commit 51739da1404d0be4f0a962a3a779745081334749
Author: Mark Johnston <markjdb@gmail.com>
Date:   Fri Mar 29 09:48:48 2019 -0400

    Do not perform DAD on stf(4) interfaces.
    
    stf(4) does not support multicast, which is a requirement for ND6 DAD.
    It also does not set IFF_DRV_RUNNING.  As a result, the last case in
    nd6_timer() gets triggered by an address assigned to stf0, and it marks
    the address as tentative.  The next time nd6_timer() fires, it sees
    IN6_IFF_TENTATIVE and starts DAD.  nd6_dad_start(), however, simply
    returns because IFF_DRV_RUNNING is not set.  So, the interface address
    stays stuck in the tentative state.
    
    To fix this, the minimal change needed is to set IFF_DRV_RUNNING in
    stf(4).  I think that change is reasonable; once an address is assigned
    and the interface is UP, the driver is running.  This diff makes some
    additional changes:
    - In in6if_do_dad(), remove a redundant check for !UP || !RUNNING.
      There is only one caller in the tree, and it only looks at whether the
      return value is non-zero.
    - Have in6if_do_dad() return false if the interface is not
      multicast-capable.
    - Set ND6_IFF_NO_DAD when an address is assigned to an stf(4)
      interface and the interface goes UP as a result.  Note that this is
      not sufficient to fix the problem because the new address is marked
      as tentative and DAD is started before in6_ifattach() is called.
      However, setting no_dad is formally correct.
    - Change nd6_timer() to not flag addresses as tentative if no_dad is
      set.

diff --git a/sys/net/if_stf.c b/sys/net/if_stf.c
index b0f1ab3cd79e..225bd30b6bd3 100644
--- a/sys/net/if_stf.c
+++ b/sys/net/if_stf.c
@@ -724,6 +724,7 @@ stf_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
 		}
 
 		ifp->if_flags |= IFF_UP;
+		ifp->if_drv_flags |= IFF_DRV_RUNNING;
 		break;
 
 	case SIOCADDMULTI:
diff --git a/sys/netinet6/in6.c b/sys/netinet6/in6.c
index 0497f87acb8a..4de6e8d2dfe0 100644
--- a/sys/netinet6/in6.c
+++ b/sys/netinet6/in6.c
@@ -1951,26 +1951,14 @@ in6_if_up(struct ifnet *ifp)
 int
 in6if_do_dad(struct ifnet *ifp)
 {
+
 	if ((ifp->if_flags & IFF_LOOPBACK) != 0)
 		return (0);
-
-	if ((ND_IFINFO(ifp)->flags & ND6_IFF_IFDISABLED) ||
-	    (ND_IFINFO(ifp)->flags & ND6_IFF_NO_DAD))
+	if ((ifp->if_flags & IFF_MULTICAST) == 0)
+		return (0);
+	if ((ND_IFINFO(ifp)->flags &
+	    (ND6_IFF_IFDISABLED | ND6_IFF_NO_DAD)) != 0)
 		return (0);
-
-	/*
-	 * Our DAD routine requires the interface up and running.
-	 * However, some interfaces can be up before the RUNNING
-	 * status.  Additionally, users may try to assign addresses
-	 * before the interface becomes up (or running).
-	 * This function returns EAGAIN in that case.
-	 * The caller should mark "tentative" on the address instead of
-	 * performing DAD immediately.
-	 */
-	if (!((ifp->if_flags & IFF_UP) &&
-	    (ifp->if_drv_flags & IFF_DRV_RUNNING)))
-		return (EAGAIN);
-
 	return (1);
 }
 
diff --git a/sys/netinet6/in6_ifattach.c b/sys/netinet6/in6_ifattach.c
index 03285b60d2d4..4fb81f812dd2 100644
--- a/sys/netinet6/in6_ifattach.c
+++ b/sys/netinet6/in6_ifattach.c
@@ -692,6 +692,7 @@ in6_ifattach(struct ifnet *ifp, struct ifnet *altifp)
 		 * it is rather harmful to have one.
 		 */
 		ND_IFINFO(ifp)->flags &= ~ND6_IFF_AUTO_LINKLOCAL;
+		ND_IFINFO(ifp)->flags |= ND6_IFF_NO_DAD;
 		break;
 	default:
 		break;
diff --git a/sys/netinet6/nd6.c b/sys/netinet6/nd6.c
index faab9f0adc8b..4ae6f507074e 100644
--- a/sys/netinet6/nd6.c
+++ b/sys/netinet6/nd6.c
@@ -900,6 +900,7 @@ nd6_timer(void *arg)
 	struct nd_prhead prl;
 	struct nd_defrouter *dr, *ndr;
 	struct nd_prefix *pr, *npr;
+	struct ifnet *ifp;
 	struct in6_ifaddr *ia6, *nia6;
 	uint64_t genid;
 
@@ -996,14 +997,15 @@ nd6_timer(void *arg)
 			 * Check status of the interface.  If it is down,
 			 * mark the address as tentative for future DAD.
 			 */
-			if ((ia6->ia_ifp->if_flags & IFF_UP) == 0 ||
-			    (ia6->ia_ifp->if_drv_flags & IFF_DRV_RUNNING)
-				== 0 ||
-			    (ND_IFINFO(ia6->ia_ifp)->flags &
-				ND6_IFF_IFDISABLED) != 0) {
+			ifp = ia6->ia_ifp;
+			if ((ND_IFINFO(ifp)->flags & ND6_IFF_NO_DAD) == 0 &&
+			    ((ifp->if_flags & IFF_UP) == 0 ||
+			    (ifp->if_drv_flags & IFF_DRV_RUNNING) == 0 ||
+			    (ND_IFINFO(ifp)->flags & ND6_IFF_IFDISABLED) != 0)){
 				ia6->ia6_flags &= ~IN6_IFF_DUPLICATED;
 				ia6->ia6_flags |= IN6_IFF_TENTATIVE;
 			}
+
 			/*
 			 * A new RA might have made a deprecated address
 			 * preferred.