IJ11182: DOUBLE MBUF FREE IN IPSEC DUE TO READ LOCK PROTECTION

Obtain the fix for this APAR.

APAR status

• Closed as fixed if next.

Error description

• System with ipsec configured crashes with following
  stack.
  
  with netmalloc enabled the resulting stack is:
  
  (16)> f
  pvthread+11E400 STACK:
  [0007A384].panic_trap+000000 ()
  [00370FF4]net_free+000E54 (0000000000000001,
  000000000000001A)
  [00370FF4]net_free+000E54 (F1000500007C0B00,
  000000000785DE54)
  [07C1678C]_fltr_out_chk+00086C (??, ??, ??, ??, ??, ??,
  ??, ??)
  [07C1716C]ipsec_get_hdr_size4+0002AC (??, ??, ??, ??, ??,
  ??)
  [0785F904]tcp_output+004064 (??)
  [07859F7C]tcp_usrreq+001A1C (??, ??, ??, ??, ??)
  [005FFCB8]soesend+000D18 (??, ??, ??, ??, ??, ??, ??)
  [0061BF98]_esend+000718 (??, ??, ??, ??, ??)
  [0000394C]syscall+000244 ()
  [kdb_get_virtual_memory] no real storage @ 112979A40
  [900000000122524]0900000000122524 ()
  [kdb_read_mem] no real storage @ FFFFFFFFFFF91C0
  
  Before netmalloc enabled the stack is:
  
  CRASH INFORMATION:
  
  CPU 3 CSA F1000916D0120D00 at time of crash, error code
  for LEDs: 70000000
  pvthread+082100 STACK:
  [0007A384].panic_trap+000000 ()
  [00370FF4]net_free+000E54 (0000000000000000,
  F1000C00352A3838)
  [00370FF4]net_free+000E54 (F10010000019E800,
  3F11F2B3C0A81942)
  [07C12474]filter4:fltr_in_chk+000E14 (??, ??)
  [07828434]netinet:ipintr_noqueue_post_fw+0003F4
  (0000000007CC2250, F1001000019C4E00,
    0000000000000000)
  [07829E54]netinet:ipintr_noqueue+0001D4 (??, ??, ??)
  [0782AFA8]netinet:in_newstack+000020 ()
  [078235C0]netinet:in_flip_and_run+000220 (??, ??, ??)
  [078223C8]netinet:dogisr+0000A8 (00000000073CA204,
  F1001000019C4E00,
    0000000003894C90)
  [076F303C]eth_demux:eth_std_receive+00049C (??, ??, ??)
  [076F0CAC]eth_demux:eth_receive+00022C (??, ??)
  [0772DF5C]musentdd:musent_rx_handler+00043C (??, ??, ??)
  [07736A04]musentdd:musent_slih+0002E4 (??)
  [002B20F0]i_poll_soft+000130 (??)
  [002B19E4]i_softmod+000624 ()
  [002411EC]flih_util+000258 ()
  ____ Exception (F00000002FF47600) ____
  

Local fix

• Delete the list of filter which needs write lock
  that is to delete all the shun port
  

Problem summary

• Changes are in risky code path and we would like this defect to
  go through full ISST for some time.
  

Problem conclusion

Temporary fix

Comments

• This APAR is being closed FIN. This means that a solution to
  this APAR is expected to be delivered from IBM in a release
  (if any) to be available within the next 24 months.
  ×**** PE20/02/14 PTF IN ERROR. SEE APAR IJ14398  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IJ11825

Fix information

Applicable component levels

• R720 PSY U882637

     UP19/04/30 I 1000

PTF to Fileset Mapping

• U882637 bos.net.ipsec.rte 7.2.3.16