From owner-freebsd-net@freebsd.org Fri Apr 20 23:19:41 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9D241FAAB5B for ; Fri, 20 Apr 2018 23:19:41 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 2F6DF7B715 for ; Fri, 20 Apr 2018 23:19:41 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.ysv.freebsd.org (Postfix) id DFAA8FAAB58; Fri, 20 Apr 2018 23:19:40 +0000 (UTC) Delivered-To: net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BB633FAAB57 for ; Fri, 20 Apr 2018 23:19:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.ysv.freebsd.org (mxrelay.ysv.freebsd.org [IPv6:2001:1900:2254:206a::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.ysv.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 3F63C7B6EC for ; Fri, 20 Apr 2018 23:19:40 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.ysv.freebsd.org (Postfix) with ESMTPS id 7D2824A44 for ; Fri, 20 Apr 2018 23:19:39 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id w3KNJdQI084169 for ; Fri, 20 Apr 2018 23:19:39 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id w3KNJdXF084168 for net@FreeBSD.org; Fri, 20 Apr 2018 23:19:39 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 227654] [panic] repeatable crash with IPv6+lagg+vlan+em Date: Fri, 20 Apr 2018 23:19:39 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.1-STABLE X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: eugen@freebsd.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: attachments.created Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Apr 2018 23:19:42 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D227654 --- Comment #2 from Eugene Grosbein --- Created attachment 192690 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D192690&action= =3Dedit debugging patch for single user only Forgot to note that my kernel has VIMAGE too. I've reproduced this with my home desktop that has serial console, so I've digged this a bit deeper suspecting that curvnet may be not initialized. I've added some debugging output, the diff is attached. KASSERT did not catch this for unknown reason, so it's commented out. Anyway, curvnet occured to be zero, so any attempt to use V_link_pfil_hook dereferences NULL producing this panic: ether_output_frame: vlan61: curvnet 0 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0453d37= 780 ether_output() at ether_output+0x64c/frame 0xfffffe0453d37820 arprequest() at arprequest+0x443/frame 0xfffffe0453d37920 arp_ifinit() at arp_ifinit+0x58/frame 0xfffffe0453d37960 arp_handle_ifllchange() at arp_handle_ifllchange+0x3d/frame 0xfffffe0453d37= 980 if_setlladdr() at if_setlladdr+0x21e/frame 0xfffffe0453d379e0 taskqueue_run_locked() at taskqueue_run_locked+0x14c/frame 0xfffffe0453d37a= 40 taskqueue_thread_loop() at taskqueue_thread_loop+0x88/frame 0xfffffe0453d37= a70 fork_exit() at fork_exit+0x84/frame 0xfffffe0453d37ab0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0453d37ab0 --- trap 0, rip =3D 0, rsp =3D 0, rbp =3D 0 --- Fatal trap 12: page fault while in kernel mode cpuid =3D 3; apic id =3D 03 fault virtual address =3D 0x28 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff80aca683 stack pointer =3D 0x28:0xfffffe0453d37790 frame pointer =3D 0x28:0xfffffe0453d37820 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 0 (thread taskq) trap number =3D 12 p --=20 You are receiving this mail because: You are the assignee for the bug.=