11-BETA3 Panic with ip6+ESP, Fatal trap 12, severe outage

[Harry Schmalzbauer]

 Hello,

unfortunately my upgrade from 10.3 to 11-BETA3 caused machine outage.
ESP encrypted IPv6-traffic acauses a immediate crash.
Please see https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211486
whereI provided this info:

Unread portion of the kernel message buffer:
Kernel page fault with the following non-sleepable locks held:
exclusive rw tcpinp (tcpinp) r = 0 (0xfffff80007b1fe18) locked @ /usr/local/share/deploy-tools/RELENG_11/src/sys/netinet6/in6_pcb.c:1172
shared rw tcp (tcp) r = 0 (0xffffffff82ad2bd8) locked @ /usr/local/share/deploy-tools/RELENG_11/src/sys/netinet/tcp_input.c:802
stack backtrace:
#0 0xffffffff80ab4d30 at witness_debugger+0x70
#1 0xffffffff80ab6017 at witness_warn+0x3d7
#2 0xffffffff80ec63d7 at trap_pfault+0x57
#3 0xffffffff80ec5a64 at trap+0x284
#4 0xffffffff80ea6161 at calltrap+0x8
#5 0xffffffff80c43c51 at tcp_twrespond+0x231
#6 0xffffffff80c436f5 at tcp_twstart+0x1f5
#7 0xffffffff80c34078 at tcp_do_segment+0x23c8
#8 0xffffffff80c310b4 at tcp_input+0xe44
#9 0xffffffff80c30221 at tcp6_input+0xf1
#10 0xffffffff80c82799 at ipsec6_common_input_cb+0x4c9
#11 0xffffffff80c97101 at esp_input_cb+0x671
#12 0xffffffff80ca9e69 at swcr_process+0xd69
#13 0xffffffff80ca6c2f at crypto_dispatch+0x7f
#14 0xffffffff80c9605a at esp_input+0x4fa
#15 0xffffffff80c8179b at ipsec_common_input+0x40b
#16 0xffffffff80c8222d at ipsec6_common_input+0xcd
#17 0xffffffff80c64070 at ip6_input+0xc70


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address   = 0x1a
fault code              = supervisor read data, page not present
instruction pointer     = 0x20:0xffffffff80c65afc
stack pointer           = 0x28:0xfffffe0091f1e5f0
frame pointer           = 0x28:0xfffffe0091f1e850
code segment            = base r <https://svnweb.freebsd.org/changeset/base/>x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (em0 que)


Thanks,

-Harry