[Bug 258057] muge(4) crashes with large tx batches

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 05 Oct 2021 15:21:18 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258057

--- Comment #31 from Dan Kotowski <dan.kotowski@a9development.com> ---
I've been able to trigger this behavior as well from Firefox by reloading ~20
tabs at once, even when I'm able to get the device to negotiate superspeed.

ugen1.8: <Microchip LAN7800> at usbus1, cfg=0 md=HOST spd=SUPER (5.0Gbps)
pwr=ON (224mA)
ugen1.8.0: muge0: <Microchip LAN7800, rev 3.10/3.00, addr 8>

Something I noticed as that when the interface begins flapping, IPv4 will
sometimes remain partially usable but IPv6 fails entirely. I'm not sure if it's
related, but I also regularly see this in /var/log/messages:

lock order nd6 list -> lle established at:
#0 0xffff0000004e3368 at witness_checkorder+0x438
#1 0xffff000000470574 at _rw_wlock_cookie+0x74
#2 0xffff00000064ba14 at nd6_llinfo_timer+0xa8
#3 0xffff000000493260 at softclock_call_cc+0x13c
#4 0xffff00000049356c at softclock+0x44
#5 0xffff0000004329a0 at ithread_loop+0x2a8
#6 0xffff00000042efa8 at fork_exit+0x74
#7 0xffff00000077bbc4 at fork_trampoline+0x14
lock order lle -> nd6 list attempted at:
#0 0xffff0000004e3b3c at witness_checkorder+0xc0c
#1 0xffff000000470574 at _rw_wlock_cookie+0x74
#2 0xffff000000651a20 at defrouter_remove+0x40
#3 0xffff00000064e7c0 at nd6_na_input+0x848
#4 0xffff0000006244cc at icmp6_input+0xd2c
#5 0xffff00000063d078 at ip6_input+0xe5c
#6 0xffff0000005b4044 at netisr_dispatch_src+0xe4
#7 0xffff0000005980ac at ether_demux+0x174
#8 0xffff000000599734 at ether_nh_input+0x3f8
#9 0xffff0000005b4044 at netisr_dispatch_src+0xe4
#10 0xffff000000598584 at ether_input+0x80
#11 0xffff0000002f2b50 at uether_rxflush+0x8c
#12 0xffff0000002e1778 at muge_bulk_read_callback+0x120
#13 0xffff0000002dd9a0 at usbd_callback_wrapper+0x6b0
#14 0xffff0000002decb0 at usb_command_wrapper+0x124
#15 0xffff0000002ddb38 at usb_callback_proc+0x30
#16 0xffff0000002d8c6c at usb_process+0x10c
#17 0xffff00000042efa8 at fork_exit+0x74

-- 
You are receiving this mail because:
You are the assignee for the bug.