From nobody Wed Jun 09 13:48:04 2021 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id E0EA95D7F77 for ; Wed, 9 Jun 2021 13:48:04 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4G0T2X5fJKz4bb0 for ; Wed, 9 Jun 2021 13:48:04 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id A688B1D2CB for ; Wed, 9 Jun 2021 13:48:04 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 159Dm4UV032985 for ; Wed, 9 Jun 2021 13:48:04 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 159Dm4PH032984 for net@FreeBSD.org; Wed, 9 Jun 2021 13:48:04 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 256439] kernel panic on FreeBSD 13.0-RELEASE Date: Wed, 09 Jun 2021 13:48:04 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.0-STABLE X-Bugzilla-Keywords: panic X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: markj@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: assigned_to Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256439 Mark Johnston changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@FreeBSD.org |net@FreeBSD.org --- Comment #17 from Mark Johnston --- Thanks, this helps. So we're getting #GP in the bridge transmit code, seemingly because the mbuf was freed at some point. With INVARIANTS enabled, UMA trashing makes the p= anic deterministic, all stacks look like this: #7 #8 bridge_rthash (sc=3D0xfffff8000fdca400, addr=3D0xdeadc0dedeadc0de ) at /freebsdsrc/sys/net/if_bridge.c:2970 #9 bridge_rtnode_lookup (sc=3Dsc@entry=3D0xfffff8000fdca400, addr=3Daddr@entry=3D0xdeadc0dedeadc0de ,=20 vlan=3Dvlan@entry=3D1) at /freebsdsrc/sys/net/if_bridge.c:3011 #10 0xffffffff82b2d3b2 in bridge_rtlookup (sc=3D0xfffff8000fdca400, addr=3D0xdeadc0dedeadc0de ,=20 vlan=3D1) at /freebsdsrc/sys/net/if_bridge.c:2769 #11 bridge_transmit (ifp=3D0xfffff8000f92b000, m=3D0xfffff800233f5000) at /freebsdsrc/sys/net/if_bridge.c:2170 #12 0xffffffff80d1bb1b in ether_output_frame (ifp=3Difp@entry=3D0xfffff8000= f92b000, m=3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:511 #13 0xffffffff80d1ba21 in ether_output (ifp=3D, m=3D0x0, dst=3D0xfffffe00351795a0, ro=3D) at /freebsdsrc/sys/net/if_ethersubr.c:438 #14 0xffffffff80db199f in ip_output_send (inp=3Dinp@entry=3D0x0, ifp=3D0xffffffff81d38ef0 , ifp@entry=3D0xfffff8000f9= 2b000,=20 m=3Dm@entry=3D0xfffff80023804e00, gw=3Dgw@entry=3D0xfffffe00351795a0, r= o=3D0x246, ro@entry=3D0x0, stamp_tag=3D) at /freebsdsrc/sys/netinet/ip_output.c:275 #15 0xffffffff80db1655 in ip_output (m=3Dm@entry=3D0xfffff80023804e00, opt=3Dopt@entry=3D0x0, ro=3D, ro@entry=3D0x0, flags=3D,=20 flags@entry=3D0, imo=3Dimo@entry=3D0x0, inp=3D, inp@entr= y=3D0x0) at /freebsdsrc/sys/netinet/ip_output.c:812 #16 0xffffffff80dabf8a in icmp_send (m=3D0xfffff80023804e00, opts=3D0x0) at /freebsdsrc/sys/netinet/ip_icmp.c:1017 #17 icmp_reflect (m=3D, m@entry=3D0xfffff80023804e00) at /freebsdsrc/sys/netinet/ip_icmp.c:929 #18 0xffffffff80dab9ce in icmp_error (n=3D0xfffff80023804b00, type=3Dtype@e= ntry=3D5, code=3D, code@entry=3D1, dest=3D0, mtu=3D, mt= u@entry=3D0) at /freebsdsrc/sys/netinet/ip_icmp.c:393 #19 0xffffffff80daafd7 in ip_tryforward (m=3D, m@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/netinet/ip_fastfwd.c:511 #20 0xffffffff80dad930 in ip_input (m=3D0xfffff8007db10c00) at /freebsdsrc/sys/netinet/ip_input.c:579 #21 0xffffffff80d38b31 in netisr_dispatch_src (proto=3D1, source=3Dsource@e= ntry=3D0, m=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1143 #22 0xffffffff80d38e7f in netisr_dispatch (proto=3D2177714816, m=3D0x1) at /freebsdsrc/sys/net/netisr.c:1234 #23 0xffffffff80d1bcbe in ether_demux (ifp=3Difp@entry=3D0xfffff8000f92b000= , m=3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:923 #24 0xffffffff80d1d371 in ether_input_internal (ifp=3D0xfffff8000f92b000, m= =3D0x0) at /freebsdsrc/sys/net/if_ethersubr.c:709 #25 ether_nh_input (m=3D) at /freebsdsrc/sys/net/if_ethersubr.c:739 #26 0xffffffff80d38b31 in netisr_dispatch_src (proto=3Dproto@entry=3D5, source=3Dsource@entry=3D0, m=3Dm@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1143 #27 0xffffffff80d38e7f in netisr_dispatch (proto=3D2177714816, proto@entry= =3D5, m=3D0x1, m@entry=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/netisr.c:1234 #28 0xffffffff80d1c1b1 in ether_input (ifp=3D0xfffff80003ec3800, m=3D0xfffff8007db10c00) at /freebsdsrc/sys/net/if_ethersubr.c:830 #29 0xffffffff80d34bf7 in iflib_rxeof (rxq=3D, rxq@entry=3D0xfffff80003ec3000, budget=3D) at /freebsdsrc/sys/net/iflib.c:3006 #30 0xffffffff80d2e76a in _task_fn_rx (context=3D0xfffff80003ec3000) at /freebsdsrc/sys/net/iflib.c:3949 #31 0xffffffff80c439e7 in gtaskqueue_run_locked (queue=3Dqueue@entry=3D0xfffff800039af300) at /freebsdsrc/sys/kern/subr_gtaskqueue.c:371 #32 0xffffffff80c437e4 in gtaskqueue_thread_loop (arg=3Darg@entry=3D0xfffffe0038ff2008) at /freebsdsrc/sys/kern/subr_gtaskqueue.c:547 #33 0xffffffff80bb6120 in fork_exit (callout=3D0xffffffff80c43750 , arg=3D0xfffffe0038ff2008, frame=3D0xfffffe0035179= c00) --=20 You are receiving this mail because: You are the assignee for the bug.=