kernel 3.16.0.52+53 - ip rule repeats all default rules (messing up rule table)

[Markus Neubauer]

Kernel breaks PBR routing on several versions.
Problem occurs on server and desktop.

Example using linux-image-3.13.0-70

lsb_release:
Ubutu 14.04.3 LTS
Release 14.04

Expected:
To have the normal rule table when using 'ip rule show'
 0: from all lookup local
 32766: from all lookup main
 32767: from all lookup default

Instead:
The 'ip rule show' command is messed up showing lots of repeated rules for local/main/default (did not count them - simply too much)

A sec prob in my case as it is making policy based routing useless if you need to grep whether your rule exists already.

Workaraound, go back to/remain on either of these series:
3.13.0-68
3.16.0.51
3.19.0-33

Confirmed working after the fix (see below messages)
3.13.0-71.114
3.16.0-55.74
3.19.0-39.44

PBR NOT working on:
3.13.0-69
3.13.0-70
3.16.0-52
3.16.0-53
3.19.0-37

[Tyler Hicks (tyhicks)]

I have confirmed this bug using linux-image-3.16.0-52-generic

[Norman Henderson (norm-audrey)]

I have the same behavior with 3.16-0-53. The system appears to be working normally in all respects including policy routing, except that the ip rule command produces an infinite loop of 0: from all lookup local. Makes it hard to manage the system... This could be a duplicate of 1516052 which applies to 3.16-0-69.

[Norman Henderson (norm-audrey)]

Confirmed that booting 3.16-0-51 does not exhibit the problem behavior.

[Simon Déziel (sdeziel)]

It's not HWE specific as the 3.13 branch is also affected. Here's a recap of the good/bad versions:

3.13.0-68: good
3.13.0-69: bad
3.16.0-51: good
3.16.0-53: bad
3.19.0-32: good
3.19.0-33: good

[Markus Neubauer (mn-ubuntu)]

3.13.0-70: bad (same failure)

[Michael Fox (news-9)]

I have the same problem in 3.16.0-53. I filed bug #1518715 which may be the same thing.

[Markus Neubauer (mn-ubuntu)]

seems to be Ubutu specific, as it did not occur on my pure Debian and CentOS systems so far.

[Michael Fox (news-9)]

I echo the comments of others that this makes it hard to manage the system. But I'd go further to say it's impossible to manage the system. If we're using rules, we have to be able to see what they are.

[Michael Fox (news-9)]

As reported in related bug #1518715, "ip rule flush" is also impacted. It appears to hang (never complete).

[Simon Déziel (sdeziel)]

The broken kernels just made it to -security.

[Brad Figg (brad-figg)]

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1514785

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Andy Whitcroft (apw)]

This issue was fixed in linux-lts-utopic_3.16.0-55.74~14.04.1.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.13.0-71.114

---------------
linux (3.13.0-71.114) trusty; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1521426

  [ Upstream Kernel Changes ]

  * fib_rules: Fix dump_rules() not to exit early
    - LP: #1514911
    - LP: #1514785

 -- Luis Henriques <email address hidden> Thu, 26 Nov 2015 14:27:35 +0000

[Simon Déziel (sdeziel)]

I can confirm that 3.13.0-71.114 fixes the issue. Thanks

[Ian! D. Allen (idallen)]

The recent Ubuntu 15.04 kernel update to vmlinuz-3.19.0-37-generic installed this same bug.
I had to reboot back to vmlinuz-3.19.0-33-generic to avoid the loop.

[Simon Déziel (sdeziel)]

@idallen, try updating to 3.19.0-39.44 which should have the fix. You might need to enable the -proposed repository: https://wiki.ubuntu.com/Testing/EnableProposed

[Markus Neubauer (mn-ubuntu)]

I can confirm that 3.19.0-39.44 is ok, too.

[Markus Neubauer (mn-ubuntu)]

I can confirm that 3.16.0-55.74 is ok, too.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.19.0-39.44

---------------
linux (3.19.0-39.44) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1521630

  [ Upstream Kernel Changes ]

  * fib_rules: Fix dump_rules() not to exit early
    - LP: #1514785

linux (3.19.0-38.43) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1520641

  [ danielepa ]

  * SAUCE: usb: cdc-acm: blacklist VID/PID 0x058b/0x0041 device
    - LP: #1520147
  * SAUCE: usb: usb-serial-simple: add 0x058b/0x0041 device
    - LP: #1520147

 -- Luis Henriques <email address hidden> Tue, 01 Dec 2015 12:22:47 +0000

[Miguel Angel Ajo (mangelajo)]

You have a regression of this on Linux devstack 3.19.0-37-generic (at least)