kern/52083: panic: trap - route change -inet6 default -reject

[kardel%netbsd.org@localhost]

>Number:         52083
>Category:       kern
>Synopsis:       panic: trap - route change -inet6 default -reject
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Mar 17 09:50:00 +0000 2017
>Originator:     Frank Kardel
>Release:        NetBSD 7.99.65
>Organization:
	
>Environment:
	
	
System: NetBSD pip 7.99.65 NetBSD 7.99.65 (PIPGEN) #9: Tue Mar 7 18:39:19 CET 2017 kardel@xxx:/fs/raid2a/src/NetBSD/cur/src/obj.amd64/sys/arch/amd64/compile/PIPGEN amd64
Architecture: x86_64
Machine: amd64
>Description:
	-current 20170307 panics on "route change -inet6 default -reject"
(gdb) bt
#0  0xffffffff8021a045 in cpu_reboot (howto=howto@entry=260, bootstr=bootstr@entry=0x0) at /fs/raid2a/src/NetBSD/cur/src/sys/arch/amd64/amd64/machdep.c:674
#1  0xffffffff80988f8c in vpanic (fmt=fmt@entry=0xffffffff810d6eba "trap", ap=ap@entry=0xfffffe813b30b8b8) at /fs/raid2a/src/NetBSD/cur/src/sys/kern/subr_prf.c:342
#2  0xffffffff80989040 in panic (fmt=fmt@entry=0xffffffff810d6eba "trap") at /fs/raid2a/src/NetBSD/cur/src/sys/kern/subr_prf.c:258
#3  0xffffffff8021bc92 in trap (frame=0xfffffe813b30b9f0) at /fs/raid2a/src/NetBSD/cur/src/sys/arch/amd64/amd64/trap.c:298
#4  0xffffffff8020115e in alltraps ()
#5  0xffffffff80a18156 in if_is_deactivated (ifp=ifp@entry=0x0) at /fs/raid2a/src/NetBSD/cur/src/sys/net/if.c:1181
#6  0xffffffff80a51e08 in route_output_change (rtm=0xfffffe85f6e69f50, info=0xfffffe813b30bbe8, rt=0xfffffe88229034f0) at /fs/raid2a/src/NetBSD/cur/src/sys/net/rtsock.c:641
#7  route_output (m=0xfffffe8822ba7400, so=0xfffffe870523d008) at /fs/raid2a/src/NetBSD/cur/src/sys/net/rtsock.c:898
#8  0xffffffff80a4fce2 in route_send (l=0xfffffe881ec4d920, control=0x0, nam=0x0, m=0xfffffe8822ba7400, so=0xfffffe870523d008) at /fs/raid2a/src/NetBSD/cur/src/sys/net/rtsock.c:408
#9  route_send_wrapper (a=0xfffffe870523d008, b=0xfffffe8822ba7400, c=0x0, d=0x0, e=0xfffffe881ec4d920) at /fs/raid2a/src/NetBSD/cur/src/sys/net/rtsock.c:1895
#10 0xffffffff809ba89d in sosend (so=0xfffffe870523d008, addr=0x0, uio=0xfffffe813b30bdf0, top=0xfffffe8822ba7400, control=0x0, flags=<optimized out>, l=0xfffffe881ec4d920) at /fs/raid2a/src/NetBSD/cur/src/sys/kern/uipc_socket.c:1071
#11 0xffffffff809a0398 in soo_write (fp=<optimized out>, offset=<optimized out>, uio=<optimized out>, cred=<optimized out>, flags=<optimized out>) at /fs/raid2a/src/NetBSD/cur/src/sys/kern/sys_socket.c:118
#12 0xffffffff80994632 in dofilewrite (fd=fd@entry=3, fp=0xfffffe85be2aac40, buf=0xbb00a9c0, nbyte=160, offset=<optimized out>, flags=flags@entry=1, retval=retval@entry=0xfffffe813b30beb0)
    at /fs/raid2a/src/NetBSD/cur/src/sys/kern/sys_generic.c:355
#13 0xffffffff80994739 in sys_write (l=<optimized out>, uap=0xfffffe813b30bf00, retval=0xfffffe813b30beb0) at /fs/raid2a/src/NetBSD/cur/src/sys/kern/sys_generic.c:323
#14 0xffffffff8023f705 in sy_call (rval=0xfffffe813b30beb0, uap=0xfffffe813b30bf00, l=0xfffffe881ec4d920, sy=0xffffffff8147da40 <sysent+96>) at /fs/raid2a/src/NetBSD/cur/src/sys/sys/syscallvar.h:65
#15 sy_invoke (code=4, rval=0xfffffe813b30beb0, uap=0xfffffe813b30bf00, l=0xfffffe881ec4d920, sy=0xffffffff8147da40 <sysent+96>) at /fs/raid2a/src/NetBSD/cur/src/sys/sys/syscallvar.h:94
#16 syscall (frame=0xfffffe813b30bf00) at /fs/raid2a/src/NetBSD/cur/src/sys/arch/x86/x86/syscall.c:156
#17 0xffffffff80200771 in Xsyscall ()
(gdb)
>How-To-Repeat:
	see above
>Fix:
	Avoid NULL pointers for data access? 

>Unformatted: