Kernel Panic in nft_do_chain with Trend Micro DSA Filter

Solution Unverified - Updated -

Issue

  • Kernel Panic in nft_do_chain with Trend Micro DSA Filter
general protection fault, probably for non-canonical address 0xc114cbb3c342b62c: 0000 [#1] SMP PTI
...
 #5 [ffffa59e5583b6c0] general_protection at ffffffffbb6011ce
    [exception RIP: nft_do_chain+135]
    RIP: ffffffffc0cd1107  RSP: ffffa59e5583b770  RFLAGS: 00010202
    RAX: c114cbb3c342b62c  RBX: c114cbb3c342b62c  RCX: 0000000000000000
    RDX: ffffffffbc940580  RSI: c114cbb3c342b62c  RDI: ffffa59e5583b810
    RBP: ffffa59e5583b948   R8: 0000000000000001   R9: 00000000fffefe2f
    R10: 0000000000000001  R11: 0000000000000001  R12: ffffa59e5583b968
    R13: ffff97290fd9c480  R14: ffff972ac65c34b0  R15: ffffa59e5583b7c0
    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
 #6 [ffffa59e5583b950] nft_do_chain_inet at ffffffffc0ce3c5a [nf_tables]
 #7 [ffffa59e5583b9b0] nf_hook_slow at ffffffffbb2e1374
 #8 [ffffa59e5583b9e0] __ip_local_out at ffffffffbb2f3af7
 #9 [ffffa59e5583ba38] ip_local_out at ffffffffbb2f3b77
#10 [ffffa59e5583ba58] __ip_queue_xmit at ffffffffbb2f3f05
#11 [ffffa59e5583bab0] __tcp_transmit_skb at ffffffffbb31195b
#12 [ffffa59e5583bbc0] tcp_connect at ffffffffbb312563
#13 [ffffa59e5583bc68] tcp_v4_connect at ffffffffbb319286
#14 [ffffa59e5583bcc8] __inet_stream_connect at ffffffffbb3350ea
#15 [ffffa59e5583bd40] inet_stream_connect at ffffffffbb3353c6
#16 [ffffa59e5583bd68] __sys_connect at ffffffffbb2264ae
#17 [ffffa59e5583be28] __x64_sys_connect at ffffffffbb2264f6
#18 [ffffa59e5583be30] tmhook_invoke at ffffffffc11bf6fa [tmhook]  <----------------
#19 [ffffa59e5583be68] tmhook_handler at ffffffffc11bf8f7 [tmhook] <----------------
#20 [ffffa59e5583bf50] entry_SYSCALL_64_after_hwframe at ffffffffbb60012e
BUG: unable to handle kernel paging request at 0000000100000014
RIP: 0010:nft_do_chain+0xac/0x4e0 [nf_tables]
...
    [exception RIP: nft_do_chain+172]
    RIP: ffffffffc0a9912c  RSP: ffffb705d99e7770  RFLAGS: 00010206
    RAX: 0000000100000000  RBX: ffff90d486f08000  RCX: 0000000000000000
    RDX: ffffffff91f40580  RSI: ffff90ce0ba1af50  RDI: ffffb705d99e7810
    RBP: ffffb705d99e7948   R8: 0000000000000001   R9: 00000000fffefe2f
    R10: 0000000000000001  R11: 0000000000000001  R12: ffffb705d99e7968
    R13: 0000000100000000  R14: ffff90cd71204830  R15: ffffb705d99e77c0
    ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
 #8 [ffffb705d99e7950] nft_do_chain_inet at ffffffffc0aabc5a [nf_tables]
 #9 [ffffb705d99e79b0] nf_hook_slow at ffffffff908e1374
#10 [ffffb705d99e79e0] __ip_local_out at ffffffff908f3af7
#11 [ffffb705d99e7a38] ip_local_out at ffffffff908f3b77
#12 [ffffb705d99e7a58] __ip_queue_xmit at ffffffff908f3f05
#13 [ffffb705d99e7ab0] __tcp_transmit_skb at ffffffff9091195b
#14 [ffffb705d99e7bc0] tcp_connect at ffffffff90912563
#15 [ffffb705d99e7c68] tcp_v4_connect at ffffffff90919286
#16 [ffffb705d99e7cc8] __inet_stream_connect at ffffffff909350ea
#17 [ffffb705d99e7d40] inet_stream_connect at ffffffff909353c6
#18 [ffffb705d99e7d68] __sys_connect at ffffffff908264ae
#19 [ffffb705d99e7e28] __x64_sys_connect at ffffffff908264f6
#20 [ffffb705d99e7e30] tmhook_invoke at ffffffffc0d906fa [tmhook]   <----------------
#21 [ffffb705d99e7e68] tmhook_handler at ffffffffc0d908f7 [tmhook]  <----------------
#22 [ffffb705d99e7f50] entry_SYSCALL_64_after_hwframe at ffffffff90c0012e

Environment

  • Red Hat Enterprise Linux 8.10 (kernel-4.18.0-553.*.el8_10.x86_64 series)
  • Trend Micro DSA Filter (tmhook and bmhook kernel modules)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content