search for: br_nf_pre_routing

...eference at virtual address 0000000c printing eip: c0359b67 *pde = 00000000 Oops: 0000 [#1] Modules linked in: ebt_ip ebtable_filter ebtbles rtc sata_nv nvsound sata_sil nvnet eepro100 3c59x r8169 CPU: 0 EIP: 0060:[<c0359b67>] Tainted: P VLI EFLAGS: 00010282 (2.6.15) EIP i at br_nf_pre_routing_finish+0x1a/0x2c0 eax: 00000000 ebx: 00000000 ecx: c0475e9c edx: dfb2c5a0 esi: cv760820 edi: 80000000 ebp: deefe000 esp: c0475de0 ds: 007b es: 007b ss: 0068 Process swapper (pid: , threadinfo=c0474000 task=c03fbb00) Stack: c0475e9c c8c6f082 c04d4020 c0475e9c fb0000e0 c0345127 000000...

...ffffffa04f36d5 Call Trace: <IRQ> [<ffffffffa04f3930>] ? __br_forward+0x0/0xd0 [bridge] [<ffffffffa04f36d5>] ? br_multicast_forward+0x15/0x20 [bridge] [<ffffffffa04f4a34>] ? br_handle_frame_finish+0x144/0x2a0 [bridge] [<ffffffffa04fa938>] ? br_nf_pre_routing_finish+0x238/0x350 [bridge] [<ffffffffa04faedb>] ? br_nf_pre_routing+0x48b/0x7b0 [bridge] [<ffffffff8143ba57>] ? __kfree_skb+0x47/0xa0 [<ffffffff814734f9>] ? nf_iterate+0x69/0xb0 [<ffffffffa04f48f0>] ? br_handle_frame_finish+0x0/0x2a0 [bridge] [<f...

...ish+0x0/0x70 [bridge] [<c014537e>] cache_grow+0x9e/0x190 [<c01455bd>] cache_alloc_refill+0x14d/0x220 [<c9167d70>] br_forward_finish+0x0/0x70 [bridge] [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c0145899>] kmem_cache_alloc+0x69/0x70 [<c916d132>] br_nf_pre_routing+0x1b2/0x480 [bridge] [<c9168990>] br_pass_frame_up_finish+0x0/0x20 [bridge] [<c029631e>] nf_hook_slow+0x6e/0x100 [<c0296018>] nf_iterate+0x78/0x90 [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c...

..._hdr tap02163e496dfb: tap vnet_hdr tap02163e4f4369: tap vnet_hdr tap02163e50bee1: tap vnet_hdr KVM VM's are connected through TAP devices to external network. We periodically hit the following crash in netfilter in all the 3 linux kernel variants. [ 5445.359446] [<ffffffffa0395200>] ? br_nf_pre_routing_finish_bridge+0x60/0xd0 [bridge] [ 5445.372671] [<ffffffffa0396808>] br_nf_pre_routing_finish+0x328/0x360 [bridge] [ 5445.385984] [<ffffffffa0396b96>] br_nf_pre_routing+0x356/0x370 [bridge] [ 5445.393255] [<ffffffff815165d5>] nf_iterate+0x85/0xc0 [ 5445.400827] [<ffffffffa0...

...le_filter.ko ebt_hook 1177 sky2.ko sky2_phy_stats 1304 bridge.ko setup_pre_routing 1417 bridge.ko br_fdb_cleanup 1425 sky2.ko sky2_put_idx 1766 ipt_physdev.ko .text 2113 bridge.ko br_nf_pre_routing_finish 2133 bridge.ko br_nf_forward_ip 2314 bridge.ko br_handle_frame_finish 2454 bridge.ko br_dev_queue_push_xmit 2515 bridge.ko ip_sabotage_out 2718 sky2.ko sky2_rx_add 2858 sch_htb.ko...

...his kernel panic on the bridge: Unable to handle kernel NULL pointer dereference at virtual address 00000010 printing eip: c035d28e *pde = 36ca6001 *pte = 00000000 Oops: 0000 [#1] Modules linked in: CPU: 0 EIP: 0060:[<c035d28e>] Not tainted VLI EFLAGS: 00010282 (2.6.15) EIP is at br_nf_pre_routing_finish+0x1a/0x34e eax: f7b0b380 ebx: 00000000 ecx: 00000001 edx: f7b0b380 esi: f7b11820 edi: c0496da0 ebp: f7287800 esp: c044fd40 ds: 007b es: 007b ss: 0068 Process swapper (pid: 0, threadinfo=c044e000 task=c03e9b00) Stack: a91f2f0a 00000000 f7bcc55c 00000002 c03470c7 f7bcc55c 00000...

...gt; [<ffffffff80395cbc>] netif_receive_skb+0x2d3/0x2f3 <Aug/28 12:21 pm> [<ffffffff8828f9b4>] :bridge:br_pass_frame_up+0x64/0x66 <Aug/28 12:21 pm> [<ffffffff8828fa7a>] :bridge:br_handle_frame_finish+0xc4/0xf6 <Aug/28 12:21 pm> [<ffffffff88292e57>] :bridge:br_nf_pre_routing_finish_ipv6+0xd f/0xe3 <Aug/28 12:21 pm> [<ffffffff882935e6>] :bridge:br_nf_pre_routing+0x39b/0x667 <Aug/28 12:21 pm> [<ffffffff803ad73c>] nf_iterate+0x52/0x79 <Aug/28 12:21 pm> [<ffffffff8828f9b6>] :bridge:br_handle_frame_finish+0x0/0xf6 <Aug/28 12:21 pm&gt...

...4f0f4e>] nf_hook_slow+0x6e/0x120 [<c05bbee0>] br_forward_finish+0x0/0x70 [<c05bc044>] __br_forward+0x74/0x80 [<c05bbee0>] br_forward_finish+0x0/0x70 [<c05bceb1>] br_handle_frame_finish+0xd1/0x160 [<c05bcde0>] br_handle_frame_finish+0x0/0x160 [<c05c0e0b>] br_nf_pre_routing_finish+0xfb/0x480 [<c05bcde0>] br_handle_frame_finish+0x0/0x160 [<c05c0d10>] br_nf_pre_routing_finish+0x0/0x480 [<c054fe13>] ip_nat_in+0x43/0xc0 [<c05c0d10>] br_nf_pre_routing_finish+0x0/0x480 [<c04f0eab>] nf_iterate+0x6b/0xa0 [<c05c0d10>] br_nf_pre_routing...

..._constant_htons(ETH_P_8021Q) && \ + hdr->h_vlan_encapsulated_proto == __constant_htons(ETH_P_ARP)) + /* We need these fake structures to make netfilter happy -- * lots of places assume that skb->dst != NULL, which isn't * all that unreasonable. @@ -135,8 +147,13 @@ static int br_nf_pre_routing_finish_brid skb->pkt_type = PACKET_HOST; skb->nf_bridge->mask |= BRNF_PKT_TYPE; } + skb->nf_bridge->mask ^= BRNF_NF_BRIDGE_PREROUTING; skb->dev = bridge_parent(skb->dev); + if (skb->protocol == __constant_htons(ETH_P_8021Q)) { + skb_pull(skb, VLAN_HLEN); + skb-...

...1:29:39 xenhost-rack1 kernel: [4437064.012135] [<ffffffff81543b4b>] br_flood_forward+0x10/0x12 Dec 2 01:29:39 xenhost-rack1 kernel: [4437064.012137] [<ffffffff81544872>] br_handle_frame_finish+0x13a/0x151 Dec 2 01:29:39 xenhost-rack1 kernel: [4437064.012141] [<ffffffff81548616>] br_nf_pre_routing_finish+0x249/0x258 Dec 2 01:29:39 xenhost-rack1 kernel: [4437064.012144] [<ffffffff815492d3>] br_nf_pre_routing+0x55d/0x57e Dec 2 01:29:39 xenhost-rack1 kernel: [4437064.012147] [<ffffffff8149fe3e>] nf_iterate+0x41/0x84 Dec 2 01:29:39 xenhost-rack1 kernel: [4437064.012150] [<fffff...

...ff88000290d840 ffff88000a93d380 ffffffff8014bd98 0000000000000000 ffff88000c02ef30 ffffffff8013000e ffffffff80355f6c Call Trace:<ffffffff8014bd98>{mempool_alloc+152} <ffffffff8013000e>{proc_opensys+30} <ffffffff80355f6c>{nf_iterate+92} <ffffffff80397a50>{br_nf_pre_routing_finish+0} <ffffffff80356b4d>{nf_hook_slow+125} <ffffffff80397a50>{br_nf_pre_routing_finish+0} <ffffffff803984d1>{br_nf_pre_routing+1793} <ffffffff8014bceb>{mempool_free+171} <ffffffff80355f6c>{nf_iterate+92} <ffffffff80393850>{br_handle_fra\u...