From owner-freebsd-bugs@FreeBSD.ORG Thu Feb 5 15:53:17 2015 Return-Path: Delivered-To: freebsd-bugs@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id A18B0AAA for ; Thu, 5 Feb 2015 15:53:17 +0000 (UTC) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 88FEBEC3 for ; Thu, 5 Feb 2015 15:53:17 +0000 (UTC) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.14.9/8.14.9) with ESMTP id t15FrHri014708 for ; Thu, 5 Feb 2015 15:53:17 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 197351] [ip6] panic when lagg(4) removes IPv6 addresses from member interface Date: Thu, 05 Feb 2015 15:53:17 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.0-CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: ae@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Feb 2015 15:53:17 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197351 Bug ID: 197351 Summary: [ip6] panic when lagg(4) removes IPv6 addresses from member interface Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: ae@FreeBSD.org Created attachment 152588 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=152588&action=edit core.txt When lagg(4) removes IPv6 addresses from member interface system panics if IPv6 address had `autoconf` flag. How to reproduce: # ifconfig em0 inet6 fc00::1/64 autconf # ifconfig lagg0 create laggproto loadbalance laggport em0 laggport re0 up Fatal trap 9: general protection fault while in kernel mode cpuid = 3; apic id = 06 instruction pointer = 0x20:0xffffffff80b651a0 stack pointer = 0x28:0xfffffe06606c9540 frame pointer = 0x28:0xfffffe06606c9580 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 895 (ifconfig) (kgdb) bt #0 doadump (textdump=Unhandled dwarf expression opcode 0x93 ) at pcpu.h:219 #1 0xffffffff80358216 in db_fncall (dummy1=, dummy2=, dummy3=, dummy4=) at /home/devel/freebsd/base/head/sys/ddb/db_command.c:568 #2 0xffffffff80357efc in db_command (cmd_table=0x0) at /home/devel/freebsd/base/head/sys/ddb/db_command.c:440 #3 0xffffffff80357c64 in db_command_loop () at /home/devel/freebsd/base/head/sys/ddb/db_command.c:493 #4 0xffffffff8035a7a0 in db_trap (type=, code=Unhandled dwarf expression opcode 0x93 ) at /home/devel/freebsd/base/head/sys/ddb/db_main.c:251 #5 0xffffffff80993efe in kdb_trap (type=Unhandled dwarf expression opcode 0x93 ) at /home/devel/freebsd/base/head/sys/kern/subr_kdb.c:654 #6 0xffffffff80db4ef9 in trap_fatal (frame=0xfffffe06606c9490, eva=) at /home/devel/freebsd/base/head/sys/amd64/amd64/trap.c:856 #7 0xffffffff80db4bae in trap (frame=) at /home/devel/freebsd/base/head/sys/amd64/amd64/trap.c:201 #8 0xffffffff80d93eb2 in calltrap () at /home/devel/freebsd/base/head/sys/amd64/amd64/exception.S:235 #9 0xffffffff80b651a0 in find_pfxlist_reachable_router (pr=) at /home/devel/freebsd/base/head/sys/netinet6/nd6_rtr.c:1301 #10 0xffffffff80b639b6 in pfxlist_onlink_check () at /home/devel/freebsd/base/head/sys/netinet6/nd6_rtr.c:1479 #11 0xffffffff80b64ceb in prelist_remove (pr=) at /home/devel/freebsd/base/head/sys/netinet6/nd6_rtr.c:947 #12 0xffffffff80b5bfe5 in nd6_purge (ifp=0xfffff800069b7000) at /home/devel/freebsd/base/head/sys/netinet6/nd6.c:822 #13 0xffffffff80b44b93 in in6_ifdetach (ifp=0xfffff800069b7000) at /home/devel/freebsd/base/head/sys/netinet6/in6_ifattach.c:784 #14 0xffffffff8221cd1f in lagg_ioctl (ifp=, cmd=, data=) at /home/devel/freebsd/base/head/sys/modules/if_lagg/../../net/if_lagg.c:1406 #15 0xffffffff80a2c957 in ifioctl (so=0xfffff80006d2cf00, cmd=2152229261, data=0xfffffe06606c98f0 "lagg0", td=0xfffff80025c104a0) at /home/devel/freebsd/base/head/sys/net/if.c:2739 #16 0xffffffff809b5d00 in kern_ioctl (td=0xfffff80025c104a0, fd=, com=120, data=) at file.h:318 #17 0xffffffff809b5993 in sys_ioctl (td=0xfffff80025c104a0, uap=0xfffffe06606c9a40) at /home/devel/freebsd/base/head/sys/kern/sys_generic.c:718 #18 0xffffffff80db575f in amd64_syscall (td=0xfffff80025c104a0, traced=0) at subr_syscall.c:133 #19 0xffffffff80d9419b in Xfast_syscall () at /home/devel/freebsd/base/head/sys/amd64/amd64/exception.S:395 #20 0x00000008011e1c6a in ?? () -- You are receiving this mail because: You are the assignee for the bug.