netdev - Bug in TC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Wed, 29 Aug 2007 09:33:49 +0400
From:	Badalian Vyacheslav <slavon@...telecom.ru>
To:	netdev@...r.kernel.org
Subject: Bug in TC

Hello all.
System Gentoo.
Kernel version *2.6.22.5 
<http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.22.5.bz2>
Lot of Traffic (above 500mbs)
Many clients (above 30 000 ip)
Many TC rules (abobe 50000)
Many iptables rules (above 10 000)
All classes - HTB, All qdisc - sfq

Have 1-5 times on week kernel panics.
Every hour system delete and create all TC rules by sheme:
1. TRY Filter delete by ID
2. TRY class delete by ID
3. Class create (if needed)
4. QDISK create (if needed)
5. Filter create (if needed)

This is kernel panic!

 printing eip:
c01bf027
*pde = 00000000
Oops: 0000 [#1]
SMP
Modules linked in: cls_u32 sch_sfq sch_htb netconsole xt_tcpudp 
iptable_filter ip_tables x_tables i2c_i801 e752x_edac edac_mc
CPU:    2
EIP:    0060:[<c01bf027>]    Not tainted VLI
EFLAGS: 00010246   (2.6.22-gentoo-r5-fw #6)
EIP is at rb_erase+0xf6/0x22f
eax: 00000001   ebx: 00000000   ecx: 00000000   edx: e8534b34
esi: e8534b34   edi: e8494934   ebp: f7399428   esp: c21c5cf0
ds: 007b   es: 007b   fs: 00d8  gs: 0000  ss: 0068
Process swapper (pid: 0, ti=c21c4000 task=c21b8a90 task.ti=c21c4000)
Stack: 00000001 e8494934 e8494800 00000c75 000000b0 f88321a7 00000001 
00000001
       e8494800 00000c75 f7399080 f8833ef5 f73993c8 e07bd780 f7198440 
00000008
       f739943c f7399000 e07bd780 f7399080 00000005 b3222e4d 00000011 
fffffffe
Call Trace:
 [<f88321a7>] htb_safe_rb_erase+0x43/0x51 [sch_htb]
 [<f8833ef5>] htb_dequeue+0x5fd/0x6d4 [sch_htb]
 [<c02b7592>] __qdisc_run+0x1e/0x188
 [<c02adcce>] dev_queue_xmit+0x152/0x25c
 [<c02b2100>] neigh_resolve_output+0x1dd/0x20f
 [<c02c8f77>] ip_output+0x280/0x2b9
 [<c02c51cc>] ip_forward_finish+0x0/0x2e
 [<c02c5465>] ip_forward+0x26b/0x2c6
 [<c02c51cc>] ip_forward_finish+0x0/0x2e
 [<c02c41fb>] ip_rcv+0x484/0x4bd
 [<c02a8a0d>] __netdev_alloc_skb+0x1c/0x35
 [<c0237bfa>] e1000_alloc_rx_buffers+0x1bb/0x280
 [<c02abd54>] netif_receive_skb+0x2b8/0x319
 [<c0238034>] e1000_clean_rx_irq+0x375/0x441
 [<c0237cbf>] e1000_clean_rx_irq+0x0/0x441
 [<c02370ea>] e1000_clean+0x71/0x237
 [<c02ada90>] net_rx_action+0x91/0x17d
 [<c011c39a>] __do_softirq+0x5d/0xc1
 [<c011c430>] do_softirq+0x32/0x36
 [<c010439a>] do_IRQ+0x7e/0x90
 [<c010d461>] smp_apic_timer_interrupt+0x74/0x80
 [<c0102ed3>] common_interrupt+0x23/0x28
 [<c0100ab2>] mwait_idle_with_hints+0x3c/0x40
 [<c0100bbe>] cpu_idle+0x5a/0x6f
 =======================
Code: 05 89 5a 08 eb 08 89 5a 04 eb 03 89 5d 00 83 3c 24 01 0f 85 46 01 
00 00 e9 12 01 00 00 8b 4e 08 39 d9 0f 85 85 00 00 00 8b 4e 04 <8b> 01 
a8 01 75 14 83 c8 01 89 ea 89 01 89 f0 83 26 fe e8 1e fd
EIP: [<c01bf027>] rb_erase+0xf6/0x22f SS:ESP 0068:c21c5cf0
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 3 seconds..

Please help! This system very important to stable work!

P.S. Very need program like iptables-restore to full and fast reload all 
tc rules.

Thanks
*
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html