[Bug 714] Kernel panics in same_src()

[bugzilla-daemon at bugzilla.netfilter.org]

http://bugzilla.netfilter.org/show_bug.cgi?id=714





--- Comment #2 from Dmitry Petuhov <d.petuhov at electro-com.ru>  2011-11-17 20:10:27 ---
Bad news: seems like 2.6.31.14 also affected. kdump not works for this kernel
so I just include kernel panic messsages collected via serizl console:

First:

BUG: unable to handle kernel NULL pointer dereference at 000000000000003e
IP: [<ffffffff812da7c8>] nf_nat_setup_info+0x209/0x54d
PGD 27cdfc067 PUD 27789c067 PMD 0
Oops: 0000 [#1] SMP
last sysfs file: /sys/module/nf_conntrack/parameters/hashsize
CPU 27
Modules linked in: ipv6 ipt_NETFLOW ts_kmp xt_length ipt_REJECT xt_comment
xt_state xt_string iptable_filter nf_conntrack_netlink nfnetlink nf_nat_pptp
nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_proto_gre nf_nat_sip nf_conntr
ack_sip nf_nat_ftp nf_conntrack_ftp loop rtc_cmos i2c_i801 rtc_core button
pcspkr joydev rtc_lib i2c_core serio_raw ext3 jbd dm_mod sd_mod igb ahci libata
uhci_hcd ixgbe scsi_mod ehci_hcd dca [last unloaded: scsi_wait_scan]
Pid: 0, comm: swapper Not tainted 2.6.31.14nat #1 X8QB6
RIP: 0010:[<ffffffff812da7c8>]  [<ffffffff812da7c8>]
nf_nat_setup_info+0x209/0x54d
RSP: 0018:ffffc900036038b0  EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff88046534ccd0 RCX: 000000007bacdb3c
RDX: 0000000000004000 RSI: 0000000000000000 RDI: ffffc90003603940
RBP: ffffc900036039a0 R08: ffff880478881b40 R09: ffff88045e55a04e
R10: 000000007ffd2a8e R11: 0000000000000002 R12: ffff88047ac52c54
R13: 0000000000000000 R14: ffff880456d44390 R15: ffffc90003603910
FS:  0000000000000000(0000) GS:ffffc90003600000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 000000000000003e CR3: 000000047847a000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffff88047f29a000, task ffff88027f2d57e0)
Stack:
 ffffc90003603954 ffffc90003603924 ffffc90003603920 0000000000000100
<0> ffff88047ac52c60 ffff88047ac52c62 000030b8ff883b90 000030b8ff883b90
<0> 2f468ad5000240ab ffffc9000360cc40 ffff88047f29be28 0000000000000003
Call Trace:
 <IRQ>
 [<ffffffff8101e45c>] ? smp_apic_timer_interrupt+0x89/0x97
 [<ffffffff812de512>] ipt_snat_target+0x1a/0x1c
 [<ffffffff812dc519>] ipt_do_table+0x323/0x39d
 [<ffffffff8129975d>] ? nf_conntrack_tuple_taken+0x12a/0x135
 [<ffffffff812de598>] nf_nat_rule_find+0x18/0x54
 [<ffffffff812de7b8>] nf_nat_fn+0x124/0x150
 [<ffffffff812de8d3>] nf_nat_out+0x37/0xae
 [<ffffffff81297af6>] nf_iterate+0x41/0x84
 [<ffffffff812aa66e>] ? ip_finish_output+0x0/0x27e
 [<ffffffff81297b9e>] nf_hook_slow+0x65/0xc6
 [<ffffffff812aa66e>] ? ip_finish_output+0x0/0x27e
 [<ffffffff812aa986>] ip_output+0x9a/0xae
 [<ffffffff812a6edb>] ip_forward_finish+0x3f/0x43
 [<ffffffff812a7199>] ip_forward+0x2ba/0x325
 [<ffffffff812a5afc>] ip_rcv_finish+0x338/0x364
 [<ffffffff812a5dc1>] ip_rcv+0x299/0x2d1
 [<ffffffff8127c3c0>] netif_receive_skb+0x45e/0x483
 [<ffffffff8127c529>] napi_skb_finish+0x24/0x38
 [<ffffffff8127c96d>] napi_gro_receive+0x2a/0x2f
 [<ffffffffa004c9fc>] ixgbe_poll+0x91c/0xe50 [ixgbe]
 [<ffffffff8127ca78>] net_rx_action+0xa4/0x1a3
 [<ffffffff810475e6>] __do_softirq+0xd2/0x19c
 [<ffffffff8100cb5c>] call_softirq+0x1c/0x28
 [<ffffffff8100df20>] do_softirq+0x34/0x72
 [<ffffffff81047017>] irq_exit+0x3f/0x41
 [<ffffffff8100d60b>] do_IRQ+0xa0/0xb7
 [<ffffffff8100c3d3>] ret_from_intr+0x0/0xa
 <EOI>
 [<ffffffff81011f41>] ? mwait_idle+0xb3/0xea
 [<ffffffff81312c48>] ? atomic_notifier_call_chain+0x13/0x15
 [<ffffffff8100adac>] ? cpu_idle+0x48/0x86
 [<ffffffff81308f8d>] ? start_secondary+0x195/0x199
Code: 38 ff ff ff 48 8b 95 30 ff ff ff 4c 89 ff ff 50 18 84 c0 0f 85 3a 03 00
00 4d 8b 36 4d 85 f6 74 17 49 8b 06 49 8b 76 20 0f 18 08 <8a> 46 3e 3a 45 c6 75
e6 e9 51 ff ff ff 48 8d bd 70 ff ff ff 48
RIP  [<ffffffff812da7c8>] nf_nat_setup_info+0x209/0x54d
 RSP <ffffc900036038b0>
CR2: 000000000000003e

