On Thu, 16 Dec 2004 13:59:57 +0400 Dmitry Melekhov <dm@xxxxxxxxxx> wrote: > Hello! > > I don't shure I'm writing to right list, please point me to right list, > if this is wrong place. > And I posted this message to linux-net... Sorry! > > I run Linux as bridge (with ebtables), router and ipsec using > super-freeswan/openswan. > > ipsec interface is over br interface, there are also vlan interfaces on > the same eth interfaces wich are in bridge. > > Kernel 2.4.20 works OK, but I have kernel crash when I try to use htb > qos over ipsec interfaces. > > So I decided to move to newer kernel. > > This is 2.4.28 from kernel org with openswan 1.0.8 and > ebtables-brnf-8_vs_2.4.28. > <http://prdownloads.sourceforge.net/ebtables/ebtables-brnf-8_vs_2.4.28.diff.gz?download> > > > Here is kernel oops: > > vpn_22_203 login: Unable to handle kernel NULL pointer dereference at > virtual address 00000024 > d0129426 > *pde = 00000000 > Oops: 0000 > CPU: 0 > EIP: 0010:[<d0129426>] Not tainted > Using defaults from ksymoops -t elf32-i386 -a i386 > EFLAGS: 00010246 > eax: 00000000 ebx: c02efb50 ecx: c02efb50 edx: cde528e0 > esi: 00000000 edi: d00c7be0 ebp: d00c7be0 esp: c02efad8 > ds: 0018 es: 0018 ss: 0018 > Process swapper (pid: 0, stackpage=c02ef000) > Stack: c02efb30 80000000 c0347560 c0211648 00000004 c02efb50 00000000 > ce314804 > d00c7be0 80000000 00000004 ce314804 00000000 c0211955 c0347560 > c02efb50 > 00000004 00000000 ce314804 c02efb30 d00c7be0 80000000 d012ecf0 > cdb3a9e0 > Call Trace: [<c0211648>] [<d00c7be0>] [<c0211955>] [<d00c7be0>] > [<d012ecf0>] > [<d00cbade>] [<d00c7be0>] [<d00c7be0>] [<c0211648>] [<d00c7be0>] > [<c0211955>] > [<d00c7be0>] [<d00cdb00>] [<d00c7cea>] [<d00c7be0>] [<c0211995>] > [<d00c7cb0>] > [<d00cb899>] [<d00c7cb0>] [<d00c7cb0>] [<c0211648>] [<d00c7cb0>] > [<c0211955>] > [<d00c7cb0>] [<d00cdae8>] [<d00c7d2a>] [<d00c7cb0>] [<d00c7273>] > [<d00c72af>] > [<c0209682>] [<c022279c>] [<c0222710>] [<d00cbc2d>] [<c0222710>] > [<c0211648>] > [<c0222710>] [<c0211955>] [<c0222710>] [<d00cdba8>] [<c021fa90>] > [<c0220f2a>] > [<c0222710>] [<c021fa90>] [<c021fac6>] [<d00cbc2d>] [<c021fa90>] > [<c0211648>] > [<d010be20>] [<c021fa90>] [<c0211955>] [<d010be20>] [<c021fa90>] > [<d00cdb48>] > [<d010be20>] [<c021fa05>] [<d010be20>] [<c021fa90>] [<d010be20>] > [<c021ea47>] > [<c021e880>] [<d00cbb85>] [<c0211648>] [<d010be20>] [<c021e880>] > [<c0211955>] > [<d010be20>] [<c021e880>] [<d00cdb18>] [<c021e68c>] [<d010be20>] > [<c021e880>] > [<d010be20>] [<c0209c6c>] [<d010be20>] [<d010be20>] [<c0209d80>] > [<c0209e9f>] > [<c011af39>] [<c010a081>] [<c0106ea0>] [<c010c3b8>] [<c0106ea0>] > [<c0106ec4>] > [<c0106f32>] [<c0105000>] > Code: 8b 46 24 39 42 60 77 07 ba 01 00 00 00 eb e9 57 52 e8 f4 8c > > >>EIP; d0129426 <[ip_conntrack].text.start+3c6/34af> <===== > > >>ebx; c02efb50 <init_task_union+1b50/c749> > >>ecx; c02efb50 <init_task_union+1b50/c749> > >>edx; cde528e0 <_end+db0781c/fcc7fec> > >>edi; d00c7be0 <[bridge].text.start+b80/4dbb> > >>ebp; d00c7be0 <[bridge].text.start+b80/4dbb> > >>esp; c02efad8 <init_task_union+1ad8/c749> > > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; d012ecf0 <[ip_conntrack].data.start+30/893> > Trace; d00cbade <[bridge].text.start+4a7e/4dbb> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; d00cdb00 <[bridge].data.start+2e0/557> > Trace; d00c7cea <[bridge].text.start+c8a/4dbb> > Trace; d00c7be0 <[bridge].text.start+b80/4dbb> > Trace; c0211995 <nf_hook_slow+a5/150> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; d00cb899 <[bridge].text.start+4839/4dbb> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; d00cdae8 <[bridge].data.start+2c8/557> > Trace; d00c7d2a <[bridge].text.start+cca/4dbb> > Trace; d00c7cb0 <[bridge].text.start+c50/4dbb> > Trace; d00c7273 <[bridge].text.start+213/4dbb> > Trace; d00c72af <[bridge].text.start+24f/4dbb> > Trace; c0209682 <dev_queue_xmit+a2/2d0> > Trace; c022279c <ip_send_check+ec/500> > Trace; c0222710 <ip_send_check+60/500> > Trace; d00cbc2d <[bridge].text.start+4bcd/4dbb> > Trace; c0222710 <ip_send_check+60/500> > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; c0222710 <ip_send_check+60/500> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; c0222710 <ip_send_check+60/500> > Trace; d00cdba8 <[bridge].data.start+388/557> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; c0220f2a <ip_finish_output+11a/4f0> > Trace; c0222710 <ip_send_check+60/500> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; c021fac6 <ipfrag_flush+2a6/8c0> > Trace; d00cbc2d <[bridge].text.start+4bcd/4dbb> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; d00cdb48 <[bridge].data.start+328/557> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021fa05 <ipfrag_flush+1e5/8c0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021fa90 <ipfrag_flush+270/8c0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021ea47 <ip_rcv+747/1370> > Trace; c021e880 <ip_rcv+580/1370> > Trace; d00cbb85 <[bridge].text.start+4b25/4dbb> > Trace; c0211648 <nf_getsockopt+88/c0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021e880 <ip_rcv+580/1370> > Trace; c0211955 <nf_hook_slow+65/150> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021e880 <ip_rcv+580/1370> > Trace; d00cdb18 <[bridge].data.start+2f8/557> > Trace; c021e68c <ip_rcv+38c/1370> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c021e880 <ip_rcv+580/1370> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c0209c6c <netif_receive_skb+fc/3d0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0> > Trace; c0209d80 <netif_receive_skb+210/3d0> > Trace; c0209e9f <netif_receive_skb+32f/3d0> > Trace; c011af39 <do_softirq+99/a0> > Trace; c010a081 <enable_irq+121/130> > Trace; c0106ea0 <default_idle+0/b0> > Trace; c010c3b8 <disable_irq_nosync+1d78/2b80> > Trace; c0106ea0 <default_idle+0/b0> > Trace; c0106ec4 <default_idle+24/b0> > Trace; c0106f32 <default_idle+92/b0> > Trace; c0105000 <empty_zero_page+1000/2e80> > > <0>Kernel panic: Aiee, killing interrupt handler! > > > btw, kernel 2.4.26 dies with almost the same results (unfortunately, I > didn't wrote oops). > > Could you look to this and give me an idea where is problem? I.e. this > is bridge or ipsec problem or something else? > > Thank you! Looks like a problem in the ebtables rules, try ebtables-devel@xxxxxxxxxxxxxxx