Actions
Bug #7119
closedChanging LAGG attributes results in a panic/crash
Start date:
01/13/2017
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4
Affected Architecture:
amd64
Description
On 2.4, when changing attributes of an assigned LAGG such as the mode or membership, the firewall panics and reboots.
Tested on an 8860 and 4860, so it may be specific to igb. In this case, the lagg instance contained igb4,igb5 in LACP mode, and I attempted to change the mode to Failover. bjaffe encountered the same crash when changing member interfaces.
Fatal trap 12: page fault while in kernel mode cpuid = 2; apic id = 04 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff80e190c0 stack pointer = 0x28:0xfffffe022c32fa30 frame pointer = 0x28:0xfffffe022c32fa50 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 12 (swi6: task queue)
db:0:kdb.enter.default> show pcpu cpuid = 2 dynamic pcpu = 0xfffffe02a9c86f00 curthread = 0xfffff80006250500: pid 12 "swi6: task queue" curpcb = 0xfffffe022c32fcc0 fpcurthread = none idlethread = 0xfffff80006233500: tid 100005 "idle: cpu2" curpmap = 0xffffffff829e5600 tssp = 0xffffffff82a1dee0 commontssp = 0xffffffff82a1dee0 rsp0 = 0xfffffe022c32fcc0 gs32p = 0xffffffff82a24738 ldt = 0xffffffff82a24778 tss = 0xffffffff82a24768 db:0:kdb.enter.default> bt Tracing pid 12 tid 100023 td 0xfffff80006250500 arp_iflladdr() at arp_iflladdr+0x10/frame 0xfffffe022c32fa50 lagg_port_setlladdr() at lagg_port_setlladdr+0x14e/frame 0xfffffe022c32faa0 taskqueue_run_locked() at taskqueue_run_locked+0x14a/frame 0xfffffe022c32fb00 taskqueue_run() at taskqueue_run+0xbf/frame 0xfffffe022c32fb20 intr_event_execute_handlers() at intr_event_execute_handlers+0x20f/frame 0xfffffe022c32fb60 ithread_loop() at ithread_loop+0xc6/frame 0xfffffe022c32fbb0 fork_exit() at fork_exit+0x85/frame 0xfffffe022c32fbf0 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe022c32fbf0 --- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Actions