[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#742109: Soft lookup during port scan and IPTables log enabled



severity 742109 important
reassign 742109 src:linux
# also see #742014
thanks

On Mittwoch, 19. März 2014, daniel.gassen@basf.com wrote:
> Package: base
> Severity: critical
> 
> 
> 
> -- System Information:
> Debian Release: 7.4
>   APT prefers stable
>   APT policy: (500, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 3.2.0-4-amd64 (SMP w/16 CPU cores)
> Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> 
> Description:
> 
> We received an soft lookup (CPU#0 stuck for 23s!) during a port scan with
> a total of 20K packets and IPtables log enabled (without limits!)
> 
> Detailed information:
> 
> [2294091.216227] BUG: soft lockup - CPU#0 stuck for 23s!
> [kworker/0:0:15620]
> [2294091.223575] Modules linked in: xt_limit ipt_LOG xt_tcpudp
> nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_owner
> iptable_filter ip_tables x_tables autofs4 binfmt_misc nfsd nfs nfs_acl
> auth_rpcgss fscache lockd sunrpc loop coretemp crc32c_intel radeon ttm
> drm_kms_helper drm snd_pcm power_supply ghash_clmulni_intel aesni_intel
> aes_x86_64 psmouse i2c_algo_bit aes_generic iTCO_wdt joydev evdev
> snd_page_alloc i2c_core snd_timer snd i7core_edac processor hpilo
> edac_core soundcore iTCO_vendor_support hpwdt button container
> acpi_power_meter serio_raw pcspkr cryptd ext3 mbcache jbd dm_mod sr_mod
> cdrom usbhid hid ata_generic sd_mod sg crc_t10dif uhci_hcd ata_piix libata
> ehci_hcd usbcore usb_common bnx2 thermal hpsa thermal_sys scsi_mod [last
> unloaded: scsi_wait_scan]
> [2294091.223627] CPU 0
> [2294091.223629] Modules linked in: xt_limit ipt_LOG xt_tcpudp
> nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_owner
> iptable_filter ip_tables x_tables autofs4 binfmt_misc nfsd nfs nfs_acl
> auth_rpcgss fscache lockd sunrpc loop coretemp crc32c_intel radeon ttm
> drm_kms_helper drm snd_pcm power_supply ghash_clmulni_intel aesni_intel
> aes_x86_64 psmouse i2c_algo_bit aes_generic iTCO_wdt joydev evdev
> snd_page_alloc i2c_core snd_timer snd i7core_edac processor hpilo
> edac_core soundcore iTCO_vendor_support hpwdt button container
> acpi_power_meter serio_raw pcspkr cryptd ext3 mbcache jbd dm_mod sr_mod
> cdrom usbhid hid ata_generic sd_mod sg crc_t10dif uhci_hcd ata_piix libata
> ehci_hcd usbcore usb_common bnx2 thermal hpsa thermal_sys scsi_mod [last
> unloaded: scsi_wait_scan]
> [2294091.223667]
> [2294091.223669] Pid: 15620, comm: kworker/0:0 Tainted: G        W
> 3.2.0-4-amd64 #1 Debian 3.2.54-2 HP ProLiant DL380 G7
> [2294091.223673] RIP: 0010:[<ffffffff81046d8a>]  [<ffffffff81046d8a>]
> arch_local_irq_restore+0x2/0x8
> [2294091.223681] RSP: 0018:ffff88011fc039d0  EFLAGS: 00000246
> [2294091.223683] RAX: ffffffff81767f9c RBX: ffffffff8134fd89 RCX:
> 0000000000000303
> [2294091.223685] RDX: 0000000000008b4e RSI: 0000000000000046 RDI:
> 0000000000000246
> [2294091.223687] RBP: 00000000000000e9 R08: 0000000000000000 R09:
> 0000000000000040
> [2294091.223689] R10: 0000000000000000 R11: ffffffffffffffff R12:
> ffff88011fc03948
> [2294091.223691] R13: ffffffff8135585e R14: 00000000000000e9 R15:
> 0000000000000001
> [2294091.223693] FS:  0000000000000000(0000) GS:ffff88011fc00000(0000)
> knlGS:0000000000000000
> [2294091.223696] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
> [2294091.223698] CR2: 00007f15868d9f28 CR3: 0000000001605000 CR4:
> 00000000000006f0
> [2294091.223700] DR0: 0000000000000000 DR1: 0000000000000000 DR2:
> 0000000000000000
> [2294091.223702] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7:
> 0000000000000400
> [2294091.223704] Process kworker/0:0 (pid: 15620, threadinfo
> ffff880036cde000, task ffff8801195c01c0)
> [2294091.223706] Stack:
> [2294091.230919]  ffffffff81047a17 ffff880100000011 ffff88011fc039ff
> 325b000100000001
> [2294091.230924]  322e313930343932 00205d3132333130 ffff88011b3fd280
> ffff88011fc03b1c
> [2294091.230928]  ffffffffa0437263 ffffffffa0433470 000000002bf867fd
