Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 31 Dec 2018 13:57:51 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 233535] Machines lost ping6 after adding same IPv6 address
Message-ID:  <bug-233535-7501-tOcAfhY7QF@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-233535-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-233535-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D233535

--- Comment #18 from Hans Petter Selasky <hselasky@FreeBSD.org> ---
Documenting yet another related crash scenario:

#12 0xffffffff80e292f0 in mld_change_state (inm=3D0xfffff802eb1f5800, delay=
=3D0)
    at /usr/img/freebsd/sys/netinet6/mld6.c:1909
#13 0xffffffff80e1546a in in6_joingroup_locked (ifp=3D<optimized out>,=20
    mcaddr=3D0xfffffe008da78618, imf=3D0x0, pinm=3D0xfffff8000415a960, dela=
y=3D0)
    at /usr/img/freebsd/sys/netinet6/in6_mcast.c:1321
#14 0xffffffff80e14f74 in in6_joingroup (ifp=3D0xffffffff81e95368 <cnputs_m=
tx>,=20
    mcaddr=3D0x80, imf=3D<optimized out>, pinm=3D0x80, delay=3D16)
    at /usr/img/freebsd/sys/netinet6/in6_mcast.c:1248
#15 0xffffffff80e0ce20 in in6_joingroup_legacy (ifp=3D<optimized out>,=20
    mcaddr=3D0x40002ff, delay=3D18, errorp=3D<optimized out>)
    at /usr/img/freebsd/sys/netinet6/in6.c:752
#16 in6_update_ifa_join_mc (ifp=3D<optimized out>, ifra=3D<optimized out>,=
=20
    ia=3D<optimized out>, flags=3D<optimized out>, in6m_sol=3D<optimized ou=
t>)
    at /usr/img/freebsd/sys/netinet6/in6.c:848
#17 in6_broadcast_ifa (ifp=3D<optimized out>, ifra=3D<optimized out>,=20
    ia=3D<optimized out>, flags=3D<optimized out>)
    at /usr/img/freebsd/sys/netinet6/in6.c:1227
#18 in6_update_ifa (ifp=3D<optimized out>, ifra=3D<optimized out>,=20
    ia=3D<optimized out>, flags=3D<optimized out>)
    at /usr/img/freebsd/sys/netinet6/in6.c:910
#19 0xffffffff80e0ae7b in in6_control (so=3D<optimized out>,=20
--Type <RET> for more, q to quit, c to continue without paging--
    data=3D<optimized out>, ifp=3D<optimized out>, td=3D<optimized out>)
    at /usr/img/freebsd/sys/netinet6/in6.c:564
#20 0xffffffff80cd13db in ifioctl (so=3D<optimized out>, cmd=3D2156423451,
data=3D0xfffff80006ea3b00 "mce0",=20
    td=3D0xfffff8011cc9a000) at /usr/img/freebsd/sys/net/if.c:3098
#21 0xffffffff80c3c41b in fo_ioctl (fp=3D<optimized out>, com=3D<optimized =
out>,
data=3D0x1d0, active_cred=3D0x80,=20
    td=3D<optimized out>) at /usr/img/freebsd/sys/sys/file.h:330
#22 kern_ioctl (td=3D<optimized out>, fd=3D<optimized out>, com=3D215642345=
1,=20
    data=3D0x1d0 <error: Cannot access memory at address 0x1d0>) at
/usr/img/freebsd/sys/kern/sys_generic.c:800
#23 0xffffffff80c3c10d in sys_ioctl (td=3D0xfffff8011cc9a000,
uap=3D0xfffff8011cc9a3c0)
    at /usr/img/freebsd/sys/kern/sys_generic.c:712
#24 0xffffffff8109deb2 in syscallenter (td=3D0xfffff8011cc9a000)
    at /usr/img/freebsd/sys/amd64/amd64/../../kern/subr_syscall.c:135
#25 amd64_syscall (td=3D0xfffff8011cc9a000, traced=3D0) at
/usr/img/freebsd/sys/amd64/amd64/trap.c:1154


#12 0xffffffff80e292f0 in mld_change_state (inm=3D0xfffff802eb1f5800, delay=
=3D0) at
/usr/img/freebsd/sys/netinet6/mld6.c:1909
1909            KASSERT(inm->in6m_ifp =3D=3D ifp, ("%s: bad ifp", __func__)=
);
(kgdb) list
1904                    return (0);
1905            /*
1906             * Sanity check that netinet6's notion of ifp is the
1907             * same as net's.
1908             */
1909            KASSERT(inm->in6m_ifp =3D=3D ifp, ("%s: bad ifp", __func__)=
);
1910=20=20=20=20
1911            MLD_LOCK();
1912            mli =3D MLD_IFINFO(ifp);
1913            KASSERT(mli !=3D NULL, ("%s: no mld_ifsoftc for ifp %p",
__func__, ifp));
(kgdb) print *inm
$3 =3D {
  in6m_addr =3D {
    __u6_addr =3D {
      __u6_addr8 =3D
"\377\002\000\004\000\000\000\000\000\000\000\002\340\312\325\032",=20
      __u6_addr16 =3D {767, 1024, 0, 0, 0, 512, 51936, 6869},=20
      __u6_addr32 =3D {67109631, 0, 33554432, 450218720}
    }
  },=20
  in6m_ifp =3D 0x0,=20
  in6m_ifma =3D 0xfffff80006969080,=20
  in6m_refcount =3D 1,=20
  in6m_state =3D 0,=20
  in6m_timer =3D 0,=20
  in6m_mli =3D 0xfffff800067e0900,=20
  in6m_nrele =3D {
    sle_next =3D 0x0
  },=20
  in6m_srcs =3D {
    rbh_root =3D 0x0
  },=20
  in6m_nsrc =3D 0,=20
  in6m_scq =3D {
    mq_head =3D {
      stqh_first =3D 0x0,=20
      stqh_last =3D 0xfffff802eb1f5850
    },=20
    mq_len =3D 0,=20
    mq_maxlen =3D 24
  },=20
  in6m_lastgsrtv =3D {
    tv_sec =3D 0,=20
    tv_usec =3D 0
  },=20
  in6m_sctimer =3D 0,=20
  in6m_scrv =3D 0,=20
  in6m_st =3D {{
      iss_fmode =3D 0,=20
      iss_asm =3D 0,=20
      iss_ex =3D 0,=20
      iss_in =3D 0,=20
      iss_rec =3D 0
    }, {
      iss_fmode =3D 2,=20
      iss_asm =3D 1,=20
      iss_ex =3D 1,=20
      iss_in =3D 0,=20
      iss_rec =3D 0
    }}
}

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-233535-7501-tOcAfhY7QF>