Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Jan 2021 12:57:10 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 253061] sys/net/if_vlan:qinq_deep test triggers "UNR: free_unr(3735929054) out of range" panic
Message-ID:  <bug-253061-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D253061

            Bug ID: 253061
           Summary: sys/net/if_vlan:qinq_deep test triggers "UNR:
                    free_unr(3735929054) out of range" panic
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: arichardson@FreeBSD.org

Running `cd /usr/tests && kyua test` on a single-core QEMU amd64 I get the
following panic:

sys/net/if_vlan:qinq_deep ->  Jan 28 11:28:13 freebsd-amd64 kernel:
ng_ether_ifnet_arrival_event: can't re-name node epair1a
Jan 28 11:28:13 freebsd-amd64 kernel: ng_ether_ifnet_arrival_event: can't
re-name node epair1b
Jan 28 11:28:13 freebsd-amd64 kernel: ng_ether_ifnet_arrival_event: can't
re-name node epair1a
panic: UNR: free_unr(3735929054) out of range [0...32767]
cpuid =3D 0
time =3D 1611833293
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0093bdb=
970
vpanic() at vpanic+0x188/frame 0xfffffe0093bdb9c0
panic() at panic+0x43/frame 0xfffffe0093bdba20
free_unr() at free_unr+0x38d/frame 0xfffffe0093bdba60
ifc_free_unit() at ifc_free_unit+0x16/frame 0xfffffe0093bdba90
vlan_clone_destroy() at vlan_clone_destroy+0xaf/frame 0xfffffe0093bdbac0
if_clone_destroyif() at if_clone_destroyif+0x185/frame 0xfffffe0093bdbb10
if_clone_detach() at if_clone_detach+0xc8/frame 0xfffffe0093bdbb40
vnet_destroy() at vnet_destroy+0x140/frame 0xfffffe0093bdbb70
prison_deref() at prison_deref+0x2fe/frame 0xfffffe0093bdbbb0
sys_jail_remove() at sys_jail_remove+0x21a/frame 0xfffffe0093bdbc00
amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0093bdbd30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0093bdbd30
--- syscall (508, FreeBSD ELF64, sys_jail_remove), rip =3D 0x8003c9b2a, rsp=
 =3D
0x7fffffffe7f8, rbp =3D 0x7fffffffe880 ---
KDB: enter: panic
[ thread pid 8883 tid 103789 ]
Stopped at      kdb_enter+0x37: movq    $0,0x10a150e(%rip)
db>

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-253061-227>