← Back to team overview

kernel-packages team mailing list archive

  1. kernel-packages team
  2. Mailing list archive
  3. Message #160858

[Bug 1545031] [NEW] Kernel OOPS: BUG: unable to handle kernel NULL pointer dereference; IP at ip6_datagram_connect+0x249/0x500

  Thread Previous • Date Previous • • Thread Next 
Public bug reported:

We are running Ubuntu 15.10, in a server environment where we have IPsec
transport set between servers both for IPv4 and IPv6. We can *reliably*
reproduce this error by running:

```
tcpdump "ip and ( host host1.example.com or host host2.example.com or host host3.example.com or host host4.example.com or host host5.example.com )"
```
...where host1-host5.example.com are actual hostnames of servers connected with IPsec transport with the problematic host. Those hosts are currently running either 15.04, or Debian 8, and the affected server is the first one we upgraded to 15.10.

This immediately produces the kernel oops.

Some more info on the host:

```
# uname -a
Linux host6 4.2.0-27-generic #32-Ubuntu SMP Fri Jan 22 04:49:08 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
```

Version signature:

```
# cat /proc/version_signature 
Ubuntu 4.2.0-27.32-generic 4.2.8-ckt1
```

An example oops (more in the attached file):

```
[23882.053990] BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
[23882.054044] IP: [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
[23882.054080] PGD 0 
[23882.054103] Oops: 0000 [#7] SMP   
[23882.054129] Modules linked in: aufs xt_multiport ip6table_filter ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6_tables esp6 ah6 xfrm6_mode_transport nfnetlink_queue nfnetlink_log nfnetlink bluetooth drbg ansi_cprng authenc echainiv esp4 ah4 xfrm4_mode_transport xt_TCPMSS deflate ctr twofish_generic twofish_avx_x86_64 twofish_x86_64_3way twofish_x86_64 twofish_common camellia_generic camellia_aesni_avx_x86_64 camellia_x86_64 serpent_avx_x86_64 serpent_sse2_x86_64 xts serpent_generic blowfish_generic blowfish_x86_64 blowfish_common cast5_avx_x86_64 cast5_generic cast_common des_generic cmac xcbc rmd160 crypto_null af_key xfrm_algo xt_nat xt_tcpudp veth xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 xt_addrtype iptable_filter
[23882.054488]  ip_tables x_tables nf_nat nf_conntrack br_netfilter bridge stp llc overlay intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm eeepc_wmi asus_wmi sparse_keymap crct10dif_pclmul crc32_pclmul aesni_intel ppdev shpchp aes_x86_64 lrw gf128mul lpc_ich glue_helper ablk_helper input_leds cryptd parport_pc parport serio_raw tpm_infineon mac_hid 8250_fintek nfsd auth_rpcgss nfs_acl lockd grace sunrpc autofs4 btrfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq raid1 raid0 multipath linear r8169 ahci libahci mii megaraid_sas wmi video
[23882.054773] CPU: 7 PID: 5954 Comm: tcpdump Tainted: G      D         4.2.0-27-generic #32-Ubuntu
[23882.054819] Hardware name: System manufacturer System Product Name/P8H67-M PRO, BIOS 1106 10/17/2011
[23882.054864] task: ffff8808153ce040 ti: ffff88046c9e0000 task.ti: ffff88046c9e0000
[23882.054907] RIP: 0010:[<ffffffff817bba89>]  [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
[23882.054955] RSP: 0018:ffff88046c9e3da8  EFLAGS: 00010202
[23882.054980] RAX: ffff880816c10038 RBX: ffff880816c10000 RCX: 000000000000ffff
[23882.055008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[23882.055036] RBP: ffff88046c9e3e48 R08: ffff880816c10390 R09: ffff880815fc5c80
[23882.055064] R10: ffffffff81cf7c00 R11: 0000000000000002 R12: 0000000000000000
[23882.055092] R13: 0000000000000000 R14: ffff880816c10120 R15: ffff880816c10390
[23882.055121] FS:  00007f4a150af700(0000) GS:ffff88083fbc0000(0000) knlGS:0000000000000000
[23882.055165] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[23882.055191] CR2: 00000000000000a0 CR3: 00000000b6161000 CR4: 00000000000406e0
[23882.055219] Stack:
[23882.055241]  ffff880816c10390 ffff880816c10038 0000000000000000 00000000d23f16ed
[23882.055291]  ffff8800b6477980 0000000100000000 0011000000000000 f804012a00000000
[23882.055341]  00000000f5511001 f804012a02000000 000000002f845101 0000000002000000
[23882.055390] Call Trace:
[23882.055420]  [<ffffffff8175b6a1>] inet_dgram_connect+0x41/0x80
[23882.055451]  [<ffffffff816c8879>] SYSC_connect+0xd9/0x110
[23882.055483]  [<ffffffff8121b895>] ? fd_install+0x25/0x30
[23882.055511]  [<ffffffff816c7734>] ? sock_map_fd+0x44/0x70
[23882.055540]  [<ffffffff816c961e>] SyS_connect+0xe/0x10
[23882.055569]  [<ffffffff817f1c72>] entry_SYSCALL_64_fastpath+0x16/0x75
[23882.055598] Code: ff ff ff 4c 8b 85 60 ff ff ff 49 89 47 28 4d 89 47 30 41 f6 85 17 01 00 00 40 0f 85 ae 01 00 00 41 f6 45 60 10 0f 85 7e 02 00 00 <49> 8b 85 a0 00 00 00 48 85 c0 0f 84 67 02 00 00 8b 40 2c 41 89 
[23882.055768] RIP  [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
[23882.055801]  RSP <ffff88046c9e3da8>
[23882.055824] CR2: 00000000000000a0
[23882.056185] ---[ end trace 91f389eb505db06a ]---
```

