Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758848Ab1FALwt (ORCPT ); Wed, 1 Jun 2011 07:52:49 -0400 Received: from fnarfbargle.com ([93.93.131.224]:44909 "EHLO fnarfbargle.com" rhost-flags-OK-FAIL-OK-FAIL) by vger.kernel.org with ESMTP id S1758810Ab1FALwq (ORCPT ); Wed, 1 Jun 2011 07:52:46 -0400 Message-ID: <4DE62801.9080804@fnarfbargle.com> Date: Wed, 01 Jun 2011 19:52:33 +0800 From: Brad Campbell User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.17) Gecko/20110424 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: CaT CC: Avi Kivity , Hugh Dickins , Andrea Arcangeli , Borislav Petkov , linux-kernel@vger.kernel.org, kvm@vger.kernel.org, linux-mm , netdev Subject: Re: KVM induced panic on 2.6.38[2367] & 2.6.39 References: <4DE589C5.8030600@fnarfbargle.com> <20110601011527.GN19505@random.random> <4DE5DCA8.7070704@fnarfbargle.com> <4DE5E29E.7080009@redhat.com> <4DE60669.9050606@fnarfbargle.com> <4DE60918.3010008@redhat.com> <4DE60940.1070107@redhat.com> <4DE61A2B.7000008@fnarfbargle.com> <20110601111841.GB3956@zip.com.au> In-Reply-To: <20110601111841.GB3956@zip.com.au> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1443 Lines: 33 On 01/06/11 19:18, CaT wrote: > On Wed, Jun 01, 2011 at 06:53:31PM +0800, Brad Campbell wrote: >> I rebooted into a netfilter kernel, and did all the steps I'd used >> on the no-netfilter kernel and it ticked along happily. >> >> So the result of the experiment is inconclusive. Having said that, >> the backtraces certainly smell networky. >> >> To get it to crash, I have to start IE in the VM and https to the >> public address of the machine, which is then redirected by netfilter >> back into another of the VM's. >> >> I can https directly to the other VM's address, but that does not >> cause it to crash, however without netfilter loaded I can't bounce >> off the public IP. It's all rather confusing really. >> >> What next Sherlock? > > I think you're hitting something I've seen. Can you try rewriting > your firewall rules so that it does not reference any bridge > interfaces at all. Instead, reference the real interface names > in their place. I'm betting it wont crash. > Unfortunately the only interface that is mentioned by name anywhere in my firewall is $DMZ (which is ppp0 and not part of any bridge). All of the nat/dnat and other horrible hacks are based on IP addresses. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/