[Bug 211486] [panic] [IPSec] [IP6] Crash with IPv6 ESP usage

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211486

            Bug ID: 211486
           Summary: [panic] [IPSec] [IP6] Crash with IPv6 ESP usage
           Product: Base System
           Version: 11.0-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: kern
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: bugzilla.freebsd at omnilan.de

Unread portion of the kernel message buffer:
Kernel page fault with the following non-sleepable locks held:
exclusive rw tcpinp (tcpinp) r = 0 (0xfffff80007b1fe18) locked @
/usr/local/share/deploy-tools/RELENG_11/src/sys/netinet6/in6_pcb.c:1172
shared rw tcp (tcp) r = 0 (0xffffffff82ad2bd8) locked @
/usr/local/share/deploy-tools/RELENG_11/src/sys/netinet/tcp_input.c:802
stack backtrace:
#0 0xffffffff80ab4d30 at witness_debugger+0x70
#1 0xffffffff80ab6017 at witness_warn+0x3d7
#2 0xffffffff80ec63d7 at trap_pfault+0x57
#3 0xffffffff80ec5a64 at trap+0x284
#4 0xffffffff80ea6161 at calltrap+0x8
#5 0xffffffff80c43c51 at tcp_twrespond+0x231
#6 0xffffffff80c436f5 at tcp_twstart+0x1f5
#7 0xffffffff80c34078 at tcp_do_segment+0x23c8
#8 0xffffffff80c310b4 at tcp_input+0xe44
#9 0xffffffff80c30221 at tcp6_input+0xf1
#10 0xffffffff80c82799 at ipsec6_common_input_cb+0x4c9
#11 0xffffffff80c97101 at esp_input_cb+0x671
#12 0xffffffff80ca9e69 at swcr_process+0xd69
#13 0xffffffff80ca6c2f at crypto_dispatch+0x7f
#14 0xffffffff80c9605a at esp_input+0x4fa
#15 0xffffffff80c8179b at ipsec_common_input+0x40b
#16 0xffffffff80c8222d at ipsec6_common_input+0xcd
#17 0xffffffff80c64070 at ip6_input+0xc70


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address   = 0x1a
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80c65afc
stack pointer           = 0x28:0xfffffe0091f1e5f0
frame pointer           = 0x28:0xfffffe0091f1e850
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (em0 que)


I have static keys and policy (via ipsec.conf) which is in use for several
years.
Updated stable/10 to stable/11 whci crashes the machine as soon as there's
traffic mathcing the IPSec policy.

core dump available, just tell me how I can help – not able to diagnose
furthere :-(

-Harry

-- 
You are receiving this mail because:
You are the assignee for the bug.