Re: kern/52151: kernel panic in IPsec processing

[Ryota Ozaki <ozaki-r%netbsd.org@localhost>]

The following reply was made to PR kern/52151; it has been noted by GNATS.

From: Ryota Ozaki <ozaki-r%netbsd.org@localhost>
To: clare%csel.org@localhost
Cc: "gnats-bugs%NetBSD.org@localhost" <gnats-bugs%netbsd.org@localhost>, kern-bug-people%netbsd.org@localhost, 
	gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Subject: Re: kern/52151: kernel panic in IPsec processing
Date: Mon, 10 Apr 2017 18:59:35 +0900

 On Mon, Apr 10, 2017 at 4:00 PM,  <clare%csel.org@localhost> wrote:
 >         Note: There was a bad value `ciritical' for the field `Severity'.
 >         It was set to the default value of `serious'.
 >
 >>Number:         52151
 >>Category:       kern
 >>Synopsis:       kernel panic in IPsec processing
 >>Confidential:   no
 >>Severity:       serious
 >>Priority:       medium
 >>Responsible:    kern-bug-people
 >>State:          open
 >>Class:          sw-bug
 >>Submitter-Id:   net
 >>Arrival-Date:   Mon Apr 10 07:00:00 +0000 2017
 >>Originator:     DOYASHIKI Shinichi
 >>Release:        NetBSD 7.99.67 around 2017-04-10
 >>Organization:
 >         at home
 >>Environment:
 > System: NetBSD kotori.csel.org 7.99.67 NetBSD 7.99.67 (CONOHAVPS) #0: Mon Apr 10 05:28:09 JST 2017 clare%kanako.csel.org@localhost:/export/stage/hack/src/sys/arch/amd64/compile/CONOHAVPS amd64
 > Architecture: x86_64
 > Machine: amd64
 >>Description:
 >         kernel panic generated around IPsec processing.
 >>How-To-Repeat:
 >         1) setup IKE and IPsec ESP transport mode over IPv6.
 >            I used racoon(8) for IKE.
 >         2) ping6 from remote site.
 >         3) see kernel panic as following:
 >
 > panic: kernel diagnostic assertion "rw_lock_held(&in6_multilock)" failed: file "../../../../netine
 > t6/mld6.c", line 861
 > cpu0: Begin traceback...
 > vpanic() at netbsd:vpanic+0x140
 > ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
 > in6_lookup_multi() at netbsd:in6_lookup_multi+0x77
 > key_ismyaddr() at netbsd:key_ismyaddr+0x76
 > key_checkspidup.isra.19() at netbsd:key_checkspidup.isra.19+0x54
 > key_getspi() at netbsd:key_getspi+0x1c6
 > key_parse() at netbsd:key_parse+0x725
 > key_output() at netbsd:key_output+0x162
 > key_send_wrapper() at netbsd:key_send_wrapper+0x6c
 > sosend() at netbsd:sosend+0x76f
 > do_sys_sendmsg_so() at netbsd:do_sys_sendmsg_so+0x272
 > do_sys_sendmsg() at netbsd:do_sys_sendmsg+0x85
 > sys_sendto() at netbsd:sys_sendto+0x5c
 > syscall() at netbsd:syscall+0x1d8
 > --- syscall (number 133) ---
 > 730147105fba:
 > cpu0: End traceback...
 >
 >>Fix:
 
 Could you try the patch?:
   http://www.netbsd.org/~ozaki-r/fix-PR52151.diff
 
 Thanks,
   ozaki-r