[Bug 234026] [panic] [dummynet] Repeatable panic in dummynet due to locking issues and use-after-free

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=234026

Stanislav Trofimov <noresponse at yandex.ru> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |noresponse at yandex.ru

--- Comment #1 from Stanislav Trofimov <noresponse at yandex.ru> ---
Hi
Same problem on FreeBSD 12.0-RELEASE-p3 GENERIC

Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x0
fault code              = supervisor read instruction, page not present
instruction pointer     = 0x20:0x0
stack pointer           = 0x28:0xfffffe003ee448d0
frame pointer           = 0x28:0xfffffe003ee44950
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (dummynet)
trap number             = 12
panic: page fault
cpuid = 0
time = 1551299285
KDB: stack backtrace:
#0 0xffffffff80be7977 at kdb_backtrace+0x67
#1 0xffffffff80b9b563 at vpanic+0x1a3
#2 0xffffffff80b9b3b3 at panic+0x43
#3 0xffffffff8107496f at trap_fatal+0x35f
#4 0xffffffff810749c9 at trap_pfault+0x49
#5 0xffffffff81073fee at trap+0x29e
#6 0xffffffff8104f435 at calltrap+0x8
#7 0xffffffff80d26cdd at ip_input+0x45d
#8 0xffffffff80cbc576 at netisr_dispatch_src+0xd6
#9 0xffffffff82e6ea1e at dummynet_send+0x1ae
#10 0xffffffff82e6e3af at dummynet_task+0x2ef
#11 0xffffffff80bf9cb4 at taskqueue_run_locked+0x154
#12 0xffffffff80bfae18 at taskqueue_thread_loop+0x98
#13 0xffffffff80b5bf33 at fork_exit+0x83

-- 
You are receiving this mail because:
You are the assignee for the bug.