From nobody Thu May 15 07:30:18 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Zyhgv0VRgz5vrmp for ; Thu, 15 May 2025 07:30:19 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Zyhgt6m07z3DBr for ; Thu, 15 May 2025 07:30:18 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1747294219; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=OCqGItYYFWoagSc50MErt4cPAccZT0eUkMh0equcsIw=; b=ywf0OOPsHj0Q6Jf2Qp6IfnSMuCC6SZux0MFvmnhritsTV8NIw4Y0KgEkmF+pt6DZVw3iJW t9pmRjD+HSv8FD/HOw/UZlm5+XpCfYHVFExSzRbqgOd1kIGElydSeCmbucAjw4hzPzhlME FEffmtTxFhAzEbs7rT+2haCThGE+wXDWS5ym7SFhGRFhCPBIqY6t2yvYOx8JfHu5vjW/sY SA8czVHOxvj1fCrViVcgPH1CFlVqFFJcTqpLulnUARS7eSHqjkCYObpYrBD2sWWU/6Eq8T 6krkOSJ/qYAPqIZ3QMMdWmloRmVu8OIzDsxfAKugT7q+U5ZjRCkItmf/i2EJSg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1747294219; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=OCqGItYYFWoagSc50MErt4cPAccZT0eUkMh0equcsIw=; b=lfAknTBfwVjEkyyuEM7K8jvfHa1sQZquwE5yGFd0iTT20YQnz076TIvzC3HOABreXv0ONm l9tlr/Mhsyl9EyeDigJhO7dtYq/l0f1hIXCKLjy9BHzZLmkFdF6Ns0rXVQMRfOyqskPd0Q 26Fp9w/q0DvV/B9kjtFn1LouNemG4s3+LXjXMLiVMdJHLpDVR61jesMFT63XKYjYwPascY ZkshhqJYwSWqlzUwSuTSIT1zTh9K07YPKuoswZgQGA1hZqFNSJukBpFbS9xxI3REepKCGP jnZbvqpHIEPXmcET2RVIicUmMh+xpq7pXPTSL7iNxZMd1//+v8MOBrC39vaOZA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1747294219; a=rsa-sha256; cv=none; b=QwBfZp241H5Srdp4+gj5dZBlnigf/8IFgk89tyVyEjcrDORXnulvZGtdL5JocydPQCQCi3 mje9bHFM40fXz7EByRuCm8a1CTjOK5JA/PoDravkX0+gVPqka+Ae04BR0Sarb6r9tqRynN tKDQRUyICBfGnXj1LXSpWfT76LeWqd2rBuQNzKmqiUR2mw8o7ve3UNWbZ4AhUpCCXgowhN lXgdGgl1nlc5Q6ydXDfbi67LLjtpMjdPC4fPwH+1dC2PwkzKxXNPsf095h6gryWaa138uY Eyy+7mDqaXx1VUgT8Z6a1M3rZavchPal/uDtZI/lWwJtlZqOOu5WnKiVw3Zodg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Zyhgt6M8Pz1774 for ; Thu, 15 May 2025 07:30:18 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 54F7UIfd057386 for ; Thu, 15 May 2025 07:30:18 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 54F7UI1i057385 for net@FreeBSD.org; Thu, 15 May 2025 07:30:18 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 241106] tun/ppp: panic: vm_fault: fault on nofault entry when bringing ppp interface down Date: Thu, 15 May 2025 07:30:18 +0000 X-Bugzilla-Reason: AssignedTo CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 12.1-RELEASE X-Bugzilla-Keywords: crash, needs-qa X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: zlei@FreeBSD.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: Overcome By Events X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status cc resolution Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D241106 Zhenlei Huang changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Open |Closed CC| |zlei@FreeBSD.org Resolution|--- |Overcome By Events --- Comment #7 from Zhenlei Huang --- (In reply to lenzi.sergio from comment #4) > system panics on rtsock.c for the reason that rt->rt_ifp->if_addr have a = null pointer.=20 > It is not clear the reason rt->rt_ifp->if_addr have a null pointer but wh= en=20 > try to access rt->rt_ifp->if_addr->ifa_addr near line 1578 of rtsock.c th= e system panics...=20 I'm recently reviewing the attaching progress of net interfaces ( if_attach= () ), and the link-layer address `ifp->if_addr` is initialized and will never = be NULL, even after the interface been detached ( then ifp->if_addr may point = to freed memory, if not within the net epoch section ). > I also insert code of RTSOCK_LOCK/RTSOCK_UNLOCK on any ioctl call, and s= ince than, > the system does not panic any more.. > A more study must be done where/why rt->rt_ifp->if_addr comes NULL, and = in that > case the colunm Netif from the command: netstat -4rn either shows "" (no= thing)=20=20 > or "---". when this happens, the system panics some minutes later... The "" or "---" name of the interface drive me to presume that the route en= try is actually referring to previously freed interface, probably tun1 in your case. Since the introduction of scalable route multipath [1] in stable/13, `sysctl_dumpentry()` was heavily rewrote, so I'm closing this. 12.4 has rea= ched its EoL. [1] https://cgit.freebsd.org/src/commit/?id=3Dfedeb08b6a58e708e1153224d37ad26bd= c1062a2 --=20 You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.=