bridge - panic: free: duplicated free

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

bridge - panic: free: duplicated free

Hrvoje Popovski
Hi all,

for testing MP network diffs i'm using some intrusive commands in loop
while sending traffic through openbsd box, leave loop to run and after
some time something will happen or not :)

few days ago by accident i run same loop twice and got various panics
and page faults... with one loop everything seems fine..
not sure if this is too aggressive and worth doing but i managed to
reproduce same panics so i'm sending report here ...


ddb outputs from this morning:
http://kosjenka.srce.hr/~hrvoje/zaprocvat/bridge_panic01.txt
http://kosjenka.srce.hr/~hrvoje/zaprocvat/bridge_panic02.txt

loop:
x3550m4# cat peribridge2
#!/bin/sh
while true; do
echo "ifconfig bridge0 del ix0" &&
ifconfig bridge0 del ix0 &&
echo "ifconfig bridge0 add ix0" &&
ifconfig bridge0 add ix0 &&
echo "ifconfig bridge0 del ix1" &&
ifconfig bridge0 del ix1 &&
echo "ifconfig bridge0 add ix1" &&
ifconfig bridge0 add ix1 &&
echo "sh netstart" &&
sh netstart &&
echo "sleep 10" &&
sleep 10 &&
echo "ifconfig bridge0 destroy" &&
ifconfig bridge0 destroy &&
echo "sh netstart" &&
sh netstart &&
echo "ifconfig ix1 down" &&
ifconfig ix1 down &&
echo "sh netstart" &&
sh netstart &&
echo "ifconfig ix0 down" &&
ifconfig ix0 down &&
echo "ifconfig bridge0 destroy" &&
ifconfig bridge0 destroy &&
echo "sh netstart" &&
sh netstart;
done


dmesg:
OpenBSD 6.5-current (GENERIC.MP) #5: Sun May  5 16:47:22 CEST 2019
    [hidden email]:/sys/arch/amd64/compile/GENERIC.MP
real mem = 34314461184 (32724MB)
avail mem = 33007333376 (31478MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.7 @ 0x7e67b000 (84 entries)
bios0: vendor IBM version "-[D7E168BUS-2.90]-" date 01/15/2019
bios0: IBM IBM System x3550 M4 -[791425Z]-
acpi0 at bios0: rev 2
acpi0: sleep states S0 S5
acpi0: tables DSDT FACP TCPA ERST HEST HPET APIC MCFG OEM1 SLIT SLIC
SSDT SSDT SSDT SSDT DMAR
acpi0: wakeup devices MRP1(S4) DCC0(S4) MRP3(S4) MRP5(S4) EHC2(S5)
PEX0(S5) PEX7(S5) EHC1(S5) IP2P(S3) MRPB(S4) MRPC(S4) MRPD(S4) MRPF(S4)
MRPG(S4) MRPH(S4) MRPI(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpihpet0 at acpi0: 14318179 Hz
acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.38 MHz, 06-3e-04
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 99MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 8 (application processor)
cpu2: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu2:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 4, package 0
cpu3 at mainbus0: apid 10 (application processor)
cpu3: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu3:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu3: 256KB 64b/line 8-way L2 cache
cpu3: smt 0, core 5, package 0
cpu4 at mainbus0: apid 32 (application processor)
cpu4: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu4:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu4: 256KB 64b/line 8-way L2 cache
cpu4: smt 0, core 0, package 1
cpu5 at mainbus0: apid 34 (application processor)
cpu5: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu5:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu5: 256KB 64b/line 8-way L2 cache
cpu5: smt 0, core 1, package 1
cpu6 at mainbus0: apid 40 (application processor)
cpu6: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu6:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu6: 256KB 64b/line 8-way L2 cache
cpu6: smt 0, core 4, package 1
cpu7 at mainbus0: apid 42 (application processor)
cpu7: Intel(R) Xeon(R) CPU E5-2620 v2 @ 2.10GHz, 2400.00 MHz, 06-3e-04
cpu7:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,DCA,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,PERF,ITSC,FSGSBASE,SMEP,ERMS,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,MELTDOWN
cpu7: 256KB 64b/line 8-way L2 cache
cpu7: smt 0, core 5, package 1
ioapic0 at mainbus0: apid 8 pa 0xfec00000, version 20, 24 pins
ioapic1 at mainbus0: apid 9 pa 0xfec01000, version 20, 24 pins
ioapic2 at mainbus0: apid 10 pa 0xfec40000, version 20, 24 pins
acpimcfg0 at acpi0
acpimcfg0: addr 0x80000000, bus 0-255
acpiprt0 at acpi0: bus 0 (IOH0)
acpiprt1 at acpi0: bus 12 (MRP1)
acpiprt2 at acpi0: bus 17 (DCC0)
acpiprt3 at acpi0: bus 22 (MRP3)
acpiprt4 at acpi0: bus 27 (MRP5)
acpiprt5 at acpi0: bus 6 (PEX0)
acpiprt6 at acpi0: bus 128 (IOH1)
acpiprt7 at acpi0: bus 134 (MRPD)
acpicpu0 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu1 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu2 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu3 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu4 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu5 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu6 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpicpu7 at acpi0: C2(500@59 mwait.3@0x10), C1(1000@3 mwait.1)
acpipci0 at acpi0 IOH0: 0x00000010 0x00000011 0x00000000
"PNP0003" at acpi0 not configured
acpicmos0 at acpi0
tpm0 at acpi0: TPM_ addr 0xfed40000/0x5000: WEC WPCT200 rev 0x47
acpipci1 at acpi0 IOH1: 0x00000010 0x00000011 0x00000000
ipmi at mainbus0 not configured
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel E5 v2 Host" rev 0x04
ppb0 at pci0 dev 1 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci1 at ppb0 bus 12
12:0:0: mem address conflict 0xfff80000/0x80000
12:0:1: mem address conflict 0xfff80000/0x80000
12:0:2: mem address conflict 0xfff80000/0x80000
12:0:3: mem address conflict 0xfff80000/0x80000
ixl0 at pci1 dev 0 function 0 "Intel X710 SFP+" rev 0x01: port 3, FW
6.1.49420 API 1.7, msi, address 3c:fd:fe:b3:26:c0
ixl1 at pci1 dev 0 function 1 "Intel X710 SFP+" rev 0x01: port 2, FW
6.1.49420 API 1.7, msi, address 3c:fd:fe:b3:26:c1
ixl2 at pci1 dev 0 function 2 "Intel X710 SFP+" rev 0x01: port 0, FW
6.1.49420 API 1.7, msi, address 3c:fd:fe:b3:26:c2
ixl3 at pci1 dev 0 function 3 "Intel X710 SFP+" rev 0x01: port 1, FW
6.1.49420 API 1.7, msi, address 3c:fd:fe:b3:26:c3
ppb1 at pci0 dev 2 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci2 at ppb1 bus 17
ppb2 at pci2 dev 0 function 0 "IDT 89HPES24T3G2" rev 0x02
pci3 at ppb2 bus 18
ppb3 at pci3 dev 2 function 0 "IDT 89HPES24T3G2" rev 0x02
pci4 at ppb3 bus 19
19:0:0: mem address conflict 0xfff80000/0x80000
myx0 at pci4 dev 0 function 0 "Myricom Z8E" rev 0x01: msi, model
10G-PCIE2-8BL2-2S, address 00:60:dd:45:ba:f8
ppb4 at pci3 dev 4 function 0 "IDT 89HPES24T3G2" rev 0x02
pci5 at ppb4 bus 20
20:0:0: mem address conflict 0xfff80000/0x80000
myx1 at pci5 dev 0 function 0 "Myricom Z8E" rev 0x01: msi, model
10G-PCIE2-8BL2-2S, address 00:60:dd:45:ba:f9
ppb5 at pci0 dev 3 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci6 at ppb5 bus 22
22:0:0: mem address conflict 0xfff80000/0x80000
22:0:1: mem address conflict 0xfff80000/0x80000
ix0 at pci6 dev 0 function 0 "Intel 82599" rev 0x01: msi, address
a0:36:9f:2e:96:a0
ix1 at pci6 dev 0 function 1 "Intel 82599" rev 0x01: msi, address
a0:36:9f:2e:96:a1
ppb6 at pci0 dev 3 function 2 "Intel E5 v2 PCIE" rev 0x04: msi
pci7 at ppb6 bus 27
mfii0 at pci7 dev 0 function 0 "Symbios Logic MegaRAID SAS2208" rev
0x05: msi
mfii0: "ServeRAID M5110", firmware 23.34.0-0023, 512MB cache
scsibus1 at mfii0: 64 targets
sd0 at scsibus1 targ 0 lun 0: <IBM, ServeRAID M5110, 3.46> SCSI3
0/direct fixed naa.600605b006c3a0b01a582bd010e4c053
sd0: 952720MB, 512 bytes/sector, 1951170560 sectors
scsibus2 at mfii0: 256 targets
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 0 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 1 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 2 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 3 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 4 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 5 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 6 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci0 dev 4 function 7 not configured
"Intel E5 v2 Address Map" rev 0x04 at pci0 dev 5 function 0 not configured
"Intel E5 v2 IIO RAS" rev 0x04 at pci0 dev 5 function 2 not configured
ppb7 at pci0 dev 17 function 0 "Intel C600 Virtual PCIE" rev 0x06
pci8 at ppb7 bus 32
ehci0 at pci0 dev 26 function 0 "Intel C600 USB" rev 0x06: apic 8 int 19
usb0 at ehci0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Intel EHCI root hub" rev
2.00/1.00 addr 1
ppb8 at pci0 dev 28 function 0 "Intel C600 PCIE" rev 0xb6: msi
pci9 at ppb8 bus 6
em0 at pci9 dev 0 function 0 "Intel I350" rev 0x01: msi, address
40:f2:e9:ec:b4:12
em1 at pci9 dev 0 function 1 "Intel I350" rev 0x01: msi, address
40:f2:e9:ec:b4:13
em2 at pci9 dev 0 function 2 "Intel I350" rev 0x01: msi, address
40:f2:e9:ec:b4:14
em3 at pci9 dev 0 function 3 "Intel I350" rev 0x01: msi, address
40:f2:e9:ec:b4:15
ppb9 at pci0 dev 28 function 7 "Intel C600 PCIE" rev 0xb6: msi
pci10 at ppb9 bus 1
ppb10 at pci10 dev 0 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci11 at ppb10 bus 2
ppb11 at pci11 dev 0 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci12 at ppb11 bus 3
ppb12 at pci12 dev 0 function 0 "Renesas SH7757 PCIE-PCI" rev 0x00
pci13 at ppb12 bus 4
vga1 at pci13 dev 0 function 0 "Matrox MGA G200eR" rev 0x00
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb13 at pci11 dev 1 function 0 "Renesas SH7757 PCIE Switch" rev 0x00
pci14 at ppb13 bus 5
ehci1 at pci0 dev 29 function 0 "Intel C600 USB" rev 0x06: apic 8 int 23
usb1 at ehci1: USB revision 2.0
uhub1 at usb1 configuration 1 interface 0 "Intel EHCI root hub" rev
2.00/1.00 addr 1
ppb14 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xa6
pci15 at ppb14 bus 33
pcib0 at pci0 dev 31 function 0 "Intel C600 LPC" rev 0x06
ichiic0 at pci0 dev 31 function 3 "Intel C600 SMBus" rev 0x06: apic 8 int 11
iic0 at ichiic0
isa0 at pcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pckbc0 at isa0 port 0x60/5 irq 1 irq 12
pckbd0 at pckbc0 (kbd slot)
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
pci16 at mainbus0 bus 128
128:4:0: mem address conflict 0x90000000/0x4000
128:4:1: mem address conflict 0x90004000/0x4000
128:4:2: mem address conflict 0x90008000/0x4000
128:4:3: mem address conflict 0x9000c000/0x4000
128:4:4: mem address conflict 0x90010000/0x4000
128:4:5: mem address conflict 0x90014000/0x4000
128:4:6: mem address conflict 0x90018000/0x4000
128:4:7: mem address conflict 0x9001c000/0x4000
ppb15 at pci16 dev 0 function 0 "Intel E5 v2 PCIE" rev 0x04
pci17 at ppb15 bus 129
ppb16 at pci16 dev 2 function 0 "Intel E5 v2 PCIE" rev 0x04: msi
pci18 at ppb16 bus 134
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 0 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 1 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 2 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 3 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 4 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 5 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 6 not configured
"Intel E5 v2 I/OAT" rev 0x04 at pci16 dev 4 function 7 not configured
"Intel E5 v2 Address Map" rev 0x04 at pci16 dev 5 function 0 not configured
"Intel E5 v2 IIO RAS" rev 0x04 at pci16 dev 5 function 2 not configured
vmm0 at mainbus0: VMX/EPT
uhub2 at uhub0 port 1 configuration 1 interface 0 "Intel Rate Matching
Hub" rev 2.00/0.00 addr 2
uhub3 at uhub1 port 1 configuration 1 interface 0 "Intel Rate Matching
Hub" rev 2.00/0.00 addr 2
uhub4 at uhub3 port 1 configuration 1 interface 0 "no manufacturer
Gadget USB HUB" rev 2.00/0.00 addr 3
uhub4: device problem, disabling port 1
umass0 at uhub4 port 3 configuration 1 interface 0 "Avocent Mass Storage
Function" rev 2.00/0.00 addr 4
umass0: using SCSI over Bulk-Only
scsibus3 at umass0: 2 targets, initiator 0
cd0 at scsibus3 targ 1 lun 0: <IMM, Virtual Media, 0325> SCSI0 5/cdrom
removable
urndis0 at uhub4 port 5 configuration 2 interface 0 "IBM RNDIS/Ethernet
Gadget" rev 2.00/3.25 addr 5
urndis0: using Vendor, address 42:f2:e9:ec:b4:11
vscsi0 at root
scsibus4 at vscsi0: 256 targets
softraid0 at root
scsibus5 at softraid0: 256 targets
root on sd0a (f3d5a8c6eefbbedf.a) swap on sd0b dump on sd0b
WARNING: / was not properly unmounted
uhidev0 at uhub4 port 1 configuration 1 interface 0 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 6
uhidev0: iclass 3/1
ukbd0 at uhidev0: 8 variable keys, 6 key codes
wskbd1 at ukbd0 mux 1
wskbd1: connecting to wsdisplay0
uhidev1 at uhub4 port 1 configuration 1 interface 1 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 6
uhidev1: iclass 3/1
ums0 at uhidev1: 3 buttons, Z dir
wsmouse0 at ums0 mux 0
uhidev2 at uhub4 port 1 configuration 1 interface 2 "Avocent
Keyboard/Mouse Function" rev 2.00/0.00 addr 6
uhidev2: iclass 3/1
ums1 at uhidev2: 3 buttons, Z dir
wsmouse1 at ums1 mux 0
x3550m4#

Reply | Threaded
Open this post in threaded view
|

Re: bridge - panic: free: duplicated free

Martin Pieuchot
On 07/05/19(Tue) 11:46, Hrvoje Popovski wrote:

> Hi all,
>
> for testing MP network diffs i'm using some intrusive commands in loop
> while sending traffic through openbsd box, leave loop to run and after
> some time something will happen or not :)
>
> few days ago by accident i run same loop twice and got various panics
> and page faults... with one loop everything seems fine..
> not sure if this is too aggressive and worth doing but i managed to
> reproduce same panics so i'm sending report here ...
>
>
> ddb outputs from this morning:
> http://kosjenka.srce.hr/~hrvoje/zaprocvat/bridge_panic01.txt
> http://kosjenka.srce.hr/~hrvoje/zaprocvat/bridge_panic02.txt

Thanks for the report.  The problem isn't related to bridge(4), it is
common to any cloning device.  It's a race than can be triggered when
two processes try to destroy the same interface at the same time.
Here's where the "first" ifconfig destroy got blocked:

mi_switch() at mi_switch+0x240
sleep_finish(ffff800025c47df8,1) at sleep_finish+0x81
cond_wait(ffff800025c47e78,ffffffff81a87e1a) at cond_wait+0x51
taskq_barrier(ffff800000027080) at taskq_barrier+0x99
ifq_destroy(ffff800000e11260) at ifq_destroy+0x88
if_detach(ffff800000e11000) at if_detach+0x2fc
bridge_clone_destroy(ffff800000e11000) at bridge_clone_destroy+0x17b
if_clone_destroy(ffff800025c480a0) at if_clone_destroy+0x117
ifioctl(fffffd887db9c1a8,80206979,ffff800025c480a0,ffff8000fffefc78) at ifioctl+0x1b3

The races exists because the second if_clone_destroy() iterates on `ifnet'
and gets a reference of `ifp' while the first one is blocking, certainly
on the NET_LOCK().

The easiest way to fix this problem should be certainly to serialize all
clone/destroy operations.  I hope this won't led us into a lock order
issue.