Message-ID: <CAECEzFjzZjTY4h0apHzc7V5BXv45TCJ=4EvxrFUhFP7LhBLYGg@mail.gmail.com>
Date:	Tue, 4 Aug 2015 21:45:56 +0200
From:	Nico Schümann <nico.schuemann@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: Re: Unable to handle kernel paging request in ipv6_gso_pull_exthdrs+0x36/0xd0

... in order to provide some more detailed information, the crashing
line translates to

net/ipv6/ip6_offload.c:44

which is
 43                 opth = (void *)skb->data;
 44                 len = ipv6_optlen(opth);

(Thanks, Gmail, for submitting)

I assume skb (a struct sk_buff *) to be stale, but how come?

Nico

2015-08-04 21:45 GMT+02:00 Nico Schümann <nico.schuemann@...il.com>:
> ... in order to provide some more detailed information, the crashing
> line translates to
>
> net/ipv6/ip6_offload.c:44
>
> which is
>
>
>
>
> 2015-08-04 20:16 GMT+02:00 Nico Schümann <nico.schuemann@...il.com>:
>> Hello LKML,
>>
>> I am a bit lost with a kernel crash that has appeared out of the blue
>> and now occurs regularly.
>>
>> I do not know whether this is a hardware-related issue or a kernel
>> bug. I have already disabled gso, gre offloading, ipv6 checksum
>> offloading and tcpv6 offloading via ethtool, but the system still
>> crashes. I have attached the crash dump below and would be happy for
>> any pointer what is going wrong.
>>
>> Thanks in advance
>> Nico Schümann
>>
>> ===
>> [   76.047187] BUG: unable to handle kernel paging request at ffff8800773e1001
>> [   76.068072] IP: [<ffffffff814f1646>] ipv6_gso_pull_exthdrs+0x36/0xd0
>> [   76.087128] PGD 1814067 PUD 1b0f067 PMD 7fc45067 PTE 0
>> [   76.102597] Oops: 0000 [#1] SMP
>> [   76.112294] Modules linked in: xt_physdev xen_netback xen_blkback
>> xen_gntdev xen_evtchn xenfs xen_privcmd bridge stp llc xt_tcpudp
>> nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_filter ip6_tables
>> nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack
>> iptable_filter ip_tables x_tables nls_utf8 nls_cp437 vfat fat xfs
>> libcrc32c x86_pkg_temp_thermal intel_powerclamp intel_rapl coretemp
>> xen_acpi_processor mii bonding crc32_pclmul ghash_clmulni_intel loop
>> ast ttm drm_kms_helper iTCO_wdt iTCO_vendor_support drm joydev pcspkr
>> i2c_i801 aesni_intel aes_x86_64 evdev lrw gf128mul glue_helper
>> ablk_helper cryptd lpc_ich mfd_core ipmi_watchdog tpm_tis button video
>> battery processor tpm shpchp ipmi_si ipmi_poweroff ipmi_devintf
>> ipmi_msghandler autofs4 hid_generic usbhid hid ext4 crc16 mbcache jbd2
>> dm_mod raid1 md_mod sg sd_mod crc_t10dif crct10dif_generic
>> crct10dif_pclmul crct10dif_common crc32c_intel ahci libahci libata igb
>> i2c_algo_bit i2c_core scsi_mod dca ptp pps_core ehci_pci xhci_hcd
>> ehci_hcd usbcore usb_common fan thermal thermal_sys
>> [   76.386550] CPU: 0 PID: 0 Comm: swapper/0 Not tainted
>> 3.16.0-4-amd64 #1 Debian 3.16.7-ckt11-1+deb8u2
>> [   76.413875] Hardware name: bluechip Computer AG  /X10SLA-F, BIOS
>> 3.0 06/04/2015
>> [   76.435739] task: ffffffff8181a460 ti: ffffffff81800000 task.ti:
>> ffffffff81800000
>> [   76.458123] RIP: e030:[<ffffffff814f1646>]  [<ffffffff814f1646>]
>> ipv6_gso_pull_exthdrs+0x36/0xd0
>> [   76.484434] RSP: e02b:ffff88007f603ae8  EFLAGS: 00010282
>> [   76.500320] RAX: 0000000000000000 RBX: ffff880002a14900 RCX: 00000000ffff05a6
>> [   76.521665] RDX: 00000000fffefaae RSI: 0000000000000000 RDI: 0000000000000af8
>> [   76.543010] RBP: 0000000000000008 R08: 0000000000000140 R09: ffff8800773d0a00
>> [   76.564355] R10: 000000000000ffff R11: 0000000000000040 R12: ffff8800773e1000
>> [   76.585701] R13: 0000000000000000 R14: 0000000000000008 R15: ffffffffffffff9a
>> [   76.607050] FS:  0000000000000000(0000) GS:ffff88007f600000(0000)
>> knlGS:ffff88007f600000
>> [   76.631251] CS:  e033 DS: 0000 ES: 0000 CR0: 0000000080050033
>> [   76.648435] CR2: ffff8800773e1001 CR3: 00000000773f9000 CR4: 0000000000042660
>> [   76.669781] Stack:
>> [   76.675786]  ffff880002a14900 0000000000000001 0000000000000001
>> 0000000000000001
>> [   76.698017]  0000000000000001 ffffffff814f1b50 ffff88007522c3b8
>> ffff88007f692f78
>> [   76.720246]  ffffffff8109dfef ffffffff818ec880 ffff880002a14900
>> 0000000000000001
>> [   76.742473] Call Trace:
>> [   76.749779]  <IRQ>
>> [   76.755527]  [<ffffffff814f1b50>] ? ipv6_gso_segment+0xb0/0x2b0
>> [   76.773804]  [<ffffffff8109dfef>] ? enqueue_task_fair+0x2cf/0xe20
>> [   76.792032]  [<ffffffff8141e384>] ? skb_mac_gso_segment+0x94/0x170
>> [   76.810516]  [<ffffffff8149b474>] ? gre_gso_segment+0x134/0x3e0
>> [   76.828223]  [<ffffffff8148c474>] ? inet_gso_segment+0x134/0x360
>> [   76.846187]  [<ffffffff8141e384>] ? skb_mac_gso_segment+0x94/0x170
>> [   76.864671]  [<ffffffff8141e81a>] ? dev_hard_start_xmit+0x16a/0x560
>> [   76.883416]  [<ffffffff8143ee29>] ? sch_direct_xmit+0xc9/0x1a0
>> [   76.900862]  [<ffffffff8141ee04>] ? __dev_queue_xmit+0x1f4/0x4c0
>> [   76.918828]  [<ffffffffa05a6988>] ? br_dev_queue_push_xmit+0x68/0xa0 [bridge]
>> [   76.940174]  [<ffffffffa05a7e09>] ?
>> br_handle_frame_finish+0x139/0x3c0 [bridge]
>> [   76.962038]  [<ffffffffa05a81d7>] ? br_handle_frame+0x147/0x240 [bridge]
>> [   76.982083]  [<ffffffff8141c9d4>] ? __netif_receive_skb_core+0x1b4/0x750
>> [   77.002129]  [<ffffffff81009f2c>] ? xen_clocksource_get_cycles+0x1c/0x20
>> [   77.022179]  [<ffffffff8141cfef>] ? netif_receive_skb_internal+0x1f/0x90
>> [   77.042244]  [<ffffffff8141d1e5>] ? napi_gro_flush+0x65/0x80
>> [   77.059168]  [<ffffffff8141d219>] ? napi_complete+0x19/0x40
>> [   77.075843]  [<ffffffffa01274e7>] ? igb_poll+0xa17/0xfb0 [igb]
>> [   77.093308]  [<ffffffff8141d380>] ? net_rx_action+0x140/0x240
>> [   77.110491]  [<ffffffff8106c641>] ? __do_softirq+0xf1/0x290
>> [   77.127157]  [<ffffffff8106ca15>] ? irq_exit+0x95/0xa0
>> [   77.142524]  [<ffffffff81358495>] ? xen_evtchn_do_upcall+0x35/0x50
>> [   77.161038]  [<ffffffff8151321e>] ? xen_do_hypervisor_callback+0x1e/0x30
>> [   77.181076]  <EOI>
>> [   77.186822]  [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
>> [   77.206146]  [<ffffffff810013aa>] ? xen_hypercall_sched_op+0xa/0x20
>> [   77.224956]  [<ffffffff81009e0c>] ? xen_safe_halt+0xc/0x20
>> [   77.241360]  [<ffffffff8101ca49>] ? default_idle+0x19/0xb0
>> [   77.257767]  [<ffffffff810a7ff0>] ? cpu_startup_entry+0x340/0x400
>> [   77.275993]  [<ffffffff81903071>] ? start_kernel+0x492/0x49d
>> [   77.292916]  [<ffffffff81902a04>] ? set_init_arg+0x4e/0x4e
>> [   77.309322]  [<ffffffff81904f64>] ? xen_start_kernel+0x569/0x573
>> [   77.327286] Code: 00 00 41 55 41 89 f5 41 54 55 53 48 89 fb eb 44
>> 0f 1f 44 00 00 8b 4b 68 8b 7b 6c 89 ca 29 fa 83 fa 07 76 57 4c 8b a3
>> d8 00 00 00 <41> 0f b6 44 24 01 8d 2c c5 08 00 00 00 39 d5 77 67 29 e9
>> 45 0f
>> [   77.385444] RIP  [<ffffffff814f1646>] ipv6_gso_pull_exthdrs+0x36/0xd0
>> [   77.404737]  RSP <ffff88007f603ae8>
>> [   77.415164] CR2: ffff8800773e1001
>> [   77.425070] ---[ end trace 143743e46af54558 ]---
>> [   77.501130] Kernel panic - not syncing: Fatal exception in interrupt
>> [   77.520191] Kernel Offset: 0x0 from 0xffffffff81000000 (relocation
>> range: 0xffffffff80000000-0xffffffff9fffffff)
>> [   77.550668] drm_kms_helper: panic occurred, switching back to text console
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists