Public bug reported: When a packet is forwarded through an Ubuntu Focal host with kernel version 5.4.0-62-generic and NFQUEUE target is used in mangle PREROUTING and POSTROUTING, the kernel crashes.
[ 856.055991] general protection fault: 0000 [#1] SMP PTI [ 856.151292] CPU: 0 PID: 722 Comm: nfq-cpp Kdump: loaded Tainted: G W 5.4.0-62-generic #70-Ubuntu [ 856.152503] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006 [ 856.153448] RIP: 0010:validate_xmit_skb_list+0x34/0x70 [ 856.154058] Code: 57 41 56 41 55 41 54 53 48 85 ff 74 45 49 89 ff 49 89 f4 49 89 d5 45 31 f6 eb 0c 48 89 03 48 8b 58 08 4d 85 ff 74 2e 4c 89 ff <4d> 8b 3f 4c 89 ea 4c 89 e6 48 c7 07 00 00 00 00 48 89 7f 08 e8 73 [ 856.156228] RSP: 0018:ffffa061404776d8 EFLAGS: 00010286 [ 856.156868] RAX: ffff8d1c2fa6d900 RBX: ffff8d1c2fa6d900 RCX: ffffffff9f32fd20 [ 856.157715] RDX: ffffa0614047771b RSI: 000000800013ca29 RDI: dead000000000100 [ 856.361073] RBP: ffffa06140477700 R08: ffff8d1c2fd6a8ac R09: 0000000000000001 [ 856.543925] R10: ffff8d1c30373870 R11: ffffa061404779f8 R12: ffff8d1c29afb000 [ 856.544761] R13: ffffa0614047771b R14: ffff8d1c2fa6d900 R15: dead000000000100 [ 856.545586] FS: 00007fd887366740(0000) GS:ffff8d1c3fc00000(0000) knlGS:0000000000000000 [ 856.546514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.547206] CR2: 00007ffcbb2be8d8 CR3: 000000006cace001 CR4: 00000000000606f0 [ 856.548029] Call Trace: [ 856.548349] sch_direct_xmit+0x150/0x340 [ 856.548824] __dev_queue_xmit+0x57b/0x8e0 [ 856.549353] dev_queue_xmit+0x10/0x20 [ 856.549841] neigh_resolve_output+0x110/0x1c0 [ 856.550426] ip_finish_output2+0x19b/0x590 [ 856.550990] ? nf_ct_del_from_dying_or_unconfirmed_list+0x34/0x70 [nf_conntrack] [ 856.551929] __ip_finish_output+0xbf/0x1e0 [ 856.552464] ip_finish_output+0x2d/0xb0 [ 856.552972] nf_reinject+0x12e/0x200 [ 856.553452] nfqnl_reinject+0x52/0x60 [nfnetlink_queue] [ 856.554110] nfqnl_recv_verdict+0x289/0x4b0 [nfnetlink_queue] [ 856.554826] ? __nla_validate_parse+0x116/0x140 [ 856.555409] nfnetlink_rcv_msg+0x172/0x2a0 [nfnetlink] [ 856.556062] ? __switch_to_asm+0x40/0x70 [ 856.556579] ? __switch_to_asm+0x34/0x70 [ 856.681025] ? __switch_to_asm+0x40/0x70 [ 856.811662] ? __switch_to_asm+0x34/0x70 [ 856.812216] ? __switch_to_asm+0x40/0x70 [ 856.812770] ? __switch_to_asm+0x34/0x70 [ 856.813324] ? __switch_to_asm+0x40/0x70 [ 856.813879] ? __switch_to_asm+0x34/0x70 [ 856.814434] ? __switch_to_asm+0x40/0x70 [ 856.815009] ? __switch_to_asm+0x34/0x70 [ 856.815567] ? nfnetlink_net_exit_batch+0x70/0x70 [nfnetlink] [ 856.816327] netlink_rcv_skb+0x50/0x120 [ 856.816859] nfnetlink_rcv+0x6c/0x14b [nfnetlink] [ 856.817463] netlink_unicast+0x187/0x220 [ 856.817982] netlink_sendmsg+0x222/0x3e0 [ 856.818502] sock_sendmsg+0x65/0x70 [ 856.818973] ____sys_sendmsg+0x212/0x280 [ 856.819491] ___sys_sendmsg+0x88/0xd0 [ 856.820020] ? sock_recvmsg+0x70/0x80 [ 856.831151] ? __sys_recvfrom+0x19e/0x1d0 [ 856.831715] __sys_sendmsg+0x5c/0xa0 [ 856.832197] __x64_sys_sendmsg+0x1f/0x30 [ 856.832716] do_syscall_64+0x57/0x190 [ 856.833207] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 856.833848] RIP: 0033:0x7fd8875e7747 [ 856.834331] Code: 64 89 02 48 c7 c0 ff ff ff ff eb bb 0f 1f 80 00 00 00 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10 [ 856.836582] RSP: 002b:00007ffcbb2be708 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.837563] RAX: ffffffffffffffda RBX: 00007ffcbb2be7b0 RCX: 00007fd8875e7747 [ 856.838452] RDX: 0000000000000000 RSI: 00007ffcbb2be720 RDI: 0000000000000003 [ 856.839319] RBP: 0000000000000000 R08: 0000000000000020 R09: 0000000000000301 [ 856.840276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.841177] R13: 000055555ca98538 R14: 0000000000000000 R15: 0000000000000000 [ 856.842044] Modules linked in: xt_NFQUEUE xt_state xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_tcpudp iptable_mangle bpfilter nfnetlink_queue nfnetlink binfmt_misc nls_iso8859_1 dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua input_leds serio_raw video sch_fq_codel drm ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper ahci psmouse libahci virtio_net net_failover failover ProblemType: Bug DistroRelease: Ubuntu 20.04 Package: linux-image-5.4.0-62-generic 5.4.0-62.70 ProcVersionSignature: Ubuntu 5.4.0-62.70-generic 5.4.78 Uname: Linux 5.4.0-62-generic x86_64 AlsaDevices: total 0 crw-rw---- 1 root audio 116, 1 Jan 15 14:52 seq crw-rw---- 1 root audio 116, 33 Jan 15 14:52 timer AplayDevices: Error: [Errno 2] No such file or directory: 'aplay' ApportVersion: 2.20.11-0ubuntu27.14 Architecture: amd64 ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord' AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1: CRDA: N/A CasperMD5CheckResult: skip Date: Fri Jan 15 14:53:47 2021 IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig' Lsusb: Error: command ['lsusb'] failed with exit code 1: Lsusb-t: Lsusb-v: Error: command ['lsusb', '-v'] failed with exit code 1: MachineType: innotek GmbH VirtualBox PciMultimedia: ProcEnviron: TERM=xterm-256color PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash ProcFB: ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.4.0-62-generic root=PARTUUID=ea3c4873-158d-4149-ae23-45fbb3fd5869 ro console=tty1 console=ttyS0 crashkernel=512M-:192M RelatedPackageVersions: linux-restricted-modules-5.4.0-62-generic N/A linux-backports-modules-5.4.0-62-generic N/A linux-firmware N/A RfKill: Error: [Errno 2] No such file or directory: 'rfkill' SourcePackage: linux UpgradeStatus: No upgrade log present (probably fresh install) dmi.bios.date: 12/01/2006 dmi.bios.vendor: innotek GmbH dmi.bios.version: VirtualBox dmi.board.name: VirtualBox dmi.board.vendor: Oracle Corporation dmi.board.version: 1.2 dmi.chassis.type: 1 dmi.chassis.vendor: Oracle Corporation dmi.modalias: dmi:bvninnotekGmbH:bvrVirtualBox:bd12/01/2006:svninnotekGmbH:pnVirtualBox:pvr1.2:rvnOracleCorporation:rnVirtualBox:rvr1.2:cvnOracleCorporation:ct1:cvr: dmi.product.family: Virtual Machine dmi.product.name: VirtualBox dmi.product.version: 1.2 dmi.sys.vendor: innotek GmbH ** Affects: linux (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug focal ** Attachment added: "Crash dmesg output" https://bugs.launchpad.net/bugs/1911917/+attachment/5453502/+files/dmesg.202101151448 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1911917 Title: Kernel general protection fault when using NFQUEUE iptables target To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1911917/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs