Apparently there are at least two interrupt race conditions between the sl(4)
driver and the generic network code.

This crash was observed on an i386 running a GENERIC 4.9 kernel:

http://www.durlej.net/sl-crash-out

And the following one is from a custom 4.9 kernel. I hope it is still
useful:

http://www.durlej.net/sl-crash-in

Running a ping(8) flood through a router with a sl interface seems to be
sufficient to reproduce the crash.

The cause seems to be the sl(4) code being called from an interrupt at a
spl(9) that is too high.

Thanks,
Piotr

Reply via email to