[Bug 244703] sys.netpfil.pf.nat.exhaust panics kernel

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244703

            Bug ID: 244703
           Summary: sys.netpfil.pf.nat.exhaust panics kernel
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: tests
          Assignee: testing at freebsd.org
          Reporter: lwhsu at FreeBSD.org

FreeBSD-head-amd64-test job starts randomly failing after:

https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14511/

and following builds:

https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14512/
https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14515/
https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14516/
https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14517/
...
https://ci.freebsd.org/job/FreeBSD-head-amd64-test/14528/

Console log:

sys/netpfil/pf/nat:exhaust  ->  panic: epair_qflush: ifp=0xfffff800ae6d5800,
epair_softc gone? sc=0

cpuid = 0
time = 1583444839
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe002c6fe880
vpanic() at vpanic+0x185/frame 0xfffffe002c6fe8e0
panic() at panic+0x43/frame 0xfffffe002c6fe940
epair_qflush() at epair_qflush+0x1a8/frame 0xfffffe002c6fe990
if_down() at if_down+0x12d/frame 0xfffffe002c6fe9c0
if_detach_internal() at if_detach_internal+0x2de/frame 0xfffffe002c6fea20
if_vmove() at if_vmove+0x3c/frame 0xfffffe002c6fea70
vnet_if_return() at vnet_if_return+0x50/frame 0xfffffe002c6fea90
vnet_destroy() at vnet_destroy+0x130/frame 0xfffffe002c6feac0
prison_deref() at prison_deref+0x29d/frame 0xfffffe002c6feb00
taskqueue_run_locked() at taskqueue_run_locked+0xaa/frame 0xfffffe002c6feb80
taskqueue_thread_loop() at taskqueue_thread_loop+0xc2/frame 0xfffffe002c6febb0
fork_exit() at fork_exit+0x80/frame 0xfffffe002c6febf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe002c6febf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100011 ]
Stopped at      kdb_enter+0x37: movq    $0,0x10874b6(%rip)
db:0:kdb.enter.panic> show pcpu
cpuid        = 0
dynamic pcpu = 0x788d80
curthread    = 0xfffffe0008688c00: pid 0 tid 100011 critnest 1 "thread taskq"
curpcb       = 0xfffffe0008689110
fpcurthread  = none
idlethread   = 0xfffffe000a1f6300: tid 100003 "idle: cpu0"
self         = 0xffffffff82210000
curpmap      = 0xffffffff81d9ea50
tssp         = 0xffffffff82210384
rsp0         = 0xfffffe002c6fecc0
kcr3         = 0x8000000002119002
ucr3         = 0xffffffffffffffff
scr3         = 0x1012c8f99
gs32p        = 0xffffffff82210404
ldt          = 0xffffffff82210444
tss          = 0xffffffff82210434
tlb gen      = 307136
curvnet      = 0xfffff80003438380
spin locks held:
db:0:kdb.enter.panic>

It can be reproduced by running `kyua test sys.netpfil.pf.nat.exhaust` in a
loop in the VM:

https://artifact.ci.freebsd.org/snapshot/head/r358683/amd64/amd64/disk-test.img.xz

-- 
You are receiving this mail because:
You are the assignee for the bug.