[B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

List overview All Threads
Download

newer

older

[B.A.T.M.A.N.] [PATCH-maint]...

[B.A.T.M.A.N.] mib for batman-adv

Sven Eckelmann

25 Nov 2014 25 Nov '14

6:06 p.m.

The fragmentation code doesn't check if the the total_size information of the packets inside one chain is consistent. This allows an attacker to inject packets belonging to the same fragmentation sequence number with different total_size. This can cause a crash when these are assembled because the total_size information is only parsed from the first packet in batadv_frag_merge_packets but the queueing function always uses the total_size of the latest packet.

Assume two packets with the size x and y.

1. first packet is sent with a size x and the total_size x+y' (y' < y) 2. second packet is sent with a size y and the total_size x+y

The fragmentation code would try to assemble the two packets because the accumulated packets have a combined size of x+y and the second packet had the total_size of x+y.

The fragmentation assembling code only took the information from the first packet with the total_size x+y' and create a packet with enough space for x+y' bytes. But the second packet cannot be copied inside the prepared free space because it is y-y' bytes larger than the remaining space.

Signed-off-by: Sven Eckelmann sven@narfation.org --- This is only build tested. I've never spend time in creation of these packets to verify my claim.

fragmentation.c | 7 +++++-- types.h | 2 ++ 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/fragmentation.c b/fragmentation.c index 362e91a..3a19d4d 100644 --- a/fragmentation.c +++ b/fragmentation.c @@ -161,6 +161,7 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node, hlist_add_head(&frag_entry_new->list, &chain->head); chain->size = skb->len - hdr_size; chain->timestamp = jiffies; + chain->total_size = ntohs(frag_packet->total_size); ret = true; goto out; } @@ -195,9 +196,11 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node,

out: if (chain->size > batadv_frag_size_limit() || - ntohs(frag_packet->total_size) > batadv_frag_size_limit()) { + chain->total_size != ntohs(frag_packet->total_size) || + chain->total_size > batadv_frag_size_limit()) { /* Clear chain if total size of either the list or the packet - * exceeds the maximum size of one merged packet. + * exceeds the maximum size of one merged packet. Don't allow + * packets to have different total_size. */ batadv_frag_clear_chain(&chain->head); chain->size = 0; diff --git a/types.h b/types.h index 462a70c..c4d7d24 100644 --- a/types.h +++ b/types.h @@ -132,6 +132,7 @@ struct batadv_orig_ifinfo { * @timestamp: time (jiffie) of last received fragment * @seqno: sequence number of the fragments in the list * @size: accumulated size of packets in list + * @total_size: expected size of the assembled packet */ struct batadv_frag_table_entry { struct hlist_head head; @@ -139,6 +140,7 @@ struct batadv_frag_table_entry { unsigned long timestamp; uint16_t seqno; uint16_t size; + uint16_t total_size; };

/**

-- 2.1.3

Show replies by thread

Christian Huldt

25 Nov 25 Nov

6:11 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Good catch!

On 11/25/2014 07:06 PM, Sven Eckelmann wrote:

...

The fragmentation code doesn't check if the the total_size information of the packets inside one chain is consistent. This allows an attacker to inject packets belonging to the same fragmentation sequence number with different total_size. This can cause a crash when these are assembled because the total_size information is only parsed from the first packet in batadv_frag_merge_packets but the queueing function always uses the total_size of the latest packet.

Assume two packets with the size x and y.

first packet is sent with a size x and the total_size x+y' (y' < y)

second packet is sent with a size y and the total_size x+y

The fragmentation code would try to assemble the two packets because the accumulated packets have a combined size of x+y and the second packet had the total_size of x+y.

The fragmentation assembling code only took the information from the first packet with the total_size x+y' and create a packet with enough space for x+y' bytes. But the second packet cannot be copied inside the prepared free space because it is y-y' bytes larger than the remaining space.

Signed-off-by: Sven Eckelmann sven@narfation.org

This is only build tested. I've never spend time in creation of these packets to verify my claim.

fragmentation.c | 7 +++++-- types.h | 2 ++ 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/fragmentation.c b/fragmentation.c index 362e91a..3a19d4d 100644 --- a/fragmentation.c +++ b/fragmentation.c @@ -161,6 +161,7 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node, hlist_add_head(&frag_entry_new->list, &chain->head); chain->size = skb->len - hdr_size; chain->timestamp = jiffies;
chain->total_size = ntohs(frag_packet->total_size);
ret = true; goto out; }
@@ -195,9 +196,11 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node,

out: if (chain->size > batadv_frag_size_limit() ||
   ntohs(frag_packet->total_size) > batadv_frag_size_limit()) {
   chain->total_size != ntohs(frag_packet->total_size) ||
   chain->total_size > batadv_frag_size_limit()) {
/* Clear chain if total size of either the list or the packet
 * exceeds the maximum size of one merged packet.
 * exceeds the maximum size of one merged packet. Don't allow
 * packets to have different total_size.
*/ batadv_frag_clear_chain(&chain->head); chain->size = 0;
diff --git a/types.h b/types.h index 462a70c..c4d7d24 100644 --- a/types.h +++ b/types.h @@ -132,6 +132,7 @@ struct batadv_orig_ifinfo {

@timestamp: time (jiffie) of last received fragment

@seqno: sequence number of the fragments in the list

@size: accumulated size of packets in list

@total_size: expected size of the assembled packet

*/

struct batadv_frag_table_entry { struct hlist_head head; @@ -139,6 +140,7 @@ struct batadv_frag_table_entry { unsigned long timestamp; uint16_t seqno; uint16_t size;

uint16_t total_size;

};

/**

Martin Hundebøll

6:39 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Acked-by: Martin Hundebøll martin@hundeboll.net

Philipp: Can you please test this patch, and report back if it fixes your crash?

Thanks!

// Martin

On 2014-11-25 19:06, Sven Eckelmann wrote:

...

The fragmentation code doesn't check if the the total_size information of the packets inside one chain is consistent. This allows an attacker to inject packets belonging to the same fragmentation sequence number with different total_size. This can cause a crash when these are assembled because the total_size information is only parsed from the first packet in batadv_frag_merge_packets but the queueing function always uses the total_size of the latest packet.

Assume two packets with the size x and y.

first packet is sent with a size x and the total_size x+y' (y' < y)

second packet is sent with a size y and the total_size x+y

The fragmentation code would try to assemble the two packets because the accumulated packets have a combined size of x+y and the second packet had the total_size of x+y.

The fragmentation assembling code only took the information from the first packet with the total_size x+y' and create a packet with enough space for x+y' bytes. But the second packet cannot be copied inside the prepared free space because it is y-y' bytes larger than the remaining space.

Signed-off-by: Sven Eckelmann sven@narfation.org

This is only build tested. I've never spend time in creation of these packets to verify my claim.

fragmentation.c | 7 +++++-- types.h | 2 ++ 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/fragmentation.c b/fragmentation.c index 362e91a..3a19d4d 100644 --- a/fragmentation.c +++ b/fragmentation.c @@ -161,6 +161,7 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node, hlist_add_head(&frag_entry_new->list, &chain->head); chain->size = skb->len - hdr_size; chain->timestamp = jiffies;
chain->total_size = ntohs(frag_packet->total_size);
ret = true; goto out; }
@@ -195,9 +196,11 @@ static bool batadv_frag_insert_packet(struct batadv_orig_node *orig_node,

out: if (chain->size > batadv_frag_size_limit() ||
   ntohs(frag_packet->total_size) > batadv_frag_size_limit()) {
   chain->total_size != ntohs(frag_packet->total_size) ||
   chain->total_size > batadv_frag_size_limit()) {
/* Clear chain if total size of either the list or the packet
 * exceeds the maximum size of one merged packet.
 * exceeds the maximum size of one merged packet. Don't allow
 * packets to have different total_size.
*/ batadv_frag_clear_chain(&chain->head); chain->size = 0;
diff --git a/types.h b/types.h index 462a70c..c4d7d24 100644 --- a/types.h +++ b/types.h @@ -132,6 +132,7 @@ struct batadv_orig_ifinfo {

@timestamp: time (jiffie) of last received fragment

@seqno: sequence number of the fragments in the list

@size: accumulated size of packets in list

@total_size: expected size of the assembled packet

*/ struct batadv_frag_table_entry { struct hlist_head head;

@@ -139,6 +140,7 @@ struct batadv_frag_table_entry { unsigned long timestamp; uint16_t seqno; uint16_t size;

uint16_t total_size; };

/**

-- Kind Regards, Martin Hundebøll Frederiks Allé 99A, 1.th 8000 Aarhus C +45 61 65 54 61 martin@hundeboll.net

Philipp Psurek

9:16 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Martin, hi Sven, hi all,

thanks for working on my bug.

Am Dienstag, den 25.11.2014, 19:39 +0100 schrieb Martin Hundebøll:

...

Can you please test this patch, and report back if it fixes your crash?

After I tweeted about this bug in my Community with link to my thread in this ML telling there is no gateway for now and switching the VM to 3.17.4 8,5 hours from now; the VM didn't crush. It might be the attacker is sleeping because there were no gateway announced through DHCP or some changes in the new version prevent the kernel panic: 35e95fae72ddb67ef94395d99abc48589ce17875 dd8aaf1f380e008044857d7d2293e8e2824772b8 5a282822a9e472a41a7e2db71903a1c6654c634a

dmesg screams “UDP: bad checksum.” all the time, but it's to soon to tell.

I test this patch if the VM crashes again. If the VM didn't crash until Sunday I do a kernel downgrade to 3.17.3 or 3.16.7 with your patch and report. Or should I implement your patch immediately on the old kernel to prove your work without waiting? It would be much convenient to implement this during an actual attack and it would much more prove your work.

I'll report soon. Thanks for your work and Batman-adv.

Best regards

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

Philipp Psurek

30 Nov 30 Nov

10:36 a.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Sven, hi Martin, hi all

I thought after 6 days with 3.17.4 without your patch the crashes had been solved with the new kernel. But the server crashed again yesterday. So I implement your patch.

Am Dienstag, den 25.11.2014, 19:39 +0100 schrieb Martin Hundebøll:

...

Philipp: Can you please test this patch, and report back if it fixes your crash?

Patching was not trivial because the lines have changed. I did this manually. I hope, I did it right. So now, after 10 h, there has been a crash. I suggest, you tell me how to extract the bogus packages from the vmcore dump so you can test them in the lab by yourselves. You also can send me links with simple instructions to study to complete this task because I do not know what to do.

Best regards

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

############################################################# diff -u fragmentation.c.ori fragmentation.c --- fragmentation.c.ori 2014-11-25 10:04:40.000000000 +0100 +++ fragmentation.c 2014-11-29 23:57:33.000000000 +0100 @@ -162,6 +162,7 @@ hlist_add_head(&frag_entry_new->list, &chain->head); chain->size = skb->len - hdr_size; chain->timestamp = jiffies; + chain->total_size = ntohs(frag_packet->total_size); ret = true; goto out; } @@ -196,9 +197,11 @@

out: if (chain->size > batadv_frag_size_limit() || - ntohs(frag_packet->total_size) > batadv_frag_size_limit()) { + chain->total_size != ntohs(frag_packet->total_size) || + chain->total_size > batadv_frag_size_limit()) { /* Clear chain if total size of either the list or the packet - * exceeds the maximum size of one merged packet. + * exceeds the maximum size of one merged packet. Don't allow + * packets to have different total_size. */ batadv_frag_clear_chain(&chain->head); chain->size = 0; diff -u types.h.ori types.h --- types.h.ori 2014-11-29 23:51:40.000000000 +0100 +++ types.h 2014-11-30 00:02:21.000000000 +0100 @@ -140,6 +140,7 @@ unsigned long timestamp; uint16_t seqno; uint16_t size; + uint16_t total_size; };

/** ############################################################# KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux DUMPFILE: vmcore_20141130104138 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 10:20:29 LOAD AVERAGE: 0.10, 0.15, 0.14 TASKS: 122 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "kernel BUG at net/core/skbuff.c:100!" PID: 1871 COMMAND: "fastd" TASK: ffff88001a3fa340 [THREAD_INFO: ffff8800193c8000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 1871 TASK: ffff88001a3fa340 CPU: 0 COMMAND: "fastd" #0 [ffff88001fc03980] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc039e0] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03ab0] oops_end at ffffffff810060f8 #3 [ffff88001fc03ae0] die at ffffffff81006593 #4 [ffff88001fc03b10] do_trap at ffffffff81002ef2 #5 [ffff88001fc03b70] do_error_trap at ffffffff8100305d #6 [ffff88001fc03c30] do_invalid_op at ffffffff81003a7b #7 [ffff88001fc03c40] invalid_op at ffffffff8162009e [exception RIP: skb_panic+94] RIP: ffffffff81618ba3 RSP: ffff88001fc03cf8 RFLAGS: 00010296 RAX: 000000000000008b RBX: ffff88001a2af500 RCX: 0000000000000092 RDX: 0000000000000070 RSI: 0000000000000246 RDI: 0000000000000246 RBP: ffff88001fc03d18 R8: 0000000000000000 R9: 0000000000000000 R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 R13: ffff88001fc03da0 R14: ffff88001a21f000 R15: ffff880013ab5062 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #8 [ffff88001fc03d20] skb_put at ffffffff81464321 #9 [ffff88001fc03d30] batadv_frag_skb_buffer at ffffffffa00a8e52 [batman_adv] #10 [ffff88001fc03d90] batadv_recv_frag_packet at ffffffffa00b32a3 [batman_adv] #11 [ffff88001fc03dd0] batadv_batman_skb_recv at ffffffffa00acf35 [batman_adv] #12 [ffff88001fc03e10] __netif_receive_skb_core at ffffffff81474152 #13 [ffff88001fc03e80] __netif_receive_skb at ffffffff81474691 #14 [ffff88001fc03ea0] process_backlog at ffffffff8147477e #15 [ffff88001fc03ef0] net_rx_action at ffffffff81474f31 #16 [ffff88001fc03f50] __do_softirq at ffffffff81052e28 #17 [ffff88001fc03fb0] do_softirq_own_stack at ffffffff8162029c --- <IRQ stack> --- #18 [ffff8800193cbd10] do_softirq_own_stack at ffffffff8162029c [exception RIP: tun_get_user+1043] RIP: ffffffffa00968f3 RSP: 0000000000000001 RFLAGS: 7fff00000586 RAX: ffffffff814736a4 RBX: ffff8800193cbd58 RCX: ffff88001a1f8780 RDX: 0000000000000000 RSI: ffff88001a1f8780 RDI: 0000000000000586 RBP: ffffffff814733d4 R8: ffff8800193cbd88 R9: ffff88001a1f8780 R10: ffff88001a1f8780 R11: ffffffff81053065 R12: ffff8800193cbd58 R13: 0000000000000586 R14: ffff880019ced900 R15: 0000000000000000 ORIG_RAX: ffff8800193cbe38 CS: 7fff054d06e0 SS: 0000 bt: WARNING: possibly bogus exception frame #19 [ffff8800193cbe40] tun_chr_aio_write at ffffffffa0096e1b [tun] #20 [ffff8800193cbe70] do_sync_write at ffffffff811611a5 #21 [ffff8800193cbf00] vfs_write at ffffffff81161eca #22 [ffff8800193cbf40] sys_write at ffffffff811623da #23 [ffff8800193cbf80] system_call_fastpath at ffffffff8161e769 RIP: 00007f24755b737d RSP: 00007fff054d0398 RFLAGS: 00000212 RAX: 0000000000000001 RBX: ffffffff8161e769 RCX: 00007f24755b78fd RDX: 0000000000000586 RSI: 0000000002416190 RDI: 0000000000000009 RBP: 0000000000000586 R8: 00007f24755a0400 R9: 00007fff054cfe28 R10: 00007fff054d056f R11: 0000000000000293 R12: 0000000002421008 R13: 0000000000000001 R14: 0000000002416180 R15: 0000000002404990 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b crash> log [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.17.4-gentoo (root@wolke) (gcc version 4.7.3 (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) ) #1 SMP Tue Nov 25 12:37:10 CET 2014 [ 0.000000] Command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009dbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009dc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000001fffdfff] usable [ 0.000000] BIOS-e820: [mem 0x000000001fffe000-0x000000001fffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] DMI: Bochs Bochs, BIOS Bochs 01/01/2007 [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.000000] e820: last_pfn = 0x1fffe max_arch_pfn = 0x400000000 [ 0.000000] MTRR default type: write-back [ 0.000000] MTRR fixed ranges enabled: [ 0.000000] 00000-9FFFF write-back [ 0.000000] A0000-BFFFF uncachable [ 0.000000] C0000-FFFFF write-protect [ 0.000000] MTRR variable ranges enabled: [ 0.000000] 0 base 00E0000000 mask FFE0000000 uncachable [ 0.000000] 1 disabled [ 0.000000] 2 disabled [ 0.000000] 3 disabled [ 0.000000] 4 disabled [ 0.000000] 5 disabled [ 0.000000] 6 disabled [ 0.000000] 7 disabled [ 0.000000] x86 PAT enabled: cpu 0, old 0x70406, new 0x7010600070106 [ 0.000000] found SMP MP-table at [mem 0x000fdaf0-0x000fdaff] mapped at [ffff8800000fdaf0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576 [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] [mem 0x00000000-0x000fffff] page 4k [ 0.000000] BRK [0x01cae000, 0x01caefff] PGTABLE [ 0.000000] BRK [0x01caf000, 0x01caffff] PGTABLE [ 0.000000] BRK [0x01cb0000, 0x01cb0fff] PGTABLE [ 0.000000] init_memory_mapping: [mem 0x1fc00000-0x1fdfffff] [ 0.000000] [mem 0x1fc00000-0x1fdfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1c000000-0x1fbfffff] [ 0.000000] [mem 0x1c000000-0x1fbfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x00100000-0x1bffffff] [ 0.000000] [mem 0x00100000-0x001fffff] page 4k [ 0.000000] [mem 0x00200000-0x1bffffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1fe00000-0x1fffdfff] [ 0.000000] [mem 0x1fe00000-0x1fffdfff] page 4k [ 0.000000] BRK [0x01cb1000, 0x01cb1fff] PGTABLE [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000FD990 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x000000001FFFE5B0 000038 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x000000001FFFFF80 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x000000001FFFE5F0 001121 (v01 BXPC BXDSDT 00000001 INTL 20100528) [ 0.000000] ACPI: FACS 0x000000001FFFFF40 000040 [ 0.000000] ACPI: SSDT 0x000000001FFFFEA0 00009E (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x000000001FFFFDB0 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] ACPI: HPET 0x000000001FFFFD70 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.000000] ACPI: SSDT 0x000000001FFFF720 000644 (v01 BXPC BXSSDTPC 00000001 INTL 20100528) [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000001fffdfff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x1fffdfff] [ 0.000000] NODE_DATA [mem 0x1fffa000-0x1fffdfff] [ 0.000000] Reserving 64MB of memory at 432MB for crashkernel (System RAM: 511MB) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 0:1fff9001, primary cpu clock [ 0.000000] [ffffea0000000000-ffffea00007fffff] PMD -> [ffff88001a800000-ffff88001affffff] on node 0 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009cfff] [ 0.000000] node 0: [mem 0x00100000-0x1fffdfff] [ 0.000000] On node 0 totalpages: 130970 [ 0.000000] DMA zone: 64 pages used for memmap [ 0.000000] DMA zone: 21 pages reserved [ 0.000000] DMA zone: 3996 pages, LIFO batch:0 [ 0.000000] DMA32 zone: 1984 pages used for memmap [ 0.000000] DMA32 zone: 126974 pages, LIFO batch:31 [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0]) [ 0.000000] IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] ACPI: IRQ0 used by override. [ 0.000000] ACPI: IRQ5 used by override. [ 0.000000] ACPI: IRQ9 used by override. [ 0.000000] ACPI: IRQ10 used by override. [ 0.000000] ACPI: IRQ11 used by override. [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] e820: [mem 0x20000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:1 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 27 pages/cpu @ffff88001fc00000 s79744 r8192 d22656 u2097152 [ 0.000000] pcpu-alloc: s79744 r8192 d22656 u2097152 alloc=1*2097152 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1fc0cf80 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 128901 [ 0.000000] Policy zone: DMA32 [ 0.000000] Kernel command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing! [ 0.000000] Memory: 436880K/523880K available (6283K kernel code, 773K rwdata, 1992K rodata, 1060K init, 872K bss, 87000K reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=1. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS:4352 nr_irqs:256 0 [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] hpet clockevent registered [ 0.000000] tsc: Detected 2593.748 MHz processor [ 0.002000] Calibrating delay loop (skipped) preset value.. 5187.49 BogoMIPS (lpj=2593748) [ 0.002005] pid_max: default: 32768 minimum: 301 [ 0.002383] ACPI: Core revision 20140724 [ 0.003698] ACPI: All ACPI Tables successfully acquired [ 0.004047] Security Framework initialized [ 0.004420] SELinux: Initializing. [ 0.005010] SELinux: Starting in permissive mode [ 0.005043] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.005776] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.006135] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.006553] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.007351] Initializing cgroup subsys freezer [ 0.008085] mce: CPU supports 10 MCE banks [ 0.008506] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.022632] Freeing SMP alternatives memory: 24K (ffffffff81bcc000 - ffffffff81bd2000) [ 0.026834] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.027003] smpboot: CPU0: Intel Westmere E56xx/L56xx/X56xx (Nehalem-C) (fam: 06, model: 2c, stepping: 01) [ 0.029000] Performance Events: unsupported p6 CPU model 44 no PMU driver, software events only. [ 0.029373] x86: Booted up 1 node, 1 CPUs [ 0.029729] smpboot: Total of 1 processors activated (5187.49 BogoMIPS) [ 0.030417] devtmpfs: initialized [ 0.031278] RTC time: 23:09:03, date: 11/29/14 [ 0.031732] NET: Registered protocol family 16 [ 0.032159] cpuidle: using governor ladder [ 0.032479] cpuidle: using governor menu [ 0.032828] ACPI: bus type PCI registered [ 0.033107] PCI: Using configuration type 1 for base access [ 0.035470] kworker/u2:0 (14) used greatest stack depth: 14664 bytes left [ 0.036107] ACPI: Added _OSI(Module Device) [ 0.036462] ACPI: Added _OSI(Processor Device) [ 0.036778] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.037004] ACPI: Added _OSI(Processor Aggregator Device) [ 0.038827] ACPI: Interpreter enabled [ 0.039008] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S1_] (20140724/hwxface-580) [ 0.040005] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S2_] (20140724/hwxface-580) [ 0.040742] ACPI: (supports S0 S3 S4 S5) [ 0.041005] ACPI: Using IOAPIC for interrupt routing [ 0.041473] kworker/u2:0 (21) used greatest stack depth: 13912 bytes left [ 0.042011] PCI: Ignoring host bridge windows from ACPI; if necessary, use "pci=use_crs" and report a bug [ 0.044775] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.045008] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.045406] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.045781] acpi PNP0A03:00: host bridge window [io 0x0000-0x0cf7] (ignored) [ 0.045783] acpi PNP0A03:00: host bridge window [io 0x0d00-0xffff] (ignored) [ 0.045785] acpi PNP0A03:00: host bridge window [mem 0x000a0000-0x000bffff] (ignored) [ 0.045786] acpi PNP0A03:00: host bridge window [mem 0xe0000000-0xfebfffff] (ignored) [ 0.045787] PCI: root bus 00: using default resources [ 0.045790] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.046083] PCI host bridge to bus 0000:00 [ 0.047047] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.047392] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.047770] pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffffff] [ 0.048045] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 0.048378] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 0.049024] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 0.050616] pci 0000:00:01.1: reg 0x20: [io 0xc0a0-0xc0af] [ 0.051185] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.051555] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.052003] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.052371] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.052888] pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 [ 0.054478] pci 0000:00:01.2: reg 0x20: [io 0xc040-0xc05f] [ 0.055178] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 0.055496] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 0.056018] pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB [ 0.056620] pci 0000:00:02.0: [1013:00b8] type 00 class 0x030000 [ 0.058071] pci 0000:00:02.0: reg 0x10: [mem 0xfc000000-0xfdffffff pref] [ 0.060034] pci 0000:00:02.0: reg 0x14: [mem 0xfebf0000-0xfebf0fff] [ 0.070046] pci 0000:00:02.0: reg 0x30: [mem 0xfebd0000-0xfebdffff pref] [ 0.071793] pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 [ 0.072324] pci 0000:00:03.0: reg 0x10: [io 0xc060-0xc07f] [ 0.073003] pci 0000:00:03.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff] [ 0.075841] pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] [ 0.076488] pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 [ 0.078004] pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc03f] [ 0.080011] pci 0000:00:04.0: reg 0x14: [mem 0xfebf2000-0xfebf2fff] [ 0.084573] pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 [ 0.084907] pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] [ 0.087506] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.088574] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.089318] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.090149] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.090879] ACPI: PCI Interrupt Link [LNKS] (IRQs 9) *0, disabled. [ 0.091854] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.092250] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.092593] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.093004] vgaarb: loaded [ 0.093287] vgaarb: bridge control possible 0000:00:02.0 [ 0.094167] SCSI subsystem initialized [ 0.094577] libata version 3.00 loaded. [ 0.094608] ACPI: bus type USB registered [ 0.095060] usbcore: registered new interface driver usbfs [ 0.095417] usbcore: registered new interface driver hub [ 0.095799] usbcore: registered new device driver usb [ 0.096084] pps_core: LinuxPPS API ver. 1 registered [ 0.096465] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it [ 0.097016] PTP clock support registered [ 0.097524] PCI: Using ACPI for IRQ routing [ 0.098014] PCI: pci_cache_line_size set to 64 bytes [ 0.098146] e820: reserve RAM buffer [mem 0x0009dc00-0x0009ffff] [ 0.098150] e820: reserve RAM buffer [mem 0x1fffe000-0x1fffffff] [ 0.098517] NetLabel: Initializing [ 0.098825] NetLabel: domain hash size = 128 [ 0.099002] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.099361] NetLabel: unlabeled traffic allowed by default [ 0.100190] HPET: 3 timers in total, 0 timers will be used for per-cpu timer [ 0.100576] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 0.101007] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 0.105019] cfg80211: Calling CRDA to update world regulatory domain [ 0.106110] Switched to clocksource kvm-clock [ 0.114213] pnp: PnP ACPI init [ 0.114640] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) [ 0.114703] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active) [ 0.114746] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active) [ 0.114778] pnp 00:03: [dma 2] [ 0.114796] pnp 00:03: Plug and Play ACPI device, IDs PNP0700 (active) [ 0.114889] pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) [ 0.115092] pnp: PnP ACPI: found 5 devices [ 0.120165] pci_bus 0000:00: resource 4 [io 0x0000-0xffff] [ 0.120168] pci_bus 0000:00: resource 5 [mem 0x00000000-0xffffffffff] [ 0.120203] NET: Registered protocol family 2 [ 0.120761] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.121194] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.121574] TCP: Hash tables configured (established 4096 bind 4096) [ 0.122017] TCP: reno registered [ 0.122316] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.122667] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.123220] NET: Registered protocol family 1 [ 0.123577] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.123943] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.124320] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.124941] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.125530] pci 0000:00:02.0: Video device with shadowed ROM [ 0.125570] PCI: CLS 0 bytes, default 64 [ 0.125880] microcode: CPU0 sig=0x206c1, pf=0x1, revision=0x1 [ 0.126301] microcode: Microcode Update Driver: v2.00 tigran@aivazian.fsnet.co.uk, Peter Oruba [ 0.127114] Scanning for low memory corruption every 60 seconds [ 0.127704] futex hash table entries: 256 (order: 2, 16384 bytes) [ 0.128092] Initialise system trusted keyring [ 0.128427] audit: initializing netlink subsys (disabled) [ 0.128784] audit: type=2000 audit(1417302546.973:1): initialized [ 0.129512] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.131683] VFS: Disk quotas dquot_6.5.2 [ 0.132087] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.132721] msgmni has been set to 853 [ 0.133137] SELinux: Registering netfilter hooks [ 0.133865] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.134445] io scheduler noop registered [ 0.134751] io scheduler deadline registered [ 0.135173] io scheduler cfq registered (default) [ 0.135571] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.135960] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.158006] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 0.159500] Non-volatile memory driver v1.3 [ 0.159943] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 0.160516] ACPI: Power Button [PWRF] [ 0.161415] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 10 [ 0.163034] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 0.164072] loop: module loaded [ 0.164501] virtio-pci 0000:00:04.0: irq 24 for MSI/MSI-X [ 0.164518] virtio-pci 0000:00:04.0: irq 25 for MSI/MSI-X [ 0.255068] vda: vda1 vda2 [ 0.257903] ata_piix 0000:00:01.1: version 2.13 [ 0.258436] scsi host0: ata_piix [ 0.258907] scsi host1: ata_piix [ 0.259289] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0a0 irq 14 [ 0.259655] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0a8 irq 15 [ 0.260360] virtio-pci 0000:00:03.0: irq 26 for MSI/MSI-X [ 0.260377] virtio-pci 0000:00:03.0: irq 27 for MSI/MSI-X [ 0.260394] virtio-pci 0000:00:03.0: irq 28 for MSI/MSI-X [ 0.402360] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.402738] ehci-pci: EHCI PCI platform driver [ 0.403096] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.403457] ohci-pci: OHCI PCI platform driver [ 0.403791] uhci_hcd: USB Universal Host Controller Interface driver [ 0.404425] uhci_hcd 0000:00:01.2: UHCI Host Controller [ 0.404797] uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 [ 0.405484] uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c040 [ 0.405949] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001 [ 0.406573] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 0.407128] usb usb1: Product: UHCI Host Controller [ 0.407611] usb usb1: Manufacturer: Linux 3.17.4-gentoo uhci_hcd [ 0.407956] usb usb1: SerialNumber: 0000:00:01.2 [ 0.408403] hub 1-0:1.0: USB hub found [ 0.408757] hub 1-0:1.0: 2 ports detected [ 0.409247] usbcore: registered new interface driver usblp [ 0.409619] usbcore: registered new interface driver usb-storage [ 0.410073] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 0.411285] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 0.411619] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 0.412258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 0.413051] rtc_cmos 00:00: RTC can wake from S4 [ 0.413800] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 0.414522] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs [ 0.415079] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-devel@redhat.com [ 0.415743] hidraw: raw HID events driver (C) Jiri Kosina [ 0.416352] usbcore: registered new interface driver usbhid [ 0.416697] usbhid: USB HID core driver [ 0.417068] Netfilter messages via NETLINK v0.30. [ 0.417424] nf_conntrack version 0.5.0 (3413 buckets, 13652 max) [ 0.417868] ctnetlink v0.93: registering with nfnetlink. [ 0.418463] ip_tables: (C) 2000-2006 Netfilter Core Team [ 0.418827] TCP: cubic registered [ 0.419183] Initializing XFRM netlink socket [ 0.419646] NET: Registered protocol family 10 [ 0.420324] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 0.420729] sit: IPv6 over IPv4 tunneling driver [ 0.421209] NET: Registered protocol family 17 [ 0.421558] 9pnet: Installing 9P2000 support [ 0.422034] Key type dns_resolver registered [ 0.422769] Loading compiled-in X.509 certificates [ 0.423175] registered taskstats version 1 [ 0.423796] Magic number: 6:269:202 [ 0.424166] console [netcon0] enabled [ 0.424484] netconsole: network logging started [ 0.424870] PM: Hibernation image not present or could not be loaded. [ 0.477633] ata2.01: NODEV after polling detection [ 0.477972] ata2.00: ATAPI: QEMU DVD-ROM, 1.1.2, max UDMA/100 [ 0.478779] ata2.00: configured for MWDMA2 [ 0.479570] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.1. PQ: 0 ANSI: 5 [ 0.490505] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 0.490945] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 0.491432] sr 1:0:0:0: Attached scsi CD-ROM sr0 [ 0.491601] sr 1:0:0:0: Attached scsi generic sg0 type 5 [ 0.492054] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 0.520309] kjournald starting. Commit interval 5 seconds [ 0.520713] EXT3-fs (vda1): mounted filesystem with ordered data mode [ 0.521165] VFS: Mounted root (ext3 filesystem) readonly on device 253:1. [ 0.556330] devtmpfs: mounted [ 0.558069] Freeing unused kernel memory: 1060K (ffffffff81ac3000 - ffffffff81bcc000) [ 0.558652] Write protecting the kernel read-only data: 10240k [ 0.564831] Freeing unused kernel memory: 1896K (ffff880001626000 - ffff880001800000) [ 0.565849] Freeing unused kernel memory: 56K (ffff8800019f2000 - ffff880001a00000) [ 0.711060] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 1.010042] usb 1-1: New USB device found, idVendor=0627, idProduct=0001 [ 1.010780] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=5 [ 1.011631] usb 1-1: Product: QEMU USB Tablet [ 1.012384] usb 1-1: Manufacturer: QEMU 1.1.2 [ 1.013057] usb 1-1: SerialNumber: 42 [ 1.030995] input: QEMU 1.1.2 QEMU USB Tablet as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input3 [ 1.032364] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Pointer [QEMU 1.1.2 QEMU USB Tablet] on usb-0000:00:01.2-1/input0 [ 1.128178] tsc: Refined TSC clocksource calibration: 2593.619 MHz [ 2.706793] init-early.sh (724) used greatest stack depth: 11992 bytes left [ 7.610322] systemd-udevd[898]: starting version 216 [ 7.797686] random: systemd-udevd urandom read with 12 bits of entropy available [ 8.563683] mousedev: PS/2 mouse device common for all mice [ 8.706094] Linux agpgart interface v0.103 [ 8.999343] SSE version of gcm_enc/dec engaged. [ 9.166104] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 [ 9.989747] EXT3-fs (vda1): using internal journal [ 10.322662] Adding 1571836k swap on /dev/vda2. Priority:-1 extents:1 across:1571836k [ 23.164785] device eth0 entered promiscuous mode [ 76.190862] random: nonblocking pool is initialized [ 159.064477] tun: Universal TUN/TAP device driver, 1.6 [ 159.064480] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 159.460039] batman_adv: B.A.T.M.A.N. advanced 2014.4.0 (compatibility version 15) loaded [ 159.645923] batman_adv: bat0: Adding interface: fastd0 [ 159.645927] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.645935] batman_adv: bat0: Interface activated: fastd0 [ 159.647721] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 159.650350] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 159.651759] batman_adv: bat0: Changing gw mode from: off to: client [ 171.620775] ipip: IPv4 over IPv4 tunneling driver [ 400.876311] batman_adv: bat0: Changing gw mode from: client to: server [ 400.876333] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '100.0/100.0 MBit' [ 421.579054] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [37229.508613] skbuff: skb_over_panic: text:ffffffffa00a8e52 len:1437 put:1380 head:ffff880014278000 data:ffff880014278062 tail:0x5ff end:0x2c0 dev:fastd0 [37229.508950] ------------[ cut here ]------------ [37229.509070] kernel BUG at net/core/skbuff.c:100! [37229.509198] invalid opcode: 0000 [#1] SMP [37229.509310] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv libcrc32c tun crc32c_intel aesni_intel aes_x86_64 intel_agp intel_gtt glue_helper lrw gf128mul agpgart ablk_helper cryptd mousedev psmouse evdev [37229.509553] CPU: 0 PID: 1871 Comm: fastd Not tainted 3.17.4-gentoo #1 [37229.509553] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [37229.509553] task: ffff88001a3fa340 ti: ffff8800193c8000 task.ti: ffff8800193c8000 [37229.509553] RIP: 0010:[<ffffffff81618ba3>] [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [37229.509553] RSP: 0018:ffff88001fc03cf8 EFLAGS: 00010296 [37229.509553] RAX: 000000000000008b RBX: ffff88001a2af500 RCX: 0000000000000092 [37229.509553] RDX: 0000000000000070 RSI: 0000000000000246 RDI: 0000000000000246 [37229.509553] RBP: ffff88001fc03d18 R08: 0000000000000000 R09: 0000000000000000 [37229.509553] R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 [37229.509553] R13: ffff88001fc03da0 R14: ffff88001a21f000 R15: ffff880013ab5062 [37229.509553] FS: 00007f2476262700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [37229.509553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [37229.509553] CR2: 00007f712f5da5c3 CR3: 0000000019f14000 CR4: 00000000000006f0 [37229.509553] Stack: [37229.509553] ffff880014278062 00000000000005ff 00000000000002c0 ffff88001a1f8000 [37229.509553] ffff88001fc03d28 ffffffff81464321 ffff88001fc03d88 ffffffffa00a8e52 [37229.509553] ffff880013ab504e de0c880019ced900 000077ff80000000 ffff88001a2af500 [37229.509553] Call Trace: [37229.509553] <IRQ> [37229.509553] [37229.509553] [<ffffffff81464321>] skb_put+0x41/0x50 [37229.509553] [<ffffffffa00a8e52>] batadv_frag_skb_buffer+0x292/0x490 [batman_adv] [37229.509553] [<ffffffffa00b32a3>] batadv_recv_frag_packet+0x183/0x200 [batman_adv] [37229.509553] [<ffffffffa00acf35>] batadv_batman_skb_recv+0xd5/0x110 [batman_adv] [37229.509553] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [37229.509553] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [37229.509553] [<ffffffff8147477e>] process_backlog+0x9e/0x170 [37229.509553] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [37229.509553] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [37229.509553] [<ffffffff8162029c>] do_softirq_own_stack+0x1c/0x30 [37229.509553] <EOI> [37229.509553] [37229.509553] [<ffffffff81053065>] do_softirq+0x55/0x60 [37229.509553] [<ffffffff814736a4>] netif_rx_ni+0x34/0x70 [37229.509553] [<ffffffffa00968f3>] tun_get_user+0x413/0x840 [tun] [37229.509553] [<ffffffffa0096e1b>] tun_chr_aio_write+0x7b/0xa0 [tun] [37229.509553] [<ffffffff811611a5>] do_sync_write+0x55/0x90 [37229.509553] [<ffffffff81161eca>] vfs_write+0xba/0x1f0 [37229.509553] [<ffffffff811623da>] SyS_write+0x4a/0xa0 [37229.509553] [<ffffffff8161e769>] system_call_fastpath+0x16/0x1b [37229.509553] Code: 00 00 48 89 44 24 10 8b 87 c0 00 00 00 48 89 44 24 08 48 8b 87 d0 00 00 00 48 c7 c7 40 e8 99 81 48 89 04 24 31 c0 e8 5f b3 ff ff <0f> 0b 55 48 89 f8 48 8b 57 30 48 89 e5 48 8b 0f 5d 80 e5 80 48 [37229.509553] RIP [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [37229.509553] RSP <ffff88001fc03cf8> crash>

Philipp Psurek

11:20 a.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Sven, hi Martin, hi all

it’s me again. After 11 minutes in gw mode the VM crashes again. The “attacker” is back. Its your chance for new patches ;-) I disable fragmentation, lets see if it helps.

I think I might did a mistake. The kernel is compiled with gcc 4.7.3, the patched module with 4.8.3. On the next crash I recompile the module.

