Hi forum
I'm facing some strange issues and dont know how to resolve it.
All my system is up to date...
So basicly , i have followed a guide here in form about how to remove eno1 without saving and adding bridge (br0) with static ip adr.
So far so good.
It has worked before , but now since kernel update to 6.1.0-0 im running into kernel panics. like this:
Code
[74662.354561] ------------[ cut here ]------------
[74662.354580] WARNING: CPU: 4 PID: 1329166 at net/netfilter/nf_nat_core.c:594 nf_nat_setup_info+0x5c1/0xaf0 [nf_nat]
[74662.354613] Modules linked in: bluetooth jitterentropy_rng drbg ansi_cprng ecdh_generic ecc tun tls xt_nat xt_conntrack nf_ conntrack_netlink xfrm_user xfrm_algo xt_addrtype br_netfilter cpufreq_conservative cpufreq_userspace cpufreq_ondemand cpufreq _powersave quota_v2 quota_tree xt_CHECKSUM nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_tc pudp nft_compat nf_tables nfnetlink overlay intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp sn d_sof_pci_intel_tgl snd_sof_intel_hda_common soundwire_intel kvm_intel soundwire_generic_allocation soundwire_cadence snd_sof_ intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof kvm snd_sof_utils snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi irqbypass snd_soc_core snd_hda_codec_realtek ghash_clmulni_intel sha512_ssse3 snd_compress sha512_generic snd_hda _codec_generic snd_hda_codec_hdmi soundwire_bus snd_hda_intel snd_intel_dspcfg snd_usb_audio snd_intel_sdw_acpi
[74662.354703] snd_hda_codec uvcvideo bridge asus_nb_wmi eeepc_wmi aesni_intel asus_wmi snd_hda_core nls_ascii snd_usbmidi_li b videobuf2_vmalloc platform_profile battery videobuf2_memops crypto_simd nls_cp437 snd_rawmidi videobuf2_v4l2 sparse_keymap c ryptd snd_hwdep snd_seq_device pmt_telemetry ledtrig_audio ppdev pmt_class rapl intel_cstate intel_uncore rfkill videobuf2_com mon pcspkr efi_pstore vfat snd_pcm stp llc wmi_bmof videodev fat evdev joydev snd_timer mei_me iTCO_wdt mc intel_pmc_bxt snd e e1004 sg mei iTCO_vendor_support soundcore intel_vsec parport_pc parport intel_pmc_core acpi_tad acpi_pad button softdog watch dog sunrpc macvlan drm fuse configfs efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 btrfs blake2b_generic zstd_co mpress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c crc32c_generic raid1 r aid0 multipath linear md_mod sd_mod hid_generic usbhid hid ahci libahci xhci_pci mpt3sas libata nvme xhci_hcd nvme_core
[74662.354888] raid_class scsi_transport_sas e1000e t10_pi usbcore scsi_mod crc32_pclmul crc32c_intel i2c_i801 intel_lpss_pci ptp crc64_rocksoft crc64 crc_t10dif pps_core intel_lpss i2c_smbus crct10dif_generic vmd idma64 crct10dif_pclmul usb_common sc si_common crct10dif_common fan video wmi pinctrl_alderlake
[74662.354959] CPU: 4 PID: 1329166 Comm: kworker/u32:1 Tainted: G B D W 6.1.0-0.deb11.7-amd64 #1 Debian 6.1.20-2~ bpo11+1
[74662.354972] Hardware name: ASUS System Product Name/PRIME B660M-A WIFI D4, BIOS 2212 12/13/2022
[74662.354979] Workqueue: events_unbound macvlan_process_broadcast [macvlan]
[74662.355002] RIP: 0010:nf_nat_setup_info+0x5c1/0xaf0 [nf_nat]
[74662.355024] Code: 5c fb ff ff 83 7c 24 14 01 49 8b 86 80 00 00 00 0f 85 b3 fb ff ff 80 cc 01 49 89 86 80 00 00 00 b8 01 00 00 00 e9 ad fb ff ff <0f> 0b 31 c0 e9 a4 fb ff ff 31 d2 84 c0 0f 85 32 03 00 00 4c 8d 44
[74662.355036] RSP: 0018:ffffa7ef402a8c70 EFLAGS: 00010282
[74662.355044] RAX: 0000000000000180 RBX: 0000000000000000 RCX: ffff8c94c3be4d40
[74662.355051] RDX: 0000000000000000 RSI: ffffa7ef402a8d5c RDI: ffff8c93b1862400
[74662.355056] RBP: ffffa7ef402a8d48 R08: 000000007c01a8c0 R09: 0000000000000000
[74662.355062] R10: 0000000000000000 R11: ffffa7ef402a8cc8 R12: ffffa7ef402a8e40
[74662.355067] R13: ffff8c937ec3e600 R14: ffff8c93b1862400 R15: ffffa7ef402a8d5c
[74662.355073] FS: 0000000000000000(0000) GS:ffff8ca95fb00000(0000) knlGS:0000000000000000
[74662.355080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[74662.355086] CR2: 00007f9094245ec0 CR3: 0000000dc3a10004 CR4: 0000000000770ee0
[74662.355092] PKRU: 55555554
[74662.355096] Call Trace:
[74662.355102] <IRQ>
[74662.355111] ? ip_route_input_slow+0x41a/0xb50
[74662.355126] ? _raw_spin_unlock_irqrestore+0x23/0x40
[74662.355140] __nf_nat_alloc_null_binding+0x5a/0x80 [nf_nat]
[74662.355160] nf_nat_inet_fn+0x29d/0x300 [nf_nat]
[74662.355178] ? cache_from_obj+0xa1/0x110
[74662.355191] nf_nat_ipv4_local_in+0x5c/0x140 [nf_nat]
[74662.355211] nf_hook_slow+0x3c/0xb0
[74662.355220] ip_local_deliver+0xd7/0x120
[74662.355231] ? ip_protocol_deliver_rcu+0x230/0x230
[74662.355242] __netif_receive_skb_one_core+0x8b/0xa0
[74662.355252] process_backlog+0x8e/0x120
[74662.355260] __napi_poll+0x29/0x160
[74662.355268] net_rx_action+0x2a2/0x360
[74662.355277] __do_softirq+0xe9/0x2e9
[74662.355286] do_softirq.part.0+0x9c/0xd0
[74662.355298] </IRQ>
[74662.355302] <TASK>
[74662.355305] __local_bh_enable_ip+0x77/0x90
[74662.355315] netif_rx+0xdd/0x100
[74662.355322] macvlan_broadcast+0x70/0x1a0 [macvlan]
[74662.355341] macvlan_process_broadcast+0x179/0x190 [macvlan]
[74662.355358] process_one_work+0x1e2/0x3b0
[74662.355372] worker_thread+0x50/0x3a0
[74662.355384] ? rescuer_thread+0x390/0x390
[74662.355395] kthread+0xe5/0x110
[74662.355404] ? kthread_complete_and_exit+0x20/0x20
[74662.355415] ret_from_fork+0x1f/0x30
[74662.355430] </TASK>
[74662.355433] ---[ end trace 0000000000000000 ]---and this is only appearing if i have a bridged network. I have tested without bridge and there's none kernel panic
But yeah this appear a couple times, then out of nowhere i cant get any response from server and it crashes..
Any idear or input is preciated..
And normaly i run this also so my vm (windows10) can connect to host and other containers:
Code
ip link add DockerNetBridge link br0 type macvlan mode bridge
ip addr add 192.168.1.223/24 dev DockerNetBridge
ip link set DockerNetBridge up
ip route add 192.168.1.192/27 dev DockerNetBridgebut i have left this part out so i dont complicate things for my selv, but the plan is that i will ad these links again in the future, if anybody has different approach, i would like to hear 
Thanks in advise.