On Thu, 16 Dec 2004 13:59:57 +0400
Dmitry Melekhov <dm@belkam.com> wrote:
> Hello!
>
> I don't shure I'm writing to right list, please point me to right
list,
> if this is wrong place.
> And I posted this message to linux-net... Sorry!
>
> I run Linux as bridge (with ebtables), router and ipsec using
> super-freeswan/openswan.
>
> ipsec interface is over br interface, there are also vlan interfaces on
> the same eth interfaces wich are in bridge.
>
> Kernel 2.4.20 works OK, but I have kernel crash when I try to use htb
> qos over ipsec interfaces.
>
> So I decided to move to newer kernel.
>
> This is 2.4.28 from kernel org with openswan 1.0.8 and
> ebtables-brnf-8_vs_2.4.28.
>
<http://prdownloads.sourceforge.net/ebtables/ebtables-brnf-8_vs_2.4.28.diff.gz?download>
>
>
> Here is kernel oops:
>
> vpn_22_203 login: Unable to handle kernel NULL pointer dereference at
> virtual address 00000024
> d0129426
> *pde = 00000000
> Oops: 0000
> CPU: 0
> EIP: 0010:[<d0129426>] Not tainted
> Using defaults from ksymoops -t elf32-i386 -a i386
> EFLAGS: 00010246
> eax: 00000000 ebx: c02efb50 ecx: c02efb50 edx: cde528e0
> esi: 00000000 edi: d00c7be0 ebp: d00c7be0 esp: c02efad8
> ds: 0018 es: 0018 ss: 0018
> Process swapper (pid: 0, stackpage=c02ef000)
> Stack: c02efb30 80000000 c0347560 c0211648 00000004 c02efb50 00000000
> ce314804
> d00c7be0 80000000 00000004 ce314804 00000000 c0211955 c0347560
> c02efb50
> 00000004 00000000 ce314804 c02efb30 d00c7be0 80000000 d012ecf0
> cdb3a9e0
> Call Trace: [<c0211648>] [<d00c7be0>] [<c0211955>]
[<d00c7be0>]
> [<d012ecf0>]
> [<d00cbade>] [<d00c7be0>] [<d00c7be0>]
[<c0211648>] [<d00c7be0>]
> [<c0211955>]
> [<d00c7be0>] [<d00cdb00>] [<d00c7cea>]
[<d00c7be0>] [<c0211995>]
> [<d00c7cb0>]
> [<d00cb899>] [<d00c7cb0>] [<d00c7cb0>]
[<c0211648>] [<d00c7cb0>]
> [<c0211955>]
> [<d00c7cb0>] [<d00cdae8>] [<d00c7d2a>]
[<d00c7cb0>] [<d00c7273>]
> [<d00c72af>]
> [<c0209682>] [<c022279c>] [<c0222710>]
[<d00cbc2d>] [<c0222710>]
> [<c0211648>]
> [<c0222710>] [<c0211955>] [<c0222710>]
[<d00cdba8>] [<c021fa90>]
> [<c0220f2a>]
> [<c0222710>] [<c021fa90>] [<c021fac6>]
[<d00cbc2d>] [<c021fa90>]
> [<c0211648>]
> [<d010be20>] [<c021fa90>] [<c0211955>]
[<d010be20>] [<c021fa90>]
> [<d00cdb48>]
> [<d010be20>] [<c021fa05>] [<d010be20>]
[<c021fa90>] [<d010be20>]
> [<c021ea47>]
> [<c021e880>] [<d00cbb85>] [<c0211648>]
[<d010be20>] [<c021e880>]
> [<c0211955>]
> [<d010be20>] [<c021e880>] [<d00cdb18>]
[<c021e68c>] [<d010be20>]
> [<c021e880>]
> [<d010be20>] [<c0209c6c>] [<d010be20>]
[<d010be20>] [<c0209d80>]
> [<c0209e9f>]
> [<c011af39>] [<c010a081>] [<c0106ea0>]
[<c010c3b8>] [<c0106ea0>]
> [<c0106ec4>]
> [<c0106f32>] [<c0105000>]
> Code: 8b 46 24 39 42 60 77 07 ba 01 00 00 00 eb e9 57 52 e8 f4 8c
>
> >>EIP; d0129426 <[ip_conntrack].text.start+3c6/34af>
<====>
> >>ebx; c02efb50 <init_task_union+1b50/c749>
> >>ecx; c02efb50 <init_task_union+1b50/c749>
> >>edx; cde528e0 <_end+db0781c/fcc7fec>
> >>edi; d00c7be0 <[bridge].text.start+b80/4dbb>
> >>ebp; d00c7be0 <[bridge].text.start+b80/4dbb>
> >>esp; c02efad8 <init_task_union+1ad8/c749>
>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; d012ecf0 <[ip_conntrack].data.start+30/893>
> Trace; d00cbade <[bridge].text.start+4a7e/4dbb>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; d00cdb00 <[bridge].data.start+2e0/557>
> Trace; d00c7cea <[bridge].text.start+c8a/4dbb>
> Trace; d00c7be0 <[bridge].text.start+b80/4dbb>
> Trace; c0211995 <nf_hook_slow+a5/150>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; d00cb899 <[bridge].text.start+4839/4dbb>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; d00cdae8 <[bridge].data.start+2c8/557>
> Trace; d00c7d2a <[bridge].text.start+cca/4dbb>
> Trace; d00c7cb0 <[bridge].text.start+c50/4dbb>
> Trace; d00c7273 <[bridge].text.start+213/4dbb>
> Trace; d00c72af <[bridge].text.start+24f/4dbb>
> Trace; c0209682 <dev_queue_xmit+a2/2d0>
> Trace; c022279c <ip_send_check+ec/500>
> Trace; c0222710 <ip_send_check+60/500>
> Trace; d00cbc2d <[bridge].text.start+4bcd/4dbb>
> Trace; c0222710 <ip_send_check+60/500>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; c0222710 <ip_send_check+60/500>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; c0222710 <ip_send_check+60/500>
> Trace; d00cdba8 <[bridge].data.start+388/557>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; c0220f2a <ip_finish_output+11a/4f0>
> Trace; c0222710 <ip_send_check+60/500>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; c021fac6 <ipfrag_flush+2a6/8c0>
> Trace; d00cbc2d <[bridge].text.start+4bcd/4dbb>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; d00cdb48 <[bridge].data.start+328/557>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021fa05 <ipfrag_flush+1e5/8c0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021fa90 <ipfrag_flush+270/8c0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021ea47 <ip_rcv+747/1370>
> Trace; c021e880 <ip_rcv+580/1370>
> Trace; d00cbb85 <[bridge].text.start+4b25/4dbb>
> Trace; c0211648 <nf_getsockopt+88/c0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021e880 <ip_rcv+580/1370>
> Trace; c0211955 <nf_hook_slow+65/150>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021e880 <ip_rcv+580/1370>
> Trace; d00cdb18 <[bridge].data.start+2f8/557>
> Trace; c021e68c <ip_rcv+38c/1370>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c021e880 <ip_rcv+580/1370>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c0209c6c <netif_receive_skb+fc/3d0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; d010be20 <[ipsec]ipsec_alg_test+27ab0/2bcf0>
> Trace; c0209d80 <netif_receive_skb+210/3d0>
> Trace; c0209e9f <netif_receive_skb+32f/3d0>
> Trace; c011af39 <do_softirq+99/a0>
> Trace; c010a081 <enable_irq+121/130>
> Trace; c0106ea0 <default_idle+0/b0>
> Trace; c010c3b8 <disable_irq_nosync+1d78/2b80>
> Trace; c0106ea0 <default_idle+0/b0>
> Trace; c0106ec4 <default_idle+24/b0>
> Trace; c0106f32 <default_idle+92/b0>
> Trace; c0105000 <empty_zero_page+1000/2e80>
>
> <0>Kernel panic: Aiee, killing interrupt handler!
>
>
> btw, kernel 2.4.26 dies with almost the same results (unfortunately, I
> didn't wrote oops).
>
> Could you look to this and give me an idea where is problem? I.e. this
> is bridge or ipsec problem or something else?
>
> Thank you!
Looks like a problem in the ebtables rules, try ebtables-devel@sourceforge.net