[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#839671: linux-image-4.7.0-1-amd64: NEWS should document conntrack policy changes



Package: src:linux
Version: 4.7.5-1
Severity: normal

The 4.7 kernel seems to have MASSIVELY changed how firewalls are allowed to
use conntrack modules by default, rendering many common firewall
configurations invalid in significant ways.

This should be called out in the NEWS (possibly conditional on having some
common firewall tools installed or something?) so that administrators are
not caught by surprise.

More info:

http://www.spinics.net/lists/netfilter/msg56874.html

https://home.regit.org/netfilter-en/secure-use-of-helpers/


-- Package-specific info:
** Version:
Linux version 4.7.0-1-amd64 (debian-kernel@lists.debian.org) (gcc version 5.4.1 20160904 (Debian 5.4.1-2) ) #1 SMP Debian 4.7.5-1 (2016-09-26)

** Command line:
BOOT_IMAGE=/vmlinuz-4.7.0-1-amd64 root=/dev/mapper/harkonnen-root ro reboot=pci cgroup_enable=memory swapaccount=1 quiet

** Tainted: OE (12288)
 * Out-of-tree module has been loaded.
 * Unsigned module has been loaded.

** Kernel log:
[   25.836274] nf_tables: (c) 2007-2009 Patrick McHardy <kaber@trash.net>
[   26.185996] eth1br: port 1(eth1) entered forwarding state
[   26.186005] eth1br: topology change detected, propagating
[   27.365910] systemd[1]: apt-daily.timer: Adding 4h 25min 38.321890s random time.
[   28.263668] systemd[1]: apt-daily.timer: Adding 8h 50min 1.016862s random time.
[   39.086611] FS-Cache: Loaded
[   39.094549] FS-Cache: Netfs 'nfs' registered for caching
[   39.185329] Key type dns_resolver registered
[   39.202051] NFS: Registering the id_resolver key type
[   39.202063] Key type id_resolver registered
[   39.202064] Key type id_legacy registered
[   97.928816] NET: Unregistered protocol family 40
[  103.103052] vmmon: module verification failed: signature and/or required key missing - tainting kernel
[  103.104294] /dev/vmmon[10438]: Module vmmon: registered with major=10 minor=165
[  103.104297] /dev/vmmon[10438]: Using tsc_khz as TSC frequency: 3591682
[  103.104298] /dev/vmmon[10438]: Module vmmon: initialized
[  103.112243] Guest personality initialized and is inactive
[  103.112286] VMCI host device registered (name=vmci, major=10, minor=57)
[  103.112287] Initialized host personality
[  103.126305] NET: Registered protocol family 40
[  103.327626] /dev/vmnet: open called by PID 10585 (vmnet-bridge)
[  103.327633] /dev/vmnet: hub 0 does not exist, allocating memory.
[  103.327646] /dev/vmnet: port on hub 0 successfully opened
[  103.327652] bridge-eth0: up
[  103.327655] bridge-eth0: attached
[  103.328527] /dev/vmnet: open called by PID 10587 (vmnet-bridge)
[  103.328530] /dev/vmnet: hub 1 does not exist, allocating memory.
[  103.328538] /dev/vmnet: port on hub 1 successfully opened
[  103.328541] bridge-eth1br: up
[  103.328542] bridge-eth1br: attached
[  152.941930] /dev/vmmon[13596]: PTSC: initialized at 4000000000 Hz using TSC, TSCs are synchronized.
[  153.014435] /dev/vmmon[13596]: Monitor IPI vector: ff
[  153.014437] /dev/vmmon[13596]: HV      IPI vector: f2
[  153.529637] /dev/vmnet: open called by PID 13648 (vmx-vcpu-0)
[  153.529645] device eth1br entered promiscuous mode
[  153.529699] bridge-eth1br: enabled promiscuous mode
[  153.529701] /dev/vmnet: port on hub 1 successfully opened
[  600.892487] usb 3-4.1.1: USB disconnect, device number 9
[ 1074.401746] usb 3-4.1.1: new high-speed USB device number 17 using xhci_hcd
[ 1074.506571] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee1
[ 1074.506573] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.506575] usb 3-4.1.1: Product: Nexus 6P
[ 1074.506575] usb 3-4.1.1: Manufacturer: Huawei
[ 1074.506576] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[ 9528.592627] EXT4-fs (dm-17): write access unavailable, skipping orphan cleanup
[ 9528.592629] EXT4-fs (dm-17): recovery complete
[ 9528.592631] EXT4-fs (dm-17): mounted filesystem with ordered data mode. Opts: (null)
[ 9528.617423] EXT4-fs (dm-11): mounted filesystem with ordered data mode. Opts: (null)
[ 9528.634692] EXT4-fs (dm-14): write access unavailable, skipping orphan cleanup
[ 9528.634694] EXT4-fs (dm-14): recovery complete
[ 9528.634696] EXT4-fs (dm-14): mounted filesystem with ordered data mode. Opts: (null)
[ 9528.646217] EXT4-fs (dm-20): mounted filesystem with ordered data mode. Opts: (null)
[ 9998.097187] usb 3-4.1.1: USB disconnect, device number 17
[ 9998.309217] usb 3-4.1.1: new high-speed USB device number 18 using xhci_hcd
[ 9998.410986] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee2
[ 9998.410989] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 9998.410990] usb 3-4.1.1: Product: Nexus 6P
[ 9998.410991] usb 3-4.1.1: Manufacturer: Huawei
[ 9998.410993] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[10023.951019] usb 3-4.1.1: USB disconnect, device number 18
[10024.163247] usb 3-4.1.1: new high-speed USB device number 19 using xhci_hcd
[10024.264508] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee1
[10024.264510] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[10024.264511] usb 3-4.1.1: Product: Nexus 6P
[10024.264512] usb 3-4.1.1: Manufacturer: Huawei
[10024.264513] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[10084.358907] usb 3-4.1.1: reset high-speed USB device number 19 using xhci_hcd
[10084.546830] usb 3-4.1.1: reset high-speed USB device number 19 using xhci_hcd
[10951.358860] usb 3-4.1.1: USB disconnect, device number 19
[11505.495141] usb 3-4.1.1: new high-speed USB device number 20 using xhci_hcd
[11505.596103] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee1
[11505.596106] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[11505.596107] usb 3-4.1.1: Product: Nexus 6P
[11505.596108] usb 3-4.1.1: Manufacturer: Huawei
[11505.596109] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[11517.581994] usb 3-4.1.1: USB disconnect, device number 20
[11517.794202] usb 3-4.1.1: new high-speed USB device number 21 using xhci_hcd
[11517.894903] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee2
[11517.894906] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[11517.894907] usb 3-4.1.1: Product: Nexus 6P
[11517.894908] usb 3-4.1.1: Manufacturer: Huawei
[11517.894908] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[11915.115674] usb 3-4.1.1: USB disconnect, device number 21
[11915.336106] usb 3-4.1.1: new high-speed USB device number 22 using xhci_hcd
[11915.438001] usb 3-4.1.1: New USB device found, idVendor=18d1, idProduct=4ee1
[11915.438004] usb 3-4.1.1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[11915.438005] usb 3-4.1.1: Product: Nexus 6P
[11915.438005] usb 3-4.1.1: Manufacturer: Huawei
[11915.438006] usb 3-4.1.1: SerialNumber: 5VT7N15A24002460
[11975.535697] usb 3-4.1.1: reset high-speed USB device number 22 using xhci_hcd
[11975.723720] usb 3-4.1.1: reset high-speed USB device number 22 using xhci_hcd
[13577.988380] Bluetooth: Core ver 2.21
[13577.988417] NET: Registered protocol family 31
[13577.988418] Bluetooth: HCI device and connection manager initialized
[13577.988421] Bluetooth: HCI socket layer initialized
[13577.988423] Bluetooth: L2CAP socket layer initialized
[13577.988427] Bluetooth: SCO socket layer initialized
[13592.045512] device eth0 entered promiscuous mode
[13956.123468] device eth0 left promiscuous mode
[13956.289996] device eth0 entered promiscuous mode

