Kernel panic in conntrack_umkey_whitelist_set_drule of dsa_filter kernel module

Solution Unverified - Updated -

Issue

  • Kernel panic in conntrack_umkey_whitelist_set_drule of dsa_filter module.
[44317.373878] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120
[44317.373916] IP: [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.373966] PGD 0 
[44317.373975] Oops: 0000 [#1] SMP 
[44317.373991] Modules linked in: binfmt_misc tcp_diag udp_diag inet_diag falcon_lsm_serviceable(PE) falcon_nf_netcontain(PE) falcon_kal(E) falcon_lsm_pinned_13707(E) bmhook(OE) tmhook(OE) dsa_filter(POE) dsa_fi
lter_hook(OE) falcon_lsm_pinned_13501(E) rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi kvm_intel kvm irqbypass crc32_pclmul ghash_clmulni_intel aesni_
intel ppdev lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon pcspkr joydev sg vmw_vmci i2c_piix4 parport_pc parport auth_rpcgss sunrpc ip_tables xfs libcrc32c sr_mod sd_mod cdrom crc_t10dif crct10dif_gene
ric ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm crct10dif_pclmul crct10dif_common crc32c_intel drm serio_raw vmxnet3 ata_piix vmw_pvscsi
[44317.374373]  libata drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: falcon_kal]
[44317.374422] CPU: 1 PID: 811 Comm: rpcbind Kdump: loaded Tainted: P           OE  ------------   3.10.0-1160.71.1.el7.x86_64 #1
[44317.374451] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 09/21/2015
[44317.374475] task: ffff8ab2b207d280 ti: ffff8ab2b30b4000 task.ti: ffff8ab2b30b4000
[44317.374501] RIP: 0010:[<ffffffffc0a85c10>]  [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.374552] RSP: 0018:ffff8ab2b30b6d80  EFLAGS: 00010212
[44317.374569] RAX: 0000000000000000 RBX: ffff8ab12c017c80 RCX: ffff8ab2b30b6e18
[44317.374585] RDX: 0000000000000000 RSI: ffff8ab12c017c80 RDI: ffff8ab12c017c80
[44317.374605] RBP: ffff8ab2b30b6de8 R08: 0000000000000000 R09: 000000000a3d7810
[44317.374629] R10: ffffffff00000006 R11: 000000000000003c R12: ffffffffc0bc4b40
[44317.374652] R13: ffff8ab12c017c80 R14: 0000000000000000 R15: 0000000000000000
[44317.374675] FS:  00007fbe23e0f880(0000) GS:ffff8ab2b5640000(0000) knlGS:0000000000000000
[44317.374700] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[44317.374715] CR2: 0000000000000120 CR3: 00000002330b2000 CR4: 00000000003607e0
[44317.374775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[44317.374800] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[44317.374822] Call Trace:
[44317.374835]  [<ffffffffb9a28ce0>] ? __kmalloc+0x1c0/0x230
[44317.374872]  [<ffffffffc0a76f4d>] ? tb_alloc+0x26d/0x430 [dsa_filter]
[44317.374899]  [<ffffffffc0aa396c>] drule_add_key_for_dport+0xbc/0xe0 [dsa_filter]
