reproducible kernel crash in NetBSD 7.1_RC1

[6bone%6bone.informatik.uni-leipzig.de@localhost]

Hello,

on NetBSD 7.1_RC1 (and earlier) I can create a kernel crash as follows:

ifconfig ixg0 ip4csum tcp4csum udp4csum tcp6csum udp6csum ip4csum-tx ip4csum-rx tcp4csum-tx tcp4csum-rx udp4csum-tx udp4csum-rx tcp6csum-tx tcp6csum-rx udp6csum-tx udp6csum-rx tso4 tso6
ifconfig vlan850 create
ifconfig vlan850 vlan 850 vlanif ixg0 up
ifconfig vlan850 ip4csum tcp4csum udp4csum tcp6csum udp6csum ip4csum-tx ip4csum-rx tcp4csum-tx tcp4csum-rx udp4csum-tx udp4csum-rx tcp6csum-tx tcp6csum-rx udp6csum-tx udp6csum-rx tso4 tso6
ifconfig vlan850 destroy

If it does not work, try again.

Can anyone take a look at the problem or should I make a bug report?

Thank you for your efforts

Regards
Uwe


#0  0xffffffff806880af in cpu_reboot (howto=howto@entry=260,
    bootstr=bootstr@entry=0x0) at /usr/src/sys/arch/amd64/amd64/machdep.c:671
#1  0xffffffff808cdb84 in vpanic (
    fmt=fmt@entry=0xffffffff80dcec2e "%s: %p: 0x%02x != 0x%02x\n",
    ap=ap@entry=0xfffffe815994a8f0) at /usr/src/sys/kern/subr_prf.c:340
#2  0xffffffff808cdc3f in panic (
    fmt=fmt@entry=0xffffffff80dcec2e "%s: %p: 0x%02x != 0x%02x\n")
    at /usr/src/sys/kern/subr_prf.c:256
#3  0xffffffff808c2926 in kmem_poison_check (sz=<optimized out>,
    p=<optimized out>) at /usr/src/sys/kern/subr_kmem.c:541
#4  kmem_intr_alloc (requested_size=requested_size@entry=136, kmflags=1)
    at /usr/src/sys/kern/subr_kmem.c:286
#5  0xffffffff80600179 in kern_malloc (size=size@entry=128,
    flags=flags@entry=4) at /usr/src/sys/kern/kern_malloc.c:115
#6  0xffffffff8061f15c in sysctl_log_realloc (log=0xfffffe8c14355b88)
    at /usr/src/sys/kern/kern_sysctl.c:2730
#7  sysctl_log_add (node=0xfffffe8c0f033410, logp=<optimized out>)
    at /usr/src/sys/kern/kern_sysctl.c:2462
#8  sysctl_createv (log=log@entry=0xfffffe8c0f033b40, cflags=cflags@entry=0,
    rnode=rnode@entry=0xfffffe815994ac00,
    cnode=cnode@entry=0xfffffe815994ac00, flags=16777217, flags@entry=512,
    type=type@entry=1, namep=namep@entry=0xffffffff80d57197 "sndq",
    descr=descr@entry=0xffffffff80d57330 "Interface output queue controls",
    func=func@entry=0x0, qv=qv@entry=0, newp=newp@entry=0x0,
    newlen=newlen@entry=0) at /usr/src/sys/kern/kern_sysctl.c:2130
#9  0xffffffff803e6d1d in sysctl_sndq_setup (ifq=0xfffffe8c0f033928,
    ifname=0xfffffe8c0f033838 "vlan850", clog=0xfffffe8c0f033b40)
    at /usr/src/sys/net/if.c:2323
#10 if_attach (ifp=ifp@entry=0xfffffe8c0f033810) at /usr/src/sys/net/if.c:607
#11 0xffffffff804c5eb6 in vlan_clone_create (
    ifc=0xffffffff810d4c40 <vlan_cloner>, unit=850)
    at /usr/src/sys/net/if_vlan.c:236
#12 0xffffffff803e82fa in if_clone_create (
    name=name@entry=0xfffffe8170238ca0 "vlan850") at /usr/src/sys/net/if.c:973
#13 0xffffffff803e8bd6 in doifioctl (so=0xfffffe8c0002b000, cmd=2156947834,
    data=<optimized out>, l=0xfffffe8bf9184540) at 
/usr/src/sys/net/if.c:1882
#14 0xffffffff808eb2d6 in soo_ioctl (fp=<optimized out>, cmd=2156947834,
    data=0xfffffe8170238ca0) at /usr/src/sys/kern/sys_socket.c:202
#15 0xffffffff808e04d9 in sys_ioctl (l=<optimized out>,
    uap=0xfffffe815994af00, retval=<optimized out>)
    at /usr/src/sys/kern/sys_generic.c:681
#16 0xffffffff808eb3da in sy_call (rval=0xfffffe815994aeb8,
    uap=0xfffffe815994af00, l=0xfffffe8bf9184540,
    sy=0xffffffff810d5bc0 <sysent+864>) at /usr/src/sys/sys/syscallvar.h:61
#17 sy_invoke (code=54, rval=0xfffffe815994aeb8, uap=0xfffffe815994af00,
    l=0xfffffe8bf9184540, sy=0xffffffff810d5bc0 <sysent+864>)
    at /usr/src/sys/sys/syscallvar.h:85
#18 syscall (frame=0xfffffe815994af00)
    at /usr/src/sys/arch/x86/x86/syscall.c:156
#19 0xffffffff80100691 in Xsyscall ()