Hi all, I'm using firehol (https://github.com/firehol/firehol/) on some Debian machines to do my routing. I'm not sure when this started happening but recently firehol seems to be able to trigger something in netfilter that causes a general protection fault on my x86-64 machines. The same thing seems to happen on my ARM64 machines too. I've attached the fault output below. Loading Linux 4.19.0-2-amd64 ... Loading initial ramdisk ... error: no suitable video mode found. Booting in blind mode /dev/nvme0n1p2: clean, 79094/14565376 files, 2418538/58234880 blocks [ 6.189887] general protection fault: 0000 [#1] SMP PTI [ 6.195383] CPU: 3 PID: 645 Comm: iptables-restor Tainted: G OE 4.19.0-2-amd64 #1 Debian 4.19.16-1 [ 6.206177] Hardware name: HARDKERNEL ODROID-H2/ODROID-H2, BIOS 5.13 10/30/2018 [ 6.213981] RIP: 0010:nf_tables_newrule+0x5df/0x8f0 [nf_tables] [ 6.220244] Code: 4c 89 f9 41 89 c7 4c 89 f6 48 89 cf e8 4a 62 ff ff 45 85 ed 74 2c 48 8b 6c 24 10 31 db 48 8b 45 00 48 8b [ 6.240282] RSP: 0018:ffffa5ef8205f9b0 EFLAGS: 00010286 [ 6.245939] RAX: dead000000000100 RBX: 0000000000000000 RCX: 0000000000000005 [ 6.253580] RDX: 0000000000000005 RSI: ffffffffc08e62d0 RDI: ffffa5ef820aa4f4 [ 6.261183] RBP: ffff8c42ec620000 R08: 0000000000000000 R09: 0000000000000074 [ 6.268731] R10: ffffa5ef8205f8f8 R11: 0000000000000001 R12: 00000000000000ec [ 6.276280] R13: 0000000000000001 R14: ffffa5ef820aa4ec R15: 00000000fffffff5 [ 6.283931] FS: 00007fe8e32c8740(0000) GS:ffff8c42efb80000(0000) knlGS:0000000000000000 [ 6.292572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 6.298657] CR2: 00007fb6e2219b94 CR3: 0000000469c4a000 CR4: 0000000000340ee0 [ 6.306285] Call Trace: [ 6.308936] ? vm_brk_flags+0xa2/0x110 [ 6.312899] nfnetlink_rcv_batch+0x4aa/0x660 [nfnetlink] [ 6.318534] ? __insert_vmap_area+0x99/0x100 [ 6.323060] ? vmap_page_range_noflush+0x251/0x360 [ 6.328135] ? refcount_inc_checked+0x5/0x30 [ 6.332743] ? apparmor_capable+0x72/0xa0 [ 6.337040] ? nla_parse+0x31/0xe0 [ 6.340665] nfnetlink_rcv+0x10c/0x141 [nfnetlink] [ 6.345762] netlink_unicast+0x1bd/0x260 [ 6.349910] netlink_sendmsg+0x1ff/0x3b0 [ 6.354125] sock_sendmsg+0x36/0x40 [ 6.357851] ___sys_sendmsg+0x295/0x2f0 [ 6.361933] ? filemap_map_pages+0x360/0x3a0 [ 6.366529] ? refcount_inc_checked+0x5/0x30 [ 6.371049] ? apparmor_capable+0x72/0xa0 [ 6.375237] ? security_capable+0x35/0x50 [ 6.379489] ? release_sock+0x19/0x90 [ 6.383363] __sys_sendmsg+0x57/0xa0 [ 6.387170] do_syscall_64+0x53/0x100