Best regards

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

SYSTEM MAP: /boot/System.map DEBUG KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux (3.17.4-gentoo) DUMPFILE: vmcore_20141130115537 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 01:02:39 LOAD AVERAGE: 0.30, 0.22, 0.19 TASKS: 134 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "kernel BUG at net/core/skbuff.c:100!" PID: 1844 COMMAND: "fastd" TASK: ffff88001a2eb4e0 [THREAD_INFO: ffff8800194c4000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 1844 TASK: ffff88001a2eb4e0 CPU: 0 COMMAND: "fastd" #0 [ffff88001fc03980] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc039e0] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03ab0] oops_end at ffffffff810060f8 #3 [ffff88001fc03ae0] die at ffffffff81006593 #4 [ffff88001fc03b10] do_trap at ffffffff81002ef2 #5 [ffff88001fc03b70] do_error_trap at ffffffff8100305d #6 [ffff88001fc03c30] do_invalid_op at ffffffff81003a7b #7 [ffff88001fc03c40] invalid_op at ffffffff8162009e [exception RIP: skb_panic+94] RIP: ffffffff81618ba3 RSP: ffff88001fc03cf8 RFLAGS: 00010296 RAX: 000000000000008b RBX: ffff88001f2bfae0 RCX: 0000000000000092 RDX: 0000000000000056 RSI: 0000000000000246 RDI: 0000000000000246 RBP: ffff88001fc03d18 R8: 0000000000000000 R9: 0000000000000000 R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 R13: ffff88001fc03da0 R14: ffff88001f29b100 R15: ffff880012f5f862 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #8 [ffff88001fc03d20] skb_put at ffffffff81464321 #9 [ffff88001fc03d30] batadv_frag_skb_buffer at ffffffffa00afe52 [batman_adv] #10 [ffff88001fc03d90] batadv_recv_frag_packet at ffffffffa00ba2a3 [batman_adv] #11 [ffff88001fc03dd0] batadv_batman_skb_recv at ffffffffa00b3f35 [batman_adv] #12 [ffff88001fc03e10] __netif_receive_skb_core at ffffffff81474152 #13 [ffff88001fc03e80] __netif_receive_skb at ffffffff81474691 #14 [ffff88001fc03ea0] process_backlog at ffffffff8147477e #15 [ffff88001fc03ef0] net_rx_action at ffffffff81474f31 #16 [ffff88001fc03f50] __do_softirq at ffffffff81052e28 #17 [ffff88001fc03fb0] do_softirq_own_stack at ffffffff8162029c --- <IRQ stack> --- #18 [ffff8800194c7d10] do_softirq_own_stack at ffffffff8162029c [exception RIP: tun_get_user+1043] RIP: ffffffffa009d8f3 RSP: 0000000000000001 RFLAGS: 7fff00000586 RAX: ffffffff814736a4 RBX: ffff8800194c7d58 RCX: ffff880019fec780 RDX: 0000000000000000 RSI: ffff880019fec780 RDI: 0000000000000586 RBP: ffffffff814733d4 R8: ffff8800194c7d88 R9: ffff880019fec780 R10: ffff880019fec780 R11: ffffffff81053065 R12: ffff8800194c7d58 R13: 0000000000000586 R14: ffff88001f29b400 R15: 0000000000000000 ORIG_RAX: ffff8800194c7e38 CS: 7fff052c4f40 SS: 0000 bt: WARNING: possibly bogus exception frame #19 [ffff8800194c7e40] tun_chr_aio_write at ffffffffa009de1b [tun] #20 [ffff8800194c7e70] do_sync_write at ffffffff811611a5 #21 [ffff8800194c7f00] vfs_write at ffffffff81161eca #22 [ffff8800194c7f40] sys_write at ffffffff811623da #23 [ffff8800194c7f80] system_call_fastpath at ffffffff8161e769 RIP: 00007f477624537d RSP: 00007fff052c51c8 RFLAGS: 00010202 RAX: 0000000000000001 RBX: ffffffff8161e769 RCX: 0000000000000084 RDX: 0000000000000586 RSI: 00000000006ddbe0 RDI: 0000000000000009 RBP: 0000000000000586 R8: 00007f477622e400 R9: 00007fff052c4688 R10: 00007fff052c4dcf R11: 0000000000000293 R12: 00000000006e8df8 R13: 0000000000000001 R14: 00000000006ddbd0 R15: 00000000006cc990 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b crash> log [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.17.4-gentoo (root@wolke) (gcc version 4.7.3 (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) ) #1 SMP Tue Nov 25 12:37:10 CET 2014 [ 0.000000] Command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009dbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009dc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000001fffdfff] usable [ 0.000000] BIOS-e820: [mem 0x000000001fffe000-0x000000001fffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] DMI: Bochs Bochs, BIOS Bochs 01/01/2007 [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.000000] e820: last_pfn = 0x1fffe max_arch_pfn = 0x400000000 [ 0.000000] MTRR default type: write-back [ 0.000000] MTRR fixed ranges enabled: [ 0.000000] 00000-9FFFF write-back [ 0.000000] A0000-BFFFF uncachable [ 0.000000] C0000-FFFFF write-protect [ 0.000000] MTRR variable ranges enabled: [ 0.000000] 0 base 00E0000000 mask FFE0000000 uncachable [ 0.000000] 1 disabled [ 0.000000] 2 disabled [ 0.000000] 3 disabled [ 0.000000] 4 disabled [ 0.000000] 5 disabled [ 0.000000] 6 disabled [ 0.000000] 7 disabled [ 0.000000] x86 PAT enabled: cpu 0, old 0x70406, new 0x7010600070106 [ 0.000000] found SMP MP-table at [mem 0x000fdaf0-0x000fdaff] mapped at [ffff8800000fdaf0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576 [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] [mem 0x00000000-0x000fffff] page 4k [ 0.000000] BRK [0x01cae000, 0x01caefff] PGTABLE [ 0.000000] BRK [0x01caf000, 0x01caffff] PGTABLE [ 0.000000] BRK [0x01cb0000, 0x01cb0fff] PGTABLE [ 0.000000] init_memory_mapping: [mem 0x1fc00000-0x1fdfffff] [ 0.000000] [mem 0x1fc00000-0x1fdfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1c000000-0x1fbfffff] [ 0.000000] [mem 0x1c000000-0x1fbfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x00100000-0x1bffffff] [ 0.000000] [mem 0x00100000-0x001fffff] page 4k [ 0.000000] [mem 0x00200000-0x1bffffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1fe00000-0x1fffdfff] [ 0.000000] [mem 0x1fe00000-0x1fffdfff] page 4k [ 0.000000] BRK [0x01cb1000, 0x01cb1fff] PGTABLE [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000FD990 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x000000001FFFE5B0 000038 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x000000001FFFFF80 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x000000001FFFE5F0 001121 (v01 BXPC BXDSDT 00000001 INTL 20100528) [ 0.000000] ACPI: FACS 0x000000001FFFFF40 000040 [ 0.000000] ACPI: SSDT 0x000000001FFFFEA0 00009E (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x000000001FFFFDB0 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] ACPI: HPET 0x000000001FFFFD70 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.000000] ACPI: SSDT 0x000000001FFFF720 000644 (v01 BXPC BXSSDTPC 00000001 INTL 20100528) [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000001fffdfff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x1fffdfff] [ 0.000000] NODE_DATA [mem 0x1fffa000-0x1fffdfff] [ 0.000000] Reserving 64MB of memory at 432MB for crashkernel (System RAM: 511MB) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 0:1fff9001, primary cpu clock [ 0.000000] [ffffea0000000000-ffffea00007fffff] PMD -> [ffff88001a800000-ffff88001affffff] on node 0 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009cfff] [ 0.000000] node 0: [mem 0x00100000-0x1fffdfff] [ 0.000000] On node 0 totalpages: 130970 [ 0.000000] DMA zone: 64 pages used for memmap [ 0.000000] DMA zone: 21 pages reserved [ 0.000000] DMA zone: 3996 pages, LIFO batch:0 [ 0.000000] DMA32 zone: 1984 pages used for memmap [ 0.000000] DMA32 zone: 126974 pages, LIFO batch:31 [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0]) [ 0.000000] IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] ACPI: IRQ0 used by override. [ 0.000000] ACPI: IRQ5 used by override. [ 0.000000] ACPI: IRQ9 used by override. [ 0.000000] ACPI: IRQ10 used by override. [ 0.000000] ACPI: IRQ11 used by override. [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] e820: [mem 0x20000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:1 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 27 pages/cpu @ffff88001fc00000 s79744 r8192 d22656 u2097152 [ 0.000000] pcpu-alloc: s79744 r8192 d22656 u2097152 alloc=1*2097152 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1fc0cf80 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 128901 [ 0.000000] Policy zone: DMA32 [ 0.000000] Kernel command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing! [ 0.000000] Memory: 436880K/523880K available (6283K kernel code, 773K rwdata, 1992K rodata, 1060K init, 872K bss, 87000K reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=1. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS:4352 nr_irqs:256 0 [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] hpet clockevent registered [ 0.000000] tsc: Detected 2593.748 MHz processor [ 0.002000] Calibrating delay loop (skipped) preset value.. 5187.49 BogoMIPS (lpj=2593748) [ 0.002005] pid_max: default: 32768 minimum: 301 [ 0.002385] ACPI: Core revision 20140724 [ 0.003658] ACPI: All ACPI Tables successfully acquired [ 0.004041] Security Framework initialized [ 0.004406] SELinux: Initializing. [ 0.004762] SELinux: Starting in permissive mode [ 0.004794] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.005279] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.006137] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.006557] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.007250] Initializing cgroup subsys freezer [ 0.007698] mce: CPU supports 10 MCE banks [ 0.008047] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.023008] Freeing SMP alternatives memory: 24K (ffffffff81bcc000 - ffffffff81bd2000) [ 0.027000] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.027003] smpboot: CPU0: Intel Westmere E56xx/L56xx/X56xx (Nehalem-C) (fam: 06, model: 2c, stepping: 01) [ 0.029000] Performance Events: unsupported p6 CPU model 44 no PMU driver, software events only. [ 0.029303] x86: Booted up 1 node, 1 CPUs [ 0.029620] smpboot: Total of 1 processors activated (5187.49 BogoMIPS) [ 0.030387] devtmpfs: initialized [ 0.031148] RTC time: 9:47:32, date: 11/30/14 [ 0.031623] NET: Registered protocol family 16 [ 0.032122] cpuidle: using governor ladder [ 0.032443] cpuidle: using governor menu [ 0.032796] ACPI: bus type PCI registered [ 0.033102] PCI: Using configuration type 1 for base access [ 0.035502] kworker/u2:0 (14) used greatest stack depth: 14664 bytes left [ 0.036118] ACPI: Added _OSI(Module Device) [ 0.036436] ACPI: Added _OSI(Processor Device) [ 0.036749] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.037004] ACPI: Added _OSI(Processor Aggregator Device) [ 0.038805] ACPI: Interpreter enabled [ 0.039007] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S1_] (20140724/hwxface-580) [ 0.039760] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S2_] (20140724/hwxface-580) [ 0.040597] ACPI: (supports S0 S3 S4 S5) [ 0.040905] ACPI: Using IOAPIC for interrupt routing [ 0.041060] kworker/u2:0 (21) used greatest stack depth: 13912 bytes left [ 0.041540] PCI: Ignoring host bridge windows from ACPI; if necessary, use "pci=use_crs" and report a bug [ 0.044640] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.045007] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.045381] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.045754] acpi PNP0A03:00: host bridge window [io 0x0000-0x0cf7] (ignored) [ 0.045756] acpi PNP0A03:00: host bridge window [io 0x0d00-0xffff] (ignored) [ 0.045757] acpi PNP0A03:00: host bridge window [mem 0x000a0000-0x000bffff] (ignored) [ 0.045759] acpi PNP0A03:00: host bridge window [mem 0xe0000000-0xfebfffff] (ignored) [ 0.045760] PCI: root bus 00: using default resources [ 0.045762] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.046068] PCI host bridge to bus 0000:00 [ 0.046385] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.047044] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.047401] pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffffff] [ 0.047806] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 0.048296] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 0.048731] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 0.050357] pci 0000:00:01.1: reg 0x20: [io 0xc0a0-0xc0af] [ 0.051025] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.051445] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.051803] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.052003] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.052531] pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 [ 0.054305] pci 0000:00:01.2: reg 0x20: [io 0xc040-0xc05f] [ 0.055127] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 0.055443] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 0.055996] pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB [ 0.056584] pci 0000:00:02.0: [1013:00b8] type 00 class 0x030000 [ 0.060100] pci 0000:00:02.0: reg 0x10: [mem 0xfc000000-0xfdffffff pref] [ 0.063075] pci 0000:00:02.0: reg 0x14: [mem 0xfebf0000-0xfebf0fff] [ 0.077042] pci 0000:00:02.0: reg 0x30: [mem 0xfebd0000-0xfebdffff pref] [ 0.078282] pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 [ 0.078904] pci 0000:00:03.0: reg 0x10: [io 0xc060-0xc07f] [ 0.079291] pci 0000:00:03.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff] [ 0.082289] pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] [ 0.082745] pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 [ 0.085009] pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc03f] [ 0.087009] pci 0000:00:04.0: reg 0x14: [mem 0xfebf2000-0xfebf2fff] [ 0.092431] pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 [ 0.092768] pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] [ 0.095400] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.096089] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.096825] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.097618] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.098460] ACPI: PCI Interrupt Link [LNKS] (IRQs 9) *0, disabled. [ 0.099356] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.100242] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.100585] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.101006] vgaarb: loaded [ 0.101314] vgaarb: bridge control possible 0000:00:02.0 [ 0.102030] SCSI subsystem initialized [ 0.102446] libata version 3.00 loaded. [ 0.102478] ACPI: bus type USB registered [ 0.102847] usbcore: registered new interface driver usbfs [ 0.103025] usbcore: registered new interface driver hub [ 0.103424] usbcore: registered new device driver usb [ 0.104014] pps_core: LinuxPPS API ver. 1 registered [ 0.104343] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it [ 0.104929] PTP clock support registered [ 0.105120] PCI: Using ACPI for IRQ routing [ 0.105440] PCI: pci_cache_line_size set to 64 bytes [ 0.105570] e820: reserve RAM buffer [mem 0x0009dc00-0x0009ffff] [ 0.105574] e820: reserve RAM buffer [mem 0x1fffe000-0x1fffffff] [ 0.106185] NetLabel: Initializing [ 0.106489] NetLabel: domain hash size = 128 [ 0.106800] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.107033] NetLabel: unlabeled traffic allowed by default [ 0.107510] HPET: 3 timers in total, 0 timers will be used for per-cpu timer [ 0.108023] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 0.108577] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 0.115025] cfg80211: Calling CRDA to update world regulatory domain [ 0.115490] Switched to clocksource kvm-clock [ 0.123112] pnp: PnP ACPI init [ 0.123547] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) [ 0.123612] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active) [ 0.123655] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active) [ 0.123686] pnp 00:03: [dma 2] [ 0.123720] pnp 00:03: Plug and Play ACPI device, IDs PNP0700 (active) [ 0.123822] pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) [ 0.124050] pnp: PnP ACPI: found 5 devices [ 0.129076] pci_bus 0000:00: resource 4 [io 0x0000-0xffff] [ 0.129079] pci_bus 0000:00: resource 5 [mem 0x00000000-0xffffffffff] [ 0.129125] NET: Registered protocol family 2 [ 0.129716] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.130158] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.130540] TCP: Hash tables configured (established 4096 bind 4096) [ 0.130980] TCP: reno registered [ 0.131294] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.131646] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.132158] NET: Registered protocol family 1 [ 0.132503] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.132859] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.133236] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.133841] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.134427] pci 0000:00:02.0: Video device with shadowed ROM [ 0.134458] PCI: CLS 0 bytes, default 64 [ 0.134734] microcode: CPU0 sig=0x206c1, pf=0x1, revision=0x1 [ 0.135150] microcode: Microcode Update Driver: v2.00 tigran@aivazian.fsnet.co.uk, Peter Oruba [ 0.135839] Scanning for low memory corruption every 60 seconds [ 0.136498] futex hash table entries: 256 (order: 2, 16384 bytes) [ 0.136876] Initialise system trusted keyring [ 0.137226] audit: initializing netlink subsys (disabled) [ 0.137585] audit: type=2000 audit(1417340856.464:1): initialized [ 0.138319] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.140523] VFS: Disk quotas dquot_6.5.2 [ 0.140880] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.141526] msgmni has been set to 853 [ 0.141928] SELinux: Registering netfilter hooks [ 0.142670] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.143248] io scheduler noop registered [ 0.143556] io scheduler deadline registered [ 0.143922] io scheduler cfq registered (default) [ 0.144344] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.144737] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.166631] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 0.167640] kworker/u2:0 (102) used greatest stack depth: 13824 bytes left [ 0.168600] Non-volatile memory driver v1.3 [ 0.169046] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 0.169603] ACPI: Power Button [PWRF] [ 0.170536] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 10 [ 0.172877] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 0.173922] loop: module loaded [ 0.174393] virtio-pci 0000:00:04.0: irq 24 for MSI/MSI-X [ 0.174410] virtio-pci 0000:00:04.0: irq 25 for MSI/MSI-X [ 0.269707] vda: vda1 vda2 [ 0.273105] ata_piix 0000:00:01.1: version 2.13 [ 0.273796] scsi host0: ata_piix [ 0.274658] scsi host1: ata_piix [ 0.275272] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0a0 irq 14 [ 0.275926] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0a8 irq 15 [ 0.277315] virtio-pci 0000:00:03.0: irq 26 for MSI/MSI-X [ 0.277341] virtio-pci 0000:00:03.0: irq 27 for MSI/MSI-X [ 0.277365] virtio-pci 0000:00:03.0: irq 28 for MSI/MSI-X [ 0.391545] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.391943] ehci-pci: EHCI PCI platform driver [ 0.392349] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.392726] ohci-pci: OHCI PCI platform driver [ 0.393081] uhci_hcd: USB Universal Host Controller Interface driver [ 0.393662] uhci_hcd 0000:00:01.2: UHCI Host Controller [ 0.394114] uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 [ 0.394813] uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c040 [ 0.395294] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001 [ 0.395805] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 0.396395] usb usb1: Product: UHCI Host Controller [ 0.396757] usb usb1: Manufacturer: Linux 3.17.4-gentoo uhci_hcd [ 0.397119] usb usb1: SerialNumber: 0000:00:01.2 [ 0.397574] hub 1-0:1.0: USB hub found [ 0.397934] hub 1-0:1.0: 2 ports detected [ 0.398432] usbcore: registered new interface driver usblp [ 0.398829] usbcore: registered new interface driver usb-storage [ 0.399263] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 0.400514] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 0.400888] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 0.401593] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 0.402438] rtc_cmos 00:00: RTC can wake from S4 [ 0.403075] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 0.403543] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs [ 0.404120] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-devel@redhat.com [ 0.404757] hidraw: raw HID events driver (C) Jiri Kosina [ 0.405355] usbcore: registered new interface driver usbhid [ 0.405711] usbhid: USB HID core driver [ 0.406083] Netfilter messages via NETLINK v0.30. [ 0.406460] nf_conntrack version 0.5.0 (3413 buckets, 13652 max) [ 0.406970] ctnetlink v0.93: registering with nfnetlink. [ 0.407466] ip_tables: (C) 2000-2006 Netfilter Core Team [ 0.407879] TCP: cubic registered [ 0.408205] Initializing XFRM netlink socket [ 0.408683] NET: Registered protocol family 10 [ 0.409344] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 0.409754] sit: IPv6 over IPv4 tunneling driver [ 0.410210] NET: Registered protocol family 17 [ 0.410586] 9pnet: Installing 9P2000 support [ 0.410975] Key type dns_resolver registered [ 0.411513] Loading compiled-in X.509 certificates [ 0.411878] registered taskstats version 1 [ 0.412555] Magic number: 6:475:779 [ 0.412949] console [netcon0] enabled [ 0.413304] netconsole: network logging started [ 0.413712] PM: Hibernation image not present or could not be loaded. [ 0.466409] ata2.01: NODEV after polling detection [ 0.466688] ata2.00: ATAPI: QEMU DVD-ROM, 1.1.2, max UDMA/100 [ 0.467499] ata2.00: configured for MWDMA2 [ 0.468414] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.1. PQ: 0 ANSI: 5 [ 0.479496] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 0.479869] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 0.480338] sr 1:0:0:0: Attached scsi CD-ROM sr0 [ 0.480504] sr 1:0:0:0: Attached scsi generic sg0 type 5 [ 0.480915] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 0.483102] kjournald starting. Commit interval 5 seconds [ 0.483476] EXT3-fs (vda1): mounted filesystem with ordered data mode [ 0.484218] VFS: Mounted root (ext3 filesystem) readonly on device 253:1. [ 0.498907] devtmpfs: mounted [ 0.500261] Freeing unused kernel memory: 1060K (ffffffff81ac3000 - ffffffff81bcc000) [ 0.501218] Write protecting the kernel read-only data: 10240k [ 0.506982] Freeing unused kernel memory: 1896K (ffff880001626000 - ffff880001800000) [ 0.507745] Freeing unused kernel memory: 56K (ffff8800019f2000 - ffff880001a00000) [ 0.700126] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 1.009299] usb 1-1: New USB device found, idVendor=0627, idProduct=0001 [ 1.009676] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=5 [ 1.010063] usb 1-1: Product: QEMU USB Tablet [ 1.010438] usb 1-1: Manufacturer: QEMU 1.1.2 [ 1.010752] usb 1-1: SerialNumber: 42 [ 1.027358] input: QEMU 1.1.2 QEMU USB Tablet as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input3 [ 1.028412] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Pointer [QEMU 1.1.2 QEMU USB Tablet] on usb-0000:00:01.2-1/input0 [ 1.136088] tsc: Refined TSC clocksource calibration: 2593.620 MHz [ 2.657635] init-early.sh (724) used greatest stack depth: 11992 bytes left [ 7.361256] systemd-udevd[898]: starting version 216 [ 7.590448] random: systemd-udevd urandom read with 12 bits of entropy available [ 8.209705] mousedev: PS/2 mouse device common for all mice [ 8.371037] Linux agpgart interface v0.103 [ 8.603751] SSE version of gcm_enc/dec engaged. [ 8.790935] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 [ 9.371368] EXT3-fs (vda1): using internal journal [ 9.472116] Adding 1571836k swap on /dev/vda2. Priority:-1 extents:1 across:1571836k [ 17.458329] device eth0 entered promiscuous mode [ 88.105788] random: nonblocking pool is initialized [ 121.182185] tun: Universal TUN/TAP device driver, 1.6 [ 121.182189] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 121.690950] batman_adv: B.A.T.M.A.N. advanced 2014.4.0 (compatibility version 15) loaded [ 121.692541] batman_adv: bat0: Adding interface: fastd0 [ 121.692544] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.692551] batman_adv: bat0: Interface activated: fastd0 [ 121.693433] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 121.694870] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 121.695618] batman_adv: bat0: Changing gw mode from: off to: client [ 150.885842] ipip: IPv4 over IPv4 tunneling driver [ 1364.020197] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 3042.769095] batman_adv: bat0: Changing gw mode from: client to: server [ 3042.769127] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 3759.633307] skbuff: skb_over_panic: text:ffffffffa00afe52 len:1464 put:1380 head:ffff880019ec8800 data:ffff880019ec8862 tail:0x61a end:0x2c0 dev:fastd0 [ 3759.633663] ------------[ cut here ]------------ [ 3759.633767] kernel BUG at net/core/skbuff.c:100! [ 3759.633881] invalid opcode: 0000 [#1] SMP [ 3759.633983] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt ablk_helper agpgart cryptd mousedev psmouse evdev [ 3759.634203] CPU: 0 PID: 1844 Comm: fastd Not tainted 3.17.4-gentoo #1 [ 3759.634203] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3759.634203] task: ffff88001a2eb4e0 ti: ffff8800194c4000 task.ti: ffff8800194c4000 [ 3759.634203] RIP: 0010:[<ffffffff81618ba3>] [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [ 3759.634203] RSP: 0018:ffff88001fc03cf8 EFLAGS: 00010296 [ 3759.634203] RAX: 000000000000008b RBX: ffff88001f2bfae0 RCX: 0000000000000092 [ 3759.634203] RDX: 0000000000000056 RSI: 0000000000000246 RDI: 0000000000000246 [ 3759.634203] RBP: ffff88001fc03d18 R08: 0000000000000000 R09: 0000000000000000 [ 3759.634203] R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 [ 3759.634203] R13: ffff88001fc03da0 R14: ffff88001f29b100 R15: ffff880012f5f862 [ 3759.634203] FS: 00007f4776ef0700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3759.634203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3759.634203] CR2: 00007f686a3675c2 CR3: 0000000000046000 CR4: 00000000000006f0 [ 3759.634203] Stack: [ 3759.634203] ffff880019ec8862 000000000000061a 00000000000002c0 ffff880019fec000 [ 3759.634203] ffff88001fc03d28 ffffffff81464321 ffff88001fc03d88 ffffffffa00afe52 [ 3759.634203] ffff880012f5f84e de1a88001f29bf00 000077ff80000000 ffff88001f2bfae0 [ 3759.634203] Call Trace: [ 3759.634203] <IRQ> [ 3759.634203] [ 3759.634203] [<ffffffff81464321>] skb_put+0x41/0x50 [ 3759.634203] [<ffffffffa00afe52>] batadv_frag_skb_buffer+0x292/0x490 [batman_adv] [ 3759.634203] [<ffffffffa00ba2a3>] batadv_recv_frag_packet+0x183/0x200 [batman_adv] [ 3759.634203] [<ffffffffa00b3f35>] batadv_batman_skb_recv+0xd5/0x110 [batman_adv] [ 3759.634203] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [ 3759.634203] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [ 3759.634203] [<ffffffff8147477e>] process_backlog+0x9e/0x170 [ 3759.634203] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [ 3759.634203] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 3759.634203] [<ffffffff8162029c>] do_softirq_own_stack+0x1c/0x30 [ 3759.634203] <EOI> [ 3759.634203] [ 3759.634203] [<ffffffff81053065>] do_softirq+0x55/0x60 [ 3759.634203] [<ffffffff814736a4>] netif_rx_ni+0x34/0x70 [ 3759.634203] [<ffffffffa009d8f3>] tun_get_user+0x413/0x840 [tun] [ 3759.634203] [<ffffffffa009de1b>] tun_chr_aio_write+0x7b/0xa0 [tun] [ 3759.634203] [<ffffffff811611a5>] do_sync_write+0x55/0x90 [ 3759.634203] [<ffffffff81161eca>] vfs_write+0xba/0x1f0 [ 3759.634203] [<ffffffff811623da>] SyS_write+0x4a/0xa0 [ 3759.634203] [<ffffffff8161e769>] system_call_fastpath+0x16/0x1b [ 3759.634203] Code: 00 00 48 89 44 24 10 8b 87 c0 00 00 00 48 89 44 24 08 48 8b 87 d0 00 00 00 48 c7 c7 40 e8 99 81 48 89 04 24 31 c0 e8 5f b3 ff ff <0f> 0b 55 48 89 f8 48 8b 57 30 48 89 e5 48 8b 0f 5d 80 e5 80 48 [ 3759.634203] RIP [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [ 3759.634203] RSP <ffff88001fc03cf8>

Martin Hundebøll

12:26 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Philipp,

Here's a debug patch that should catch also your recent bug. Please apply it on a clean master from git.open-mesh.org/batman-adv.git

It's compile tested only, so it might ruin the galaxy ;) Again, it only prints some various numbers to the kernel messages, and should avoid crashing the kernel totally.

Thanks, Martin

On 2014-11-30 12:20, Philipp Psurek wrote:

...

Hi Sven, hi Martin, hi all

it’s me again. After 11 minutes in gw mode the VM crashes again. The “attacker” is back. Its your chance for new patches ;-) I disable fragmentation, lets see if it helps.

I think I might did a mistake. The kernel is compiled with gcc 4.7.3, the patched module with 4.8.3. On the next crash I recompile the module.

