Date: Sun, 18 Apr 2004 17:57:58 +0200 From: Andreas Kohn <andreas.kohn@gmx.net> To: current@freebsd.org Subject: Page fault in rt_newaddrmsg on gif0 destruction Message-ID: <1082303878.855.6.camel@klamath.syndrom23.de>
next in thread | raw e-mail | index | archive | help
--=-myqT2E7qt+i25isZ3o2o
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Hello,
since I updated kernel + world two days ago, I get a reproducible panic
on system shutdown. It seems to happen when gif0 is destroyed.=20
Is there anything I could do to help debugging this problem?
Regards,
Andreas Kohn
---=20
This GDB was configured as "i386-undermydesk-freebsd"...
panic: page fault
panic messages:
---
Fatal trap 12: page fault while in kernel mode
fault virtual address =3D 0x0
fault code =3D supervisor read, page not present
instruction pointer =3D 0x8:0xc058a8cd
stack pointer =3D 0x10:0xd2a85a7c
frame pointer =3D 0x10:0xd2a85ac0
code segment =3D base 0x0, limit 0xfffff, type 0x1b
=3D DPL 0, pres 1, def32 1, gran 1
processor eflags =3D interrupt enabled, resume, IOPL =3D 0
current process =3D 2772 (ifconfig)
trap number =3D 12
panic: page fault
at line 815 in file /usr/src/sys/i386/i386/trap.c
---
(kgdb) bt full
#0 doadump () at /usr/src/sys/kern/kern_shutdown.c:236
No locals.
#1 0xc05203ae in boot (howto=3D16640) at
/usr/src/sys/kern/kern_shutdown.c:370
No locals.
#2 0xc0520689 in __panic () at /usr/src/sys/kern/kern_shutdown.c:548
td =3D (struct thread *) 0xc2d95e70
bootopt =3D 256
newpanic =3D 0
ap =3D 0xd2a859bc "fZm=C0=A2
buf =3D "page fault", '\0' <repeats 245 times>
#3 0xc0680fb6 in trap_fatal (frame=3D0xd2a85a3c, eva=3D0)
at /usr/src/sys/i386/i386/trap.c:815
code =3D 16
type =3D 12
ss =3D 16
esp =3D 0
softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27=
,=20
ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 1, ssd_xx1 =3D 0, ssd_def32 =3D 1,
ssd_gran =3D 1}
#4 0xc0680d0f in trap_pfault (frame=3D0xd2a85a3c, usermode=3D0, eva=3D0)
at /usr/src/sys/i386/i386/trap.c:733
va =3D 0
vm =3D (struct vmspace *) 0x0
map =3D 0x1
rv =3D 1
ftype =3D 1 '\001'
td =3D (struct thread *) 0xc2d95e70
p =3D (struct proc *) 0xc2f5c1b8
#5 0xc0680985 in trap (frame=3D
{tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D -1051668736, tf=
_esi
=3D 2, tf_ebp =3D -760718656, tf_isp =3D -760718744, tf_ebx =3D 2, tf_edx =
=3D
-1051799040, tf_ecx =3D 13, tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 0, t=
f_eip
=3D -1067931443, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D -1027659776, =
tf_ss
=3D -1027084640})
at /usr/src/sys/i386/i386/trap.c:420
td =3D (struct thread *) 0xc2d95e70
p =3D (struct proc *) 0xc2f5c1b8
sticks =3D 3243296768
i =3D 0
ucode =3D 0
type =3D 12
code =3D 0
eva =3D 0
#6 0xc058a8cd in rt_newaddrmsg (cmd=3D2, ifa=3D0xc2c7ee00, error=3D0,
rt=3D0xc2dad600)
at /usr/src/sys/net/rtsock.c:815
ifam =3D (struct ifa_msghdr *) 0x0
ncmd =3D 0
info =3D {rti_addrs =3D 0, rti_info =3D {0x0, 0x0, 0x0, 0x0, 0x0,=20
0xc2c7eea0, 0x0, 0x0}, rti_flags =3D 0, rti_ifa =3D 0x0, rti_ifp =3D 0x=
0}
sa =3D (struct sockaddr *) 0xc2c7eea0
pass =3D 2
m =3D (struct mbuf *) 0xc150cf00
ifp =3D (struct ifnet *) 0xc2bf2800
#7 0xc05895a3 in rtinit (ifa=3D0xc2c7ee00, cmd=3D2, flags=3D4)
at /usr/src/sys/net/route.c:1220
dst =3D (struct sockaddr *) 0xc2c7eed8
netmask =3D (struct sockaddr *) 0x0
m =3D (struct mbuf *) 0x0
rt =3D (struct rtentry *) 0xc2dad600
info =3D {rti_addrs =3D 0, rti_info =3D {0xc2c7eed8, 0xc2c7eea0, 0x=
0,
0x0,=20
0x0, 0x0, 0x0, 0x0}, rti_flags =3D 5, rti_ifa =3D 0xc2c7ee00, rti_ifp =
=3D
0x0}
error =3D 0
#8 0xc05bcdf7 in in6_purgeaddr (ifa=3D0x0) at
/usr/src/sys/netinet6/in6.c:1111
e =3D 0
ifp =3D (struct ifnet *) 0xc2bf2800
ia =3D (struct in6_ifaddr *) 0xc2c7ee00
#9 0xc057f6e3 in if_detach (ifp=3D0xc2bf2800) at
/usr/src/sys/net/if.c:553
ifa =3D (struct ifaddr *) 0xc2c7ee00
next =3D (struct ifaddr *) 0xc2f1e600
rnh =3D (struct radix_node_head *) 0xc2c7ee00
i =3D 4
dp =3D (struct domain *) 0xc2c7ee00
#10 0xc0583144 in gif_destroy (sc=3D0xc2bf2800) at
/usr/src/sys/net/if_gif.c:206
ifp =3D (struct ifnet *) 0xc2bf2800
#11 0xc05831f2 in gif_clone_destroy (ifp=3D0x0) at
/usr/src/sys/net/if_gif.c:220
sc =3D (struct gif_softc *) 0xc2bf2800
#12 0xc057fc38 in if_clone_destroy (name=3D0xd2a85c60 "gif0")
at /usr/src/sys/net/if.c:752
ifc =3D (struct if_clone *) 0xc07153c0
ifp =3D (struct ifnet *) 0xc2bf2800
bytoff =3D 0
bitoff =3D -1027659776
unit =3D 0
#13 0xc0580fbe in ifioctl (so=3D0xc2f383c0, cmd=3D2149607801,=20
data=3D0xd2a85c60 "gif0", td=3D0xc2d95e70) at /usr/src/sys/net/if.c:152=
9
ifp =3D (struct ifnet *) 0x20
ifr =3D (struct ifreq *) 0xd2a85c60
error =3D -1025941904
oif_flags =3D -1027863552
#14 0xc0547f29 in soo_ioctl (fp=3D0x0, cmd=3D0, data=3D0xd2a85c60,=20
active_cred=3D0xc14f8d80, td=3D0xc2d95e70)
at /usr/src/sys/kern/sys_socket.c:176
so =3D (struct socket *) 0x0
#15 0xc05430da in ioctl (td=3D0xc2d95e70, uap=3D0xd2a85d14)
at /usr/src/sys/sys/file.h:257
fp =3D (struct file *) 0xc2dd52a8
fdp =3D (struct filedesc *) 0x0
com =3D 2149607801
error =3D 0
size =3D 32
data =3D 0xd2a85c60 "gif0"
memp =3D 0x0
tmp =3D -1067890175
ubuf =3D {
stkbuf =3D "gif0", '\0' <repeats 13 times>, "\002", '\0' <repeats 14
times>, "=C0=DC203=F3=C2
=DA=F3=C0=FA@l=C0=C0\203=F3=C2Tgq=C0=B4\\=A8=D2~TU=C0=C0\203=F3=C2\0\0\0\0=
=A8=D2=DD=C2P\202N=C1=C4\\=A8=D2=FD=D5P=C0=A8R=DD=C2p^=D9=C2\0=AC=BA=C3=DC0=
\0\0\0=EC=DC\=A8=D2=B8=C1=F5=C2p^=D9=C2=E8=DC\=A8=D2Y\017T=C0=F0^=D9=C2=B8=
=C1=F5=C2", align =3D 812018023}
#16 0xc06812a7 in syscall (frame=3D
{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D 1, tf_esi =3D
-1077940564, tf_ebp =3D -1077940888, tf_isp =3D -760717964, tf_ebx =3D
134872720, tf_edx =3D 134985389, tf_ecx =3D 0, tf_eax =3D 54, tf_trapno =3D=
12,
tf_err =3D 2, tf_eip =3D 134538743, tf_cs =3D 31, tf_eflags =3D 646, tf_esp=
=3D
-1077940916, tf_ss =3D 47})
at /usr/src/sys/i386/i386/trap.c:1004
params =3D 0xbfbfed50---Can't read userspace from dump, or kernel
process---
(kgdb) frame 6
#6 0xc058a8cd in rt_newaddrmsg (cmd=3D2, ifa=3D0xc2c7ee00, error=3D0,
rt=3D0xc2dad600)
at /usr/src/sys/net/rtsock.c:815
815 info.rti_info[RTAX_IFP] =3D
--=-myqT2E7qt+i25isZ3o2o
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQBAgqWGYucd7Ow1ygwRAv+IAJ9kW3DapKLBhpHJCliCO1Lqqq0V7gCeOgdv
oZBnBnVbRIAA7lS/tzBHUpo=
=XA6y
-----END PGP SIGNATURE-----
--=-myqT2E7qt+i25isZ3o2o--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1082303878.855.6.camel>