> -Original Message-
> From: Herbert Xu [mailto:[EMAIL PROTECTED]
> Sent: 07 July 2006 15:40
> To: Petersson, Mats
> Cc: [EMAIL PROTECTED]; netdev@vger.kernel.org;
> [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: Re: [Xen-devel] kernel BUG at net/core/dev.c:1133!
>
> Petersson, Mats <[EMAIL PROTECTED]> wrote:
> > Looks like the GSO is involved?
>
> It's certainly what crashed your machine :) It's probably not the
> guilty party though. Someone is passing through a TSO packet with
> checksum set to something other than CHECKSUM_HW.
>
> I bet it's netfilter and we just never noticed before because real
> NICS would simply corrupt the checksum silently.
>
> Could you confirm that you have netfilter rules (in particular NAT
> rules) and that this goes away if you flush all your netfilter tables?
If by netfilter, you mean "iptables", it says:
[EMAIL PROTECTED] ~]# iptables --list
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
So, nothing going on there... I certainly haven't got NAT on my machine,
as my machine is within the AMD network, and doesn't need NAT. AMD
probably uses NAT as part of it's external communications, but I doubt
it's used at all internally.
I also have noticed the crash happens when I try to access another
machine within my local switch - if that makes any difference... But not
instantly. I can do some communication with the machine next to it [like
I did "ssh cheetah" from my machine "quad" to get the iptables above,
and it works just fine - but when I did "xm dmesg" from "cheetah"
through ssh on "quad", it didn't work - presumably because it's a bit
more data being pushed - but I can't say for sure, as I have made no
attempt to really debug it].
I hope this info is of help to analyze the situation, and please feel
free to ask for further info.
--
Mats
>
> Patrick, do we really have to zap the checksum on outbound NAT? Could
> we update it instead?
>
> > I got this while running Dom0 only (no guests), with a
> > BOINC/[EMAIL PROTECTED] application running on all 4 cores.
> >
> > changeset: 10649:8e55c5c11475
> >
> > Build: x86_32p (pae).
> >
> > [ cut here ]
> > kernel BUG at net/core/dev.c:1133!
> > invalid opcode: [#1]
> > SMP
> > CPU:0
> > EIP:0061:[]Not tainted VLI
> > EFLAGS: 00210297 (2.6.16.13-xen #12)
> > EIP is at skb_gso_segment+0xf0/0x110
> > eax: ebx: 0003 ecx: 0002 edx: c06e2e00
> > esi: 0008 edi: cd9e32e0 ebp: c63a7900 esp: c0de5ad0
> > ds: 007b es: 007b ss: 0069
> > Process rosetta_5.25_i6 (pid: 8826, threadinfo=c0de4000
> task=cb019560)
> > Stack: <0>c8f69060 ffa3 0003 cd9e32e0
> 0002 c63a7900
> > c04dcfb0
> > cd9e32e0 0003 cd9e32e0 cf8e3000 cf8e3140 c04dd07e
> > cd9e32e0
> > cf8e3000 cd9e32e0 cf8e3000 c04ec07e cd9e32e0 cf8e3000
> > c0895140
> > Call Trace:
> > [] dev_gso_segment+0x30/0xb0
> > [] dev_hard_start_xmit+0x4e/0x110
> > [] __qdisc_run+0xbe/0x280
> > [] dev_queue_xmit+0x379/0x380
> > [] br_dev_queue_push_xmit+0xa4/0x140
> > [] br_nf_post_routing+0x102/0x1d0
> > [] br_nf_dev_queue_xmit+0x0/0x50
> > [] br_dev_queue_push_xmit+0x0/0x140
> > [] nf_iterate+0x6b/0xa0
> > [] br_dev_queue_push_xmit+0x0/0x140
> > [] br_dev_queue_push_xmit+0x0/0x140
> > [] nf_hook_slow+0x6e/0x120
> > [] br_dev_queue_push_xmit+0x0/0x140
> > [] br_forward_finish+0x60/0x70
> > [] br_dev_queue_push_xmit+0x0/0x140
> > [] br_nf_forward_finish+0x71/0x130
> > [] br_forward_finish+0x0/0x70
> > [] br_nf_forward_ip+0xf0/0x1a0
> > [] br_nf_forward_finish+0x0/0x130
> > [] br_forward_finish+0x0/0x70
> > [] nf_iterate+0x6b/0xa0
> > [] br_forward_finish+0x0/0x70
> > [] br_forward_finish+0x0/0x70
> > [] nf_hook_slow+0x6e/0x120
> > [] br_forward_finish+0x0/0x70
> > [] __br_forward+0x74/0x80
> > [] br_forward_finish+0x0/0x70
> > [] br_handle_frame_finish+0xd1/0x160
> > [] br_handle_frame_finish+0x0/0x160
> > [] br_nf_pre_routing_finish+0xfb/0x480
> > [] br_handle_frame_finish+0x0/0x160
> > [] br_nf_pre_routing_finish+0x0/0x480
> > [] ip_nat_in+0x43/0xc0
> > [] br_nf_pre_routing_finish+0x0/0x480
> > [] nf_iterate+0x6b/0xa0
> > [] br_nf_pre_routing_finish+0x0/0x480
> &g
