[Bug 765] New: Netfilter crash on bridged/TAP device on 2.6.38 & 3.0 kernels

bugzilla-daemon at bugzilla.netfilter.org bugzilla-daemon at bugzilla.netfilter.org
Thu Dec 22 13:31:18 CET 2011


http://bugzilla.netfilter.org/show_bug.cgi?id=765

           Summary: Netfilter crash on bridged/TAP device on 2.6.38 & 3.0
                    kernels
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: x86_64
        OS/Version: Ubuntu
            Status: NEW
          Severity: major
          Priority: P2
         Component: bridging
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: shyam at zadarastorage.com
   Estimated Hours: 0.0


Created an attachment (id=371)
 --> (http://bugzilla.netfilter.org/attachment.cgi?id=371)
print-screen when the bug happened

Hi,

We have multiple servers running Ubuntu Natty (linux kernel
2.6.38-8-server/2.6.38-13-server) and Ubuntu Oneiric (linux kernel
3.0.0-13-server). We have setup bridges on different network interfaces

bridge name     bridge id               STP enabled     interfaces
br0             8000.782bcb145314       no              eth0
br101           8000.128e6c9ce59d       no              eth101
                                                        tap02163e0e2dc8
                                                        tap02163e496dfb
                                                        tap02163e4f4369
                                                        tap02163e50bee1
br102           8000.001b21a3bf40       no              eth102
br103           8000.001b21a3bf41       no              eth103
virbr0          8000.000000000000       yes


and have TAP devices setup on eth101 like this:
tap02163e0e2dc8: tap vnet_hdr
tap02163e496dfb: tap vnet_hdr
tap02163e4f4369: tap vnet_hdr
tap02163e50bee1: tap vnet_hdr

KVM VM's are connected through TAP devices to external network.

We periodically hit the following crash in netfilter in all the 3 linux kernel
variants.

[ 5445.359446]  [<ffffffffa0395200>] ?
br_nf_pre_routing_finish_bridge+0x60/0xd0 [bridge]
[ 5445.372671]  [<ffffffffa0396808>] br_nf_pre_routing_finish+0x328/0x360
[bridge]
[ 5445.385984]  [<ffffffffa0396b96>] br_nf_pre_routing+0x356/0x370 [bridge]
[ 5445.393255]  [<ffffffff815165d5>] nf_iterate+0x85/0xc0
[ 5445.400827]  [<ffffffffa038ffd0>] ? br_handle_local_finish+0x50/0x50
[bridge]
[ 5445.408643]  [<ffffffff81516686>] nf_hook_slow+0x76/0x130
[ 5445.416438]  [<ffffffffa038ffd0>] ? br_hanlde_local_finish+0x50/0x50
[bridge]
[ 5445.424202]  [<ffffffffa0390424>] br_handle_frame+0x1b4/0x260 [bridge]
[ 5445.431824]  [<ffffffffa0390270>] ? br_hanlde_frame_finish+0x2a0/0x2a0
[bridge]
[ 5445.446876]  [<ffffffff814e9b8d>] __netif_receive_skb+0x17d/0x540
[ 5445.454815]  [<ffffffff814ea191>] process_backlog+0xb1/0x190
[ 5445.462790]  [<ffffffff814eb2f4>] net_rx_action+0x134/0x290
[ 5445.470445]  [<ffffffff81065ea8>] __do_softirq+0xa8/0x210
[ 5445.478364]  [<ffffffff8160831c>] call_softirq+0x1c/0x30
[ 5445.486145]  <EOI>  [<ffffffff8100c295>] ? do_softirq+0x65/0xa0
[ 5445.494076]  [<ffffffff814eb7d8>] netif_rx_ni+0x28/0x30
[ 5445.501902]  [<ffffffff8144c702>] tun_chr_aio_write+0x342/0x4f0
[ 5445.509771]  [<ffffffff8144c3c0>] ? tun_chr_aio_read+0xd0/0xd0
[ 5445.517864]  [<ffffffff81167db3>] do_sync_readv_writev+0xd3/0x110
[ 5445.526011]  [<ffffffff81281ecc>] ? security_file_permission+0x2c/0xb0
[ 5445.534177]  [<ffffffff811674b1>] ? rw_verify_area+0x61/0xf0
[ 5445.542339]  [<ffffffff8116807d>] do_readv_write_v+0xcd/0x1d0
[ 5445.550227]  [<ffffffff811681bc>] vfs_writev+0x3c/0x50
[ 5445.558337]  [<ffffffff8116831a>] sys_writev+0x4a/0xb0
[ 5445.566288]  [<ffffffff81607102>] system_call_fastpath+0x16/0x1b
[ 5445.574267] ---[ end trace f585024e7045bff8 ]---

I am attaching some print-screen outputs as well. The kernel gets locked up
with Fatal error in interrupt context & not able to get more information.

Any help, guidance is highly appreciated.

Thanks
--Shyam


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.



More information about the netfilter-buglog mailing list