From owner-freebsd-net@freebsd.org Tue Oct 1 10:52:59 2019 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id BC04E1333AE for ; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 46jGMH4Zqwz3FBG for ; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id 9D3441333A9; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) Delivered-To: net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9CF4D1333A6 for ; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 46jGMH3drHz3FBF for ; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 61BB61A56E for ; Tue, 1 Oct 2019 10:52:59 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id x91AqxrP013384 for ; Tue, 1 Oct 2019 10:52:59 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id x91Aqxa0013383 for net@FreeBSD.org; Tue, 1 Oct 2019 10:52:59 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 227720] Kernel panic in ppp server Date: Tue, 01 Oct 2019 10:52:56 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 11.1-RELEASE X-Bugzilla-Keywords: crash, needs-qa X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: freebsd@forceline.net X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: mfc-stable11? X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Oct 2019 10:52:59 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D227720 freebsd@forceline.net changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |freebsd@forceline.net --- Comment #47 from freebsd@forceline.net --- Please take a look. Maybe this is similar bug.=20 #uname -a FreeBSD vpn01 11.3-RELEASE FreeBSD 11.3-RELEASE #0: Thu Sep 5 10:41:12 MSK 2019 root@vpn01:/usr/obj/usr/src/sys/VPN01 amd64 # diff /root/kernels/VPN01 /usr/src/sys/amd64/conf/GENERIC < ident VPN01 > ident GENERIC --- < #options INET6 # IPv6 communications protocols > options INET6 # IPv6 communications protocols --- < #device lpt # Printer > device lpt # Printer --- < #device snd_cmi # CMedia CMI8338/CMI8738 < #device snd_csa # Crystal Semiconductor CS461x/428x < #device snd_emu10kx # Creative SoundBlaster Liv= e! and Audigy < #device snd_es137x # Ensoniq AudioPCI ES137x < #device snd_hda # Intel High Definition Aud= io < #device snd_ich # Intel, NVidia and other I= CH AC'97 Audio < #device snd_via8233 # VIA VT8233x Audio --- > device snd_cmi # CMedia CMI8338/CMI8738 > device snd_csa # Crystal Semiconductor CS4= 61x/428x > device snd_emu10kx # Creative SoundBlaster Liv= e! and Audigy > device snd_es137x # Ensoniq AudioPCI ES137x > device snd_hda # Intel High Definition Aud= io > device snd_ich # Intel, NVidia and other I= CH AC'97 Audio > device snd_via8233 # VIA VT8233x Audio --- < options INCLUDE_CONFIG_FILE # Include this file in kernel < options KDB # Kernel debugger related code < options KDB_TRACE # Print a stack trace for a panic --- < options IPFIREWALL < options IPFIREWALL_VERBOSE < options IPFIREWALL_VERBOSE_LIMIT=3D1000 < options IPFIREWALL_DEFAULT_TO_ACCEPT < options DUMMYNET < options IPDIVERT < options IPFILTER < options IPFILTER_LOG < options IPFILTER_LOOKUP < options IPSTEALTH --- < options NETGRAPH < options NETGRAPH_SOCKET < options NETGRAPH_IPFW < options NETGRAPH_ETHER < options NETGRAPH_BPF < options NETGRAPH_PPPOE # kgdb kernel.debug /var/crash/vmcore.2 GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain condition= s. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Unread portion of the kernel message buffer: Fatal trap 12: page fault while in kernel mode cpuid =3D 25; apic id =3D 21 fault virtual address =3D 0x0 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff80c21212 stack pointer =3D 0x28:0xfffffe085c59e3e0 frame pointer =3D 0x28:0xfffffe085c59e520 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 18740 (ppp) trap number =3D 12 panic: page fault cpuid =3D 25 KDB: stack backtrace: #0 0xffffffff80b51a07 at kdb_backtrace+0x67 #1 0xffffffff80b0aa1e at vpanic+0x17e #2 0xffffffff80b0a893 at panic+0x43 #3 0xffffffff80f854f9 at trap_fatal+0x369 #4 0xffffffff80f85559 at trap_pfault+0x49 #5 0xffffffff80f84bdd at trap+0x29d #6 0xffffffff80f649cc at calltrap+0x8 #7 0xffffffff80c1bf80 at rn_walktree+0x80 #8 0xffffffff80c20b83 at sysctl_rtsock+0x1f3 #9 0xffffffff80b17e8b at sysctl_root_handler_locked+0x8b #10 0xffffffff80b176e2 at sysctl_root+0x1f2 #11 0xffffffff80b17c06 at userland_sysctl+0x136 #12 0xffffffff80b17a8f at sys___sysctl+0x5f #13 0xffffffff80f865f6 at amd64_syscall+0xa86 #14 0xffffffff80f652ad at fast_syscall_common+0x101 Uptime: 7m55s Dumping 1351 out of 32604 MB:..2%..11%..21%..31%..41%..51%..61%..72%..81%..= 92% #0 doadump () at pcpu.h:234 234 __asm("movq %%gs:%1,%0" : "=3Dr" (td) (kgdb) list *0xffffffff80c21212 0xffffffff80c21212 is in sysctl_dumpentry (/usr/src/sys/net/rtsock.c:1566). 1561 info.rti_info[RTAX_GATEWAY] =3D rt->rt_gateway; 1562 info.rti_info[RTAX_NETMASK] =3D rtsock_fix_netmask(rt_key(r= t), 1563 rt_mask(rt), &ss); 1564 info.rti_info[RTAX_GENMASK] =3D 0; 1565 if (rt->rt_ifp && !(rt->rt_ifp->if_flags & IFF_DYING)) { 1566 info.rti_info[RTAX_IFP] =3D rt->rt_ifp->if_addr->ifa_addr; 1567 info.rti_info[RTAX_IFA] =3D rt->rt_ifa->ifa_addr; 1568 if (rt->rt_ifp->if_flags & IFF_POINTOPOINT) 1569 info.rti_info[RTAX_BRD] =3D rt->rt_ifa->ifa_dstaddr; 1570 } Current language: auto; currently minimal (kgdb) backtrace #0 doadump () at pcpu.h:234 #1 0xffffffff80b0a638 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:388 #2 0xffffffff80b0aa58 in vpanic (fmt=3D, ap=3D) at /usr/src/sys/kern/kern_shutdown.c:781 #3 0xffffffff80b0a893 in panic (fmt=3D) at /usr/src/sys/kern/kern_shutdown.c:712 #4 0xffffffff80f854f9 in trap_fatal (frame=3D0xfffffe085c59e320, eva=3D0) = at /usr/src/sys/amd64/amd64/trap.c:904 #5 0xffffffff80f85559 in trap_pfault (frame=3D0xfffffe085c59e320, usermode= =3D0) at pcpu.h:234 #6 0xffffffff80f84bdd in trap (frame=3D0xfffffe085c59e320) at /usr/src/sys/amd64/amd64/trap.c:438 #7 0xffffffff80f649cc in calltrap () at /usr/src/sys/amd64/amd64/exception.S:231 #8 0xffffffff80c21212 in sysctl_dumpentry (rn=3D0xfffff80188cef000, vw=3D0xfffffe085c59e690) at /usr/src/sys/net/rtsock.c:1566 #9 0xffffffff80c1bf80 in rn_walktree (h=3D, f=3D0xffffffff80c21110 , w=3D0xfffffe085c59e690) at /usr/src/sys/net/radix.c:1094 #10 0xffffffff80c20b83 in sysctl_rtsock (oidp=3D, arg1=3D, arg2=3D, req=3D) at /usr/src/sys/net/rtsock.c:1931 #11 0xffffffff80b17e8b in sysctl_root_handler_locked (oid=3D0xffffffff81a51= b28, arg1=3D0xfffffe085c59e908, arg2=3D4, req=3D0xfffffe085c59e840, tracker=3D0xfffffe085c59e7b8) at /usr/src/sys/kern/kern_sysctl.c:165 #12 0xffffffff80b176e2 in sysctl_root (arg1=3D0xfffffe085c59e908, arg2=3D4, req=3D0xfffffe085c59e840) at /usr/src/sys/kern/kern_sysctl.c:1915 #13 0xffffffff80b17c06 in userland_sysctl (td=3D, name=3D0xfffffe085c59e900, namelen=3D6, old=3D0x0, oldlenp=3D, inkernel=3D, new=3D0x0, newlen=3D0, retval=3D0xfffffe085c59e968, flags=3D0) at /usr/src/sys/kern/kern_sysctl.c:2011 #14 0xffffffff80b17a8f in sys___sysctl (td=3D0xfffff80233776620, uap=3D0xfffff80233776b58) at /usr/src/sys/kern/kern_sysctl.c:1945 #15 0xffffffff80f865f6 in amd64_syscall (td=3D0xfffff80233776620, traced=3D= 0) at src/sys/amd64/amd64/../../kern/subr_syscall.c:132 #16 0xffffffff80f652ad in fast_syscall_common () at /usr/src/sys/amd64/amd64/exception.S:494 #17 0x0000000801de0bba in ?? () Previous frame inner to this frame (corrupt stack?) --=20 You are receiving this mail because: You are the assignee for the bug.=