[Secure-testing-team] Bug#837178: linux-image-3.16.0-4-amd64: All memory and swap is used up until system freezes

Wolfgang Tichy wtichy43 at gmail.com
Fri Sep 9 19:37:44 UTC 2016


Package: src:linux
Version: 3.16.7-ckt25-2+deb8u3
Severity: critical
Tags: security
Justification: causes serious data loss

Dear Maintainer,

when I open a particular word document (it contains images and I can send it
to you for testing) with libreoffice, all memory and all swap get used up
within about a minute. This happens slowly enough that it can be monitored
with "top" and "free". What I see with top is that soffice.bin (which is
libreoffice) does not use much memory (maybe 2%). Nevertheless more and more
memory gets used. "free -h" gives something like this:

             total       used       free     shared    buffers     cached
Mem:          7.5G       7.4G       141M       5.9G        71M       6.4G
-/+ buffers/cache:       917M       6.6G
Swap:         8.0G       663M       7.4G

Eventually the "used" column in the "Mem:" and "Swap:" and lines reach the
total and the system runs out of memory and becomes totally unresponsive
(even the mouse pointer freezes), no remote logins are possible at this
point, and all keypresses are ignored. The only way to regain control is by
holding down the power button for 10s. However, the "used" column in the
"-/+ buffers/cache:" line stays near 1GB, so that it is clear that
buffers/caches take up almost all the space.

You may wonder why I file this against the kernel and not libreoffice. Well,
I am sure libreoffice is doing something stupid, that could be fixed to
circumvent this problem. But the kernel should simply not allow any user
process to bring down the entire system. Also it seems the kernel is
allocating caches or buffers until it runs out of all memory and then
freezes. If it was only libreoffice allocating memory, OOM killer would kill
it. But nothing like this happens, even if you wait 2h nothing happens. I
think OOM killer does nothing because no single user process uses a lot of
memory. It's the kernel choking on itself. 

Ok, so now let me speculate on what might be wrong. I am filing this report
for my laptop that has a i7-3667U CPU with integrated Intel graphics card:
00:02.0 VGA compatible controller: Intel Corporation 3rd Gen Core processor Graphics Controller (rev 09)
But the problem also occurs on 3 other Debian desktop machines that run the
same kernel, and have either Intel or ATI graphics, i.e.:
00:02.0 VGA compatible controller: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller (rev 06)
01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Barts PRO [Radeon HD 6850]
01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Caicos [Radeon HD 6450/7450/8450 / R5 230 OEM]
However, it happens differently on a 4th Debian desktop machine with
07:00.0 VGA compatible controller: NVIDIA Corporation NV42GL [Quadro FX 3450/4000 SDI] (rev a2)
On this one, Gnome3 crashes and dmesg has a lot of lines lines like:
[880754.926611] [TTM] Failed to find memory space for buffer 0xffff880367e42800 eviction
[880754.926613] [TTM] No space for ffff880367e42800 (497 pages, 1988K, 1M)
[880754.926614] [TTM]   placement[0]=0x00070002 (1)
[880754.926616] [TTM]     has_type: 1
[880754.926617] [TTM]     use_type: 1
[880754.926618] [TTM]     flags: 0x0000000A
[880754.926619] [TTM]     gpu_offset: 0x00000000
[880754.926620] [TTM]     size: 131072
[880754.926621] [TTM]     available_caching: 0x00070000
[880754.926622] [TTM]     default_caching: 0x00010000
This is actually good because after the gnome3 crash the system is still
usable. I should say that in all cases I am using the open source graphics
drivers that use kernel mode setting. So the latter crash leads me to think
that some interaction between the graphics drivers and the kernel leads to
the allocation of too many buffers/caches by the kernel until it runs out.
Probably this is all triggered by libreoffice (running on X) trying to
display some JPG images in a document.

The reason why I consider this security relevant is that anybody with a user
account can use libreoffice to bring the system down. This will cause data
loss since all other users cannot save any data in open files.