** Model information
sys_vendor: System76, Inc.
product_name: Wild Dog Performance
product_version: wilp11
chassis_vendor: System76, Inc.
chassis_version: wilp11
bios_vendor: American Megatrends Inc.
bios_version: 2202
board_vendor: ASUSTeK COMPUTER INC.
board_name: H97-PLUS
board_version: Rev X.0x

** Loaded modules:
nfnetlink_queue
nfnetlink_log
bluetooth
cfg80211
iptable_mangle
dm_snapshot
dm_bufio
vmnet(OE)
parport_pc
vmw_vsock_vmci_transport
vsock
vmw_vmci
vmmon(OE)
rpcsec_gss_krb5
nfsv4
dns_resolver
nfs
fscache
xt_multiport
nf_log_ipv4
nf_log_common
xt_LOG
xt_tcpudp
ipt_MASQUERADE
ebtable_nat
ebt_snat
ebt_dnat
nf_nat_pptp
nf_nat_masquerade_ipv4
nf_nat_h323
iptable_nat
nf_nat_proto_gre
nft_chain_nat_ipv4
nf_nat_ipv4
nf_nat_snmp_basic
nft_nat
nf_nat_tftp
nf_nat_ftp
nf_nat_proto_sctp
nf_nat_sip
nf_nat_irc
nf_nat_redirect
nf_nat_amanda
nf_nat_proto_dccp
xt_nat
nf_nat_proto_udplite
act_nat
ip6table_nat
nft_chain_nat_ipv6
nf_tables
nf_nat_masquerade_ipv6
nf_conntrack_ipv6
nf_defrag_ipv6
nf_nat_ipv6
nf_nat
nf_conntrack_ipv4
nf_defrag_ipv4
nf_conntrack_sip
nf_conntrack_proto_dccp
nf_conntrack_snmp
xt_conntrack
nf_conntrack_netbios_ns
nf_conntrack_netlink
nfnetlink
nf_conntrack_ftp
nf_conntrack_tftp
nf_conntrack_irc
nf_conntrack_proto_sctp
nf_conntrack_broadcast
nf_conntrack_pptp
nf_conntrack_proto_udplite
nf_conntrack_h323
ts_kmp
nf_conntrack_amanda
nf_conntrack_proto_gre
nf_conntrack_sane
nf_conntrack
fuse
cpufreq_userspace
cpufreq_powersave
cpufreq_conservative
cpufreq_stats
veth
ebtable_filter
ebtables
ip6table_filter
ip6_tables
iptable_filter
ip_tables
x_tables
bridge
stp
llc
binfmt_misc
snd_hda_codec_realtek
snd_hda_codec_generic
snd_hda_codec_hdmi
intel_rapl
x86_pkg_temp_thermal
intel_powerclamp
pl2303
joydev
cdc_acm
iTCO_wdt
eeepc_wmi
iTCO_vendor_support
asus_wmi
sparse_keymap
rfkill
mxm_wmi
evdev
mos7840
usbserial
kvm_intel
i915
kvm
irqbypass
crct10dif_pclmul
crc32_pclmul
ghash_clmulni_intel
drm_kms_helper
snd_hda_intel
snd_soc_rt5640
snd_hda_codec
snd_soc_ssm4567
snd_soc_rl6231
pcspkr
serio_raw
drm
snd_soc_core
snd_hda_core
lpc_ich
sg
snd_hwdep
i2c_algo_bit
shpchp
mfd_core
i2c_i801
battery
mei_me
snd_compress
mei
tpm_infineon
snd_pcm
video
snd_timer
wmi
elan_i2c
snd
soundcore
snd_soc_sst_acpi
powermate
snd_soc_sst_match
dw_dmac
dw_dmac_core
i2c_designware_platform
i2c_designware_core
acpi_pad
tpm_tis
button
tpm
asix
usbnet
libphy
sch_fq_codel
coretemp
loop
firewire_sbp2
firewire_core
crc_itu_t
ppdev
lp
nfsd
parport
auth_rpcgss
nfs_acl
lockd
grace
sunrpc
autofs4
ext4
ecb
crc16
jbd2
mbcache
hid_logitech_hidpp
hid_logitech_dj
btrfs
raid10
raid456
async_raid6_recov
async_memcpy
async_pq
async_xor
async_tx
xor
raid6_pq
libcrc32c
crc32c_generic
raid1
multipath
linear
hid_generic
usbhid
dm_mod
raid0
md_mod
sr_mod
cdrom
sd_mod
crc32c_intel
aesni_intel
ahci
aes_x86_64
glue_helper
lrw
libahci
gf128mul
ablk_helper
cryptd
libata
psmouse
scsi_mod
xhci_pci
xhci_hcd
r8169
ehci_pci
ehci_hcd
mii
usbcore
usb_common
thermal
fan
fjes
sdhci_acpi
sdhci
i2c_hid
hid
mmc_core

** Network interface configuration:

auto lo
iface lo inet loopback







** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 54:a0:50:56:e2:d5 brd ff:ff:ff:ff:ff:ff
    inet 172.22.1.195/20 brd 172.22.15.255 scope global dynamic eth0
       valid_lft 12545sec preferred_lft 12545sec
    inet6 fe80::56a0:50ff:fe56:e2d5/64 scope link 
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel master eth1br state UP group default qlen 1000
    link/ether 00:0e:c6:89:a7:4a brd ff:ff:ff:ff:ff:ff
4: eth1br: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:0e:c6:89:a7:4a brd ff:ff:ff:ff:ff:ff
    inet 192.168.0.1/24 brd 192.168.0.255 scope global eth1br
       valid_lft forever preferred_lft forever
    inet6 fe80::20e:c6ff:fe89:a74a/64 scope link 
       valid_lft forever preferred_lft forever

*** Device statistics:
Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
  eth0: 4258846145 3289991    0    0    0     0          0     65647 374963155 1271667    0    0    0     0       0          0
  eth1: 1137153895 2449724    0  472    0     0          0         0 3281709791 2564223    0    0    0     0       0          0
eth1br: 1136475338 2435052    0    0    0     0          0         0 3271452151 2564209    0    0    0     0       0          0
    lo: 55967376  209817    0    0    0     0          0         0 55967376  209817    0    0    0     0       0          0

*** Protocol statistics:
Ip:
    Forwarding: 1
    4019098 total packets received
    5 with invalid headers
    15 with invalid addresses
    1839803 forwarded
    0 incoming packets discarded
    2151156 incoming packets delivered
    2726297 requests sent out
    8 outgoing packets dropped
    1 fragments dropped after timeout
    849 reassemblies required
    169 packets reassembled ok
    1 packet reassembles failed
Icmp:
    2065 ICMP messages received
    2 input ICMP message failed.
    ICMP input histogram:
        destination unreachable: 149
        timeout in transit: 456
        echo replies: 1460
    1837 ICMP messages sent
    0 ICMP messages failed
    ICMP output histogram:
        destination unreachable: 321
        time exceeded: 2
        echo request: 1514
IcmpMsg:
        InType0: 1460
        InType3: 149
        InType11: 456
        OutType3: 321
        OutType8: 1514
        OutType11: 2
Tcp:
    12809 active connections openings
    8122 passive connection openings
    1253 failed connection attempts
    247 connection resets received
    47 connections established
    868317 segments received
    848293 segments send out
    937 segments retransmited
    4 bad segments received.
    587 resets sent
Udp:
    1332442 packets received
    188 packets to unknown port received.
    0 packet receive errors
    35421 packets sent
    0 receive buffer errors
    0 send buffer errors
    IgnoredMulti: 5333
UdpLite:
TcpExt:
    9552 TCP sockets finished time wait in fast timer
    30 packets rejects in established connections because of timestamp
    19740 delayed acks sent
    16 delayed acks further delayed because of locked socket
    Quick ack mode was activated 892 times
    85725 packets directly queued to recvmsg prequeue.
    3040 bytes directly in process context from backlog
    TCPDirectCopyFromPrequeue: 4863009
    504651 packet headers predicted
    61380 packets header predicted and directly queued to user
    51960 acknowledgments not containing data payload received
    182154 predicted acknowledgments
    TCPSackRecovery: 195
    Detected reordering 1 times using SACK
    Detected reordering 22 times using time stamp
    35 congestion windows fully recovered without slow start
    104 congestion windows partially recovered using Hoe heuristic
    TCPDSACKUndo: 6
    24 congestion windows recovered without slow start after partial ack
    TCPLostRetransmit: 1
    TCPSackFailures: 14
    2 timeouts in loss state
    242 fast retransmits
    2 forward retransmits
    5 retransmits in slow start
    TCPTimeouts: 74
    TCPLossProbes: 537
    TCPLossProbeRecovery: 83
    TCPSackRecoveryFail: 6
    TCPDSACKOldSent: 900
    TCPDSACKRecv: 289
    TCPDSACKOfoRecv: 1
    151 connections reset due to unexpected data
    224 connections reset due to early user close
    5 connections aborted due to timeout
    TCPDSACKIgnoredNoUndo: 153
    TCPSpuriousRTOs: 5
    TCPSackShiftFallback: 2520
    TCPRcvCoalesce: 93789
    TCPOFOQueue: 17322
    TCPChallengeACK: 4
    TCPSYNChallenge: 4
    TCPSpuriousRtxHostQueues: 2
    TCPAutoCorking: 7911
    TCPFromZeroWindowAdv: 1
    TCPToZeroWindowAdv: 1
    TCPWantZeroWindowAdv: 2
    TCPSynRetrans: 57
    TCPOrigDataSent: 391602
    TCPHystartTrainDetect: 11
    TCPHystartTrainCwnd: 339
    TCPHystartDelayDetect: 5
    TCPHystartDelayCwnd: 209
    TCPACKSkippedPAWS: 2
    TCPACKSkippedSeq: 4
    TCPKeepAlive: 4840
IpExt:
    InMcastPkts: 35877
    OutMcastPkts: 263
    InBcastPkts: 15756
    OutBcastPkts: 1697
    InOctets: 4569155356
    OutOctets: 6909187055
    InMcastOctets: 8587577
    OutMcastOctets: 41621
    InBcastOctets: 2318424
    OutBcastOctets: 288382
    InCsumErrors: 3
    InNoECTPkts: 5324005
    InECT1Pkts: 2


** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 4th Gen Core Processor DRAM Controller [8086:0c00] (rev 06)
	Subsystem: ASUSTeK Computer Inc. 4th Gen Core Processor DRAM Controller [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>
	Kernel driver in use: hsw_uncore

00:01.0 PCI bridge [0604]: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor PCI Express x16 Controller [8086:0c01] (rev 06) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 26
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport
	Kernel modules: shpchp

00:02.0 VGA compatible controller [0300]: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller [8086:0412] (rev 06) (prog-if 00 [VGA controller])
	DeviceName:  Onboard IGD
	Subsystem: ASUSTeK Computer Inc. Xeon E3-1200 v3/4th Gen Core Processor Integrated Graphics Controller [1043:8534]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 31
	Region 0: Memory at f7800000 (64-bit, non-prefetchable) [size=4M]
	Region 2: Memory at e0000000 (64-bit, prefetchable) [size=256M]
	Region 4: I/O ports at f000 [size=64]
	[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
	Capabilities: <access denied>
	Kernel driver in use: i915
	Kernel modules: i915

00:03.0 Audio device [0403]: Intel Corporation Xeon E3-1200 v3/4th Gen Core Processor HD Audio Controller [8086:0c0c] (rev 06)
	Subsystem: ASUSTeK Computer Inc. Xeon E3-1200 v3/4th Gen Core Processor HD Audio Controller [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 33
	Region 0: Memory at f7d14000 (64-bit, non-prefetchable) [size=16K]
	Capabilities: <access denied>
	Kernel driver in use: snd_hda_intel
	Kernel modules: snd_hda_intel

00:14.0 USB controller [0c03]: Intel Corporation 9 Series Chipset Family USB xHCI Controller [8086:8cb1] (prog-if 30 [XHCI])
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family USB xHCI Controller [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 28
	Region 0: Memory at f7d00000 (64-bit, non-prefetchable) [size=64K]
	Capabilities: <access denied>
	Kernel driver in use: xhci_hcd
	Kernel modules: xhci_pci

