Hi all,We've experienced a recent kernel crash on a captive portal server running debian/wheezy with a standard kernel 3.2.0-4. The crash seems to be related to ipset that we're using to check bitmaps {ip,mac}. It has not been seen before on this production server.
Thanks for your help, Regards, -- Université de Nantes - Direction des Systèmes d'Information IM jabber: yoann.juet@xxxxxxxxxxxxxx Tél: 02.53.48.49.26 - Fax: 02.53.48.49.09
Sep 8 21:04:01 p1 kernel: [1245305.746885] ------------[ cut here ]------------ Sep 8 21:04:01 p1 kernel: [1245305.747344] kernel BUG at /build/linux-s5x2oE/linux-3.2.46/net/netfilter/ipset/ip_set_core.c:317! Sep 8 21:04:01 p1 kernel: [1245305.748212] invalid opcode: 0000 [#1] SMP Sep 8 21:04:01 p1 kernel: [1245305.748623] CPU 2 Sep 8 21:04:01 p1 kernel: [1245305.748697] Modules linked in: ip_vs crc32c libcrc32c ipt_LOG xt_set ip_set_bitmap_ipmac ip_set nfnetlink xt_TPROXY nf_tproxy_core xt_socket ipt_REDIRECT xt_mark xt_tcpudp xt_limit xt_state ip6table_filter ip6_tables iptable_mangle iptable_filter nf_nat_ftp iptable_nat nf_nat nf_conntrack_irc nf_conntrack_ftp nf_conntrack_ipv4 nf_defrag_ipv4 ip_tables x_tables ext2 mbcache nf_conntrack_ipv6 nf_defrag_ipv6 nf_conntrack psmouse snd_pcm snd_page_alloc evdev i2c_piix4 serio_raw virtio_balloon i2c_core processor snd_timer snd soundcore pcspkr thermal_sys button xfs dm_mod ata_generic virtio_blk virtio_net floppy ata_piix libata uhci_hcd ehci_hcd scsi_mod virtio_pci virtio_ring virtio usbcore usb_common [last unloaded: scsi_wait_scan] Sep 8 21:04:01 p1 kernel: [1245305.749268] Sep 8 21:04:01 p1 kernel: [1245305.749268] Pid: 29834, comm: ipset Not tainted 3.2.0-4-amd64 #1 Debian 3.2.46-1 Bochs Bochs Sep 8 21:04:01 p1 kernel: [1245305.749268] RIP: 0010:[<ffffffffa02a1087>] [<ffffffffa02a1087>] ip_set_put_byindex+0x30/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.749268] RSP: 0018:ffff8800d799fa38 EFLAGS: 00010246 Sep 8 21:04:01 p1 kernel: [1245305.749268] RAX: ffff8801188627c0 RBX: 0000000000000000 RCX: 0000000000000002 Sep 8 21:04:01 p1 kernel: [1245305.749268] RDX: 0000000000000000 RSI: 0000000000000016 RDI: ffffffffa02a5034 Sep 8 21:04:01 p1 kernel: [1245305.749268] RBP: ffff8801152f6c00 R08: 0000000000000004 R09: 0000000000000002 Sep 8 21:04:01 p1 kernel: [1245305.749268] R10: 0000000000000246 R11: 0000000000000246 R12: ffff8800bfc0f580 Sep 8 21:04:01 p1 kernel: [1245305.749268] R13: 0000000000000e80 R14: ffff8801149956c0 R15: ffff8800d799fae0 Sep 8 21:04:01 p1 kernel: [1245305.749268] FS: 00007f437895b700(0000) GS:ffff88011fd00000(0000) knlGS:0000000000000000 Sep 8 21:04:01 p1 kernel: [1245305.749268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Sep 8 21:04:01 p1 kernel: [1245305.749268] CR2: 00007f4378536cb0 CR3: 00000000cd4aa000 CR4: 00000000000006e0 Sep 8 21:04:01 p1 kernel: [1245305.749268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 Sep 8 21:04:01 p1 kernel: [1245305.749268] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 Sep 8 21:04:01 p1 kernel: [1245305.749268] Process ipset (pid: 29834, threadinfo ffff8800d799e000, task ffff880117ccea70) Sep 8 21:04:01 p1 kernel: [1245305.749268] Stack: Sep 8 21:04:01 p1 kernel: [1245305.749268] ffff8801149956c0 ffffffffa02a10ae 0000000000000002 ffffffff812ad5bd Sep 8 21:04:01 p1 kernel: [1245305.749268] ffffffff810364e8 ffffffa68134d81c 0000000000000246 ffff8801152f6c00 Sep 8 21:04:01 p1 kernel: [1245305.749268] ffff8801179da400 ffff8800c0e20e00 ffffffffa02a10b2 ffffffff812adf7d Sep 8 21:04:01 p1 kernel: [1245305.749268] Call Trace: Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa02a10ae>] ? ip_set_dump_done+0x11/0x15 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812ad5bd>] ? netlink_dump+0x16f/0x1ce Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa02a10b2>] ? ip_set_dump_done+0x15/0x15 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812adf7d>] ? netlink_dump_start+0xf1/0x118 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa02a109d>] ? ip_set_put_byindex+0x46/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa02972ac>] ? nfnetlink_rcv_msg+0x1b6/0x1fe [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa029712e>] ? nfnetlink_rcv_msg+0x38/0x1fe [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffffa02970f6>] ? nfnl_lock+0xc/0xc [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812af559>] ? netlink_rcv_skb+0x36/0x7a Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812af090>] ? netlink_unicast+0xe6/0x14e Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812af36c>] ? netlink_sendmsg+0x274/0x2ac Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff8127e831>] ? sock_sendmsg+0xc1/0xde Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810f267c>] ? mem_cgroup_update_page_stat+0x17/0xd4 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810d0c6b>] ? handle_pte_fault+0x298/0x79f Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff8134d81c>] ? _cond_resched+0x7/0x1c Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff8127d27f>] ? copy_from_user+0x18/0x30 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff812800c7>] ? sys_sendto+0xf7/0x137 Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff810fb5b2>] ? fget_light+0x2e/0x7b Sep 8 21:04:01 p1 kernel: [1245305.749268] [<ffffffff81353b52>] ? system_call_fastpath+0x16/0x1b Sep 8 21:04:01 p1 kernel: [1245305.749268] Code: 00 00 53 0f b7 df 48 83 3c d8 00 74 32 48 c7 c7 34 50 2a a0 e8 f0 db 0a e1 48 8b 05 84 42 00 00 48 8b 04 d8 8b 50 24 85 d2 75 02 <0f> 0b ff ca 48 c7 c7 34 50 2a a0 89 50 24 5b e9 a2 db 0a e1 5b Sep 8 21:04:01 p1 kernel: [1245305.749268] RIP [<ffffffffa02a1087>] ip_set_put_byindex+0x30/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.749268] RSP <ffff8800d799fa38> Sep 8 21:04:01 p1 kernel: [1245305.783960] ---[ end trace cf0b8013a04e3016 ]--- Sep 8 21:04:01 p1 kernel: [1245305.784351] Kernel panic - not syncing: Fatal exception in interrupt Sep 8 21:04:01 p1 kernel: [1245305.784739] Pid: 29834, comm: ipset Tainted: G D 3.2.0-4-amd64 #1 Debian 3.2.46-1 Sep 8 21:04:01 p1 kernel: [1245305.785471] Call Trace: Sep 8 21:04:01 p1 kernel: [1245305.785836] [<ffffffff813481ed>] ? panic+0x95/0x1a2 Sep 8 21:04:01 p1 kernel: [1245305.786190] [<ffffffff8134eb77>] ? _raw_spin_unlock_irqrestore+0xe/0xf Sep 8 21:04:01 p1 kernel: [1245305.786732] [<ffffffff8134f986>] ? oops_end+0xa9/0xb6 Sep 8 21:04:01 p1 kernel: [1245305.787252] [<ffffffff8100e961>] ? do_invalid_op+0x87/0x91 Sep 8 21:04:01 p1 kernel: [1245305.787673] [<ffffffffa02a1087>] ? ip_set_put_byindex+0x30/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.788167] [<ffffffff811bf17c>] ? __nla_put+0xd/0x20 Sep 8 21:04:01 p1 kernel: [1245305.788604] [<ffffffff811bf1bf>] ? nla_put+0x30/0x34 Sep 8 21:04:01 p1 kernel: [1245305.789044] [<ffffffffa02ad7b9>] ? bitmap_ipmac_tlist+0x1ed/0x216 [ip_set_bitmap_ipmac] Sep 8 21:04:01 p1 kernel: [1245305.789725] [<ffffffff81355b2b>] ? invalid_op+0x1b/0x20 Sep 8 21:04:01 p1 kernel: [1245305.790105] [<ffffffffa02a1087>] ? ip_set_put_byindex+0x30/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.790597] [<ffffffffa02a1075>] ? ip_set_put_byindex+0x1e/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.791107] [<ffffffffa02a10ae>] ? ip_set_dump_done+0x11/0x15 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.791760] [<ffffffff812ad5bd>] ? netlink_dump+0x16f/0x1ce Sep 8 21:04:01 p1 kernel: [1245305.792559] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.793085] [<ffffffffa02a10b2>] ? ip_set_dump_done+0x15/0x15 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.793480] [<ffffffff812adf7d>] ? netlink_dump_start+0xf1/0x118 Sep 8 21:04:01 p1 kernel: [1245305.793885] [<ffffffffa02a109d>] ? ip_set_put_byindex+0x46/0x46 [ip_set] Sep 8 21:04:01 p1 kernel: [1245305.794299] [<ffffffffa02972ac>] ? nfnetlink_rcv_msg+0x1b6/0x1fe [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.794972] [<ffffffffa029712e>] ? nfnetlink_rcv_msg+0x38/0x1fe [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.795571] [<ffffffffa02970f6>] ? nfnl_lock+0xc/0xc [nfnetlink] Sep 8 21:04:01 p1 kernel: [1245305.796036] [<ffffffff812af559>] ? netlink_rcv_skb+0x36/0x7a Sep 8 21:04:01 p1 kernel: [1245305.796484] [<ffffffff812af090>] ? netlink_unicast+0xe6/0x14e Sep 8 21:04:01 p1 kernel: [1245305.796899] [<ffffffff812af36c>] ? netlink_sendmsg+0x274/0x2ac Sep 8 21:04:01 p1 kernel: [1245305.797279] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.797738] [<ffffffff8127e831>] ? sock_sendmsg+0xc1/0xde Sep 8 21:04:01 p1 kernel: [1245305.798113] [<ffffffff810f267c>] ? mem_cgroup_update_page_stat+0x17/0xd4 Sep 8 21:04:01 p1 kernel: [1245305.798503] [<ffffffff810d0c6b>] ? handle_pte_fault+0x298/0x79f Sep 8 21:04:01 p1 kernel: [1245305.798943] [<ffffffff810364e8>] ? should_resched+0x5/0x23 Sep 8 21:04:01 p1 kernel: [1245305.799331] [<ffffffff8134d81c>] ? _cond_resched+0x7/0x1c Sep 8 21:04:01 p1 kernel: [1245305.799734] [<ffffffff8127d27f>] ? copy_from_user+0x18/0x30 Sep 8 21:04:01 p1 kernel: [1245305.800149] [<ffffffff812800c7>] ? sys_sendto+0xf7/0x137
begin:vcard fn:Yoann Juet n:Juet;Yoann org;quoted-printable;quoted-printable:Direction des Syst=C3=A8mes d'Information;P=C3=B4le R=C3=A9seau adr;quoted-printable:BP 92208;;2 rue de la Houssini=C3=A8re;Nantes Cedex 3;;44322;France email;internet:yoann.juet@xxxxxxxxxxxxxx tel;work:02.53.48.49.26 tel;fax:02.53.48.49.09 tel;cell:06.73.15.42.19 version:2.1 end:vcard
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature