<div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Apr 30, 2020, 09:21 Matej Marusak <<a href="mailto:mmarusak@redhat.com">mmarusak@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Package: iptables<br>
Version: 1.8.4-3<br>
Severity: normal<br>
<br>
Dear Maintainer,<br>
<br>
In cockpit tests [1] we are seeing ip6tables-restore dumping core often.<br>
It only happens on debian-testing and only in one specific test. Also<br>
it does not happen always, around 1/3 of runs actually hit this.<br>
I tried to get some commandline reproduced, but even slightly tweaking<br>
our tests and it stopped being reproducible. So my gut feeling is that<br>
this is timing related and our tests hit it just right.<br>
<br>
Please see [1] to see backtrace, journal and core.<br>
<br>
The core backtrace:<br>
#0 0x00007f16d2993679 in nftnl_table_list_free (list=0x0) at table.c:393 <br>
#1 0x00005613a6503fa9 in flush_cache (h=0x7fff89baf4e0, c=0x7fff89baf550, tablename=0x0) at nft-cache.c:622<br>
#2 0x00005613a65044f9 in flush_cache (tablename=0x0, c=<optimized out>, h=<optimized out>) at nft-cache.c:651<br>
#3 nft_release_cache (h=<optimized out>) at nft-cache.c:651<br>
<br>
<br>
As I mentioned, I am unfortunatelly not able to find commandline<br>
reproducer, but I am more than happy to provide any outup or try any<br>
command.<br>
<br>
Hope it is actionable.<br>
Regards,<br>
MM<br>
<br>
<br>
[1] <a href="https://github.com/cockpit-project/bots/issues/809" rel="noreferrer noreferrer" target="_blank">https://github.com/cockpit-project/bots/issues/809</a><br>
<br>
-- System Information:<br>
Debian Release: bullseye/sid<br>
APT prefers testing<br>
APT policy: (500, 'testing')<br>
Architecture: amd64 (x86_64)<br>
<br>
Kernel: Linux 5.5.0-1-cloud-amd64 (SMP w/1 CPU core)<br>
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8 (charmap=UTF-8)<br>
Shell: /bin/sh linked to /usr/bin/dash<br>
Init: systemd (via /run/systemd/system)<br>
LSM: AppArmor: enabled<br>
<br>
Versions of packages iptables depends on:<br>
ii libc6 2.30-4<br>
ii libip4tc2 1.8.4-3<br>
ii libip6tc2 1.8.4-3<br>
ii libmnl0 1.0.4-3<br>
ii libnetfilter-conntrack3 1.0.8-1<br>
ii libnfnetlink0 1.0.1-3+b1<br>
ii libnftnl11 1.1.6-1<br>
ii libxtables12 1.8.4-3<br>
ii netbase 6.1<br>
<br>
Versions of packages iptables recommends:<br>
pn nftables <none><br>
<br>
Versions of packages iptables suggests:<br>
ii firewalld 0.8.2-1<br>
ii kmod 27-2<br>
<br>
-- no debconf information<br>
<br>
_______________________________________________<br>
pkg-netfilter-team mailing list<br>
<a href="mailto:pkg-netfilter-team@alioth-lists.debian.net" target="_blank" rel="noreferrer">pkg-netfilter-team@alioth-lists.debian.net</a><br>
<a href="https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-netfilter-team" rel="noreferrer noreferrer" target="_blank">https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-netfilter-team</a></blockquote></div></div><div dir="auto"><br></div><div dir="auto"><br></div><div dir="auto">Thanks for the report.</div><div dir="auto"><br></div><div dir="auto">Could you please provide the ip6tables ruleset that is causing this? i.e, the ruleset you are trying to restore.</div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
</blockquote></div></div></div>