> 0000000000000004
> [2294091.230932] Call Trace:
> [2294091.238219]  <IRQ>
> [2294091.245177]  [<ffffffff81047a17>] ? vprintk+0x39e/0x3d9
> [2294091.245184]  [<ffffffff8134958b>] ? printk+0x43/0x48
> [2294091.245188]  [<ffffffffa0436ac4>] ? ipt_log_packet+0x1f7/0x22a
> [ipt_LOG]
> [2294091.245191]  [<ffffffffa0436b36>] ? log_tg+0x3f/0x49 [ipt_LOG]
> [2294091.245195]  [<ffffffffa02810e5>] ? ipt_do_table+0x4d7/0x556
> [ip_tables]
> [2294091.245201]  [<ffffffffa0424aca>] ? nf_conntrack_in+0x53a/0x607
> [nf_conntrack]
> [2294091.245206]  [<ffffffff812b1945>] ? nf_iterate+0x41/0x77
> [2294091.245210]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.245213]  [<ffffffff812b19e3>] ? nf_hook_slow+0x68/0x101
> [2294091.245216]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.245219]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.245222]  [<ffffffff812b7a39>] ? NF_HOOK.constprop.9+0x3c/0x56
> [2294091.245225]  [<ffffffff812b7767>] ? ip_rcv_finish+0x3b/0x2d1
> [2294091.245230]  [<ffffffff8128e58b>] ? __netif_receive_skb+0x3fb/0x42d
> [2294091.245233]  [<ffffffff8128ff15>] ? netif_receive_skb+0x63/0x69
> [2294091.245236]  [<ffffffff81290409>] ? napi_gro_receive+0x1d/0x2b
> [2294091.245239]  [<ffffffff8128ff91>] ? napi_skb_finish+0x1c/0x31
> [2294091.245246]  [<ffffffffa0060596>] ? bnx2_poll_work+0x8e7/0x9fa [bnx2]
> [2294091.245251]  [<ffffffff812db848>] ? icmp_rcv+0x1c5/0x1e1
> [2294091.245255]  [<ffffffff8103ced7>] ? wake_up_idle_cpu+0x3b/0x61
> [2294091.245261]  [<ffffffffa00606e7>] ? bnx2_poll_msix+0x3e/0xad [bnx2]
> [2294091.245264]  [<ffffffff81290527>] ? net_rx_action+0xa1/0x1af
> [2294091.245268]  [<ffffffff8104c346>] ? __do_softirq+0xb9/0x177
> [2294091.245272]  [<ffffffff81356fec>] ? call_softirq+0x1c/0x30
> [2294091.245273]  <EOI>
> [2294091.252093]  [<ffffffff8100f8c5>] ? do_softirq+0x3c/0x7b
> [2294091.252096]  [<ffffffff8104c271>] ?
> _local_bh_enable_ip.isra.11+0x76/0x88
> [2294091.252102]  [<ffffffffa0058d4c>] ? bnx2_fw_sync+0x3a/0xea [bnx2]
> [2294091.252107]  [<ffffffffa0058f9e>] ? bnx2_reset_chip+0x1a2/0x32d
> [bnx2]
> [2294091.252112]  [<ffffffffa005db98>] ?
> bnx2_reset_nic.constprop.72+0x1b/0xd7c [bnx2]
> [2294091.252117]  [<ffffffff8129d307>] ? linkwatch_schedule_work+0x54/0x94
> [2294091.252122]  [<ffffffffa005c98e>] ? bnx2_netif_stop+0xe7/0x109 [bnx2]
> [2294091.252127]  [<ffffffffa005e98b>] ? bnx2_init_nic+0x12/0x5d [bnx2]
> [2294091.252132]  [<ffffffffa005ec52>] ? bnx2_reset_task+0x3c/0x8b [bnx2]
> [2294091.252136]  [<ffffffff8105b579>] ? process_one_work+0x161/0x269
> [2294091.252139]  [<ffffffff8105c542>] ? worker_thread+0xc2/0x145
> [2294091.252142]  [<ffffffff8105c480>] ?
> manage_workers.isra.25+0x15b/0x15b
> [2294091.252146]  [<ffffffff8105f681>] ? kthread+0x76/0x7e
> [2294091.252149]  [<ffffffff81356ef4>] ? kernel_thread_helper+0x4/0x10
> [2294091.252152]  [<ffffffff8105f60b>] ? kthread_worker_fn+0x139/0x139
> [2294091.252155]  [<ffffffff81356ef0>] ? gs_change+0x13/0x13
> [2294091.252157] Code: ff ff 48 83 c4 58 c3 56 83 3d fe 11 72 00 00 74 05
> e8 32 fd ff ff e8 a7 fe ff ff 59 bf 01 00 00 00 e9 c0 14 00 00 90 90 90 57
> 9d <66> 66 90 66 90 c3 41 55 41 54 41 89 fc 55 89 f5 29 fd 53 52 48
> [2294091.266292] Call Trace:
> [2294091.266294]  <IRQ>  [<ffffffff81047a17>] ? vprintk+0x39e/0x3d9
> [2294091.266300]  [<ffffffff8134958b>] ? printk+0x43/0x48
> [2294091.266303]  [<ffffffffa0436ac4>] ? ipt_log_packet+0x1f7/0x22a
> [ipt_LOG]
> [2294091.266306]  [<ffffffffa0436b36>] ? log_tg+0x3f/0x49 [ipt_LOG]
> [2294091.266310]  [<ffffffffa02810e5>] ? ipt_do_table+0x4d7/0x556
> [ip_tables]
> [2294091.266314]  [<ffffffffa0424aca>] ? nf_conntrack_in+0x53a/0x607
> [nf_conntrack]
> [2294091.266318]  [<ffffffff812b1945>] ? nf_iterate+0x41/0x77
> [2294091.266321]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.266324]  [<ffffffff812b19e3>] ? nf_hook_slow+0x68/0x101
> [2294091.266327]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.266330]  [<ffffffff812b7aa2>] ?
