[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
This bug was fixed in the package linux - 3.8.0-33.48 --- linux (3.8.0-33.48) raring; urgency=low [ Brad Figg ] * Release Tracking Bug - LP: #1242849 [ Maximiliano Curia ] * SAUCE: (no-up) Only let characters through when there are active readers. - LP: #1208740 [ Upstream Kernel Changes ] * cciss: fix info leak in cciss_ioctl32_passthru() - LP: #1188355 - CVE-2013-2147 * cpqarray: fix info leak in ida_locked_ioctl() - LP: #1188355 - CVE-2013-2147 * mount: consolidate permission checks - LP: #1226726 * get rid of full-hash scan on detaching vfsmounts - LP: #1226726 * Smack: Fix the bug smackcipso can't set CIPSO correctly - LP: #1236743 * ipvs: add backup_only flag to avoid loops - LP: #1238494 * tuntap: correctly handle error in tun_set_iff() - LP: #1229975 - CVE-2013-4343 * htb: fix sign extension bug - LP: #1240580 * net: avoid to hang up on sending due to sysctl configuration overflow. - LP: #1240580 * net: check net.core.somaxconn sysctl values - LP: #1240580 * macvlan: validate flags - LP: #1240580 * neighbour: populate neigh_parms on alloc before calling ndo_neigh_setup - LP: #1240580 * bonding: modify only neigh_parms owned by us - LP: #1240580 * fib_trie: remove potential out of bound access - LP: #1240580 * bridge: don't try to update timers in case of broken MLD queries - LP: #1240580 * tcp: cubic: fix overflow error in bictcp_update() - LP: #1240580 * tcp: cubic: fix bug in bictcp_acked() - LP: #1240580 * ipv6: don't stop backtracking in fib6_lookup_1 if subtree does not match - LP: #1240580 * 8139cp: Fix skb leak in rx_status_loop failure path. - LP: #1240580 * tun: signedness bug in tun_get_user() - LP: #1240580 * ipv6: remove max_addresses check from ipv6_create_tempaddr - LP: #1240580 * ipv6: Store Router Alert option in IP6CB directly. - LP: #1240580 * ipv6: drop packets with multiple fragmentation headers - LP: #1240580 * tcp: set timestamps for restored skb-s - LP: #1240580 * net: usb: Add HP hs2434 device to ZLP exception table - LP: #1240580 * tcp: initialize rcv_tstamp for restored sockets - LP: #1240580 * ipv4: sendto/hdrincl: don't use destination address found in header - LP: #1240580 * tcp: tcp_make_synack() should use sock_wmalloc - LP: #1240580 * tipc: set sk_err correctly when connection fails - LP: #1240580 * net: bridge: convert MLDv2 Query MRC into msecs_to_jiffies for max_delay - LP: #1240580 * ICMPv6: treat dest unreachable codes 5 and 6 as EACCES, not EPROTO - LP: #1240580 * tg3: Don't turn off led on 5719 serdes port 0 - LP: #1240580 * vhost_net: poll vhost queue after marking DMA is done - LP: #1240580 * net: ipv6: tcp: fix potential use after free in tcp_v6_do_rcv - LP: #1240580 * drm/radeon/si: Add support for CP DMA to CS checker for compute v2 - LP: #1240580 * sfc: Fix efx_rx_buf_offset() for recycled pages - LP: #1240580 * cfq: explicitly use 64bit divide operation for 64bit arguments - LP: #1240580 * drm/radeon/atom: workaround vbios bug in transmitter table on rs880 (v2) - LP: #1240580 * drm/ast: fix the ast open key function - LP: #1240580 * sched/fair: Fix small race where child-se.parent,cfs_rq might point to invalid ones - LP: #1240580 * tg3: Expand led off fix to include 5720 - LP: #1240580 * HID: provide a helper for validating hid reports - LP: #1240580 * HID: zeroplus: validate output report details - LP: #1240580 - CVE-2013-2889 * HID: LG: validate HID output report details - LP: #1240580 - CVE-2013-2893 * HID: lenovo-tpkbd: validate output report details - LP: #1240580 - CVE-2013-2894 * HID: validate feature and input report details - LP: #1240580 - CVE-2013-2897 * HID: logitech-dj: validate output report details - LP: #1240580 - CVE-2013-2895 * HID: multitouch: validate indexes details - LP: #1240580 - CVE-2013-2897 * HID: lenovo-tpkbd: fix leak if tpkbd_probe_tp fails - LP: #1240580 * drm/radeon: fix panel scaling with eDP and LVDS bridges - LP: #1240580 * cifs: fix filp leak in cifs_atomic_open() - LP: #1240580 * net: usb: cdc_ether: Use wwan interface for Telit modules - LP: #1240580 * usb: gadget: fix a bug and a WARN_ON in dummy-hcd - LP: #1240580 * drm/i915: do not update cursor in crtc mode set - LP: #1240580 * drm/i915: Don't enable the cursor on a disable pipe - LP: #1240580 * drm/ttm: fix the tt_populated check in ttm_tt_destroy() - LP: #1240580 * PCI / ACPI / PM: Clear pme_poll for devices in D3cold on wakeup - LP: #1240580 * serial: pch_uart: fix tty-kref leak in dma-rx path - LP: #1240580 * x86, efi: Don't map Boot Services on i386 - LP: #1240580 * ALSA: compress: Fix compress device unregister.
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed- raring' to 'verification-done-raring'. If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you! ** Tags added: verification-needed-raring -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
** Tags removed: verification-needed-raring ** Tags added: verification-done-raring -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
** Also affects: linux (Ubuntu Raring) Importance: Undecided Status: New ** Also affects: linux (Ubuntu Saucy) Importance: High Assignee: Luis Henriques (henrix) Status: Confirmed ** Changed in: linux (Ubuntu Raring) Status: New = Fix Committed ** Changed in: linux (Ubuntu Saucy) Status: Confirmed = Fix Released ** Changed in: linux (Ubuntu Raring) Assignee: (unassigned) = Luis Henriques (henrix) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
** Description changed:
+ SRU Justification:
+
+ Impact:
+
+ A NULL pointer dereferrence will occur when a user adds an IPVS service.
+ This occurs since kernel 3.8.0-28.41 (Raring), after commit:
+
+ dc7b3eb ipvs: Fix reuse connection if real server is dead
+
+ The NULL pointer occurs when accessing the ipvs variable in line 1658:
+
+1658 if (unlikely(sysctl_expire_nodest_conn(ipvs)) cp cp-dest
+1659 unlikely(!atomic_read(cp-dest-weight)) !iph.fragoffs
+1660 is_new_conn(skb, iph)) {
+1661 ip_vs_conn_expire_now(cp);
+1662 __ip_vs_conn_put(cp);
+1663 cp = NULL;
+1664 }
+
+ Mainline kernel has this variable initialised earlier, with commit:
+
+ 0c12582 ipvs: add backup_only flag to avoid loops
+
+ Fix:
+
+ Apply commit 0c12582 ipvs: add backup_only flag to avoid loops fix the
+ problem. Bug reporter has claimed success with a test kernel that
+ contains this commit.
+
+ Testcase:
+
+ Simply running the command:
+
+ sudo ipvsadm -A -u 10.0.50.4:53
+
+ Will trigger the bug.
+
+ ---
+
In kernel 3.8.0-29 and higher (I've tested 3.8.0-30 and 3.8.0-31), the
kernel panics when adding IPVS service. Specifically, when I execute the
following command:
- sudo ipvsadm -A -u 10.0.50.4:53
+ sudo ipvsadm -A -u 10.0.50.4:53
The kernel immediately panics. I've reverted the kernel to 3.8.0-27, and
IPVS executes without a problem.
The panic is completely reproducable, using a clean install, no extra
packages installed, all packages upgraded.
I've attached the apport report of the system running 3.8.0-29.
Best,
Luc van Donkersgoed
- ---
+ ---
AlsaDevices:
- total 0
- crw-rw---T 1 root audio 116, 1 Oct 11 10:04 seq
- crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
+ total 0
+ crw-rw---T 1 root audio 116, 1 Oct 11 10:04 seq
+ crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer
AplayDevices: Error: [Errno 2] No such file or directory
ApportVersion: 2.9.2-0ubuntu8.3
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq',
'/dev/snd/timer'] failed with exit code 1:
CRDA: Error: [Errno 2] No such file or directory
DistroRelease: Ubuntu 13.04
HibernationDevice: RESUME=UUID=566497ef-0abf-42f0-85ee-988bf9ba2034
InstallationDate: Installed on 2012-12-03 (311 days ago)
InstallationMedia: Ubuntu-Server 12.04 LTS Precise Pangolin - Release amd64
(20120424.1)
IwConfig:
- eth0 no wireless extensions.
-
- lono wireless extensions.
+ eth0 no wireless extensions.
+
+ lono wireless extensions.
Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize
libusb: -99
MachineType: VMware, Inc. VMware Virtual Platform
MarkForUpload: True
Package: linux (not installed)
PciMultimedia:
-
+
ProcFB:
-
+
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.8.0-31-generic
root=/dev/mapper/dnslb01-root ro
ProcVersionSignature: Ubuntu 3.8.0-31.46-generic 3.8.13.8
RelatedPackageVersions:
- linux-restricted-modules-3.8.0-31-generic N/A
- linux-backports-modules-3.8.0-31-generic N/A
- linux-firmware1.106
+ linux-restricted-modules-3.8.0-31-generic N/A
+ linux-backports-modules-3.8.0-31-generic N/A
+ linux-firmware1.106
RfKill: Error: [Errno 2] No such file or directory
Tags: raring
Uname: Linux 3.8.0-31-generic x86_64
UpgradeStatus: Upgraded to raring on 2013-10-10 (0 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 06/22/2012
dmi.bios.vendor: Phoenix Technologies LTD
dmi.bios.version: 6.00
dmi.board.name: 440BX Desktop Reference Platform
dmi.board.vendor: Intel Corporation
dmi.board.version: None
dmi.chassis.asset.tag: No Asset Tag
dmi.chassis.type: 1
dmi.chassis.vendor: No Enclosure
dmi.chassis.version: N/A
dmi.modalias:
dmi:bvnPhoenixTechnologiesLTD:bvr6.00:bd06/22/2012:svnVMware,Inc.:pnVMwareVirtualPlatform:pvrNone:rvnIntelCorporation:rn440BXDesktopReferencePlatform:rvrNone:cvnNoEnclosure:ct1:cvrN/A:
dmi.product.name: VMware Virtual Platform
dmi.product.version: None
dmi.sys.vendor: VMware, Inc.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1238494
Title:
Kernel panic on 3.8.0-29 when using ipvs
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
I can confirm that this kernel fixes the problem for me as well, including with the new keepalived build from precise-proposed which fixes this bug https://bugs.launchpad.net/ubuntu/+source/keepalived/+bug/1211876 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
Hi Luc, in my previous comment (comment #15) I posted a link where I uploaded the test kernel. Please download the 4 packages into your disk. After that, you can install these packages from the command line by running the command: sudo dpkg -i *.deb Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
Hi Luis, I can confirm that your kernel has fixed my problem. Adding a new service to ipvs does no longer generate a kernel panic. I had to install the following extra packages to compile your kernel: crda iw wireless-regdb Thanks for your fast response and solution. Best, Luc van Donkersgoed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
Hi, I'd like to test the latest kernel with the additional commit, but I don't know how.. I've installed the 3.8.0-32.47 kernel from the raring-proposed source. This kernel still panics (but you already know that), so I need to install the addition commit. Can you tell me how to do this? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
