From owner-freebsd-ipfw@freebsd.org Fri Jun 17 03:38:43 2016 Return-Path: Delivered-To: freebsd-ipfw@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4F914A77AD1; Fri, 17 Jun 2016 03:38:43 +0000 (UTC) (envelope-from asomers@gmail.com) Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 15BA422A9; Fri, 17 Jun 2016 03:38:43 +0000 (UTC) (envelope-from asomers@gmail.com) Received: by mail-oi0-x22a.google.com with SMTP id d132so99634278oig.1; Thu, 16 Jun 2016 20:38:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=sYahi6RMcQ9W3aXmN9lxdZGbTRKZaeuiQbCUodYIkxY=; b=AUo9u8BYEUljVwc5BWh0uR2oyIDTH5m7TugInorfoWIwAGhptmGRYtClKWWKaPQ64Q WkHjPN29hUSF9cbFvVYkS8t38ULtqeh6ppBK18wGI81C1L7oe1KAeXmtIq6387Txp6Du JG/GIvsIDTYXmXKyHCI4lH2w5rM2u6aAofz2K8HnxvYB0uiDFTjf2QBrJ6IhtB3iKrTy EMe+yBbwG9US2pLC7EbFr46EaQAIFVqajjfebRVZtZTkVfV2qy94K994tLkXx+N2UDxi h/ZUFy6afib5Uz+2090+55dfSfiGnY6nP+9cfxmnLe9n3X6xFv1IwsYdJx54JvirUX2a RmrA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=sYahi6RMcQ9W3aXmN9lxdZGbTRKZaeuiQbCUodYIkxY=; b=HOzY9LzFl2P6CiPDICGALsix2qRyKaTj9Co/pYlrr6bCrZCPq3hJJybwxb7Hc7p6uM 3G2Gd3YCVS2qKbsn7NaJXJqGSliJCuFMd1Kt/BHe+iU/8QoW6T45Si4KSzOmhboc0c/J IO6Tb+/GfWnkyz5aDys/ipgPP6Q9RjeC8p0RT7Js9lS5eszdv2fb0A9qrGqKAE3sW9/F hI6fvT4Gosr5TQWMoRwUrCHGL6UHi/PzBxEkOgmMU++LQ2oUT2wm+Gh/G7PSoqPQB7ZK wN1NQfykxNygYDeVI3FVX1moGUpHLnTKoceAulWRSY7LDjaVfJPfy2Oi9ZCFuiOmbSlN 5BUQ== X-Gm-Message-State: ALyK8tIp3eNJPbD9cVnKVfuf9whu7Omd6u08htiHZXYGXUE/1Oyco6ExSj2+K3U0NuK9byjn4y5x02iv5IWjqA== X-Received: by 10.157.29.106 with SMTP id m97mr219753otm.164.1466134722329; Thu, 16 Jun 2016 20:38:42 -0700 (PDT) MIME-Version: 1.0 Sender: asomers@gmail.com Received: by 10.202.102.206 with HTTP; Thu, 16 Jun 2016 20:38:41 -0700 (PDT) In-Reply-To: <1466125434.1167831.640215001.594DC233@webmail.messagingengine.com> References: <1466125434.1167831.640215001.594DC233@webmail.messagingengine.com> From: Alan Somers Date: Thu, 16 Jun 2016 21:38:41 -0600 X-Google-Sender-Auth: VRaAhEzuPlc0JWy3xt__7hiYO4w Message-ID: Subject: Re: ALPHA3 panic with ipfw+dummynet and gif/gre tunnels To: Mark Felder Cc: FreeBSD CURRENT , freebsd-ipfw@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 03:38:43 -0000 On Thu, Jun 16, 2016 at 7:03 PM, Mark Felder wrote: > Hello, > > I can pretty reliably panic CURRENT by creating/destroying gif and gre > interfaces used for IPv6 tunnels. I'm uploading the dump, kernel.debug, > and kernel in a tarball here: > > https://feld.me/freebsd/crash/r301929.tgz > > It's still uploading so you might end up with an incomplete download if > you fetch it now. Here's the sha256 of it: > > 1e9fddad1da3bac2b11c51a18c7dad48eb9259acf844f35f5eb40630ca84de64 > r301929.tgz > > > Here's the backtrace: > > (kgdb) bt > #0 doadump (textdump=0) at pcpu.h:221 > #1 0xffffffff80391fab in db_dump (dummy=, > dummy2=false, dummy3=0, dummy4=0x0) at /usr/src/sys/ddb/db_command.c:533 > #2 0xffffffff80391da9 in db_command (cmd_table=) > at /usr/src/sys/ddb/db_command.c:440 > #3 0xffffffff80391b04 in db_command_loop () at > /usr/src/sys/ddb/db_command.c:493 > #4 0xffffffff80394a3b in db_trap (type=, > code=) at /usr/src/sys/ddb/db_main.c:251 > #5 0xffffffff80a88913 in kdb_trap (type=, > code=, tf=) at > /usr/src/sys/kern/subr_kdb.c:654 > #6 0xffffffff80eb8331 in trap_fatal (frame=0xfffffe0122831770, eva=26) > at /usr/src/sys/amd64/amd64/trap.c:836 > #7 0xffffffff80eb857d in trap_pfault (frame=0xfffffe0122831770, > usermode=0) at /usr/src/sys/amd64/amd64/trap.c:691 > #8 0xffffffff80eb7a64 in trap (frame=0xfffffe0122831770) at > /usr/src/sys/amd64/amd64/trap.c:442 > #9 0xffffffff80e97f91 in calltrap () at > /usr/src/sys/amd64/amd64/exception.S:236 > #10 0xffffffff80c57ebc in ip6_output (m0=, > opt=, ro=, flags= optimized out>, im6o=0x0, ifpp=0x0, inp=) > at /usr/src/sys/netinet6/ip6_output.c:1060 > #11 0xffffffff82661fd2 in dummynet_send (m=) at > /usr/src/sys/modules/dummynet/../../netpfil/ipfw/ip_dn_io.c:800 > #12 0xffffffff82661890 in dummynet_task (context=, > pending=) at > /usr/src/sys/modules/dummynet/../../netpfil/ipfw/ip_dn_io.c:746 > #13 0xffffffff80a9a1ac in taskqueue_run_locked (queue= out>) at /usr/src/sys/kern/subr_taskqueue.c:465 > #14 0xffffffff80a9acf8 in taskqueue_thread_loop (arg= out>) at /usr/src/sys/kern/subr_taskqueue.c:719 > #15 0xffffffff80a0b3e4 in fork_exit (callout=0xffffffff80a9ac70 > , arg=0xffffffff8266c8a8, > frame=0xfffffe0122831c00) at /usr/src/sys/kern/kern_fork.c:1038 > #16 0xffffffff80e984ce in fork_trampoline () at > /usr/src/sys/amd64/amd64/exception.S:611 > #17 0x0000000000000000 in ?? () > Current language: auto; currently minimal > > > -- > Mark Felder > ports-secteam member > feld@FreeBSD.org > _______________________________________________ Yeah, FreeBSD has a problem with destroying any kind of cloned interface. How many times, on average, do you need to destroy one before you get the panic?