Re: Unable to handle kernel paging request in ipv6_gso_pull_exthdrs+0x36/0xd0

From: Nico SchÃmann
Date: Tue Aug 04 2015 - 15:46:01 EST


... in order to provide some more detailed information, the crashing
line translates to

net/ipv6/ip6_offload.c:44

which is
43 opth = (void *)skb->data;
44 len = ipv6_optlen(opth);

(Thanks, Gmail, for submitting)

I assume skb (a struct sk_buff *) to be stale, but how come?

Nico

2015-08-04 21:45 GMT+02:00 Nico SchÃmann <nico.schuemann@xxxxxxxxx>:
> ... in order to provide some more detailed information, the crashing
> line translates to
>
> net/ipv6/ip6_offload.c:44
>
> which is
>
>
>
>
> 2015-08-04 20:16 GMT+02:00 Nico SchÃmann <nico.schuemann@xxxxxxxxx>:
>> Hello LKML,
>>
>> I am a bit lost with a kernel crash that has appeared out of the blue
>> and now occurs regularly.
>>
>> I do not know whether this is a hardware-related issue or a kernel
>> bug. I have already disabled gso, gre offloading, ipv6 checksum
>> offloading and tcpv6 offloading via ethtool, but the system still
>> crashes. I have attached the crash dump below and would be happy for
>> any pointer what is going wrong.
>>
>> Thanks in advance
>> Nico SchÃmann
>>
>> ===
>> [ 76.047187] BUG: unable to handle kernel paging request at ffff8800773e1001
>> [ 76.068072] IP: [<ffffffff814f1646>] ipv6_gso_pull_exthdrs+0x36/0xd0
>> [ 76.087128] PGD 1814067 PUD 1b0f067 PMD 7fc45067 PTE 0
>> [ 76.102597] Oops: 0000 [#1] SMP
>> [ 76.112294] Modules linked in: xt_physdev xen_netback xen_blkback
>> xen_gntdev xen_evtchn xenfs xen_privcmd bridge stp llc xt_tcpudp
>> nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables
>> nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack
>> iptable_filter ip_tables x_tables nls_utf8 nls_cp437 vfat fat xfs
>> libcrc32c x86_pkg_temp_thermal intel_powerclamp intel_rapl coretemp
>> xen_acpi_processor mii bonding crc32_pclmul ghash_clmulni_intel loop
>> ast ttm drm_kms_helper iTCO_wdt iTCO_vendor_support drm joydev pcspkr
>> i2c_i801 aesni_intel aes_x86_64 evdev lrw gf128mul glue_helper
>> ablk_helper cryptd lpc_ich mfd_core ipmi_watchdog tpm_tis button video
>> battery processor tpm shpchp ipmi_si ipmi_poweroff ipmi_devintf
>> ipmi_msghandler autofs4 hid_generic usbhid hid ext4 crc16 mbcache jbd2
>> dm_mod raid1 md_mod sg sd_mod crc_t10dif crct10dif_generic
>> crct10dif_pclmul crct10dif_common crc32c_intel ahci libahci libata igb
>> i2c_algo_bit i2c_core scsi_mod dca ptp pps_core ehci_pci xhci_hcd
>> ehci_hcd usbcore usb_common fan thermal thermal_sys
>> [ 76.386550] CPU: 0 PID: 0 Comm: swapper/0 Not tainted
>> 3.16.0-4-amd64 #1 Debian 3.16.7-ckt11-1+deb8u2
>> [ 76.413875] Hardware name: bluechip Computer AG /X10SLA-F, BIOS
>> 3.0 06/04/2015
>> [ 76.435739] task: ffffffff8181a460 ti: ffffffff81800000 task.ti:
>> ffffffff81800000
>> [ 76.458123] RIP: e030:[<ffffffff814f1646>] [<ffffffff814f1646>]
>> ipv6_gso_pull_exthdrs+0x36/0xd0
>> [ 76.484434] RSP: e02b:ffff88007f603ae8 EFLAGS: 00010282
>> [ 76.500320] RAX: 0000000000000000 RBX: ffff880002a14900 RCX: 00000000ffff05a6
>> [ 76.521665] RDX: 00000000fffefaae RSI: 0000000000000000 RDI: 0000000000000af8
>> [ 76.543010] RBP: 0000000000000008 R08: 0000000000000140 R09: ffff8800773d0a00
>> [ 76.564355] R10: 000000000000ffff R11: 0000000000000040 R12: ffff8800773e1000
>> [ 76.585701] R13: 0000000000000000 R14: 0000000000000008 R15: ffffffffffffff9a
>> [ 76.607050] FS: 0000000000000000(0000) GS:ffff88007f600000(0000)
