From owner-freebsd-bugs@freebsd.org Sat Jun 10 07:12:45 2017 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8A56BD86CE7 for ; Sat, 10 Jun 2017 07:12:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 783B46AC27 for ; Sat, 10 Jun 2017 07:12:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id v5A7Cj7n079693 for ; Sat, 10 Jun 2017 07:12:45 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 219901] [Panic] [VIMAGE] [if_bridge] panic when destroying interface on bridge over time Date: Sat, 10 Jun 2017 07:12:45 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: reshadpatuck1@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Jun 2017 07:12:45 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D219901 Bug ID: 219901 Summary: [Panic] [VIMAGE] [if_bridge] panic when destroying interface on bridge over time Product: Base System Version: CURRENT Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: reshadpatuck1@gmail.com Created attachment 183373 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D183373&action= =3Dedit core.txt for crash on 2017-06-10 r319591 While testing vnet jails over time and bringing about 20 of them up and down about 10-20 times a day I get this panic (bridge_set_ifcap). I have attached the core.txt for the panic to this post. The issue seems to be during the tear-down of an interface on an if_bridge, while setting the interface capabilities on the bridge. This is the third time the same panic has occurred and this occurs after so= me time (~5 days). I have tried running a script that ups and downs the vnet jails in a loop a= nd have not been able to recreate the panic. I have crash dumps and core.txt for all three of them, but the trace back is almost identical so am attaching the most recent one. Pleas let me know if there is any other information you require. Thanks --- (kgdb) #0 doadump (textdump=3D0) at pcpu.h:232 #1 0xffffffff803a308b in db_dump (dummy=3D,=20 dummy2=3D, dummy3=3D,=20 dummy4=3D) at /usr/src/sys/ddb/db_command.c:546 #2 0xffffffff803a2e7f in db_command (cmd_table=3D) at /usr/src/sys/ddb/db_command.c:453 #3 0xffffffff803a2bb4 in db_command_loop () at /usr/src/sys/ddb/db_command.c:506 #4 0xffffffff803a5c7f in db_trap (type=3D,=20 code=3D) at /usr/src/sys/ddb/db_main.c:248 #5 0xffffffff80a98b23 in kdb_trap (type=3D9, code=3D0, tf=3D) at /usr/src/sys/kern/subr_kdb.c:654 #6 0xffffffff80ef6532 in trap_fatal (frame=3D0xfffffe104379d430, eva=3D0) at /usr/src/sys/amd64/amd64/trap.c:796 #7 0xffffffff80ef5b3d in trap (frame=3D0xfffffe104379d430) at counter.h:85 #8 0xffffffff80ed88e1 in calltrap () at /usr/src/sys/amd64/amd64/exception.S:236 #9 0xffffffff82e7620f in bridge_set_ifcap (sc=3D0xfffff8002866bc00,=20 bif=3D, set=3D8) at /usr/src/sys/net/if_bridge.c:9= 40 #10 0xffffffff82e75f0d in bridge_delete_member (sc=3D0xfffff8002866bc00,=20 bif=3D0xfffff8083d54ea00, gone=3D0) at /usr/src/sys/net/if_bridge.c:1065 #11 0xffffffff82e73dca in bridge_clone_destroy (ifp=3D0xfffff80251155000) at /usr/src/sys/net/if_bridge.c:733 #12 0xffffffff80b510c7 in if_clone_destroyif (ifc=3D0xfffff8000efd2c80,=20 ifp=3D) at /usr/src/sys/net/if_clone.c:719 #13 0xffffffff80b50e29 in if_clone_destroy (name=3D0xfffffe104379d780 "igb1= br") at /usr/src/sys/net/if_clone.c:284 #14 0xffffffff80b4c283 in ifioctl (so=3D0xfffff80251beb000,=20 cmd=3D, data=3D,=20 td=3D) at /usr/src/sys/net/if.c:2802 #15 0xffffffff80abd72d in kern_ioctl (td=3D,=20 fd=3D, com=3D,=20 data=3D) at file.h:323 #16 0xffffffff80abd3ef in sys_ioctl (td=3D,=20 uap=3D0xfffffe104379d930) at /usr/src/sys/kern/sys_generic.c:745 #17 0xffffffff80ef6fd9 in amd64_syscall (td=3D0xfffff80251001000, traced=3D= 0) at subr_syscall.c:136 #18 0xffffffff80ed8bcb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:396 #19 0x0000000800fdc4ca in ?? () Previous frame inner to this frame (corrupt stack?) Current language: auto; currently minimal (kgdb)=20 --- # uname -a FreeBSD v3dev-20-7 12.0-CURRENT FreeBSD 12.0-CURRENT #9 r319591: Sun Jun 4 23:01:11 UTC 2017 root@pkgbase:/usr/obj/usr/src/sys/VNET amd64 --- --=20 You are receiving this mail because: You are the assignee for the bug.=