kernel-packages team mailing list archive

Thread
Date
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Luis Henriques <luis.henriques@xxxxxxxxxxxxx>
Date: Mon, 14 Oct 2013 09:32:47 -0000
Reply-to: Bug 1238494 <1238494@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
** Description changed:

+ SRU Justification:
+ 
+ Impact:
+ 
+ A NULL pointer dereferrence will occur when a user adds an IPVS service.
+ This occurs since kernel 3.8.0-28.41 (Raring), after commit:
+ 
+   dc7b3eb ipvs: Fix reuse connection if real server is dead
+ 
+ The NULL pointer occurs when accessing the ipvs variable in line 1658:
+ 
+    1658 if (unlikely(sysctl_expire_nodest_conn(ipvs)) && cp && cp->dest &&
+    1659 unlikely(!atomic_read(&cp->dest->weight)) && !iph.fragoffs &&
+    1660 is_new_conn(skb, &iph)) {
+    1661 ip_vs_conn_expire_now(cp);
+    1662 __ip_vs_conn_put(cp);
+    1663 cp = NULL;
+    1664 }
+ 
+ Mainline kernel has this variable initialised earlier, with commit:
+ 
+  0c12582 ipvs: add backup_only flag to avoid loops
+ 
+ Fix:
+ 
+ Apply commit 0c12582 "ipvs: add backup_only flag to avoid loops" fix the
+ problem.  Bug reporter has claimed success with a test kernel that
+ contains this commit.
+ 
+ Testcase:
+ 
+ Simply running the command:
+ 
+  sudo ipvsadm -A -u 10.0.50.4:53
+ 
+ Will trigger the bug.
+ 
+ ---
+ 
  In kernel 3.8.0-29 and higher (I've tested 3.8.0-30 and 3.8.0-31), the
  kernel panics when adding IPVS service. Specifically, when I execute the
  following command:
  
-  sudo ipvsadm -A -u 10.0.50.4:53
+  sudo ipvsadm -A -u 10.0.50.4:53
  
  The kernel immediately panics. I've reverted the kernel to 3.8.0-27, and
  IPVS executes without a problem.
  
  The panic is completely reproducable, using a clean install, no extra
  packages installed, all packages upgraded.
  
  I've attached the apport report of the system running 3.8.0-29.
  
  Best,
  Luc van Donkersgoed
- --- 
+ ---
  AlsaDevices:
-  total 0
-  crw-rw---T 1 root audio 116,  1 Oct 11 10:04 seq
-  crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
+  total 0
+  crw-rw---T 1 root audio 116,  1 Oct 11 10:04 seq
+  crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
  AplayDevices: Error: [Errno 2] No such file or directory
  ApportVersion: 2.9.2-0ubuntu8.3
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  DistroRelease: Ubuntu 13.04
  HibernationDevice: RESUME=UUID=566497ef-0abf-42f0-85ee-988bf9ba2034
  InstallationDate: Installed on 2012-12-03 (311 days ago)
  InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release amd64 (20120424.1)
  IwConfig:
-  eth0      no wireless extensions.
-  
-  lo        no wireless extensions.
+  eth0      no wireless extensions.
+ 
+  lo        no wireless extensions.
  Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize libusb: -99
  MachineType: VMware, Inc. VMware Virtual Platform
  MarkForUpload: True
  Package: linux (not installed)
  PciMultimedia:
-  
+ 
  ProcFB:
-  
+ 
  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.8.0-31-generic root=/dev/mapper/dnslb01-root ro
  ProcVersionSignature: Ubuntu 3.8.0-31.46-generic 3.8.13.8
  RelatedPackageVersions:
-  linux-restricted-modules-3.8.0-31-generic N/A
-  linux-backports-modules-3.8.0-31-generic  N/A
-  linux-firmware                            1.106
+  linux-restricted-modules-3.8.0-31-generic N/A
+  linux-backports-modules-3.8.0-31-generic  N/A
+  linux-firmware                            1.106
  RfKill: Error: [Errno 2] No such file or directory
  Tags:  raring
  Uname: Linux 3.8.0-31-generic x86_64
  UpgradeStatus: Upgraded to raring on 2013-10-10 (0 days ago)
  UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
  dmi.bios.date: 06/22/2012
  dmi.bios.vendor: Phoenix Technologies LTD
  dmi.bios.version: 6.00
  dmi.board.name: 440BX Desktop Reference Platform
  dmi.board.vendor: Intel Corporation
  dmi.board.version: None
  dmi.chassis.asset.tag: No Asset Tag
  dmi.chassis.type: 1
  dmi.chassis.vendor: No Enclosure
  dmi.chassis.version: N/A
  dmi.modalias: dmi:bvnPhoenixTechnologiesLTD:bvr6.00:bd06/22/2012:svnVMware,Inc.:pnVMwareVirtualPlatform:pvrNone:rvnIntelCorporation:rn440BXDesktopReferencePlatform:rvrNone:cvnNoEnclosure:ct1:cvrN/A:
  dmi.product.name: VMware Virtual Platform
  dmi.product.version: None
  dmi.sys.vendor: VMware, Inc.

