Tengo un host de virtualizacion con Debian 9.4 corriendo Xen 4.8 con kernel 4.15.0-0.bpo.2-amd64 y anda de maravillas, no tengo errores en el syslog y otras maquinas virutales dentro anda barbaro...
Ahora bien! Instale otro Debian 9.4, el cual estoy utilizando como servidor de Bastion (entre LAN y DMZ) que funciona con Shorewall 5.0.15.6 y Proxy con Squid 3.5.23, pero me esta tirando estos errores y no puedo dar cual es la causa! Podrian orientarme como para reportar el bug a Debian, jamas hice un reporte de bug, pero ya esto me esta volviendo loco! Les dejo el call trace entero: Apr 23 13:10:01 proxy kernel: [149936.205895] NMI watchdog: BUG: soft lockup - CPU#6 stuck for 22s! [ext_ldap_group_:2357] Apr 23 13:10:01 proxy kernel: [149936.205895] Modules linked in: binfmt_misc nfnetlink_queue bluetooth rfkill dummy xt_limit xt_nat xt_recent xt_comment iptable_nat nf_nat_ipv4 ipt_REJECT nf_reject_ipv4 xt_addrtype xt_mark iptable_mangle xt_tcpudp xt_CT iptable_raw xt_multiport nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack xt_NFLOG nfnetlink_log xt_LOG nf_log_ipv4 nf_log_common nf_nat_tftp nf_nat_snmp_basic nf_conntrack_snmp nf_nat_sip nf_nat_pptp nf_nat_proto_gre nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda ts_kmp nf_conntrack_amanda nf_nat nf_conntrack_sane nf_conntrack_tftp nf_conntrack_sip nf_conntrack_proto_udplite nf_conntrack_proto_sctp nf_conntrack_pptp nf_conntrack_proto_gre nf_conntrack_netlink nfnetlink nf_conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack iptable_filter Apr 23 13:10:01 proxy kernel: [149936.205895] tun intel_rapl sb_edac edac_core x86_pkg_temp_thermal coretemp crct10dif_pclmul crc32_pclmul ghash_clmulni_intel evdev joydev pcspkr intel_rapl_perf ip_tables x_tables autofs4 ext4 crc16 jbd2 crc32c_generic fscrypto ecb mbcache xen_netfront xen_blkfront crc32c_intel aesni_intel aes_x86_64 glue_helper lrw gf128mul ablk_helper cryptd Apr 23 13:10:01 proxy kernel: [149936.205895] CPU: 6 PID: 2357 Comm: ext_ldap_group_ Tainted: G L 4.9.0-6-amd64 #1 Debian 4.9.82-1+deb9u3 Apr 23 13:10:01 proxy kernel: [149936.205895] task: ffff8803e7064080 task.stack: ffffc90041c80000 Apr 23 13:10:01 proxy kernel: [149936.205895] RIP: e030:[<ffffffff8100122a>] [<ffffffff8100122a>] xen_hypercall_xen_version+0xa/0x20 Apr 23 13:10:01 proxy kernel: [149936.205895] RSP: e02b:ffffc90041c837a0 EFLAGS: 00000246 Apr 23 13:10:01 proxy kernel: [149936.205895] RAX: 0000000000040008 RBX: ffff8803ebf3e8dc RCX: ffffffff8100122a Apr 23 13:10:01 proxy kernel: [149936.205895] RDX: 00000000197e6727 RSI: 0000000000000000 RDI: 0000000000000000 Apr 23 13:10:01 proxy kernel: [149936.205895] RBP: 0000000000000000 R08: ffff880001f67000 R09: 00000000197e6680 Apr 23 13:10:01 proxy kernel: [149936.205895] R10: 00000000197e6727 R11: 0000000000000246 R12: 00000000000000f6 Apr 23 13:10:01 proxy kernel: [149936.205895] R13: 00000000001f4a6e R14: 0000000000000007 R15: 0000000000000006 Apr 23 13:10:01 proxy kernel: [149936.205895] FS: 00007f6f14db4480(0000) GS:ffff8803eb980000(0000) knlGS:0000000000000000 Apr 23 13:10:01 proxy kernel: [149936.205895] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033 Apr 23 13:10:01 proxy kernel: [149936.205895] CR2: 00005627dd324000 CR3: 00000003e5f10000 CR4: 0000000000042660 Apr 23 13:10:01 proxy kernel: [149936.205895] Stack: Apr 23 13:10:01 proxy kernel: [149936.205895] ffff8803e4a39600 ffffc90041c8379e ffffffff8101b8c9 ffffffff8101bf52 Apr 23 13:10:01 proxy kernel: [149936.205895] ffff8803e4a39600 00000000197e6727 00000000197e6680 ffff880001f67000 Apr 23 13:10:01 proxy kernel: [149936.205895] 0000000000000200 ffffc90041c8375c 00000000197e6727 ffffc90041c8379e Apr 23 13:10:01 proxy kernel: [149936.205895] Call Trace: Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8101b8c9>] ? xen_force_evtchn_callback+0x9/0x10 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8101bf52>] ? check_events+0x12/0x20 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8101bf3f>] ? xen_restore_fl_direct_reloc+0x4/0x4 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff810ce8db>] ? console_unlock+0x24b/0x610 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff810cefb6>] ? vprintk_emit+0x316/0x4d0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff810c02e0>] ? cpuacct_stats_show+0x90/0x100 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8117d2f3>] ? printk+0x5a/0x76 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81544380>] ? nf_log_buf_close+0x20/0x50 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81543e1d>] ? nf_log_packet+0xdd/0x120 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc019ce9b>] ? nf_conntrack_tuple_taken+0x5b/0x200 [nf_conntrack] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc0216928>] ? get_unique_tuple+0x128/0x650 [nf_nat] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81610f66>] ? _raw_spin_unlock_irqrestore+0x16/0x20 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff811e2e24>] ? __kmalloc+0xe4/0x560 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8107cebd>] ? __local_bh_enable_ip+0x1d/0x80 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc01a437c>] ? tcp_packet+0x76c/0x1600 [nf_conntrack] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc0295077>] ? log_tg+0x67/0x90 [xt_LOG] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc006ee36>] ? ipt_do_table+0x306/0x620 [ip_tables] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc02f4050>] ? iptable_nat_ipv4_fn+0x20/0x20 [iptable_nat] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffffc0217207>] ? __nf_nat_alloc_null_binding+0x57/0x80 [nf_nat] Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81543654>] ? nf_iterate+0x54/0x60 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff815436c7>] ? nf_hook_slow+0x67/0xc0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8154fc13>] ? __ip_local_out+0xe3/0x150 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8154dcf0>] ? ip_forward_options+0x1b0/0x1b0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8154fc97>] ? ip_local_out+0x17/0x40 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81568640>] ? tcp_transmit_skb+0x510/0x970 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8156a0cf>] ? tcp_connect+0x64f/0x8a0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff814ff59d>] ? secure_tcp_sequence_number+0x7d/0xd0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff8156f651>] ? tcp_v4_connect+0x2c1/0x470 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81585cbc>] ? __inet_stream_connect+0xbc/0x300 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff811e386c>] ? kmem_cache_alloc+0x9c/0x530 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81585f33>] ? inet_stream_connect+0x33/0x50 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff814ebdd5>] ? SYSC_connect+0xc5/0xf0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff814e9367>] ? sock_alloc_file+0xa7/0x140 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff814ecab2>] ? SyS_setsockopt+0x82/0xf0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff81003b7f>] ? do_syscall_64+0x8f/0xf0 Apr 23 13:10:01 proxy kernel: [149936.205895] [<ffffffff816113b8>] ? entry_SYSCALL_64_after_swapgs+0x42/0xb0 Apr 23 13:10:01 proxy kernel: [149936.205895] Code: cc 51 41 53 b8 10 00 00 00 0f 05 41 5b 59 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 51 41 53 b8 11 00 00 00 0f 05 <41> 5b 59 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Apr 23 13:10:01 proxy kernel: [149936.349716] INFO: rcu_sched self-detected stall on CPU Apr 23 13:10:01 proxy kernel: [149936.349719] 6-...: (8854 ticks this GP) idle=187/140000000000001/0 softirq=1262778/1262778 fqs=7817 Apr 23 13:10:01 proxy kernel: [149936.349721] (t=21005 jiffies g=6350228 c=6350227 q=26241) Apr 23 13:10:01 proxy kernel: [149936.349722] Task dump for CPU 6: Apr 23 13:10:01 proxy kernel: [149936.349724] ext_ldap_group_ R running task 0 2357 1536 0x00000008 Apr 23 13:10:01 proxy kernel: [149936.349726] ffffffff81d18cc0 ffffffff810a487b 0000000000000006 ffffffff81d18cc0 Apr 23 13:10:01 proxy kernel: [149936.349728] ffffffff8117d54b ffff8803eb999680 ffffffff81c4fc00 0000000000000000 Apr 23 13:10:01 proxy kernel: [149936.349730] ffffffff81d18cc0 00000000ffffffff ffffffff810e00ca 0000000000000000 Apr 23 13:10:01 proxy kernel: [149936.349730] Call Trace: Apr 23 13:10:01 proxy kernel: [149936.349736] <IRQ> Apr 23 13:10:01 proxy kernel: [149936.349736] [<ffffffff810a487b>] ? sched_show_task+0xcb/0x130 Apr 23 13:10:01 proxy kernel: [149936.349739] [<ffffffff8117d54b>] ? rcu_dump_cpu_stacks+0x92/0xb2 Apr 23 13:10:01 proxy kernel: [149936.349742] [<ffffffff810e00ca>] ? rcu_check_callbacks+0x75a/0x8b0 Apr 23 13:10:01 proxy kernel: [149936.349746] [<ffffffff810f6070>] ? tick_sched_handle.isra.12+0x50/0x50 Apr 23 13:10:01 proxy kernel: [149936.349748] [<ffffffff810e6c88>] ? update_process_times+0x28/0x50 Apr 23 13:10:01 proxy kernel: [149936.349749] [<ffffffff810f6040>] ? tick_sched_handle.isra.12+0x20/0x50 Apr 23 13:10:01 proxy kernel: [149936.349750] [<ffffffff810f60a8>] ? tick_sched_timer+0x38/0x70 Apr 23 13:10:01 proxy kernel: [149936.349752] [<ffffffff810e771e>] ? __hrtimer_run_queues+0xde/0x250 Apr 23 13:10:01 proxy kernel: [149936.349753] [<ffffffff810e7dfc>] ? hrtimer_interrupt+0x9c/0x1a0 Apr 23 13:10:01 proxy kernel: [149936.349756] [<ffffffff8101b98e>] ? xen_timer_interrupt+0x1e/0x30 Apr 23 13:10:01 proxy kernel: [149936.349760] [<ffffffff810d1dde>] ? __handle_irq_event_percpu+0x7e/0x1a0 Apr 23 13:10:01 proxy kernel: [149936.349761] [<ffffffff810d1f30>] ? handle_irq_event_percpu+0x30/0x70 Apr 23 13:10:01 proxy kernel: [149936.349763] [<ffffffff810d5f7a>] ? handle_percpu_irq+0x3a/0x60 Apr 23 13:10:01 proxy kernel: [149936.349765] [<ffffffff810d1137>] ? generic_handle_irq+0x27/0x30 Apr 23 13:10:01 proxy kernel: [149936.349768] [<ffffffff8140d597>] ? __evtchn_fifo_handle_events+0x187/0x1b0 Apr 23 13:10:01 proxy kernel: [149936.349769] [<ffffffff8140a222>] ? __xen_evtchn_do_upcall+0x42/0x80 Apr 23 13:10:01 proxy kernel: [149936.349771] [<ffffffff8140c2ec>] ? xen_evtchn_do_upcall+0x2c/0x40 Apr 23 13:10:01 proxy kernel: [149936.349772] [<ffffffff8161236e>] ? xen_do_hypervisor_callback+0x1e/0x40 Apr 23 13:10:01 proxy kernel: [149936.349775] <EOI> Apr 23 13:10:01 proxy kernel: [149936.349775] [<ffffffff8100122a>] ? xen_hypercall_xen_version+0xa/0x20 Apr 23 13:10:01 proxy kernel: [149936.349776] [<ffffffff8100122a>] ? xen_hypercall_xen_version+0xa/0x20 Apr 23 13:10:01 proxy kernel: [149936.349778] [<ffffffff8101b8c9>] ? xen_force_evtchn_callback+0x9/0x10 Apr 23 13:10:01 proxy kernel: [149936.349779] [<ffffffff8101bf52>] ? check_events+0x12/0x20 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8101bf3f>] ? xen_restore_fl_direct_reloc+0x4/0x4 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff810ce8db>] ? console_unlock+0x24b/0x610 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff810cefb6>] ? vprintk_emit+0x316/0x4d0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff810c02e0>] ? cpuacct_stats_show+0x90/0x100 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8117d2f3>] ? printk+0x5a/0x76 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81544380>] ? nf_log_buf_close+0x20/0x50 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81543e1d>] ? nf_log_packet+0xdd/0x120 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc019ce9b>] ? nf_conntrack_tuple_taken+0x5b/0x200 [nf_conntrack] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc0216928>] ? get_unique_tuple+0x128/0x650 [nf_nat] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81610f66>] ? _raw_spin_unlock_irqrestore+0x16/0x20 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff811e2e24>] ? __kmalloc+0xe4/0x560 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8107cebd>] ? __local_bh_enable_ip+0x1d/0x80 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc01a437c>] ? tcp_packet+0x76c/0x1600 [nf_conntrack] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc0295077>] ? log_tg+0x67/0x90 [xt_LOG] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc006ee36>] ? ipt_do_table+0x306/0x620 [ip_tables] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc02f4050>] ? iptable_nat_ipv4_fn+0x20/0x20 [iptable_nat] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffffc0217207>] ? __nf_nat_alloc_null_binding+0x57/0x80 [nf_nat] Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81543654>] ? nf_iterate+0x54/0x60 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff815436c7>] ? nf_hook_slow+0x67/0xc0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8154fc13>] ? __ip_local_out+0xe3/0x150 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8154dcf0>] ? ip_forward_options+0x1b0/0x1b0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8154fc97>] ? ip_local_out+0x17/0x40 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81568640>] ? tcp_transmit_skb+0x510/0x970 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8156a0cf>] ? tcp_connect+0x64f/0x8a0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff814ff59d>] ? secure_tcp_sequence_number+0x7d/0xd0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff8156f651>] ? tcp_v4_connect+0x2c1/0x470 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81585cbc>] ? __inet_stream_connect+0xbc/0x300 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff811e386c>] ? kmem_cache_alloc+0x9c/0x530 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81585f33>] ? inet_stream_connect+0x33/0x50 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff814ebdd5>] ? SYSC_connect+0xc5/0xf0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff814e9367>] ? sock_alloc_file+0xa7/0x140 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff814ecab2>] ? SyS_setsockopt+0x82/0xf0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff81003b7f>] ? do_syscall_64+0x8f/0xf0 Apr 23 13:10:01 proxy kernel: [149936.349780] [<ffffffff816113b8>] ? entry_SYSCALL_64_after_swapgs+0x42/0xb0 Si me pueden orientar sobre la falla o bien ayudar a reportar el bug se los super agradezco! Saludos!
