[Bug 268246] crash and panic using pfsync on 13.1-RELEASE
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 15 Feb 2023 13:08:05 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=268246 --- Comment #83 from jjasen@gmail.com --- BT: #0 __curthread () at /root/usr/src/sys/amd64/include/pcpu_aux.h:55 #1 dump_savectx () at /root/usr/src/sys/kern/kern_shutdown.c:394 #2 0xffffffff80c38ae8 in dumpsys (di=0x0) at /root/usr/src/sys/x86/include/dump.h:87 #3 doadump (textdump=<optimized out>) at /root/usr/src/sys/kern/kern_shutdown.c:423 #4 kern_reboot (howto=260) at /root/usr/src/sys/kern/kern_shutdown.c:497 #5 0xffffffff80c38f6e in vpanic (fmt=<optimized out>, ap=ap@entry=0xfffffe017cbed940) at /root/usr/src/sys/kern/kern_shutdown.c:930 #6 0xffffffff80c38da3 in panic (fmt=<unavailable>) at /root/usr/src/sys/kern/kern_shutdown.c:854 #7 0xffffffff81101c95 in trap_fatal (frame=0xfffffe017cbeda30, eva=24) at /root/usr/src/sys/amd64/amd64/trap.c:942 #8 0xffffffff81101cef in trap_pfault (frame=0xfffffe017cbeda30, usermode=false, signo=<optimized out>, ucode=<optimized out>) at /root/usr/src/sys/amd64/amd64/trap.c:761 #9 <signal handler called> #10 0xffffffff80cd15d0 in m_copym (m=0x0, m@entry=0xfffff80115340200, off0=8268, len=8192, wait=wait@entry=1) at /root/usr/src/sys/kern/uipc_mbuf.c:510 #11 0xffffffff80dfe81f in ip_fragment (ip=<optimized out>, ip@entry=0xfffff80115340268, m_frag=m_frag@entry=0xfffffe017cbedcb0, mtu=mtu@entry=9000, if_hwassist_flags=<optimized out>) at /root/usr/src/sys/netinet/ip_output.c:992 #12 0xffffffff80dfe1d2 in ip_output (m=m@entry=0xfffff80115340200, opt=<optimized out>, opt@entry=0x0, ro=<optimized out>, ro@entry=0x0, flags=flags@entry=0, imo=<optimized out>, imo@entry=0x0, inp=<optimized out>, inp@entry=0x0) at /root/usr/src/sys/netinet/ip_output.c:816 #13 0xffffffff823516dc in pfsync_defer_tmo (arg=0xfffff806ea395280) at /root/usr/src/sys/netpfil/pf/if_pfsync.c:1838 #14 0xffffffff80c57263 in softclock_call_cc (c=<optimized out>, cc=cc@entry=0xffffffff81ebac00 <cc_cpu>, direct=direct@entry=0) at /root/usr/src/sys/kern/kern_timeout.c:692 #15 0xffffffff80c576c9 in softclock (arg=0xffffffff81ebac00 <cc_cpu>) at /root/usr/src/sys/kern/kern_timeout.c:812 #16 0xffffffff80bf6eea in intr_event_execute_handlers (ie=0xfffff80104901300, p=<optimized out>) at /root/usr/src/sys/kern/kern_intr.c:1169 #17 ithread_execute_handlers (ie=<optimized out>, p=<optimized out>) at /root/usr/src/sys/kern/kern_intr.c:1182 #18 ithread_loop (arg=arg@entry=0xfffff801048949c0) at /root/usr/src/sys/kern/kern_intr.c:1270 #19 0xffffffff80bf38de in fork_exit (callout=0xffffffff80bf6c90 <ithread_loop>, arg=0xfffff801048949c0, frame=0xfffffe017cbedf40) at /root/usr/src/sys/kern/kern_fork.c:1093 #20 <signal handler called> #21 mi_startup () at /root/usr/src/sys/kern/init_main.c:322 Backtrace stopped: Cannot access memory at address 0x8 (kgdb) frame 13 #13 0xffffffff823516dc in pfsync_defer_tmo (arg=0xfffff806ea395280) at /root/usr/src/sys/netpfil/pf/if_pfsync.c:1838 1838 ip_output(m, NULL, NULL, 0, NULL, NULL); p ip_output $1 = {int (struct mbuf *, struct mbuf *, struct route *, int, struct ip_moptions *, struct inpcb *)} 0xffffffff80dfd080 <ip_output> kgdb) print m $4 = (struct mbuf *) 0xfffff80115340200 (kgdb) print *m $5 = {{m_next = 0x0, m_slist = {sle_next = 0x0}, m_stailq = {stqe_next = 0x0}}, { m_nextpkt = 0xfffff802ff9f1d00, m_slistpkt = {sle_next = 0xfffff802ff9f1d00}, m_stailqpkt = { stqe_next = 0xfffff802ff9f1d00}}, m_data = 0xfffff80115340268 "E", m_len = 80, m_type = 1, m_flags = 32770, {{{m_pkthdr = {{snd_tag = 0x0, rcvif = 0x0}, tags = {slh_first = 0x0}, len = 80, flowid = 0, csum_flags = 1025, fibnum = 0, numa_domain = 255 '\377', rsstype = 0 '\000', {rcv_tstmp = 0, {l2hlen = 0 '\000', l3hlen = 0 '\000', l4hlen = 0 '\000', l5hlen = 0 '\000', inner_l2hlen = 0 '\000', inner_l3hlen = 0 '\000', inner_l4hlen = 0 '\000', inner_l5hlen = 0 '\000'}}, PH_per = {eight = "\000\000\000\000\020\000\000", sixteen = {0, 0, 16, 0}, thirtytwo = { 0, 16}, sixtyfour = {68719476736}, unintptr = {68719476736}, ptr = 0x1000000000}, PH_loc = {eight = "\000\000\000\000\000\000\000", sixteen = {0, 0, 0, 0}, thirtytwo = { 0, 0}, sixtyfour = {0}, unintptr = {0}, ptr = 0x0}}, {m_epg_npgs = 0 '\000', m_epg_nrdy = 0 '\000', m_epg_hdrlen = 0 '\000', m_epg_trllen = 0 '\000', m_epg_1st_off = 0, m_epg_last_len = 0, m_epg_flags = 0 '\000', m_epg_record_type = 0 '\000', __spare = "\000", m_epg_enc_cnt = 0, m_epg_tls = 0x50, m_epg_so = 0xff000000000401, m_epg_seqno = 0, m_epg_stailq = { stqe_next = 0x1000000000}}}, {m_ext = {{ext_count = 742590208, ext_cnt = 0x70050a62c430700}, ext_size = 2954964035, ext_type = 8, ext_flags = 17664, { { ext_buf = 0x400646585e8d0045 <error: Cannot access memory at address 0x400646585e8d0045>, ext_arg2 = 0x69011824d0040120}, {extpg_pa = {4613452213645017157, 7566355395346956576, 720575940379279360, 11029316931009191974, 216172782113797907}, extpg_trail = "อก\000P\002;.\373\000\000\000\000\240\002\377\377\345\232\000\000\002\004\"\354\001\003\003\016\004\002\b\n\257<3\346\000\000\000\000\001\034P\001\020\231\023\067\000\000\000\000\000\003\000\000\000\000\000\000\000\000\000", extpg_hdr = '\000' <repeats 22 times>}}, ext_free = 0xffffffff82f67210 <rxb_free>, ext_arg1 = 0xfffff802ef19bfc0}, m_pktdat = 0xfffff80115340258 ""}}, m_dat = 0xfffff80115340220 ""}} -- You are receiving this mail because: You are the assignee for the bug.