Re: kern/52151: kernel panic in IPsec processing

[Ryota Ozaki <ozaki-r%netbsd.org@localhost>]

On Mon, Apr 10, 2017 at 4:00 PM,  <clare%csel.org@localhost> wrote:
>         Note: There was a bad value `ciritical' for the field `Severity'.
>         It was set to the default value of `serious'.
>
>>Number:         52151
>>Category:       kern
>>Synopsis:       kernel panic in IPsec processing
>>Confidential:   no
>>Severity:       serious
>>Priority:       medium
>>Responsible:    kern-bug-people
>>State:          open
>>Class:          sw-bug
>>Submitter-Id:   net
>>Arrival-Date:   Mon Apr 10 07:00:00 +0000 2017
>>Originator:     DOYASHIKI Shinichi
>>Release:        NetBSD 7.99.67 around 2017-04-10
>>Organization:
>         at home
>>Environment:
> System: NetBSD kotori.csel.org 7.99.67 NetBSD 7.99.67 (CONOHAVPS) #0: Mon Apr 10 05:28:09 JST 2017 clare%kanako.csel.org@localhost:/export/stage/hack/src/sys/arch/amd64/compile/CONOHAVPS amd64
> Architecture: x86_64
> Machine: amd64
>>Description:
>         kernel panic generated around IPsec processing.
>>How-To-Repeat:
>         1) setup IKE and IPsec ESP transport mode over IPv6.
>            I used racoon(8) for IKE.
>         2) ping6 from remote site.
>         3) see kernel panic as following:
>
> panic: kernel diagnostic assertion "rw_lock_held(&in6_multilock)" failed: file "../../../../netine
> t6/mld6.c", line 861
> cpu0: Begin traceback...
> vpanic() at netbsd:vpanic+0x140
> ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
> in6_lookup_multi() at netbsd:in6_lookup_multi+0x77
> key_ismyaddr() at netbsd:key_ismyaddr+0x76
> key_checkspidup.isra.19() at netbsd:key_checkspidup.isra.19+0x54
> key_getspi() at netbsd:key_getspi+0x1c6
> key_parse() at netbsd:key_parse+0x725
> key_output() at netbsd:key_output+0x162
> key_send_wrapper() at netbsd:key_send_wrapper+0x6c
> sosend() at netbsd:sosend+0x76f
> do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x272
> do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x85
> sys_sendto() at netbsd:sys_sendto+0x5c
> syscall() at netbsd:syscall+0x1d8
> --- syscall (number 133) ---
> 730147105fba:
> cpu0: End traceback...
>
>>Fix:

Could you try the patch?:
  http://www.netbsd.org/~ozaki-r/fix-PR52151.diff

Thanks,
  ozaki-r