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1238494

Title:
  Kernel panic on 3.8.0-29 when using ipvs

Status in “linux” package in Ubuntu:
  Confirmed

Bug description:
  SRU Justification:

  Impact:

  A NULL pointer dereferrence will occur when a user adds an IPVS
  service.  This occurs since kernel 3.8.0-28.41 (Raring), after commit:

    dc7b3eb ipvs: Fix reuse connection if real server is dead

  The NULL pointer occurs when accessing the ipvs variable in line 1658:

     1658 if (unlikely(sysctl_expire_nodest_conn(ipvs)) && cp && cp->dest &&
     1659 unlikely(!atomic_read(&cp->dest->weight)) && !iph.fragoffs &&
     1660 is_new_conn(skb, &iph)) {
     1661 ip_vs_conn_expire_now(cp);
     1662 __ip_vs_conn_put(cp);
     1663 cp = NULL;
     1664 }

  Mainline kernel has this variable initialised earlier, with commit:

   0c12582 ipvs: add backup_only flag to avoid loops

  Fix:

  Apply commit 0c12582 "ipvs: add backup_only flag to avoid loops" fix
  the problem.  Bug reporter has claimed success with a test kernel that
  contains this commit.

  Testcase:

  Simply running the command:

   sudo ipvsadm -A -u 10.0.50.4:53

  Will trigger the bug.

  ---

  In kernel 3.8.0-29 and higher (I've tested 3.8.0-30 and 3.8.0-31), the
  kernel panics when adding IPVS service. Specifically, when I execute
  the following command:

   sudo ipvsadm -A -u 10.0.50.4:53

  The kernel immediately panics. I've reverted the kernel to 3.8.0-27,
  and IPVS executes without a problem.

  The panic is completely reproducable, using a clean install, no extra
  packages installed, all packages upgraded.

  I've attached the apport report of the system running 3.8.0-29.

  Best,
  Luc van Donkersgoed
  ---
  AlsaDevices:
   total 0
   crw-rw---T 1 root audio 116,  1 Oct 11 10:04 seq
   crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
  AplayDevices: Error: [Errno 2] No such file or directory
  ApportVersion: 2.9.2-0ubuntu8.3
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory
  DistroRelease: Ubuntu 13.04
  HibernationDevice: RESUME=UUID=566497ef-0abf-42f0-85ee-988bf9ba2034
  InstallationDate: Installed on 2012-12-03 (311 days ago)
  InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release amd64 (20120424.1)
  IwConfig:
   eth0      no wireless extensions.

   lo        no wireless extensions.
  Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize libusb: -99
  MachineType: VMware, Inc. VMware Virtual Platform
  MarkForUpload: True
  Package: linux (not installed)
  PciMultimedia:

  ProcFB:

  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.8.0-31-generic root=/dev/mapper/dnslb01-root ro
  ProcVersionSignature: Ubuntu 3.8.0-31.46-generic 3.8.13.8
  RelatedPackageVersions:
   linux-restricted-modules-3.8.0-31-generic N/A
   linux-backports-modules-3.8.0-31-generic  N/A
   linux-firmware                            1.106
  RfKill: Error: [Errno 2] No such file or directory
  Tags:  raring
  Uname: Linux 3.8.0-31-generic x86_64
  UpgradeStatus: Upgraded to raring on 2013-10-10 (0 days ago)
  UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
  dmi.bios.date: 06/22/2012
  dmi.bios.vendor: Phoenix Technologies LTD
  dmi.bios.version: 6.00
  dmi.board.name: 440BX Desktop Reference Platform
  dmi.board.vendor: Intel Corporation
  dmi.board.version: None
  dmi.chassis.asset.tag: No Asset Tag
  dmi.chassis.type: 1
  dmi.chassis.vendor: No Enclosure
  dmi.chassis.version: N/A
  dmi.modalias: dmi:bvnPhoenixTechnologiesLTD:bvr6.00:bd06/22/2012:svnVMware,Inc.:pnVMwareVirtualPlatform:pvrNone:rvnIntelCorporation:rn440BXDesktopReferencePlatform:rvrNone:cvnNoEnclosure:ct1:cvrN/A:
  dmi.product.name: VMware Virtual Platform
  dmi.product.version: None
  dmi.sys.vendor: VMware, Inc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions
References

[Bug 1238494] [NEW] Kernel panic on 3.8.0-29 when using ipvs
From: Luc van Donkersgoed, 2013-10-11