Yonghong Song
13acc94eff
net: permit skb_segment on head_frag frag_list skb ...
One of our in-house projects, bpf-based NAT, hits a kernel BUG_ON at
function skb_segment(), line 3667. The bpf program attaches to
clsact ingress, calls bpf_skb_change_proto to change protocol
from ipv4 to ipv6 or from ipv6 to ipv4, and then calls bpf_redirect
to send the changed packet out.
3472 struct sk_buff *skb_segment(struct sk_buff *head_skb,
3473 netdev_features_t features)
3474 {
3475 struct sk_buff *segs = NULL;
3476 struct sk_buff *tail = NULL;
...
3665 while (pos < offset + len) {
3666 if (i >= nfrags) {
3667 BUG_ON(skb_headlen(list_skb));
3668
3669 i = 0;
3670 nfrags = skb_shinfo(list_skb)->nr_frags;
3671 frag = skb_shinfo(list_skb)->frags;
3672 frag_skb = list_skb;
...
call stack:
...
#1 [ffff883ffef03558] __crash_kexec at ffffffff8110c525
#2 [ffff883ffef03620] crash_kexec at ffffffff8110d5cc
#3 [ffff883ffef03640] oops_end at ffffffff8101d7e7
#4 [ffff883ffef03668] die at ffffffff8101deb2
#5 [ffff883ffef03698] do_trap at ffffffff8101a700
#6 [ffff883ffef036e8] do_error_trap at ffffffff8101abfe
#7 [ffff883ffef037a0] do_invalid_op at ffffffff8101acd0
#8 [ffff883ffef037b0] invalid_op at ffffffff81a00bab
[exception RIP: skb_segment+3044]
RIP: ffffffff817e4dd4 RSP: ffff883ffef03860 RFLAGS: 00010216
RAX: 0000000000002bf6 RBX: ffff883feb7aaa00 RCX: 0000000000000011
RDX: ffff883fb87910c0 RSI: 0000000000000011 RDI: ffff883feb7ab500
RBP: ffff883ffef03928 R8: 0000000000002ce2 R9: 00000000000027da
R10: 000001ea00000000 R11: 0000000000002d82 R12: ffff883f90a1ee80
R13: ffff883fb8791120 R14: ffff883feb7abc00 R15: 0000000000002ce2
ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
#9 [ffff883ffef03930] tcp_gso_segment at ffffffff818713e7
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-03-25 16:46:04 -04:00
2018-02-15 14:29:27 -08:00
2018-03-23 11:31:58 -04:00
2018-02-12 14:15:04 -05:00
2018-02-12 14:15:04 -05:00
2018-02-12 14:15:04 -05:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2018-02-01 07:43:56 -08:00
2018-03-23 12:41:14 -04:00
2018-03-05 10:48:27 -05:00
2018-03-22 11:11:29 -04:00
2018-02-26 16:19:30 +01:00
2018-03-25 16:46:04 -04:00
2018-03-23 11:31:58 -04:00
2018-02-19 18:46:11 -05:00
2018-02-06 14:43:37 +00:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2018-03-23 13:00:46 -04:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2018-02-27 11:01:35 -05:00
2018-03-23 11:31:58 -04:00
2018-03-12 11:14:06 -04:00
2018-03-23 11:31:58 -04:00
2018-03-17 17:07:39 -04:00
2018-03-08 21:49:58 -05:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2018-02-12 14:15:04 -05:00
2018-02-19 18:46:11 -05:00
2018-03-23 11:31:58 -04:00
2018-02-13 10:36:08 -05:00
2018-02-27 11:01:35 -05:00
2018-03-06 01:20:46 -05:00
2018-03-22 11:21:45 -04:00
2018-02-11 14:34:03 -08:00
2018-02-12 14:15:04 -05:00
2018-03-23 13:00:47 -04:00
2018-03-23 21:54:07 -04:00
2018-03-23 11:31:58 -04:00
2018-03-23 11:31:58 -04:00
2017-12-28 14:28:22 -05:00
2018-02-12 14:15:04 -05:00
2018-03-23 13:12:18 -04:00
2018-03-23 12:25:54 -04:00
2018-02-19 18:46:11 -05:00
2018-02-12 14:15:04 -05:00
2018-03-06 01:20:46 -05:00
2018-02-20 13:51:47 -05:00
2018-03-23 11:31:58 -04:00
2018-02-01 09:51:57 -08:00
2017-11-28 13:55:00 +01:00
2018-03-23 11:31:58 -04:00
2018-02-13 10:36:05 -05:00
13acc94eff