Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Feb 2021 17:27:04 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 253800] [panic] FreeBSD-13.0 (releng/13.0) panic upon duplicate IPv4 detection / page fault while in kernel mode (in function rtsock_routemsg_info)
Message-ID:  <bug-253800-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D253800

            Bug ID: 253800
           Summary: [panic] FreeBSD-13.0 (releng/13.0) panic upon
                    duplicate IPv4 detection / page fault while in kernel
                    mode (in function rtsock_routemsg_info)
           Product: Base System
           Version: 13.0-STABLE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: freebsdml@hecian.net

Created attachment 222763
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D222763&action=
=3Dedit
core.txt output

Hello,

Kernel version :
Version String: FreeBSD 13.0-BETA3 #7 n244527-9f00cb5fa8a4: Fri Feb 19 23:4=
2:51
CET 2021    root@sparta:/usr/obj/usr/src/amd64.amd64/sys/GENERIC

Panic String: page fault

The system is quite simple (and used for actual FreeBSD 13, was installed f=
rom
an ALPHA2 image, then updated manually to git releng/13.0 branch, going thr=
ough
ALPHA3/BETA1/2/3).
Additionnal modules/config removed the system still panics (removed nvidia
module, linux module, and associated x11/kde5 startup items as well as cust=
om
sysctl.conf entries).

I was testing a pfSense release on a VM sharing the same lan segment, but
forgot to disconnect the VM's network NICs.
The VM advertised the same IPv4 addr as the FreeBSD 13 testing machine, whi=
ch
panicked shortly after :

Feb 23 17:28:25 sparta kernel: arp: 00:0c:29:f6:2d:60 is using my IP address
192.168.1.1 on em0!
Feb 23 17:29:34 sparta syslogd: kernel boot file is /boot/kernel/kernel
Feb 23 17:29:34 sparta kernel:
Feb 23 17:29:34 sparta syslogd: last message repeated 1 times
Feb 23 17:29:34 sparta kernel: Fatal trap 12: page fault while in kernel mo=
de
Feb 23 17:29:34 sparta kernel: cpuid =3D 7; apic id =3D 07
Feb 23 17:29:34 sparta kernel: fault virtual address    =3D 0x300000056
Feb 23 17:29:34 sparta kernel: fault code               =3D supervisor read=
 data,
page not present
Feb 23 17:29:34 sparta kernel: instruction pointer      =3D
0x20:0xffffffff80d4c716
Feb 23 17:29:34 sparta kernel: stack pointer            =3D
0x28:0xfffffe006b9d9f20
Feb 23 17:29:34 sparta kernel: frame pointer            =3D
0x28:0xfffffe006b9d9f50
Feb 23 17:29:34 sparta kernel: code segment             =3D base 0x0, limit
0xfffff, type 0x1b
Feb 23 17:29:34 sparta kernel:                  =3D DPL 0, pres 1, long 1, =
def32
0, gran 1
Feb 23 17:29:34 sparta kernel: processor eflags =3D interrupt enabled, resu=
me,
IOPL =3D 0
Feb 23 17:29:34 sparta kernel: current process          =3D 0 (if_io_tqg_7)
Feb 23 17:29:34 sparta kernel: trap number              =3D 12
Feb 23 17:29:34 sparta kernel: panic: page fault
Feb 23 17:29:34 sparta kernel: cpuid =3D 7
Feb 23 17:29:34 sparta kernel: time =3D 1614097724
Feb 23 17:29:34 sparta kernel: KDB: stack backtrace:
Feb 23 17:29:34 sparta kernel: #0 0xffffffff80c568c5 at kdb_backtrace+0x65
Feb 23 17:29:34 sparta kernel: #1 0xffffffff80c09491 at vpanic+0x181
Feb 23 17:29:34 sparta kernel: #2 0xffffffff80c09303 at panic+0x43
Feb 23 17:29:34 sparta kernel: #3 0xffffffff810891a7 at trap_fatal+0x387
Feb 23 17:29:34 sparta kernel: #4 0xffffffff810891ff at trap_pfault+0x4f
Feb 23 17:29:34 sparta kernel: #5 0xffffffff8108885d at trap+0x27d
Feb 23 17:29:34 sparta kernel: #6 0xffffffff8105ffc8 at calltrap+0x8
Feb 23 17:29:34 sparta kernel: #7 0xffffffff80d4c676 at rtsock_routemsg+0x1=
f6
Feb 23 17:29:34 sparta kernel: #8 0xffffffff80e12967 at
defrouter_select_fib+0x507
Feb 23 17:29:34 sparta kernel: #9 0xffffffff80e104de at nd6_ra_input+0x76e
Feb 23 17:29:34 sparta kernel: #10 0xffffffff80de5389 at icmp6_input+0x699
Feb 23 17:29:34 sparta kernel: #11 0xffffffff80dfdc0a at ip6_input+0xb3a
Feb 23 17:29:34 sparta kernel: #12 0xffffffff80d3e56a at
netisr_dispatch_src+0xca
Feb 23 17:29:34 sparta kernel: #13 0xffffffff80d22d28 at ether_demux+0x148
Feb 23 17:29:34 sparta kernel: #14 0xffffffff80d240ac at ether_nh_input+0x3=
4c
Feb 23 17:29:34 sparta kernel: #15 0xffffffff80d3e56a at
netisr_dispatch_src+0xca
Feb 23 17:29:34 sparta kernel: #16 0xffffffff80d23179 at ether_input+0x69
Feb 23 17:29:34 sparta kernel: #17 0xffffffff80d3ab72 at iflib_rxeof+0xb12
Feb 23 17:29:34 sparta kernel: Uptime: 1m57s
Feb 23 17:29:34 sparta kernel: Dumping 2146 out of 65359
MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%---<<BOOT>>---

panic is reproductible at will (tried it several times with the same outcom=
e).

Test machine is dual-stack IPv4/v6, with static addrs :
root@sparta:/var/crash #  cat /etc/rc.conf
hostname=3D"sparta"
ifconfig_em0=3D"inet 192.168.1.1 netmask 255.255.255.0"
defaultrouter=3D"192.168.1.254"
ifconfig_em0_ipv6=3D"inet6 accept_rtadv xxxx:xxx:xxxx:1::2:1/64"
ipv6_defaultrouter=3D"xxxx:xxx:xxxx:1::ffff"
rtsold_enable=3D"YES"
[...]

I'll attach the core.txt a.s.a.p., and will keep the vmcore files for some =
time
in case you'll need them.

Please let me know if there is any more details needed, or actions I can
perform to provide additional details.

Kind regards.

-- Fred

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-253800-227>