Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Apr 2024 13:36:22 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 278389] kernel panic, kernel core generated from ipfw_chk() function, patch given was not working
Message-ID:  <bug-278389-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D278389

            Bug ID: 278389
           Summary: kernel panic, kernel core generated from ipfw_chk()
                    function, patch given was not working
           Product: Base System
           Version: Unspecified
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: bkeertha@cisco.com

We have observed kernel crash from ipfw_chk() function.

Given patch https://reviews.freebsd.org/D31484, is not working in 11.2 free=
bsd,
we are still seeing the kernel panic.

Environment :
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
hw.model: Intel(R) Xeon(R) Gold 5118 CPU @ 2.30GHz
hw.machine: amd64
hw.ncpu: 24
FreeBSD 11.2-RELEASE

Here is the BT :
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D
(kgdb) bt
#0  __curthread () at ./machine/pcpu.h:229
#1  doadump (textdump=3D1) at ../../../kern/kern_shutdown.c:327
#2  0xffffffff80614a9b in kern_reboot (howto=3D260) at
../../../kern/kern_shutdown.c:395
#3  0xffffffff80614f99 in vpanic (fmt=3D<optimized out>, ap=3D<optimized ou=
t>) at
../../../kern/kern_shutdown.c:799
#4  0xffffffff80614cd3 in panic (fmt=3D<unavailable>) at
../../../kern/kern_shutdown.c:719
#5  0xffffffff808997df in trap_fatal (frame=3D0xfffffe103e2f4b00, eva=3D4) =
at
../../../amd64/amd64/trap.c:875
#6  0xffffffff80899839 in trap_pfault (frame=3D0xfffffe103e2f4b00, usermode=
=3D0) at
../../../amd64/amd64/trap.c:712
#7  0xffffffff80899028 in trap (frame=3D0xfffffe103e2f4b00) at
../../../amd64/amd64/trap.c:415
#8  <signal handler called>
#9  ipfw_find_rule (chain=3D<optimized out>, key=3D2000, id=3D0) at
../../../netpfil/ipfw/ip_fw_sockopt.c:236
#10 0xffffffff807a8403 in jump_lookup_pos (chain=3D<optimized out>, f=3D<op=
timized
out>, num=3D<optimized out>,
    tablearg=3D<optimized out>, jump_backwards=3D<optimized out>) at
../../../netpfil/ipfw/ip_fw2.c:1284
#11 jump_cached (chain=3D<optimized out>, f=3D<optimized out>, num=3D<optim=
ized out>,
tablearg=3D<optimized out>,
    jump_backwards=3D<optimized out>) at ../../../netpfil/ipfw/ip_fw2.c:1323
#12 ipfw_chk (args=3D<optimized out>) at ../../../netpfil/ipfw/ip_fw2.c:2773
#13 0xffffffff807afd9f in ipfw_check_packet (arg=3D<optimized out>,
m0=3D0xfffffe103e2f4f90, ifp=3D<optimized out>, dir=3D1,
    inp=3D0x0) at ../../../netpfil/ipfw/ip_fw_pfil.c:151
#14 0xffffffff80723514 in pfil_run_hooks (ph=3D0xffffffff8101bdf8
<inet_pfil_hook>, mp=3D<optimized out>,
    ifp=3D0xfffff8000a288800, dir=3D1, flags=3D0, inp=3D0x0) at ../../../ne=
t/pfil.c:116
#15 0xffffffff807465d9 in ip_input (m=3D0xfffff80253911300) at
../../../netinet/ip_input.c:601
#16 0xffffffff80722561 in netisr_dispatch_src (proto=3D1, source=3D<optimiz=
ed out>,
m=3D0x4a) at ../../../net/netisr.c:1120
#17 0xffffffff8070ac72 in ether_demux (ifp=3D0xfffff8000a288800, m=3D0x7d0)=
 at
../../../net/if_ethersubr.c:884
#18 0xffffffff8070bd77 in ether_input_internal (ifp=3D0xfffff8000a288800,
m=3D0x7d0) at ../../../net/if_ethersubr.c:660
#19 ether_nh_input (m=3D<optimized out>) at ../../../net/if_ethersubr.c:690
#20 0xffffffff80722561 in netisr_dispatch_src (proto=3D5, source=3D<optimiz=
ed out>,
m=3D0x4a) at ../../../net/netisr.c:1120
#21 0xffffffff8070aff6 in ether_input (ifp=3D<optimized out>, m=3D0x0) at
../../../net/if_ethersubr.c:780
#22 0xffffffff808c3d3c in ixl_rx_input (ptype=3D0 '\000', rxr=3D<optimized =
out>,
ifp=3D<optimized out>, m=3D<optimized out>)
    at ../../../dev/ixl/ixl_txrx.c:1579
#23 ixl_rxeof (que=3D0xfffffe0002880e38, count=3D512) at
../../../dev/ixl/ixl_txrx.c:1910
#24 0xffffffff808b0ddf in ixl_msix_que (arg=3D0xfffffe0002880e38) at
../../../dev/ixl/ixl_pf_main.c:751
#25 0xffffffff805e585f in intr_event_execute_handlers (p=3D<optimized out>,
ie=3D0xfffff80016814d00)
    at ../../../kern/kern_intr.c:1336
#26 0xffffffff805e5ef7 in ithread_execute_handlers (ie=3D<optimized out>,
p=3D<optimized out>)
    at ../../../kern/kern_intr.c:1349
#27 ithread_loop (arg=3D0xfffff80010cf4d00) at ../../../kern/kern_intr.c:14=
30
---Type <return> to continue, or q <return> to quit---
#28 0xffffffff805e2ed6 in fork_exit (callout=3D0xffffffff805e5e40 <ithread_=
loop>,
arg=3D0xfffff80010cf4d00,
    frame=3D0xfffffe103e2f5340) at ../../../kern/kern_fork.c:1054
#29 <signal handler called>


We observed the crash was still happening from same code which was given by
aadhya in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263078, Is th=
ere
any proper fix available for this issue? Is this core obseverd in latest
FreeBSD releases?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-278389-227>