Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 01 Oct 2019 10:52:56 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 227720] Kernel panic in ppp server
Message-ID:  <bug-227720-7501-Xk3gbh39S0@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-227720-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-227720-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D227720

freebsd@forceline.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |freebsd@forceline.net

--- Comment #47 from freebsd@forceline.net ---
Please take a look. Maybe this is similar bug.=20

#uname -a
FreeBSD vpn01 11.3-RELEASE FreeBSD 11.3-RELEASE #0: Thu Sep  5 10:41:12 MSK
2019     root@vpn01:/usr/obj/usr/src/sys/VPN01  amd64

# diff /root/kernels/VPN01 /usr/src/sys/amd64/conf/GENERIC
< ident         VPN01
> ident         GENERIC
---
< #options      INET6                   # IPv6 communications protocols
> options       INET6                   # IPv6 communications protocols
---
< #device               lpt                     # Printer
> device                lpt                     # Printer
---
< #device               snd_cmi                 # CMedia CMI8338/CMI8738
< #device               snd_csa                 # Crystal Semiconductor
CS461x/428x
< #device               snd_emu10kx             # Creative SoundBlaster Liv=
e!
and Audigy
< #device               snd_es137x              # Ensoniq AudioPCI ES137x
< #device               snd_hda                 # Intel High Definition Aud=
io
< #device               snd_ich                 # Intel, NVidia and other I=
CH
AC'97 Audio
< #device               snd_via8233             # VIA VT8233x Audio
---
> device                snd_cmi                 # CMedia CMI8338/CMI8738
> device                snd_csa                 # Crystal Semiconductor CS4=
61x/428x
> device                snd_emu10kx             # Creative SoundBlaster Liv=
e! and Audigy
> device                snd_es137x              # Ensoniq AudioPCI ES137x
> device                snd_hda                 # Intel High Definition Aud=
io
> device                snd_ich                 # Intel, NVidia and other I=
CH AC'97 Audio
> device                snd_via8233             # VIA VT8233x Audio
---
< options         INCLUDE_CONFIG_FILE     # Include this file in kernel
< options         KDB         # Kernel debugger related code
< options         KDB_TRACE       # Print a stack trace for a panic
---
< options         IPFIREWALL
< options         IPFIREWALL_VERBOSE
< options         IPFIREWALL_VERBOSE_LIMIT=3D1000
< options         IPFIREWALL_DEFAULT_TO_ACCEPT
< options         DUMMYNET
< options         IPDIVERT
< options         IPFILTER
< options         IPFILTER_LOG
< options         IPFILTER_LOOKUP
< options         IPSTEALTH
---
< options         NETGRAPH
< options         NETGRAPH_SOCKET
< options         NETGRAPH_IPFW
< options         NETGRAPH_ETHER
< options         NETGRAPH_BPF
< options         NETGRAPH_PPPOE


# kgdb kernel.debug /var/crash/vmcore.2
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain condition=
s.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid =3D 25; apic id =3D 21
fault virtual address   =3D 0x0
fault code              =3D supervisor read data, page not present
instruction pointer     =3D 0x20:0xffffffff80c21212
stack pointer           =3D 0x28:0xfffffe085c59e3e0
frame pointer           =3D 0x28:0xfffffe085c59e520
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 18740 (ppp)
trap number             =3D 12
panic: page fault
cpuid =3D 25
KDB: stack backtrace:
#0 0xffffffff80b51a07 at kdb_backtrace+0x67
#1 0xffffffff80b0aa1e at vpanic+0x17e
#2 0xffffffff80b0a893 at panic+0x43
#3 0xffffffff80f854f9 at trap_fatal+0x369
#4 0xffffffff80f85559 at trap_pfault+0x49
#5 0xffffffff80f84bdd at trap+0x29d
#6 0xffffffff80f649cc at calltrap+0x8
#7 0xffffffff80c1bf80 at rn_walktree+0x80
#8 0xffffffff80c20b83 at sysctl_rtsock+0x1f3
#9 0xffffffff80b17e8b at sysctl_root_handler_locked+0x8b
#10 0xffffffff80b176e2 at sysctl_root+0x1f2
#11 0xffffffff80b17c06 at userland_sysctl+0x136
#12 0xffffffff80b17a8f at sys___sysctl+0x5f
#13 0xffffffff80f865f6 at amd64_syscall+0xa86
#14 0xffffffff80f652ad at fast_syscall_common+0x101
Uptime: 7m55s
Dumping 1351 out of 32604 MB:..2%..11%..21%..31%..41%..51%..61%..72%..81%..=
92%

#0  doadump () at pcpu.h:234
234             __asm("movq %%gs:%1,%0" : "=3Dr" (td)


(kgdb) list *0xffffffff80c21212
0xffffffff80c21212 is in sysctl_dumpentry (/usr/src/sys/net/rtsock.c:1566).
1561            info.rti_info[RTAX_GATEWAY] =3D rt->rt_gateway;
1562            info.rti_info[RTAX_NETMASK] =3D rtsock_fix_netmask(rt_key(r=
t),
1563                rt_mask(rt), &ss);
1564            info.rti_info[RTAX_GENMASK] =3D 0;
1565            if (rt->rt_ifp && !(rt->rt_ifp->if_flags & IFF_DYING)) {
1566                    info.rti_info[RTAX_IFP] =3D
rt->rt_ifp->if_addr->ifa_addr;
1567                    info.rti_info[RTAX_IFA] =3D rt->rt_ifa->ifa_addr;
1568                    if (rt->rt_ifp->if_flags & IFF_POINTOPOINT)
1569                            info.rti_info[RTAX_BRD] =3D
rt->rt_ifa->ifa_dstaddr;
1570            }
Current language:  auto; currently minimal

(kgdb) backtrace
#0  doadump () at pcpu.h:234
#1  0xffffffff80b0a638 in kern_reboot (howto=3D260) at
/usr/src/sys/kern/kern_shutdown.c:388
#2  0xffffffff80b0aa58 in vpanic (fmt=3D<value optimized out>, ap=3D<value
optimized out>) at /usr/src/sys/kern/kern_shutdown.c:781
#3  0xffffffff80b0a893 in panic (fmt=3D<value optimized out>) at
/usr/src/sys/kern/kern_shutdown.c:712
#4  0xffffffff80f854f9 in trap_fatal (frame=3D0xfffffe085c59e320, eva=3D0) =
at
/usr/src/sys/amd64/amd64/trap.c:904
#5  0xffffffff80f85559 in trap_pfault (frame=3D0xfffffe085c59e320, usermode=
=3D0) at
pcpu.h:234
#6  0xffffffff80f84bdd in trap (frame=3D0xfffffe085c59e320) at
/usr/src/sys/amd64/amd64/trap.c:438
#7  0xffffffff80f649cc in calltrap () at
/usr/src/sys/amd64/amd64/exception.S:231
#8  0xffffffff80c21212 in sysctl_dumpentry (rn=3D0xfffff80188cef000,
vw=3D0xfffffe085c59e690) at /usr/src/sys/net/rtsock.c:1566
#9  0xffffffff80c1bf80 in rn_walktree (h=3D<value optimized out>,
f=3D0xffffffff80c21110 <sysctl_dumpentry>, w=3D0xfffffe085c59e690) at
/usr/src/sys/net/radix.c:1094
#10 0xffffffff80c20b83 in sysctl_rtsock (oidp=3D<value optimized out>,
arg1=3D<value optimized out>, arg2=3D<value optimized out>, req=3D<value op=
timized
out>) at /usr/src/sys/net/rtsock.c:1931
#11 0xffffffff80b17e8b in sysctl_root_handler_locked (oid=3D0xffffffff81a51=
b28,
arg1=3D0xfffffe085c59e908, arg2=3D4, req=3D0xfffffe085c59e840,
tracker=3D0xfffffe085c59e7b8)
    at /usr/src/sys/kern/kern_sysctl.c:165
#12 0xffffffff80b176e2 in sysctl_root (arg1=3D0xfffffe085c59e908, arg2=3D4,
req=3D0xfffffe085c59e840) at /usr/src/sys/kern/kern_sysctl.c:1915
#13 0xffffffff80b17c06 in userland_sysctl (td=3D<value optimized out>,
name=3D0xfffffe085c59e900, namelen=3D6, old=3D0x0, oldlenp=3D<value optimiz=
ed out>,
inkernel=3D<value optimized out>, new=3D0x0,
    newlen=3D0, retval=3D0xfffffe085c59e968, flags=3D0) at
/usr/src/sys/kern/kern_sysctl.c:2011
#14 0xffffffff80b17a8f in sys___sysctl (td=3D0xfffff80233776620,
uap=3D0xfffff80233776b58) at /usr/src/sys/kern/kern_sysctl.c:1945
#15 0xffffffff80f865f6 in amd64_syscall (td=3D0xfffff80233776620, traced=3D=
0) at
src/sys/amd64/amd64/../../kern/subr_syscall.c:132
#16 0xffffffff80f652ad in fast_syscall_common () at
/usr/src/sys/amd64/amd64/exception.S:494
#17 0x0000000801de0bba in ?? ()
Previous frame inner to this frame (corrupt stack?)

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-227720-7501-Xk3gbh39S0>