Best regards

Philipp

Freifunk Rheinland e. V. – Funkzelle Wuppertal –

SYSTEM MAP: /boot/System.map DEBUG KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux (3.17.4-gentoo) DUMPFILE: vmcore_20141130115537 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 01:02:39 LOAD AVERAGE: 0.30, 0.22, 0.19 TASKS: 134 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "kernel BUG at net/core/skbuff.c:100!" PID: 1844 COMMAND: "fastd" TASK: ffff88001a2eb4e0 [THREAD_INFO: ffff8800194c4000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 1844 TASK: ffff88001a2eb4e0 CPU: 0 COMMAND: "fastd" #0 [ffff88001fc03980] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc039e0] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03ab0] oops_end at ffffffff810060f8 #3 [ffff88001fc03ae0] die at ffffffff81006593 #4 [ffff88001fc03b10] do_trap at ffffffff81002ef2 #5 [ffff88001fc03b70] do_error_trap at ffffffff8100305d #6 [ffff88001fc03c30] do_invalid_op at ffffffff81003a7b #7 [ffff88001fc03c40] invalid_op at ffffffff8162009e [exception RIP: skb_panic+94] RIP: ffffffff81618ba3 RSP: ffff88001fc03cf8 RFLAGS: 00010296 RAX: 000000000000008b RBX: ffff88001f2bfae0 RCX: 0000000000000092 RDX: 0000000000000056 RSI: 0000000000000246 RDI: 0000000000000246 RBP: ffff88001fc03d18 R8: 0000000000000000 R9: 0000000000000000 R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 R13: ffff88001fc03da0 R14: ffff88001f29b100 R15: ffff880012f5f862 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #8 [ffff88001fc03d20] skb_put at ffffffff81464321 #9 [ffff88001fc03d30] batadv_frag_skb_buffer at ffffffffa00afe52 [batman_adv] #10 [ffff88001fc03d90] batadv_recv_frag_packet at ffffffffa00ba2a3 [batman_adv] #11 [ffff88001fc03dd0] batadv_batman_skb_recv at ffffffffa00b3f35 [batman_adv] #12 [ffff88001fc03e10] __netif_receive_skb_core at ffffffff81474152 #13 [ffff88001fc03e80] __netif_receive_skb at ffffffff81474691 #14 [ffff88001fc03ea0] process_backlog at ffffffff8147477e #15 [ffff88001fc03ef0] net_rx_action at ffffffff81474f31 #16 [ffff88001fc03f50] __do_softirq at ffffffff81052e28 #17 [ffff88001fc03fb0] do_softirq_own_stack at ffffffff8162029c --- <IRQ stack> --- #18 [ffff8800194c7d10] do_softirq_own_stack at ffffffff8162029c [exception RIP: tun_get_user+1043] RIP: ffffffffa009d8f3 RSP: 0000000000000001 RFLAGS: 7fff00000586 RAX: ffffffff814736a4 RBX: ffff8800194c7d58 RCX: ffff880019fec780 RDX: 0000000000000000 RSI: ffff880019fec780 RDI: 0000000000000586 RBP: ffffffff814733d4 R8: ffff8800194c7d88 R9: ffff880019fec780 R10: ffff880019fec780 R11: ffffffff81053065 R12: ffff8800194c7d58 R13: 0000000000000586 R14: ffff88001f29b400 R15: 0000000000000000 ORIG_RAX: ffff8800194c7e38 CS: 7fff052c4f40 SS: 0000 bt: WARNING: possibly bogus exception frame #19 [ffff8800194c7e40] tun_chr_aio_write at ffffffffa009de1b [tun] #20 [ffff8800194c7e70] do_sync_write at ffffffff811611a5 #21 [ffff8800194c7f00] vfs_write at ffffffff81161eca #22 [ffff8800194c7f40] sys_write at ffffffff811623da #23 [ffff8800194c7f80] system_call_fastpath at ffffffff8161e769 RIP: 00007f477624537d RSP: 00007fff052c51c8 RFLAGS: 00010202 RAX: 0000000000000001 RBX: ffffffff8161e769 RCX: 0000000000000084 RDX: 0000000000000586 RSI: 00000000006ddbe0 RDI: 0000000000000009 RBP: 0000000000000586 R8: 00007f477622e400 R9: 00007fff052c4688 R10: 00007fff052c4dcf R11: 0000000000000293 R12: 00000000006e8df8 R13: 0000000000000001 R14: 00000000006ddbd0 R15: 00000000006cc990 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b crash> log [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.17.4-gentoo (root@wolke) (gcc version 4.7.3 (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) ) #1 SMP Tue Nov 25 12:37:10 CET 2014 [ 0.000000] Command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009dbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009dc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000001fffdfff] usable [ 0.000000] BIOS-e820: [mem 0x000000001fffe000-0x000000001fffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] DMI: Bochs Bochs, BIOS Bochs 01/01/2007 [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.000000] e820: last_pfn = 0x1fffe max_arch_pfn = 0x400000000 [ 0.000000] MTRR default type: write-back [ 0.000000] MTRR fixed ranges enabled: [ 0.000000] 00000-9FFFF write-back [ 0.000000] A0000-BFFFF uncachable [ 0.000000] C0000-FFFFF write-protect [ 0.000000] MTRR variable ranges enabled: [ 0.000000] 0 base 00E0000000 mask FFE0000000 uncachable [ 0.000000] 1 disabled [ 0.000000] 2 disabled [ 0.000000] 3 disabled [ 0.000000] 4 disabled [ 0.000000] 5 disabled [ 0.000000] 6 disabled [ 0.000000] 7 disabled [ 0.000000] x86 PAT enabled: cpu 0, old 0x70406, new 0x7010600070106 [ 0.000000] found SMP MP-table at [mem 0x000fdaf0-0x000fdaff] mapped at [ffff8800000fdaf0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576 [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] [mem 0x00000000-0x000fffff] page 4k [ 0.000000] BRK [0x01cae000, 0x01caefff] PGTABLE [ 0.000000] BRK [0x01caf000, 0x01caffff] PGTABLE [ 0.000000] BRK [0x01cb0000, 0x01cb0fff] PGTABLE [ 0.000000] init_memory_mapping: [mem 0x1fc00000-0x1fdfffff] [ 0.000000] [mem 0x1fc00000-0x1fdfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1c000000-0x1fbfffff] [ 0.000000] [mem 0x1c000000-0x1fbfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x00100000-0x1bffffff] [ 0.000000] [mem 0x00100000-0x001fffff] page 4k [ 0.000000] [mem 0x00200000-0x1bffffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1fe00000-0x1fffdfff] [ 0.000000] [mem 0x1fe00000-0x1fffdfff] page 4k [ 0.000000] BRK [0x01cb1000, 0x01cb1fff] PGTABLE [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000FD990 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x000000001FFFE5B0 000038 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x000000001FFFFF80 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x000000001FFFE5F0 001121 (v01 BXPC BXDSDT 00000001 INTL 20100528) [ 0.000000] ACPI: FACS 0x000000001FFFFF40 000040 [ 0.000000] ACPI: SSDT 0x000000001FFFFEA0 00009E (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x000000001FFFFDB0 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] ACPI: HPET 0x000000001FFFFD70 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.000000] ACPI: SSDT 0x000000001FFFF720 000644 (v01 BXPC BXSSDTPC 00000001 INTL 20100528) [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000001fffdfff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x1fffdfff] [ 0.000000] NODE_DATA [mem 0x1fffa000-0x1fffdfff] [ 0.000000] Reserving 64MB of memory at 432MB for crashkernel (System RAM: 511MB) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 0:1fff9001, primary cpu clock [ 0.000000] [ffffea0000000000-ffffea00007fffff] PMD -> [ffff88001a800000-ffff88001affffff] on node 0 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009cfff] [ 0.000000] node 0: [mem 0x00100000-0x1fffdfff] [ 0.000000] On node 0 totalpages: 130970 [ 0.000000] DMA zone: 64 pages used for memmap [ 0.000000] DMA zone: 21 pages reserved [ 0.000000] DMA zone: 3996 pages, LIFO batch:0 [ 0.000000] DMA32 zone: 1984 pages used for memmap [ 0.000000] DMA32 zone: 126974 pages, LIFO batch:31 [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0]) [ 0.000000] IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] ACPI: IRQ0 used by override. [ 0.000000] ACPI: IRQ5 used by override. [ 0.000000] ACPI: IRQ9 used by override. [ 0.000000] ACPI: IRQ10 used by override. [ 0.000000] ACPI: IRQ11 used by override. [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] e820: [mem 0x20000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:1 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 27 pages/cpu @ffff88001fc00000 s79744 r8192 d22656 u2097152 [ 0.000000] pcpu-alloc: s79744 r8192 d22656 u2097152 alloc=1*2097152 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1fc0cf80 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 128901 [ 0.000000] Policy zone: DMA32 [ 0.000000] Kernel command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing! [ 0.000000] Memory: 436880K/523880K available (6283K kernel code, 773K rwdata, 1992K rodata, 1060K init, 872K bss, 87000K reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=1. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS:4352 nr_irqs:256 0 [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] hpet clockevent registered [ 0.000000] tsc: Detected 2593.748 MHz processor [ 0.002000] Calibrating delay loop (skipped) preset value.. 5187.49 BogoMIPS (lpj=2593748) [ 0.002005] pid_max: default: 32768 minimum: 301 [ 0.002385] ACPI: Core revision 20140724 [ 0.003658] ACPI: All ACPI Tables successfully acquired [ 0.004041] Security Framework initialized [ 0.004406] SELinux: Initializing. [ 0.004762] SELinux: Starting in permissive mode [ 0.004794] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.005279] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.006137] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.006557] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.007250] Initializing cgroup subsys freezer [ 0.007698] mce: CPU supports 10 MCE banks [ 0.008047] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.023008] Freeing SMP alternatives memory: 24K (ffffffff81bcc000 - ffffffff81bd2000) [ 0.027000] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.027003] smpboot: CPU0: Intel Westmere E56xx/L56xx/X56xx (Nehalem-C) (fam: 06, model: 2c, stepping: 01) [ 0.029000] Performance Events: unsupported p6 CPU model 44 no PMU driver, software events only. [ 0.029303] x86: Booted up 1 node, 1 CPUs [ 0.029620] smpboot: Total of 1 processors activated (5187.49 BogoMIPS) [ 0.030387] devtmpfs: initialized [ 0.031148] RTC time: 9:47:32, date: 11/30/14 [ 0.031623] NET: Registered protocol family 16 [ 0.032122] cpuidle: using governor ladder [ 0.032443] cpuidle: using governor menu [ 0.032796] ACPI: bus type PCI registered [ 0.033102] PCI: Using configuration type 1 for base access [ 0.035502] kworker/u2:0 (14) used greatest stack depth: 14664 bytes left [ 0.036118] ACPI: Added _OSI(Module Device) [ 0.036436] ACPI: Added _OSI(Processor Device) [ 0.036749] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.037004] ACPI: Added _OSI(Processor Aggregator Device) [ 0.038805] ACPI: Interpreter enabled [ 0.039007] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S1_] (20140724/hwxface-580) [ 0.039760] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S2_] (20140724/hwxface-580) [ 0.040597] ACPI: (supports S0 S3 S4 S5) [ 0.040905] ACPI: Using IOAPIC for interrupt routing [ 0.041060] kworker/u2:0 (21) used greatest stack depth: 13912 bytes left [ 0.041540] PCI: Ignoring host bridge windows from ACPI; if necessary, use "pci=use_crs" and report a bug [ 0.044640] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.045007] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.045381] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.045754] acpi PNP0A03:00: host bridge window [io 0x0000-0x0cf7] (ignored) [ 0.045756] acpi PNP0A03:00: host bridge window [io 0x0d00-0xffff] (ignored) [ 0.045757] acpi PNP0A03:00: host bridge window [mem 0x000a0000-0x000bffff] (ignored) [ 0.045759] acpi PNP0A03:00: host bridge window [mem 0xe0000000-0xfebfffff] (ignored) [ 0.045760] PCI: root bus 00: using default resources [ 0.045762] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.046068] PCI host bridge to bus 0000:00 [ 0.046385] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.047044] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.047401] pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffffff] [ 0.047806] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 0.048296] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 0.048731] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 0.050357] pci 0000:00:01.1: reg 0x20: [io 0xc0a0-0xc0af] [ 0.051025] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.051445] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.051803] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.052003] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.052531] pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 [ 0.054305] pci 0000:00:01.2: reg 0x20: [io 0xc040-0xc05f] [ 0.055127] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 0.055443] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 0.055996] pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB [ 0.056584] pci 0000:00:02.0: [1013:00b8] type 00 class 0x030000 [ 0.060100] pci 0000:00:02.0: reg 0x10: [mem 0xfc000000-0xfdffffff pref] [ 0.063075] pci 0000:00:02.0: reg 0x14: [mem 0xfebf0000-0xfebf0fff] [ 0.077042] pci 0000:00:02.0: reg 0x30: [mem 0xfebd0000-0xfebdffff pref] [ 0.078282] pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 [ 0.078904] pci 0000:00:03.0: reg 0x10: [io 0xc060-0xc07f] [ 0.079291] pci 0000:00:03.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff] [ 0.082289] pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] [ 0.082745] pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 [ 0.085009] pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc03f] [ 0.087009] pci 0000:00:04.0: reg 0x14: [mem 0xfebf2000-0xfebf2fff] [ 0.092431] pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 [ 0.092768] pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] [ 0.095400] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.096089] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.096825] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.097618] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.098460] ACPI: PCI Interrupt Link [LNKS] (IRQs 9) *0, disabled. [ 0.099356] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.100242] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.100585] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.101006] vgaarb: loaded [ 0.101314] vgaarb: bridge control possible 0000:00:02.0 [ 0.102030] SCSI subsystem initialized [ 0.102446] libata version 3.00 loaded. [ 0.102478] ACPI: bus type USB registered [ 0.102847] usbcore: registered new interface driver usbfs [ 0.103025] usbcore: registered new interface driver hub [ 0.103424] usbcore: registered new device driver usb [ 0.104014] pps_core: LinuxPPS API ver. 1 registered [ 0.104343] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it [ 0.104929] PTP clock support registered [ 0.105120] PCI: Using ACPI for IRQ routing [ 0.105440] PCI: pci_cache_line_size set to 64 bytes [ 0.105570] e820: reserve RAM buffer [mem 0x0009dc00-0x0009ffff] [ 0.105574] e820: reserve RAM buffer [mem 0x1fffe000-0x1fffffff] [ 0.106185] NetLabel: Initializing [ 0.106489] NetLabel: domain hash size = 128 [ 0.106800] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.107033] NetLabel: unlabeled traffic allowed by default [ 0.107510] HPET: 3 timers in total, 0 timers will be used for per-cpu timer [ 0.108023] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 0.108577] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 0.115025] cfg80211: Calling CRDA to update world regulatory domain [ 0.115490] Switched to clocksource kvm-clock [ 0.123112] pnp: PnP ACPI init [ 0.123547] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) [ 0.123612] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active) [ 0.123655] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active) [ 0.123686] pnp 00:03: [dma 2] [ 0.123720] pnp 00:03: Plug and Play ACPI device, IDs PNP0700 (active) [ 0.123822] pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) [ 0.124050] pnp: PnP ACPI: found 5 devices [ 0.129076] pci_bus 0000:00: resource 4 [io 0x0000-0xffff] [ 0.129079] pci_bus 0000:00: resource 5 [mem 0x00000000-0xffffffffff] [ 0.129125] NET: Registered protocol family 2 [ 0.129716] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.130158] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.130540] TCP: Hash tables configured (established 4096 bind 4096) [ 0.130980] TCP: reno registered [ 0.131294] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.131646] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.132158] NET: Registered protocol family 1 [ 0.132503] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.132859] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.133236] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.133841] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.134427] pci 0000:00:02.0: Video device with shadowed ROM [ 0.134458] PCI: CLS 0 bytes, default 64 [ 0.134734] microcode: CPU0 sig=0x206c1, pf=0x1, revision=0x1 [ 0.135150] microcode: Microcode Update Driver: v2.00 tigran@aivazian.fsnet.co.uk, Peter Oruba [ 0.135839] Scanning for low memory corruption every 60 seconds [ 0.136498] futex hash table entries: 256 (order: 2, 16384 bytes) [ 0.136876] Initialise system trusted keyring [ 0.137226] audit: initializing netlink subsys (disabled) [ 0.137585] audit: type=2000 audit(1417340856.464:1): initialized [ 0.138319] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.140523] VFS: Disk quotas dquot_6.5.2 [ 0.140880] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.141526] msgmni has been set to 853 [ 0.141928] SELinux: Registering netfilter hooks [ 0.142670] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.143248] io scheduler noop registered [ 0.143556] io scheduler deadline registered [ 0.143922] io scheduler cfq registered (default) [ 0.144344] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.144737] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.166631] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 0.167640] kworker/u2:0 (102) used greatest stack depth: 13824 bytes left [ 0.168600] Non-volatile memory driver v1.3 [ 0.169046] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 0.169603] ACPI: Power Button [PWRF] [ 0.170536] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 10 [ 0.172877] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 0.173922] loop: module loaded [ 0.174393] virtio-pci 0000:00:04.0: irq 24 for MSI/MSI-X [ 0.174410] virtio-pci 0000:00:04.0: irq 25 for MSI/MSI-X [ 0.269707] vda: vda1 vda2 [ 0.273105] ata_piix 0000:00:01.1: version 2.13 [ 0.273796] scsi host0: ata_piix [ 0.274658] scsi host1: ata_piix [ 0.275272] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0a0 irq 14 [ 0.275926] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0a8 irq 15 [ 0.277315] virtio-pci 0000:00:03.0: irq 26 for MSI/MSI-X [ 0.277341] virtio-pci 0000:00:03.0: irq 27 for MSI/MSI-X [ 0.277365] virtio-pci 0000:00:03.0: irq 28 for MSI/MSI-X [ 0.391545] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.391943] ehci-pci: EHCI PCI platform driver [ 0.392349] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.392726] ohci-pci: OHCI PCI platform driver [ 0.393081] uhci_hcd: USB Universal Host Controller Interface driver [ 0.393662] uhci_hcd 0000:00:01.2: UHCI Host Controller [ 0.394114] uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 [ 0.394813] uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c040 [ 0.395294] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001 [ 0.395805] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 0.396395] usb usb1: Product: UHCI Host Controller [ 0.396757] usb usb1: Manufacturer: Linux 3.17.4-gentoo uhci_hcd [ 0.397119] usb usb1: SerialNumber: 0000:00:01.2 [ 0.397574] hub 1-0:1.0: USB hub found [ 0.397934] hub 1-0:1.0: 2 ports detected [ 0.398432] usbcore: registered new interface driver usblp [ 0.398829] usbcore: registered new interface driver usb-storage [ 0.399263] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 0.400514] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 0.400888] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 0.401593] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 0.402438] rtc_cmos 00:00: RTC can wake from S4 [ 0.403075] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 0.403543] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs [ 0.404120] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-devel@redhat.com [ 0.404757] hidraw: raw HID events driver (C) Jiri Kosina [ 0.405355] usbcore: registered new interface driver usbhid [ 0.405711] usbhid: USB HID core driver [ 0.406083] Netfilter messages via NETLINK v0.30. [ 0.406460] nf_conntrack version 0.5.0 (3413 buckets, 13652 max) [ 0.406970] ctnetlink v0.93: registering with nfnetlink. [ 0.407466] ip_tables: (C) 2000-2006 Netfilter Core Team [ 0.407879] TCP: cubic registered [ 0.408205] Initializing XFRM netlink socket [ 0.408683] NET: Registered protocol family 10 [ 0.409344] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 0.409754] sit: IPv6 over IPv4 tunneling driver [ 0.410210] NET: Registered protocol family 17 [ 0.410586] 9pnet: Installing 9P2000 support [ 0.410975] Key type dns_resolver registered [ 0.411513] Loading compiled-in X.509 certificates [ 0.411878] registered taskstats version 1 [ 0.412555] Magic number: 6:475:779 [ 0.412949] console [netcon0] enabled [ 0.413304] netconsole: network logging started [ 0.413712] PM: Hibernation image not present or could not be loaded. [ 0.466409] ata2.01: NODEV after polling detection [ 0.466688] ata2.00: ATAPI: QEMU DVD-ROM, 1.1.2, max UDMA/100 [ 0.467499] ata2.00: configured for MWDMA2 [ 0.468414] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.1. PQ: 0 ANSI: 5 [ 0.479496] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 0.479869] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 0.480338] sr 1:0:0:0: Attached scsi CD-ROM sr0 [ 0.480504] sr 1:0:0:0: Attached scsi generic sg0 type 5 [ 0.480915] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 0.483102] kjournald starting. Commit interval 5 seconds [ 0.483476] EXT3-fs (vda1): mounted filesystem with ordered data mode [ 0.484218] VFS: Mounted root (ext3 filesystem) readonly on device 253:1. [ 0.498907] devtmpfs: mounted [ 0.500261] Freeing unused kernel memory: 1060K (ffffffff81ac3000 - ffffffff81bcc000) [ 0.501218] Write protecting the kernel read-only data: 10240k [ 0.506982] Freeing unused kernel memory: 1896K (ffff880001626000 - ffff880001800000) [ 0.507745] Freeing unused kernel memory: 56K (ffff8800019f2000 - ffff880001a00000) [ 0.700126] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 1.009299] usb 1-1: New USB device found, idVendor=0627, idProduct=0001 [ 1.009676] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=5 [ 1.010063] usb 1-1: Product: QEMU USB Tablet [ 1.010438] usb 1-1: Manufacturer: QEMU 1.1.2 [ 1.010752] usb 1-1: SerialNumber: 42 [ 1.027358] input: QEMU 1.1.2 QEMU USB Tablet as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input3 [ 1.028412] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Pointer [QEMU 1.1.2 QEMU USB Tablet] on usb-0000:00:01.2-1/input0 [ 1.136088] tsc: Refined TSC clocksource calibration: 2593.620 MHz [ 2.657635] init-early.sh (724) used greatest stack depth: 11992 bytes left [ 7.361256] systemd-udevd[898]: starting version 216 [ 7.590448] random: systemd-udevd urandom read with 12 bits of entropy available [ 8.209705] mousedev: PS/2 mouse device common for all mice [ 8.371037] Linux agpgart interface v0.103 [ 8.603751] SSE version of gcm_enc/dec engaged. [ 8.790935] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 [ 9.371368] EXT3-fs (vda1): using internal journal [ 9.472116] Adding 1571836k swap on /dev/vda2. Priority:-1 extents:1 across:1571836k [ 17.458329] device eth0 entered promiscuous mode [ 88.105788] random: nonblocking pool is initialized [ 121.182185] tun: Universal TUN/TAP device driver, 1.6 [ 121.182189] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 121.690950] batman_adv: B.A.T.M.A.N. advanced 2014.4.0 (compatibility version 15) loaded [ 121.692541] batman_adv: bat0: Adding interface: fastd0 [ 121.692544] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.692551] batman_adv: bat0: Interface activated: fastd0 [ 121.693433] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 121.694870] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 121.695618] batman_adv: bat0: Changing gw mode from: off to: client [ 150.885842] ipip: IPv4 over IPv4 tunneling driver [ 1364.020197] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 3042.769095] batman_adv: bat0: Changing gw mode from: client to: server [ 3042.769127] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 3759.633307] skbuff: skb_over_panic: text:ffffffffa00afe52 len:1464 put:1380 head:ffff880019ec8800 data:ffff880019ec8862 tail:0x61a end:0x2c0 dev:fastd0 [ 3759.633663] ------------[ cut here ]------------ [ 3759.633767] kernel BUG at net/core/skbuff.c:100! [ 3759.633881] invalid opcode: 0000 [#1] SMP [ 3759.633983] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt ablk_helper agpgart cryptd mousedev psmouse evdev [ 3759.634203] CPU: 0 PID: 1844 Comm: fastd Not tainted 3.17.4-gentoo #1 [ 3759.634203] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3759.634203] task: ffff88001a2eb4e0 ti: ffff8800194c4000 task.ti: ffff8800194c4000 [ 3759.634203] RIP: 0010:[<ffffffff81618ba3>] [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [ 3759.634203] RSP: 0018:ffff88001fc03cf8 EFLAGS: 00010296 [ 3759.634203] RAX: 000000000000008b RBX: ffff88001f2bfae0 RCX: 0000000000000092 [ 3759.634203] RDX: 0000000000000056 RSI: 0000000000000246 RDI: 0000000000000246 [ 3759.634203] RBP: ffff88001fc03d18 R08: 0000000000000000 R09: 0000000000000000 [ 3759.634203] R10: ffffffff8184ad60 R11: 0000000000000000 R12: 0000000000000564 [ 3759.634203] R13: ffff88001fc03da0 R14: ffff88001f29b100 R15: ffff880012f5f862 [ 3759.634203] FS: 00007f4776ef0700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3759.634203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3759.634203] CR2: 00007f686a3675c2 CR3: 0000000000046000 CR4: 00000000000006f0 [ 3759.634203] Stack: [ 3759.634203] ffff880019ec8862 000000000000061a 00000000000002c0 ffff880019fec000 [ 3759.634203] ffff88001fc03d28 ffffffff81464321 ffff88001fc03d88 ffffffffa00afe52 [ 3759.634203] ffff880012f5f84e de1a88001f29bf00 000077ff80000000 ffff88001f2bfae0 [ 3759.634203] Call Trace: [ 3759.634203] <IRQ> [ 3759.634203] [ 3759.634203] [<ffffffff81464321>] skb_put+0x41/0x50 [ 3759.634203] [<ffffffffa00afe52>] batadv_frag_skb_buffer+0x292/0x490 [batman_adv] [ 3759.634203] [<ffffffffa00ba2a3>] batadv_recv_frag_packet+0x183/0x200 [batman_adv] [ 3759.634203] [<ffffffffa00b3f35>] batadv_batman_skb_recv+0xd5/0x110 [batman_adv] [ 3759.634203] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [ 3759.634203] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [ 3759.634203] [<ffffffff8147477e>] process_backlog+0x9e/0x170 [ 3759.634203] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [ 3759.634203] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 3759.634203] [<ffffffff8162029c>] do_softirq_own_stack+0x1c/0x30 [ 3759.634203] <EOI> [ 3759.634203] [ 3759.634203] [<ffffffff81053065>] do_softirq+0x55/0x60 [ 3759.634203] [<ffffffff814736a4>] netif_rx_ni+0x34/0x70 [ 3759.634203] [<ffffffffa009d8f3>] tun_get_user+0x413/0x840 [tun] [ 3759.634203] [<ffffffffa009de1b>] tun_chr_aio_write+0x7b/0xa0 [tun] [ 3759.634203] [<ffffffff811611a5>] do_sync_write+0x55/0x90 [ 3759.634203] [<ffffffff81161eca>] vfs_write+0xba/0x1f0 [ 3759.634203] [<ffffffff811623da>] SyS_write+0x4a/0xa0 [ 3759.634203] [<ffffffff8161e769>] system_call_fastpath+0x16/0x1b [ 3759.634203] Code: 00 00 48 89 44 24 10 8b 87 c0 00 00 00 48 89 44 24 08 48 8b 87 d0 00 00 00 48 c7 c7 40 e8 99 81 48 89 04 24 31 c0 e8 5f b3 ff ff <0f> 0b 55 48 89 f8 48 8b 57 30 48 89 e5 48 8b 0f 5d 80 e5 80 48 [ 3759.634203] RIP [<ffffffff81618ba3>] skb_panic+0x5e/0x60 [ 3759.634203] RSP <ffff88001fc03cf8>

-- Kind Regards, Martin Hundebøll Frederiks Allé 99A, 1.th 8000 Aarhus C +45 61 65 54 61 martin@hundeboll.net

Philipp Psurek

1:35 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Thanks Martin, hi all

There has been a crash with fragmentation disabled (I save us the trace-back) so I did like you told me plus more:

# git clone git://git.open-mesh.org/batman-adv.git # cd batman-adv/ # patch < ../2-frag_debug_size.patch patching file fragmentation.c Hunk #1 succeeded at 217 (offset -3 lines). Hunk #2 succeeded at 243 (offset -3 lines). Hunk #3 succeeded at 260 with fuzz 2 (offset -3 lines). Hunk #4 succeeded at 288 (offset -3 lines). patch unexpectedly ends in middle of line Hunk #5 succeeded at 301 with fuzz 1 (offset -3 lines). # make [ … ] make: *** [all] Error 2 # LANG=C make /usr/src/batman-adv/gen-compat-autoconf.sh /usr/src/batman-adv/compat-autoconf.h make -C /lib/modules/3.17.4-gentoo/build M=/usr/src/batman-adv PWD=/usr/src/batman-adv modules make[1]: Entering directory '/usr/src/linux-3.17.4-gentoo' CC [M] /usr/src/batman-adv/fragmentation.o /usr/src/batman-adv/fragmentation.c: In function 'batadv_frag_merge_packets': /usr/src/batman-adv/fragmentation.c:309:20: error: 'struct batadv_frag_table_entry' has no member named 'total_size' scripts/Makefile.build:257: recipe for target '/usr/src/batman-adv/fragmentation.o' failed make[2]: *** [/usr/src/batman-adv/fragmentation.o] Error 1 Makefile:1373: recipe for target '_module_/usr/src/batman-adv' failed make[1]: *** [_module_/usr/src/batman-adv] Error 2 make[1]: Leaving directory '/usr/src/linux-3.17.4-gentoo' Makefile:53: recipe for target 'all' failed make: *** [all] Error 2

I learned something here so I also applied this: diff --git a/types.h b/types.h index 462a70c..c4d7d24 100644 --- a/types.h +++ b/types.h @@ -132,6 +132,7 @@ struct batadv_orig_ifinfo { * @timestamp: time (jiffie) of last received fragment * @seqno: sequence number of the fragments in the list * @size: accumulated size of packets in list + * @total_size: expected size of the assembled packet */ struct batadv_frag_table_entry { struct hlist_head head; @@ -139,6 +140,7 @@ struct batadv_frag_table_entry { unsigned long timestamp; uint16_t seqno; uint16_t size; + uint16_t total_size; };

/** -- # LANG=C make # make install # rmmod batman_adv # modprobe batman_adv # batctl -v batctl 2014.3.0 [batman-adv: 2014.3.0-44-g650251a-dirty]

# batctl if fastd0: active # batctl it 5000 # batctl ap disabled # batctl bl enabled # batctl dat enabled # batctl ag enabled # batctl b disabled # batctl f enabled # batctl nc Error - can't open file '/sys/class/net/bat0/mesh/network_coding': No such file or directory The option you called seems not to be compiled into your batman-adv kernel module. Consult the README if you wish to learn more about compiling options into batman-adv. # batctl mark 0x00000000/0x00000000 # batctl mm enabled # batctl ll Error - can't open file '/sys/class/net/bat0/mesh/log_level': No such file or directory The option you called seems not to be compiled into your batman-adv kernel module. Consult the README if you wish to learn more about compiling options into batman-adv. # batctl l Error - can't open file '/sys/kernel/debug//batman_adv/bat0/log': No such file or directory The option you called seems not to be compiled into your batman-adv kernel module. Consult the README if you wish to learn more about compiling options into batman-adv. # batctl gw server (announced bw: 90.0/90.0 MBit)

please tell me if it’s OK that nc and l are not compiled into the module. I’ll report, if I see something.

Best regards

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

Martin Hundebøll

1:40 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Philipp,

On 2014-11-30 14:35, Philipp Psurek wrote:

...

Thanks Martin, hi all

There has been a crash with fragmentation disabled (I save us the trace-back) so I did like you told me plus more:

# git clone git://git.open-mesh.org/batman-adv.git # cd batman-adv/ # patch < ../2-frag_debug_size.patch patching file fragmentation.c Hunk #1 succeeded at 217 (offset -3 lines). Hunk #2 succeeded at 243 (offset -3 lines). Hunk #3 succeeded at 260 with fuzz 2 (offset -3 lines). Hunk #4 succeeded at 288 (offset -3 lines). patch unexpectedly ends in middle of line Hunk #5 succeeded at 301 with fuzz 1 (offset -3 lines). # make [ … ] make: *** [all] Error 2 # LANG=C make /usr/src/batman-adv/gen-compat-autoconf.sh /usr/src/batman-adv/compat-autoconf.h make -C /lib/modules/3.17.4-gentoo/build M=/usr/src/batman-adv PWD=/usr/src/batman-adv modules make[1]: Entering directory '/usr/src/linux-3.17.4-gentoo' CC [M] /usr/src/batman-adv/fragmentation.o /usr/src/batman-adv/fragmentation.c: In function 'batadv_frag_merge_packets': /usr/src/batman-adv/fragmentation.c:309:20: error: 'struct batadv_frag_table_entry' has no member named 'total_size' scripts/Makefile.build:257: recipe for target '/usr/src/batman-adv/fragmentation.o' failed make[2]: *** [/usr/src/batman-adv/fragmentation.o] Error 1 Makefile:1373: recipe for target '_module_/usr/src/batman-adv' failed make[1]: *** [_module_/usr/src/batman-adv] Error 2 make[1]: Leaving directory '/usr/src/linux-3.17.4-gentoo' Makefile:53: recipe for target 'all' failed make: *** [all] Error 2

I learned something here so I also applied this: diff --git a/types.h b/types.h index 462a70c..c4d7d24 100644 --- a/types.h +++ b/types.h @@ -132,6 +132,7 @@ struct batadv_orig_ifinfo {

@timestamp: time (jiffie) of last received fragment

@seqno: sequence number of the fragments in the list

@size: accumulated size of packets in list

@total_size: expected size of the assembled packet

*/ struct batadv_frag_table_entry { struct hlist_head head;

@@ -139,6 +140,7 @@ struct batadv_frag_table_entry { unsigned long timestamp; uint16_t seqno; uint16_t size;

uint16_t total_size; };

/**

--

Ah, yes. Forgot about Sven's patch in my tree. Thx for solving it. Without NC and l is ok.

Thanks!

-- Kind Regards, Martin Hundebøll Frederiks Allé 99A, 1.th 8000 Aarhus C +45 61 65 54 61 martin@hundeboll.net

Philipp Psurek

2:07 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Martin, hi all

we have output :-) this was fast. But the VM crashes anyway. Now I disable ntop …

I hope, we’ll get the bug soon. Only a dead bug is a good bug. ;-)

Best regards

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux DUMPFILE: vmcore_20141130145543 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 00:35:02 LOAD AVERAGE: 0.44, 0.28, 0.18 TASKS: 139 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "" PID: 1748 COMMAND: "ntop" TASK: ffff880019d04f50 [THREAD_INFO: ffff880019ce8000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 1748 TASK: ffff880019d04f50 CPU: 0 COMMAND: "ntop" #0 [ffff88001fc03740] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc037a0] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03870] oops_end at ffffffff810060f8 #3 [ffff88001fc038a0] die at ffffffff81006593 #4 [ffff88001fc038d0] do_general_protection at ffffffff8100341a #5 [ffff88001fc03900] general_protection at ffffffff81620388 [exception RIP: __kmalloc_node_track_caller+237] RIP: ffffffff8115c24d RSP: ffff88001fc039b8 RFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff880019ee1f00 RCX: 0000000000053faa RDX: 0000000000053fa9 RSI: 0000000000000000 RDI: 0000000000015900 RBP: ffff88001fc039f8 R8: ffff88001fc15900 R9: ffff880005b09400 R10: 313134310d17592b R11: ffff88001974b5a0 R12: ffff88001f001400 R13: 00000000000007c0 R14: 00000000ffffffff R15: 0000000000010220 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0000 #6 [ffff88001fc03a00] __kmalloc_reserve at ffffffff81464387 #7 [ffff88001fc03a50] pskb_expand_head at ffffffff81465af7 #8 [ffff88001fc03aa0] __pskb_pull_tail at ffffffff81466207 #9 [ffff88001fc03af0] dev_hard_start_xmit at ffffffff814762c2 #10 [ffff88001fc03b50] __dev_queue_xmit at ffffffff81476798 #11 [ffff88001fc03ba0] dev_queue_xmit at ffffffff8147696b #12 [ffff88001fc03bb0] ip_finish_output at ffffffff814c4608 #13 [ffff88001fc03c10] ip_output at ffffffff814c5128 #14 [ffff88001fc03c40] ip_forward_finish at ffffffff814c0d41 #15 [ffff88001fc03c60] ip_forward at ffffffff814c10fe #16 [ffff88001fc03ca0] ip_rcv_finish at ffffffff814bef2c #17 [ffff88001fc03cd0] ip_rcv at ffffffff814bf86c #18 [ffff88001fc03d10] __netif_receive_skb_core at ffffffff81474152 #19 [ffff88001fc03d80] __netif_receive_skb at ffffffff81474691 #20 [ffff88001fc03da0] netif_receive_skb_internal at ffffffff81474878 #21 [ffff88001fc03dd0] napi_gro_complete at ffffffff814749dc #22 [ffff88001fc03e00] napi_gro_flush at ffffffff81474d72 #23 [ffff88001fc03e30] napi_complete at ffffffff81474dc2 #24 [ffff88001fc03e50] gro_cell_poll at ffffffff81507e26 #25 [ffff88001fc03ea0] net_rx_action at ffffffff81474f31 #26 [ffff88001fc03f00] __do_softirq at ffffffff81052e28 #27 [ffff88001fc03f60] irq_exit at ffffffff81053205 #28 [ffff88001fc03f70] do_IRQ at ffffffff810046f2 --- <IRQ stack> --- #29 [ffff880019cebf58] ret_from_intr at ffffffff8161f26d RIP: 00007f2ece2ff922 RSP: 00007f2eae7ac600 RFLAGS: 00000202 RAX: 00007f2ea4137f20 RBX: ffffffff8161e769 RCX: 000000000014bd49 RDX: 00007f2ea415df50 RSI: 0000000000000001 RDI: 0000000000820f00 RBP: 000000000000a43a R8: 000000000000008f R9: 00007f2eae7acbee R10: 0000000000000000 R11: 0000000000000011 R12: 000000000012f3cc R13: 00007f2eae7ac9e0 R14: 0000000000049fc7 R15: 00000000547b1e28 ORIG_RAX: ffffffffffffff8e CS: 0033 SS: 002b crash> log [ 0.000000] Initializing cgroup subsys cpuset [ 0.000000] Initializing cgroup subsys cpu [ 0.000000] Initializing cgroup subsys cpuacct [ 0.000000] Linux version 3.17.4-gentoo (root@wolke) (gcc version 4.7.3 (Gentoo 4.7.3-r1 p1.4, pie-0.5.5) ) #1 SMP Tue Nov 25 12:37:10 CET 2014 [ 0.000000] Command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] e820: BIOS-provided physical RAM map: [ 0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000009dbff] usable [ 0.000000] BIOS-e820: [mem 0x000000000009dc00-0x000000000009ffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000001fffdfff] usable [ 0.000000] BIOS-e820: [mem 0x000000001fffe000-0x000000001fffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000] NX (Execute Disable) protection: active [ 0.000000] SMBIOS 2.4 present. [ 0.000000] DMI: Bochs Bochs, BIOS Bochs 01/01/2007 [ 0.000000] Hypervisor detected: KVM [ 0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved [ 0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable [ 0.000000] e820: last_pfn = 0x1fffe max_arch_pfn = 0x400000000 [ 0.000000] MTRR default type: write-back [ 0.000000] MTRR fixed ranges enabled: [ 0.000000] 00000-9FFFF write-back [ 0.000000] A0000-BFFFF uncachable [ 0.000000] C0000-FFFFF write-protect [ 0.000000] MTRR variable ranges enabled: [ 0.000000] 0 base 00E0000000 mask FFE0000000 uncachable [ 0.000000] 1 disabled [ 0.000000] 2 disabled [ 0.000000] 3 disabled [ 0.000000] 4 disabled [ 0.000000] 5 disabled [ 0.000000] 6 disabled [ 0.000000] 7 disabled [ 0.000000] x86 PAT enabled: cpu 0, old 0x70406, new 0x7010600070106 [ 0.000000] found SMP MP-table at [mem 0x000fdaf0-0x000fdaff] mapped at [ffff8800000fdaf0] [ 0.000000] Scanning 1 areas for low memory corruption [ 0.000000] Base memory trampoline at [ffff880000097000] 97000 size 24576 [ 0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff] [ 0.000000] [mem 0x00000000-0x000fffff] page 4k [ 0.000000] BRK [0x01cae000, 0x01caefff] PGTABLE [ 0.000000] BRK [0x01caf000, 0x01caffff] PGTABLE [ 0.000000] BRK [0x01cb0000, 0x01cb0fff] PGTABLE [ 0.000000] init_memory_mapping: [mem 0x1fc00000-0x1fdfffff] [ 0.000000] [mem 0x1fc00000-0x1fdfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1c000000-0x1fbfffff] [ 0.000000] [mem 0x1c000000-0x1fbfffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x00100000-0x1bffffff] [ 0.000000] [mem 0x00100000-0x001fffff] page 4k [ 0.000000] [mem 0x00200000-0x1bffffff] page 2M [ 0.000000] init_memory_mapping: [mem 0x1fe00000-0x1fffdfff] [ 0.000000] [mem 0x1fe00000-0x1fffdfff] page 4k [ 0.000000] BRK [0x01cb1000, 0x01cb1fff] PGTABLE [ 0.000000] ACPI: Early table checksum verification disabled [ 0.000000] ACPI: RSDP 0x00000000000FD990 000014 (v00 BOCHS ) [ 0.000000] ACPI: RSDT 0x000000001FFFE5B0 000038 (v01 BOCHS BXPCRSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: FACP 0x000000001FFFFF80 000074 (v01 BOCHS BXPCFACP 00000001 BXPC 00000001) [ 0.000000] ACPI: DSDT 0x000000001FFFE5F0 001121 (v01 BXPC BXDSDT 00000001 INTL 20100528) [ 0.000000] ACPI: FACS 0x000000001FFFFF40 000040 [ 0.000000] ACPI: SSDT 0x000000001FFFFEA0 00009E (v01 BOCHS BXPCSSDT 00000001 BXPC 00000001) [ 0.000000] ACPI: APIC 0x000000001FFFFDB0 000078 (v01 BOCHS BXPCAPIC 00000001 BXPC 00000001) [ 0.000000] ACPI: HPET 0x000000001FFFFD70 000038 (v01 BOCHS BXPCHPET 00000001 BXPC 00000001) [ 0.000000] ACPI: SSDT 0x000000001FFFF720 000644 (v01 BXPC BXSSDTPC 00000001 INTL 20100528) [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] No NUMA configuration found [ 0.000000] Faking a node at [mem 0x0000000000000000-0x000000001fffdfff] [ 0.000000] Initmem setup node 0 [mem 0x00000000-0x1fffdfff] [ 0.000000] NODE_DATA [mem 0x1fffa000-0x1fffdfff] [ 0.000000] Reserving 64MB of memory at 432MB for crashkernel (System RAM: 511MB) [ 0.000000] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000000] kvm-clock: cpu 0, msr 0:1fff9001, primary cpu clock [ 0.000000] [ffffea0000000000-ffffea00007fffff] PMD -> [ffff88001a800000-ffff88001affffff] on node 0 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x00001000-0x00ffffff] [ 0.000000] DMA32 [mem 0x01000000-0xffffffff] [ 0.000000] Normal empty [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00001000-0x0009cfff] [ 0.000000] node 0: [mem 0x00100000-0x1fffdfff] [ 0.000000] On node 0 totalpages: 130970 [ 0.000000] DMA zone: 64 pages used for memmap [ 0.000000] DMA zone: 21 pages reserved [ 0.000000] DMA zone: 3996 pages, LIFO batch:0 [ 0.000000] DMA32 zone: 1984 pages used for memmap [ 0.000000] DMA32 zone: 126974 pages, LIFO batch:31 [ 0.000000] ACPI: PM-Timer IO Port: 0xb008 [ 0.000000] ACPI: Local APIC address 0xfee00000 [ 0.000000] ACPI: LAPIC (acpi_id[0x00] lapic_id[0x00] enabled) [ 0.000000] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0]) [ 0.000000] IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.000000] ACPI: IRQ0 used by override. [ 0.000000] ACPI: IRQ5 used by override. [ 0.000000] ACPI: IRQ9 used by override. [ 0.000000] ACPI: IRQ10 used by override. [ 0.000000] ACPI: IRQ11 used by override. [ 0.000000] Using ACPI (MADT) for SMP configuration information [ 0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 0.000000] smpboot: Allowing 1 CPUs, 0 hotplug CPUs [ 0.000000] PM: Registered nosave memory: [mem 0x0009d000-0x0009dfff] [ 0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009ffff] [ 0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 0.000000] PM: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 0.000000] e820: [mem 0x20000000-0xfeffbfff] available for PCI devices [ 0.000000] Booting paravirtualized kernel on KVM [ 0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:1 nr_node_ids:1 [ 0.000000] PERCPU: Embedded 27 pages/cpu @ffff88001fc00000 s79744 r8192 d22656 u2097152 [ 0.000000] pcpu-alloc: s79744 r8192 d22656 u2097152 alloc=1*2097152 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] KVM setup async PF for cpu 0 [ 0.000000] kvm-stealtime: cpu 0, msr 1fc0cf80 [ 0.000000] Built 1 zonelists in Node order, mobility grouping on. Total pages: 128901 [ 0.000000] Policy zone: DMA32 [ 0.000000] Kernel command line: root=/dev/vda1 raid=noautodetect crashkernel=64M [ 0.000000] PID hash table entries: 2048 (order: 2, 16384 bytes) [ 0.000000] Calgary: detecting Calgary via BIOS EBDA area [ 0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing! [ 0.000000] Memory: 436880K/523880K available (6283K kernel code, 773K rwdata, 1992K rodata, 1060K init, 872K bss, 87000K reserved) [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=1. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS:4352 nr_irqs:256 0 [ 0.000000] Console: colour VGA+ 80x25 [ 0.000000] console [tty0] enabled [ 0.000000] hpet clockevent registered [ 0.000000] tsc: Detected 2593.748 MHz processor [ 0.002000] Calibrating delay loop (skipped) preset value.. 5187.49 BogoMIPS (lpj=2593748) [ 0.002004] pid_max: default: 32768 minimum: 301 [ 0.002389] ACPI: Core revision 20140724 [ 0.003748] ACPI: All ACPI Tables successfully acquired [ 0.004334] Security Framework initialized [ 0.004698] SELinux: Initializing. [ 0.005009] SELinux: Starting in permissive mode [ 0.005041] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes) [ 0.005735] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes) [ 0.006141] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.006581] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes) [ 0.007284] Initializing cgroup subsys freezer [ 0.008015] mce: CPU supports 10 MCE banks [ 0.008487] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 0.022578] Freeing SMP alternatives memory: 24K (ffffffff81bcc000 - ffffffff81bd2000) [ 0.026794] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 0.027002] smpboot: CPU0: Intel Westmere E56xx/L56xx/X56xx (Nehalem-C) (fam: 06, model: 2c, stepping: 01) [ 0.028000] Performance Events: unsupported p6 CPU model 44 no PMU driver, software events only. [ 0.028428] x86: Booted up 1 node, 1 CPUs [ 0.028745] smpboot: Total of 1 processors activated (5187.49 BogoMIPS) [ 0.029420] devtmpfs: initialized [ 0.030297] RTC time: 13:04:50, date: 11/30/14 [ 0.030759] NET: Registered protocol family 16 [ 0.031184] cpuidle: using governor ladder [ 0.031504] cpuidle: using governor menu [ 0.031856] ACPI: bus type PCI registered [ 0.032116] PCI: Using configuration type 1 for base access [ 0.034624] kworker/u2:0 (14) used greatest stack depth: 14760 bytes left [ 0.035396] ACPI: Added _OSI(Module Device) [ 0.035723] ACPI: Added _OSI(Processor Device) [ 0.036004] ACPI: Added _OSI(3.0 _SCP Extensions) [ 0.036354] ACPI: Added _OSI(Processor Aggregator Device) [ 0.038182] ACPI: Interpreter enabled [ 0.038501] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S1_] (20140724/hwxface-580) [ 0.039005] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [_S2_] (20140724/hwxface-580) [ 0.039729] ACPI: (supports S0 S3 S4 S5) [ 0.040004] ACPI: Using IOAPIC for interrupt routing [ 0.040382] kworker/u2:0 (21) used greatest stack depth: 13912 bytes left [ 0.041029] PCI: Ignoring host bridge windows from ACPI; if necessary, use "pci=use_crs" and report a bug [ 0.044072] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 0.044467] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI] [ 0.044834] acpi PNP0A03:00: _OSC failed (AE_NOT_FOUND); disabling ASPM [ 0.045016] acpi PNP0A03:00: host bridge window [io 0x0000-0x0cf7] (ignored) [ 0.045018] acpi PNP0A03:00: host bridge window [io 0x0d00-0xffff] (ignored) [ 0.045020] acpi PNP0A03:00: host bridge window [mem 0x000a0000-0x000bffff] (ignored) [ 0.045021] acpi PNP0A03:00: host bridge window [mem 0xe0000000-0xfebfffff] (ignored) [ 0.045023] PCI: root bus 00: using default resources [ 0.045025] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 0.045725] PCI host bridge to bus 0000:00 [ 0.046054] pci_bus 0000:00: root bus resource [bus 00-ff] [ 0.046396] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 0.047010] pci_bus 0000:00: root bus resource [mem 0x00000000-0xffffffffff] [ 0.047430] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 0.047786] pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 [ 0.048312] pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 [ 0.049921] pci 0000:00:01.1: reg 0x20: [io 0xc0a0-0xc0af] [ 0.050492] pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] [ 0.050876] pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] [ 0.051004] pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] [ 0.051371] pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] [ 0.052204] pci 0000:00:01.2: [8086:7020] type 00 class 0x0c0300 [ 0.053793] pci 0000:00:01.2: reg 0x20: [io 0xc040-0xc05f] [ 0.054678] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 0.055022] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 0.055611] pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB [ 0.056264] pci 0000:00:02.0: [1013:00b8] type 00 class 0x030000 [ 0.058038] pci 0000:00:02.0: reg 0x10: [mem 0xfc000000-0xfdffffff pref] [ 0.060038] pci 0000:00:02.0: reg 0x14: [mem 0xfebf0000-0xfebf0fff] [ 0.071041] pci 0000:00:02.0: reg 0x30: [mem 0xfebd0000-0xfebdffff pref] [ 0.071821] pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 [ 0.072327] pci 0000:00:03.0: reg 0x10: [io 0xc060-0xc07f] [ 0.073004] pci 0000:00:03.0: reg 0x14: [mem 0xfebf1000-0xfebf1fff] [ 0.077307] pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] [ 0.078181] pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 [ 0.080004] pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc03f] [ 0.081503] pci 0000:00:04.0: reg 0x14: [mem 0xfebf2000-0xfebf2fff] [ 0.087313] pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 [ 0.087875] pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] [ 0.090732] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 0.091538] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 0.092086] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 0.093162] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 0.093876] ACPI: PCI Interrupt Link [LNKS] (IRQs 9) *0, disabled. [ 0.094882] ACPI: Enabled 16 GPEs in block 00 to 0F [ 0.095210] vgaarb: setting as boot device: PCI:0000:00:02.0 [ 0.095553] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none [ 0.096004] vgaarb: loaded [ 0.096300] vgaarb: bridge control possible 0000:00:02.0 [ 0.097222] SCSI subsystem initialized [ 0.097647] libata version 3.00 loaded. [ 0.097678] ACPI: bus type USB registered [ 0.098066] usbcore: registered new interface driver usbfs [ 0.098430] usbcore: registered new interface driver hub [ 0.098816] usbcore: registered new device driver usb [ 0.099093] pps_core: LinuxPPS API ver. 1 registered [ 0.099430] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti giometti@linux.it [ 0.100015] PTP clock support registered [ 0.100461] PCI: Using ACPI for IRQ routing [ 0.101013] PCI: pci_cache_line_size set to 64 bytes [ 0.101163] e820: reserve RAM buffer [mem 0x0009dc00-0x0009ffff] [ 0.101167] e820: reserve RAM buffer [mem 0x1fffe000-0x1fffffff] [ 0.101506] NetLabel: Initializing [ 0.101810] NetLabel: domain hash size = 128 [ 0.102002] NetLabel: protocols = UNLABELED CIPSOv4 [ 0.102358] NetLabel: unlabeled traffic allowed by default [ 0.103144] HPET: 3 timers in total, 0 timers will be used for per-cpu timer [ 0.103531] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 0.104016] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 0.107030] cfg80211: Calling CRDA to update world regulatory domain [ 0.108105] Switched to clocksource kvm-clock [ 0.116396] pnp: PnP ACPI init [ 0.116861] pnp 00:00: Plug and Play ACPI device, IDs PNP0b00 (active) [ 0.116935] pnp 00:01: Plug and Play ACPI device, IDs PNP0303 (active) [ 0.116987] pnp 00:02: Plug and Play ACPI device, IDs PNP0f13 (active) [ 0.117046] pnp 00:03: [dma 2] [ 0.117066] pnp 00:03: Plug and Play ACPI device, IDs PNP0700 (active) [ 0.117178] pnp 00:04: Plug and Play ACPI device, IDs PNP0501 (active) [ 0.117368] pnp: PnP ACPI: found 5 devices [ 0.122425] pci_bus 0000:00: resource 4 [io 0x0000-0xffff] [ 0.122428] pci_bus 0000:00: resource 5 [mem 0x00000000-0xffffffffff] [ 0.122466] NET: Registered protocol family 2 [ 0.123078] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.123472] TCP bind hash table entries: 4096 (order: 4, 65536 bytes) [ 0.123853] TCP: Hash tables configured (established 4096 bind 4096) [ 0.124289] TCP: reno registered [ 0.124589] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.124940] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.125474] NET: Registered protocol family 1 [ 0.125819] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 0.126197] pci 0000:00:01.0: PIIX3: Enabling Passive Release [ 0.126556] pci 0000:00:01.0: Activating ISA DMA hang workarounds [ 0.127243] ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11 [ 0.127807] pci 0000:00:02.0: Video device with shadowed ROM [ 0.127837] PCI: CLS 0 bytes, default 64 [ 0.128110] microcode: CPU0 sig=0x206c1, pf=0x1, revision=0x1 [ 0.128538] microcode: Microcode Update Driver: v2.00 tigran@aivazian.fsnet.co.uk, Peter Oruba [ 0.129258] Scanning for low memory corruption every 60 seconds [ 0.129870] futex hash table entries: 256 (order: 2, 16384 bytes) [ 0.130270] Initialise system trusted keyring [ 0.130606] audit: initializing netlink subsys (disabled) [ 0.130964] audit: type=2000 audit(1417352694.072:1): initialized [ 0.131689] HugeTLB registered 2 MB page size, pre-allocated 0 pages [ 0.134001] VFS: Disk quotas dquot_6.5.2 [ 0.134392] Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 0.135075] msgmni has been set to 853 [ 0.135470] SELinux: Registering netfilter hooks [ 0.136229] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.136800] io scheduler noop registered [ 0.137130] io scheduler deadline registered [ 0.137780] io scheduler cfq registered (default) [ 0.138211] pci_hotplug: PCI Hot Plug PCI Core version: 0.5 [ 0.138620] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 0.160508] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 0.161598] kworker/u2:0 (103) used greatest stack depth: 13824 bytes left [ 0.162655] Non-volatile memory driver v1.3 [ 0.163132] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 0.163730] ACPI: Power Button [PWRF] [ 0.164598] ACPI: PCI Interrupt Link [LNKC] enabled at IRQ 10 [ 0.167027] ACPI: PCI Interrupt Link [LNKA] enabled at IRQ 10 [ 0.168094] loop: module loaded [ 0.168516] virtio-pci 0000:00:04.0: irq 24 for MSI/MSI-X [ 0.168533] virtio-pci 0000:00:04.0: irq 25 for MSI/MSI-X [ 0.238788] vda: vda1 vda2 [ 0.241107] ata_piix 0000:00:01.1: version 2.13 [ 0.242218] scsi host0: ata_piix [ 0.243355] scsi host1: ata_piix [ 0.244154] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0a0 irq 14 [ 0.245106] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0a8 irq 15 [ 0.246100] virtio-pci 0000:00:03.0: irq 26 for MSI/MSI-X [ 0.246117] virtio-pci 0000:00:03.0: irq 27 for MSI/MSI-X [ 0.246132] virtio-pci 0000:00:03.0: irq 28 for MSI/MSI-X [ 0.370758] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 0.371712] ehci-pci: EHCI PCI platform driver [ 0.372744] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 0.373847] ohci-pci: OHCI PCI platform driver [ 0.375816] uhci_hcd: USB Universal Host Controller Interface driver [ 0.377697] uhci_hcd 0000:00:01.2: UHCI Host Controller [ 0.378232] uhci_hcd 0000:00:01.2: new USB bus registered, assigned bus number 1 [ 0.378893] uhci_hcd 0000:00:01.2: irq 11, io base 0x0000c040 [ 0.379394] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001 [ 0.380633] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 0.381468] usb usb1: Product: UHCI Host Controller [ 0.382223] usb usb1: Manufacturer: Linux 3.17.4-gentoo uhci_hcd [ 0.382774] usb usb1: SerialNumber: 0000:00:01.2 [ 0.383488] hub 1-0:1.0: USB hub found [ 0.383825] hub 1-0:1.0: 2 ports detected [ 0.384360] usbcore: registered new interface driver usblp [ 0.384753] usbcore: registered new interface driver usb-storage [ 0.385201] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 0.386394] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 0.386763] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 0.387457] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 0.388245] rtc_cmos 00:00: RTC can wake from S4 [ 0.388833] rtc_cmos 00:00: rtc core: registered rtc_cmos as rtc0 [ 0.389510] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram, hpet irqs [ 0.390051] device-mapper: ioctl: 4.27.0-ioctl (2013-10-30) initialised: dm-devel@redhat.com [ 0.390691] hidraw: raw HID events driver (C) Jiri Kosina [ 0.391348] usbcore: registered new interface driver usbhid [ 0.391695] usbhid: USB HID core driver [ 0.392063] Netfilter messages via NETLINK v0.30. [ 0.392452] nf_conntrack version 0.5.0 (3413 buckets, 13652 max) [ 0.392925] ctnetlink v0.93: registering with nfnetlink. [ 0.393444] ip_tables: (C) 2000-2006 Netfilter Core Team [ 0.393810] TCP: cubic registered [ 0.394119] Initializing XFRM netlink socket [ 0.394615] NET: Registered protocol family 10 [ 0.395307] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 0.395729] sit: IPv6 over IPv4 tunneling driver [ 0.396443] NET: Registered protocol family 17 [ 0.396788] 9pnet: Installing 9P2000 support [ 0.397189] Key type dns_resolver registered [ 0.397777] Loading compiled-in X.509 certificates [ 0.398145] registered taskstats version 1 [ 0.398744] Magic number: 6:178:80 [ 0.399122] console [netcon0] enabled [ 0.399430] netconsole: network logging started [ 0.399824] PM: Hibernation image not present or could not be loaded. [ 0.445438] ata2.01: NODEV after polling detection [ 0.445794] ata2.00: ATAPI: QEMU DVD-ROM, 1.1.2, max UDMA/100 [ 0.446615] ata2.00: configured for MWDMA2 [ 0.447433] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 1.1. PQ: 0 ANSI: 5 [ 0.458485] sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray [ 0.458895] cdrom: Uniform CD-ROM driver Revision: 3.20 [ 0.459389] sr 1:0:0:0: Attached scsi CD-ROM sr0 [ 0.459586] sr 1:0:0:0: Attached scsi generic sg0 type 5 [ 0.459992] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 0.476202] kjournald starting. Commit interval 5 seconds [ 0.477309] EXT3-fs (vda1): mounted filesystem with ordered data mode [ 0.478236] VFS: Mounted root (ext3 filesystem) readonly on device 253:1. [ 0.514547] devtmpfs: mounted [ 0.515796] Freeing unused kernel memory: 1060K (ffffffff81ac3000 - ffffffff81bcc000) [ 0.516445] Write protecting the kernel read-only data: 10240k [ 0.521240] Freeing unused kernel memory: 1896K (ffff880001626000 - ffff880001800000) [ 0.522093] Freeing unused kernel memory: 56K (ffff8800019f2000 - ffff880001a00000) [ 0.686552] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 1.009378] usb 1-1: New USB device found, idVendor=0627, idProduct=0001 [ 1.009803] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=5 [ 1.010202] usb 1-1: Product: QEMU USB Tablet [ 1.010548] usb 1-1: Manufacturer: QEMU 1.1.2 [ 1.010916] usb 1-1: SerialNumber: 42 [ 1.028402] input: QEMU 1.1.2 QEMU USB Tablet as /devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input3 [ 1.029135] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v0.01 Pointer [QEMU 1.1.2 QEMU USB Tablet] on usb-0000:00:01.2-1/input0 [ 1.128081] tsc: Refined TSC clocksource calibration: 2593.620 MHz [ 2.373130] init-early.sh (723) used greatest stack depth: 11992 bytes left [ 6.295118] systemd-udevd[897]: starting version 216 [ 6.556720] random: systemd-udevd urandom read with 12 bits of entropy available [ 7.733863] mousedev: PS/2 mouse device common for all mice [ 7.900399] Linux agpgart interface v0.103 [ 8.372811] SSE version of gcm_enc/dec engaged. [ 8.375858] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input4 [ 9.684805] EXT3-fs (vda1): using internal journal [ 10.007819] Adding 1571836k swap on /dev/vda2. Priority:-1 extents:1 across:1571836k [ 10.926006] chgrp (1134) used greatest stack depth: 11960 bytes left [ 23.419985] device eth0 entered promiscuous mode [ 24.077112] ntop (1719) used greatest stack depth: 11944 bytes left [ 24.724336] sshd (1746) used greatest stack depth: 11784 bytes left [ 68.409724] tun: Universal TUN/TAP device driver, 1.6 [ 68.409728] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 69.467798] batman_adv: B.A.T.M.A.N. advanced 2014.3.0-44-g650251a-dirty (compatibility version 15) loaded [ 69.687485] batman_adv: bat0: Adding interface: fastd0 [ 69.687490] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.687499] batman_adv: bat0: Interface activated: fastd0 [ 69.700188] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 69.706917] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 69.712381] batman_adv: bat0: Changing gw mode from: off to: client [ 79.832661] random: nonblocking pool is initialized [ 84.632237] ipip: IPv4 over IPv4 tunneling driver [ 138.729131] batman_adv: bat0: Changing gw mode from: client to: server [ 138.729164] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 1086.573206] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 2102.215674] batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 6144, entry->size: 6638, entry->total_size: 34816 [ 2102.215679] skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 53427, pkt->total_size: 16338 [ 2102.215681] skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56866, pkt->total_size: 1464 [ 2102.233701] general protection fault: 0000 [#1] SMP [ 2102.233919] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 intel_agp glue_helper lrw intel_gtt agpgart gf128mul psmouse ablk_helper mousedev evdev cryptd [ 2102.234264] CPU: 0 PID: 1748 Comm: ntop Tainted: G O 3.17.4-gentoo #1 [ 2102.234264] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 2102.234264] task: ffff880019d04f50 ti: ffff880019ce8000 task.ti: ffff880019ce8000 [ 2102.234264] RIP: 0010:[<ffffffff8115c24d>] [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 2102.234264] RSP: 0000:ffff88001fc039b8 EFLAGS: 00010246 [ 2102.234264] RAX: 0000000000000000 RBX: ffff880019ee1f00 RCX: 0000000000053faa [ 2102.234264] RDX: 0000000000053fa9 RSI: 0000000000000000 RDI: 0000000000015900 [ 2102.234264] RBP: ffff88001fc039f8 R08: ffff88001fc15900 R09: ffff880005b09400 [ 2102.234264] R10: 313134310d17592b R11: ffff88001974b5a0 R12: ffff88001f001400 [ 2102.234264] R13: 00000000000007c0 R14: 00000000ffffffff R15: 0000000000010220 [ 2102.234264] FS: 00007f2eae7af700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 2102.234264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2102.234264] CR2: 0000000005cf7080 CR3: 000000001f26e000 CR4: 00000000000006f0 [ 2102.234264] Stack: [ 2102.234264] ffff8800195e9e40 ffffffff81465af7 ffff880019ee1400 ffff880019ee1f00 [ 2102.234264] 0000000000000000 0000000000000020 00000000000007c0 00000000ffffffff [ 2102.234264] ffff88001fc03a48 ffffffff81464387 0000000000000000 0000000000000000 [ 2102.234264] Call Trace: [ 2102.234264] <IRQ> [ 2102.234264] [ 2102.234264] [<ffffffff81465af7>] ? pskb_expand_head+0x67/0x270 [ 2102.234264] [<ffffffff81464387>] __kmalloc_reserve.isra.58+0x37/0xa0 [ 2102.234264] [<ffffffff81465af7>] pskb_expand_head+0x67/0x270 [ 2102.234264] [<ffffffff81466207>] __pskb_pull_tail+0x47/0x320 [ 2102.234264] [<ffffffff814762c2>] dev_hard_start_xmit+0x3a2/0x580 [ 2102.234264] [<ffffffff814c4000>] ? ip_finish_output2+0x300/0x300 [ 2102.234264] [<ffffffff81476798>] __dev_queue_xmit+0x2f8/0x4b0 [ 2102.234264] [<ffffffff8147696b>] dev_queue_xmit+0xb/0x10 [ 2102.234264] [<ffffffff814c4608>] ip_finish_output+0x608/0x7f0 [ 2102.234264] [<ffffffff814c5128>] ip_output+0x88/0x90 [ 2102.234264] [<ffffffff814c0d41>] ip_forward_finish+0x61/0x80 [ 2102.234264] [<ffffffff814c10fe>] ip_forward+0x39e/0x430 [ 2102.234264] [<ffffffff814bef2c>] ip_rcv_finish+0x7c/0x320 [ 2102.234264] [<ffffffff814bf86c>] ip_rcv+0x2dc/0x3f0 [ 2102.234264] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [ 2102.234264] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [ 2102.234264] [<ffffffff81474878>] netif_receive_skb_internal+0x28/0x90 [ 2102.234264] [<ffffffff814749dc>] napi_gro_complete+0x9c/0xd0 [ 2102.234264] [<ffffffff81474d72>] napi_gro_flush+0x62/0x90 [ 2102.234264] [<ffffffff81474dc2>] napi_complete+0x22/0x50 [ 2102.234264] [<ffffffff81507e26>] gro_cell_poll+0x96/0xb0 [ 2102.234264] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [ 2102.234264] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 2102.234264] [<ffffffff81053205>] irq_exit+0x95/0xa0 [ 2102.234264] [<ffffffff810046f2>] do_IRQ+0x62/0x110 [ 2102.234264] [<ffffffff8161f26d>] common_interrupt+0x6d/0x6d [ 2102.234264] <EOI> [ 2102.234264] [ 2102.234264] [<ffffffff8161e769>] ? system_call_fastpath+0x16/0x1b [ 2102.234264] Code: 00 4c 89 d0 48 8b 5d d8 4c 8b 65 e0 4c 8b 6d e8 4c 8b 75 f0 4c 8b 7d f8 c9 c3 0f 1f 40 00 49 63 44 24 20 49 8b 3c 24 48 8d 4a 01 <49> 8b 1c 02 4c 89 d0 65 48 0f c7 0f 0f 94 c0 84 c0 0f 84 56 ff [ 2102.234264] RIP [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 2102.234264] RSP <ffff88001fc039b8>

Philipp Psurek

5:04 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Martin, hi Sven, hi all

I couldn't help myself and started ntop after a while. Now I come to the conclusion that ntop has nothing to do with the crash. I think the machine simply crashes on the next task in the stack. (but really, I don't know what I'm talking about)

I understand, that the patch is quick & dirty and can't protect the VM from crash. But it's a big step forward identifying the cause of the bug and that your patch provides us with some output.

Best regards an happy hacking

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux DUMPFILE: vmcore_20141130174721 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 02:29:15 LOAD AVERAGE: 0.17, 0.17, 0.15 TASKS: 141 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "" PID: 0 COMMAND: "swapper/0" TASK: ffffffff81a19480 [THREAD_INFO: ffffffff81a00000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 0 TASK: ffffffff81a19480 CPU: 0 COMMAND: "swapper/0" #0 [ffff88001fc034e0] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc03540] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03610] oops_end at ffffffff810060f8 #3 [ffff88001fc03640] die at ffffffff81006593 #4 [ffff88001fc03670] do_general_protection at ffffffff8100341a #5 [ffff88001fc036a0] general_protection at ffffffff81620388 [exception RIP: __kmalloc_node_track_caller+237] RIP: ffffffff8115c24d RSP: ffff88001fc03758 RFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88001a2d2c00 RCX: 0000000000391dc8 RDX: 0000000000391dc7 RSI: 0000000000000000 RDI: 0000000000015900 RBP: ffff88001fc03798 R8: ffff88001fc15900 R9: ffffffff81466f1b R10: b713fedcfcf04441 R11: ffff88001a2d2200 R12: ffff88001f001400 R13: 0000000000000740 R14: 00000000ffffffff R15: 0000000000010220 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #6 [ffff88001fc037a0] __kmalloc_reserve at ffffffff81464387 #7 [ffff88001fc037f0] __alloc_skb at ffffffff81466f48 #8 [ffff88001fc03850] skb_segment at ffffffff81467e29 #9 [ffff88001fc03970] tcp_gso_segment at ffffffff814e7e82 #10 [ffff88001fc039e0] inet_gso_segment at ffffffff814f7d57 #11 [ffff88001fc03a50] skb_mac_gso_segment at ffffffff81475d83 #12 [ffff88001fc03a90] __skb_gso_segment at ffffffff81475ebb #13 [ffff88001fc03ab0] dev_hard_start_xmit at ffffffff814760a3 #14 [ffff88001fc03b10] __dev_queue_xmit at ffffffff81476798 #15 [ffff88001fc03b60] dev_queue_xmit at ffffffff8147696b #16 [ffff88001fc03b70] ip_finish_output at ffffffff814c466b #17 [ffff88001fc03bd0] ip_output at ffffffff814c5128 #18 [ffff88001fc03c00] ip_forward_finish at ffffffff814c0d41 #19 [ffff88001fc03c20] ip_forward at ffffffff814c10fe #20 [ffff88001fc03c60] ip_rcv_finish at ffffffff814bef2c #21 [ffff88001fc03c90] ip_rcv at ffffffff814bf86c #22 [ffff88001fc03cd0] __netif_receive_skb_core at ffffffff81474152 #23 [ffff88001fc03d40] __netif_receive_skb at ffffffff81474691 #24 [ffff88001fc03d60] netif_receive_skb_internal at ffffffff81474878 #25 [ffff88001fc03d90] napi_gro_complete at ffffffff814749dc #26 [ffff88001fc03dc0] dev_gro_receive at ffffffff81474c0f #27 [ffff88001fc03e20] napi_gro_receive at ffffffff81475224 #28 [ffff88001fc03e50] gro_cell_poll at ffffffff81507e07 #29 [ffff88001fc03ea0] net_rx_action at ffffffff81474f31 #30 [ffff88001fc03f00] __do_softirq at ffffffff81052e28 #31 [ffff88001fc03f60] irq_exit at ffffffff81053205 #32 [ffff88001fc03f70] do_IRQ at ffffffff810046f2 --- <IRQ stack> --- #33 [ffffffff81a03de8] ret_from_intr at ffffffff8161f26d [exception RIP: tick_nohz_idle_exit+291] RIP: ffffffff810b1923 RSP: ffffffff81a03e98 RFLAGS: 00000202 RAX: ffff88001fc0d080 RBX: ffff88001fc0d4a0 RCX: 0000000000000020 RDX: 0000000000000000 RSI: 0000000000000086 RDI: 0000000000000008 RBP: ffffffff81a03ea8 R8: 00000000209d3188 R9: 0000000000000001 R10: 0000000000000005 R11: 0000000000000004 R12: ffffffff810a33d7 R13: ffffffff81a03e78 R14: 0000000000000086 R15: ffffffff81a03df8 ORIG_RAX: ffffffffffffff8e CS: 0010 SS: 0018 #34 [ffffffff81a03eb0] cpu_startup_entry at ffffffff810844c7 #35 [ffffffff81a03f10] rest_init at ffffffff81610332 #36 [ffffffff81a03f20] start_kernel at ffffffff81ad8062 #37 [ffffffff81a03f70] x86_64_start_reservations at ffffffff81ad75cc #38 [ffffffff81a03f80] x86_64_start_kernel at ffffffff81ad7714 crash> log […] [ 6.765959] Adding 1571836k swap on /dev/vda2. Priority:-1 extents:1 across:1571836k [ 13.008359] named (1695) used greatest stack depth: 11784 bytes left [ 62.407977] tun: Universal TUN/TAP device driver, 1.6 [ 62.407981] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 63.275215] batman_adv: B.A.T.M.A.N. advanced 2014.3.0-44-g650251a-dirty (compatibility version 15) loaded [ 63.541480] batman_adv: bat0: Adding interface: fastd0 [ 63.541484] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.541493] batman_adv: bat0: Interface activated: fastd0 [ 63.553877] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 63.561411] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 63.566465] batman_adv: bat0: Changing gw mode from: off to: client [ 65.511629] ipip: IPv4 over IPv4 tunneling driver [ 77.521583] random: nonblocking pool is initialized [ 103.144238] batman_adv: bat0: Changing gw mode from: client to: server [ 103.144300] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 345.305038] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 2998.421458] device eth0 entered promiscuous mode [ 8955.565935] batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 16640, entry->size: 3512, entry->total_size: 34816 [ 8955.565940] skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 33848, pkt->total_size: 14578 [ 8955.565942] skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56874, pkt->total_size: 1464 [ 8955.571490] batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 16384, entry->size: 3512, entry->total_size: 34816 [ 8955.571498] skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 33848, pkt->total_size: 14578 [ 8955.571500] skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56875, pkt->total_size: 1464 [ 8955.614084] general protection fault: 0000 [#1] SMP [ 8955.614225] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt ablk_helper agpgart cryptd psmouse mousedev evdev [ 8955.614822] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G O 3.17.4-gentoo #1 [ 8955.614919] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 8955.614919] task: ffffffff81a19480 ti: ffffffff81a00000 task.ti: ffffffff81a00000 [ 8955.614919] RIP: 0010:[<ffffffff8115c24d>] [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 8955.614919] RSP: 0018:ffff88001fc03758 EFLAGS: 00010246 [ 8955.614919] RAX: 0000000000000000 RBX: ffff88001a2d2c00 RCX: 0000000000391dc8 [ 8955.614919] RDX: 0000000000391dc7 RSI: 0000000000000000 RDI: 0000000000015900 [ 8955.614919] RBP: ffff88001fc03798 R08: ffff88001fc15900 R09: ffffffff81466f1b [ 8955.614919] R10: b713fedcfcf04441 R11: ffff88001a2d2200 R12: ffff88001f001400 [ 8955.614919] R13: 0000000000000740 R14: 00000000ffffffff R15: 0000000000010220 [ 8955.614919] FS: 0000000000000000(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 8955.614919] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 8955.614919] CR2: 00007ff981305000 CR3: 0000000002201000 CR4: 00000000000006f0 [ 8955.614919] Stack: [ 8955.614919] ffff88001fc03768 ffffffff81466f48 ffff88001fc037a8 ffff88001a2d2c00 [ 8955.614919] ffff88001fc03817 0000000000000020 0000000000000740 00000000ffffffff [ 8955.614919] ffff88001fc037e8 ffffffff81464387 0000000000000000 0000000000000000 [ 8955.614919] Call Trace: [ 8955.614919] <IRQ> [ 8955.614919] [ 8955.614919] [<ffffffff81466f48>] ? __alloc_skb+0x88/0x2a0 [ 8955.614919] [<ffffffff81464387>] __kmalloc_reserve.isra.58+0x37/0xa0 [ 8955.614919] [<ffffffff81466f48>] __alloc_skb+0x88/0x2a0 [ 8955.614919] [<ffffffff81467e29>] skb_segment+0x4b9/0x940 [ 8955.614919] [<ffffffffa009cfa3>] ? tun_net_xmit+0x263/0x320 [tun] [ 8955.614919] [<ffffffff814e7e82>] tcp_gso_segment+0x122/0x4f0 [ 8955.614919] [<ffffffff814f7d57>] inet_gso_segment+0x137/0x390 [ 8955.614919] [<ffffffff81475d83>] skb_mac_gso_segment+0x93/0x170 [ 8955.614919] [<ffffffff81475ebb>] __skb_gso_segment+0x5b/0xc0 [ 8955.614919] [<ffffffff814760a3>] dev_hard_start_xmit+0x183/0x580 [ 8955.614919] [<ffffffff814c4000>] ? ip_finish_output2+0x300/0x300 [ 8955.614919] [<ffffffff81476798>] __dev_queue_xmit+0x2f8/0x4b0 [ 8955.614919] [<ffffffff8147696b>] dev_queue_xmit+0xb/0x10 [ 8955.614919] [<ffffffff814c466b>] ip_finish_output+0x66b/0x7f0 [ 8955.614919] [<ffffffff814c5128>] ip_output+0x88/0x90 [ 8955.614919] [<ffffffff814c0d41>] ip_forward_finish+0x61/0x80 [ 8955.614919] [<ffffffff814c10fe>] ip_forward+0x39e/0x430 [ 8955.614919] [<ffffffff814bef2c>] ip_rcv_finish+0x7c/0x320 [ 8955.614919] [<ffffffff814bf86c>] ip_rcv+0x2dc/0x3f0 [ 8955.614919] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [ 8955.614919] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [ 8955.614919] [<ffffffff81474878>] netif_receive_skb_internal+0x28/0x90 [ 8955.614919] [<ffffffff814e7cee>] ? tcp4_gro_complete+0x6e/0x70 [ 8955.614919] [<ffffffff814749dc>] napi_gro_complete+0x9c/0xd0 [ 8955.614919] [<ffffffff81474c0f>] dev_gro_receive+0x1ff/0x300 [ 8955.614919] [<ffffffff81475224>] napi_gro_receive+0x34/0x100 [ 8955.614919] [<ffffffff81507e07>] gro_cell_poll+0x77/0xb0 [ 8955.614919] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [ 8955.614919] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 8955.614919] [<ffffffff81053205>] irq_exit+0x95/0xa0 [ 8955.614919] [<ffffffff810046f2>] do_IRQ+0x62/0x110 [ 8955.614919] [<ffffffff8161f26d>] common_interrupt+0x6d/0x6d [ 8955.614919] <EOI> [ 8955.614919] [ 8955.614919] [<ffffffff810b1923>] ? tick_nohz_idle_exit+0x123/0x1a0 [ 8955.614919] [<ffffffff810b196d>] ? tick_nohz_idle_exit+0x16d/0x1a0 [ 8955.614919] [<ffffffff810844c7>] cpu_startup_entry+0x137/0x330 [ 8955.614919] [<ffffffff81610332>] rest_init+0x72/0x80 [ 8955.614919] [<ffffffff81ad8062>] start_kernel+0x422/0x42f [ 8955.614919] [<ffffffff81ad7a2d>] ? set_init_arg+0x58/0x58 [ 8955.614919] [<ffffffff81ad7117>] ? early_idt_handlers+0x117/0x120 [ 8955.614919] [<ffffffff81ad75cc>] x86_64_start_reservations+0x2a/0x2c [ 8955.614919] [<ffffffff81ad7714>] x86_64_start_kernel+0x146/0x155 [ 8955.614919] Code: 00 4c 89 d0 48 8b 5d d8 4c 8b 65 e0 4c 8b 6d e8 4c 8b 75 f0 4c 8b 7d f8 c9 c3 0f 1f 40 00 49 63 44 24 20 49 8b 3c 24 48 8d 4a 01 <49> 8b 1c 02 4c 89 d0 65 48 0f c7 0f 0f 94 c0 84 c0 0f 84 56 ff [ 8955.614919] RIP [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 8955.614919] RSP <ffff88001fc03758>

Philipp Psurek

6:11 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Martin, hi Sven, hi all

it seems that vacation is over for our “attacker”. He’ll not let me sleep tonight …

here is the summary of last batadv_frag_merge_packets messages:

# crash 1 batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 6144, entry->size: 6638, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 53427, pkt->total_size: 16338 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56866, pkt->total_size: 1464

# crash 2 batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 16640, entry->size: 3512, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 33848, pkt->total_size: 14578 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56874, pkt->total_size: 1464 batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 16384, entry->size: 3512, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 33848, pkt->total_size: 14578 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56875, pkt->total_size: 1464

# crash 3 (this crash) batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 47872, entry->size: 5511, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 8302, pkt->total_size: 39971 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56880, pkt->total_size: 1464

Do you need the backtraces? ;-)

Best regards an happy hacking

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux DUMPFILE: vmcore_20141130185240 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 00:58:42 LOAD AVERAGE: 0.19, 0.25, 0.25 TASKS: 139 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "" PID: 0 COMMAND: "swapper/0" TASK: ffffffff81a19480 [THREAD_INFO: ffffffff81a00000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 0 TASK: ffffffff81a19480 CPU: 0 COMMAND: "swapper/0" #0 [ffff88001fc03790] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc037f0] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc038c0] oops_end at ffffffff810060f8 #3 [ffff88001fc038f0] die at ffffffff81006593 #4 [ffff88001fc03920] do_general_protection at ffffffff8100341a #5 [ffff88001fc03950] general_protection at ffffffff81620388 [exception RIP: __kmalloc_node_track_caller+237] RIP: ffffffff8115c24d RSP: ffff88001fc03a08 RFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88001587bd00 RCX: 0000000000307c82 RDX: 0000000000307c81 RSI: 0000000000000000 RDI: 0000000000015900 RBP: ffff88001fc03a48 R8: ffff88001fc15900 R9: ffff88000bd41000 R10: 0a01005e00000000 R11: ffff88001950bde0 R12: ffff88001f001400 R13: 00000000000007c0 R14: 00000000ffffffff R15: 0000000000010220 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #6 [ffff88001fc03a50] __kmalloc_reserve at ffffffff81464387 #7 [ffff88001fc03aa0] pskb_expand_head at ffffffff81465af7 #8 [ffff88001fc03af0] __pskb_pull_tail at ffffffff81466207 #9 [ffff88001fc03b40] dev_hard_start_xmit at ffffffff814762c2 #10 [ffff88001fc03ba0] __dev_queue_xmit at ffffffff81476798 #11 [ffff88001fc03bf0] dev_queue_xmit at ffffffff8147696b #12 [ffff88001fc03c00] ip_finish_output at ffffffff814c4608 #13 [ffff88001fc03c60] ip_output at ffffffff814c5128 #14 [ffff88001fc03c90] ip_forward_finish at ffffffff814c0d41 #15 [ffff88001fc03cb0] ip_forward at ffffffff814c10fe #16 [ffff88001fc03cf0] ip_rcv_finish at ffffffff814bef2c #17 [ffff88001fc03d20] ip_rcv at ffffffff814bf86c #18 [ffff88001fc03d60] __netif_receive_skb_core at ffffffff81474152 #19 [ffff88001fc03dd0] __netif_receive_skb at ffffffff81474691 #20 [ffff88001fc03df0] netif_receive_skb_internal at ffffffff81474878 #21 [ffff88001fc03e20] napi_gro_receive at ffffffff81475288 #22 [ffff88001fc03e50] gro_cell_poll at ffffffff81507e07 #23 [ffff88001fc03ea0] net_rx_action at ffffffff81474f31 #24 [ffff88001fc03f00] __do_softirq at ffffffff81052e28 #25 [ffff88001fc03f60] irq_exit at ffffffff81053205 #26 [ffff88001fc03f70] do_IRQ at ffffffff810046f2 --- <IRQ stack> --- #27 [ffffffff81a03dc8] ret_from_intr at ffffffff8161f26d [exception RIP: native_safe_halt+6] RIP: ffffffff8103fb16 RSP: ffffffff81a03e78 RFLAGS: 00000246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 00000000ffffffed RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffffff81a03e78 R8: 0000000000000000 R9: 0000000000000000 R10: 00000000000014e0 R11: 0000000000000293 R12: 0000000000000086 R13: 00000000000134c0 R14: 000000000000d460 R15: 0000000000000040 ORIG_RAX: ffffffffffffff8e CS: 0010 SS: 0018 #28 [ffffffff81a03e80] default_idle at ffffffff8100c6ef #29 [ffffffff81a03ea0] arch_cpu_idle at ffffffff8100cf9a #30 [ffffffff81a03eb0] cpu_startup_entry at ffffffff81084614 #31 [ffffffff81a03f10] rest_init at ffffffff81610332 #32 [ffffffff81a03f20] start_kernel at ffffffff81ad8062 #33 [ffffffff81a03f70] x86_64_start_reservations at ffffffff81ad75cc #34 [ffffffff81a03f80] x86_64_start_kernel at ffffffff81ad7714 crash> log […] [ 77.969379] tun: Universal TUN/TAP device driver, 1.6 [ 77.969383] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 78.974721] batman_adv: B.A.T.M.A.N. advanced 2014.3.0-44-g650251a-dirty (compatibility version 15) loaded [ 79.201904] batman_adv: bat0: Adding interface: fastd0 [ 79.201908] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.201918] batman_adv: bat0: Interface activated: fastd0 [ 79.210058] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 79.217144] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 79.222337] batman_adv: bat0: Changing gw mode from: off to: client [ 81.148969] ipip: IPv4 over IPv4 tunneling driver [ 85.746156] random: nonblocking pool is initialized [ 174.891042] batman_adv: bat0: Changing gw mode from: client to: server [ 174.891065] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 414.478142] crash (3158) used greatest stack depth: 11784 bytes left [ 431.791532] device eth0 entered promiscuous mode [ 564.949265] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 3396.272805] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3396.276540] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3396.293255] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3397.525103] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3399.559563] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3403.646348] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3411.810063] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3425.410958] UDP: bad checksum. From _._._._:34798 to _._._._:1024 ulen 1393 [ 3522.462842] batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 47872, entry->size: 5511, entry->total_size: 34816 [ 3522.462847] skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 8302, pkt->total_size: 39971 [ 3522.462849] skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56880, pkt->total_size: 1464 [ 3522.472116] general protection fault: 0000 [#1] SMP [ 3522.472287] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw intel_gtt gf128mul agpgart ablk_helper psmouse cryptd evdev mousedev [ 3522.472890] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G O 3.17.4-gentoo #1 [ 3522.473005] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3522.473005] task: ffffffff81a19480 ti: ffffffff81a00000 task.ti: ffffffff81a00000 [ 3522.473005] RIP: 0010:[<ffffffff8115c24d>] [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 3522.473005] RSP: 0018:ffff88001fc03a08 EFLAGS: 00010246 [ 3522.473005] RAX: 0000000000000000 RBX: ffff88001587bd00 RCX: 0000000000307c82 [ 3522.473005] RDX: 0000000000307c81 RSI: 0000000000000000 RDI: 0000000000015900 [ 3522.473005] RBP: ffff88001fc03a48 R08: ffff88001fc15900 R09: ffff88000bd41000 [ 3522.473005] R10: 0a01005e00000000 R11: ffff88001950bde0 R12: ffff88001f001400 [ 3522.473005] R13: 00000000000007c0 R14: 00000000ffffffff R15: 0000000000010220 [ 3522.473005] FS: 0000000000000000(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3522.473005] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 3522.473005] CR2: 00007f07b1ba3000 CR3: 000000001954c000 CR4: 00000000000006f0 [ 3522.473005] Stack: [ 3522.473005] ffff88001fc03a78 ffffffff81465af7 ffff88001fc03a48 ffff88001587bd00 [ 3522.473005] 0000000000000000 0000000000000020 00000000000007c0 00000000ffffffff [ 3522.473005] ffff88001fc03a98 ffffffff81464387 0000000000000000 0000000000000000 [ 3522.473005] Call Trace: [ 3522.473005] <IRQ> [ 3522.473005] [ 3522.473005] [<ffffffff81465af7>] ? pskb_expand_head+0x67/0x270 [ 3522.473005] [<ffffffff81464387>] __kmalloc_reserve.isra.58+0x37/0xa0 [ 3522.473005] [<ffffffff81465af7>] pskb_expand_head+0x67/0x270 [ 3522.473005] [<ffffffff81466207>] __pskb_pull_tail+0x47/0x320 [ 3522.473005] [<ffffffff814762c2>] dev_hard_start_xmit+0x3a2/0x580 [ 3522.473005] [<ffffffff814c4000>] ? ip_finish_output2+0x300/0x300 [ 3522.473005] [<ffffffff81476798>] __dev_queue_xmit+0x2f8/0x4b0 [ 3522.473005] [<ffffffff8147696b>] dev_queue_xmit+0xb/0x10 [ 3522.473005] [<ffffffff814c4608>] ip_finish_output+0x608/0x7f0 [ 3522.473005] [<ffffffff814c5128>] ip_output+0x88/0x90 [ 3522.473005] [<ffffffff814c0d41>] ip_forward_finish+0x61/0x80 [ 3522.473005] [<ffffffff814c10fe>] ip_forward+0x39e/0x430 [ 3522.473005] [<ffffffff814bef2c>] ip_rcv_finish+0x7c/0x320 [ 3522.473005] [<ffffffff814bf86c>] ip_rcv+0x2dc/0x3f0 [ 3522.473005] [<ffffffff81474152>] __netif_receive_skb_core+0x222/0x740 [ 3522.473005] [<ffffffff81474691>] __netif_receive_skb+0x21/0x70 [ 3522.473005] [<ffffffff81474878>] netif_receive_skb_internal+0x28/0x90 [ 3522.473005] [<ffffffff81475288>] napi_gro_receive+0x98/0x100 [ 3522.473005] [<ffffffff81507e07>] gro_cell_poll+0x77/0xb0 [ 3522.473005] [<ffffffff81474f31>] net_rx_action+0x141/0x240 [ 3522.473005] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 3522.473005] [<ffffffff81053205>] irq_exit+0x95/0xa0 [ 3522.473005] [<ffffffff810046f2>] do_IRQ+0x62/0x110 [ 3522.473005] [<ffffffff8161f26d>] common_interrupt+0x6d/0x6d [ 3522.473005] <EOI> [ 3522.473005] [ 3522.473005] [<ffffffff8103fb16>] ? native_safe_halt+0x6/0x10 [ 3522.473005] [<ffffffff8100c6ef>] default_idle+0x1f/0xb0 [ 3522.473005] [<ffffffff8100cf9a>] arch_cpu_idle+0xa/0x10 [ 3522.473005] [<ffffffff81084614>] cpu_startup_entry+0x284/0x330 [ 3522.473005] [<ffffffff81610332>] rest_init+0x72/0x80 [ 3522.473005] [<ffffffff81ad8062>] start_kernel+0x422/0x42f [ 3522.473005] [<ffffffff81ad7a2d>] ? set_init_arg+0x58/0x58 [ 3522.473005] [<ffffffff81ad7117>] ? early_idt_handlers+0x117/0x120 [ 3522.473005] [<ffffffff81ad75cc>] x86_64_start_reservations+0x2a/0x2c [ 3522.473005] [<ffffffff81ad7714>] x86_64_start_kernel+0x146/0x155 [ 3522.473005] Code: 00 4c 89 d0 48 8b 5d d8 4c 8b 65 e0 4c 8b 6d e8 4c 8b 75 f0 4c 8b 7d f8 c9 c3 0f 1f 40 00 49 63 44 24 20 49 8b 3c 24 48 8d 4a 01 <49> 8b 1c 02 4c 89 d0 65 48 0f c7 0f 0f 94 c0 84 c0 0f 84 56 ff [ 3522.473005] RIP [<ffffffff8115c24d>] __kmalloc_node_track_caller+0xed/0x1b0 [ 3522.473005] RSP <ffff88001fc03a08>

Philipp Psurek

6:35 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

hi all,

is there any possibility to prevent the VM from crash? Like ignore and drop the bogus package and move on to next package instead of kernel panic caused by general protection fault.

