Frequent Panic in ip6_expire_frag_queue->icmpv6_send on 4.4.0-184-generic
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Incomplete
|
Undecided
|
Unassigned | ||
Xenial |
Fix Released
|
High
|
Kleber Sacilotto de Souza |
Bug Description
I happened to do an upgrade on a number of servers last week. Some of them got 4.4.0-179-generic and the ones upgraded a bit later during the week got 4.4.0-184-generic as it was just released. The ones with 4.4.0-184-generic started getting stuck. With linux-crashdump installed I obtained the dmesgs and crash dumps. The backtrace appears somewhat similar to #202669 but that one only happened on bare hardware for us - this one is on KVM virtual instances. #202669 paniced in icmpv6_route_lookup and this one dies already in icmpv6_send.
Between 2020-06-11 and 2020-06-15, on a set of 12 VMs running 4.4.0-184-generic, there were 85 crashes like this, on servers with noticeable IPv6 traffic. All of the 12 VMs with 4.4.0-184-generic crashed at least once. (There are more than 12 VMs experiencing this, this is just the set I had linux-crashdump on.)
[57063.487084] BUG: unable to handle kernel NULL pointer dereference at 0000000000000018
[57063.487184] IP: [<ffffffff81828
[57063.487218] PGD 0
[57063.487231] Oops: 0000 [#1] SMP
[57063.488665] Call Trace:
[57063.488679] <IRQ>
[57063.488705] [<ffffffff81756
[57063.488739] [<ffffffff810c3
[57063.488771] [<ffffffff81868
[57063.488802] [<ffffffff81841
[57063.488829] [<ffffffff8182f
[57063.488862] [<ffffffffc0366
[57063.488897] [<ffffffffc0366
[57063.488937] [<ffffffff810f5
[57063.488965] [<ffffffffc0366
[57063.489002] [<ffffffff810f7
...
Changed in linux (Ubuntu Xenial): | |
status: | New → Confirmed |
importance: | Undecided → High |
Changed in linux (Ubuntu): | |
status: | Confirmed → Incomplete |
Changed in linux (Ubuntu Xenial): | |
assignee: | nobody → Kleber Sacilotto de Souza (kleber-souza) |
tags: | added: verification-done-xenial |
Happened more than once on separate VMs.