After I tried to restart a LAN interface the kernel crashed: localhost kernel: RIP: 0010:nft_set_elem_destroy+0x27/0xf0 [nf_tables] localhost kernel: Code: 1f 40 00 55 48 89 e5 41 55 41 54 49 89 f4 53 48 83 ec 30 48 8b 87 80 00 00 00 48 c7 45 e0 00 00 00 00 48 c7 45 c0 00 00 00 00 <8b> 58 70 48 8b 47 28 48 c7 45 c8 00 00 00 00 48 c7 45 d0 00 00 00 localhost kernel: RSP: 0018:ffffb08040253810 EFLAGS: 00010282 localhost kernel: RAX: 0000000000000000 RBX: ffff8bbf44124a80 RCX: dead000000000200 localhost kernel: RDX: 0000000000000001 RSI: ffff8bbf402d4980 RDI: ffff8bbf40120000 localhost kernel: RBP: ffffb08040253858 R08: 0000000000000001 R09: ffffffffc15f3300 localhost kernel: R10: ffff8bbf44215180 R11: 0000000000000157 R12: ffff8bbf402d4980 localhost kernel: R13: ffff8bbf44124900 R14: dead000000000200 R15: dead000000000100 localhost kernel: FS: 00007f7419a8a740(0000) GS:ffff8bbf4eb00000(0000) knlGS:0000000000000000 localhost kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 localhost kernel: CR2: 000055feb3bc8008 CR3: 0000000403a14002 CR4: 00000000000606e0 localhost systemd[1]: nftables.service: Main process exited, code=killed, status=9/KILL localhost systemd[1]: nftables.service: Failed with result 'signal'. localhost systemd[1]: Failed to start Netfilter Tables. If necessary I can attach my /etc/sysconfig/nftables.conf
My distro is Fedora 29. GCC version: 8.3.1-2.fc29.x86_64
I compiled the kernel from sources ( https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.0.4.tar.xz ) with zero patches or modifications applied.
This might be a dupe of bug 202905 which has recieved zero attention from developers for almost two weeks. This was also discussed on LKML: https://lkml.org/lkml/2019/3/8/141 Here's a patch which probably resolves the issue: https://patchwork.ozlabs.org/patch/1053232/
It turns out the nf_tables module ****crashes on boot****. Why on earth hasn't this bug been solved already?
We are at kernel 5.0.5 already and the issue is still not solved. WTF guys?
Its in the queue for 5.0.6: https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.0/netfilter-nf_tables-fix-set-double-free-in-abort-pat.patch
(In reply to Florian Westphal from comment #6) > Its in the queue for 5.0.6: > https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/ > queue-5.0/netfilter-nf_tables-fix-set-double-free-in-abort-pat.patch Thanks! Please close bug 202905 as well.