netdev - Re: [patch] tcp: attach SYNACK messages to request sockets instead of listener

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 29 Oct 2015 21:49:11 +0000
From:	Haiyang Zhang <haiyangz@...rosoft.com>
To:	"edumazet@...gle.com" <edumazet@...gle.com>
CC:	David Miller <davem@...emloft.net>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>,
	KY Srinivasan <kys@...rosoft.com>
Subject: Re: [patch] tcp: attach SYNACK messages to request sockets instead of
 listener

Hi Eric,

I saw a panic in __dev_kfree_skb_any() when I ssh into some 
Ubuntu VM with latest Linux-next tree on Hyper-V host.
With git bisecting, I found the patch below is the first commit
with this issue. I also included the stack trace here.
Do you have any idea about what the problem might be?

http://git.kernel.org/cgit/linux/kernel/git/next/linux-next.git/commit/?id=ca6fb06518836ef9b65dc0aac02ff97704d52a05
author  Eric Dumazet <edumazet@...gle.com> 2015-10-02 18:43:35 (GMT) 
commit ca6fb06518836ef9b65dc0aac02ff97704d52a05 (patch) 
tcp: attach SYNACK messages to request sockets instead of listener

Stack trace:
[   96.235084] general protection fault: 0000 [#1] SMP
[   96.235084] Modules linked in: ip6t_rpfilter ip6t_REJECT nf_reject_ipv6 ipt_REJECT nf_reject_ipv4 xt_conntrack ebtabl
e_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip
6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_
nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iptable_filter ip_tables hyperv_keyboard pcspkr
hv_utils serio_raw i2c_piix4 hyperv_fb i2c_core acpi_cpufreq uinput xfs libcrc32c sd_mod sr_mod cdrom ata_generic pata_
acpi hid_hyperv hv_netvsc hv_storvsc ata_piix libata hv_vmbus floppy dm_mirror dm_region_hash dm_log dm_mod
[   96.235084] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.3.0-rc6-next-20151021+ #1
[   96.235084] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS 090006  05/23/2012
[   96.235084] task: ffff880101bf0000 ti: ffff880101bf8000 task.ti: ffff880101bf8000
[   96.235084] RIP: 0010:[<ffffffff8158b17c>]  [<ffffffff8158b17c>] sock_wfree+0x4c/0x60
[   96.235084] RSP: 0018:ffff880102643da8  EFLAGS: 00010292
[   96.235084] RAX: 00000000000004ff RBX: ffff8800f2d50000 RCX: 0000000000000000
[   96.235084] RDX: ffff8800f1af0000 RSI: 0000000000000001 RDI: ffff8800f2d50000
[   96.235084] RBP: ffff880102643db8 R08: ffff8800f2086000 R09: 000000000007efc8
[   96.235084] R10: ffff880036800000 R11: 0000000000000000 R12: ffff8800f2d50124
[   96.235084] R13: ffff880036800000 R14: ffff880035d80000 R15: ffff8800f39b7c00
[   96.770086] FS:  0000000000000000(0000) GS:ffff880102640000(0000) knlGS:0000000000000000
[   96.770086] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[   96.770086] CR2: 00007efefe680514 CR3: 0000000036bee000 CR4: 00000000000006e0
[   96.770086] Stack:
[   96.770086]  ffff8800f2e93800 ffff8800f2e93800 ffff880102643dd0 ffffffff8158c42f
[   96.770086]  ffff8800f2e93800 ffff880102643de8 ffffffff8158dac2 ffff8800f2087000
[   96.770086]  ffff880102643e08 ffffffff8158e06c ffff8800f2087000 0000000000001000
[   96.770086] Call Trace:
[   96.770086]  <IRQ>
[   96.770086]  [<ffffffff8158c42f>] skb_release_head_state+0x4f/0xb0
[   96.770086]  [<ffffffff8158dac2>] skb_release_all+0x12/0x30
[   96.770086]  [<ffffffff8158e06c>] consume_skb+0x2c/0x70
[   96.770086]  [<ffffffff8159f885>] __dev_kfree_skb_any+0x35/0x40
[   96.770086]  [<ffffffffa00ef0fc>] netvsc_xmit_completion+0x1c/0x20 [hv_netvsc]
[   96.770086]  [<ffffffffa00f12c7>] netvsc_channel_cb+0x217/0x3f0 [hv_netvsc]
[   96.770086]  [<ffffffffa0059584>] vmbus_on_event+0x154/0x190 [hv_vmbus]
[   96.770086]  [<ffffffff81083495>] tasklet_action+0xe5/0xf0
[   96.770086]  [<ffffffff810836f7>] __do_softirq+0xd7/0x2a0
[   96.770086]  [<ffffffff81083b65>] irq_exit+0xf5/0x100
[   96.770086]  [<ffffffff8104da4e>] hyperv_vector_handler+0x3e/0x50
[   96.770086]  [<ffffffff816ae717>] hyperv_callback_vector+0x87/0x90
[   96.770086]  <EOI>
[   96.770086]  [<ffffffff810635a6>] ? native_safe_halt+0x6/0x10
[   96.770086]  [<ffffffff81021aee>] default_idle+0x1e/0xa0
[   96.770086]  [<ffffffff8102227f>] arch_cpu_idle+0xf/0x20
[   96.770086]  [<ffffffff810c1492>] default_idle_call+0x32/0x40
[   96.770086]  [<ffffffff810c17be>] cpu_startup_entry+0x2be/0x330
[   96.770086]  [<ffffffff810503a0>] start_secondary+0x190/0x1d0
[   96.770086] Code: 80 e6 02 74 19 f0 41 29 04 24 74 05 5b 41 5c 5d c3 48 89 df e8 b6 f8 ff ff 5b 41 5c 5d c3 83 e8 01
f0 29 83 24 01 00 00 48 89 df <ff> 93 a0 02 00 00 b8 01 00 00 00 eb cd 0f 1f 80 00 00 00 00 66
[   96.770086] RIP  [<ffffffff8158b17c>] sock_wfree+0x4c/0x60
[   96.770086]  RSP <ffff880102643da8>
[   97.572206] ---[ end trace 0d1199c7e6a1aaa4 ]---
[   97.573146] Kernel panic - not syncing: Fatal exception in interrupt
[   97.573146] Kernel Offset: disabled
[   97.573146] ---[ end Kernel panic - not syncing: Fatal exception in interrupt

Thanks,
- Haiyang

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html