From owner-freebsd-current@FreeBSD.ORG Sat Jan 7 12:42:48 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BF2E816A41F for ; Sat, 7 Jan 2006 12:42:48 +0000 (GMT) (envelope-from ggajic@afrodita.rcub.bg.ac.yu) Received: from afrodita.rcub.bg.ac.yu (afrodita.rcub.bg.ac.yu [147.91.1.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 32EBE43D45 for ; Sat, 7 Jan 2006 12:42:39 +0000 (GMT) (envelope-from ggajic@afrodita.rcub.bg.ac.yu) Received: from afrodita.rcub.bg.ac.yu (localhost.localdomain [127.0.0.1]) by afrodita.rcub.bg.ac.yu (8.13.4/8.13.4) with ESMTP id k07CgUmB024932 for ; Sat, 7 Jan 2006 13:42:30 +0100 Received: from localhost (ggajic@localhost) by afrodita.rcub.bg.ac.yu (8.13.4/8.13.4/Submit) with ESMTP id k07CgT89024929 for ; Sat, 7 Jan 2006 13:42:30 +0100 Date: Sat, 7 Jan 2006 13:42:29 +0100 (CET) From: Goran Gajic To: freebsd-current@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-RCUB-MailScanner-Information: Please contact the RCUB if you have problem with mail X-RCUB-MailScanner: Found to be clean X-RCUB-MailScanner-From: ggajic@afrodita.rcub.bg.ac.yu X-Mailman-Approved-At: Sat, 07 Jan 2006 20:30:56 +0000 Subject: 7.0-CURRENT ppp related panic X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Jan 2006 12:42:48 -0000 Hi, I have managed to trigger two panics by doing ifconfig ppp0 destroy while ppp was running. Reagrads, gg. # kgdb /usr/src/sys/amd64/compile/TEST/kernel.debug vmcore.0 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Unde fined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd". Unread portion of the kernel message buffer: Fatal trap 9: general protection fault while in kernel mode cpuid = 0; apic id = 00 instruction pointer = 0x8:0xffffffff804757d0 stack pointer = 0x10:0xffffffffa569c940 frame pointer = 0x10:0xffffffffa569ca60 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 31 (swi0: sio) panic: from debugger cpuid = 0 Uptime: 36m28s Dumping 1023 MB (2 chunks) chunk 0: 1MB (156 pages) ... ok chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 83 1 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 51 1 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 19 1 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:172 172 pcpu.h: No such file or directory. in pcpu.h #0 doadump () at pcpu.h:172 #1 0xffffffff803faa0c in boot (howto=260) at ../../../kern/kern_shutdown.c:399 #2 0xffffffff803fa4ab in panic (fmt=0xffffffff8062d726 "from debugger") at ../../../kern/kern_shutdown.c:555 #3 0xffffffff801c7402 in db_panic (addr=0, have_addr=0, count=0, modif=0x0) at ../../../ddb/db_command.c:435 #4 0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404 #5 0xffffffff801c9853 in db_trap (type=-1519794512, code=0) at ../../../ddb/db_main.c:221 #6 0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa569c890) at ../../../kern/subr_kdb.c:485 #7 0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa569c890, eva=18446742975232440144) at ../../../amd64/amd64/trap.c:679 #8 0xffffffff805c33a1 in trap (frame= {tf_rdi = -2401050962867404546, tf_rsi = 0, tf_rdx = -1519793496, tf_rcx = -2401050962867404546, tf_r8 = 80, tf_r9 = -1519793536, tf_rax = -24010509628674 04546, tf_rbx = -2140624749, tf_rbp = -1519793568, tf_r10 = 0, tf_r11 = 16, tf_r 12 = -2143174672, tf_r13 = 0, tf_r14 = -2140624751, tf_r15 = 0, tf_trapno = 9, t f_addr = 0, tf_flags = 2, tf_err = 0, tf_rip = -2142808112, tf_cs = 8, tf_rflags = 66118, tf_rsp = -1519793832, tf_ss = 16}) at ../../../amd64/amd64/trap.c:492 #9 0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168 #10 0xffffffff804757d0 in strlcpy () at ../../../kern/kern_shutdown.c:555 #3 0xffffffff801c7402 in db_panic (addr=0, have_addr=0, count=0, modif=0x0) at ../../../ddb/db_command.c:435 #4 0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404 #5 0xffffffff801c9853 in db_trap (type=-1519794512, code=0) at ../../../ddb/db_main.c:221 #6 0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa569c890) at ../../../kern/subr_kdb.c:485 #7 0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa569c890, eva=18446742975232440144) at ../../../amd64/amd64/trap.c:679 #8 0xffffffff805c33a1 in trap (frame= {tf_rdi = -2401050962867404546, tf_rsi = 0, tf_rdx = -1519793496, tf_rcx = -2401050962867404546, tf_r8 = 80, tf_r9 = -1519793536, tf_rax = -24010509628674 04546, tf_rbx = -2140624749, tf_rbp = -1519793568, tf_r10 = 0, tf_r11 = 16, tf_r 12 = -2143174672, tf_r13 = 0, tf_r14 = -2140624751, tf_r15 = 0, tf_trapno = 9, t f_addr = 0, tf_flags = 2, tf_err = 0, tf_rip = -2142808112, tf_cs = 8, tf_rflags = 66118, tf_rsp = -1519793832, tf_ss = 16}) at ../../../amd64/amd64/trap.c:492 #9 0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168 #10 0xffffffff804757d0 in strlcpy () #11 0xffffffffa569ca80 in ?? () #12 0x0000000000000000 in ?? () Previous frame identical to this frame (corrupt stack?) [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Unde fined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd". Unread portion of the kernel message buffer: <118>. <118>Terminated <118>. <118>Jan 7 13:20:13 magarac syslogd: exiting on signal 15 Fatal trap 9: general protection fault while in kernel mode cpuid = 0; apic id = 00 instruction pointer = 0x8:0xffffffff8043fc90 stack pointer = 0x10:0xffffffffa7e71890 frame pointer = 0x10:0xffffffffa7e718b0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 579 (pppd) Fatal trap 9: general protection fault while in kernel mode cpuid = 0; apic id = 00 instruction pointer = 0x8:0xffffffff8043fc90 stack pointer = 0x10:0xffffffffa7e71890 frame pointer = 0x10:0xffffffffa7e718b0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 579 (pppd) Dumping 1023 MB (2 chunks) chunk 0: 1MB (156 pages) ... ok chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 83 1 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 51 1 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 19 1 175 159 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:172 172 pcpu.h: No such file or directory. in pcpu.h (kgdb) (kgdb) backtrace #0 doadump () at pcpu.h:172 #1 0xffffffff801c74f1 in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0x0) at ../../../ddb/db_command.c:489 #2 0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404 #3 0xffffffff801c9853 in db_trap (type=-1478027776, code=0) at ../../../ddb/db_main.c:221 #4 0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa7e717e0) at ../../../kern/subr_kdb.c:485 #5 0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa7e717e0, eva=18446742974867610672) at ../../../amd64/amd64/trap.c:679 #6 0xffffffff805c33a1 in trap (frame= {tf_rdi = -2401050962867404578, tf_rsi = -1098841940944, tf_rdx = 0, tf_rc x = 622, tf_r8 = -2140674520, tf_r9 = -1098841940944, tf_rax = -2401050962867404 578, tf_rbx = -1098479361024, tf_rbp = -1478027088, tf_r10 = 0, tf_r11 = 4, tf_r 12 = -1098479361024, tf_r13 = -2138808448, tf_r14 = -1098841956352, tf_r15 = -10 98490738688, tf_trapno = 9, tf_addr = 0, tf_flags = -2143359391, tf_err = 0, tf_ rip = -2143028080, tf_cs = 8, tf_rflags = 66182, tf_rsp = -1478027104, tf_ss = 1 6}) at ../../../amd64/amd64/trap.c:492 #7 0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168 #8 0xffffffff8043fc90 in m_freem (mb=0xdeadc0dedeadc0de) at mbuf.h:447 #9 0xffffffff804873b6 in pppasyncrelinq (sc=0xffffff003d872400) at ../../../net/ppp_tty.c:270 #10 0xffffffff80487457 in pppclose (tp=0xffffff003cd98850, flag=669686832) at ../../../net/ppp_tty.c:252 #11 0xffffffff80438ad5 in ttioctl (tp=0xffffff003cd98800, cmd=2147775515, data=0xffffff003cdc7780, flag=3) at linedisc.h:93 #12 0xffffffff8043ac53 in ttyioctl (dev=0xdeadc0dedeadc0de, cmd=2147775515, data=0xffffff003cdc7780 "", flag=3, td=0xfffffffd) at ../../../kern/tty.c:3224 #13 0xffffffff803cec85 in giant_ioctl (dev=0xffffff003cda5600, cmd=2147775515, data=0xffffff003cdc7780 "", fflag=3, td=0xffffff0027ea9c30) at ../../../kern/kern_conf.c:288 #14 0xffffffff8039d6ff in devfs_ioctl_f (fp=0xffffff0030bfc870, com=2147775515, data=0xffffffff8083f340, cred=0x26e, td=0xffffff0027ea9c30) at ../../../fs/devfs/devfs_vnops.c:407 #15 0xffffffff80429837 in ioctl (td=0xffffff0027ea9c30, uap=0xffffffffa7e71c00) at file.h:259 #16 0xffffffff805c3cf7 in syscall (frame= {tf_rdi = 5, tf_rsi = 2147775515, tf_rdx = 5347264, tf_rcx = 34374038268, tf_r8 = -2140497280, tf_r9 = 140737488349784, tf_rax = 54, tf_rbx = 5, tf_rbp = 0, tf_r10 = 1, tf_r11 = 582, tf_r12 = 1500, tf_r13 = 0, tf_r14 = 34375374336, tf _r15 = 0, tf_trapno = 12, tf_addr = 5347268, tf_flags = 12, tf_err = 2, tf_rip = 34374100300, tf_cs = 43, tf_rflags = 582, tf_rsp = 140737488349784, tf_ss = 35} ) at ../../../amd64/amd64/trap.c:821 #17 0xffffffff805afa88 in Xfast_syscall () at ../../../amd64/amd64/exception.S:270 #18 0x0000000800db254c in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) #dmesg Copyright (c) 1992-2006 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 7.0-CURRENT #9: Sat Jan 7 12:15:00 CET 2006 root@magarac:/usr/src/sys/amd64/compile/TEST WARNING: WITNESS option enabled, expect reduced performance. Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: AMD Athlon(tm) 64 Processor 3200+ (2009.79-MHz K8-class CPU) Origin = "AuthenticAMD" Id = 0x20ff0 Stepping = 0 Features=0x78bfbff Features2=0x1 AMD Features=0xe2500800 AMD Features2=0x1 usable memory = 1062264832 (1013 MB) avail memory = 1022590976 (975 MB) ACPI APIC Table: ioapic0 irqs 0-23 on motherboard acpi0: on motherboard acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 cpu0: on acpi0 acpi_button0: on acpi0 pcib0: port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0 pci0: on pcib0 agp0: on hostb0 isab0: at device 1.0 on pci0 isa0: on isab0 pci0: at device 1.1 (no driver attached) ohci0: mem 0xf6003000-0xf6003fff irq 20 at device 2.0 on pci0 ohci0: [GIANT-LOCKED] usb0: OHCI version 1.0, legacy support usb0: on ohci0 usb0: USB revision 1.0 uhub0: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 4 ports with 4 removable, self powered ohci1: mem 0xf6004000-0xf6004fff irq 21 at device 2.1 on pci0 ohci1: [GIANT-LOCKED] usb1: OHCI version 1.0, legacy support usb1: on ohci1 usb1: USB revision 1.0 uhub1: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 4 ports with 4 removable, self powered ehci0: mem 0xf6005000-0xf60050ff irq 22 at device 2.2 on pci0 ehci0: [GIANT-LOCKED] usb2: EHCI version 1.0 usb2: companion controllers, 4 ports each: usb0 usb1 usb2: on ehci0 usb2: USB revision 2.0 uhub2: nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1 uhub2: 8 ports with 8 removable, self powered pci0: at device 6.0 (no driver attached) atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 8.0 on pci0 ata0: on atapci0 ata1: on atapci0 atapci1: port 0x9f0-0x9f7,0xbf0-0xbf3,0x970-0x977,0xb70-0xb73,0xd800-0xd80f,0xdc00-0xdc7f irq 21 at device 10.0 on pci0 ata2: on atapci1 ata3: on atapci1 pcib1: at device 11.0 on pci0 pci1: on pcib1 vgapci0: port 0x9000-0x90ff mem 0xe0000000-0xe7ffffff,0xf3000000-0xf300ffff irq 16 at device 0.0 on pci1 vgapci1: mem 0xe8000000-0xefffffff,0xf3010000-0xf301ffff at device 0.1 on pci1 pcib2: at device 14.0 on pci0 pci2: on pcib2 skc0: port 0xa000-0xa0ff mem 0xf5000000-0xf5003fff irq 19 at device 11.0 on pci2 skc0: bad VPD resource id: expected 82 got 0 skc0: Marvell Yukon Lite Gigabit Ethernet rev. (0x9) sk0: on skc0 sk0: Ethernet address: 00:14:85:22:8f:62 miibus0: on sk0 e1000phy0: on miibus0 e1000phy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto fdc0: port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0 fdc0: [FAST] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 sio0: configured irq 4 not in bitmap of probed irqs 0 sio0: port may not be enabled sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0 sio1: type 16550A ppc0: port 0x378-0x37f irq 7 on acpi0 ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode ppbus0: on ppc0 plip0: on ppbus0 lpt0: on ppbus0 lpt0: Interrupt-driven port ppi0: on ppbus0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: flags 0x1 irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model IntelliMouse, device ID 3 orm0: at iomem 0xc0000-0xccfff pnpid ORM0000 on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 ugen0: American Power Conversion Back-UPS CS 350 FW:807.q5.I USB FW:q5, rev 1.10/0.06, addr 2 Timecounter "TSC" frequency 2009790478 Hz quality 800 Timecounters tick every 1.000 msec IP Filter: v4.1.10 initialized. Default = pass all, Logging = disabled ad0: 76318MB at ata0-master UDMA100 acd0: CDRW at ata1-master UDMA33 Trying to mount root from ufs:/dev/ad0s2a WARNING: / was not properly dismounted pcm0: port 0xb800-0xb8ff,0xbc00-0xbc7f mem 0xf6001000-0xf6001fff irq 20 at device 6.0 on pci0 pcm0: