[Bug 339] Kernel panic on bridged packet

[bugzilla-daemon at bugzilla.netfilter.org]

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=339





------- Additional Comments From scrizt at ludd.ltu.se  2006-06-26 17:57 MET -------
Is this bug forgotten ?
Anyhow, I ran into it when setting up this strange network of mine.. I dont
think my setup is causing anything strange however.. It appears even if no
machine is connected to the "inner" port of the bridge..

I havn't done any real testing, yet, just tried to set it up properly and wait
for the internet to trigg the bug.

Im using a 2-port bridge for firewalling (i'll try some brouting like stuff too,
but it's not there yet)

Panic output:

Unable to handle kernel NULL pointer dereference at virtual address 0000000c
 printing eip:
c0359b67
*pde = 00000000
Oops: 0000 [#1]
Modules linked in: ebt_ip ebtable_filter ebtbles rtc sata_nv nvsound sata_sil
nvnet eepro100 3c59x r8169
CPU:    0
EIP:    0060:[<c0359b67>]    Tainted: P      VLI
EFLAGS: 00010282   (2.6.15)
EIP i at br_nf_pre_routing_finish+0x1a/0x2c0
eax: 00000000   ebx: 00000000   ecx: c0475e9c   edx: dfb2c5a0
esi: cv760820   edi: 80000000   ebp: deefe000   esp: c0475de0
ds: 007b   es: 007b   ss: 0068
Process swapper (pid: , threadinfo=c0474000 task=c03fbb00)
Stack: c0475e9c c8c6f082 c04d4020 c0475e9c fb0000e0 c0345127 00000000 c0475e9c
       deefe000 00000000 c0359b4d c0475e68 c04d4020 80000000 c0359b4d c030d562
       00000000 c0475e9c defee000 00000000 c0359b4d 00000000 00000000 c0475e9c
Call Trace:
 [<c0345127>] ip_nat_in+0x29/0x88
 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0
 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0
 [<c030d562>] nf_iterate+0x3f/0x6d
 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0
 [<c030d5d7>] nf_hook_slow+0x47/0xba
 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0
 [<c035685b>] br_handle_frame_finish+0x0/0xca
 [<c035a446>] br_nf_pre_routing+0x35d/0x37a
 [<c035685b>] br_handle_frame_finish+0x0/0xca
 [<c035a454>] br_nf_pre_routing+0x36b/0x37a
 [<c030d562>] nf_iterate+0x3f/0x6d
 [<c035685b>] br_handle_frame_finish+0x0/0xca
 [<c030d5d7>] nf_hook_slow+0x47/0xba
 [<c035685b>] br_handle_frame_finish+0x0/0xca
 [<c0356a8d>] br_handle_frame+0x168/0x1a7
 [<c035685b>] br_handle_frame_finish+0x0/0xca
 [<c02fff45>] netif_receive_skb+0x117/0x1dc
 [<c0300077>] process_backlog+0x6d/0xd6
 [<c030013d>] net_rx_action+0x5d/0x0xd2
 [<c011a8b4>] __do_softirq+0x34/0x7d
 [<c011a91f>] do_softirq+0x22/0x26
 [<c0104872>] do_IRQ+0x1e/0x24
 [<c0103436>] common_interrupt+0x1a/0x20
 [<c0101047>] default_idle+0x2b/0x53
 [<c01010c2>] cpu_idle+0x3f/0x5b
 [<c047668c>] start_kernel+0x139/0x13b
Code: 00 04 83 41 20 04 8b 41 28 51 ff 50 74 31 c0 59 c3 55 57 56 53 71 ec 4a 00
00 00 8b 94 24 b8 00 00 00 8b 5a 7c 8b 72 20 <f6> 43 0c 01 74 11 0f b6 42 6d 83
e0 f8 83 c8 03 88 42 6d 83 73
 <0>Kernel panic - not syncing: Fatal exception in interrupt

Output was copied by hand, so typos are possible.

bridge setup is as simple as:

brctl addbr br0
brctl addif br0 eth2
brctl addif br0 eth3
brctl stp br0 off
ifconfig br0 up
ifconfig eth2 up
ifconfig eth3 up

(some iptables-rules including conntracking are added too; the usual ones
matching state related,established, and some filtering using the physdev-extension)

Kernel 2.6.15 w/o any patches

-- 
Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.