From: Florian Westphal <fw@strlen•de>
To: Sander Eikelenboom <linux@eikelenboom•it>
Cc: Florian Westphal <fw@strlen•de>,
netdev@vger•kernel.org, netfilter@vger•kernel.org,
Pablo Neira Ayuso <pablo@netfilter•org>
Subject: Re: Netfilter: BUG: unable to handle kernel paging request, RIP: physdev_mt+0xd6/0x160
Date: Mon, 14 Sep 2015 16:45:16 +0200 [thread overview]
Message-ID: <20150914144516.GM24810@breakpoint.cc> (raw)
In-Reply-To: <57e23f8e80b57dff72f6bc5b7e9b2d53@eikelenboom.it>
Sander Eikelenboom <linux@eikelenboom•it> wrote:
> On 2015-09-13 20:06, Florian Westphal wrote:
> >Sander Eikelenboom <linux@eikelenboom•it> wrote:
> >>Using a linux-4.3-rc1 kernel i encountered the splat below:
> >
> >Thanks for reporting this bug.
> >
> >>[ 290.200642] BUG: unable to handle kernel paging request at
> >>000000000484195d
> >>[ 290.211702] IP: [<ffffffff819bc3e6>] physdev_mt+0xd6/0x160
> >[..]
> >
> >>[ 290.444088] [<ffffffff81a4e6c0>] ipt_do_table+0x210/0x390
> >>[ 290.461951] [<ffffffff81a510ae>] iptable_filter_hook+0x2e/0x70
> >>[ 290.470756] [<ffffffff8199279c>] nf_iterate+0x4c/0x80
> >>[ 290.479587] [<ffffffff81992834>] nf_hook_slow+0x64/0xc0
> >>[ 290.488341] [<ffffffff81a06779>] ip_forward+0x369/0x3c0
> >>[ 290.496927] [<ffffffff81a06380>] ? ip_frag_mem+0x40/0x40
> >>[ 290.505365] [<ffffffff81a04961>] ip_rcv_finish+0x101/0x330
> >>[ 290.513480] [<ffffffff81a05001>] ip_rcv+0x291/0x390
> >>[ 290.521562] [<ffffffff81a04860>] ?
> >
> >Aye, ip forwarding of bridged packets with call-iptables=1 is broken.
> >
> >Please, could you try this patch? It fixes this bug for me.
>
> Hi Florian,
>
> Works for me too, thx for the fix !
Sorry, I made this claim too early.
We cannot use this fix, since it will still cause kernel oops when using
-j NFQUEUE in PRE_ROUTING (We would bump refcnt on ->physoutdev, which is
garbage in this case).
Only option is to undo 72b1e5e4cac as follows:
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h
--- a/include/linux/skbuff.h
+++ b/include/linux/skbuff.h
@@ -183,7 +183,8 @@ struct nf_bridge_info {
/* prerouting: detect dnat in orig/reply direction */
__be32 ipv4_daddr;
struct in6_addr ipv6_daddr;
-
+ };
+ union {
/* after prerouting + nat detected: store original source
* mac since neigh resolution overwrites it, only used while
* skb is out in neigh layer.
prev parent reply other threads:[~2015-09-14 14:45 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-09-13 11:34 Netfilter: BUG: unable to handle kernel paging request, RIP: physdev_mt+0xd6/0x160 Sander Eikelenboom
2015-09-13 18:06 ` Florian Westphal
2015-09-14 7:50 ` Sander Eikelenboom
2015-09-14 14:45 ` Florian Westphal [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20150914144516.GM24810@breakpoint.cc \
--to=fw@strlen$(echo .)de \
--cc=linux@eikelenboom$(echo .)it \
--cc=netdev@vger$(echo .)kernel.org \
--cc=netfilter@vger$(echo .)kernel.org \
--cc=pablo@netfilter$(echo .)org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox