https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=298865

            Bug ID: 298865
           Summary: Crash in ip6_output
           Product: Base System
           Version: 15.1-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

Created attachment 275128
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=275128&action=edit
Crash file

Crash:

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80b87069 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:519
#3  0xffffffff80b87577 in vpanic (fmt=0xffffffff811faa2f "%s",
ap=ap@entry=0xfffffe008e9f38a0) at /usr/src/sys/kern/kern_shutdown.c:974
#4  0xffffffff80b873a3 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#5  0xffffffff81099fcd in trap_fatal (frame=<optimized out>, eva=<optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:1028
#6  0xffffffff81099fcd in trap_pfault (frame=0xfffffe008e9f3920,
usermode=false, signo=<optimized out>, ucode=<optimized out>)
#7  <signal handler called>
#8  0xffffffff80dae67d in ip6_output (m0=<optimized out>,
opt=0xfffff801b84f0200, ro=ro@entry=0xfffff80041932ba8, flags=0,
im6o=im6o@entry=0x0, ifpp=ifpp@entry=0x0,
    inp=0xfffff80041932a80) at /usr/src/sys/netinet6/ip6_output.c:807
#9  0xffffffff80d74449 in tcp_default_output (tp=0xfffff80041932a80) at
/usr/src/sys/netinet/tcp_output.c:1468
#10 0xffffffff80d84ce5 in tcp_output_locked (tp=0xfffff80041932a80) at
/usr/src/sys/netinet/tcp_timer.c:298
#11 tcp_timer_rexmt (tp=0xfffff80041932a80) at
/usr/src/sys/netinet/tcp_timer.c:819
#12 0xffffffff80d84483 in tcp_timer_enter (xtp=xtp@entry=0xfffff80041932a80) at
/usr/src/sys/netinet/tcp_timer.c:890
#13 0xffffffff80ba464d in softclock_call_cc (c=0xfffff80041932c08,
cc=cc@entry=0xffffffff82e45300, direct=direct@entry=0) at
/usr/src/sys/kern/kern_timeout.c:729
#14 0xffffffff80ba5ce5 in softclock_thread (arg=arg@entry=0xffffffff82e45300)
at /usr/src/sys/kern/kern_timeout.c:861
#15 0xffffffff80b3d93b in fork_exit (callout=0xffffffff80ba5c00
<softclock_thread>, arg=0xffffffff82e45300, frame=0xfffffe008e9f3f40)
    at /usr/src/sys/kern/kern_fork.c:1200
#16 <signal handler called>
(kgdb)

and:
(kgdb)
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff80b87069 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:519
#3  0xffffffff80b87577 in vpanic (fmt=0xffffffff811faa2f "%s",
ap=ap@entry=0xfffffe0140441690) at /usr/src/sys/kern/kern_shutdown.c:974
#4  0xffffffff80b873a3 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:887
#5  0xffffffff81099fcd in trap_fatal (frame=<optimized out>, eva=<optimized
out>) at /usr/src/sys/amd64/amd64/trap.c:1028
#6  0xffffffff81099fcd in trap_pfault (frame=0xfffffe0140441710,
usermode=false, signo=<optimized out>, ucode=<optimized out>)
#7  <signal handler called>
#8  0xffffffff80dae67d in ip6_output (m0=<optimized out>,
opt=0xfffff8019562f800, ro=ro@entry=0xfffff80172cd5128, flags=0,
im6o=im6o@entry=0x0, ifpp=ifpp@entry=0x0, inp=0xfffff80172cd5000)
    at /usr/src/sys/netinet6/ip6_output.c:807
#9  0xffffffff80d74449 in tcp_default_output (tp=0xfffff80172cd5000) at
/usr/src/sys/netinet/tcp_output.c:1468
#10 0xffffffff80d85e3a in tcp_output_nodrop (tp=0xfffff80172cd5000) at
/usr/src/sys/netinet/tcp_var.h:720
#11 tcp_usr_send (so=0xfffff8001780d400, flags=0, m=0x0, nam=<optimized out>,
control=<optimized out>, td=<optimized out>) at
/usr/src/sys/netinet/tcp_usrreq.c:1127
#12 0xffffffff80c327df in sosend_generic_locked
(so=so@entry=0xfffff8001780d400, addr=addr@entry=0x0,
uio=uio@entry=0xfffff8021fbd5680, top=0xfffff80017da4600, top@entry=0x0,
control=control@entry=0x0,
    flags=flags@entry=0, td=0xfffff801a107a780) at
/usr/src/sys/kern/uipc_socket.c:2550
#13 0xffffffff80c320c1 in sosend_generic (so=0xfffff8001780d400, addr=0x0,
uio=0xfffff8021fbd5680, top=0x0, control=0x0, flags=0, td=0xfffff801a107a780)
at /usr/src/sys/kern/uipc_socket.c:2599
#14 0xffffffff80c32d3f in sousrsend (so=0xfffff801323fc800,
addr=0xfffff801efba0800, uio=0x0, control=0xfffffe01404416b0, flags=0,
userproc=0x0) at /usr/src/sys/kern/uipc_socket.c:2639
#15 0xffffffff80bf8da1 in fo_write (fp=0xfffff80009e3d050,
uio=0xfffff8021fbd5680, active_cred=0x0, td=0xfffff801a107a780,
flags=<optimized out>) at /usr/src/sys/sys/file.h:372
#16 dofilewrite (td=td@entry=0xfffff801a107a780, fd=fd@entry=24,
fp=0xfffff80009e3d050, auio=auio@entry=0xfffff8021fbd5680,
offset=offset@entry=-1, flags=flags@entry=0) at
/usr/src/sys/kern/sys_generic.c:565
#17 0xffffffff80bf8cd4 in kern_writev (td=0xfffff801a107a780, fd=24,
auio=0xfffff8021fbd5680) at /usr/src/sys/kern/sys_generic.c:492
#18 sys_writev (td=0xfffff801a107a780, uap=<optimized out>) at
/usr/src/sys/kern/sys_generic.c:478
#19 0xffffffff8109a606 in syscallenter (td=0xfffff801a107a780) at
/usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:193
#20 amd64_syscall (td=0xfffff801a107a780, traced=0) at
/usr/src/sys/amd64/amd64/trap.c:1267
#21 <signal handler called>
#22 0x0000000829fd14ca in ?? ()

I have a system that connects different jails via bridges and epair's.  This
allows me to simulate multiple routers at one time so that routing protocols
can be tested.  Each test builds and tears down it's unique topology. 
Typically multiple of these tests are run at the same time.  When these series
of tests are run, before completion of the entire test suite we have the kernel
crash.  I'm porting the infrastructure and test suites from linux so I don't
have a huge history with these tests on FreeBSD, but I have seen this crash 4
times in a row.  Looks like I can make this happen at will.  If you have things
you would like me to do feel free to reach out and I'll get the data.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to