kern/125239: kernel crash when using i

[Damien Saucez]

>Number:         125239
>Category:       kern
>Synopsis:       kernel crash when using i
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jul 03 16:10:05 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Damien Saucez
>Release:        FreeBSD 7.0-RELEASE i386
>Organization:
UCL
>Environment:
FreeBSD lisp01 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008     root at logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386
>Description:
The following commands

ifconfig gre0 create
ifconfig gre0 tunnel 172.17.100.1 172.17.100.2
ifconfig gre0 tunnel  10.101.1.1 10.101.1.2 netmask 255.255.255.255
ifconfig gre0 destroy
ifconfig gre0 create
ifconfig gre0 tunnel 172.17.100.1 172.17.100.2
ifconfig gre0 inet 10.101.1.1 10.101.1.2 netmask 255.255.255.255

make kernel crashes with a /var/crash/info file containing the following:

Dump header from device /dev/ad0s1b
  Architecture: i386
  Architecture Version: 2
  Dump Length: 36524032B (34 MB)
  Blocksize: 512
  Dumptime: Mon Jan  3 19:38:01 2000
  Hostname: lisp01
  Magic: FreeBSD Kernel Dump
  Version String: FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008
    root at logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC
  Panic String: page fault
  Dump Parity: 2344313183
  Bounds: 3
  Dump Status: good


The vmcore is available at http://ece.fsa.ucl.ac.be/dsaucez/freebsd/vmcore.ifconfig.gre
>How-To-Repeat:
Runs the following (with root access):

ifconfig gre0 create
ifconfig gre0 tunnel 172.17.100.1 172.17.100.2
ifconfig gre0 tunnel  10.101.1.1 10.101.1.2 netmask 255.255.255.255
ifconfig gre0 destroy
ifconfig gre0 create
ifconfig gre0 tunnel 172.17.100.1 172.17.100.2
ifconfig gre0 inet 10.101.1.1 10.101.1.2 netmask 255.255.255.255
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: