Boot without nftables | Debian 10
While rebooting our newest strorage servers, we're experiencing a kernel error (probably) caused by nftables. Please see attached call trace:
After configuring the server (incl nftables), everything worked fine. When we'd tried to reboot the server, it won't boot anymore. Booting using Debian's recovery mode shows the above error.
Question, is there an option/parameter that I can pass to Debian to boot without nftables?
Additional information
Linux version
- 4.19.0-13-amd64
- 4.19.0-13-amd64 (recovery mode)
- 4.19.0-12-amd64
- 4.19.0-12-amd64 (recovery mode)
Solution 1:
Edit the kernel command line and try adding module_blacklist=nf_tables
Upstream in the kernel, there is some possibly relevant fixes. Like this use after free bug fixed in 4.19.72
commit 5776970fb4ecf72db4e0142c03f49b03ed024b75
Author: Pablo Neira Ayuso <[email protected]>
Date: Fri Aug 9 11:01:27 2019 +0200
netfilter: nf_tables: use-after-free in failing rule with bound set
[ Upstream commit 6a0a8d10a3661a036b55af695542a714c429ab7c ]
I am uncertain if any Buster kernel has this. Try booting a newer Debian version and using the rescue mode. Bullseye is testing at the moment. However, you can test if its newer kernel is affected, and get a shell to try other things.
Consider setting up kdump and capturing these. Having the full text of the trace helps, and symbols and source even more so.