linux-kernel - Re: Linux 4.1.28

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Wed, 20 Jul 2016 14:13:14 +0200 (CEST)
From:	Thomas Voegtle <tv@...96.de>
To:	Michal Kubecek <mkubecek@...e.cz>
cc:	Sasha Levin <sasha.levin@...cle.com>,
	LKML <linux-kernel@...r.kernel.org>,
	stable <stable@...r.kernel.org>, lwn@....net
Subject: Re: Linux 4.1.28

On Wed, 20 Jul 2016, Michal Kubecek wrote:

> On Fri, Jul 15, 2016 at 03:04:48PM +0200, Thomas Voegtle wrote:
>> And that one?
>> Happens while trying to start a firewall script with iptables-restore.
>>
>> [  180.071999] NMI watchdog: BUG: soft lockup - CPU#1 stuck for 22s!
>> [iptables-restor:2338]
> ...
>> [  180.072000] Call Trace:
>> [  180.072000]  [<ffffffff8111a923>] ? __kmalloc_node+0x26/0x2d
>> [  180.072000]  [<ffffffff81667495>] ? cpumask_next+0x1b/0x1d
>> [  180.072000]  [<ffffffff81668ec3>] ? xt_alloc_table_info+0xc2/0xdf
>> [  180.072000]  [<ffffffffc05be6c3>] do_ipt_set_ctl+0xfd/0x193 [ip_tables]
>> [  180.072000]  [<ffffffff81665181>] nf_sockopt+0x64/0x7e
>> [  180.072000]  [<ffffffff816651cc>] nf_setsockopt+0x1c/0x20
>> [  180.072000]  [<ffffffff81674dd1>] ip_setsockopt+0x6e/0x8e
>> [  180.072000]  [<ffffffff8168fe47>] raw_setsockopt+0x11/0x4c
>> [  180.072000]  [<ffffffff816296ab>] sock_common_setsockopt+0xf/0x11
>> [  180.072000]  [<ffffffff81628ab2>] SyS_setsockopt+0x85/0xa5
>> [  180.072000]  [<ffffffff816e7dee>] system_call_fastpath+0x12/0x71
>
> This should be the problem addressed by
>
>   http://article.gmane.org/gmane.linux.network/422215
>
> Michal Kubecek


Mh, doesn't fix the problem for me.
Looks like the same, see below.

In the original commit 482cfc318559 you mentioned, are changes in 
netfilter/x_tables.c aswell, aren't these missing here? 
(xt_alloc_table_info)

Actually I'm just guessing here, haven't a clue.

thanks,

     Thomas



[  288.072000] NMI watchdog: BUG: soft lockup - CPU#0 stuck for 23s! 
[iptables-restor:2874]
[  288.072000] Modules linked in: xt_CT xt_addrtype xt_set iptable_raw 
iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 
nf_nat_tftp nf_conntrack_tftp nf_nat_pptp nf_nat_proto_gre 
nf_conntrack_pptp nf_conntrack_proto_gre nf_nat_irc nf_conntrack_irc 
nf_nat_sip nf_conntrack_sip nf_nat_ftp nf_nat nf_conntrack_ftp nfsd lockd 
grace nfs_acl auth_rpcgss oid_registry sunrpc nfnetlink_log msr 
iptable_filter ip_tables nf_conntrack_netlink nf_conntrack autofs4 arc4 
ecb ppp_mppe xfrm_user pppoe pppox ppp_generic slhc ipv6 dummy 
ip_set_hash_netiface ip_set_list_set ip_set_hash_net ip_set ipmi_devintf 
ipmi_msghandler lcd_module(O) sg st snd_hda_codec_realtek 
snd_hda_codec_generic snd_hda_intel snd_hda_controller snd_hda_codec 
snd_hda_core i915 snd_pcm coretemp acpi_cpufreq snd_timer snd_hwdep
[  288.072000]  drm_kms_helper kvm_intel divas(O) drm kvm processor video 
snd e1000e thermal_sys divadidd(O) tpm_tis firewire_ohci i2c_algo_bit 
intel_agp evdev i2c_i801 firewire_core microcode e100 ptp intel_gtt ppdev 
parport_pc tpm pps_core lpc_ich soundcore agpgart 8250_fintek hwmon button 
parport i2c_core mii shpchp mfd_core
[  288.072000] CPU: 0 PID: 2874 Comm: iptables-restor Tainted: G 
O    4.1.28-cx #1
[  288.072000] Hardware name:                  /DG33BU, BIOS 
DPP3510J.86A.0572.2009.0715.2346 07/15/2009
[  288.072000] task: ffff8801c188a090 ti: ffff8801c1814000 task.ti: 
ffff8801c1814000
[  288.072000] RIP: 0010:[<ffffffffc04f8ad3>]  [<ffffffffc04f8ad3>] 
translate_table+0x3b3/0x6bd [ip_tables]
[  288.072000] RSP: 0018:ffff8801c1817c98  EFLAGS: 00000286
[  288.072000] RAX: 0000000000000f68 RBX: 8000000000000163 RCX: 
ffff8801c185da88
[  288.072000] RDX: 0000000000000000 RSI: ffff8801c185eb38 RDI: 
ffffc900010c6f68
[  288.072000] RBP: ffff8801c1817d88 R08: 0000000000000001 R09: 
0000000000000009
[  288.072000] R10: ffff8801c185da88 R11: 0000000000000000 R12: 
ffffc900010d0fff
[  288.072000] R13: ffffc900010d0fff R14: ffffffff81c0bc90 R15: 
0000000000000000
[  288.072000] FS:  00007f0713a61700(0000) GS:ffff88021bc00000(0000) 
knlGS:0000000000000000
[  288.072000] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.072000] CR2: 0000000002478e28 CR3: 00000001c182e000 CR4: 
00000000000406f0
[  288.072000] Stack:
[  288.072000]  ffff8801c1817cf8 ffff8801c185da88 ffff880200000001 
ffffffff00000009
[  288.072000]  0000000000000000 0000000000000000 ffffc900010c6108 
ffffffff81ce2ec0
[  288.072000]  ffff8801c1817dcc ffff8801c1817de0 0000000900011030 
0000000000000000
[  288.072000] Call Trace:
[  288.072000]  [<ffffffff811079ce>] ? __vmalloc_node+0x39/0x3b
[  288.072000]  [<ffffffff8166b0dc>] ? xt_alloc_table_info+0x97/0xdf
[  288.072000]  [<ffffffff8123a32f>] ? find_next_bit+0x18/0x1a
[  288.072000]  [<ffffffff816696d9>] ? cpumask_next+0x1b/0x1d
[  288.072000]  [<ffffffff8166b107>] ? xt_alloc_table_info+0xc2/0xdf
[  288.072000]  [<ffffffffc04f96c3>] do_ipt_set_ctl+0xfd/0x193 [ip_tables]
[  288.072000]  [<ffffffff816673c5>] nf_sockopt+0x64/0x7e
[  288.072000]  [<ffffffff81667410>] nf_setsockopt+0x1c/0x20
[  288.072000]  [<ffffffff81677045>] ip_setsockopt+0x6e/0x8e
[  288.072000]  [<ffffffff816920bb>] raw_setsockopt+0x11/0x4c
[  288.072000]  [<ffffffff8162b84b>] sock_common_setsockopt+0xf/0x11
[  288.072000]  [<ffffffff8162ac53>] SyS_setsockopt+0x85/0xa5
[  288.072000]  [<ffffffff816ea0ee>] system_call_fastpath+0x12/0x71
[  288.072000] Code: 34 8b 33 48 63 f8 48 8d 4e 90 48 39 cf 0f 87 df 02 00 
00 4c 01 ef 4c 89 d1 4c 01 d6 eb 0d 48 39 f9 74 22 44 0f b7 59 5a 4c 01 d9 
<48> 39 f1 72 ee e9 bd 02 00 00 41 0f b7 47 5a 44 01 e0 3b 03 0f