zebra crash when some interfaces disappear

[weisuofayubc]

Description

Thread 1 "zebra" received signal SIGSEGV, Segmentation fault.
zebra_vxlan_macvlan_up (ifp=ifp@entry=0x7f1c056b1c70) at zebra/zebra_vxlan.c:5107
warning: 5107   zebra/zebra_vxlan.c: No such file or directory
(gdb) bt
#0  zebra_vxlan_macvlan_up (ifp=ifp@entry=0x7f1c056b1c70) at zebra/zebra_vxlan.c:5107
#1  0x000056184e2237b5 in if_up (ifp=0x7f1c056b1c70, install_connected=install_connected@entry=false) at zebra/interface.c:1048
#2  0x000056184e21ea9e in netlink_link_change (h=0x7f1c0567e5a0, ns_id=<optimized out>, startup=<optimized out>) at zebra/if_netlink.c:2232
#3  0x000056184e2287f1 in netlink_parse_info (filter=filter@entry=0x56184e2284f7 <netlink_information_fetch>, nl=nl@entry=0x7f1c0569b298, zns=zns@entry=0x7fffae80d9a8, count=count@entry=5, startup=startup@entry=false)
    at zebra/kernel_netlink.c:1183
#4  0x000056184e2288fb in kernel_read (thread=<optimized out>) at zebra/kernel_netlink.c:493
#5  0x00007f1c07b5fd41 in event_call (thread=thread@entry=0x7fffae80da98) at lib/event.c:1979
#6  0x00007f1c07b22e2e in frr_run (master=0x7f1c07a888d0) at lib/libfrr.c:1213
#7  0x000056184e2181e8 in main (argc=10, argv=0x7fffae80dcc8) at zebra/main.c:483
(gdb) bt
#0  zebra_vxlan_macvlan_up (ifp=ifp@entry=0x7f1c056b1c70) at zebra/zebra_vxlan.c:5107
#1  0x000056184e2237b5 in if_up (ifp=0x7f1c056b1c70, install_connected=install_connected@entry=false) at zebra/interface.c:1048
#2  0x000056184e21ea9e in netlink_link_change (h=0x7f1c0567e5a0, ns_id=<optimized out>, startup=<optimized out>) at zebra/if_netlink.c:2232
#3  0x000056184e2287f1 in netlink_parse_info (filter=filter@entry=0x56184e2284f7 <netlink_information_fetch>, nl=nl@entry=0x7f1c0569b298, zns=zns@entry=0x7fffae80d9a8, count=count@entry=5, startup=startup@entry=false)
    at zebra/kernel_netlink.c:1183
#4  0x000056184e2288fb in kernel_read (thread=<optimized out>) at zebra/kernel_netlink.c:493
#5  0x00007f1c07b5fd41 in event_call (thread=thread@entry=0x7fffae80da98) at lib/event.c:1979
#6  0x00007f1c07b22e2e in frr_run (master=0x7f1c07a888d0) at lib/libfrr.c:1213
#7  0x000056184e2181e8 in main (argc=10, argv=0x7fffae80dcc8) at zebra/main.c:483
(gdb) info local
zl3vni = 0x0
zif = 0x7f1c057d0d50
link_zif = <optimized out>
link_ifp = 0x0
link_if = <optimized out>
__func__ = <optimized out>
(gdb) p zif.link
$1 = (struct interface *) 0x0
(gdb) p *zif
$2 = {ifp = 0x7f1c056b1c70, flags = 0, shutdown = 2 '\002', multicast = 0 '\000', mpls = false, linkdown = false, linkdownv6 = false, v4mcast_on = false, v6mcast_on = false, rtadv_enable = 0 '\000', 
  ipv4_subnets = 0x7f1c056bdf20, nhg_dependents = {rr = {rbt_root = 0x7f1c014ce910, count = 1}}, up_count = 1, up_last = "2024/03/13 03:30:11.87", '\000' <repeats 17 times>, down_count = 0, 
  down_last = '\000' <repeats 39 times>, rtadv = {AdvSendAdvertisements = 0, MaxRtrAdvInterval = 600000, MinRtrAdvInterval = 198000, AdvIntervalTimer = 0, AdvManagedFlag = 0, lastadvmanagedflag = {tv_sec = 0, tv_usec = 0}, 
    AdvOtherConfigFlag = 0, lastadvotherconfigflag = {tv_sec = 0, tv_usec = 0}, AdvLinkMTU = 0, AdvReachableTime = 0, lastadvreachabletime = {tv_sec = 0, tv_usec = 0}, AdvRetransTimer = 0, lastadvretranstimer = {tv_sec = 0, 
      tv_usec = 0}, AdvCurHopLimit = 64, lastadvcurhoplimit = {tv_sec = 0, tv_usec = 0}, AdvDefaultLifetime = -1, prefixes = {{rr = {rbt_root = 0x0, count = 0}}}, AdvHomeAgentFlag = 0, HomeAgentPreference = 0, 
    HomeAgentLifetime = -1, AdvIntervalOption = 0, DefaultPreference = 0, AdvRDNSSList = 0x7f1c05688e90, AdvDNSSLList = 0x7f1c05688ec0, UseFastRexmit = true, inFastRexmit = 0 '\000', ra_configured = 0 '\000', 
    NumFastReXmitsRemain = 0}, ra_sent = 0, ra_rcvd = 0, irdp = 0x0, ptm_enable = 0 '\000', zif_type = ZEBRA_IF_MACVLAN, zif_slave_type = ZEBRA_IF_SLAVE_NONE, l2info = {br = {bridge = {vlan_aware = 0 '\000', br_zif = 0x0, 
        vlan_table = 0x0}}, vl = {vid = 0}, vxl = {vni_info = {iftype = 0, {vni = {vni = 0, access_vlan = 0, mcast_grp = {s_addr = 0}}, vni_table = 0x0}}, vtep_ip = {s_addr = 0}, ifindex_link = 0, link_nsid = 0}, gre = {
      vtep_ip = {s_addr = 0}, vtep_ip_remote = {s_addr = 0}, ikey = 0, okey = 0, ifindex_link = 0, link_nsid = 0}}, brslave_info = {bridge_ifindex = 0, br_if = 0x0, ns_id = 0}, bondslave_info = {bond_ifindex = 0, 
    bond_if = 0x0}, bond_info = {mbr_zifs = 0x0}, es_info = {sysmac = {octet = "\000\000\000\000\000"}, lid = 0, esi = {val = "\000\000\000\000\000\000\000\000\000"}, df_pref = 0, flags = 0 '\000', es = 0x0}, vlan_bitmap = {
    data = 0x0, n = 0, m = 0}, protodown_rc = 0, mac_list = 0x0, link_nsid = 0, link_ifindex = 27, link = 0x0, speed_update_count = 37 '%', speed_update = 0x7f1c0564f600, v6_2_v4_ll_neigh_entry = false, 
  neigh_mac = "\000\000\000\000\000", v6_2_v4_ll_addr6 = {__in6_union = {__s6_addr = '\000' <repeats 15 times>, __s6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __s6_addr32 = {0, 0, 0, 0}}}, desc = 0x0}

Version

9.0.2

How to reproduce

THere is a process that creates tap interfaces, when this process crash, the tap interfaces disappear and zebra may crash with above bt

Expected behavior

Should no crash

Actual behavior

crash

Additional context

No response

Checklist

• I have searched the open issues for this bug.
• I have not included sensitive information in this report.

[weisuofayubc]

[ton31337]

Is this related to #15370?

[ton31337]

Also, maybe could you define the steps on how to reproduce this crash?

[weisuofayubc]

Is this related to #15370?

I think so.

[weisuofayubc]

dup