Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 Jul 2014 01:40:45 +0800
From:      chenkun <chk.jxcn@gmail.com>
To:        "Alexander V. Chernikov" <melifaro@yandex-team.ru>
Cc:        freebsd-net <freebsd-net@freebsd.org>
Subject:   Re: tincd and mpd5 make kernel panic
Message-ID:  <CAKrpNUyF8k-_PPL1dZinZYkBGC2urq7ZA6YSMuSsvJyEdcEnKA@mail.gmail.com>
In-Reply-To: <53C521B1.5050605@yandex-team.ru>
References:  <tencent_66CDE1C06B59A6B02B09CA2B@qq.com> <53C521B1.5050605@yandex-team.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 15, 2014 at 8:42 PM, Alexander V. Chernikov
<melifaro@yandex-team.ru> wrote:
>
> On 15.07.2014 14:36, chk wrote:
>>
>> Hi,  everyone,
>> Help....
>> I have a tincd vpn running in freebsd box  FreeBSD 10.0-RELEASE-p2 #0 r2=
65318M.
>> below is ifconfig outut:
>> [chk@NUC ~]$ ifconfig
>> em0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1=
500
>>          options=3D4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCS=
UM,TSO4,WOL_MAGIC,VLAN_HWTSO>
>>          ether ec:a8:6b:f3:76:6a
>>          inet 192.168.2.202 netmask 0xffffff00 broadcast 255.255.255.255
>>          nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>>          media: Ethernet autoselect (100baseTX <full-duplex>)
>>          status: active
>> lo0: flags=3D8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
>>          options=3D600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
>>          inet6 ::1 prefixlen 128
>>          inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
>>          inet 127.0.0.1 netmask 0xff000000
>>          nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL>
>> run0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu =
2290
>>          ether c8:3a:35:c0:b8:2f
>>          nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>>          media: IEEE 802.11 Wireless Ethernet autoselect mode 11g
>>          status: associated
>> em0.3: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu=
 1500
>>          options=3D103<RXCSUM,TXCSUM,TSO4>
>>          ether ec:a8:6b:f3:76:6a
>>          inet 192.168.3.1 netmask 0xffffff00 broadcast 255.255.255.0
>>          inet6 fe80::eea8:6bff:fef3:766a%em0.3 prefixlen 64 scopeid 0x4
>>          nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>>          media: Ethernet autoselect (100baseTX <full-duplex>)
>>          status: active
>>          vlan: 3 parent interface: em0
>> wlan0: flags=3D8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu=
 1500
>>          ether c8:3a:35:c0:b8:2f
>>          inet 192.168.30.222 netmask 0xffffff00 broadcast 255.255.255.0
>>          inet6 fe80::ca3a:35ff:fec0:b82f%wlan0 prefixlen 64 scopeid 0x5
>>          nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
>>          media: IEEE 802.11 Wireless Ethernet autoselect (autoselect)
>>          status: no carrier
>>          ssid "" channel 10 (2457 MHz 11g)
>>          country US authmode WPA1+WPA2/802.11i privacy MIXED deftxkey UN=
DEF
>>          txpower 0 bmiss 7 scanvalid 60 protmode CTS wme roaming MANUAL
>> tun0: flags=3D8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500
>>          options=3D80000<LINKSTATE>
>>          inet 192.168.30.254 netmask 0xffffff00 broadcast 192.168.30.255
>>          inet6 fe80::eea8:6bff:fef3:766a%tun0 prefixlen 64 scopeid 0x6
>>          nd6 options=3D21<PERFORMNUD,AUTO_LINKLOCAL>
>>          Opened by PID 1015
>> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D
>> Convenient for connect to vpn, I add a pppoe_server to mpd5, but when cl=
ient dialing up, kernel panic.
>
> Is it reproducible?
> Can you issue "route -n monitor" and share its output before the panic?

Yes, after several times of re dail up, kernel panic

route -n monitor print as below:

[root@NUC /usr/home/chk]# route -n monitor

got message of size 24 on Wed Jul 16 01:15:28 2014
RTM_IEEE80211: IEEE 802.11 wireless event: len 24, pid: 0, seq
6881280, errno 0,
flags:<UP,MODIFIED,DONE,XRESOLVE,LLINFO,STATIC,PROTO2,PINNED,LOCAL>
locks:  inits:
got message of size 24 on Wed Jul 16 01:15:34 2014
RTM_IEEE80211: IEEE 802.11 wireless event: len 24, pid: 0, seq
6881280, errno 0,
flags:<UP,MODIFIED,DONE,XRESOLVE,LLINFO,STATIC,PROTO2,PINNED,LOCAL>
locks:  inits:
got message of size 24 on Wed Jul 16 01:15:41 2014
RTM_IEEE80211: IEEE 802.11 wireless event: len 24, pid: 0, seq
6881280, errno 0,
flags:<UP,MODIFIED,DONE,XRESOLVE,LLINFO,STATIC,PROTO2,PINNED,LOCAL>
locks:  inits:
got message of size 24 on Wed Jul 16 01:15:46 2014
RTM_IFANNOUNCE: interface arrival/departure: len 24, if# 7, what: arrival

got message of size 168 on Wed Jul 16 01:15:46 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<PTP,NOARP,SIMPLEX,MULTICAST>

got message of size 184 on Wed Jul 16 01:15:46 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 100 on Wed Jul 16 01:15:46 2014
RTM_DELADDR: address being removed from iface: len 100, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 0.0.0.0 ng0 (0) (0)

got message of size 184 on Wed Jul 16 01:15:46 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 108 on Wed Jul 16 01:15:46 2014
RTM_DELADDR: address being removed from iface: len 108, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 (0) (0)

got message of size 116 on Wed Jul 16 01:15:46 2014
RTM_NEWADDR: address being added to iface: len 116, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 192.168.40.1 192.168.41.50

got message of size 224 on Wed Jul 16 01:15:46 2014
RTM_ADD: Add Route: len 224, pid: 0, seq 0, errno 0, flags:<UP,HOST,PINNED>
locks:  inits:
sockaddrs: <DST,GATEWAY>
 192.168.41.50 link#7

got message of size 148 on Wed Jul 16 01:15:46 2014
RTM_NEWADDR: address being added to iface: len 148, metric 0, flags:<HOST>
sockaddrs: <NETMASK,IFP,IFA,BRD>
 ffff:ffff:ffff:ffff:: ng0 fe80::eea8:6bff:fef3:766a%ng0 (0)

got message of size 272 on Wed Jul 16 01:15:46 2014
RTM_ADD: Add Route: len 272, pid: 0, seq 0, errno 0, flags:<UP,HOST,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 fe80::eea8:6bff:fef3:766a%ng0 0.0.0.0.0.0 ffff:ffff:ffff:ffff::

got message of size 104 on Wed Jul 16 01:15:46 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1:fff3:766a%ng0

got message of size 104 on Wed Jul 16 01:15:46 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1%ng0

got message of size 104 on Wed Jul 16 01:15:46 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:ffd7:6760%ng0

got message of size 104 on Wed Jul 16 01:15:46 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:d767:6055%ng0

got message of size 104 on Wed Jul 16 01:15:46 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff01::1%ng0

got message of size 344 on Wed Jul 16 01:15:46 2014
RTM_ADD: Add Route: len 344, pid: 0, seq 0, errno 0, flags:<UP,DONE>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
 fe80::%ng0 link#7 (255) ffff ffff ffff ffff ffff ffff ffff ng0
fe80::eea8:6bff:fef3:766a%ng0

got message of size 168 on Wed Jul 16 01:15:46 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<UP,PTP,RUNNING,NOARP,SIMPLEX,MULTICAST>

got message of size 168 on Wed Jul 16 01:15:46 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<PTP,RUNNING,NOARP,SIMPLEX,MULTICAST>

got message of size 272 on Wed Jul 16 01:15:46 2014
RTM_DELETE: Delete Route: len 272, pid: 0, seq 0, errno 0, flags:<HOST,STAT=
IC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 fe80::eea8:6bff:fef3:766a%7 link#0 ffff:ffff:ffff:ffff::

got message of size 148 on Wed Jul 16 01:15:46 2014
RTM_DELADDR: address being removed from iface: len 148, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 ffff:ffff:ffff:ffff:: ng0 fe80::eea8:6bff:fef3:766a%7 (0)

got message of size 344 on Wed Jul 16 01:15:46 2014
RTM_DELETE: Delete Route: len 344, pid: 0, seq 0, errno 0, flags:<DONE>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
 fe80::%7 link#7 (255) ffff ffff ffff ffff ffff ffff ffff ng0
fe80::eea8:6bff:fef3:766a%7

got message of size 24 on Wed Jul 16 01:15:46 2014
RTM_IFANNOUNCE: interface arrival/departure: len 24, if# 7, what: departure

got message of size 24 on Wed Jul 16 01:15:48 2014
RTM_IEEE80211: IEEE 802.11 wireless event: len 24, pid: 0, seq
6881280, errno 0,
flags:<UP,MODIFIED,DONE,XRESOLVE,LLINFO,STATIC,PROTO2,PINNED,LOCAL>
locks:  inits:
got message of size 24 on Wed Jul 16 01:15:54 2014
RTM_IEEE80211: IEEE 802.11 wireless event: len 24, pid: 0, seq
6881280, errno 0,
flags:<UP,MODIFIED,DONE,XRESOLVE,LLINFO,STATIC,PROTO2,PINNED,LOCAL>
locks:  inits:
got message of size 24 on Wed Jul 16 01:15:55 2014
RTM_IFANNOUNCE: interface arrival/departure: len 24, if# 7, what: arrival

got message of size 168 on Wed Jul 16 01:15:55 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<PTP,NOARP,SIMPLEX,MULTICAST>

got message of size 184 on Wed Jul 16 01:15:55 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 100 on Wed Jul 16 01:15:55 2014
RTM_DELADDR: address being removed from iface: len 100, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 0.0.0.0 ng0 (0) (0)

got message of size 184 on Wed Jul 16 01:15:55 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 108 on Wed Jul 16 01:15:55 2014
RTM_DELADDR: address being removed from iface: len 108, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 (0) (0)

got message of size 116 on Wed Jul 16 01:15:55 2014
RTM_NEWADDR: address being added to iface: len 116, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 192.168.40.1 192.168.41.50

got message of size 224 on Wed Jul 16 01:15:55 2014
RTM_ADD: Add Route: len 224, pid: 0, seq 0, errno 0, flags:<UP,HOST,PINNED>
locks:  inits:
sockaddrs: <DST,GATEWAY>
 192.168.41.50 link#7

got message of size 148 on Wed Jul 16 01:15:55 2014
RTM_NEWADDR: address being added to iface: len 148, metric 0, flags:<HOST>
sockaddrs: <NETMASK,IFP,IFA,BRD>
 ffff:ffff:ffff:ffff:: ng0 fe80::eea8:6bff:fef3:766a%ng0 (0)

got message of size 272 on Wed Jul 16 01:15:55 2014
RTM_ADD: Add Route: len 272, pid: 0, seq 0, errno 0, flags:<UP,HOST,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 fe80::eea8:6bff:fef3:766a%ng0 0.0.0.0.0.0 ffff:ffff:ffff:ffff::

got message of size 104 on Wed Jul 16 01:15:55 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1:fff3:766a%ng0

got message of size 104 on Wed Jul 16 01:15:55 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1%ng0

got message of size 104 on Wed Jul 16 01:15:55 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:ffd7:6760%ng0

got message of size 104 on Wed Jul 16 01:15:55 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:d767:6055%ng0

got message of size 104 on Wed Jul 16 01:15:55 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff01::1%ng0

got message of size 344 on Wed Jul 16 01:15:55 2014
RTM_ADD: Add Route: len 344, pid: 0, seq 0, errno 0, flags:<UP,DONE>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
 fe80::%ng0 link#7 (255) ffff ffff ffff ffff ffff ffff ffff ng0
fe80::eea8:6bff:fef3:766a%ng0

got message of size 168 on Wed Jul 16 01:15:55 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<UP,PTP,RUNNING,NOARP,SIMPLEX,MULTICAST>

got message of size 168 on Wed Jul 16 01:15:55 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<PTP,RUNNING,NOARP,SIMPLEX,MULTICAST>

got message of size 272 on Wed Jul 16 01:15:55 2014
RTM_DELETE: Delete Route: len 272, pid: 0, seq 0, errno 0, flags:<HOST,STAT=
IC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 fe80::eea8:6bff:fef3:766a%7 link#0 ffff:ffff:ffff:ffff::

got message of size 148 on Wed Jul 16 01:15:55 2014
RTM_DELADDR: address being removed from iface: len 148, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 ffff:ffff:ffff:ffff:: ng0 fe80::eea8:6bff:fef3:766a%7 (0)

got message of size 344 on Wed Jul 16 01:15:55 2014
RTM_DELETE: Delete Route: len 344, pid: 0, seq 0, errno 0, flags:<DONE>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
 fe80::%7 link#7 (255) ffff ffff ffff ffff ffff ffff ffff ng0
fe80::eea8:6bff:fef3:766a%7

got message of size 24 on Wed Jul 16 01:15:55 2014
RTM_IFANNOUNCE: interface arrival/departure: len 24, if# 7, what: departure

got message of size 24 on Wed Jul 16 01:15:59 2014
RTM_IFANNOUNCE: interface arrival/departure: len 24, if# 7, what: arrival

got message of size 168 on Wed Jul 16 01:15:59 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<PTP,NOARP,SIMPLEX,MULTICAST>

got message of size 184 on Wed Jul 16 01:15:59 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 100 on Wed Jul 16 01:15:59 2014
RTM_DELADDR: address being removed from iface: len 100, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 0.0.0.0 ng0 (0) (0)

got message of size 184 on Wed Jul 16 01:15:59 2014
RTM_DELETE: Delete Route: len 184, pid: 0, seq 0, errno 0,
flags:<UP,GATEWAY,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 0.0.0.0 (0) (0)

got message of size 108 on Wed Jul 16 01:15:59 2014
RTM_DELADDR: address being removed from iface: len 108, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 (0) (0)

got message of size 116 on Wed Jul 16 01:15:59 2014
RTM_NEWADDR: address being added to iface: len 116, metric 0, flags:
sockaddrs: <NETMASK,IFP,IFA,BRD>
 255.255.255.255 ng0 192.168.40.1 192.168.41.50

got message of size 224 on Wed Jul 16 01:15:59 2014
RTM_ADD: Add Route: len 224, pid: 0, seq 0, errno 0, flags:<UP,HOST,PINNED>
locks:  inits:
sockaddrs: <DST,GATEWAY>
 192.168.41.50 link#7

got message of size 148 on Wed Jul 16 01:15:59 2014
RTM_NEWADDR: address being added to iface: len 148, metric 0, flags:<HOST>
sockaddrs: <NETMASK,IFP,IFA,BRD>
 ffff:ffff:ffff:ffff:: ng0 fe80::eea8:6bff:fef3:766a%ng0 (0)

got message of size 272 on Wed Jul 16 01:15:59 2014
RTM_ADD: Add Route: len 272, pid: 0, seq 0, errno 0, flags:<UP,HOST,STATIC>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK>
 fe80::eea8:6bff:fef3:766a%ng0 0.0.0.0.0.0 ffff:ffff:ffff:ffff::

got message of size 104 on Wed Jul 16 01:15:59 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1:fff3:766a%ng0

got message of size 104 on Wed Jul 16 01:15:59 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::1%ng0

got message of size 104 on Wed Jul 16 01:15:59 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:ffd7:6760%ng0

got message of size 104 on Wed Jul 16 01:15:59 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff02::2:d767:6055%ng0

got message of size 104 on Wed Jul 16 01:15:59 2014
RTM_NEWMADDR: new multicast group membership on iface: len 104,
sockaddrs: <IFP,IFA>
 ng0 ff01::1%ng0

got message of size 344 on Wed Jul 16 01:15:59 2014
RTM_ADD: Add Route: len 344, pid: 0, seq 0, errno 0, flags:<UP,DONE>
locks:  inits:
sockaddrs: <DST,GATEWAY,NETMASK,IFP,IFA>
 fe80::%ng0 link#7 (255) ffff ffff ffff ffff ffff ffff ffff ng0
fe80::eea8:6bff:fef3:766a%ng0

got message of size 168 on Wed Jul 16 01:15:59 2014
RTM_IFINFO: iface status change: len 168, if# 7, link: unknown,
flags:<UP,PTP,RUNNING,NOARP,SIMPLEX,MULTICAST>


>
>
>
>>
>> here is information of core dump:
>> [root@NUC /var/log]# kgdb -c ../crash/vmcore.1  /boot/kernel/kernel
>> GNU gdb 6.1.1 [FreeBSD]
>> Copyright 2004 Free Software Foundation, Inc.
>> GDB is free software, covered by the GNU General Public License, and you=
 are
>> welcome to change it and/or distribute copies of it under certain condit=
ions.
>> Type "show copying" to see the conditions.
>> There is absolutely no warranty for GDB.  Type "show warranty" for detai=
ls.
>> This GDB was configured as "amd64-marcel-freebsd"...
>>
>> Unread portion of the kernel message buffer:
>>
>>
>> Fatal trap 12: page fault while in kernel mode
>> cpuid =3D 0; apic id =3D 00
>> fault virtual address   =3D 0x0
>> fault code              =3D supervisor read data, page not present
>> instruction pointer     =3D 0x20:0xffffffff8098ae09
>> stack pointer           =3D 0x28:0xfffffe0234584660
>> frame pointer           =3D 0x28:0xfffffe02345846f0
>> code segment            =3D base 0x0, limit 0xfffff, type 0x1b
>>                          =3D DPL 0, pres 1, long 1, def32 0, gran 1
>> processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
>> current process         =3D 780 (wpa_supplicant)
>> trap number             =3D 12
>> panic: page fault
>> cpuid =3D 0
>> KDB: stack backtrace:
>> #0 0xffffffff808f5910 at kdb_backtrace+0x60
>> #1 0xffffffff808bd3f5 at panic+0x155
>> #2 0xffffffff80c9c1e2 at trap_fatal+0x3a2
>> #3 0xffffffff80c9c4b9 at trap_pfault+0x2c9
>> #4 0xffffffff80c9bc46 at trap+0x5e6
>> #5 0xffffffff80c82ee2 at calltrap+0x8
>> #6 0xffffffff809852f0 at rn_walktree+0x70
>> #7 0xffffffff8098a470 at sysctl_rtsock+0x1a0
>> #8 0xffffffff808c894f at sysctl_root+0x24f
>> #9 0xffffffff808c8f08 at userland_sysctl+0x1d8
>> #10 0xffffffff808c8cf4 at sys___sysctl+0x74
>> #11 0xffffffff80c9cad7 at amd64_syscall+0x357
>> #12 0xffffffff80c831cb at Xfast_syscall+0xfb
>> Uptime: 10m24s
>> (ada0:ahcich0:0:0:0): STANDBY_IMMEDIATE. ACB: e0 00 00 00 00 40 00 00 00=
 00 00 00
>> (ada0:ahcich0:0:0:0): CAM status: CCB request is in progress
>> (ada0:ahcich0:0:0:0): Error 5, Retries exhausted
>> (ada0:ahcich0:0:0:0): Spin-down disk failed
>> Dumping 439 out of 8067 MB:..4%..11%..22%..33%..41%..51%..62%..73%..81%.=
.92%
>> (kgdb) f 7
>> #7  0xffffffff8098ae09 in sysctl_dumpentry (rn=3D0xfffff800110eae10, vw=
=3D0xfffffe0234584748)
>>      at /usr/src/sys/net/rtsock.c:1592
>> 1592                    info.rti_info[RTAX_IFP] =3D rt->rt_ifp->if_addr-=
>ifa_addr;
>> Current language:  auto; currently minimal
>> (kgdb) l
>> 1587            info.rti_info[RTAX_DST] =3D rt_key(rt);
>> 1588            info.rti_info[RTAX_GATEWAY] =3D rt->rt_gateway;
>> 1589            info.rti_info[RTAX_NETMASK] =3D rt_mask(rt);
>> 1590            info.rti_info[RTAX_GENMASK] =3D 0;
>> 1591            if (rt->rt_ifp) {
>> 1592                    info.rti_info[RTAX_IFP] =3D rt->rt_ifp->if_addr-=
>ifa_addr;
>
> This one looks strange. There is a check on added routes that rt_ifp is n=
ot NULL.
>
>> 1593                    info.rti_info[RTAX_IFA] =3D rt->rt_ifa->ifa_addr=
;
>> 1594                    if (rt->rt_ifp->if_flags & IFF_POINTOPOINT)
>> 1595                            info.rti_info[RTAX_BRD] =3D rt->rt_ifa->=
ifa_dstaddr;
>> 1596            }
>> (kgdb) i loc
>> info =3D {rti_addrs =3D 0, rti_info =3D {0xfffff80005dace00, 0xfffff8000=
5dace10, 0x0, 0x0, 0x0, 0x0,
>>      0x0, 0x0}, rti_flags =3D 0, rti_ifa =3D 0x0, rti_ifp =3D 0x0}
>> error =3D Cannot access memory at address 0x0
>> (kgdb) p *rt
>> No symbol "rt" in current context.
>> (kgdb) p rt
>> No symbol "rt" in current context.
>> (kgdb) p info
>> $1 =3D {rti_addrs =3D 0, rti_info =3D {0xfffff80005dace00, 0xfffff80005d=
ace10, 0x0, 0x0, 0x0, 0x0, 0x0,
>>      0x0}, rti_flags =3D 0, rti_ifa =3D 0x0, rti_ifp =3D 0x0}
>
> Can you decode which prefix it is?
> e.g.
> p (struct sockaddr_in *)info.rti_info[RTAX_DST]

(kgdb) p *(struct sockaddr_in *)info.rti_info[0]
$2 =3D {sin_len =3D 16 '\020', sin_family =3D 2 '\002', sin_port =3D 0,
sin_addr =3D {s_addr =3D 841590976},
  sin_zero =3D "\000\000\000\000\000\000\000"}


> p (struct sockaddr_in *)info.rti_info[RTAX_NETMASK]

info.rti_info[RTAX_NETMASK] is NULL.

>
> and what is ifp (and others):
>
> p (struct rtentry *)0xfffff800110eae10
> p *$1
> p $1->rt_ip->if_addrs

(kgdb) p (struct rtentry *)0xfffff800110eae10
$3 =3D (struct rtentry *) 0xfffff800110eae10
(kgdb)  p *$3
Cannot access memory at address 0xfffff800110eae10
####0xfffff800110eae10 is address of rn? It's different in the last core du=
mp.
(kgdb) p (struct rtentry *)0xfffff800122f0258
$4 =3D (struct rtentry *) 0xfffff800122f0258
(kgdb)  p *$4
$5 =3D {rt_nodes =3D {{rn_mklist =3D 0x0, rn_parent =3D 0xfffff800122f0288,
rn_bit =3D -1, rn_bmask =3D 0 '\0',
      rn_flags =3D 4 '\004', rn_u =3D {rn_leaf =3D {rn_Key =3D
0xfffff80005851c00 "\020\002", rn_Mask =3D 0x0,
          rn_Dupedkey =3D 0x0}, rn_node =3D {rn_Off =3D 92609536, rn_L =3D
0x0, rn_R =3D 0x0}}}, {rn_mklist =3D 0x0,
      rn_parent =3D 0xfffff800122f08c8, rn_bit =3D 55, rn_bmask =3D 1
'\001', rn_flags =3D 4 '\004', rn_u =3D {
        rn_leaf =3D {rn_Key =3D 0x6 <Address 0x6 out of bounds>, rn_Mask =
=3D
0xfffff8001208abe8 "=C3=80\234\003\022",
          rn_Dupedkey =3D 0xfffff800122f0258}, rn_node =3D {rn_Off =3D 6,
rn_L =3D 0xfffff8001208abe8,
          rn_R =3D 0xfffff800122f0258}}}}, rt_gateway =3D
0xfffff80005851c10, rt_flags =3D 1048581,
  rt_refcnt =3D 0, rt_ifp =3D 0xfffff800131fd000, rt_ifa =3D
0xfffff80005ff7800, rt_rmx =3D {rmx_mtu =3D 1480,
    rmx_expire =3D 0, rmx_pksent =3D 0, rmx_weight =3D 1}, rt_fibnum =3D 0,
rt_mtx =3D {lock_object =3D {
      lo_name =3D 0xffffffff80eff57f "rtentry", lo_flags =3D 21168128,
lo_data =3D 0, lo_witness =3D 0x0},
    mtx_lock =3D 4}}
(kgdb) p $4->rt_ip->if_addrs
There is no member named rt_ip.
(kgdb) p $5->rt_ip->if_addrs
There is no member named rt_ip.
(kgdb) l
1587            info.rti_info[RTAX_DST] =3D rt_key(rt);
1588            info.rti_info[RTAX_GATEWAY] =3D rt->rt_gateway;
1589            info.rti_info[RTAX_NETMASK] =3D rt_mask(rt);
1590            info.rti_info[RTAX_GENMASK] =3D 0;
1591            if (rt->rt_ifp) {
1592                    info.rti_info[RTAX_IFP] =3D rt->rt_ifp->if_addr->if=
a_addr;
1593                    info.rti_info[RTAX_IFA] =3D rt->rt_ifa->ifa_addr;
1594                    if (rt->rt_ifp->if_flags & IFF_POINTOPOINT)
1595                            info.rti_info[RTAX_BRD] =3D
rt->rt_ifa->ifa_dstaddr;
1596            }
(kgdb) p $5->rt_ifp->if_addrs
There is no member named if_addrs.
(kgdb) p $5->rt_ifp->if_addr
$6 =3D (struct ifaddr *) 0x0

Is that mean trap occur because of access a NULL point?

>
>> _______________________________________________
>> freebsd-net@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-net
>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>>
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAKrpNUyF8k-_PPL1dZinZYkBGC2urq7ZA6YSMuSsvJyEdcEnKA>