https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253061

            Bug ID: 253061
           Summary: sys/net/if_vlan:qinq_deep test triggers "UNR:
                    free_unr(3735929054) out of range" panic
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: b...@freebsd.org
          Reporter: arichard...@freebsd.org

Running `cd /usr/tests && kyua test` on a single-core QEMU amd64 I get the
following panic:

sys/net/if_vlan:qinq_deep ->  Jan 28 11:28:13 freebsd-amd64 kernel:
ng_ether_ifnet_arrival_event: can't re-name node epair1a
Jan 28 11:28:13 freebsd-amd64 kernel: ng_ether_ifnet_arrival_event: can't
re-name node epair1b
Jan 28 11:28:13 freebsd-amd64 kernel: ng_ether_ifnet_arrival_event: can't
re-name node epair1a
panic: UNR: free_unr(3735929054) out of range [0...32767]
cpuid = 0
time = 1611833293
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0093bdb970
vpanic() at vpanic+0x188/frame 0xfffffe0093bdb9c0
panic() at panic+0x43/frame 0xfffffe0093bdba20
free_unr() at free_unr+0x38d/frame 0xfffffe0093bdba60
ifc_free_unit() at ifc_free_unit+0x16/frame 0xfffffe0093bdba90
vlan_clone_destroy() at vlan_clone_destroy+0xaf/frame 0xfffffe0093bdbac0
if_clone_destroyif() at if_clone_destroyif+0x185/frame 0xfffffe0093bdbb10
if_clone_detach() at if_clone_detach+0xc8/frame 0xfffffe0093bdbb40
vnet_destroy() at vnet_destroy+0x140/frame 0xfffffe0093bdbb70
prison_deref() at prison_deref+0x2fe/frame 0xfffffe0093bdbbb0
sys_jail_remove() at sys_jail_remove+0x21a/frame 0xfffffe0093bdbc00
amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0093bdbd30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0093bdbd30
--- syscall (508, FreeBSD ELF64, sys_jail_remove), rip = 0x8003c9b2a, rsp =
0x7fffffffe7f8, rbp = 0x7fffffffe880 ---
KDB: enter: panic
[ thread pid 8883 tid 103789 ]
Stopped at      kdb_enter+0x37: movq    $0,0x10a150e(%rip)
db>

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"

Reply via email to