Your message dated Sun, 01 Nov 2026 21:14:00 +0000
with message-id <[email protected]>
and subject line Bug#1145111: fixed in linux 7.2.15-1
has caused the Debian Bug report #1145111,
regarding linux: kernel NULL pointer dereference when running libqb, rustc or
snapd testsuite
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1145111: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1145111
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: linux
Version: 7.1.9-1
Severity: important
X-Debbugs-Cc: [email protected]
User: [email protected]
Usertags: riscv64
Dear maintainers,
The rv-manda-04 build daemon got a kernel oops this morning when
building the snapd package. It currently runs a 7.1.7+deb13-riscv64
kernel. Here is the backtrace:
[265841.801920] Unable to handle kernel NULL pointer dereference at virtual
address 000000000000004c
[265841.810839] Current systemd.test pgtable: 4K pagesize, 39-bit VAs,
pgdp=0x0000000157206000
[265841.819037] [000000000000004c] pgd=0000000000000000, p4d=0000000000000000,
pud=0000000000000000
[265841.827796] Oops [#1]
[265841.830412] Modules linked in: nls_ascii nls_cp437 vfat fat ftdi_sio
usbserial onie_tlv ofpart spi_nor at24 ledtrig_default_on k1_tsensor leds_gpio
ip6t_REJECT nf_reject_ipv6 ip6table_filter ip6_tables xt_hashlimit ipt_REJECT
nf_reject_ipv4 xt_NFLOG nfnetlink_log xt_multiport xt_tcpudp xt_conntrack
nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter mtdblock mtd_blkdevs
mtd drm sch_fq tcp_bbr nvme_fabrics configfs nfnetlink efivarfs ip_tables
x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_cryptoapi mmc_spi crc7
of_mmc_spi crc_itu_t mmc_block dm_mod onboard_usb_dev xhci_plat_hcd xhci_hcd
dwc3_generic_plat dwc3 udc_core roles nvme sdhci_of_k1 realtek sdhci_pltfm
usbcore phy_package nvme_core sdhci mmc_core nvme_keyring nvme_auth k1_emac
usb_common mmp_pdma spi_fsl_qspi i2c_k1 phy_k1_usb2
[265841.907949] CPU: 1 UID: 193463271 PID: 1864225 Comm: systemd.test Not
tainted 7.1.7+deb13-riscv64 #1 PREEMPTLAZY Debian 7.1.7-1~bpo13+1
[265841.920327] Hardware name: Unknown Unknown Product/Unknown Product, BIOS
2022.10spacemit-82694-gff90af2940 10/01/2022
[265841.931104] epc : __aa_label_next_not_in_set+0x16/0xd8
[265841.936393] ra : aa_label_is_subset+0x36/0x60
[265841.940846] epc : ffffffff805bdf3e ra : ffffffff805be036 sp :
ffffffc61a6b3780
[265841.948283] gp : ffffffff822bffd0 tp : ffffffd70b013000 t0 :
ffffffff80021f28
[265841.955523] t1 : ffffffd701bfe00c t2 : ffffffff81201660 s0 :
ffffffc61a6b37c0
[265841.962803] s1 : ffffffd70c670ef8 a0 : ffffffc61a6b37c0 a1 :
ffffffd70c670ef8
[265841.970159] a2 : 0000000000000000 a3 : 0000000000000000 a4 :
0000000000000000
[265841.977384] a5 : ffffffd70c670ef8 a6 : 0000000000000000 a7 :
ffffffc61a6b35b0
[265841.984720] s2 : 0000000000000000 s3 : ffffffd70c670ef8 s4 :
ffffffd7fea14960
[265841.992508] s5 : 0000000000000000 s6 : ffffffff81663100 s7 :
0000000000000000
[265842.000004] s8 : ffffffd80384e2c0 s9 : ffffffd70425d480 s10:
ffffffd88aa61700
[265842.007363] s11: 0000000000000009 t3 : ffffffd701bfb00c t4 :
0000000000000001
[265842.014780] t5 : 0000000000000002 t6 : ffffffc61a6b35e4 ssp :
0000000000000000
[265842.022324] status: 0000000200000120 badaddr: 000000000000004c cause:
000000000000000d
[265842.030538] [<ffffffff805bdf3e>] __aa_label_next_not_in_set+0x16/0xd8
[265842.037405] [<ffffffff805be036>] aa_label_is_subset+0x36/0x60
[265842.044021] [<ffffffff805c6110>] aa_unix_file_perm+0x3b0/0x8a8
[265842.050211] [<ffffffff805c3d44>] aa_sock_file_perm+0x74/0x88
[265842.056193] [<ffffffff805bc18c>] aa_file_perm+0x424/0x4c8
[265842.061895] [<ffffffff805b6eac>] apparmor_file_permission+0x54/0x200
[265842.068511] [<ffffffff80558eb4>] security_file_permission+0x5c/0x150
[265842.075262] [<ffffffff8042b9d0>] rw_verify_area+0x48/0x140
[265842.080991] [<ffffffff8042e186>] vfs_write+0x7e/0x4f0
[265842.086084] [<ffffffff8042e7c8>] ksys_write+0xb8/0xe8
[265842.091150] [<ffffffff8042e818>] __riscv_sys_write+0x20/0x30
[265842.096858] [<ffffffff80d0d7c6>] do_trap_ecall_u+0x156/0x520
[265842.102608] [<ffffffff80d202ec>] handle_exception+0x16c/0x178
[265842.108308] Code: ffa6 0013 0000 7139 f822 fc06 f04a 0080 2903 0045 (4678)
5b63
[265842.116173] ---[ end trace 0000000000000000 ]---
[265842.120608] note: systemd.test[1864225] exited with preempt_count 1
[265862.805959] rcu: INFO: rcu_sched self-detected stall on CPU
[265862.811445] rcu: 4-....: (5248 ticks this GP)
idle=ddac/1/0x4000000000000000 softirq=29553384/29553384 fqs=2387
[265862.821649] rcu: (t=5253 jiffies g=30403905 q=244873 ncpus=8)
I have been able to reproduce it on another system running the same
kernel, but not when running a manually build 7.1.4 kernel. I have then
been able to reproduce it on a amd64 system running a 7.1.9+deb14-amd64
kernel. I therefore *suspect* the issue have been introduced by one of
the many apparmor fixes that went in 7.1.5. Here is the corresponding
amd64 backtrace:
[ 3686.682567] BUG: kernel NULL pointer dereference, address: 000000000000004c
[ 3686.684051] #PF: supervisor read access in kernel mode
[ 3686.685078] #PF: error_code(0x0000) - not-present page
[ 3686.685949] PGD 0 P4D 0
[ 3686.685949] Oops: Oops: 0000 [#1] SMP NOPTI
[ 3686.685949] CPU: 3 UID: 428679 PID: 319766 Comm: systemd.test Not tainted
7.1.9+deb14-amd64 #1 PREEMPT(lazy) Debian 7.1.9-1
[ 3686.685949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS
2025.11-5 04/03/2026
[ 3686.685949] RIP: 0010:__aa_label_next_not_in_set+0xb/0xd0
[ 3686.685949] Code: f0 e9 e4 14 79 ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90
90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 0f 1f 44 00 00 41 57 <8b> 42 4c
49 89 f7 41 56 49 89 d6 41 55 49 89 fd 41 54 55 53 8b 6f
[ 3686.685949] RSP: 0018:ffffd06109cf3888 EFLAGS: 00010213
[ 3686.685949] RAX: ffff89b1a103a8f8 RBX: ffff89b1af0421e0 RCX: ffffd06109cf3780
[ 3686.685949] RDX: 0000000000000000 RSI: ffff89b1a103a8f8 RDI: ffffd06109cf3898
[ 3686.685949] RBP: ffffd06109cf3940 R08: ffff89b183a26300 R09: 0000000000000000
[ 3686.685949] R10: 0000000000000000 R11: ffff89b1a103b600 R12: 0000000000000000
[ 3686.685949] R13: ffff89b1a103a8f8 R14: ffff89b1a103a8f8 R15: ffff89b183a26680
[ 3686.685949] FS: 00007f30a3aa5780(0000) GS:ffff89b350cef000(0000)
knlGS:0000000000000000
[ 3686.685949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3686.685949] CR2: 000000000000004c CR3: 000000000235e000 CR4: 0000000000750ef0
[ 3686.685949] PKRU: 55555554
[ 3686.685949] Call Trace:
[ 3686.685949] <TASK>
[ 3686.685949] aa_label_is_subset+0x3f/0x70
[ 3686.685949] aa_unix_file_perm+0x5e8/0x9d0
[ 3686.685949] aa_file_perm+0x45a/0x550
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? aa_do_perms+0xc6/0x120
[ 3686.685949] apparmor_file_permission+0x44/0xb0
[ 3686.685949] security_file_permission+0x40/0x100
[ 3686.685949] rw_verify_area+0x56/0x180
[ 3686.685949] vfs_write+0x7c/0x480
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ksys_write+0xbf/0xf0
[ 3686.685949] do_syscall_64+0xe1/0x640
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? aa_match_to_prot+0xab/0x150
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? aa_do_perms+0xc6/0x120
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? aa_unix_label_sk_perm.part.0.isra.0+0x142/0x1f0
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? __check_object_size+0x48/0x220
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? move_addr_to_user+0xe7/0x110
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? do_getsockname+0x7b/0xb0
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? __sys_getsockname+0x7f/0xb0
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? do_syscall_64+0x11e/0x640
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? sock_alloc_file+0x63/0xc0
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? __sys_socket+0xd0/0x100
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? srso_alias_return_thunk+0x5/0xfbef5
[ 3686.685949] ? do_syscall_64+0x98/0x640
[ 3686.685949] ? exc_page_fault+0x82/0x1d0
[ 3686.685949] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 3686.685949] RIP: 0033:0x55ad1c8928ae
[ 3686.685949] Code: ff cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc
cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01
f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48
[ 3686.685949] RSP: 002b:00002b7a7ff63420 EFLAGS: 00000216 ORIG_RAX:
0000000000000001
[ 3686.685949] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000055ad1c8928ae
[ 3686.685949] RDX: 0000000000000009 RSI: 00002b7a7ff636b8 RDI: 0000000000000008
[ 3686.685949] RBP: 00002b7a7ff63460 R08: 0000000000000000 R09: 0000000000000000
[ 3686.685949] R10: 0000000000000000 R11: 0000000000000216 R12: 00002b7a7ff63590
[ 3686.685949] R13: 00002b7a7fe121a8 R14: 00002b7a7ff04f00 R15: ffffffffffffffff
[ 3686.685949] </TASK>
[ 3686.685949] Modules linked in: overlay nls_ascii nls_cp437 vfat fat bridge
stp llc nfnetlink cfg80211 rfkill intel_rapl_msr intel_rapl_common binfmt_misc
kvm_amd ccp kvm irqbypass aesni_intel gf128mul virtio_balloon pcspkr button
joydev evdev sg vhost_net vhost tun nbd vhost_iotlb drm loop tap msr cpuid
efi_pstore configfs efivarfs qemu_fw_cfg vsock_loopback
vmw_vsock_virtio_transport vmw_vsock_virtio_transport_common vsock virtio_rng
autofs4 ext4 crc16 mbcache jbd2 crc32c_cryptoapi lz4 lz4_compress dm_mod ahci
sd_mod iTCO_wdt libahci intel_pmc_bxt watchdog virtio_net libata virtio_scsi
net_failover psmouse scsi_mod serio_raw failover i2c_i801 scsi_common i2c_smbus
lpc_ich
[ 3686.765532] CR2: 000000000000004c
[ 3686.765532] ---[ end trace 0000000000000000 ]---
Regards
Aurelien
--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 7.2.15-1
Done: Salvatore Bonaccorso <[email protected]>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <[email protected]> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 01 Nov 2026 20:31:07 +0100
Source: linux
Architecture: source
Version: 7.2.15-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <[email protected]>
Changed-By: Salvatore Bonaccorso <[email protected]>
Closes: 1145111
Changes:
linux (7.2.15-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.15
- ksmbd: wait for negotiation before receiving another PDU
- smb: smbdirect: don't wait for RDMA_CM_EVENT_DISCONNECTED in
smbdirect_socket_destroy_sync()
- smb: smbdirect: release failed pending sockets of a listener
- smb: smbdirect: don't hand out already failed sockets in
smbdirect_socket_accept()
- iio: hid-sensor: als: scale each channel individually
- kbuild: link-vmlinux.sh: improve detection of third pass requirement
- exec: cancel io_uring requests before de_thread()
- fork: move the coredump and exec checks into create_io_thread()
- fork: don't create io threads once PF_POSTCOREDUMP is set
- Bluetooth: forget a peer's RPA once it advertises its identity address
.
[ Salvatore Bonaccorso ]
* apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
(Closes: #1145111)
Checksums-Sha1:
d77a7d4710036c3d5daaef04809a31680cb5d741 189644 linux_7.2.15-1.dsc
7c9a203210aa833f13d97fd3c2f8bbbde327ed5c 163755260 linux_7.2.15.orig.tar.xz
38d101b19bf6469bbf90cf2ced59433d99ebaa9b 1506204 linux_7.2.15-1.debian.tar.xz
bbf3525c4ab366965e92ef2470c5b8bc01c136ee 6042 linux_7.2.15-1_source.buildinfo
Checksums-Sha256:
bf29dea02694b7eb75c1602ffe4bbf24763b7eb25abeab9741c2c5ee3e4adca9 189644
linux_7.2.15-1.dsc
1ce410448c433a807735e38f7e1c8ee48026467faa44e9c4e60072a1f99e971d 163755260
linux_7.2.15.orig.tar.xz
31e81b9fc091a2af15ad40200441a6e0de79f852a0accef2894c928afd26f7ca 1506204
linux_7.2.15-1.debian.tar.xz
4277f1f17f415e299230cf420dfc466e639715dc861a803816505f3c69c7b8d4 6042
linux_7.2.15-1_source.buildinfo
Files:
134feb261af1d4ef2413601f312de23a 189644 kernel optional linux_7.2.15-1.dsc
967d57e1330244b765de5d2bc13af3a7 163755260 kernel optional
linux_7.2.15.orig.tar.xz
9bbb60ac01d638a7da03f23ccb85f688 1506204 kernel optional
linux_7.2.15-1.debian.tar.xz
638627aa02f32b67d36a8dd7302afdb9 6042 kernel optional
linux_7.2.15-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmrnlq5fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EsJ8P/Rh1gRbd8xkDCn5eNM4t754N5PSXyoHQ
c65oHPM0ARcmbfrPBkLGWIcDQr1We54dVawdFA0fAGbS894dTBSOLuJPPx7oxQi1
EETBgCVTfDzJxKAg5xLfHy0K76TZowdqMfr4cbKOwf9imYxdgalOn1pJeBQktH9Q
e6TCJuO6PbdPddmfheOQYg2MpUGdvdu74LyOJPV0ln3JCWc+r3hDriOD49OU0R+f
FEecHv7eF4opqLVmtGXl6LT9/S9RuIaCKwIoDmz1ggvz7PEyDOhIE/w3gAnovhXI
doaBsLo6X+KFPUeWNDK2Jpr/55FJaYTvd6CkRrQP/hJmvtOI6tqfrUCXRR3bgO/X
AYakAPndQBr1pD4dlynrlEHsSQlUNELyS6J9c6wVLltQCgHKaWDuYKSh48aPdgjp
eLKcyMH9gb8ijzxfQRWwc4qJ+JT/DxOB5IwX2b/GuGuQ1t9EFcPi26y/jBGzqZNx
7VQCh6SdQ0uFIgLf02KHXc/IhDDN9euPiAfEYBmKl4DE8z5OC4qKkMY67fR18pZ8
KP+bW3fqV/rRCNFcgvHH3YgmQD+ecOM5iM60Bv8tlabBl6NIPhQNwt2SVYs8bKbS
YY1bWRy2v/jkMKDHXLd1r0Og373k8xZtEqSKcBiLkuZ3LOS/C8AJFju/takTh+RA
Z46HldkpGr98
=j47U
-----END PGP SIGNATURE-----
pgp_wm6_2Cuy5.pgp
Description: PGP signature
--- End Message ---