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Incomplete


** Tags: ipv6 kernel-bug networking

** Attachment added: "12 oopses"
   https://bugs.launchpad.net/bugs/1545031/+attachment/4570116/+files/greenwald-oopses.txt

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1545031

Title:
  Kernel OOPS: BUG: unable to handle kernel NULL pointer dereference; IP
  at ip6_datagram_connect+0x249/0x500

Status in linux package in Ubuntu:
  Incomplete

Bug description:
  We are running Ubuntu 15.10, in a server environment where we have
  IPsec transport set between servers both for IPv4 and IPv6. We can
  *reliably* reproduce this error by running:

  ```
  tcpdump "ip and ( host host1.example.com or host host2.example.com or host host3.example.com or host host4.example.com or host host5.example.com )"
  ```
  ...where host1-host5.example.com are actual hostnames of servers connected with IPsec transport with the problematic host. Those hosts are currently running either 15.04, or Debian 8, and the affected server is the first one we upgraded to 15.10.

  This immediately produces the kernel oops.

  Some more info on the host:

  ```
  # uname -a
  Linux host6 4.2.0-27-generic #32-Ubuntu SMP Fri Jan 22 04:49:08 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
  ```

  Version signature:

  ```
  # cat /proc/version_signature 
  Ubuntu 4.2.0-27.32-generic 4.2.8-ckt1
  ```

  An example oops (more in the attached file):

  ```
  [23882.053990] BUG: unable to handle kernel NULL pointer dereference at 00000000000000a0
  [23882.054044] IP: [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
  [23882.054080] PGD 0 
  [23882.054103] Oops: 0000 [#7] SMP   
  [23882.054129] Modules linked in: aufs xt_multiport ip6table_filter ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6_tables esp6 ah6 xfrm6_mode_transport nfnetlink_queue nfnetlink_log nfnetlink bluetooth drbg ansi_cprng authenc echainiv esp4 ah4 xfrm4_mode_transport xt_TCPMSS deflate ctr twofish_generic twofish_avx_x86_64 twofish_x86_64_3way twofish_x86_64 twofish_common camellia_generic camellia_aesni_avx_x86_64 camellia_x86_64 serpent_avx_x86_64 serpent_sse2_x86_64 xts serpent_generic blowfish_generic blowfish_x86_64 blowfish_common cast5_avx_x86_64 cast5_generic cast_common des_generic cmac xcbc rmd160 crypto_null af_key xfrm_algo xt_nat xt_tcpudp veth xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 xt_addrtype iptable_filter
  [23882.054488]  ip_tables x_tables nf_nat nf_conntrack br_netfilter bridge stp llc overlay intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm eeepc_wmi asus_wmi sparse_keymap crct10dif_pclmul crc32_pclmul aesni_intel ppdev shpchp aes_x86_64 lrw gf128mul lpc_ich glue_helper ablk_helper input_leds cryptd parport_pc parport serio_raw tpm_infineon mac_hid 8250_fintek nfsd auth_rpcgss nfs_acl lockd grace sunrpc autofs4 btrfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq raid1 raid0 multipath linear r8169 ahci libahci mii megaraid_sas wmi video
  [23882.054773] CPU: 7 PID: 5954 Comm: tcpdump Tainted: G      D         4.2.0-27-generic #32-Ubuntu
  [23882.054819] Hardware name: System manufacturer System Product Name/P8H67-M PRO, BIOS 1106 10/17/2011
  [23882.054864] task: ffff8808153ce040 ti: ffff88046c9e0000 task.ti: ffff88046c9e0000
  [23882.054907] RIP: 0010:[<ffffffff817bba89>]  [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
  [23882.054955] RSP: 0018:ffff88046c9e3da8  EFLAGS: 00010202
  [23882.054980] RAX: ffff880816c10038 RBX: ffff880816c10000 RCX: 000000000000ffff
  [23882.055008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
  [23882.055036] RBP: ffff88046c9e3e48 R08: ffff880816c10390 R09: ffff880815fc5c80
  [23882.055064] R10: ffffffff81cf7c00 R11: 0000000000000002 R12: 0000000000000000
  [23882.055092] R13: 0000000000000000 R14: ffff880816c10120 R15: ffff880816c10390
  [23882.055121] FS:  00007f4a150af700(0000) GS:ffff88083fbc0000(0000) knlGS:0000000000000000
  [23882.055165] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
  [23882.055191] CR2: 00000000000000a0 CR3: 00000000b6161000 CR4: 00000000000406e0
  [23882.055219] Stack:
  [23882.055241]  ffff880816c10390 ffff880816c10038 0000000000000000 00000000d23f16ed
  [23882.055291]  ffff8800b6477980 0000000100000000 0011000000000000 f804012a00000000
  [23882.055341]  00000000f5511001 f804012a02000000 000000002f845101 0000000002000000
  [23882.055390] Call Trace:
  [23882.055420]  [<ffffffff8175b6a1>] inet_dgram_connect+0x41/0x80
  [23882.055451]  [<ffffffff816c8879>] SYSC_connect+0xd9/0x110
  [23882.055483]  [<ffffffff8121b895>] ? fd_install+0x25/0x30
  [23882.055511]  [<ffffffff816c7734>] ? sock_map_fd+0x44/0x70
  [23882.055540]  [<ffffffff816c961e>] SyS_connect+0xe/0x10
  [23882.055569]  [<ffffffff817f1c72>] entry_SYSCALL_64_fastpath+0x16/0x75
  [23882.055598] Code: ff ff ff 4c 8b 85 60 ff ff ff 49 89 47 28 4d 89 47 30 41 f6 85 17 01 00 00 40 0f 85 ae 01 00 00 41 f6 45 60 10 0f 85 7e 02 00 00 <49> 8b 85 a0 00 00 00 48 85 c0 0f 84 67 02 00 00 8b 40 2c 41 89 
  [23882.055768] RIP  [<ffffffff817bba89>] ip6_datagram_connect+0x249/0x500
  [23882.055801]  RSP <ffff88046c9e3da8>
  [23882.055824] CR2: 00000000000000a0
  [23882.056185] ---[ end trace 91f389eb505db06a ]---
  ```

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1545031/+subscriptions

Follow ups

  Thread Previous • Date Previous • • Thread Next