On Wed, Jun 19, 2024 at 03:37:17PM +0000, Marco Agostani wrote: > > >Synopsis: ifconfig on a sec interface crash the system > >Category: System Hangs > >Environment: > System : OpenBSD 7.5 > Details : OpenBSD 7.5 (GENERIC.MP) #82: Wed Mar 20 15:48:40 MDT > 2024 > > dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP > > Architecture: OpenBSD.amd64 > Machine : amd64 > >Description: > I call sh /etc.netstart after a change to some interfaces the system > suddenly crash > After some dig up I discovered that one interface is responsible for > the issue. > /etc/hostname.sec7129 > > 10.0.1.234 10.0.1.233 description "to CAT tun7129" > up > !route add 10.219.128/19 10.0.1.233 -mpath -label AWSCAT > > doing the same for exmaple on other sec interface has no issues > > i.e. > ifconfig sec8129 10.0.1.238 10.0.1.237 exit w/o doing nothing > weird > > systemctl.conf contents > > ddb.panic=1 > kern.bufcachepercent=60 # Allow the kernel to use up to 90% of > the RAM for cache (default 10%) > net.inet.ip.forwarding=1 # Permit forwarding (routing) of > packets through the firewall > net.inet.icmp.errppslimit=1000 # Maximum number of outgoing ICMP > error messages per second > net.inet.ip.mtudisc=1 # TCP MTU (Maximum Transmission Unit) > discovery off since our mss is small enough > net.inet.tcp.rfc3390=1 # Enable RFC3390 TCP window increasing > so larger CWND can take affect > net.inet.ip.ttl=64 # the TTL should match what we have > for "min-ttl" in scrub rule in pf.conf > net.inet.tcp.ackonpush=1 # acks for packets with the push bit > set should not be delayed > net.inet.tcp.ecn=0 # Explicit Congestion Notification > enabled > net.inet.tcp.mssdflt=1452 # maximum segment size (1440 from > scrub pf.conf match statement) > net.inet.carp.log=2 # Log CARP state changes > net.inet.carp.preempt=1 # Enable CARP interfaces to preempt > each other (0 -> 1) > net.inet.ip.forwarding=1 # Enable packet forwarding through the > firewall (0 -> 1) > net.inet.ip.multipath=1 # Enable multipathing > > > >How-To-Repeat: > ifconfig sec7129 10.0.1.234 10.0.1.233
trace in the png: panic: kernel diagnostic assertion "!ISSET(rt->rt_flags, RTF_UP)" failed: file "/usr/src/sys/net/route.c", line 590 panic+0x130 __assert+0x29 rtfree+0x1bf route_output+0x464 route_send+0x5b sosend+0x385 dofilewritev+0x151 sys_writev+0xd2 syscall+0x55b Xsyscall+0x128