Second:

BUG: unable to handle kernel NULL pointer dereference at 000000000000003e
IP: [<ffffffff812da7c8>] nf_nat_setup_info+0x209/0x54d
PGD 27c030067 PUD 2791e0067 PMD 0
Oops: 0000 [#1] SMP
last sysfs file: /sys/module/nf_conntrack/parameters/hashsize
CPU 23
Modules linked in: ipv6 ipt_NETFLOW ts_kmp xt_length ipt_REJECT xt_comment
xt_state xt_string iptable_filter nf_conntrack_netlink nfnetlink nf_nat_pptp
nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_proto_gre nf_nat_sip nf_conntr
ack_sip nf_nat_ftp nf_conntrack_ftp loop rtc_cmos rtc_core button pcspkr
serio_raw rtc_lib i2c_i801 joydev i2c_core ext3 jbd dm_mod sd_mod igb ahci
libata ixgbe uhci_hcd scsi_mod ehci_hcd dca [last unloaded: scsi_wait_scan]
Pid: 0, comm: swapper Not tainted 2.6.31.14nat #1 X8QB6
RIP: 0010:[<ffffffff812da7c8>]  [<ffffffff812da7c8>]
nf_nat_setup_info+0x209/0x54d
RSP: 0018:ffffc90002e038b0  EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff88026b1528b0 RCX: 00000000502b84d3
RDX: 0000000000004000 RSI: 0000000000000000 RDI: ffffc90002e03940
RBP: ffffc90002e039a0 R08: ffff880478d1f240 R09: ffff8802520b604e
R10: 000000007ffee284 R11: 0000000000000004 R12: ffff88027b85ac54
R13: 0000000000000000 R14: ffff88046548a290 R15: ffffc90002e03910
FS:  0000000000000000(0000) GS:ffffc90002e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 000000000000003e CR3: 00000002791db000 CR4: 00000000000006e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process swapper (pid: 0, threadinfo ffff88047f266000, task ffff88027f2c4760)
Stack:
 ffffc90002e03954 ffffc90002e03924 ffffc90002e038d0 0000000000000100
<0> ffff88027b85ac60 ffff88027b85ac62 00000000000000c1 ffff88027ed4a160
<0> 74e54cb20002898f ffff88027ed4a158 0000000000000282 ffffffff81492578
Call Trace:
 <IRQ>
 [<ffffffff812de512>] ipt_snat_target+0x1a/0x1c
 [<ffffffff812dc519>] ipt_do_table+0x323/0x39d
 [<ffffffff8129975d>] ? nf_conntrack_tuple_taken+0x12a/0x135
 [<ffffffff812de598>] nf_nat_rule_find+0x18/0x54
 [<ffffffff812de7b8>] nf_nat_fn+0x124/0x150
 [<ffffffff812de8d3>] nf_nat_out+0x37/0xae
 [<ffffffff81297af6>] nf_iterate+0x41/0x84
 [<ffffffff812aa66e>] ? ip_finish_output+0x0/0x27e
 [<ffffffff81297b9e>] nf_hook_slow+0x65/0xc6
 [<ffffffff812aa66e>] ? ip_finish_output+0x0/0x27e
 [<ffffffff812aa986>] ip_output+0x9a/0xae
 [<ffffffff812a6edb>] ip_forward_finish+0x3f/0x43
 [<ffffffff812a7199>] ip_forward+0x2ba/0x325
 [<ffffffff812a5afc>] ip_rcv_finish+0x338/0x364
 [<ffffffff812a5dc1>] ip_rcv+0x299/0x2d1
 [<ffffffff8127c3c0>] netif_receive_skb+0x45e/0x483
 [<ffffffff8127c529>] napi_skb_finish+0x24/0x38
 [<ffffffff8127c96d>] napi_gro_receive+0x2a/0x2f
 [<ffffffffa00579fc>] ixgbe_poll+0x91c/0xe50 [ixgbe]
 [<ffffffff812999e7>] ? nf_conntrack_free+0x42/0x47
 [<ffffffff810776a0>] ? softlockup_tick+0xaf/0x18f
 [<ffffffff8127ca78>] net_rx_action+0xa4/0x1a3
 [<ffffffff810475e6>] __do_softirq+0xd2/0x19c
 [<ffffffff8100cb5c>] call_softirq+0x1c/0x28
 [<ffffffff8100df20>] do_softirq+0x34/0x72
 [<ffffffff81047017>] irq_exit+0x3f/0x41
 [<ffffffff8100d60b>] do_IRQ+0xa0/0xb7
 [<ffffffff8100c3d3>] ret_from_intr+0x0/0xa
 <EOI>
 [<ffffffff81011f41>] ? mwait_idle+0xb3/0xea
 [<ffffffff81312c48>] ? atomic_notifier_call_chain+0x13/0x15
 [<ffffffff8100adac>] ? cpu_idle+0x48/0x86
 [<ffffffff81308f8d>] ? start_secondary+0x195/0x199
Code: 38 ff ff ff 48 8b 95 30 ff ff ff 4c 89 ff ff 50 18 84 c0 0f 85 3a 03 00
00 4d 8b 36 4d 85 f6 74 17 49 8b 06 49 8b 76 20 0f 18 08 <8a> 46 3e 3a 45 c6 75
e6 e9 51 ff ff ff 48 8d bd 70 ff ff ff 48
RIP  [<ffffffff812da7c8>] nf_nat_setup_info+0x209/0x54d
 RSP <ffffc90002e038b0>
CR2: 000000000000003e


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.