>> knlGS:ffff88007f600000
>> [ 76.631251] CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033
>> [ 76.648435] CR2: ffff8800773e1001 CR3: 00000000773f9000 CR4: 0000000000042660
>> [ 76.669781] Stack:
>> [ 76.675786] ffff880002a14900 0000000000000001 0000000000000001
>> 0000000000000001
>> [ 76.698017] 0000000000000001 ffffffff814f1b50 ffff88007522c3b8
>> ffff88007f692f78
>> [ 76.720246] ffffffff8109dfef ffffffff818ec880 ffff880002a14900
>> 0000000000000001
>> [ 76.742473] Call Trace:
>> [ 76.749779] <IRQ>
>> [ 76.755527] [<ffffffff814f1b50>] ? ipv6_gso_segment+0xb0/0x2b0
>> [ 76.773804] [<ffffffff8109dfef>] ? enqueue_task_fair+0x2cf/0xe20
>> [ 76.792032] [<ffffffff8141e384>] ? skb_mac_gso_segment+0x94/0x170
>> [ 76.810516] [<ffffffff8149b474>] ? gre_gso_segment+0x134/0x3e0
>> [ 76.828223] [<ffffffff8148c474>] ? inet_gso_segment+0x134/0x360
>> [ 76.846187] [<ffffffff8141e384>] ? skb_mac_gso_segment+0x94/0x170
>> [ 76.864671] [<ffffffff8141e81a>] ? dev_hard_start_xmit+0x16a/0x560
>> [ 76.883416] [<ffffffff8143ee29>] ? sch_direct_xmit+0xc9/0x1a0
>> [ 76.900862] [<ffffffff8141ee04>] ? __dev_queue_xmit+0x1f4/0x4c0
>> [ 76.918828] [<ffffffffa05a6988>] ? br_dev_queue_push_xmit+0x68/0xa0 [bridge]
>> [ 76.940174] [<ffffffffa05a7e09>] ?
>> br_handle_frame_finish+0x139/0x3c0 [bridge]
>> [ 76.962038] [<ffffffffa05a81d7>] ? br_handle_frame+0x147/0x240 [bridge]
>> [ 76.982083] [<ffffffff8141c9d4>] ? __netif_receive_skb_core+0x1b4/0x750
>> [ 77.002129] [<ffffffff81009f2c>] ? xen_clocksource_get_cycles+0x1c/0x20
>> [ 77.022179] [<ffffffff8141cfef>] ? netif_receive_skb_internal+0x1f/0x90
>> [ 77.042244] [<ffffffff8141d1e5>] ? napi_gro_flush+0x65/0x80
>> [ 77.059168] [<ffffffff8141d219>] ? napi_complete+0x19/0x40
>> [ 77.075843] [<ffffffffa01274e7>] ? igb_poll+0xa17/0xfb0 [igb]
>> [ 77.093308] [<ffffffff8141d380>] ? net_rx_action+0x140/0x240
>> [ 77.110491] [<ffffffff8106c641>] ? __do_softirq+0xf1/0x290
>> [ 77.127157] [<ffffffff8106ca15>] ? irq_exit+0x95/0xa0
>> [ 77.142524] [<ffffffff81358495>] ? xen_evtchn_do_upcall+0x35/0x50
>> [ 77.161038] [<ffffffff8151321e>] ? xen_do_hypervisor_callback+0x1e/0x30
>> [ 77.181076] <EOI>
>> [ 77.186822] [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
>> [ 77.206146] [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
>> [ 77.224956] [<ffffffff81009e0c>] ? xen_safe_halt+0xc/0x20
>> [ 77.241360] [<ffffffff8101ca49>] ? default_idle+0x19/0xb0
>> [ 77.257767] [<ffffffff810a7ff0>] ? cpu_startup_entry+0x340/0x400
>> [ 77.275993] [<ffffffff81903071>] ? start_kernel+0x492/0x49d
>> [ 77.292916] [<ffffffff81902a04>] ? set_init_arg+0x4e/0x4e
>> [ 77.309322] [<ffffffff81904f64>] ? xen_start_kernel+0x569/0x573
>> [ 77.327286] Code: 00 00 41 55 41 89 f5 41 54 55 53 48 89 fb eb 44
>> 0f 1f 44 00 00 8b 4b 68 8b 7b 6c 89 ca 29 fa 83 fa 07 76 57 4c 8b a3
>> d8 00 00 00 <41> 0f b6 44 24 01 8d 2c c5 08 00 00 00 39 d5 77 67 29 e9
>> 45 0f
>> [ 77.385444] RIP [<ffffffff814f1646>] ipv6_gso_pull_exthdrs+0x36/0xd0
>> [ 77.404737] RSP <ffff88007f603ae8>
>> [ 77.415164] CR2: ffff8800773e1001
>> [ 77.425070] ---[ end trace 143743e46af54558 ]---
>> [ 77.501130] Kernel panic - not syncing: Fatal exception in interrupt
>> [ 77.520191] Kernel Offset: 0x0 from 0xffffffff81000000 (relocation
>> range: 0xffffffff80000000-0xffffffff9fffffff)
>> [ 77.550668] drm_kms_helper: panic occurred, switching back to text console
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/