openwrt icon indicating copy to clipboard operation
openwrt copied to clipboard
verified publisher icon bitthief

Spontaneous reboot when connected to SIP service

Open axelgenus opened this issue 2 years ago • 3 comments

Describe the bug

When I connect ISP Fritz!Box 5530 Fiber to my QNAP QHora 301W, running the latest snapshot from this repository, the router automatically reboots. It keeps rebooting as soon as the Fritz!Box tries reconnecting to the Internet.

I get the following error message in system.log:

Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.379674] Unable to handle kernel execute from non-executable memory at virtual address 0000000000000000
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.379728] Mem abort info:
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.388227]   ESR = 0x0000000086000005
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.390909]   EC = 0x21: IABT (current EL), IL = 32 bits
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.394732]   SET = 0, FnV = 0
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.400195]   EA = 0, S1PTW = 0
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.403060]   FSC = 0x05: level 1 translation fault
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.406102] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000053f10000
Mon Apr 10 09:09:15 2023 kern.alert kernel: [ 2988.410965] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000

OpenWrt version

r22557+1-6a7cb3a925

OpenWrt target/subtarget

ipq807x/generic

Device

QNAP 301w

Image kind

Self-built image

Steps to reproduce

  1. Let the QNAP boot up and settle.
  2. Connect the Fritz!Box and power it up.
  3. Wait for the Fritz!Box to connect to the Internet.

Actual behaviour

The router reboots immediately.

Expected behaviour

The two routers should play nice together.

Additional info

I only use the Fritz!Box as a SIP client.

Diffconfig

CONFIG_TARGET_ipq807x=y
CONFIG_TARGET_ipq807x_generic=y
CONFIG_TARGET_ipq807x_generic_DEVICE_qnap_301w=y
CONFIG_GNUTLS_ALPN=y
CONFIG_GNUTLS_ANON=y
CONFIG_GNUTLS_DTLS_SRTP=y
CONFIG_GNUTLS_HEARTBEAT=y
CONFIG_GNUTLS_OCSP=y
CONFIG_GNUTLS_PSK=y
CONFIG_LUCI_LANG_it=y
CONFIG_NSS_DRV_BRIDGE_ENABLE=y
CONFIG_NSS_DRV_C2C_ENABLE=y
CONFIG_NSS_DRV_CLMAP_ENABLE=y
CONFIG_NSS_DRV_CRYPTO_ENABLE=y
CONFIG_NSS_DRV_DTLS_ENABLE=y
CONFIG_NSS_DRV_EDMA_ENABLE=y
CONFIG_NSS_DRV_GRE_ENABLE=y
CONFIG_NSS_DRV_GRE_REDIR_ENABLE=y
CONFIG_NSS_DRV_GRE_TUNNEL_ENABLE=y
CONFIG_NSS_DRV_IGS_ENABLE=y
CONFIG_NSS_DRV_IPSEC_ENABLE=y
CONFIG_NSS_DRV_IPV4_REASM_ENABLE=y
CONFIG_NSS_DRV_IPV6_ENABLE=y
CONFIG_NSS_DRV_IPV6_REASM_ENABLE=y
CONFIG_NSS_DRV_L2TP_ENABLE=y
CONFIG_NSS_DRV_LAG_ENABLE=y
CONFIG_NSS_DRV_MAPT_ENABLE=y
CONFIG_NSS_DRV_MATCH_ENABLE=y
CONFIG_NSS_DRV_MIRROR_ENABLE=y
CONFIG_NSS_DRV_OAM_ENABLE=y
CONFIG_NSS_DRV_PORTID_ENABLE=y
CONFIG_NSS_DRV_PPE_ENABLE=y
CONFIG_NSS_DRV_PPPOE_ENABLE=y
CONFIG_NSS_DRV_PPTP_ENABLE=y
CONFIG_NSS_DRV_PVXLAN_ENABLE=y
CONFIG_NSS_DRV_QRFS_ENABLE=y
CONFIG_NSS_DRV_QVPN_ENABLE=y
CONFIG_NSS_DRV_RMNET_ENABLE=y
CONFIG_NSS_DRV_SHAPER_ENABLE=y
CONFIG_NSS_DRV_SJACK_ENABLE=y
CONFIG_NSS_DRV_TLS_ENABLE=y
CONFIG_NSS_DRV_TRUSTSEC_ENABLE=y
CONFIG_NSS_DRV_TRUSTSEC_RX_ENABLE=y
CONFIG_NSS_DRV_TSTAMP_ENABLE=y
CONFIG_NSS_DRV_TUN6RD_ENABLE=y
CONFIG_NSS_DRV_TUNIPIP6_ENABLE=y
CONFIG_NSS_DRV_VIRT_IF_ENABLE=y
CONFIG_NSS_DRV_VLAN_ENABLE=y
CONFIG_NSS_DRV_VXLAN_ENABLE=y
CONFIG_NSS_DRV_WIFI_ENABLE=y
CONFIG_NSS_DRV_WIFI_EXT_VDEV_ENABLE=y
CONFIG_NSS_DRV_WIFI_MESH_ENABLE=y
CONFIG_OPENCONNECT_GNUTLS=y
CONFIG_OPENCONNECT_STOKEN=y
CONFIG_OPENSSL_ENGINE=y
CONFIG_OPENSSL_WITH_ASM=y
CONFIG_OPENSSL_WITH_CHACHA_POLY1305=y
CONFIG_OPENSSL_WITH_CMS=y
CONFIG_OPENSSL_WITH_DEPRECATED=y
CONFIG_OPENSSL_WITH_ERROR_MESSAGES=y
CONFIG_OPENSSL_WITH_IDEA=y
CONFIG_OPENSSL_WITH_MDC2=y
CONFIG_OPENSSL_WITH_PSK=y
CONFIG_OPENSSL_WITH_SEED=y
CONFIG_OPENSSL_WITH_SRP=y
CONFIG_OPENSSL_WITH_TLS13=y
CONFIG_OPENSSL_WITH_WHIRLPOOL=y
CONFIG_PACKAGE_aq-fw-download=y
CONFIG_PACKAGE_block-mount=y
CONFIG_PACKAGE_cgi-io=y
# CONFIG_PACKAGE_dnsmasq is not set
CONFIG_PACKAGE_dnsmasq-full=y
CONFIG_PACKAGE_dnsmasq_full_auth=y
CONFIG_PACKAGE_dnsmasq_full_conntrack=y
CONFIG_PACKAGE_dnsmasq_full_dhcp=y
CONFIG_PACKAGE_dnsmasq_full_dhcpv6=y
CONFIG_PACKAGE_dnsmasq_full_dnssec=y
CONFIG_PACKAGE_dnsmasq_full_nftset=y
CONFIG_PACKAGE_dnsmasq_full_noid=y
CONFIG_PACKAGE_dnsmasq_full_tftp=y
CONFIG_PACKAGE_ethtool-full=y
CONFIG_PACKAGE_ip6tables-nft=m
CONFIG_PACKAGE_iptables-mod-conntrack-extra=m
CONFIG_PACKAGE_iptables-mod-ipopt=y
CONFIG_PACKAGE_iptables-nft=y
CONFIG_PACKAGE_kmod-asn1-decoder=y
CONFIG_PACKAGE_kmod-bonding=y
CONFIG_PACKAGE_kmod-crypto-authenc=y
CONFIG_PACKAGE_kmod-crypto-kpp=y
CONFIG_PACKAGE_kmod-crypto-lib-chacha20=y
CONFIG_PACKAGE_kmod-crypto-lib-chacha20poly1305=y
CONFIG_PACKAGE_kmod-crypto-lib-curve25519=y
CONFIG_PACKAGE_kmod-crypto-lib-poly1305=y
CONFIG_PACKAGE_kmod-gre=y
CONFIG_PACKAGE_kmod-gre6=y
CONFIG_PACKAGE_kmod-ifb=y
CONFIG_PACKAGE_kmod-ip6-tunnel=y
CONFIG_PACKAGE_kmod-ip6tables=m
CONFIG_PACKAGE_kmod-ipt-conntrack=m
CONFIG_PACKAGE_kmod-ipt-conntrack-extra=m
CONFIG_PACKAGE_kmod-ipt-core=y
CONFIG_PACKAGE_kmod-ipt-ipopt=y
CONFIG_PACKAGE_kmod-iptunnel=y
CONFIG_PACKAGE_kmod-iptunnel4=y
CONFIG_PACKAGE_kmod-iptunnel6=y
CONFIG_PACKAGE_kmod-l2tp=y
CONFIG_PACKAGE_kmod-lib-textsearch=y
CONFIG_PACKAGE_kmod-nat46=y
CONFIG_PACKAGE_kmod-nf-conncount=m
CONFIG_PACKAGE_kmod-nf-conntrack-netlink=y
CONFIG_PACKAGE_kmod-nf-ipt=y
CONFIG_PACKAGE_kmod-nf-ipt6=m
CONFIG_PACKAGE_kmod-nf-nathelper=y
CONFIG_PACKAGE_kmod-nf-nathelper-extra=y
CONFIG_PACKAGE_kmod-nft-compat=y
CONFIG_PACKAGE_kmod-pppol2tp=y
CONFIG_PACKAGE_kmod-pptp=y
CONFIG_PACKAGE_kmod-qca-mcs=y
CONFIG_PACKAGE_kmod-qca-nss-cfi-cryptoapi=y
CONFIG_PACKAGE_kmod-qca-nss-crypto=y
CONFIG_PACKAGE_kmod-qca-nss-drv=y
CONFIG_PACKAGE_kmod-qca-nss-drv-bridge-mgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-clmapmgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-dtlsmgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-eogremgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-gre=y
CONFIG_PACKAGE_kmod-qca-nss-drv-igs=y
CONFIG_PACKAGE_kmod-qca-nss-drv-l2tpv2=y
CONFIG_PACKAGE_kmod-qca-nss-drv-lag-mgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-map-t=y
CONFIG_PACKAGE_kmod-qca-nss-drv-match=y
CONFIG_PACKAGE_kmod-qca-nss-drv-netlink=y
CONFIG_PACKAGE_kmod-qca-nss-drv-pppoe=y
CONFIG_PACKAGE_kmod-qca-nss-drv-pvxlanmgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-qdisc=y
CONFIG_PACKAGE_kmod-qca-nss-drv-tlsmgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-vlan-mgr=y
CONFIG_PACKAGE_kmod-qca-nss-drv-vxlanmgr=y
CONFIG_PACKAGE_kmod-qca-nss-ecm=y
CONFIG_PACKAGE_kmod-sched-cake=y
CONFIG_PACKAGE_kmod-sched-core=y
CONFIG_PACKAGE_kmod-scsi-core=y
CONFIG_PACKAGE_kmod-sit=y
CONFIG_PACKAGE_kmod-tun=m
CONFIG_PACKAGE_kmod-udptunnel4=y
CONFIG_PACKAGE_kmod-udptunnel6=y
CONFIG_PACKAGE_kmod-usb-storage=y
CONFIG_PACKAGE_kmod-usb-storage-extras=y
CONFIG_PACKAGE_kmod-usb-storage-uas=y
CONFIG_PACKAGE_kmod-vxlan=y
CONFIG_PACKAGE_kmod-wireguard=y
CONFIG_PACKAGE_libatomic=y
CONFIG_PACKAGE_libevdev=y
CONFIG_PACKAGE_libgmp=y
CONFIG_PACKAGE_libgnutls=m
CONFIG_PACKAGE_libip4tc=m
CONFIG_PACKAGE_libip6tc=m
CONFIG_PACKAGE_libiptext=y
CONFIG_PACKAGE_libiptext-nft=y
CONFIG_PACKAGE_libiptext6=y
CONFIG_PACKAGE_liblua=m
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=m
CONFIG_PACKAGE_liblucihttp-ucode=y
CONFIG_PACKAGE_libncurses=y
CONFIG_PACKAGE_libnetfilter-conntrack=y
CONFIG_PACKAGE_libnettle=y
CONFIG_PACKAGE_libnfnetlink=y
CONFIG_PACKAGE_libnl=y
CONFIG_PACKAGE_libnl-core=y
CONFIG_PACKAGE_libnl-genl=y
CONFIG_PACKAGE_libnl-nf=y
CONFIG_PACKAGE_libnl-nss=y
CONFIG_PACKAGE_libnl-route=y
CONFIG_PACKAGE_libopenssl=m
CONFIG_PACKAGE_libstdcpp=m
CONFIG_PACKAGE_libstoken=m
CONFIG_PACKAGE_libtasn1=m
CONFIG_PACKAGE_libubus-lua=m
CONFIG_PACKAGE_libudev-zero=y
CONFIG_PACKAGE_libusb-1.0=y
CONFIG_PACKAGE_libwolfsslcpu-crypto=y
CONFIG_PACKAGE_libxml2=m
CONFIG_PACKAGE_libxtables=y
CONFIG_PACKAGE_lua=m
CONFIG_PACKAGE_luci=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-nextdns=m
CONFIG_PACKAGE_luci-app-opkg=y
CONFIG_PACKAGE_luci-app-sqm=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-i18n-base-it=y
CONFIG_PACKAGE_luci-i18n-dashboard-it=y
CONFIG_PACKAGE_luci-i18n-firewall-it=y
CONFIG_PACKAGE_luci-i18n-nextdns-it=m
CONFIG_PACKAGE_luci-i18n-opkg-it=y
CONFIG_PACKAGE_luci-i18n-sqm-it=y
CONFIG_PACKAGE_luci-lib-base=m
CONFIG_PACKAGE_luci-lib-ip=m
CONFIG_PACKAGE_luci-lib-jsonc=m
CONFIG_PACKAGE_luci-lib-nixio=m
CONFIG_PACKAGE_luci-light=y
CONFIG_PACKAGE_luci-lua-runtime=m
CONFIG_PACKAGE_luci-mod-admin-full=y
CONFIG_PACKAGE_luci-mod-dashboard=y
CONFIG_PACKAGE_luci-mod-network=y
CONFIG_PACKAGE_luci-mod-status=y
CONFIG_PACKAGE_luci-mod-system=y
CONFIG_PACKAGE_luci-proto-ipv6=y
CONFIG_PACKAGE_luci-proto-openconnect=m
CONFIG_PACKAGE_luci-proto-openfortivpn=m
CONFIG_PACKAGE_luci-proto-ppp=y
CONFIG_PACKAGE_luci-proto-wireguard=m
CONFIG_PACKAGE_luci-theme-bootstrap=y
CONFIG_PACKAGE_luci-theme-material=m
CONFIG_PACKAGE_luci-theme-openwrt=m
CONFIG_PACKAGE_luci-theme-openwrt-2020=m
CONFIG_PACKAGE_nextdns=m
CONFIG_PACKAGE_nss-eip-firmware=y
CONFIG_PACKAGE_nss-firmware-ipq8074=y
CONFIG_PACKAGE_nssinfo=y
CONFIG_PACKAGE_openconnect=m
CONFIG_PACKAGE_openfortivpn=m
CONFIG_PACKAGE_qca-ssdk-shell=y
CONFIG_PACKAGE_resolveip=m
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_rpcd-mod-file=y
CONFIG_PACKAGE_rpcd-mod-iwinfo=y
CONFIG_PACKAGE_rpcd-mod-luci=y
CONFIG_PACKAGE_rpcd-mod-rrdns=y
CONFIG_PACKAGE_rpcd-mod-ucode=y
CONFIG_PACKAGE_sqm-scripts=y
CONFIG_PACKAGE_tc-tiny=y
CONFIG_PACKAGE_terminfo=y
CONFIG_PACKAGE_ucode-mod-html=y
CONFIG_PACKAGE_ucode-mod-lua=m
CONFIG_PACKAGE_ucode-mod-math=y
CONFIG_PACKAGE_uhttpd=y
CONFIG_PACKAGE_uhttpd-mod-ubus=y
CONFIG_PACKAGE_usbids=y
CONFIG_PACKAGE_usbutils=y
CONFIG_PACKAGE_vpnc-scripts=m
CONFIG_PACKAGE_wireguard-tools=m
CONFIG_PACKAGE_wpad-basic-mbedtls=m
CONFIG_PACKAGE_wpad-wolfssl=y
CONFIG_PACKAGE_xtables-nft=y
CONFIG_PACKAGE_zlib=m
CONFIG_WPA_WOLFSSL=y

Terms

  • [X] I am reporting an issue for OpenWrt, not an unsupported fork.

axelgenus avatar Apr 10 '23 07:04 axelgenus

I was able to get a better/complete trace:

[2023-04-11T08:19:53.267] [41803.063145] Unable to handle kernel execute from non-executable memory at virtual address 0000000000000000
[2023-04-11T08:19:53.273] [41803.063198] Mem abort info:
[2023-04-11T08:19:53.278] [41803.071687]   ESR = 0x0000000086000005
[2023-04-11T08:19:53.282] [41803.074380]   EC = 0x21: IABT (current EL), IL = 32 bits
[2023-04-11T08:19:53.284] [41803.078208]   SET = 0, FnV = 0
[2023-04-11T08:19:53.289] [41803.083666]   EA = 0, S1PTW = 0
[2023-04-11T08:19:53.294] [41803.086529]   FSC = 0x05: level 1 translation fault
[2023-04-11T08:19:53.298] [41803.089573] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000044074000
[2023-04-11T08:19:53.305] [41803.094436] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000
[2023-04-11T08:19:53.310] [41803.101039] Internal error: Oops: 86000005 [#1] PREEMPT SMP
[2023-04-11T08:19:53.315] [41803.109537] Modules linked in: ecm nft_fib_inet nf_flow_table_ipv6 nf_flow_table_ipv4 nf_flow_table_inet ath11k_ahb ath11k nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_fullcone nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_counter nft_compat nft_chain_nat nf_tables nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_nat nf_flow_table nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_pptp nf_conntrack_netlink nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast nf_conntrack_amanda nf_conntrack mac80211 iptable_mangle iptable_filter ipt_REJECT ipt_ECN ip_tables cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_ecn xt_dscp xt_comment xt_TCPMSS xt_LOG xt_HL xt_DSCP xt_CLASSIFY x_tables wireguard ums_usbat ums_sddr55 ums_sddr09
[2023-04-11T08:19:53.406] [41803.109675]  ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda ts_kmp ts_fsm ts_bm sch_cake qrtr_smd qrtr qmi_helpers pptp ppp_async ns nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv4 libcrc32c libchacha20poly1305 l2tp_ppp crc_ccitt compat sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact qca_nss_cfi_cryptoapi qca_nss_crypto qca_nss_qdisc qca_nss_vxlanmgr qca_nss_pppoe pppoe pppox qca_nss_map_t qca_nss_lag_mgr qca_nss_l2tpv2 ppp_generic slhc qca_nss_gre qca_nss_bridge_mgr qca_nss_vlan qca_mcs bonding ip6_gre ip_gre gre ifb nat46 nf_defrag_ipv6 sit qca_nss_drv ip6_tunnel tunnel6 tunnel4 vxlan seqiv michael_mic uas usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom qca_nss_dp qca_ssdk gpio_button_hotplug ext4 mbcache jbd2 aquantia hwmon crc32c_generic
[2023-04-11T08:19:53.482] [41803.259785] CPU: 3 PID: 0 Comm: swapper/3 Not tainted 5.15.106 #0
[2023-04-11T08:19:53.489] [41803.282021] Hardware name: QNAP 301w (DT)
[2023-04-11T08:19:53.493] [41803.288006] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[2023-04-11T08:19:53.503] [41803.292004] pc : 0x0
[2023-04-11T08:19:53.504] [41803.298767] lr : nf_ct_expect_event_report+0x80/0xa0 [nf_conntrack]
[2023-04-11T08:19:53.509] [41803.301204] sp : ffffffc008c23240
[2023-04-11T08:19:53.515] [41803.307188] x29: ffffffc008c23240 x28: ffffff801691e780 x27: ffffff8002143000
[2023-04-11T08:19:53.520] [41803.310667] x26: ffffffc000f30b40 x25: ffffffc000f31bd8 x24: ffffff8011ec4078
[2023-04-11T08:19:53.525] [41803.317786] x23: 0000000000000000 x22: 0000000000000000 x21: ffffffc008bf1580
[2023-04-11T08:19:53.536] [41803.324904] x20: 0000000000000000 x19: ffffff8011ec4000 x18: 0000000000000014
[2023-04-11T08:19:53.541] [41803.332021] x17: 00000000a0d85102 x16: 00000000f2ccf32b x15: 000000002770dd4a
[2023-04-11T08:19:53.547] [41803.339141] x14: 00000000000002a3 x13: 0000000000000000 x12: 0000000000000020
[2023-04-11T08:19:53.557] [41803.346258] x11: 000000104e5e7dc1 x10: ffffff800469e2c0 x9 : 0000000000000000
[2023-04-11T08:19:53.563] [41803.353376] x8 : 0000000000000002 x7 : 0000000000000001 x6 : 0000000000000004
[2023-04-11T08:19:53.568] [41803.360493] x5 : ffffff803fdd8b28 x4 : ffffffc001127a18 x3 : 0000000000000000
[2023-04-11T08:19:53.579] [41803.367612] x2 : 0000000000000000 x1 : ffffffc008c23280 x0 : 0000000000000001
[2023-04-11T08:19:53.585] [41803.374731] Call trace:
[2023-04-11T08:19:53.586] [41803.381840]  0x0
[2023-04-11T08:19:53.590] [41803.384096]  nf_ct_expect_related_report+0x398/0x5b0 [nf_conntrack]
[2023-04-11T08:19:53.595] [41803.386187]  0xffffffc000f8dcf8
[2023-04-11T08:19:53.596] [41803.392170]  ct_sip_parse_header_uri+0x1030/0x11cc [nf_conntrack_sip]
[2023-04-11T08:19:53.606] [41803.395302]  ct_sip_parse_header_uri+0x448/0x11cc [nf_conntrack_sip]
[2023-04-11T08:19:53.611] [41803.401899]  ct_sip_parse_header_uri+0x948/0x11cc [nf_conntrack_sip]
[2023-04-11T08:19:53.617] [41803.408323]  nf_confirm+0x4c/0x830 [nf_conntrack]
[2023-04-11T08:19:53.622] [41803.414657]  nf_confirm+0x1a4/0x830 [nf_conntrack]
[2023-04-11T08:19:53.628] [41803.419258]  nf_hook_slow+0x4c/0xf0
[2023-04-11T08:19:53.629] [41803.423942]  ip_output+0x15c/0x1a0
[2023-04-11T08:19:53.633] [41803.427327]  ip_forward_finish+0x88/0xd0
[2023-04-11T08:19:53.638] [41803.430800]  ip_forward+0x428/0x490
[2023-04-11T08:19:53.639] [41803.434878]  ip_rcv_finish+0x44/0x60
[2023-04-11T08:19:53.644] [41803.438090]  ip_sabotage_in+0x80/0x90
[2023-04-11T08:19:53.649] [41803.441910]  nf_hook_slow+0x4c/0xf0
[2023-04-11T08:19:53.651] [41803.445470]  ip_rcv+0x64/0x100
[2023-04-11T08:19:53.654] [41803.448767]  __netif_receive_skb_one_core+0x48/0x60
[2023-04-11T08:19:53.660] [41803.451895]  netif_receive_skb+0x5c/0x120
[2023-04-11T08:19:53.664] [41803.456669]  br_pass_frame_up+0x140/0x1b0
[2023-04-11T08:19:53.666] [41803.460836]  br_handle_frame_finish+0x424/0x5b0
[2023-04-11T08:19:53.672] [41803.464829]  br_nf_hook_thresh+0xdc/0x100
[2023-04-11T08:19:53.676] [41803.469168]  br_nf_pre_routing_finish+0x158/0x480
[2023-04-11T08:19:53.681] [41803.473336]  br_nf_pre_routing+0x498/0x4c0
[2023-04-11T08:19:53.686] [41803.478023]  br_handle_frame+0x1a8/0x464
[2023-04-11T08:19:53.688] [41803.482016]  __netif_receive_skb_core.constprop.0+0x23c/0xcd0
[2023-04-11T08:19:53.692] [41803.486098]  __netif_receive_skb_list_core+0xd8/0x1f0
[2023-04-11T08:19:53.698] [41803.491740]  netif_receive_skb_list_internal+0x1c8/0x2c0
[2023-04-11T08:19:53.703] [41803.496775]  napi_complete_done+0x68/0x1b0
[2023-04-11T08:19:53.708] [41803.502154]  nss_core_handle_napi_queue+0x60/0x80 [qca_nss_drv]
[2023-04-11T08:19:53.714] [41803.506064]  __napi_poll+0x5c/0x1b4
[2023-04-11T08:19:53.719] [41803.511875]  net_rx_action+0xec/0x274
[2023-04-11T08:19:53.720] [41803.515348]  _stext+0x10c/0x28c
[2023-04-11T08:19:53.724] [41803.519166]  irq_exit+0xbc/0x100
[2023-04-11T08:19:53.729] [41803.522117]  handle_domain_irq+0x64/0x90
[2023-04-11T08:19:53.731] [41803.525593]  gic_handle_irq+0x54/0xe0
[2023-04-11T08:19:53.735] [41803.529497]  call_on_irq_stack+0x28/0x54
[2023-04-11T08:19:53.741] [41803.533057]  do_interrupt_handler+0x54/0x60
[2023-04-11T08:19:53.745] [41803.537050]  el1_interrupt+0x30/0x70
[2023-04-11T08:19:53.746] [41803.540956]  el1h_64_irq_handler+0x18/0x24
[2023-04-11T08:19:53.751] [41803.544775]  el1h_64_irq+0x78/0x7c
[2023-04-11T08:19:53.756] [41803.548681]  arch_cpu_idle+0x18/0x2c
[2023-04-11T08:19:53.758] [41803.552068]  default_idle_call+0x20/0x70
[2023-04-11T08:19:53.762] [41803.555800]  do_idle+0x214/0x240
[2023-04-11T08:19:53.767] [41803.559705]  cpu_startup_entry+0x28/0x60
[2023-04-11T08:19:53.769] [41803.562918]  secondary_start_kernel+0x13c/0x14c
[2023-04-11T08:19:53.773] [41803.566825]  __secondary_switched+0x90/0x94
[2023-04-11T08:19:53.778] [41803.571085] Code: bad PC value
[2023-04-11T08:19:53.779] [41803.575244] ---[ end trace b6e92b56a648f399 ]---
[2023-04-11T08:19:53.785] [41803.578374] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[2023-04-11T08:19:53.793] [41803.583150] SMP: stopping secondary CPUs
[2023-04-11T08:19:53.795] [41803.589832] Kernel Offset: disabled
[2023-04-11T08:19:53.800] [41803.593907] CPU features: 0x00000000,00000802
[2023-04-11T08:19:53.807] [41803.597121] Memory Limit: none
[2023-04-11T08:19:54.806] [41804.601638] Rebooting in 3 seconds..

axelgenus avatar Apr 11 '23 06:04 axelgenus

It is definitely an issue with SIP protocol: also connecting to the SIP service by means of Linphone triggers a kernel panic and the device restart.

axelgenus avatar Apr 11 '23 06:04 axelgenus

Wow very interesting, you just found either a null pointer dereference or a use-after-free (UAF) in the nf_conntrack_sip helper module, nice one! :)

I'd suggest disabling those nftable conntrack helper modules temporarily, I'll have a look at it but there are plenty of things to stabilize more urgently (such as the current broken Wi-Fi...).

Thanks for the report btw!

bitthief avatar May 08 '23 13:05 bitthief