Kernel panic in the nfhook_skb_to_cid() function of the dsa_filter_hook module

Issue

• Kernel panic caused by a general protection fault in the nfhook_skb_to_cid() function of the third-party dsa_filter_hook kernel module:

[296403.122909] general protection fault, probably for non-canonical address 0xffff40e524e858c0: 0000 [#1] SMP PTI
[296403.122952] CPU: 5 PID: 1544807 Comm: nc Kdump: loaded Tainted: POEX  ---------- 4.18.0-553.30.1.el8_10.x86_64 #1
[296403.122991] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
[296403.123031] RIP: 0010:nfhook_skb_to_cid+0x14c/0x1d0 [dsa_filter_hook]
[296403.123076] Code: 84 3a ff ff ff e9 29 ff ff ff 8b 15 8e 1c 00 00 85 d2 0f 85 95 03 00 00 bd ff ff ff ff e9 2a ff ff ff 48 8b 45 18 a8 03 75 47 <65> 48 ff 00 8b 45 7c a8 08 0f 85 53 ff ff ff a8 01 0f 85 fe fe ff
[296403.123143] RSP: 0000:ffffb720864e0070 EFLAGS: 00010246
[296403.123162] RAX: ffffa068057458c0 RBX: ffffa06f35c72000 RCX: ffffa07d7ff70b00
[296403.123194] RDX: 00000002c57472c0 RSI: 0000000000000008 RDI: ffffa068857472c0
[296403.123228] RBP: ffffa068057472c0 R08: ffffb720864e0028 R09: ffffffffc170b4b0
[296403.123251] R10: 0000000000000000 R11: 0a0d302e385f4853 R12: ffffa0753d67f600
[296403.123275] R13: ffffb720864e00d8 R14: ffffb720864e00d6 R15: 0000000000000015
[296403.123298] FS:  00007f1ebaac8740(0000) GS:ffffa07d1f740000(0000) knlGS:0000000000000000
[296403.123323] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[296403.123343] CR2: 0000564d986872c8 CR3: 0000000f58f22000 CR4: 00000000000406e0
[296403.123391] Call Trace:
[296403.123405]  <IRQ>
[296403.123417]  ? __die_body+0x1a/0x60
[296403.123436]  ? die_addr+0x38/0x51
[296403.123451]  ? do_general_protection+0x135/0x280
[296403.123469]  ? general_protection+0x1e/0x30
[296403.123488]  ? lin_pkt_get_container_info+0x1e0/0x1e0 [dsa_filter]
[296403.123562]  ? nfhook_skb_to_cid+0x14c/0x1d0 [dsa_filter_hook]
[296403.123584]  lin_pkt_get_container_info+0x4d/0x1e0 [dsa_filter]
[296403.123634]  tb_log_add_for_packet+0x1b6/0x3c0 [dsa_filter]
[296403.123684]  ? core_pkt_iterate_start+0x2e/0x130 [dsa_filter]
[296403.123735]  ? dsx_get_packet_data+0x152/0x2f0 [dsa_filter]
[296403.123834]  ? dsx_log_action+0x4b2/0xab0 [dsa_filter]
[296403.123893]  ? dsx_log_action_chk+0x5d/0x70 [dsa_filter]
[296403.123945]  ? op_DROP+0x73/0x180 [dsa_filter]
[296403.123993]  ? dsx_processmatch+0x175c/0x2620 [dsa_filter]
[296403.124045]  ? dsx_match+0xf4/0x160 [dsa_filter]
[296403.124094]  ? scan_process+0x132/0x230 [dsa_filter]
[296403.124145]  ? dsx_push_sync+0x12b/0x2c0 [dsa_filter]
[296403.124197]  ? dsx_process+0x8d0/0xe90 [dsa_filter]
[296403.124248]  ? conntrack_mark_state+0x43/0x60 [dsa_filter]
[296403.124297]  ? dsx_process_+0x2e/0x370 [dsa_filter]
[296403.124350]  ? ssl_dsx_process+0x42f/0xba0 [dsa_filter]
[296403.124406]  ? dsx_process_payload_packet_gen+0x2b9/0x780 [dsa_filter]
[296403.124465]  ? dsa_slim_input+0xae1/0xf60 [dsa_filter]
[296403.124519]  ? stateful_tcp_filter+0x1ea0/0x3900 [dsa_filter]
[296403.124576]  ? stateful_tcp_filter+0x1ea0/0x3900 [dsa_filter]
[296403.124633]  ? stateful_tcp_filter+0x2067/0x3900 [dsa_filter]
[296403.124691]  ? is_tcp_conn_pkt+0x1b2/0x4c0 [dsa_filter]
[296403.124746]  ? bucket_find_conn+0x18c/0x4d0 [dsa_filter]
[296403.124793]  ? stateful_process+0x65/0xa0 [dsa_filter]
[296403.136040]  ? packet_filter4+0xad/0x320 [dsa_filter]
[296403.136523]  ? stateful_process+0x65/0xa0 [dsa_filter]
[296403.136900]  ? core_pkt_filter+0x6b4/0xf10 [dsa_filter]
[296403.137156]  ? core_pkt_hook+0x4f9/0xbb0 [dsa_filter]
[296403.137429]  ? lin_nf_packet_wrapper.isra.19.constprop.23+0x113/0x390 [dsa_filter]
[296403.137701]  ? lin_pkt_read_start+0x70/0x70 [dsa_filter]
[296403.137970]  ? dsa_lin_proc_init+0x1e0/0x1e0 [dsa_filter]
[296403.138250]  ? lin_pkt_read+0x230/0x230 [dsa_filter]
[296403.138504]  ? lin_pkt_read_end+0x70/0x70 [dsa_filter]
[296403.138752]  ? lin_pkt_get_process_info+0x450/0x450 [dsa_filter]
[296403.138998]  ? lin_pkt_get_length+0x20/0x20 [dsa_filter]
[296403.139217]  ? lin_pkt_get_valid_checksum+0x60/0x60 [dsa_filter]
[296403.139464]  ? lin_pkt_is_large_send+0x30/0x30 [dsa_filter]
[296403.139662]  ? lin_pkt_ssl_inject_hold+0x30/0x30 [dsa_filter]
[296403.139864]  ? lin_pkt_get_container_info+0x1e0/0x1e0 [dsa_filter]
[296403.140050]  ? lin_pkt_is_packet_match_user+0x140/0x140 [dsa_filter]
[296403.140247]  ? lin_pkt_get_frame_header+0x790/0x790 [dsa_filter]
[296403.140437]  ? lin_pkt_is_from_veth+0x20/0x20 [dsa_filter]
[296403.140646]  ? lin_pkt_set_packet_attribute+0x40/0x40 [dsa_filter]
[296403.140893]  ? hook_handler+0x4ae/0x790 [dsa_filter]
[296403.141113]  ? nf_hook_slow+0x44/0xd0
[296403.141260]  ? ip_local_deliver+0xd0/0xf0
[296403.141470]  ? ip_protocol_deliver_rcu+0x1d0/0x1d0
[296403.141642]  ? ip_rcv+0x27a/0x3b5
[296403.141846]  ? inet_add_protocol.cold.1+0x1a/0x1a
[296403.142049]  ? __netif_receive_skb_core+0xc08/0xd10
[296403.142246]  ? inet_gro_receive+0x223/0x2d0
[296403.142434]  ? netif_receive_skb_internal+0x3d/0xb0
[296403.142602]  ? napi_gro_receive+0x118/0x180
[296403.142793]  ? vmxnet3_rq_rx_complete+0x370/0x1000 [vmxnet3]
[296403.142962]  ? vmxnet3_poll_rx_only+0x31/0xa0 [vmxnet3]
[296403.143129]  ? __napi_poll+0x2d/0x130
[296403.143277]  ? net_rx_action+0x252/0x320
[296403.143486]  ? __do_softirq+0xdc/0x2cf
[296403.143668]  ? irq_exit_rcu+0xc6/0xd0
[296403.143841]  ? irq_exit+0xa/0x10
[296403.143983]  ? do_IRQ+0x7f/0xd0
[296403.144145]  ? common_interrupt+0xf/0xf
[296403.144302]  </IRQ>