From owner-freebsd-current@FreeBSD.ORG Sun Apr 18 08:58:01 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EFD7016A4CE for ; Sun, 18 Apr 2004 08:58:01 -0700 (PDT) Received: from mail.gmx.net (pop.gmx.net [213.165.64.20]) by mx1.FreeBSD.org (Postfix) with SMTP id 06F9443D41 for ; Sun, 18 Apr 2004 08:58:01 -0700 (PDT) (envelope-from andreas.kohn@gmx.net) Received: (qmail 23351 invoked by uid 65534); 18 Apr 2004 15:57:59 -0000 Received: from unknown (EHLO [212.204.44.203]) (212.204.44.203) by mail.gmx.net (mp012) with SMTP; 18 Apr 2004 17:57:59 +0200 X-Authenticated: #2431876 From: Andreas Kohn To: current@freebsd.org Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-myqT2E7qt+i25isZ3o2o" Message-Id: <1082303878.855.6.camel@klamath.syndrom23.de> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.6 Date: Sun, 18 Apr 2004 17:57:58 +0200 Subject: Page fault in rt_newaddrmsg on gif0 destruction X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Apr 2004 15:58:02 -0000 --=-myqT2E7qt+i25isZ3o2o Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hello, since I updated kernel + world two days ago, I get a reproducible panic on system shutdown. It seems to happen when gif0 is destroyed.=20 Is there anything I could do to help debugging this problem? Regards, Andreas Kohn ---=20 This GDB was configured as "i386-undermydesk-freebsd"... panic: page fault panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address =3D 0x0 fault code =3D supervisor read, page not present instruction pointer =3D 0x8:0xc058a8cd stack pointer =3D 0x10:0xd2a85a7c frame pointer =3D 0x10:0xd2a85ac0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, def32 1, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 2772 (ifconfig) trap number =3D 12 panic: page fault at line 815 in file /usr/src/sys/i386/i386/trap.c --- (kgdb) bt full #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:236 No locals. #1 0xc05203ae in boot (howto=3D16640) at /usr/src/sys/kern/kern_shutdown.c:370 No locals. #2 0xc0520689 in __panic () at /usr/src/sys/kern/kern_shutdown.c:548 td =3D (struct thread *) 0xc2d95e70 bootopt =3D 256 newpanic =3D 0 ap =3D 0xd2a859bc "fZm=C0=A2 buf =3D "page fault", '\0' #3 0xc0680fb6 in trap_fatal (frame=3D0xd2a85a3c, eva=3D0) at /usr/src/sys/i386/i386/trap.c:815 code =3D 16 type =3D 12 ss =3D 16 esp =3D 0 softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27= ,=20 ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 1, ssd_xx1 =3D 0, ssd_def32 =3D 1, ssd_gran =3D 1} #4 0xc0680d0f in trap_pfault (frame=3D0xd2a85a3c, usermode=3D0, eva=3D0) at /usr/src/sys/i386/i386/trap.c:733 va =3D 0 vm =3D (struct vmspace *) 0x0 map =3D 0x1 rv =3D 1 ftype =3D 1 '\001' td =3D (struct thread *) 0xc2d95e70 p =3D (struct proc *) 0xc2f5c1b8 #5 0xc0680985 in trap (frame=3D {tf_fs =3D 24, tf_es =3D 16, tf_ds =3D 16, tf_edi =3D -1051668736, tf= _esi =3D 2, tf_ebp =3D -760718656, tf_isp =3D -760718744, tf_ebx =3D 2, tf_edx = =3D -1051799040, tf_ecx =3D 13, tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 0, t= f_eip =3D -1067931443, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D -1027659776, = tf_ss =3D -1027084640}) at /usr/src/sys/i386/i386/trap.c:420 td =3D (struct thread *) 0xc2d95e70 p =3D (struct proc *) 0xc2f5c1b8 sticks =3D 3243296768 i =3D 0 ucode =3D 0 type =3D 12 code =3D 0 eva =3D 0 #6 0xc058a8cd in rt_newaddrmsg (cmd=3D2, ifa=3D0xc2c7ee00, error=3D0, rt=3D0xc2dad600) at /usr/src/sys/net/rtsock.c:815 ifam =3D (struct ifa_msghdr *) 0x0 ncmd =3D 0 info =3D {rti_addrs =3D 0, rti_info =3D {0x0, 0x0, 0x0, 0x0, 0x0,=20 0xc2c7eea0, 0x0, 0x0}, rti_flags =3D 0, rti_ifa =3D 0x0, rti_ifp =3D 0x= 0} sa =3D (struct sockaddr *) 0xc2c7eea0 pass =3D 2 m =3D (struct mbuf *) 0xc150cf00 ifp =3D (struct ifnet *) 0xc2bf2800 #7 0xc05895a3 in rtinit (ifa=3D0xc2c7ee00, cmd=3D2, flags=3D4) at /usr/src/sys/net/route.c:1220 dst =3D (struct sockaddr *) 0xc2c7eed8 netmask =3D (struct sockaddr *) 0x0 m =3D (struct mbuf *) 0x0 rt =3D (struct rtentry *) 0xc2dad600 info =3D {rti_addrs =3D 0, rti_info =3D {0xc2c7eed8, 0xc2c7eea0, 0x= 0, 0x0,=20 0x0, 0x0, 0x0, 0x0}, rti_flags =3D 5, rti_ifa =3D 0xc2c7ee00, rti_ifp = =3D 0x0} error =3D 0 #8 0xc05bcdf7 in in6_purgeaddr (ifa=3D0x0) at /usr/src/sys/netinet6/in6.c:1111 e =3D 0 ifp =3D (struct ifnet *) 0xc2bf2800 ia =3D (struct in6_ifaddr *) 0xc2c7ee00 #9 0xc057f6e3 in if_detach (ifp=3D0xc2bf2800) at /usr/src/sys/net/if.c:553 ifa =3D (struct ifaddr *) 0xc2c7ee00 next =3D (struct ifaddr *) 0xc2f1e600 rnh =3D (struct radix_node_head *) 0xc2c7ee00 i =3D 4 dp =3D (struct domain *) 0xc2c7ee00 #10 0xc0583144 in gif_destroy (sc=3D0xc2bf2800) at /usr/src/sys/net/if_gif.c:206 ifp =3D (struct ifnet *) 0xc2bf2800 #11 0xc05831f2 in gif_clone_destroy (ifp=3D0x0) at /usr/src/sys/net/if_gif.c:220 sc =3D (struct gif_softc *) 0xc2bf2800 #12 0xc057fc38 in if_clone_destroy (name=3D0xd2a85c60 "gif0") at /usr/src/sys/net/if.c:752 ifc =3D (struct if_clone *) 0xc07153c0 ifp =3D (struct ifnet *) 0xc2bf2800 bytoff =3D 0 bitoff =3D -1027659776 unit =3D 0 #13 0xc0580fbe in ifioctl (so=3D0xc2f383c0, cmd=3D2149607801,=20 data=3D0xd2a85c60 "gif0", td=3D0xc2d95e70) at /usr/src/sys/net/if.c:152= 9 ifp =3D (struct ifnet *) 0x20 ifr =3D (struct ifreq *) 0xd2a85c60 error =3D -1025941904 oif_flags =3D -1027863552 #14 0xc0547f29 in soo_ioctl (fp=3D0x0, cmd=3D0, data=3D0xd2a85c60,=20 active_cred=3D0xc14f8d80, td=3D0xc2d95e70) at /usr/src/sys/kern/sys_socket.c:176 so =3D (struct socket *) 0x0 #15 0xc05430da in ioctl (td=3D0xc2d95e70, uap=3D0xd2a85d14) at /usr/src/sys/sys/file.h:257 fp =3D (struct file *) 0xc2dd52a8 fdp =3D (struct filedesc *) 0x0 com =3D 2149607801 error =3D 0 size =3D 32 data =3D 0xd2a85c60 "gif0" memp =3D 0x0 tmp =3D -1067890175 ubuf =3D { stkbuf =3D "gif0", '\0' , "\002", '\0' , "=C0=DC203=F3=C2 =DA=F3=C0=FA@l=C0=C0\203=F3=C2Tgq=C0=B4\\=A8=D2~TU=C0=C0\203=F3=C2\0\0\0\0= =A8=D2=DD=C2P\202N=C1=C4\\=A8=D2=FD=D5P=C0=A8R=DD=C2p^=D9=C2\0=AC=BA=C3=DC0= \0\0\0=EC=DC\=A8=D2=B8=C1=F5=C2p^=D9=C2=E8=DC\=A8=D2Y\017T=C0=F0^=D9=C2=B8= =C1=F5=C2", align =3D 812018023} #16 0xc06812a7 in syscall (frame=3D {tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, tf_edi =3D 1, tf_esi =3D -1077940564, tf_ebp =3D -1077940888, tf_isp =3D -760717964, tf_ebx =3D 134872720, tf_edx =3D 134985389, tf_ecx =3D 0, tf_eax =3D 54, tf_trapno =3D= 12, tf_err =3D 2, tf_eip =3D 134538743, tf_cs =3D 31, tf_eflags =3D 646, tf_esp= =3D -1077940916, tf_ss =3D 47}) at /usr/src/sys/i386/i386/trap.c:1004 params =3D 0xbfbfed50---Can't read userspace from dump, or kernel process--- (kgdb) frame 6 #6 0xc058a8cd in rt_newaddrmsg (cmd=3D2, ifa=3D0xc2c7ee00, error=3D0, rt=3D0xc2dad600) at /usr/src/sys/net/rtsock.c:815 815 info.rti_info[RTAX_IFP] =3D --=-myqT2E7qt+i25isZ3o2o Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQBAgqWGYucd7Ow1ygwRAv+IAJ9kW3DapKLBhpHJCliCO1Lqqq0V7gCeOgdv oZBnBnVbRIAA7lS/tzBHUpo= =XA6y -----END PGP SIGNATURE----- --=-myqT2E7qt+i25isZ3o2o--