Thank you very much for considering this report,
Wolfgang Tichy


-- Package-specific info:
** Version:
Linux version 3.16.0-4-amd64 (debian-kernel at lists.debian.org) (gcc version 4.8.4 (Debian 4.8.4-1) ) #1 SMP Debian 3.16.7-ckt25-2+deb8u3 (2016-07-02)

** Command line:
BOOT_IMAGE=/boot/vmlinuz-3.16.0-4-amd64 root=UUID=111acff4-4673-47ad-85a1-43f48c1c7621 ro quiet

** Tainted: W (512)
 * Taint on warning.

** Kernel log:
[44950.827165] Broke affinity for irq 41
[44950.930086] smpboot: CPU 3 is now offline
[44950.931077] PM: Creating hibernation image:
[44951.233670] PM: Need to copy 785394 pages
[44951.233677] PM: Normal pages needed: 785394 + 1024, available pages: 1234019
[44950.933557] PM: Restoring platform NVS memory
[44950.934317] Enabling non-boot CPUs ...
[44950.934528] x86: Booting SMP configuration:
[44950.934531] smpboot: Booting Node 0 Processor 1 APIC 0x1
[44950.949766] Intel pstate controlling: cpu 1
[44950.949890] CPU1 is up
[44950.950054] smpboot: Booting Node 0 Processor 2 APIC 0x2
[44950.964625] Intel pstate controlling: cpu 2
[44950.964729] CPU2 is up
[44950.964884] smpboot: Booting Node 0 Processor 3 APIC 0x3
[44950.979266] Intel pstate controlling: cpu 3
[44950.979369] CPU3 is up
[44950.987045] ACPI: Waking up from system sleep state S4
[44951.036803] sdhci-pci 0000:02:00.0: MMC controller base frequency changed to 50Mhz.
[44951.045533] PM: noirq restore of devices complete after 12.256 msecs
[44951.045794] PM: early restore of devices complete after 0.235 msecs
[44951.137444] usb usb1: root hub lost power or was reset
[44951.137446] usb usb2: root hub lost power or was reset
[44951.137448] mei_me 0000:00:16.0: irq 43 for MSI/MSI-X
[44951.137606] usb usb3: root hub lost power or was reset
[44951.137626] snd_hda_intel 0000:00:1b.0: irq 44 for MSI/MSI-X
[44951.137729] usb usb4: root hub lost power or was reset
[44951.138671] xhci_hcd 0000:00:14.0: irq 40 for MSI/MSI-X
[44951.139831] sd 0:0:0:0: [sda] Starting disk
[44951.141511] ehci-pci 0000:00:1a.0: cache line size of 64 is not supported
[44951.141574] iwlwifi 0000:03:00.0: RF_KILL bit toggled to enable radio.
[44951.141641] ehci-pci 0000:00:1d.0: cache line size of 64 is not supported
[44951.165684] tpm_tis 00:06: TPM is disabled/deactivated (0x6)
[44951.421359] [drm:cpt_set_fifo_underrun_reporting] *ERROR* uncleared pch fifo underrun on pch transcoder A
[44951.421361] [drm:cpt_serr_int_handler] *ERROR* PCH transcoder A FIFO underrun
[44951.458041] ata1: SATA link up 6.0 Gbps (SStatus 133 SControl 300)
[44951.462047] usb 4-1: reset high-speed USB device number 2 using ehci-pci
[44951.469440] ata1.00: ACPI cmd ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
[44951.469447] ata1.00: ACPI cmd f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
[44951.470023] usb 3-1: reset high-speed USB device number 2 using ehci-pci
[44951.489395] ata1.00: ACPI cmd ef/02:00:00:00:00:a0 (SET FEATURES) succeeded
[44951.489401] ata1.00: ACPI cmd f5/00:00:00:00:00:a0 (SECURITY FREEZE LOCK) filtered out
[44951.499478] ata1.00: configured for UDMA/133
[44951.850421] psmouse serio1: synaptics: queried max coordinates: x [..5678], y [..4732]
[44951.881262] psmouse serio1: synaptics: queried min coordinates: x [1264..], y [1124..]
[44951.882540] usb 3-1.3: reset full-speed USB device number 3 using ehci-pci
[44952.046722] usb 3-1.4: reset full-speed USB device number 4 using ehci-pci
[44952.210914] usb 3-1.6: reset high-speed USB device number 5 using ehci-pci
[44952.367453] [drm] Enabling RC6 states: RC6 on, RC6p on, RC6pp off
[44952.426958] PM: restore of devices complete after 1288.128 msecs
[44952.428189] ------------[ cut here ]------------
[44952.428205] WARNING: CPU: 1 PID: 25332 at /build/linux-7z1rSb/linux-3.16.7-ckt25/drivers/base/firmware_class.c:1124 _request_firmware+0x529/0xae0()
[44952.428208] Modules linked in: ctr ccm bnep binfmt_misc arc4 nfsd auth_rpcgss oid_registry nfs_acl nfs lockd iwldvm fscache snd_hda_codec_hdmi mac80211 sunrpc snd_hda_codec_realtek snd_hda_codec_generic iwlwifi iTCO_wdt iTCO_vendor_support cfg80211 ecb uvcvideo btusb videobuf2_vmalloc videobuf2_memops bluetooth videobuf2_core v4l2_common 6lowpan_iphc videodev media joydev x86_pkg_temp_thermal intel_powerclamp intel_rapl coretemp kvm crc32_pclmul aesni_intel aes_x86_64 lrw gf128mul glue_helper ablk_helper cryptd evdev snd_hda_intel snd_hda_controller serio_raw pcspkr snd_hda_codec snd_hwdep snd_pcm lpc_ich i2c_i801 mei_me mfd_core shpchp snd_timer mei wmi thinkpad_acpi i915 nvram snd soundcore rfkill drm_kms_helper tpm_tis battery ac tpm drm i2c_algo_bit video i2c_core intel_smartconnect button processor
[44952.428308]  loop fuse parport_pc ppdev lp parport autofs4 ext4 crc16 mbcache jbd2 sg sd_mod crc_t10dif crct10dif_generic crct10dif_pclmul crct10dif_common crc32c_intel ahci libahci ehci_pci ehci_hcd psmouse libata xhci_hcd scsi_mod sdhci_pci sdhci mmc_core usbcore thermal usb_common thermal_sys
[44952.428349] CPU: 1 PID: 25332 Comm: kworker/u17:0 Tainted: G        W     3.16.0-4-amd64 #1 Debian 3.16.7-ckt25-2+deb8u3
[44952.428352] Hardware name: LENOVO 3444F9U/3444F9U, BIOS G6ET90WW (2.50 ) 12/26/2012
[44952.428371] Workqueue: hci0 hci_power_on [bluetooth]
[44952.428374]  0000000000000000 ffffffff8150e08f 0000000000000000 0000000000000009
[44952.428380]  ffffffff81067777 ffff880211fcfd48 ffff880191887280 ffff880211fcfd40
[44952.428385]  ffff8800c92ab100 ffff880162e69ab8 ffffffff813b5179 ffff0004ff102100
[44952.428391] Call Trace:
[44952.428402]  [<ffffffff8150e08f>] ? dump_stack+0x5d/0x78
[44952.428411]  [<ffffffff81067777>] ? warn_slowpath_common+0x77/0x90
[44952.428417]  [<ffffffff813b5179>] ? _request_firmware+0x529/0xae0
[44952.428420] PM: Image restored successfully.
[44952.428428]  [<ffffffff813b575c>] ? request_firmware+0x2c/0x40
[44952.428437]  [<ffffffffa06778b5>] ? btusb_setup_bcm_patchram+0x85/0x430 [btusb]
[44952.428445]  [<ffffffff813ac4ea>] ? rpm_check_suspend_allowed+0x6a/0xc0
[44952.428452]  [<ffffffff813ad209>] ? __pm_runtime_idle+0x69/0x80
[44952.428467]  [<ffffffffa060084d>] ? hci_dev_do_open+0x25d/0x920 [bluetooth]
[44952.428468] PM: Basic memory bitmaps freed
[44952.428473] Restarting tasks ... 
[44952.428482]  [<ffffffff8109e33f>] ? enqueue_task_fair+0x2cf/0xe20
[44952.428491]  [<ffffffff8101b93d>] ? native_sched_clock+0x2d/0x80
[44952.428508]  [<ffffffffa060150c>] ? hci_power_on+0x2c/0x170 [bluetooth]
[44952.428516]  [<ffffffff81094594>] ? ttwu_do_wakeup+0x14/0xd0
[44952.428525]  [<ffffffff81081742>] ? process_one_work+0x172/0x420
[44952.428533]  [<ffffffff81081dd3>] ? worker_thread+0x113/0x4f0
[44952.428541]  [<ffffffff81081cc0>] ? rescuer_thread+0x2d0/0x2d0
[44952.428551]  [<ffffffff8108800d>] ? kthread+0xbd/0xe0
[44952.428560]  [<ffffffff81087f50>] ? kthread_create_on_node+0x180/0x180
[44952.428570]  [<ffffffff81514158>] ? ret_from_fork+0x58/0x90
[44952.428578]  [<ffffffff81087f50>] ? kthread_create_on_node+0x180/0x180
[44952.428583] ---[ end trace 5fdeee0e5730fb68 ]---
[44952.428590] bluetooth hci0: firmware: brcm/BCM20702A0-0a5c-21e6.hcd will not be loaded
[44952.428599] Bluetooth: hci0: BCM: patch brcm/BCM20702A0-0a5c-21e6.hcd not found
[44952.430130] done.
[44952.679300] iwlwifi 0000:03:00.0: L1 Enabled - LTR Disabled
[44952.685902] iwlwifi 0000:03:00.0: Radio type=0x1-0x2-0x0
[44952.952031] iwlwifi 0000:03:00.0: L1 Enabled - LTR Disabled
[44952.958531] iwlwifi 0000:03:00.0: Radio type=0x1-0x2-0x0
[44953.038404] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[44956.319591] wlan0: authenticate with 1c:af:f7:da:2d:85
[44956.322807] wlan0: send auth to 1c:af:f7:da:2d:85 (try 1/3)
[44956.427711] wlan0: send auth to 1c:af:f7:da:2d:85 (try 2/3)
[44956.429617] wlan0: authenticated
[44956.431665] wlan0: associate with 1c:af:f7:da:2d:85 (try 1/3)
[44956.441503] wlan0: RX AssocResp from 1c:af:f7:da:2d:85 (capab=0x431 status=0 aid=6)
[44956.470657] wlan0: associated
[44956.470719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready

** Model information
sys_vendor: LENOVO
product_name: 3444F9U
product_version: ThinkPad X1 Carbon
chassis_vendor: LENOVO
chassis_version: Not Available
bios_vendor: LENOVO
bios_version: G6ET90WW (2.50 )
board_vendor: LENOVO
board_name: 3444F9U
board_version: Win8 Pro DPK TPG

** Loaded modules:
snd_seq_dummy
snd_seq
snd_seq_device
ctr
ccm
bnep
binfmt_misc
arc4
nfsd
auth_rpcgss
oid_registry
nfs_acl
nfs
lockd
iwldvm
fscache
snd_hda_codec_hdmi
mac80211
sunrpc
snd_hda_codec_realtek
snd_hda_codec_generic
iwlwifi
iTCO_wdt
iTCO_vendor_support
cfg80211
ecb
uvcvideo
btusb
videobuf2_vmalloc
videobuf2_memops
bluetooth
videobuf2_core
v4l2_common
6lowpan_iphc
videodev
media
joydev
x86_pkg_temp_thermal
intel_powerclamp
intel_rapl
coretemp
kvm
crc32_pclmul
aesni_intel
aes_x86_64
lrw
gf128mul
glue_helper
ablk_helper
cryptd
evdev
snd_hda_intel
snd_hda_controller
serio_raw
pcspkr
snd_hda_codec
snd_hwdep
snd_pcm
lpc_ich
i2c_i801
mei_me
mfd_core
shpchp
snd_timer
mei
wmi
thinkpad_acpi
i915
nvram
snd
soundcore
rfkill
drm_kms_helper
tpm_tis
battery
ac
tpm
drm
i2c_algo_bit
video
i2c_core
intel_smartconnect
button
processor
loop
fuse
parport_pc
ppdev
lp
parport
autofs4
ext4
crc16
mbcache
jbd2
sg
sd_mod
crc_t10dif
crct10dif_generic
crct10dif_pclmul
crct10dif_common
crc32c_intel
ahci
libahci
ehci_pci
ehci_hcd
psmouse
libata
xhci_hcd
scsi_mod
sdhci_pci
sdhci
mmc_core
usbcore
thermal
usb_common
thermal_sys

** Network interface configuration:
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 84:3a:4b:0c:ca:8c brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.106/24 brd 192.168.1.255 scope global wlan0
       valid_lft forever preferred_lft forever
    inet6 fe80::863a:4bff:fe0c:ca8c/64 scope link 
       valid_lft forever preferred_lft forever

*** Device statistics:
Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
 wlan0: 980759259  994618    0    0    0     0          0         0 120427518  679094    0    0    0     0       0          0
    lo: 52103939  308245    0    0    0     0          0         0 52103939  308245    0    0    0     0       0          0

*** Protocol statistics:
Ip:
    918244 total packets received
    27 with invalid addresses
    0 forwarded
    0 incoming packets discarded
    909768 incoming packets delivered
    835236 requests sent out
    927 outgoing packets dropped
    1762 dropped because of missing route
Icmp:
    3288 ICMP messages received
    3 input ICMP message failed.
    ICMP input histogram:
        destination unreachable: 3288
    3495 ICMP messages sent
    0 ICMP messages failed
    ICMP output histogram:
        destination unreachable: 3495
IcmpMsg:
        InType3: 3288
        OutType3: 3495
Tcp:
    14696 active connections openings
    86 passive connection openings
    58 failed connection attempts
    2070 connection resets received
    33 connections established
    966000 segments received
    914715 segments send out
    4655 segments retransmited
    682 bad segments received.
    4275 resets sent
Udp:
    90340 packets received
    3496 packets to unknown port received.
    0 packet receive errors
    63805 packets sent
    SndbufErrors: 3
UdpLite:
TcpExt:
    17 invalid SYN cookies received
    96 packets pruned from receive queue because of socket buffer overrun
    21 ICMP packets dropped because they were out-of-window
    3527 TCP sockets finished time wait in fast timer
    1 packets rejects in established connections because of timestamp
    42937 delayed acks sent
    98 delayed acks further delayed because of locked socket
    Quick ack mode was activated 3836 times
    353 packets directly queued to recvmsg prequeue.
    5918 bytes directly in process context from backlog
    283579 bytes directly received in process context from prequeue
    530200 packet headers predicted
    323 packets header predicted and directly queued to user
    49841 acknowledgments not containing data payload received
    259940 predicted acknowledgments
    1 times recovered from packet loss due to fast retransmit
    107 times recovered from packet loss by selective acknowledgements
    Detected reordering 2 times using time stamp
    5 congestion windows fully recovered without slow start
    1 congestion windows partially recovered using Hoe heuristic
    10 congestion windows recovered without slow start by DSACK
    1368 congestion windows recovered without slow start after partial ack
    33 timeouts after SACK recovery
    33 timeouts in loss state
    145 fast retransmits
    18 forward retransmits
    107 retransmits in slow start
    2320 other TCP timeouts
    TCPLossProbes: 1361
    TCPLossProbeRecovery: 362
    25 SACK retransmits failed
    17016 packets collapsed in receive queue due to low socket buffer
    3750 DSACKs sent for old packets
    6 DSACKs sent for out of order packets
    487 DSACKs received
    857 connections reset due to unexpected data
    830 connections reset due to early user close
    329 connections aborted due to timeout
    9 times unabled to send RST due to no memory
    TCPDSACKIgnoredNoUndo: 194
    TCPSpuriousRTOs: 953
    TCPSackShiftFallback: 368
    TCPRetransFail: 652
    TCPRcvCoalesce: 87045
    TCPOFOQueue: 26200
    TCPOFOMerge: 6
    TCPChallengeACK: 702
    TCPSYNChallenge: 701
    TCPSpuriousRtxHostQueues: 3556
    TCPAutoCorking: 30424
    TCPFromZeroWindowAdv: 12
    TCPToZeroWindowAdv: 12
    TCPWantZeroWindowAdv: 711
    TCPSynRetrans: 299
    TCPOrigDataSent: 403339
IpExt:
    InMcastPkts: 1773
    OutMcastPkts: 2236
    InBcastPkts: 2108
    OutBcastPkts: 729
    InOctets: 976737265
    OutOctets: 119266500
    InMcastOctets: 270212
    OutMcastOctets: 403535
    InBcastOctets: 273252
    OutBcastOctets: 110112
    InNoECTPkts: 1149218
    InECT0Pkts: 51


** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 3rd Gen Core processor DRAM Controller [8086:0154] (rev 09)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>
	Kernel driver in use: ivb_uncore

00:02.0 VGA compatible controller [0300]: Intel Corporation 3rd Gen Core processor Graphics Controller [8086:0166] (rev 09) (prog-if 00 [VGA controller])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 42
	Region 0: Memory at f0000000 (64-bit, non-prefetchable) [size=4M]
	Region 2: Memory at e0000000 (64-bit, prefetchable) [size=256M]
	Region 4: I/O ports at 4000 [size=64]
	Expansion ROM at <unassigned> [disabled]
	Capabilities: <access denied>
	Kernel driver in use: i915

00:14.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset Family USB xHCI Host Controller [8086:1e31] (rev 04) (prog-if 30 [XHCI])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 40
	Region 0: Memory at f1500000 (64-bit, non-prefetchable) [size=64K]
	Capabilities: <access denied>
	Kernel driver in use: xhci_hcd

00:16.0 Communication controller [0780]: Intel Corporation 7 Series/C210 Series Chipset Family MEI Controller #1 [8086:1e3a] (rev 04)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 43
	Region 0: Memory at f1515000 (64-bit, non-prefetchable) [size=16]
	Capabilities: <access denied>
	Kernel driver in use: mei_me

00:16.3 Serial controller [0700]: Intel Corporation 7 Series/C210 Series Chipset Family KT Controller [8086:1e3d] (rev 04) (prog-if 02 [16550])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin B routed to IRQ 19
	Region 0: I/O ports at 4090 [size=8]
	Region 1: Memory at f151b000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: serial

00:1a.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset Family USB Enhanced Host Controller #2 [8086:1e2d] (rev 04) (prog-if 20 [EHCI])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at f151a000 (32-bit, non-prefetchable) [size=1K]
	Capabilities: <access denied>
	Kernel driver in use: ehci-pci

00:1b.0 Audio device [0403]: Intel Corporation 7 Series/C210 Series Chipset Family High Definition Audio Controller [8086:1e20] (rev 04)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 44
	Region 0: Memory at f1510000 (64-bit, non-prefetchable) [size=16K]
	Capabilities: <access denied>
	Kernel driver in use: snd_hda_intel

00:1c.0 PCI bridge [0604]: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 1 [8086:1e10] (rev c4) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
	I/O behind bridge: 00003000-00003fff
	Memory behind bridge: f0d00000-f14fffff
	Prefetchable memory behind bridge: 00000000f0400000-00000000f0bfffff
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

00:1c.1 PCI bridge [0604]: Intel Corporation 7 Series/C210 Series Chipset Family PCI Express Root Port 2 [8086:1e12] (rev c4) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
	Memory behind bridge: f0c00000-f0cfffff
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

00:1d.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset Family USB Enhanced Host Controller #1 [8086:1e26] (rev 04) (prog-if 20 [EHCI])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 23
	Region 0: Memory at f1519000 (32-bit, non-prefetchable) [size=1K]
	Capabilities: <access denied>
	Kernel driver in use: ehci-pci

00:1f.0 ISA bridge [0601]: Intel Corporation QS77 Express Chipset LPC Controller [8086:1e56] (rev 04)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>
	Kernel driver in use: lpc_ich

00:1f.2 SATA controller [0106]: Intel Corporation 7 Series Chipset Family 6-port SATA Controller [AHCI mode] [8086:1e03] (rev 04) (prog-if 01 [AHCI 1.0])
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin B routed to IRQ 41
	Region 0: I/O ports at 4088 [size=8]
	Region 1: I/O ports at 409c [size=4]
	Region 2: I/O ports at 4080 [size=8]
	Region 3: I/O ports at 4098 [size=4]
	Region 4: I/O ports at 4060 [size=32]
	Region 5: Memory at f1518000 (32-bit, non-prefetchable) [size=2K]
	Capabilities: <access denied>
	Kernel driver in use: ahci

00:1f.3 SMBus [0c05]: Intel Corporation 7 Series/C210 Series Chipset Family SMBus Controller [8086:1e22] (rev 04)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin C routed to IRQ 18
	Region 0: Memory at f1514000 (64-bit, non-prefetchable) [size=256]
	Region 4: I/O ports at efa0 [size=32]
	Kernel driver in use: i801_smbus

02:00.0 System peripheral [0880]: Ricoh Co Ltd PCIe SDXC/MMC Host Controller [1180:e823] (rev 07) (prog-if 01)
	Subsystem: Lenovo Device [17aa:21f9]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at f0d00000 (32-bit, non-prefetchable) [size=256]
	Capabilities: <access denied>
	Kernel driver in use: sdhci-pci

03:00.0 Network controller [0280]: Intel Corporation Centrino Advanced-N 6205 [Taylor Peak] [8086:0085] (rev 96)
	Subsystem: Intel Corporation Device [8086:c220]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 45
	Region 0: Memory at f0c00000 (64-bit, non-prefetchable) [size=8K]
	Capabilities: <access denied>
	Kernel driver in use: iwlwifi


** USB devices:
Bus 004 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 005: ID 5986:0266 Acer, Inc 
Bus 003 Device 004: ID 0a5c:21e6 Broadcom Corp. BCM20702 Bluetooth 4.0 [ThinkPad]
Bus 003 Device 003: ID 147e:2020 Upek TouchChip Fingerprint Coprocessor (WBF advanced mode)
Bus 003 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages linux-image-3.16.0-4-amd64 depends on:
ii  debconf [debconf-2.0]                   1.5.56
ii  initramfs-tools [linux-initramfs-tool]  0.120+deb8u2
ii  kmod                                    18-3
ii  linux-base                              3.5
ii  module-init-tools                       18-3

Versions of packages linux-image-3.16.0-4-amd64 recommends:
ii  firmware-linux-free  3.3
ii  irqbalance           1.0.6-3

Versions of packages linux-image-3.16.0-4-amd64 suggests:
pn  debian-kernel-handbook  <none>
ii  extlinux                3:6.03+dfsg-5+deb8u1
ii  grub-pc                 2.02~beta2-22+deb8u1
pn  linux-doc-3.16          <none>

Versions of packages linux-image-3.16.0-4-amd64 is related to:
pn  firmware-atheros        <none>
pn  firmware-bnx2           <none>
pn  firmware-bnx2x          <none>
ii  firmware-brcm80211      0.43
pn  firmware-intelwimax     <none>
pn  firmware-ipw2x00        <none>
pn  firmware-ivtv           <none>
ii  firmware-iwlwifi        0.43
pn  firmware-libertas       <none>
ii  firmware-linux          0.43
ii  firmware-linux-nonfree  0.43
pn  firmware-myricom        <none>
pn  firmware-netxen         <none>
pn  firmware-qlogic         <none>
pn  firmware-ralink         <none>
pn  firmware-realtek        <none>
pn  xen-hypervisor          <none>

-- debconf information:
  linux-image-3.16.0-4-amd64/postinst/depmod-error-initrd-3.16.0-4-amd64: false
  linux-image-3.16.0-4-amd64/postinst/mips-initrd-3.16.0-4-amd64:
  linux-image-3.16.0-4-amd64/prerm/removing-running-kernel-3.16.0-4-amd64: true



More information about the Secure-testing-team mailing list