From: Ingo Molnar <mingo@elte.hu>
To: linux-kernel@vger.kernel.org
Cc: Andrew Morton <akpm@osdl.org>,
"David S. Miller" <davem@davemloft.net>,
Herbert Xu <herbert@gondor.apana.org.au>,
coreteam@netfilter.org
Subject: [lockup] 2.6.17-rc3: netfilter/sctp: lockup in sctp_new(), do_basic_checks()
Date: Tue, 2 May 2006 13:34:54 +0200 [thread overview]
Message-ID: <20060502113454.GA28601@elte.hu> (raw)
running an "isic" stresstest on and against a testbox [which, amongst
other things, generates random incoming and outgoing packets] on
2.6.17-rc3 (and 2.6.17-rc3-mm1) over gigabit results in a reproducible
lockup, after 5-10 minutes of runtime:
BUG: soft lockup detected on CPU#0!
[<c0104e7f>] show_trace+0xd/0xf
[<c0104e96>] dump_stack+0x15/0x17
[<c015ad02>] softlockup_tick+0xc5/0xd9
[<c0134c02>] run_local_timers+0x22/0x24
[<c0134fb7>] update_process_times+0x40/0x65
[<c011aa56>] smp_apic_timer_interrupt+0x58/0x60
[<c010492b>] apic_timer_interrupt+0x27/0x2c
[<c0f00df9>] sctp_new+0x8b/0x235
[<c0ef9666>] ip_conntrack_in+0x175/0x4ca
[<c0eb6dd7>] nf_iterate+0x31/0x94
[<c0eb6e83>] nf_hook_slow+0x49/0xda
[<c0ec2f55>] ip_rcv+0x24c/0x567
[<c0e7dec4>] netif_receive_skb+0x34b/0x397
[<c07870cb>] rtl8139_poll+0x3d8/0x5db
[<c0e7c7ad>] net_rx_action+0x9b/0x1ba
[<c0131955>] __do_softirq+0x6e/0xec
[<c0106187>] do_softirq+0x59/0xcd
=======================
[<c0131427>] local_bh_enable+0x111/0x15d
[<c0e7d8fb>] dev_queue_xmit+0x218/0x222
[<c0ec7e2a>] ip_output+0x20b/0x249
[<c0ec5711>] ip_push_pending_frames+0x331/0x3fe
[<c0ede6e3>] raw_sendmsg+0x5cf/0x678
[<c0ee62f8>] inet_sendmsg+0x39/0x46
[<c0e7406f>] sock_sendmsg+0xf2/0x10d
[<c0e741e5>] sys_sendmsg+0x15b/0x1c9
[<c0e748b5>] sys_socketcall+0x16f/0x18a
[<c1048c1b>] syscall_call+0x7/0xb
this is with FRAME_POINTERS enabled, so it's an exact stacktrace.
the lockup is at:
(gdb) list *0xc0f00df9
0xc0f00df9 is in sctp_new
(net/ipv4/netfilter/ip_conntrack_proto_sctp.c:444).
439
440 sh = skb_header_pointer(skb, iph->ihl * 4, sizeof(_sctph), &_sctph);
441 if (sh == NULL)
442 return 0;
443
444 if (do_basic_checks(conntrack, skb, map) != 0)
445 return 0;
446
447 /* If an OOTB packet has any of these chunks discard (Sec 8.4) */
448 if ((test_bit (SCTP_CID_ABORT, (void *)map))
most likely somewhere within do_basic_checks(). [whose stack entry is
obscured by the irq entry, so it's not in the stackdump.] I have SCTP
turned on:
CONFIG_NETFILTER_XT_MATCH_SCTP=y
CONFIG_IP_NF_CT_PROTO_SCTP=y
# SCTP Configuration (EXPERIMENTAL)
CONFIG_IP_SCTP=y
but otherwise it's a stock Fedora install.
the full log and configs can be found at:
http://redhat.com/~mingo/misc/crash3.log
http://redhat.com/~mingo/misc/config3
this is a v2.6.17 showstopper i guess?
Ingo
next reply other threads:[~2006-05-02 11:30 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-05-02 11:34 Ingo Molnar [this message]
2006-05-02 13:40 ` [lockup] 2.6.17-rc3: netfilter/sctp: lockup in sctp_new(), do_basic_checks() Ingo Molnar
2006-05-02 13:45 ` Ingo Molnar
2006-05-02 13:54 ` [netfilter-core] " Patrick McHardy
2006-05-02 14:01 ` Ingo Molnar
2006-05-02 13:57 ` Patrick McHardy
2006-05-02 14:16 ` Ingo Molnar
2006-05-02 14:24 ` Ingo Molnar
2006-05-02 14:29 ` Patrick McHardy
2006-05-02 14:38 ` Ingo Molnar
2006-05-02 14:35 ` Patrick McHardy
2006-05-02 14:42 ` Ingo Molnar
2006-05-02 14:40 ` Patrick McHardy
2006-05-02 13:45 ` [netfilter-core] " Patrick McHardy
2006-05-02 15:34 ` Marcel Holtmann
2006-05-02 15:55 ` [netfilter-core] " Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20060502113454.GA28601@elte.hu \
--to=mingo@elte.hu \
--cc=akpm@osdl.org \
--cc=coreteam@netfilter.org \
--cc=davem@davemloft.net \
--cc=herbert@gondor.apana.org.au \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox