Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-16 Thread Ian Applegate
I will be doing much wider testing on 3.6 this week, will keep you updated if I see this issue again. I don't see a logical way into that trap myself and looking at the revision history we've been running this code path for a very long time without issue. The machine in question has a fairly high

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-16 Thread Pablo Neira Ayuso
On Fri, Oct 12, 2012 at 01:32:06AM +0200, Pablo Neira Ayuso wrote: > On Thu, Oct 11, 2012 at 11:27:33PM +0200, Borislav Petkov wrote: > > On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: > > > On machines serving mainly http traffic we are seeing the following > > > panic, which is

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-16 Thread Pablo Neira Ayuso
On Fri, Oct 12, 2012 at 01:32:06AM +0200, Pablo Neira Ayuso wrote: On Thu, Oct 11, 2012 at 11:27:33PM +0200, Borislav Petkov wrote: On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: On machines serving mainly http traffic we are seeing the following panic, which is not yet

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-16 Thread Ian Applegate
I will be doing much wider testing on 3.6 this week, will keep you updated if I see this issue again. I don't see a logical way into that trap myself and looking at the revision history we've been running this code path for a very long time without issue. The machine in question has a fairly high

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Pablo Neira Ayuso
On Thu, Oct 11, 2012 at 11:27:33PM +0200, Borislav Petkov wrote: > On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: > > On machines serving mainly http traffic we are seeing the following > > panic, which is not yet reproducible. > > Must be this BUG_ON: > > if

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Borislav Petkov
On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: > On machines serving mainly http traffic we are seeing the following > panic, which is not yet reproducible. Must be this BUG_ON: if (!nf_ct_is_confirmed(ct)) {

amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Ian Applegate
On machines serving mainly http traffic we are seeing the following panic, which is not yet reproducible. [180926.566743] [ cut here ] [180926.572034] kernel BUG at net/netfilter/nf_conntrack_core.c:220! [180926.578873] invalid opcode: [#1] SMP [180926.583594]

amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Ian Applegate
On machines serving mainly http traffic we are seeing the following panic, which is not yet reproducible. [180926.566743] [ cut here ] [180926.572034] kernel BUG at net/netfilter/nf_conntrack_core.c:220! [180926.578873] invalid opcode: [#1] SMP [180926.583594]

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Borislav Petkov
On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: On machines serving mainly http traffic we are seeing the following panic, which is not yet reproducible. Must be this BUG_ON: if (!nf_ct_is_confirmed(ct)) {

Re: amd64, v3.6.0: Kernel panic + BUG at net/netfilter/nf_conntrack_core.c:220!

2012-10-11 Thread Pablo Neira Ayuso
On Thu, Oct 11, 2012 at 11:27:33PM +0200, Borislav Petkov wrote: On Thu, Oct 11, 2012 at 12:13:33PM -0700, Ian Applegate wrote: On machines serving mainly http traffic we are seeing the following panic, which is not yet reproducible. Must be this BUG_ON: if