> xfrm4_policy_check.constprop.10+0x4f/0x4f
> [2294091.266333]  [<ffffffff812b7a39>] ? NF_HOOK.constprop.9+0x3c/0x56
> [2294091.266336]  [<ffffffff812b7767>] ? ip_rcv_finish+0x3b/0x2d1
> [2294091.266339]  [<ffffffff8128e58b>] ? __netif_receive_skb+0x3fb/0x42d
> [2294091.266342]  [<ffffffff8128ff15>] ? netif_receive_skb+0x63/0x69
> [2294091.266345]  [<ffffffff81290409>] ? napi_gro_receive+0x1d/0x2b
> [2294091.266347]  [<ffffffff8128ff91>] ? napi_skb_finish+0x1c/0x31
> [2294091.266353]  [<ffffffffa0060596>] ? bnx2_poll_work+0x8e7/0x9fa [bnx2]
> [2294091.266356]  [<ffffffff812db848>] ? icmp_rcv+0x1c5/0x1e1
> [2294091.266359]  [<ffffffff8103ced7>] ? wake_up_idle_cpu+0x3b/0x61
> [2294091.266364]  [<ffffffffa00606e7>] ? bnx2_poll_msix+0x3e/0xad [bnx2]
> [2294091.266368]  [<ffffffff81290527>] ? net_rx_action+0xa1/0x1af
> [2294091.266371]  [<ffffffff8104c346>] ? __do_softirq+0xb9/0x177
> [2294091.266374]  [<ffffffff81356fec>] ? call_softirq+0x1c/0x30
> [2294091.266375]  <EOI>  [<ffffffff8100f8c5>] ? do_softirq+0x3c/0x7b
> [2294091.266380]  [<ffffffff8104c271>] ?
> _local_bh_enable_ip.isra.11+0x76/0x88
> [2294091.266385]  [<ffffffffa0058d4c>] ? bnx2_fw_sync+0x3a/0xea [bnx2]
> [2294091.266390]  [<ffffffffa0058f9e>] ? bnx2_reset_chip+0x1a2/0x32d
> [bnx2]
> [2294091.266395]  [<ffffffffa005db98>] ?
> bnx2_reset_nic.constprop.72+0x1b/0xd7c [bnx2]
> [2294091.266398]  [<ffffffff8129d307>] ? linkwatch_schedule_work+0x54/0x94
> [2294091.266403]  [<ffffffffa005c98e>] ? bnx2_netif_stop+0xe7/0x109 [bnx2]
> [2294091.266408]  [<ffffffffa005e98b>] ? bnx2_init_nic+0x12/0x5d [bnx2]
> [2294091.266413]  [<ffffffffa005ec52>] ? bnx2_reset_task+0x3c/0x8b [bnx2]
> [2294091.266416]  [<ffffffff8105b579>] ? process_one_work+0x161/0x269
> [2294091.266419]  [<ffffffff8105c542>] ? worker_thread+0xc2/0x145
> [2294091.266422]  [<ffffffff8105c480>] ?
> manage_workers.isra.25+0x15b/0x15b
> [2294091.266425]  [<ffffffff8105f681>] ? kthread+0x76/0x7e
> [2294091.266428]  [<ffffffff81356ef4>] ? kernel_thread_helper+0x4/0x10
> [2294091.266431]  [<ffffffff8105f60b>] ? kthread_worker_fn+0x139/0x139
> [2294091.266434]  [<ffffffff81356ef0>] ? gs_change+0x13/0x13
> 
> Mit freundlichen Grüßen / Kind regards,
> 
> Daniel Gassen
> CC Security & gCERT / gCERT Coordinator
> 
> Phone: +49 621 60-45903 Mobile: +49 174 3496548 E-Mail:
> daniel.gassen@basf.com
> Postal Address: BASF Business Services GmbH, GSI/ITNB - C010, 67059
> Ludwigshafen, Germany
> 
> BASF - The Chemical Company
> 
> BASF Business Services GmbH, Registered Office: 67059 Ludwigshafen,
> Germany
> Companies' Register: Amtsgericht Ludwigshafen, HRB 3541
> Managing Directors:
> Andreas Biermann, Stefan Beck, Wiebe van der Horst
> Chairman of the Supervisory Board: Dr. Robert Blackburn
> 
> www.information-services.basf.com



Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: