Kernel panic in conntrack_umkey_whitelist_set_drule of dsa_filter kernel module
Issue
- Kernel panic in conntrack_umkey_whitelist_set_drule of dsa_filter module.
[44317.373878] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120
[44317.373916] IP: [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.373966] PGD 0
[44317.373975] Oops: 0000 [#1] SMP
[44317.373991] Modules linked in: binfmt_misc tcp_diag udp_diag inet_diag falcon_lsm_serviceable(PE) falcon_nf_netcontain(PE) falcon_kal(E) falcon_lsm_pinned_13707(E) bmhook(OE) tmhook(OE) dsa_filter(POE) dsa_fi
lter_hook(OE) falcon_lsm_pinned_13501(E) rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache vmw_vsock_vmci_transport vsock sb_edac iosf_mbi kvm_intel kvm irqbypass crc32_pclmul ghash_clmulni_intel aesni_
intel ppdev lrw gf128mul glue_helper ablk_helper cryptd vmw_balloon pcspkr joydev sg vmw_vmci i2c_piix4 parport_pc parport auth_rpcgss sunrpc ip_tables xfs libcrc32c sr_mod sd_mod cdrom crc_t10dif crct10dif_gene
ric ata_generic pata_acpi vmwgfx drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm crct10dif_pclmul crct10dif_common crc32c_intel drm serio_raw vmxnet3 ata_piix vmw_pvscsi
[44317.374373] libata drm_panel_orientation_quirks dm_mirror dm_region_hash dm_log dm_mod fuse [last unloaded: falcon_kal]
[44317.374422] CPU: 1 PID: 811 Comm: rpcbind Kdump: loaded Tainted: P OE ------------ 3.10.0-1160.71.1.el7.x86_64 #1
[44317.374451] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 09/21/2015
[44317.374475] task: ffff8ab2b207d280 ti: ffff8ab2b30b4000 task.ti: ffff8ab2b30b4000
[44317.374501] RIP: 0010:[<ffffffffc0a85c10>] [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.374552] RSP: 0018:ffff8ab2b30b6d80 EFLAGS: 00010212
[44317.374569] RAX: 0000000000000000 RBX: ffff8ab12c017c80 RCX: ffff8ab2b30b6e18
[44317.374585] RDX: 0000000000000000 RSI: ffff8ab12c017c80 RDI: ffff8ab12c017c80
[44317.374605] RBP: ffff8ab2b30b6de8 R08: 0000000000000000 R09: 000000000a3d7810
[44317.374629] R10: ffffffff00000006 R11: 000000000000003c R12: ffffffffc0bc4b40
[44317.374652] R13: ffff8ab12c017c80 R14: 0000000000000000 R15: 0000000000000000
[44317.374675] FS: 00007fbe23e0f880(0000) GS:ffff8ab2b5640000(0000) knlGS:0000000000000000
[44317.374700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[44317.374715] CR2: 0000000000000120 CR3: 00000002330b2000 CR4: 00000000003607e0
[44317.374775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[44317.374800] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[44317.374822] Call Trace:
[44317.374835] [<ffffffffb9a28ce0>] ? __kmalloc+0x1c0/0x230
[44317.374872] [<ffffffffc0a76f4d>] ? tb_alloc+0x26d/0x430 [dsa_filter]
[44317.374899] [<ffffffffc0aa396c>] drule_add_key_for_dport+0xbc/0xe0 [dsa_filter]
[44317.374948] [<ffffffffc0aa39cd>] drule_add+0x3d/0x50 [dsa_filter]
[44317.374979] [<ffffffffc0b57c8c>] op_DRULE_ADD+0xdc/0x110 [dsa_filter]
[44317.375011] [<ffffffffc0b46ac0>] dsx_processmatch+0x1750/0x24c0 [dsa_filter]
[44317.375030] [<ffffffffb99e6028>] ? kmalloc_order+0x18/0x40
[44317.375052] [<ffffffffb9a24da6>] ? kmalloc_order_trace+0x26/0xa0
[44317.375084] [<ffffffffc0b4af77>] scan_process+0x117/0x240 [dsa_filter]
[44317.375115] [<ffffffffc0a75a18>] ? lin_pkt_read_end+0x28/0x80 [dsa_filter]
[44317.376027] [<ffffffffc0b42e60>] dsx_push_sync+0x140/0x300 [dsa_filter]
[44317.376770] [<ffffffffc0a95acc>] ? core_pkt_iterate_read+0x9c/0x110 [dsa_filter]
[44317.377426] [<ffffffffc0b4363f>] dsx_process+0x3ef/0xf30 [dsa_filter]
[44317.378067] [<ffffffffc0aa6ed2>] ? dsx_process_payload_packet_gen+0x302/0x630 [dsa_filter]
[44317.378694] [<ffffffffc0aa50d4>] dsx_process_+0x14/0x80 [dsa_filter]
[44317.379326] [<ffffffffc0aa6ad8>] ssl_dsx_process+0xa08/0xb00 [dsa_filter]
[44317.379954] [<ffffffffc0aa6d89>] dsx_process_payload_packet_gen+0x1b9/0x630 [dsa_filter]
[44317.380675] [<ffffffffc0aa7213>] ? dsx_process_payload_packet+0x13/0x20 [dsa_filter]
[44317.381396] [<ffffffffc0aa9587>] ? dsa_slim_output+0x2e7/0xf30 [dsa_filter]
[44317.382094] [<ffffffffb9f8ebbe>] ? _raw_spin_unlock_bh+0x1e/0x20
[44317.382844] [<ffffffffc0a78312>] ? tb_spin_unlock+0x12/0x20 [dsa_filter]
[44317.383540] [<ffffffffc0ab083c>] ? stateful_tcp_filter+0xd2c/0x2a70 [dsa_filter]
[44317.384185] [<ffffffffb9f8ebbe>] ? _raw_spin_unlock_bh+0x1e/0x20
[44317.384869] [<ffffffffc0a78312>] ? tb_spin_unlock+0x12/0x20 [dsa_filter]
[44317.385628] [<ffffffffc0aa7213>] dsx_process_payload_packet+0x13/0x20 [dsa_filter]
[44317.386268] [<ffffffffc0ab9195>] stateful_udp_conn_update+0x255/0x6b0 [dsa_filter]
[44317.386892] [<ffffffffc0aaf95f>] stateful_udp_filter+0x4f/0x200 [dsa_filter]
[44317.387491] [<ffffffffc0ab25ed>] stateful_process+0x6d/0xa0 [dsa_filter]
[44317.388064] [<ffffffffc0a96798>] core_pkt_filter+0x2e8/0x10c0 [dsa_filter]
[44317.388638] [<ffffffffc0a97b5a>] core_pkt_hook+0x5ea/0xc10 [dsa_filter]
[44317.389171] [<ffffffffc0a72e3f>] lin_nf_packet_wrapper.isra.10.constprop.14+0x1df/0x780 [dsa_filter]
[44317.389721] [<ffffffffb9e4319d>] ? __alloc_skb+0x8d/0x2d0
[44317.390255] [<ffffffffc0a75d20>] ? lin_pkt_read_start+0x60/0x60 [dsa_filter]
[44317.390757] [<ffffffffc0a751e0>] ? dsa_lin_proc_init+0x200/0x200 [dsa_filter]
[44317.391273] [<ffffffffc0a75cc0>] ? lin_pkt_read+0x250/0x250 [dsa_filter]
[44317.391754] [<ffffffffc0a75a70>] ? lin_pkt_read_end+0x80/0x80 [dsa_filter]
[44317.392228] [<ffffffffc0a759f0>] ? lin_pkt_get_process_info+0x520/0x520 [dsa_filter]
[44317.392713] [<ffffffffc0a75200>] ? lin_pkt_get_length+0x20/0x20 [dsa_filter]
[44317.393181] [<ffffffffc0a75250>] ? lin_pkt_get_valid_checksum+0x50/0x50 [dsa_filter]
[44317.393654] [<ffffffffc0a75280>] ? lin_pkt_is_large_send+0x30/0x30 [dsa_filter]
[44317.394119] [<ffffffffc0a765b0>] ? lin_pkt_get_frame_header+0x890/0x890 [dsa_filter]
[44317.394605] [<ffffffffc0a754d0>] ? lin_pkt_get_container_info+0x230/0x230 [dsa_filter]
[44317.395071] [<ffffffffc0a752a0>] ? lin_pkt_is_from_veth+0x20/0x20 [dsa_filter]
[44317.395537] [<ffffffffc0a73d5e>] hook_handler+0x69e/0x7a0 [dsa_filter]
[44317.395990] [<ffffffffc05c0049>] nf_callback_inet+0x49/0x60 [dsa_filter_hook]
[44317.396451] [<ffffffffb9e99aa8>] nf_iterate+0x98/0xe0
[44317.396911] [<ffffffffb9e99b98>] nf_hook_slow+0xa8/0x110
[44317.397412] [<ffffffffb9ea8bc2>] __ip_local_out_sk+0x102/0x110
[44317.397869] [<ffffffffb9ea81a0>] ? ip_forward_options+0x1c0/0x1c0
[44317.398326] [<ffffffffb9ea8beb>] ip_local_out_sk+0x1b/0x40
[44317.398786] [<ffffffffb9eabc46>] ip_send_skb+0x16/0x50
[44317.399263] [<ffffffffb9ed40fc>] udp_send_skb+0xac/0x2b0
[44317.399716] [<ffffffffb9ea8940>] ? ip_copy_metadata+0x170/0x170
[44317.400161] [<ffffffffb9ed5661>] udp_sendmsg+0x5e1/0xa70
[44317.400609] [<ffffffffb9b9260b>] ? string.isra.7+0x3b/0xf0
[44317.401053] [<ffffffffb9ee2e49>] inet_sendmsg+0x69/0xb0
[44317.401514] [<ffffffffc08142dd>] pinnedhook_network_ops_inet_dgram_sendmsg+0x9d/0x120 [falcon_lsm_pinned_13501]
[44317.401975] [<ffffffffc08532dd>] pinnedhook_network_ops_inet_dgram_sendmsg+0x9d/0x120 [falcon_lsm_pinned_13707]
[44317.402438] [<ffffffffb9e39396>] sock_sendmsg+0xb6/0xf0
[44317.402906] [<ffffffffb9a3dbcd>] ? __mem_cgroup_uncharge_common+0xcd/0x2f0
[44317.403360] [<ffffffffb9e3a259>] ___sys_sendmsg+0x3e9/0x400
[44317.403800] [<ffffffffb99f0197>] ? arch_tlb_finish_mmu+0x47/0x80
[44317.404249] [<ffffffffb99f02b3>] ? tlb_finish_mmu+0x23/0x30
[44317.404697] [<ffffffffb99f9aa4>] ? unmap_region+0xf4/0x140
[44317.405135] [<ffffffffb99fa061>] ? __vma_rb_erase+0x121/0x220
[44317.405560] [<ffffffffb9e3b911>] __sys_sendmsg+0x51/0x90
[44317.405988] [<ffffffffb9e3b962>] SyS_sendmsg+0x12/0x20
[44317.406421] [<ffffffffb9f99f92>] system_call_fastpath+0x25/0x2a
[44317.406842] Code: 55 48 89 e5 41 57 41 89 d7 41 56 41 55 41 54 49 89 fc 48 89 f7 53 48 89 f3 48 83 ec 40 89 54 24 24 48 89 4c 24 18 e8 90 e9 02 00 <8b> 80 20 01 00 00 44 8b b3 f8 00 00 00 4c 89 e7 4c 8b 83 00 01
[44317.407795] RIP [<ffffffffc0a85c10>] conntrack_umkey_whitelist_set_drule+0x30/0x340 [dsa_filter]
[44317.408284] RSP <ffff8ab2b30b6d80>
[44317.408749] CR2: 0000000000000120
Environment
- Red Hat Enterprise Linux 7
- Unsigned (U)
dsa_filtermodule
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.