Regular IPv6 Kernel Panics in 23.1

[nweibley]

I believe this is a continuation of the issue found here: https://forum.opnsense.org/index.php?topic=29467.0

I just wanted to make others aware; I swapped an Intel X520-DA2 into my system and immediately started noticing spontaneous kernel panics; sometimes in as little as 30 minutes but at least once a day.

Similar call stack:

Code: [Select]

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address = 0x10
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff80eb8bed
stack pointer         = 0x28:0xfffffe00105994b0
frame pointer         = 0x28:0xfffffe00105995d0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 0 (if_io_tqg_0)
trap number = 12
panic: page fault
cpuid = 0
time = 1677909596
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0010599270
vpanic() at vpanic+0x17f/frame 0xfffffe00105992c0
panic() at panic+0x43/frame 0xfffffe0010599320
trap_fatal() at trap_fatal+0x385/frame 0xfffffe0010599380
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe00105993e0
calltrap() at calltrap+0x8/frame 0xfffffe00105993e0
--- trap 0xc, rip = 0xffffffff80eb8bed, rsp = 0xfffffe00105994b0, rbp = 0xfffffe00105995d0 ---
ip6_forward() at ip6_forward+0x62d/frame 0xfffffe00105995d0
pf_refragment6() at pf_refragment6+0x164/frame 0xfffffe0010599620
pf_test6() at pf_test6+0xfdb/frame 0xfffffe0010599790
pf_check6_out() at pf_check6_out+0x40/frame 0xfffffe00105997c0
pfil_run_hooks() at pfil_run_hooks+0x97/frame 0xfffffe0010599800
ip6_tryforward() at ip6_tryforward+0x2ce/frame 0xfffffe0010599880
ip6_input() at ip6_input+0x60f/frame 0xfffffe0010599960
netisr_dispatch_src() at netisr_dispatch_src+0xb9/frame 0xfffffe00105999b0
ether_demux() at ether_demux+0x138/frame 0xfffffe00105999e0
ng_ether_rcv_upper() at ng_ether_rcv_upper+0x88/frame 0xfffffe0010599a00
ng_apply_item() at ng_apply_item+0x2bd/frame 0xfffffe0010599aa0
ng_snd_item() at ng_snd_item+0x28e/frame 0xfffffe0010599ae0
ng_apply_item() at ng_apply_item+0x2bd/frame 0xfffffe0010599b80
ng_snd_item() at ng_snd_item+0x28e/frame 0xfffffe0010599bc0
ng_ether_input() at ng_ether_input+0x4c/frame 0xfffffe0010599bf0
ether_nh_input() at ether_nh_input+0x1f1/frame 0xfffffe0010599c50
netisr_dispatch_src() at netisr_dispatch_src+0xb9/frame 0xfffffe0010599ca0
ether_input() at ether_input+0x69/frame 0xfffffe0010599d00
iflib_rxeof() at iflib_rxeof+0xc27/frame 0xfffffe0010599e00
_task_fn_rx() at _task_fn_rx+0x72/frame 0xfffffe0010599e40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0x15d/frame 0xfffffe0010599ec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame 0xfffffe0010599ef0
fork_exit() at fork_exit+0x7e/frame 0xfffffe0010599f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0010599f30
--- trap 0x8038b000, rip = 0xffffffff80c30e8f, rsp = 0, rbp = 0 ---
mi_startup() at mi_startup+0xdf
KDB: enter: panic
panic.txt0600001214400557134  7134 ustarrootwheelpage faultversion.txt0600007414400557134  7537 ustarrootwheelFreeBSD 13.1-RELEASE-p6 stable/23.1-n250396-d34cd428508 SMP
I did build the official Intel ix driver against 23.1 sources because the official FreeBSD wasn't routing at 10G, per franco's method here. I only noticed these kernel panics begin after enabling VLAN hardware filtering on the NIC as my IOT VLAN was not working at all without.

Again, I just wanted to point this out in case others run into a similar issue and in case this is still a relevant issue being tracked by the opnsense team. Setting the tunable net.pf.share_forward6="0" did indeed resolve the issue for me.