netdev - Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 24 Jan 2013 11:05:50 +0000 (UTC)
From:	Rafal Kupka <rkupka@...emetry.com>
To:	netdev@...r.kernel.org
Subject: Re: BUG: unable to handle kernel paging request at 0000000000609920 in networking code on 3.2.23.

Rafal Kupka @ Telemetry <rkupka <at> telemetry.com> writes:
Hello,

> After upgrade to 3.2.23 (debian backports 2.6.32-45 package) from 2.6.32 I
experience server crash.

New round of tests on 3.2.35-2~bpo60+1. Still similar crashes.

> Iptables:
> 
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> dumbtcp    tcp  --  0.0.0.0/0            91.217.135.0/24
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> dumbtcp    tcp  --  91.217.135.0/24      0.0.0.0/0
> 
> Chain dumbtcp (2 references)
> target     prot opt source               destination
> TCPOPTSTRIP  tcp  --  0.0.0.0/0            0.0.0.0/0            tcpflags:
0x02/0x02 TCPOPTSTRIP options 3,4,5,8,19
> ECN        tcp  --  0.0.0.0/0            0.0.0.0/0            ECN TCP remove

This Netfilter rules are causing it. Either ECN or TCPOPTSTRIP module.

3.2.35 calltrace:
[15368.854247] Call Trace:
[15368.856749]  <IRQ> 
[15368.858898]  [<ffffffff812a02a8>] ? skb_release_data+0x6c/0xe4
[15368.864791]  [<ffffffff812a08b0>] ? __kfree_skb+0x11/0x73
[15368.870254]  [<ffffffff812e5c5f>] ? tcp_rcv_state_process+0x74/0x8d9
[15368.876632]  [<ffffffff812ed0b7>] ? tcp_v4_do_rcv+0x388/0x3eb
[15368.882448]  [<ffffffff812ee54e>] ? tcp_v4_rcv+0x447/0x6ed
[15368.888007]  [<ffffffff812cb746>] ? nf_hook_slow+0x68/0xfd
[15368.893572]  [<ffffffff812d197e>] ? T.1004+0x4f/0x4f
[15368.898614]  [<ffffffff812d1abb>] ? ip_local_deliver_finish+0x13d/0x1aa
[15368.905301]  [<ffffffff812aab66>] ? __netif_receive_skb+0x47d/0x4b0
[15368.911642]  [<ffffffff81013a01>] ? read_tsc+0x5/0x16
[15368.916768]  [<ffffffff812aadc7>] ? netif_receive_skb+0x67/0x6d
[15368.922757]  [<ffffffff812ab335>] ? napi_gro_receive+0x1f/0x2c
[15368.928661]  [<ffffffff812aaea1>] ? napi_skb_finish+0x1c/0x31
[15368.934495]  [<ffffffffa0049a61>] ? e1000_clean_rx_irq+0x1ea/0x29a [e1000e]
[15368.941533]  [<ffffffffa0049fa2>] ? e1000_clean+0x71/0x229 [e1000e]
[15368.947875]  [<ffffffff8103b982>] ? __wake_up+0x35/0x46
[15368.953171]  [<ffffffff812ab460>] ? net_rx_action+0xa8/0x207
[15368.958908]  [<ffffffff81046351>] ? finish_task_switch+0x50/0xc7
[15368.964995]  [<ffffffff8104f2ca>] ? __do_softirq+0xc4/0x1a0
[15368.970636]  [<ffffffff81097ec6>] ? handle_irq_event_percpu+0x163/0x181
[15368.977324]  [<ffffffff8136f8ac>] ? call_softirq+0x1c/0x30
[15368.982884]  [<ffffffff8100fa3f>] ? do_softirq+0x3f/0x79
[15368.988266]  [<ffffffff8104f09a>] ? irq_exit+0x44/0xb5
[15368.993473]  [<ffffffff8100f38a>] ? do_IRQ+0x94/0xaa
[15368.998489]  [<ffffffff8136836e>] ? common_interrupt+0x6e/0x6e
[15369.004397]  <EOI> 
[15369.006537]  [<ffffffff81107e38>] ? fput+0x17a/0x1a2
[15369.011576]  [<ffffffff81046351>] ? finish_task_switch+0x50/0xc7
[15369.017653]  [<ffffffff81366b46>] ? __schedule+0x57a/0x5cd
[15369.023209]  [<ffffffff81368416>] ? retint_careful+0x14/0x32

Regards,
Rafal Kupka

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html