2010-07-27 07:15:54

by Gyorgy Jeney

[permalink] [raw]
Subject: ixgbe->bonding->vlan->bridge->ebtables&iptables causes memory corruption

Hi,

I have a rather interesting network setup here. First I have a dual
10Gbit ixgbe ethernet card, being bonded into one link, on which we
run a number of vlans, which are bridged with various virtual
machines. Now, to protect the box itself and the virtual machines I
have a set of iptables and ebtables rules. Whenever one of the
virtual machines start the kernel, which is 2.6.35-rc6, will reliably
panic.

This error needs both ebtables and iptables rules, without either one
or the other, things seem to work quite well.

The errors and backtraces are many and long, so I attached the full
dmes output, please say if you need more.

nog.

P.S.: Please Cc: me on replies as I'm subscribed to neither
linux-kernel, nor netdev.


Attachments:
dmesg_net3 (98.04 kB)

2010-07-27 08:55:17

by Eric Dumazet

[permalink] [raw]
Subject: Re: ixgbe->bonding->vlan->bridge->ebtables&iptables causes memory corruption

Le mardi 27 juillet 2010 à 09:15 +0200, Gyorgy Jeney a écrit :
> Hi,
>
> I have a rather interesting network setup here. First I have a dual
> 10Gbit ixgbe ethernet card, being bonded into one link, on which we
> run a number of vlans, which are bridged with various virtual
> machines. Now, to protect the box itself and the virtual machines I
> have a set of iptables and ebtables rules. Whenever one of the
> virtual machines start the kernel, which is 2.6.35-rc6, will reliably
> panic.
>
> This error needs both ebtables and iptables rules, without either one
> or the other, things seem to work quite well.
>
> The errors and backtraces are many and long, so I attached the full
> dmes output, please say if you need more.

Seems tricky :(

Could you send your {eb/ip}tables rules ?


2010-07-27 14:31:23

by Eric Dumazet

[permalink] [raw]
Subject: Re: ixgbe->bonding->vlan->bridge->ebtables&iptables causes memory corruption

Le mardi 27 juillet 2010 à 09:15 +0200, Gyorgy Jeney a écrit :
> Hi,
>
> I have a rather interesting network setup here. First I have a dual
> 10Gbit ixgbe ethernet card, being bonded into one link, on which we
> run a number of vlans, which are bridged with various virtual
> machines. Now, to protect the box itself and the virtual machines I
> have a set of iptables and ebtables rules. Whenever one of the
> virtual machines start the kernel, which is 2.6.35-rc6, will reliably
> panic.
>
> This error needs both ebtables and iptables rules, without either one
> or the other, things seem to work quite well.
>
> The errors and backtraces are many and long, so I attached the full
> dmes output, please say if you need more.
>
> nog.

Not related to your crashes, but I wonder how
net/bridge/netfilter/ebt_vlan.c is supposed to work with hw accelerated
vlans...