I know you are working hard on this bug but I really would like to move myself away from this unpleasant gateway; like doing other stuff, going outside, sleeping … . Can I somehow disable this “general protection“. Or is this this thing that protect the VM from running crazy and causing a disaster on data storage? Never mind ;-)

Best regards an happy hacking

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

Philipp Psurek

8:04 p.m.

New subject: [B.A.T.M.A.N.] [PATCH] batman-adv: Check size information when reassembling fragments

Hi Martin, hi Sven, hi all

this is my last report for now. I disable the gw mode and with that I disable the gateway for my community until you find the cure for this bug or a solution that prevents the VM from crash.

I'm waiting for some patches to test and glad to help you making Batman-adv better.

Best regards, good luck and happy hacking

Philipp

________________________ Freifunk Rheinland e. V. – Funkzelle Wuppertal –

# crash 3 batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 47872, entry->size: 5511, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 8302, pkt->total_size: 39971 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56880, pkt->total_size: 1464

# crash 4 (this crash) batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 29440, entry->size: 6664, entry->total_size: 34816 skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 53427, pkt->total_size: 16338 skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56883, pkt->total_size: 1464

KERNEL: /usr/src/linux-3.17.4-gentoo/vmlinux DUMPFILE: vmcore_20141130204653 CPUS: 1 DATE: Thu Jan 1 01:00:00 1970 UPTIME: 01:06:18 LOAD AVERAGE: 0.27, 0.37, 0.35 TASKS: 146 NODENAME: wolke RELEASE: 3.17.4-gentoo VERSION: #1 SMP Tue Nov 25 12:37:10 CET 2014 MACHINE: x86_64 (2593 Mhz) MEMORY: 511.6 MB PANIC: "Oops: 0002 [#1] SMP " (check log for details) PID: 0 COMMAND: "swapper/0" TASK: ffffffff81a19480 [THREAD_INFO: ffffffff81a00000] CPU: 0 STATE: TASK_RUNNING (PANIC)

crash> bt PID: 0 TASK: ffffffff81a19480 CPU: 0 COMMAND: "swapper/0" #0 [ffff88001fc03900] machine_kexec at ffffffff8103ab9e #1 [ffff88001fc03960] crash_kexec at ffffffff810bfa23 #2 [ffff88001fc03a30] oops_end at ffffffff810060f8 #3 [ffff88001fc03a60] no_context at ffffffff816133d9 #4 [ffff88001fc03ac0] __bad_area_nosemaphore at ffffffff816135d2 #5 [ffff88001fc03b10] bad_area_nosemaphore at ffffffff816135ff #6 [ffff88001fc03b20] __do_page_fault at ffffffff8104394e #7 [ffff88001fc03c30] trace_do_page_fault at ffffffff81043dc9 #8 [ffff88001fc03c60] do_async_page_fault at ffffffff8103f2d0 #9 [ffff88001fc03c80] async_page_fault at ffffffff81620418 [exception RIP: __ipv6_get_lladdr+51] RIP: ffffffff81538603 RSP: ffff88001fc03d38 RFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff88001a249c00 RCX: ffffffffffffff20 RDX: 0000000000000040 RSI: ffff88001fc03db8 RDI: ffff88001a249c08 RBP: ffff88001fc03d38 R8: ffff880019ce1600 R9: 0000000000000010 R10: ffff88000789c200 R11: 0000000000000004 R12: ffff88001a249d48 R13: ffff88001fc03db8 R14: 0000000000000040 R15: ffff880019ce1600 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #10 [ffff88001fc03d40] ipv6_get_lladdr at ffffffff81538687 #11 [ffff88001fc03d70] igmp6_send at ffffffff81552b62 #12 [ffff88001fc03e40] igmp6_timer_handler at ffffffff815532c4 #13 [ffff88001fc03e60] call_timer_fn at ffffffff810a06aa #14 [ffff88001fc03ea0] run_timer_softirq at ffffffff810a1f06 #15 [ffff88001fc03f20] __do_softirq at ffffffff81052e28 #16 [ffff88001fc03f80] irq_exit at ffffffff81053205 #17 [ffff88001fc03f90] smp_apic_timer_interrupt at ffffffff810353a5 #18 [ffff88001fc03fb0] apic_timer_interrupt at ffffffff8161f5dd --- <IRQ stack> --- #19 [ffffffff81a03dc8] apic_timer_interrupt at ffffffff8161f5dd [exception RIP: native_safe_halt+6] RIP: ffffffff8103fb16 RSP: ffffffff81a03e78 RFLAGS: 00000246 RAX: 0000000000000000 RBX: ffffffff81078438 RCX: 0000000000000000 RDX: 00000000ffffffed RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffffff81a03e78 R8: 0000000000000000 R9: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 00000000000134c0 R14: ffff88001fc134c0 R15: 00000000002cfe32 ORIG_RAX: ffffffffffffff10 CS: 0010 SS: 0018 #20 [ffffffff81a03e80] default_idle at ffffffff8100c6ef #21 [ffffffff81a03ea0] arch_cpu_idle at ffffffff8100cf9a #22 [ffffffff81a03eb0] cpu_startup_entry at ffffffff81084614 #23 [ffffffff81a03f10] rest_init at ffffffff81610332 #24 [ffffffff81a03f20] start_kernel at ffffffff81ad8062 #25 [ffffffff81a03f70] x86_64_start_reservations at ffffffff81ad75cc #26 [ffffffff81a03f80] x86_64_start_kernel at ffffffff81ad7714 crash> log […] [ 116.526414] tun: Universal TUN/TAP device driver, 1.6 [ 116.526418] tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com [ 117.741001] batman_adv: B.A.T.M.A.N. advanced 2014.3.0-44-g650251a-dirty (compatibility version 15) loaded [ 117.972571] batman_adv: bat0: Adding interface: fastd0 [ 117.972575] batman_adv: bat0: The MTU of interface fastd0 is too small (1426) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.972585] batman_adv: bat0: Interface activated: fastd0 [ 117.980597] batman_adv: bat0: orig_interval: Changing from: 1000 to: 5000 [ 117.987731] batman_adv: bat0: bridge_loop_avoidance: Changing from: disabled to: enabled [ 117.992837] batman_adv: bat0: Changing gw mode from: off to: client [ 119.746177] ipip: IPv4 over IPv4 tunneling driver [ 125.701698] device eth0 entered promiscuous mode [ 394.683027] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. [ 1124.325800] batman_adv: bat0: Changing gw mode from: client to: server [ 1124.325820] batman_adv: bat0: Changing gateway bandwidth from: '10.0/2.0 MBit' to: '90.0/90.0 MBit' [ 1370.029803] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1370.029816] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1370.029830] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1373.090107] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1379.088082] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1391.091942] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 1414.590995] UDP: bad checksum. From _._._._:33784 to _._._._:1024 ulen 1392 [ 3972.942228] batadv_frag_merge_packets: i: 1, size: 1380, entry->seqno: 29440, entry->size: 6664, entry->total_size: 34816 [ 3972.942233] skb->len: 84, skb->tailroom: 522, pkt->pkt_type: 64, pkt->version: 15, pkt->no: 0, pkt->seqno: 53427, pkt->total_size: 16338 [ 3972.942234] skb->len: 1400, skb->tailroom: 250, pkt->pkt_type: 65, pkt->version: 15, pkt->no: 0, pkt->seqno: 56883, pkt->total_size: 1464 [ 3973.803619] BUG: unable to handle kernel NULL pointer dereference at (null) [ 3973.803853] IP: [<ffffffff8146ae3b>] __skb_recv_datagram+0x39b/0x4f0 [ 3973.804009] PGD 19e8b067 PUD 19e8c067 PMD 0 [ 3973.804009] Oops: 0002 [#1] SMP [ 3973.804009] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt agpgart ablk_helper psmouse cryptd mousedev evdev [ 3973.804009] CPU: 0 PID: 1817 Comm: fastd Tainted: G O 3.17.4-gentoo #1 [ 3973.804009] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3973.804009] task: ffff880019cc69c0 ti: ffff880019e9c000 task.ti: ffff880019e9c000 [ 3973.804009] RIP: 0010:[<ffffffff8146ae3b>] [<ffffffff8146ae3b>] __skb_recv_datagram+0x39b/0x4f0 [ 3973.804009] RSP: 0018:ffff880019e9fad8 EFLAGS: 00010046 [ 3973.804009] RAX: 0000000000000282 RBX: ffff88001a087600 RCX: ffff880019d30810 [ 3973.804009] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffff880019d30824 [ 3973.804009] RBP: ffff880019e9fb98 R08: ffff880019e9fbf4 R09: 0000000000000000 [ 3973.804009] R10: 0000000000000000 R11: ffff880019cc69c0 R12: 0000000000000000 [ 3973.804009] R13: ffff880019d30780 R14: ffff880019d30810 R15: ffff880019e9fbec [ 3973.804009] FS: 00007f2dc291e700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3973.804009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3973.804009] CR2: 0000000000000000 CR3: 0000000019e8a000 CR4: 00000000000006f0 [ 3973.804009] Stack: [ 3973.804009] ffff880019e9fc18 ffffffff814ec033 ffff880019e9fb68 ffff880019e9fb60 [ 3973.804009] ffff880019cc69c0 ffff880019e9ffd8 0000000000000000 ffff880019e9fbf4 [ 3973.804009] ffff880019e9fb58 ffff880019e9fbf0 ffff880019d30824 0000004000000040 [ 3973.804009] Call Trace: [ 3973.804009] [<ffffffff814ec033>] ? udp_sendmsg+0x2d3/0x990 [ 3973.804009] [<ffffffff814ecb89>] udp_recvmsg+0x149/0x440 [ 3973.804009] [<ffffffff814f8126>] inet_recvmsg+0x66/0x80 [ 3973.804009] [<ffffffff8145c2a8>] sock_recvmsg+0xa8/0xe0 [ 3973.804009] [<ffffffff814ed0cf>] ? udp_poll+0x1f/0xa0 [ 3973.804009] [<ffffffff8145ae5d>] ___sys_recvmsg+0x10d/0x2a0 [ 3973.804009] [<ffffffff811a0eef>] ? ep_send_events_proc+0x9f/0x1b0 [ 3973.804009] [<ffffffff811a0b19>] ? ep_scan_ready_list.isra.11+0x199/0x1c0 [ 3973.804009] [<ffffffff811a0c36>] ? ep_poll+0xd6/0x2f0 [ 3973.804009] [<ffffffff8107f0f3>] ? pick_next_task_fair+0x443/0x450 [ 3973.804009] [<ffffffff81059bfa>] ? recalc_sigpending+0x1a/0x60 [ 3973.804009] [<ffffffff8105a842>] ? __set_task_blocked+0x32/0x80 [ 3973.804009] [<ffffffff8145d4c4>] __sys_recvmsg+0x44/0x80 [ 3973.804009] [<ffffffff8145d50d>] SyS_recvmsg+0xd/0x20 [ 3973.804009] [<ffffffff8161e769>] system_call_fastpath+0x16/0x1b [ 3973.804009] Code: 9c 8c c1 ff e9 17 fd ff ff 41 83 ad a0 00 00 00 01 48 8b 0b 48 8b 53 08 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 89 51 08 <48> 89 0a e9 54 fd ff ff 41 f6 85 40 01 00 00 01 0f 85 9c 00 00 [ 3973.804009] RIP [<ffffffff8146ae3b>] __skb_recv_datagram+0x39b/0x4f0 [ 3973.804009] RSP <ffff880019e9fad8> [ 3973.804009] CR2: 0000000000000000 [ 3973.804009] ---[ end trace 77da04fc409d90f5 ]--- [ 3973.817696] batman_adv: bat0: Interface deactivated: fastd0 [ 3973.818280] batman_adv: bat0: Removing interface: fastd0 [ 3977.248946] BUG: unable to handle kernel NULL pointer dereference at (null) [ 3977.249013] IP: [<ffffffff8121ad30>] file_has_perm+0x40/0xa0 [ 3977.249013] PGD 0 [ 3977.249013] Oops: 0000 [#2] SMP [ 3977.249013] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt agpgart ablk_helper psmouse cryptd mousedev evdev [ 3977.249013] CPU: 0 PID: 3737 Comm: sudo Tainted: G D O 3.17.4-gentoo #1 [ 3977.249013] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3977.249013] task: ffff880016083db0 ti: ffff88001a238000 task.ti: ffff88001a238000 [ 3977.249013] RIP: 0010:[<ffffffff8121ad30>] [<ffffffff8121ad30>] file_has_perm+0x40/0xa0 [ 3977.249013] RSP: 0018:ffff88001a23beb8 EFLAGS: 00010286 [ 3977.249013] RAX: ffff880019c7a160 RBX: ffff880007840a80 RCX: 0000000000000000 [ 3977.249013] RDX: 0000000000000000 RSI: ffff880019cd1b00 RDI: 0000000000000001 [ 3977.249013] RBP: ffff88001a23bef8 R08: ffff880019cd1b00 R09: 00007fffdde64f40 [ 3977.249013] R10: 00007fffdde64e00 R11: 0000000000000297 R12: 0000000000000000 [ 3977.249013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3977.249013] FS: 00007f6c1113b700(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3977.249013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3977.249013] CR2: 0000000000000000 CR3: 0000000016127000 CR4: 00000000000006f0 [ 3977.249013] Stack: [ 3977.249013] 0000000000000001 ffff88001a2a2b00 0000000000000000 ffffffff8105a842 [ 3977.249013] 0000000000000006 ffff880019cd1b00 ffff880019cd1b00 0000000000000003 [ 3977.249013] ffff88001a23bf08 ffffffff8121ae2b ffff88001a23bf18 ffffffff81216981 [ 3977.249013] Call Trace: [ 3977.249013] [<ffffffff8105a842>] ? __set_task_blocked+0x32/0x80 [ 3977.249013] [<ffffffff8121ae2b>] selinux_file_fcntl+0x3b/0x80 [ 3977.249013] [<ffffffff81216981>] security_file_fcntl+0x11/0x20 [ 3977.249013] [<ffffffff81172974>] SyS_fcntl+0x54/0x5d0 [ 3977.249013] [<ffffffff8161e769>] system_call_fastpath+0x16/0x1b [ 3977.249013] Code: 6d f8 48 8b 4e 10 41 89 d4 48 8b 47 70 48 8b 96 c8 00 00 00 4c 8b 6e 20 c6 45 c0 01 8b 78 04 48 89 4d c8 48 8b 4e 18 48 89 4d d0 <8b> 32 39 fe 74 17 4c 8d 45 c0 b9 01 00 00 00 ba 08 00 00 00 e8 [ 3977.249013] RIP [<ffffffff8121ad30>] file_has_perm+0x40/0xa0 [ 3977.249013] RSP <ffff88001a23beb8> [ 3977.249013] CR2: 0000000000000000 [ 3977.270130] ---[ end trace 77da04fc409d90f6 ]--- [ 3977.270576] VFS: Close: file count is 0 [ 3977.535388] VFS: Close: file count is 0 [ 3977.719221] VFS: Close: file count is 0 [ 3977.719595] VFS: Close: file count is 0 [ 3977.719911] VFS: Close: file count is 0 [ 3978.995070] BUG: unable to handle kernel paging request at ffffffffffffff4e [ 3978.996026] IP: [<ffffffff81538603>] __ipv6_get_lladdr+0x33/0x70 [ 3978.996026] PGD 1a15067 PUD 1a17067 PMD 0 [ 3978.996026] Oops: 0000 [#3] SMP [ 3978.996026] Modules linked in: xt_nat iptable_nat nf_nat_ipv4 nf_nat ipip batman_adv(O) libcrc32c tun crc32c_intel aesni_intel aes_x86_64 glue_helper intel_agp lrw gf128mul intel_gtt agpgart ablk_helper psmouse cryptd mousedev evdev [ 3978.996026] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G D O 3.17.4-gentoo #1 [ 3978.996026] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2007 [ 3978.996026] task: ffffffff81a19480 ti: ffffffff81a00000 task.ti: ffffffff81a00000 [ 3978.996026] RIP: 0010:[<ffffffff81538603>] [<ffffffff81538603>] __ipv6_get_lladdr+0x33/0x70 [ 3978.996026] RSP: 0018:ffff88001fc03d38 EFLAGS: 00010282 [ 3978.996026] RAX: 0000000000000000 RBX: ffff88001a249c00 RCX: ffffffffffffff20 [ 3978.996026] RDX: 0000000000000040 RSI: ffff88001fc03db8 RDI: ffff88001a249c08 [ 3978.996026] RBP: ffff88001fc03d38 R08: ffff880019ce1600 R09: 0000000000000010 [ 3978.996026] R10: ffff88000789c200 R11: 0000000000000004 R12: ffff88001a249d48 [ 3978.996026] R13: ffff88001fc03db8 R14: 0000000000000040 R15: ffff880019ce1600 [ 3978.996026] FS: 0000000000000000(0000) GS:ffff88001fc00000(0000) knlGS:0000000000000000 [ 3978.996026] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [ 3978.996026] CR2: ffffffffffffff4e CR3: 0000000019c4d000 CR4: 00000000000006f0 [ 3978.996026] Stack: [ 3978.996026] ffff88001fc03d68 ffffffff81538687 ffff8800156b6100 ffff88001f26e000 [ 3978.996026] ffff880019cf3740 ffffffff81a88080 ffff88001fc03e38 ffffffff81552b62 [ 3978.996026] ffff88001fc03da8 ffffffff81078145 ffff88001fc03d98 ffff880019ce1600 [ 3978.996026] Call Trace: [ 3978.996026] <IRQ> [ 3978.996026] [ 3978.996026] [<ffffffff81538687>] ipv6_get_lladdr+0x47/0x70 [ 3978.996026] [<ffffffff81552b62>] igmp6_send+0x112/0x420 [ 3978.996026] [<ffffffff81078145>] ? sched_clock_local+0x25/0xa0 [ 3978.996026] [<ffffffff81077bc0>] ? __update_cpu_load+0xc0/0x110 [ 3978.996026] [<ffffffff81553250>] ? igmp6_group_added+0x1c0/0x1c0 [ 3978.996026] [<ffffffff815532c4>] igmp6_timer_handler+0x74/0x80 [ 3978.996026] [<ffffffff810a06aa>] call_timer_fn+0x3a/0x100 [ 3978.996026] [<ffffffff81553250>] ? igmp6_group_added+0x1c0/0x1c0 [ 3978.996026] [<ffffffff810a1f06>] run_timer_softirq+0x206/0x2e0 [ 3978.996026] [<ffffffff81052e28>] __do_softirq+0xe8/0x280 [ 3978.996026] [<ffffffff81053205>] irq_exit+0x95/0xa0 [ 3978.996026] [<ffffffff810353a5>] smp_apic_timer_interrupt+0x45/0x60 [ 3978.996026] [<ffffffff8161f5dd>] apic_timer_interrupt+0x6d/0x80 [ 3978.996026] <EOI> [ 3978.996026] [ 3978.996026] [<ffffffff81078438>] ? sched_clock_cpu+0x98/0xd0 [ 3978.996026] [<ffffffff8103fb16>] ? native_safe_halt+0x6/0x10 [ 3978.996026] [<ffffffff8100c6ef>] default_idle+0x1f/0xb0 [ 3978.996026] [<ffffffff8100cf9a>] arch_cpu_idle+0xa/0x10 [ 3978.996026] [<ffffffff81084614>] cpu_startup_entry+0x284/0x330 [ 3978.996026] [<ffffffff81610332>] rest_init+0x72/0x80 [ 3978.996026] [<ffffffff81ad8062>] start_kernel+0x422/0x42f [ 3978.996026] [<ffffffff81ad7a2d>] ? set_init_arg+0x58/0x58 [ 3978.996026] [<ffffffff81ad7117>] ? early_idt_handlers+0x117/0x120 [ 3978.996026] [<ffffffff81ad75cc>] x86_64_start_reservations+0x2a/0x2c [ 3978.996026] [<ffffffff81ad7714>] x86_64_start_kernel+0x146/0x155 [ 3978.996026] Code: 08 48 89 e5 48 39 c7 48 8d 88 20 ff ff ff 75 1b eb 46 66 0f 1f 44 00 00 48 8b 81 e8 00 00 00 48 39 c7 48 8d 88 20 ff ff ff 74 2d <0f> b7 80 4e ff ff ff 66 83 f8 20 77 20 66 83 f8 20 75 da 85 51 [ 3978.996026] RIP [<ffffffff81538603>] __ipv6_get_lladdr+0x33/0x70 [ 3978.996026] RSP <ffff88001fc03d38> [ 3978.996026] CR2: ffffffffffffff4e

3455

Age (days ago)

3460

Last active (days ago)

b.a.t.m.a.n@lists.open-mesh.org

13 comments

4 participants

tags (0)

participants (4)

Christian Huldt
Martin Hundebøll
Philipp Psurek
Sven Eckelmann