00:16.0 Communication controller [0780]: Intel Corporation 9 Series Chipset Family ME Interface #1 [8086:8cba]
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family ME Interface [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 30
	Region 0: Memory at f7d1d000 (64-bit, non-prefetchable) [size=16]
	Capabilities: <access denied>
	Kernel driver in use: mei_me
	Kernel modules: mei_me

00:1a.0 USB controller [0c03]: Intel Corporation 9 Series Chipset Family USB EHCI Controller #2 [8086:8cad] (prog-if 20 [EHCI])
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family USB EHCI Controller [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 20
	Region 0: Memory at f7d1b000 (32-bit, non-prefetchable) [size=1K]
	Capabilities: <access denied>
	Kernel driver in use: ehci-pci
	Kernel modules: ehci_pci

00:1b.0 Audio device [0403]: Intel Corporation 9 Series Chipset Family HD Audio Controller [8086:8ca0]
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family HD Audio Controller [1043:8616]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 32
	Region 0: Memory at f7d10000 (64-bit, non-prefetchable) [size=16K]
	Capabilities: <access denied>
	Kernel driver in use: snd_hda_intel
	Kernel modules: snd_hda_intel

00:1c.0 PCI bridge [0604]: Intel Corporation 9 Series Chipset Family PCI Express Root Port 1 [8086:8c90] (rev d0) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 16
	Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport
	Kernel modules: shpchp

00:1c.2 PCI bridge [0604]: Intel Corporation 9 Series Chipset Family PCI Express Root Port 3 [8086:8c94] (rev d0) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin C routed to IRQ 18
	Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
	I/O behind bridge: 0000e000-0000efff
	Memory behind bridge: f7c00000-f7cfffff
	Prefetchable memory behind bridge: 00000000f0000000-00000000f00fffff
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport
	Kernel modules: shpchp

00:1c.3 PCI bridge [0604]: Intel Corporation 82801 PCI Bridge [8086:244e] (rev d0) (prog-if 01 [Subtractive decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin D routed to IRQ 15
	Bus: primary=00, secondary=04, subordinate=05, sec-latency=0
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>

00:1d.0 USB controller [0c03]: Intel Corporation 9 Series Chipset Family USB EHCI Controller #1 [8086:8ca6] (prog-if 20 [EHCI])
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family USB EHCI Controller [1043:8534]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 23
	Region 0: Memory at f7d1a000 (32-bit, non-prefetchable) [size=1K]
	Capabilities: <access denied>
	Kernel driver in use: ehci-pci
	Kernel modules: ehci_pci

00:1f.0 ISA bridge [0601]: Intel Corporation 9 Series Chipset Family H97 Controller [8086:8cc6]
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family H97 Controller [1043:8534]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>
	Kernel driver in use: lpc_ich
	Kernel modules: lpc_ich

00:1f.2 SATA controller [0106]: Intel Corporation 9 Series Chipset Family SATA Controller [AHCI Mode] [8086:8c82] (prog-if 01 [AHCI 1.0])
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family SATA Controller [AHCI Mode] [1043:8534]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin B routed to IRQ 29
	Region 0: I/O ports at f0b0 [size=8]
	Region 1: I/O ports at f0a0 [size=4]
	Region 2: I/O ports at f090 [size=8]
	Region 3: I/O ports at f080 [size=4]
	Region 4: I/O ports at f060 [size=32]
	Region 5: Memory at f7d19000 (32-bit, non-prefetchable) [size=2K]
	Capabilities: <access denied>
	Kernel driver in use: ahci
	Kernel modules: ahci

00:1f.3 SMBus [0c05]: Intel Corporation 9 Series Chipset Family SMBus Controller [8086:8ca2]
	Subsystem: ASUSTeK Computer Inc. 9 Series Chipset Family SMBus Controller [1043:8534]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin C routed to IRQ 18
	Region 0: Memory at f7d18000 (64-bit, non-prefetchable) [size=256]
	Region 4: I/O ports at f040 [size=32]
	Kernel driver in use: i801_smbus
	Kernel modules: i2c_i801

