Re: crash in xt_policy due to skb_dst_drop() in nf_ct_frag6_gather()

2018-10-16 Thread Maciej Żenczykowski
4.19-rc8 - pass 4.14.76 - pass 4.9.133 - fail 4.9.133 + revert of ad8b1ffc3efae2f65080bdb11145c87d299b8f9a - pass On Tue, Oct 16, 2018 at 2:41 AM Maciej Żenczykowski wrote: > > (and v4.9.133 latest 4.9 LTS fails the same way, but curiously 4.19-rc8 > doesn't)

Re: crash in xt_policy due to skb_dst_drop() in nf_ct_frag6_gather()

2018-10-16 Thread Maciej Żenczykowski
(and v4.9.133 latest 4.9 LTS fails the same way, but curiously 4.19-rc8 doesn't)

Re: crash in xt_policy due to skb_dst_drop() in nf_ct_frag6_gather()

2018-10-16 Thread Maciej Żenczykowski
> That is not supposed to happen. # uname -a Linux (none) 4.9.119 #3 Tue Oct 16 02:34:36 PDT 2018 x86_64 GNU/Linux root@(none)# ip6tables -A OUTPUT -m policy --dir out --pol ipsec root@(none)# python -c "import os, socket; ip='0001'; x='6001234504d82c40'+ip+ip+'3a01

Re: crash in xt_policy due to skb_dst_drop() in nf_ct_frag6_gather()

2018-10-16 Thread Florian Westphal
Maciej Żenczykowski wrote: I am currently travelling and not able to investigate until next week. > commit ad8b1ffc3efae2f65080bdb11145c87d299b8f9a > Author: Florian Westphal > netfilter: ipv6: nf_defrag: drop skb dst before queueing > > +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c > @@ -

crash in xt_policy due to skb_dst_drop() in nf_ct_frag6_gather()

2018-10-15 Thread Maciej Żenczykowski
I believe that: commit ad8b1ffc3efae2f65080bdb11145c87d299b8f9a Author: Florian Westphal netfilter: ipv6: nf_defrag: drop skb dst before queueing +++ b/net/ipv6/netfilter/nf_conntrack_reasm.c @@ -618,6 +618,8 @@ int nf_ct_frag6_gather(struct net *net, struct sk_buff *skb, u32 user)