forcing a failure.
[ 1325.412416][ T5733] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.414494][ T5733] CPU: 0 PID: 5733 Comm: modprobe Not tainted 5.1.0+ #48
[ 1325.415585][ T5733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014
[ 1325.417495][ T5733] Call Trace:
[ 1325.418050][ T5733] dump_stack+0xa5/0xdc
[ 1325.418651][ T5733] should_fail+0x145/0x170
[ 1325.419388][ T5733] __should_failslab+0x49/0x50
[ 1325.420070][ T5733] should_failslab+0x9/0x14
[ 1325.420697][ T5733] __kmalloc+0x70/0x710
[ 1325.421453][ T5733] ? acpi_ut_allocate_object_desc_dbg+0x3c/0x67
[ 1325.422332][ T5733] ? acpi_os_allocate_zeroed+0x2b/0x2d
[ 1325.423224][ T5733] acpi_os_allocate_zeroed+0x2b/0x2d
[ 1325.423978][ T5733] acpi_ut_copy_iobject_to_iobject+0x72/0xef
[ 1325.424868][ T5733] acpi_ds_store_object_to_local+0x98/0x17e
[ 1325.425715][ T5733] acpi_ex_store+0x22f/0x271
[ 1325.426423][ T5733] ? acpi_ex_resolve_to_value+0x77/0x255
[ 1325.427221][ T5733] acpi_ex_opcode_1A_1T_1R+0x3d0/0x504
[ 1325.428021][ T5733] ? acpi_ex_resolve_operands+0x203/0x538
[ 1325.428831][ T5733] acpi_ds_exec_end_op+0xca/0x41b
[ 1325.429535][ T5733] acpi_ps_parse_loop+0x49b/0x5cf
[ 1325.430372][ T5733] acpi_ps_parse_aml+0x94/0x2c2
[ 1325.431390][ T5733] acpi_ps_execute_method+0x163/0x19a
[ 1325.432193][ T5733] acpi_ns_evaluate+0x1c4/0x260
[ 1325.432892][ T5733] acpi_ut_evaluate_object+0x82/0x19c
[ 1325.433644][ T5733] acpi_rs_get_prt_method_data+0x30/0x6a
[ 1325.434441][ T5733] ? acpi_rs_validate_parameters+0x3a/0x4e
[ 1325.435450][ T5733] acpi_get_irq_routing_table+0x34/0x4d
[ 1325.436343][ T5733] acpi_pci_irq_find_prt_entry+0x89/0x2e0
[ 1325.437428][ T5733] ? trace_hardirqs_on+0x3b/0x110
[ 1325.438180][ T5733] acpi_pci_irq_lookup+0x35/0x1b0
[ 1325.439006][ T5733] acpi_pci_irq_enable+0x70/0x1c0
[ 1325.439714][ T5733] ? pci_read_config_word+0x1e/0x30
[ 1325.440456][ T5733] pcibios_enable_device+0x29/0x30
[ 1325.441179][ T5733] do_pci_enable_device+0x83/0x100
[ 1325.441907][ T5733] pci_enable_device_flags+0xe3/0x130
[ 1325.442659][ T5733] ? __pm_runtime_resume+0x56/0x80
[ 1325.443379][ T5733] pci_enable_device+0xe/0x10
[ 1325.444188][ T5733] e1000_probe+0xcf/0xfa0 [e1000]
[ 1325.444911][ T5733] local_pci_probe+0x42/0x90
[ 1325.445573][ T5733] pci_device_probe+0x144/0x1b0
[ 1325.446262][ T5733] really_probe+0x1ba/0x2c0
[ 1325.446912][ T5733] driver_probe_device+0x50/0xf0
[ 1325.447604][ T5733] device_driver_attach+0x53/0x60
[ 1325.448317][ T5733] __driver_attach+0x72/0xc0
[ 1325.448973][ T5733] ? device_driver_attach+0x60/0x60
[ 1325.449712][ T5733] bus_for_each_dev+0x76/0xc0
[ 1325.450372][ T5733] driver_attach+0x19/0x20
[ 1325.451001][ T5733] bus_add_driver+0x179/0x200
[ 1325.451660][ T5733] ? 0xffffffffa0174000
[ 1325.452247][ T5733] driver_register+0x5b/0xf0
[ 1325.452903][ T5733] ? 0xffffffffa0174000
[ 1325.453496][ T5733] __pci_register_driver+0x66/0x70
[ 1325.454218][ T5733] e1000_init_module+0x4c/0x1000 [e1000]
[ 1325.455020][ T5733] do_one_initcall+0x65/0x350
[ 1325.455679][ T5733] do_init_module+0x5a/0x205
[ 1325.456328][ T5733] load_module+0x1f07/0x2710
[ 1325.456983][ T5733] ? ima_post_read_file+0xec/0x130
[ 1325.457705][ T5733] __do_sys_finit_module+0xd1/0xf0
[ 1325.458436][ T5733] ? __do_sys_finit_module+0xd1/0xf0
[ 1325.459199][ T5733] __x64_sys_finit_module+0x15/0x20
[ 1325.459954][ T5733] do_syscall_64+0x6e/0x1f0
[ 1325.460582][ T5733] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.461411][ T5733] RIP: 0033:0x7f641c63d839
[ 1325.462035][ T5733] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 1f f6 2c 00 f7 d8 64 89 01 48
