multiple virtual interfaces crash everything

[deever]

I have a VM defined with two virtual interfaces, one bridged to the host's eth0 and the other bridged to a bridge on the (linux) host:

eth0 (host) <- bridged mode <- VM (OpenBSD) -> bridged mode -> myvirtnet (bridge on the host)

As soon as i setup the virtual interface to myvirtnet, the host panics:

[  954.395879] warning: `VBoxHeadless' uses 32-bit capabilities (legacy support in use)
[  957.257882] device eth0 entered promiscuous mode
[  957.257882] device myvirtnet entered promiscuous mode
[ 1018.664470] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000
[ 1018.664624] IP: [<0000000000000000>]
[ 1018.664702] PGD 22943b067 PUD 2294c2067 PMD 0 
[ 1018.664852] Oops: 0010 [1] SMP 
[ 1018.664961] CPU 0 
[ 1018.665035] Modules linked in: netconsole configfs vboxnetadp vboxnetflt vboxdrv ipv6 ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables bridge ext2 loop snd_hda_intel serio_raw parport_pc i2c_i801 pcspkr snd_pcm psmouse parport snd_timer i2c_core snd button soundcore snd_page_alloc intel_agp evdev joydev ext3 jbd mbcache dm_mirror dm_log dm_snapshot dm_mod raid1 md_mod sd_mod ata_generic ide_pci_generic usbhid hid ff_memless ahci floppy libata scsi_mod dock jmicron ide_core ehci_hcd r8169 uhci_hcd thermal processor fan thermal_sys [last unloaded: scsi_wait_scan]
[ 1018.667335] Pid: 3321, comm: VBoxHeadless Not tainted 2.6.26-2-amd64 #1
[ 1018.667335] RIP: 0010:[<0000000000000000>]  [<0000000000000000>]
[ 1018.667335] RSP: 0018:ffff8102294e9630  EFLAGS: 00010292
[ 1018.667335] RAX: ffffffff805248e0 RBX: ffff810225d7ec80 RCX: ffff81022c6ba3c0
[ 1018.667335] RDX: ffff810225d7ec80 RSI: ffffffff805248e0 RDI: ffff81022c6ba3c0
[ 1018.667335] RBP: ffff81022c6ba3c0 R08: 0000000000000001 R09: 0000000000000003
[ 1018.667335] R10: 0000000000000000 R11: ffff8102294e95f8 R12: ffff81022c6ba3c0
[ 1018.667335] R13: ffff8102294e9928 R14: ffff81022b014650 R15: 0000000000000003
[ 1018.667335] FS:  0000000040f8f950(0063) GS:ffffffff8053d000(0000) knlGS:0000000000000000
[ 1018.667335] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[ 1018.667335] CR2: 0000000000000000 CR3: 000000022c8b0000 CR4: 00000000000026e0
[ 1018.667335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1018.667335] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1018.667335] Process VBoxHeadless (pid: 3321, threadinfo ffff8102294e8000, task ffff81022b6515b0)
[ 1018.667335] Stack:  ffffffffa04c98f8 ffff8102294e9740 ffff81022b134000 ffff81022b134280
[ 1018.667335]  ffffffff803bdc28 ffff810225d7d610 00000000fffffff8 0000000000000003
[ 1018.667335]  ffff8102294e9928 ffff81022b014650 ffffffffa04c9af4 0000000000000282
[ 1018.667335] Call Trace:
[ 1018.667335]  [<ffffffffa04c98f8>] ? :vboxnetflt:vboxNetFltQdiscEnqueue+0x18/0x37
[ 1018.667335]  [<ffffffff803bdc28>] ? dev_queue_xmit+0x15d/0x2b1
[ 1018.667335]  [<ffffffffa04c9af4>] ? :vboxnetflt:vboxNetFltPortOsXmit+0x45/0x9b
[ 1018.667335]  [<ffffffffa04cb025>] ? :vboxnetflt:vboxNetFltPortXmit+0x117/0x15b
[ 1018.667335]  [<ffffffffa03428a9>] ? :vboxdrv:g_abExecMemory+0x20c69/0x180000
[ 1018.667335]  [<ffffffffa036f89d>] ? :vboxdrv:g_abExecMemory+0x4dc5d/0x180000
[ 1018.667335]  [<ffffffffa03477d4>] ? :vboxdrv:g_abExecMemory+0x25b94/0x180000
[ 1018.667335]  [<ffffffffa0347b3d>] ? :vboxdrv:g_abExecMemory+0x25efd/0x180000
[ 1018.667335]  [<ffffffffa0316866>] ? :vboxdrv:RTSpinlockAcquireNoInts+0xd/0x12
[ 1018.667335]  [<ffffffffa036cc5b>] ? :vboxdrv:g_abExecMemory+0x4b01b/0x180000
[ 1018.667335]  [<ffffffffa03428a9>] ? :vboxdrv:g_abExecMemory+0x20c69/0x180000
[ 1018.667394]  [<ffffffffa03724da>] ? :vboxdrv:g_abExecMemory+0x5089a/0x180000
[ 1018.667394]  [<ffffffffa03606aa>] ? :vboxdrv:g_abExecMemory+0x3ea6a/0x180000
[ 1018.667394]  [<ffffffff8042430c>] ? init_intel_cacheinfo+0x49a/0x4c3
[ 1018.667394]  [<ffffffffa03477d4>] ? :vboxdrv:g_abExecMemory+0x25b94/0x180000
[ 1018.667394]  [<ffffffffa036c8a1>] ? :vboxdrv:g_abExecMemory+0x4ac61/0x180000
[ 1018.667394]  [<ffffffffa03733b8>] ? :vboxdrv:g_abExecMemory+0x51778/0x180000
[ 1018.667394]  [<ffffffffa039cc13>] ? :vboxdrv:g_abExecMemory+0x7afd3/0x180000
[ 1018.667394]  [<ffffffffa039e340>] ? :vboxdrv:g_abExecMemory+0x7c700/0x180000
[ 1018.667394]  [<ffffffffa039eda3>] ? :vboxdrv:g_abExecMemory+0x7d163/0x180000
[ 1018.667394]  [<ffffffffa039ef6c>] ? :vboxdrv:g_abExecMemory+0x7d32c/0x180000
[ 1018.667394]  [<ffffffffa0340285>] ? :vboxdrv:g_abExecMemory+0x1e645/0x180000
[ 1018.667394]  [<ffffffffa0340ba0>] ? :vboxdrv:g_abExecMemory+0x1ef60/0x180000
[ 1018.667394]  [<ffffffffa035aa0c>] ? :vboxdrv:g_abExecMemory+0x38dcc/0x180000
[ 1018.667394]  [<ffffffffa035aeb7>] ? :vboxdrv:g_abExecMemory+0x39277/0x180000
[ 1018.667394]  [<ffffffffa0343ba0>] ? :vboxdrv:g_abExecMemory+0x21f60/0x180000
[ 1018.667394]  [<ffffffffa0333998>] ? :vboxdrv:g_abExecMemory+0x11d58/0x180000
[ 1018.667394]  [<ffffffffa0331323>] ? :vboxdrv:g_abExecMemory+0xf6e3/0x180000
[ 1018.667394]  [<ffffffffa032b452>] ? :vboxdrv:g_abExecMemory+0x9812/0x180000
[ 1018.667394]  [<ffffffffa036c5a7>] ? :vboxdrv:g_abExecMemory+0x4a967/0x180000
[ 1018.667394]  [<ffffffffa0336f58>] ? :vboxdrv:g_abExecMemory+0x15318/0x180000
[ 1018.667394]  [<ffffffffa03141c1>] ? :vboxdrv:rtR0MemAllocEx+0xa6/0xec
[ 1018.667394]  [<ffffffffa030c8de>] ? :vboxdrv:supdrvIOCtlFast+0x42/0x54
[ 1018.667394]  [<ffffffffa030c22b>] ? :vboxdrv:VBoxDrvLinuxIOCtl+0x3b/0x1a0
[ 1018.667394]  [<ffffffff8022efd6>] ? hrtick_set+0x88/0xf7
[ 1018.667394]  [<ffffffff802a6a29>] ? vfs_ioctl+0x21/0x6b
[ 1018.667394]  [<ffffffff802a6cbb>] ? do_vfs_ioctl+0x248/0x261
[ 1018.667394]  [<ffffffff802a6d25>] ? sys_ioctl+0x51/0x70
[ 1018.667394]  [<ffffffff8020beda>] ? system_call_after_swapgs+0x8a/0x8f
[ 1018.667394] 
[ 1018.667394] 
[ 1018.667394] Code:  Bad RIP value.
[ 1018.667394] RIP  [<0000000000000000>]
[ 1018.667394]  RSP <ffff8102294e9630>
[ 1018.667394] CR2: 0000000000000000
[ 1018.673549] ---[ end trace adc5a78a63de7ecc ]---
[ 1018.673596] Kernel panic - not syncing: Aiee, killing interrupt handler!

I'm not a developer, but for me it looks like the NULL ptr reference seems be the problem. I obviously can't provide a VBox.log since even for getting this stack trace I've had to use netconsole.

[Frank Mehnert]

Sounds like a duplicate of #7908. Could you try the patch which is attached there?

[deever]

@frank, aleksey: Yay! You are my heroes! It f*ing works! Thank you! :)

PS: Sorry for the duplicate, I thought this error was specific to my case with two ifaces and a bridge.

--- CLOSED ---

[Frank Mehnert]

Thanks for the feedback!