Date: Wed, 09 Jun 2021 13:48:04 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 256439] kernel panic on FreeBSD 13.0-RELEASE Message-ID: <bug-256439-227-pgYCjPHaLq@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-256439-227@https.bugs.freebsd.org/bugzilla/> References: <bug-256439-227@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256439 Mark Johnston <markj@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@FreeBSD.org |net@FreeBSD.org --- Comment #17 from Mark Johnston <markj@FreeBSD.org> --- Thanks, this helps. So we're getting #GP in the bridge transmit code, seemingly because the mbuf was freed at some point. With INVARIANTS enabled, UMA trashing makes the p= anic deterministic, all stacks look like this: #7 <signal handler called> #8 bridge_rthash (sc=3D0xfffff8000fdca400, addr=3D0xdeadc0dedeadc0de <erro= r: Cannot access memory at address 0xdeadc0dedeadc0de>) at /freebsdsrc/sys/net/if_bridge.c:2970 #9 bridge_rtnode_lookup (sc=3Dsc@entry=3D0xfffff8000fdca400, addr=3Daddr@entry=3D0xdeadc0dedeadc0de <error: Cannot access memory at addr= ess 0xdeadc0dedeadc0de>,=20 vlan=3Dvlan@entry=3D1) at /freebsdsrc/sys/net/if_bridge.c:3011 #10 0xffffffff82b2d3b2 in bridge_rtlookup (sc=3D0xfffff8000fdca400, addr=3D0xdeadc0dedeadc0de <error: Cannot access memory at address 0xdeadc0dedeadc0de>,=20 vlan=3D1) at /freebsdsrc/sys/net/if_bridge.c:2769 #11 bridge_transmit (ifp=3D0xfffff8000f92b000, m=3D0xfffff800233f5000) at /freebsdsrc/sys/net/if_bridge.c:2170 #12 0xffffffff80d1bb1b in ether_output_frame (ifp=3Difp@entry=3D0xfffff8000= f92b000, m=3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:511 #13 0xffffffff80d1ba21 in ether_output (ifp=3D<optimized out>, m=3D0x0, dst=3D0xfffffe00351795a0, ro=3D<optimized out>) at /freebsdsrc/sys/net/if_ethersubr.c:438 #14 0xffffffff80db199f in ip_output_send (inp=3Dinp@entry=3D0x0, ifp=3D0xffffffff81d38ef0 <w_locklistdata+276896>, ifp@entry=3D0xfffff8000f9= 2b000,=20 m=3Dm@entry=3D0xfffff80023804e00, gw=3Dgw@entry=3D0xfffffe00351795a0, r= o=3D0x246, ro@entry=3D0x0, stamp_tag=3D<optimized out>) at /freebsdsrc/sys/netinet/ip_output.c:275 #15 0xffffffff80db1655 in ip_output (m=3Dm@entry=3D0xfffff80023804e00, opt=3Dopt@entry=3D0x0, ro=3D<optimized out>, ro@entry=3D0x0, flags=3D<optim= ized out>,=20 flags@entry=3D0, imo=3Dimo@entry=3D0x0, inp=3D<optimized out>, inp@entr= y=3D0x0) at /freebsdsrc/sys/netinet/ip_output.c:812 #16 0xffffffff80dabf8a in icmp_send (m=3D0xfffff80023804e00, opts=3D0x0) at /freebsdsrc/sys/netinet/ip_icmp.c:1017 #17 icmp_reflect (m=3D<optimized out>, m@entry=3D0xfffff80023804e00) at /freebsdsrc/sys/netinet/ip_icmp.c:929 #18 0xffffffff80dab9ce in icmp_error (n=3D0xfffff80023804b00, type=3Dtype@e= ntry=3D5, code=3D<optimized out>, code@entry=3D1, dest=3D0, mtu=3D<optimized out>, mt= u@entry=3D0) at /freebsdsrc/sys/netinet/ip_icmp.c:393 #19 0xffffffff80daafd7 in ip_tryforward (m=3D<optimized out>, m@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/netinet/ip_fastfwd.c:511 #20 0xffffffff80dad930 in ip_input (m=3D0xfffff8007db10c00) at /freebsdsrc/sys/netinet/ip_input.c:579 #21 0xffffffff80d38b31 in netisr_dispatch_src (proto=3D1, source=3Dsource@e= ntry=3D0, m=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1143 #22 0xffffffff80d38e7f in netisr_dispatch (proto=3D2177714816, m=3D0x1) at /freebsdsrc/sys/net/netisr.c:1234 #23 0xffffffff80d1bcbe in ether_demux (ifp=3Difp@entry=3D0xfffff8000f92b000= , m=3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:923 #24 0xffffffff80d1d371 in ether_input_internal (ifp=3D0xfffff8000f92b000, m= =3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:709 #25 ether_nh_input (m=3D<optimized out>) at /freebsdsrc/sys/net/if_ethersubr.c:739 #26 0xffffffff80d38b31 in netisr_dispatch_src (proto=3Dproto@entry=3D5, source=3Dsource@entry=3D0, m=3Dm@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1143 #27 0xffffffff80d38e7f in netisr_dispatch (proto=3D2177714816, proto@entry= =3D5, m=3D0x1, m@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1234 #28 0xffffffff80d1c1b1 in ether_input (ifp=3D0xfffff80003ec3800, m=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/if_ethersubr.c:830 #29 0xffffffff80d34bf7 in iflib_rxeof (rxq=3D<optimized out>, rxq@entry=3D0xfffff80003ec3000, budget=3D<optimized out>) at /freebsdsrc/sys/net/iflib.c:3006 #30 0xffffffff80d2e76a in _task_fn_rx (context=3D0xfffff80003ec3000) at /freebsdsrc/sys/net/iflib.c:3949 #31 0xffffffff80c439e7 in gtaskqueue_run_locked (queue=3Dqueue@entry=3D0xfffff800039af300) at /freebsdsrc/sys/kern/subr_gtaskqueue.c:371 #32 0xffffffff80c437e4 in gtaskqueue_thread_loop (arg=3Darg@entry=3D0xfffffe0038ff2008) at /freebsdsrc/sys/kern/subr_gtaskqueue.c:547 #33 0xffffffff80bb6120 in fork_exit (callout=3D0xffffffff80c43750 <gtaskqueue_thread_loop>, arg=3D0xfffffe0038ff2008, frame=3D0xfffffe0035179= c00) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-256439-227-pgYCjPHaLq>