[ 1325.464809][ T5733] RSP: 002b:00007ffc9fe7ee08 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 1325.465989][ T5733] RAX: ffffffffffffffda RBX: 000055854b7b3bf0 RCX: 00007f641c63d839
[ 1325.467110][ T5733] RDX: 0000000000000000 RSI: 000055854a76dc2e RDI: 0000000000000003
[ 1325.468231][ T5733] RBP: 000055854a76dc2e R08: 0000000000000000 R09: 000055854b7b5e80
[ 1325.469494][ T5733] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1325.470615][ T5733] R13: 000055854b7b3ba0 R14: 0000000000040000 R15: 000055854b7b3bf0
[ 1325.479649][ T5733] ACPI Error: Package allocation failure (20190405/utcopy-908)
[ 1325.480771][ T5733] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 1325.481994][ T5733] #PF: supervisor read access in kernel mode
[ 1325.482844][ T5733] #PF: error_code(0x0000) - not-present page
[ 1325.483685][ T5733] PGD 0 P4D 0
[ 1325.484261][ T5733] Oops: 0000 [#1] PREEMPT SMP
[ 1325.485013][ T5733] CPU: 0 PID: 5733 Comm: modprobe Not tainted 5.1.0+ #48
[ 1325.486110][ T5733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.9.3-0-ge2fc41e-prebuilt.qemu-project.org 04/01/2014
[ 1325.487999][ T5733] RIP: 0010:acpi_ut_update_object_reference+0xda/0x1e9
[ 1325.489042][ T5733] Code: 4c 89 e7 eb ea 48 8b 7b 18 48 85 ff 0f 84 94 00 00 00 4c 8b 67 38 44 89 ee e8 e8 fb ff ff 4c 89 e7 eb e6 48 8b 53 18 44 89 e0 <48> 8b 3c c2 48 85 ff 75 0b 41 ff c4 44 39 63 2c 77 e7 eb 65 8a 47
[ 1325.491970][ T5733] RSP: 0018:ffffc90001c6b548 EFLAGS: 00010202
[ 1325.492904][ T5733] RAX: 0000000000000000 RBX: ffff8882312c01f8 RCX: 0000000000000000
[ 1325.494109][ T5733] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8882312c01f8
[ 1325.495307][ T5733] RBP: ffffc90001c6b578 R08: 0000000000000000 R09: 0000000000000000
[ 1325.496495][ T5733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1325.497668][ T5733] R13: 0000000000000001 R14: ffff888232bcf800 R15: 0000000000000000
[ 1325.498924][ T5733] FS: 00007f641cb34540(0000) GS:ffff888237a00000(0000) knlGS:0000000000000000
[ 1325.500237][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1325.501243][ T5733] CR2: 0000000000000000 CR3: 000000022bf0b000 CR4: 00000000000006f0
[ 1325.502433][ T5733] Call Trace:
[ 1325.502954][ T5733] acpi_ut_remove_reference+0x29/0x2d
[ 1325.503706][ T5733] acpi_ut_copy_iobject_to_iobject+0xe2/0xef
[ 1325.504643][ T5733] acpi_ds_store_object_to_local+0x98/0x17e
[ 1325.505530][ T5733] acpi_ex_store+0x22f/0x271
[ 1325.506222][ T5733] ? acpi_ex_resolve_to_value+0x77/0x255
[ 1325.507098][ T5733] acpi_ex_opcode_1A_1T_1R+0x3d0/0x504
[ 1325.507943][ T5733] ? acpi_ex_resolve_operands+0x203/0x538
[ 1325.508750][ T5733] acpi_ds_exec_end_op+0xca/0x41b
[ 1325.509517][ T5733] acpi_ps_parse_loop+0x49b/0x5cf
[ 1325.510243][ T5733] acpi_ps_parse_aml+0x94/0x2c2
[ 1325.511055][ T5733] acpi_ps_execute_method+0x163/0x19a
[ 1325.511845][ T5733] acpi_ns_evaluate+0x1c4/0x260
[ 1325.512611][ T5733] acpi_ut_evaluate_object+0x82/0x19c
[ 1325.513368][ T5733] acpi_rs_get_prt_method_data+0x30/0x6a
[ 1325.514180][ T5733] ? acpi_rs_validate_parameters+0x3a/0x4e
[ 1325.515064][ T5733] acpi_get_irq_routing_table+0x34/0x4d
[ 1325.515853][ T5733] acpi_pci_irq_find_prt_entry+0x89/0x2e0
[ 1325.516658][ T5733] ? trace_hardirqs_on+0x3b/0x110
[ 1325.517434][ T5733] acpi_pci_irq_lookup+0x35/0x1b0
[ 1325.518171][ T5733] acpi_pci_irq_enable+0x70/0x1c0
[ 1325.518941][ T5733] ? pci_read_config_word+0x1e/0x30
[ 1325.519671][ T5733] pcibios_enable_device+0x29/0x30
[ 1325.520460][ T5733] do_pci_enable_device+0x83/0x100
[ 1325.521195][ T5733] pci_enable_device_flags+0xe3/0x130
[ 1325.521975][ T5733] ? __pm_runtime_resume+0x56/0x80
[ 1325.522689][ T5733] pci_enable_device+0xe/0x10
[ 1325.523427][ T5733] e1000_probe+0xcf/0xfa0 [e1000]
[ 1325.524218][ T5733] local_pci_probe+0x42/0x90
[ 1325.524890][ T5733] pci_device_probe+0x144/0x1b0
[ 1325.525575][ T5733] really_probe+0x1ba/0x2c0
[ 1325.526255][ T5733] driver_probe_device+0x50/0xf0
[ 1325.526977][ T5733] device_driver_attach+0x53/0x60
[ 1325.527679][ T5733] __driver_attach+0x72/0xc0
[ 1325.528330][ T5733] ? device_driver_attach+0x60/0x60
[ 1325.529080][ T5733] bus_for_each_dev+0x76/0xc0
[ 1325.529747][ T5733] driver_attach+0x19/0x20
[ 1325.530368][ T5733] bus_add_driver+0x179/0x200
[ 1325.531105][ T5733] ? 0xffffffffa0174000
[ 1325.531688][ T5733] driver_register+0x5b/0xf0
[ 1325.532411][ T5733] ? 0xffffffffa0174000
[ 1325.533066][ T5733] __pci_register_driver+0x66/0x70
[ 1325.533809][ T5733] e1000_init_module+0x4c/0x1000 [e1000]
[ 1325.534639][ T5733] do_one_initcall+0x65/0x350
[ 1325.535342][ T5733] do_init_module+0x5a/0x205
[ 1325.536014][ T5733] load_module+0x1f07/0x2710
[ 1325.536656][ T5733] ? ima_post_read_file+0xec/0x130
[ 1325.537389][ T5733] __do_sys_finit_module+0xd1/0xf0
[ 1325.538174][ T5733] ? __do_sys_finit_module+0xd1/0xf0
[ 1325.538978][ T5733] __x64_sys_finit_module+0x15/0x20
[ 1325.539706][ T5733] do_syscall_64+0x6e/0x1f0
[ 1325.540343][ T5733] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1325.541177][ T5733] RIP: 0033:0x7f641c63d839
[ 1325.541818][ T5733] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 1f f6 2c 00 f7 d8 64 89 01 48
[ 1325.544631][ T5733] RSP: 002b:00007ffc9fe7ee08 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[ 1325.545913][ T5733] RAX: ffffffffffffffda RBX: 000055854b7b3bf0 RCX: 00007f641c63d839
[ 1325.547096][ T5733] RDX: 0000000000000000 RSI: 000055854a76dc2e RDI: 0000000000000003
[ 1325.548265][ T5733] RBP: 000055854a76dc2e R08: 0000000000000000 R09: 000055854b7b5e80
[ 1325.549468][ T5733] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[ 1325.550603][ T5733] R13: 000055854b7b3ba0 R14: 0000000000040000 R15: 000055854b7b3bf0
[ 1325.551731][ T5733] Modules linked in: e1000(+) ip_tables ipv6 [last unloaded: e1000]
[ 1325.552864][ T5733] CR2: 0000000000000000
[ 1325.554138][ T5733] ---[ end trace 5346f55aacb38eb5 ]---
[ 1325.555027][ T5733] RIP: 0010:acpi_ut_update_object_reference+0xda/0x1e9
[ 1325.556395][ T5733] Code: 4c 89 e7 eb ea 48 8b 7b 18 48 85 ff 0f 84 94 00 00 00 4c 8b 67 38 44 89 ee e8 e8 fb ff ff 4c 89 e7 eb e6 48 8b 53 18 44 89 e0 <48> 8b 3c c2 48 85 ff 75 0b 41 ff c4 44 39 63 2c 77 e7 eb 65 8a 47
[ 1325.559271][ T5733] RSP: 0018:ffffc90001c6b548 EFLAGS: 00010202
[ 1325.560199][ T5733] RAX: 0000000000000000 RBX: ffff8882312c01f8 RCX: 0000000000000000
[ 1325.561343][ T5733] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8882312c01f8
[ 1325.562568][ T5733] RBP: ffffc90001c6b578 R08: 0000000000000000 R09: 0000000000000000
[ 1325.563773][ T5733] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1325.564974][ T5733] R13: 0000000000000001 R14: ffff888232bcf800 R15: 0000000000000000
[ 1325.569567][ T5733] FS: 00007f641cb34540(0000) GS:ffff888237a00000(0000) knlGS:0000000000000000
[ 1325.571031][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1325.572072][ T5733] CR2: 00007fa706d674a0 CR3: 000000022bf0b000 CR4: 00000000000006f0
[ 1325.573260][ T5733] Kernel panic - not syncing: Fatal exception
[ 1325.574611][ T5733] Kernel Offset: disabled
[ 1325.575233][ T5733] Rebooting in 86400 seconds..
>
> Thanks,
> Erik
>
> .
>