[44317.374948]  [<ffffffffc0aa39cd>] drule_add+0x3d/0x50 [dsa_filter]
[44317.374979]  [<ffffffffc0b57c8c>] op_DRULE_ADD+0xdc/0x110 [dsa_filter]
[44317.375011]  [<ffffffffc0b46ac0>] dsx_processmatch+0x1750/0x24c0 [dsa_filter]
[44317.375030]  [<ffffffffb99e6028>] ? kmalloc_order+0x18/0x40
[44317.375052]  [<ffffffffb9a24da6>] ? kmalloc_order_trace+0x26/0xa0
[44317.375084]  [<ffffffffc0b4af77>] scan_process+0x117/0x240 [dsa_filter]
[44317.375115]  [<ffffffffc0a75a18>] ? lin_pkt_read_end+0x28/0x80 [dsa_filter]
[44317.376027]  [<ffffffffc0b42e60>] dsx_push_sync+0x140/0x300 [dsa_filter]
[44317.376770]  [<ffffffffc0a95acc>] ? core_pkt_iterate_read+0x9c/0x110 [dsa_filter]
[44317.377426]  [<ffffffffc0b4363f>] dsx_process+0x3ef/0xf30 [dsa_filter]
[44317.378067]  [<ffffffffc0aa6ed2>] ? dsx_process_payload_packet_gen+0x302/0x630 [dsa_filter]
[44317.378694]  [<ffffffffc0aa50d4>] dsx_process_+0x14/0x80 [dsa_filter]
[44317.379326]  [<ffffffffc0aa6ad8>] ssl_dsx_process+0xa08/0xb00 [dsa_filter]
[44317.379954]  [<ffffffffc0aa6d89>] dsx_process_payload_packet_gen+0x1b9/0x630 [dsa_filter]
[44317.380675]  [<ffffffffc0aa7213>] ? dsx_process_payload_packet+0x13/0x20 [dsa_filter]
[44317.381396]  [<ffffffffc0aa9587>] ? dsa_slim_output+0x2e7/0xf30 [dsa_filter]
[44317.382094]  [<ffffffffb9f8ebbe>] ? _raw_spin_unlock_bh+0x1e/0x20
[44317.382844]  [<ffffffffc0a78312>] ? tb_spin_unlock+0x12/0x20 [dsa_filter]
[44317.383540]  [<ffffffffc0ab083c>] ? stateful_tcp_filter+0xd2c/0x2a70 [dsa_filter]
[44317.384185]  [<ffffffffb9f8ebbe>] ? _raw_spin_unlock_bh+0x1e/0x20
[44317.384869]  [<ffffffffc0a78312>] ? tb_spin_unlock+0x12/0x20 [dsa_filter]
[44317.385628]  [<ffffffffc0aa7213>] dsx_process_payload_packet+0x13/0x20 [dsa_filter]
[44317.386268]  [<ffffffffc0ab9195>] stateful_udp_conn_update+0x255/0x6b0 [dsa_filter]
[44317.386892]  [<ffffffffc0aaf95f>] stateful_udp_filter+0x4f/0x200 [dsa_filter]
[44317.387491]  [<ffffffffc0ab25ed>] stateful_process+0x6d/0xa0 [dsa_filter]
[44317.388064]  [<ffffffffc0a96798>] core_pkt_filter+0x2e8/0x10c0 [dsa_filter]
[44317.388638]  [<ffffffffc0a97b5a>] core_pkt_hook+0x5ea/0xc10 [dsa_filter]
[44317.389171]  [<ffffffffc0a72e3f>] lin_nf_packet_wrapper.isra.10.constprop.14+0x1df/0x780 [dsa_filter]
[44317.389721]  [<ffffffffb9e4319d>] ? __alloc_skb+0x8d/0x2d0
[44317.390255]  [<ffffffffc0a75d20>] ? lin_pkt_read_start+0x60/0x60 [dsa_filter]
[44317.390757]  [<ffffffffc0a751e0>] ? dsa_lin_proc_init+0x200/0x200 [dsa_filter]
[44317.391273]  [<ffffffffc0a75cc0>] ? lin_pkt_read+0x250/0x250 [dsa_filter]
[44317.391754]  [<ffffffffc0a75a70>] ? lin_pkt_read_end+0x80/0x80 [dsa_filter]
[44317.392228]  [<ffffffffc0a759f0>] ? lin_pkt_get_process_info+0x520/0x520 [dsa_filter]
[44317.392713]  [<ffffffffc0a75200>] ? lin_pkt_get_length+0x20/0x20 [dsa_filter]
[44317.393181]  [<ffffffffc0a75250>] ? lin_pkt_get_valid_checksum+0x50/0x50 [dsa_filter]
[44317.393654]  [<ffffffffc0a75280>] ? lin_pkt_is_large_send+0x30/0x30 [dsa_filter]
[44317.394119]  [<ffffffffc0a765b0>] ? lin_pkt_get_frame_header+0x890/0x890 [dsa_filter]
[44317.394605]  [<ffffffffc0a754d0>] ? lin_pkt_get_container_info+0x230/0x230 [dsa_filter]
[44317.395071]  [<ffffffffc0a752a0>] ? lin_pkt_is_from_veth+0x20/0x20 [dsa_filter]
[44317.395537]  [<ffffffffc0a73d5e>] hook_handler+0x69e/0x7a0 [dsa_filter]
[44317.395990]  [<ffffffffc05c0049>] nf_callback_inet+0x49/0x60 [dsa_filter_hook]
[44317.396451]  [<ffffffffb9e99aa8>] nf_iterate+0x98/0xe0
[44317.396911]  [<ffffffffb9e99b98>] nf_hook_slow+0xa8/0x110
[44317.397412]  [<ffffffffb9ea8bc2>] __ip_local_out_sk+0x102/0x110
[44317.397869]  [<ffffffffb9ea81a0>] ? ip_forward_options+0x1c0/0x1c0
[44317.398326]  [<ffffffffb9ea8beb>] ip_local_out_sk+0x1b/0x40
[44317.398786]  [<ffffffffb9eabc46>] ip_send_skb+0x16/0x50
[44317.399263]  [<ffffffffb9ed40fc>] udp_send_skb+0xac/0x2b0
[44317.399716]  [<ffffffffb9ea8940>] ? ip_copy_metadata+0x170/0x170
[44317.400161]  [<ffffffffb9ed5661>] udp_sendmsg+0x5e1/0xa70
[44317.400609]  [<ffffffffb9b9260b>] ? string.isra.7+0x3b/0xf0
[44317.401053]  [<ffffffffb9ee2e49>] inet_sendmsg+0x69/0xb0
[44317.401514]  [<ffffffffc08142dd>] pinnedhook_network_ops_inet_dgram_sendmsg+0x9d/0x120 [falcon_lsm_pinned_13501]
[44317.401975]  [<ffffffffc08532dd>] pinnedhook_network_ops_inet_dgram_sendmsg+0x9d/0x120 [falcon_lsm_pinned_13707]
[44317.402438]  [<ffffffffb9e39396>] sock_sendmsg+0xb6/0xf0
[44317.402906]  [<ffffffffb9a3dbcd>] ? __mem_cgroup_uncharge_common+0xcd/0x2f0
[44317.403360]  [<ffffffffb9e3a259>] ___sys_sendmsg+0x3e9/0x400
[44317.403800]  [<ffffffffb99f0197>] ? arch_tlb_finish_mmu+0x47/0x80
[44317.404249]  [<ffffffffb99f02b3>] ? tlb_finish_mmu+0x23/0x30
[44317.404697]  [<ffffffffb99f9aa4>] ? unmap_region+0xf4/0x140
[44317.405135]  [<ffffffffb99fa061>] ? __vma_rb_erase+0x121/0x220
[44317.405560]  [<ffffffffb9e3b911>] __sys_sendmsg+0x51/0x90
[44317.405988]  [<ffffffffb9e3b962>] SyS_sendmsg+0x12/0x20
[44317.406421]  [<ffffffffb9f99f92>] system_call_fastpath+0x25/0x2a
[44317.406842] Code: 55 48 89 e5 41 57 41 89 d7 41 56 41 55 41 54 49 89 fc 48 89 f7 53 48 89 f3 48 83 ec 40 89 54 24 24 48 89 4c 24 18 e8 90 e9 02 00 <8b> 80 20 01 00 00 44 8b b3 f8 00 00 00 4c 89 e7 4c 8b 83 00 01 
[44317.407795] RIP  [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.408284]  RSP <ffff8ab2b30b6d80>
[44317.408749] CR2: 0000000000000120

Environment

  • Red Hat Enterprise Linux 7
  • Unsigned (U) dsa_filter module

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content