Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Jul 2016 21:04:08 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 211486] [panic] [IPSec] [IP6] Crash with IPv6 ESP usage
Message-ID:  <bug-211486-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D211486

            Bug ID: 211486
           Summary: [panic] [IPSec] [IP6] Crash with IPv6 ESP usage
           Product: Base System
           Version: 11.0-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: bugzilla.freebsd@omnilan.de

Unread portion of the kernel message buffer:
Kernel page fault with the following non-sleepable locks held:
exclusive rw tcpinp (tcpinp) r =3D 0 (0xfffff80007b1fe18) locked @
/usr/local/share/deploy-tools/RELENG_11/src/sys/netinet6/in6_pcb.c:1172
shared rw tcp (tcp) r =3D 0 (0xffffffff82ad2bd8) locked @
/usr/local/share/deploy-tools/RELENG_11/src/sys/netinet/tcp_input.c:802
stack backtrace:
#0 0xffffffff80ab4d30 at witness_debugger+0x70
#1 0xffffffff80ab6017 at witness_warn+0x3d7
#2 0xffffffff80ec63d7 at trap_pfault+0x57
#3 0xffffffff80ec5a64 at trap+0x284
#4 0xffffffff80ea6161 at calltrap+0x8
#5 0xffffffff80c43c51 at tcp_twrespond+0x231
#6 0xffffffff80c436f5 at tcp_twstart+0x1f5
#7 0xffffffff80c34078 at tcp_do_segment+0x23c8
#8 0xffffffff80c310b4 at tcp_input+0xe44
#9 0xffffffff80c30221 at tcp6_input+0xf1
#10 0xffffffff80c82799 at ipsec6_common_input_cb+0x4c9
#11 0xffffffff80c97101 at esp_input_cb+0x671
#12 0xffffffff80ca9e69 at swcr_process+0xd69
#13 0xffffffff80ca6c2f at crypto_dispatch+0x7f
#14 0xffffffff80c9605a at esp_input+0x4fa
#15 0xffffffff80c8179b at ipsec_common_input+0x40b
#16 0xffffffff80c8222d at ipsec6_common_input+0xcd
#17 0xffffffff80c64070 at ip6_input+0xc70


Fatal trap 12: page fault while in kernel mode
cpuid =3D 2; apic id =3D 02
fault virtual address   =3D 0x1a
fault code              =3D supervisor read data, page not present
instruction pointer     =3D 0x20:0xffffffff80c65afc
stack pointer           =3D 0x28:0xfffffe0091f1e5f0
frame pointer           =3D 0x28:0xfffffe0091f1e850
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 0 (em0 que)


I have static keys and policy (via ipsec.conf) which is in use for several
years.
Updated stable/10 to stable/11 whci crashes the machine as soon as there's
traffic mathcing the IPSec policy.

core dump available, just tell me how I can help =E2=80=93 not able to diag=
nose
furthere :-(

-Harry

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-211486-8>