03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [10ec:8168] (rev 11)
	Subsystem: ASUSTeK Computer Inc. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [1043:859e]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 27
	Region 0: I/O ports at e000 [size=256]
	Region 2: Memory at f7c00000 (64-bit, non-prefetchable) [size=4K]
	Region 4: Memory at f0000000 (64-bit, prefetchable) [size=16K]
	Capabilities: <access denied>
	Kernel driver in use: r8169
	Kernel modules: r8169

04:00.0 PCI bridge [0604]: ASMedia Technology Inc. ASM1083/1085 PCIe to PCI Bridge [1b21:1080] (rev 04) (prog-if 01 [Subtractive decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 64 bytes
	Interrupt: pin A routed to IRQ 15
	Bus: primary=04, secondary=05, subordinate=05, sec-latency=32
	Secondary status: 66MHz+ FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>


** USB devices:
Bus 002 Device 002: ID 8087:8001 Intel Corp. 
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 8087:8009 Intel Corp. 
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 003: ID 2109:0812 VIA Labs, Inc. VL812 Hub
Bus 004 Device 002: ID 2109:0812 VIA Labs, Inc. VL812 Hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 007: ID 0b95:1780 ASIX Electronics Corp. AX88178
Bus 003 Device 005: ID 239a:0001  
Bus 003 Device 008: ID 077d:0410 Griffin Technology PowerMate
Bus 003 Device 022: ID 18d1:4ee1 Google Inc. Nexus 4 / 10
Bus 003 Device 006: ID 2109:2812 VIA Labs, Inc. VL812 Hub
Bus 003 Device 004: ID 2109:2812 VIA Labs, Inc. VL812 Hub
Bus 003 Device 003: ID 046d:c52b Logitech, Inc. Unifying Receiver
Bus 003 Device 016: ID 067b:2303 Prolific Technology, Inc. PL2303 Serial Port
Bus 003 Device 015: ID 0557:2008 ATEN International Co., Ltd UC-232A Serial Port [pl2303]
Bus 003 Device 014: ID 1781:0938 Multiple Vendors Iguanaworks USB IR Transceiver
Bus 003 Device 013: ID 9710:7840 MosChip Semiconductor MCS7820/MCS7840 2/4 port serial adapter
Bus 003 Device 012: ID 1781:0938 Multiple Vendors Iguanaworks USB IR Transceiver
Bus 003 Device 011: ID 1a40:0101 Terminus Technology Inc. Hub
Bus 003 Device 010: ID 1a40:0201 Terminus Technology Inc. FE 2.1 7-port Hub
Bus 003 Device 002: ID 045e:07a5 Microsoft Corp. Wireless Receiver 1461C
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages linux-image-4.7.0-1-amd64 depends on:
ii  initramfs-tools [linux-initramfs-tool]  0.125
ii  kmod                                    22-1.1
ii  linux-base                              4.5

Versions of packages linux-image-4.7.0-1-amd64 recommends:
ii  firmware-linux-free  3.4
ii  irqbalance           1.1.0-2

Versions of packages linux-image-4.7.0-1-amd64 suggests:
pn  debian-kernel-handbook  <none>
ii  extlinux                3:6.03+dfsg-14
ii  grub-pc                 2.02~beta2-36
pn  linux-doc-4.7           <none>

Versions of packages linux-image-4.7.0-1-amd64 is related to:
pn  firmware-amd-graphics     <none>
ii  firmware-atheros          20160824-1
pn  firmware-bnx2             <none>
pn  firmware-bnx2x            <none>
pn  firmware-brcm80211        <none>
pn  firmware-cavium           <none>
pn  firmware-intel-sound      <none>
pn  firmware-intelwimax       <none>
pn  firmware-ipw2x00          <none>
pn  firmware-ivtv             <none>
ii  firmware-iwlwifi          20160824-1
pn  firmware-libertas         <none>
pn  firmware-linux-nonfree    <none>
pn  firmware-misc-nonfree     <none>
pn  firmware-myricom          <none>
pn  firmware-netxen           <none>
pn  firmware-qlogic           <none>
ii  firmware-realtek          20160824-1
pn  firmware-samsung          <none>
pn  firmware-siano            <none>
pn  firmware-ti-connectivity  <none>
pn  xen-hypervisor            <none>

-- no debconf information


Reply to: