On a tainted kernel (proprietary nvidia driver installed) I got this in
the kernel log earlier:

Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.196527] ------------[ cut 
here ]------------
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.196533] kernel BUG at 
include/linux/skbuff.h:2338!
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.202252] invalid opcode: 
0000 [#1] SMP NOPTI
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.207232] CPU: 0 PID: 0 Comm: 
swapper/0 Tainted: P           OE     5.13.0-52-generic #59~20.04.1-Ubuntu
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.217813] Hardware name: 
Neousys Technology Inc. Nuvo-7000 Series/NVS-7000, BIOS Build190905 09/05/2019
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.228275] RIP: 
0010:eth_type_trans+0xe3/0x170
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.233231] Code: 28 00 00 00 
0f 85 a2 00 00 00 48 83 c4 18 5b 5d c3 a8 01 75 42 0f b6 87 80 00 00 00 83 e0 
f8 83 c8 03 88 87 80 00 00 00 eb 91 <0f> 0b 8b 47 70 2b 47 74 48 8b 97 c8 00 00 
00 83 f8 01 7e 3e 48 85
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.253555] RSP: 
0018:ffffb2c380003db0 EFLAGS: 00010207
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.259093] RAX: 
0000000000000bd4 RBX: ffff97a4a36340d0 RCX: 0000000000018043
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.266640] RDX: 
ffff97a490244000 RSI: ffff97a490244000 RDI: ffff97a58ba87000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.274184] RBP: 
ffffb2c380003dd0 R08: 00000000fffffff2 R09: 0000000000001000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.281754] R10: 
ffff97a4a3634ec0 R11: 00000000000000c0 R12: ffff97a490225340
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.289320] R13: 
ffff97a4a1b702f0 R14: ffff97a58ba87000 R15: 0000000000001000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.296940] FS:  
0000000000000000(0000) GS:ffff97abdc200000(0000) knlGS:0000000000000000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.305538] CS:  0010 DS: 0000 
ES: 0000 CR0: 0000000080050033
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.311613] CR2: 
00007fba79b518b0 CR3: 000000031b810001 CR4: 00000000003706f0
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.319171] Call Trace:
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.321771]  <IRQ>
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.323914]  
igb_clean_rx_irq+0x3b2/0xca0 [igb]
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.328731]  
igb_poll+0x5c/0x350 [igb]
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.332742]  
__napi_poll+0x2e/0x140
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.336470]  
net_rx_action+0x23f/0x290
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.340447]  
__do_softirq+0xcc/0x282
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.344244]  
irq_exit_rcu+0xa4/0xb0
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.347953]  
common_interrupt+0x8a/0xa0
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.352056]  </IRQ>
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.354316]  <TASK>
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.356568]  
asm_common_interrupt+0x1e/0x40
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.361014] RIP: 
0010:cpuidle_enter_state+0xcc/0x360
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.366233] Code: 3d 51 84 0b 
6d e8 e4 67 78 ff 49 89 c6 0f 1f 44 00 00 31 ff e8 35 73 78 ff 80 7d d7 00 0f 
85 01 01 00 00 fb 66 0f 1f 44 00 00 <45> 85 ff 0f 88 0d 01 00 00 49 63 c7 4c 2b 
75 c8 48 8d 14 40 48 8d
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.386143] RSP: 
0018:ffffffff94403dc8 EFLAGS: 00000246
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.391695] RAX: 
ffff97abdc234e40 RBX: 0000000000000004 RCX: 000000000000001f
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.399260] RDX: 
0000000000000000 RSI: 000000002aaaa424 RDI: 0000000000000000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.406845] RBP: 
ffffffff94403e00 R08: 000000f92cae429b R09: ffffffff94650e60
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.414412] R10: 
ffff97abdc233864 R11: ffff97abdc233844 R12: ffffd2c37fa00300
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.421988] R13: 
ffffffff94650e60 R14: 000000f92cae429b R15: 0000000000000004
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.429580]  ? 
cpuidle_enter_state+0xbb/0x360
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.434225]  
cpuidle_enter+0x2e/0x40
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.438030]  
call_cpuidle+0x23/0x40
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.441746]  do_idle+0x1e6/0x260
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.445161]  
cpu_startup_entry+0x20/0x30
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.449340]  rest_init+0xb8/0xba
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.452771]  
arch_call_rest_init+0xe/0x1b
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.457026]  
start_kernel+0x6ae/0x6d4
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.460926]  
x86_64_start_reservations+0x24/0x26
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.465865]  
x86_64_start_kernel+0x8b/0x8f
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.470238]  
secondary_startup_64_no_verify+0xc2/0xcb
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.475612]  </TASK>
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.477949] Modules linked in: 
xt_nat veth xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo 
iptable_nat nf_nat br_netfilter bridge stp llc nvidia_uvm(POE) nvidia_drm(POE) 
aufs intel_rapl_msr intel_rapl_common intel_tcc_cooling x86_pkg_temp_thermal 
nvidia_modeset(POE) intel_powerclamp snd_sof_pci_intel_cnl 
snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation 
soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof 
snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi overlay 
soundwire_bus ledtrig_audio coretemp snd_soc_core snd_hda_codec_hdmi 
nvidia(POE) snd_compress ac97_bus snd_pcm_dmaengine kvm_intel kvm snd_hda_intel 
i915 snd_intel_dspcfg crct10dif_pclmul ghash_clmulni_intel snd_intel_sdw_acpi 
aesni_intel drm_kms_helper snd_hda_codec crypto_simd snd_hda_core cryptd cec 
snd_hwdep snd_pcm rc_core rapl fb_sys_fops snd_timer syscopyarea intel_cstate 
nls_iso8859_1 snd sy
 sfillrect intel_wmi_thunderbolt serio_raw
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.478000]  efi_pstore ee1004 
soundcore mei_me sysimgblt mei intel_pch_thermal mac_hid acpi_pad acpi_tad 
ip6t_REJECT nf_reject_ipv6 xt_hl ip6t_rt ipt_REJECT nf_reject_ipv4 xt_LOG 
nf_log_syslog xt_limit xt_addrtype xt_tcpudp xt_conntrack nf_conntrack 
nf_defrag_ipv6 nf_defrag_ipv4 sch_fq_codel libcrc32c ip6table_filter ip6_tables 
iptable_filter bpfilter drm ip_tables x_tables autofs4 usbhid hid nvme ahci igb 
xhci_pci i2c_algo_bit i2c_i801 crc32_pclmul psmouse e1000e i2c_smbus nvme_core 
libahci xhci_pci_renesas dca wmi video
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.619379] ---[ end trace 
ba41729a0dd326d8 ]---
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.781758] RIP: 
0010:eth_type_trans+0xe3/0x170
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.786596] Code: 28 00 00 00 
0f 85 a2 00 00 00 48 83 c4 18 5b 5d c3 a8 01 75 42 0f b6 87 80 00 00 00 83 e0 
f8 83 c8 03 88 87 80 00 00 00 eb 91 <0f> 0b 8b 47 70 2b 47 74 48 8b 97 c8 00 00 
00 83 f8 01 7e 3e 48 85
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.806491] RSP: 
0018:ffffb2c380003db0 EFLAGS: 00010207
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.812004] RAX: 
0000000000000bd4 RBX: ffff97a4a36340d0 RCX: 0000000000018043
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.819586] RDX: 
ffff97a490244000 RSI: ffff97a490244000 RDI: ffff97a58ba87000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.827126] RBP: 
ffffb2c380003dd0 R08: 00000000fffffff2 R09: 0000000000001000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.834719] R10: 
ffff97a4a3634ec0 R11: 00000000000000c0 R12: ffff97a490225340
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.842312] R13: 
ffff97a4a1b702f0 R14: ffff97a58ba87000 R15: 0000000000001000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.849867] FS:  
0000000000000000(0000) GS:ffff97abdc200000(0000) knlGS:0000000000000000
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.858497] CS:  0010 DS: 0000 
ES: 0000 CR0: 0000000080050033
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.864637] CR2: 
00007fba79b518b0 CR3: 00000001c28a8002 CR4: 00000000003706f0

Message from syslogd@rc-cube-78d0042d744c at Sep 15 10:44:13 ...
 kernel:[ 1070.872178] Kernel panic - not syncing: Fatal exception in interrupt
Sep 15 10:44:13 rc-cube-78d0042d744c kernel: [ 1070.872178] Kernel panic - not 
syncing: Fatal exception in interrupt

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-signed-hwe-5.15 in Ubuntu.
https://bugs.launchpad.net/bugs/1997764

Title:
  igb driver crashes kernel when receiving jumbo frame UDP packets with
  all zeros

Status in linux-signed-hwe-5.15 package in Ubuntu:
  New

Bug description:
  With a high MTU (9000) set on the interface, sending packets
  containing over ~3000 zero bytes to a network card using the igb
  driver results in broken packets or in the worst case for some packet
  sizes even leads to kernel panics or full freeze.

  So far I observed this for Intel I350 and I210 network cards which use
  the igb driver.

  This is easy to reproduce:
  * set MTU to 9000
  * send ping of death: ping -M do -p 00 3016 <ip>
  -> kernel panic or complete freeze of system

  If the data is not zero, it works fine:
  ping -M do -p ff 3016 <ip>

  Depending on packet length:
  * < 3000: fine
  * 3016: panic/freeze
  * > 3030: packet not complete

  I also tested this with the following kernel versions:
  * 5.8.0-63-generic -> OK
  * 5.11.0-46-generic -> OK
  * 5.13.0-52-generic -> broken
  * 5.15.0-41-generic -> broken
  * 5.19.5-051905-generic mainline -> broken

  We noticed that since we have GigE Vision cameras which send the data
  via UDP with packet sizes up to 9000. When we turned off the light
  (and hence many bytes in the payload were zero), the packets would not
  be complete anymore (checked with tcpdump/wireshark) or even lead to
  kernel panics.

  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: linux-image-5.15.0-53-generic 5.15.0-53.59~20.04.1
  ProcVersionSignature: Ubuntu 5.15.0-53.59~20.04.1-generic 5.15.64
  Uname: Linux 5.15.0-53-generic x86_64
  ApportVersion: 2.20.11-0ubuntu27.25
  Architecture: amd64
  CasperMD5CheckResult: skip
  Date: Thu Nov 24 13:16:00 2022
  SourcePackage: linux-signed-hwe-5.15
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-signed-hwe-5.15/+bug/1997764/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to