Have an issue! I runing Shorewall 5.0.15.6 on Debian 9.4 over Xen... When I put conntrak file and restart shorewall, have the following error or similar call trace with diferents tasks:
Apr 20 16:06:04 proxy kernel: [11934.459248] INFO: rcu_sched self-detected stall on CPU Apr 20 16:06:04 proxy kernel: [11934.459248] 3-...: (1 GPs behind) idle=281/140000000000001/0 softirq=281310/281311 fqs=2616 Apr 20 16:06:04 proxy kernel: [11934.459248] (t=5251 jiffies g=863760 c=863759 q=8428) Apr 20 16:06:04 proxy kernel: [11934.459248] Task dump for CPU 3: Apr 20 16:06:04 proxy kernel: [11934.459248] ext_ldap_group_ R running task 0 1510 1508 0x00000008 Apr 20 16:06:04 proxy kernel: [11934.459248] ffffffff81d18cc0 ffffffff810a487b 0000000000000003 ffffffff81d18cc0 Apr 20 16:06:04 proxy kernel: [11934.459248] ffffffff8117d54b ffff8803eb8d9680 ffffffff81c4fc00 0000000000000000 Apr 20 16:06:04 proxy kernel: [11934.459248] ffffffff81d18cc0 00000000ffffffff ffffffff810e00ca 0000000000000000 Apr 20 16:06:04 proxy kernel: [11934.459248] Call Trace: Apr 20 16:06:04 proxy kernel: [11934.459248] <IRQ> Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810a487b>] ? sched_show_task+0xcb/0x130 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8117d54b>] ? rcu_dump_cpu_stacks+0x92/0xb2 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810e00ca>] ? rcu_check_callbacks+0x75a/0x8b0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810f6070>] ? tick_sched_handle.isra.12+0x50/0x50 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810e6c88>] ? update_process_times+0x28/0x50 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810f6040>] ? tick_sched_handle.isra.12+0x20/0x50 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810f60a8>] ? tick_sched_timer+0x38/0x70 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810e771e>] ? __hrtimer_run_queues+0xde/0x250 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810e7dfc>] ? hrtimer_interrupt+0x9c/0x1a0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8101b98e>] ? xen_timer_interrupt+0x1e/0x30 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810d1dde>] ? __handle_irq_event_percpu+0x7e/0x1a0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810d1f30>] ? handle_irq_event_percpu+0x30/0x70 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810d5f7a>] ? handle_percpu_irq+0x3a/0x60 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810d1137>] ? generic_handle_irq+0x27/0x30 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8140d597>] ? __evtchn_fifo_handle_events+0x187/0x1b0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8140a222>] ? __xen_evtchn_do_upcall+0x42/0x80 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8140c2ec>] ? xen_evtchn_do_upcall+0x2c/0x40 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8161236e>] ? xen_do_hypervisor_callback+0x1e/0x40 Apr 20 16:06:04 proxy kernel: [11934.459248] <EOI> Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8100122a>] ? xen_hypercall_xen_version+0xa/0x20 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8100122a>] ? xen_hypercall_xen_version+0xa/0x20 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8101b8c9>] ? xen_force_evtchn_callback+0x9/0x10 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8101bf52>] ? check_events+0x12/0x20 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8101bf3f>] ? xen_restore_fl_direct_reloc+0x4/0x4 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810ce8db>] ? console_unlock+0x24b/0x610 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810cefb6>] ? vprintk_emit+0x316/0x4d0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff810c02e0>] ? cpuacct_stats_show+0x90/0x100 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8117d2f3>] ? printk+0x5a/0x76 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81544380>] ? nf_log_buf_close+0x20/0x50 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81543e1d>] ? nf_log_packet+0xdd/0x120 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8158d236>] ? inet_dev_addr_type+0xa6/0xf0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffffc0285077>] ? log_tg+0x67/0x90 [xt_LOG] Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffffc008ce36>] ? ipt_do_table+0x306/0x620 [ip_tables] Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffffc02de050>] ? iptable_nat_ipv4_fn+0x20/0x20 [iptable_nat] Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffffc021e207>] ? __nf_nat_alloc_null_binding+0x57/0x80 [nf_nat] Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81543654>] ? nf_iterate+0x54/0x60 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff815436c7>] ? nf_hook_slow+0x67/0xc0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8154fc13>] ? __ip_local_out+0xe3/0x150 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8154dcf0>] ? ip_forward_options+0x1b0/0x1b0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8154fc97>] ? ip_local_out+0x17/0x40 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81568640>] ? tcp_transmit_skb+0x510/0x970 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8156a0cf>] ? tcp_connect+0x64f/0x8a0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff814ff59d>] ? secure_tcp_sequence_number+0x7d/0xd0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff8156f651>] ? tcp_v4_connect+0x2c1/0x470 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81585cbc>] ? __inet_stream_connect+0xbc/0x300 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff811e386c>] ? kmem_cache_alloc+0x9c/0x530 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81585f33>] ? inet_stream_connect+0x33/0x50 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff814ebdd5>] ? SYSC_connect+0xc5/0xf0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff814e9367>] ? sock_alloc_file+0xa7/0x140 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff814ecab2>] ? SyS_setsockopt+0x82/0xf0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff81003b7f>] ? do_syscall_64+0x8f/0xf0 Apr 20 16:06:04 proxy kernel: [11934.459248] [<ffffffff816113b8>] ? entry_SYSCALL_64_after_swapgs+0x42/0xb0 If I delete the conntrak file, this error do not appear! Someone can help me? Tank U! ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