apport information ** Tags added: apport-collected raring ** Description changed: In kernel 3.8.0-29 and higher (I've tested 3.8.0-30 and 3.8.0-31), the kernel panics when adding IPVS service. Specifically, when I execute the following command: sudo ipvsadm -A -u 10.0.50.4:53 The kernel immediately panics. I've reverted the kernel to 3.8.0-27, and IPVS executes without a problem. The panic is completely reproducable, using a clean install, no extra packages installed, all packages upgraded. I've attached the apport report of the system running 3.8.0-29. Best, Luc van Donkersgoed + --- + AlsaDevices: + total 0 + crw-rw---T 1 root audio 116, 1 Oct 11 10:04 seq + crw-rw---T 1 root audio 116, 33 Oct 11 10:04 timer + AplayDevices: Error: [Errno 2] No such file or directory + ApportVersion: 2.9.2-0ubuntu8.3 + Architecture: amd64 + ArecordDevices: Error: [Errno 2] No such file or directory + AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1: + CRDA: Error: [Errno 2] No such file or directory + DistroRelease: Ubuntu 13.04 + HibernationDevice: RESUME=UUID=566497ef-0abf-42f0-85ee-988bf9ba2034 + InstallationDate: Installed on 2012-12-03 (311 days ago) + InstallationMedia: Ubuntu-Server 12.04 LTS Precise Pangolin - Release amd64 (20120424.1) + IwConfig: + eth0 no wireless extensions. + + lono wireless extensions. + Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize libusb: -99 + MachineType: VMware, Inc. VMware Virtual Platform + MarkForUpload: True + Package: linux (not installed) + PciMultimedia: + + ProcFB: + + ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.8.0-31-generic root=/dev/mapper/dnslb01-root ro + ProcVersionSignature: Ubuntu 3.8.0-31.46-generic 3.8.13.8 + RelatedPackageVersions: + linux-restricted-modules-3.8.0-31-generic N/A + linux-backports-modules-3.8.0-31-generic N/A + linux-firmware1.106 + RfKill: Error: [Errno 2] No such file or directory + Tags: raring + Uname: Linux 3.8.0-31-generic x86_64 + UpgradeStatus: Upgraded to raring on 2013-10-10 (0 days ago) + UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo + dmi.bios.date: 06/22/2012 + dmi.bios.vendor: Phoenix Technologies LTD + dmi.bios.version: 6.00 + dmi.board.name: 440BX Desktop Reference Platform + dmi.board.vendor: Intel Corporation + dmi.board.version: None + dmi.chassis.asset.tag: No Asset Tag + dmi.chassis.type: 1 + dmi.chassis.vendor: No Enclosure + dmi.chassis.version: N/A + dmi.modalias: dmi:bvnPhoenixTechnologiesLTD:bvr6.00:bd06/22/2012:svnVMware,Inc.:pnVMwareVirtualPlatform:pvrNone:rvnIntelCorporation:rn440BXDesktopReferencePlatform:rvrNone:cvnNoEnclosure:ct1:cvrN/A: + dmi.product.name: VMware Virtual Platform + dmi.product.version: None + dmi.sys.vendor: VMware, Inc. ** Attachment added: BootDmesg.txt https://bugs.launchpad.net/bugs/1238494/+attachment/3873969/+files/BootDmesg.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
I confirm I'm able to reproduce this bug in Raring using the
instructions in the bug description. The problem is upstream commit:
dc7b3eb ipvs: Fix reuse connection if real server is dead
It causes a NULL pointer here:
1658 if (unlikely(sysctl_expire_nodest_conn(ipvs)) cp cp-dest
1659 unlikely(!atomic_read(cp-dest-weight)) !iph.fragoffs
1660 is_new_conn(skb, iph)) {
1661 ip_vs_conn_expire_now(cp);
1662 __ip_vs_conn_put(cp);
1663 cp = NULL;
1664 }
when accessing the ipvs variable. In mainline kernel, this variable is
initialised; in the 3.8 kernel it is not. I'll post a test kernel with a fix
for testing. Another option is to revert the above commit.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1238494
Title:
Kernel panic on 3.8.0-29 when using ipvs
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
** Changed in: linux (Ubuntu) Importance: Undecided = High ** Tags added: regression-update -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
I've uploaded a test kernel here: http://people.canonical.com/~henrix/lp1238494/ Basically, this is a 3.8.0-32.47 (the Raring kernel currently in the -proposed pocket) plus an additional commit: 0c12582 ipvs: add backup_only flag to avoid loops This commit adds the initialisation of the ipvs variable to function ip_vs_in(). I can't reproduce the issue anymore using this kernel. Could you please give it a try and report back? Thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1238494] Re: Kernel panic on 3.8.0-29 when using ipvs
** Changed in: linux (Ubuntu) Assignee: (unassigned) = Luis Henriques (henrix) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1238494 Title: Kernel panic on 3.8.0-29 when using ipvs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1238494/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
