From nobody@FreeBSD.org  Sun Oct  5 22:04:20 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 41DDC106568E
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  5 Oct 2008 22:04:20 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 30F648FC12
	for <freebsd-gnats-submit@FreeBSD.org>; Sun,  5 Oct 2008 22:04:20 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id m95M4KC7015699
	for <freebsd-gnats-submit@FreeBSD.org>; Sun, 5 Oct 2008 22:04:20 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id m95M4JfS015698;
	Sun, 5 Oct 2008 22:04:19 GMT
	(envelope-from nobody)
Message-Id: <200810052204.m95M4JfS015698@www.freebsd.org>
Date: Sun, 5 Oct 2008 22:04:19 GMT
From: Wouter Snels <nospam@ofloo.net>
To: freebsd-gnats-submit@FreeBSD.org
Subject: kernel trap freebsd6.3p2
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         127888
>Category:       kern
>Synopsis:       [ip6] [panic] kernel trap freebsd6.3p2
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    vwe
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Oct 05 22:10:01 UTC 2008
>Closed-Date:    Mon Oct 13 08:13:29 UTC 2008
>Last-Modified:  Mon Oct 13 08:13:29 UTC 2008
>Originator:     Wouter Snels
>Release:        FreeBSD 6.3-RELEASE-p2
>Organization:
>Environment:
FreeBSD narf.ofloo.net 6.3-RELEASE-p2 FreeBSD 6.3-RELEASE-p2 #2: Wed Jun  4 18:20:43 CEST 2008     ofloo@narf.ofloo.net:/usr/obj/usr/src/sys/OFL  i386
>Description:
system crashes when using IPv6 over multi connections, interface stf I
recently reported a simular problem on freebsd7 though I'm not sure if
it's the same thing because when I ran kgdb bt it showed something about
libthread

in case it's the same problem, http://www.freebsd.org/cgi/query-pr.cgi?pr=127699

can repeat it just have setup few 6tunnels and let data flow through it
system crashes within seconds.

sudo kgdb /boot/kernel/kernel /var/crash/vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
(no debugging symbols found)...Attempt to extract a component of a value that is not a structure pointer.
(kgdb) bt 
#0  0xc06a744a in doadump ()
#1  0xc06a79a6 in boot ()
#2  0xc06a7ccd in panic ()
#3  0xc0922524 in trap_fatal ()
#4  0xc0922263 in trap_pfault ()
#5  0xc0921ebd in trap ()
#6  0xc090d68a in calltrap ()
#7  0xc6e45713 in ?? ()
Previous frame inner to this frame (corrupt stack?)

>How-To-Repeat:
can repeat it just have setup few 6tunnels and let data flow through it
system crashes within seconds.
>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->freebsd-net 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Mon Oct 6 04:09:26 UTC 2008 
Responsible-Changed-Why:  
Over to maintainer(s). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=127888 
State-Changed-From-To: open->feedback 
State-Changed-By: vwe 
State-Changed-When: Mon Oct 6 17:38:30 UTC 2008 
State-Changed-Why:  
Wouter, 

by knowing your setup, I wildly guess it's again stf related (the instruction 
pointer suggests that). 
Again, we need to do the same procedure as we did last weekend. Please use 
all my information, how to load the KLD's into kgdb, get a backtrace, 
inspect the sourcecode and the like, the same way. 
The manpages to asf(8), kldstat(8) and kgdb(1) are there to help you. 
Please report back to the backtrace, find the faulting frame (a stf call), 
do a list and attach all that to the PR. 
Please understand I do not find much time in the weekdays to respond quickly. 


Responsible-Changed-From-To: freebsd-net->vwe 
Responsible-Changed-By: vwe 
Responsible-Changed-When: Mon Oct 6 17:38:30 UTC 2008 
Responsible-Changed-Why:  
grab 

http://www.freebsd.org/cgi/query-pr.cgi?pr=127888 
State-Changed-From-To: feedback->closed 
State-Changed-By: vwe 
State-Changed-When: Mon Oct 13 08:10:54 UTC 2008 
State-Changed-Why:  
related to PR kern/127699 (stf bug) 
patch and MFC is in the making 
(expected to be patched for 6.4-R, RE already approved) 
thank you for reporting 

http://www.freebsd.org/cgi/query-pr.cgi?pr=127888 
>Unformatted:
