openvswitch crashed at mbundle_lookup().

Issue

• openvswitch crashed at mbundle_lookup().

A sample backtrace

(gdb) bt
#0  0x00007f9e4000aea0 in mbundle_lookup (mbridge=0x7f9e41421260, ofbundle=0x7f9e423cfdf0) at ofproto/ofproto-dpif-mirror.c:427
#1  0x00007f9e4000b095 in mirror_bundle_out (mbridge=, ofbundle=) at ofproto/ofproto-dpif-mirror.c:185
#2  0x00007f9e4001abbc in xbundle_mirror_out (xbridge=0x7f9e41e0b6b0, xbundle=0x7f9e41d0ce10) at ofproto/ofproto-dpif-xlate.c:1603
#3  xlate_normal_flood (ctx=ctx@entry=0x7f9e0dfb8750, in_xbundle=in_xbundle@entry=0x7f9e418dfc00, vlan=vlan@entry=2868) at ofproto/ofproto-dpif-xlate.c:2403
#4  0x00007f9e4001b3fb in xlate_normal (ctx=0x7f9e0dfb8750) at ofproto/ofproto-dpif-xlate.c:2607
#5  xlate_output_action (ctx=ctx@entry=0x7f9e0dfb8750, port=, max_len=, may_packet_in=may_packet_in@entry=true) at ofproto/ofproto-dpif-xlate.c:3984
#6  0x00007f9e40017976 in do_xlate_actions (ofpacts=, ofpacts_len=, ctx=ctx@entry=0x7f9e0dfb8750) at ofproto/ofproto-dpif-xlate.c:4784
#7  0x00007f9e40018b6c in xlate_recursively (deepens=true, rule=0x7f9e41d45b30, ctx=0x7f9e0dfb8750) at ofproto/ofproto-dpif-xlate.c:3332
#8  xlate_table_action (ctx=0x7f9e0dfb8750, in_port=, table_id=, may_packet_in=, honor_table_miss=)
    at ofproto/ofproto-dpif-xlate.c:3400
#9  0x00007f9e40019bc4 in compose_output_action__ (ctx=ctx@entry=0x7f9e0dfb8750, ofp_port=, xr=xr@entry=0x0, check_stp=check_stp@entry=true)
    at ofproto/ofproto-dpif-xlate.c:3102
#10 0x00007f9e4001a4d2 in compose_output_action (xr=0x0, ofp_port=, ctx=0x7f9e0dfb8750) at ofproto/ofproto-dpif-xlate.c:3311
#11 output_normal (ctx=ctx@entry=0x7f9e0dfb8750, out_xbundle=out_xbundle@entry=0x7f9e41e77f50, vlan=vlan@entry=1659) at ofproto/ofproto-dpif-xlate.c:1958
#12 0x00007f9e4001abfe in xlate_normal_flood (ctx=ctx@entry=0x7f9e0dfb8750, in_xbundle=in_xbundle@entry=0x7f9e41c679e0, vlan=vlan@entry=1659) at ofproto/ofproto-dpif-xlate.c:2404
#13 0x00007f9e4001b3fb in xlate_normal (ctx=0x7f9e0dfb8750) at ofproto/ofproto-dpif-xlate.c:2607
#14 xlate_output_action (ctx=ctx@entry=0x7f9e0dfb8750, port=, max_len=, may_packet_in=may_packet_in@entry=true) at ofproto/ofproto-dpif-xlate.c:3984
#15 0x00007f9e40017976 in do_xlate_actions (ofpacts=ofpacts@entry=0x7f9e414bb6a8, ofpacts_len=ofpacts_len@entry=16, ctx=ctx@entry=0x7f9e0dfb8750)
    at ofproto/ofproto-dpif-xlate.c:4784
#16 0x00007f9e4001cf9c in xlate_actions (xin=xin@entry=0x7f9e0dfb9d70, xout=xout@entry=0x7f9e0dfde5b0) at ofproto/ofproto-dpif-xlate.c:5621
#17 0x00007f9e40010f36 in upcall_xlate (wc=0x7f9e0dfde608, odp_actions=0x7f9e0dfde5c8, upcall=0x7f9e0dfde550, udpif=0x7f9e4141b220) at ofproto/ofproto-dpif-upcall.c:1102
#18 process_upcall (udpif=udpif@entry=0x7f9e4141b220, upcall=upcall@entry=0x7f9e0dfde550, odp_actions=odp_actions@entry=0x7f9e0dfde5c8, wc=wc@entry=0x7f9e0dfde608)
    at ofproto/ofproto-dpif-upcall.c:1239
#19 0x00007f9e40012587 in recv_upcalls (handler=0x7f9e4151a690, handler=0x7f9e4151a690) at ofproto/ofproto-dpif-upcall.c:797
#20 0x00007f9e400129fc in udpif_upcall_handler (arg=0x7f9e4151a690) at ofproto/ofproto-dpif-upcall.c:719
#21 0x00007f9e400ab3c6 in ovsthread_wrapper (aux_=) at lib/ovs-thread.c:342
#22 0x00007f9e3efecdc5 in start_thread (arg=0x7f9e0dffb700) at pthread_create.c:308
#23 0x00007f9e3e3ba76d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113
(gdb) p mbundle
$2 = (struct mbundle *) 0x31