7.0-CURRENT ppp related panic

From: Goran Gajic <ggajic_at_afrodita.rcub.bg.ac.yu>
Date: Sat, 7 Jan 2006 13:42:29 +0100 (CET)
Hi,

I have managed to trigger two panics by doing ifconfig ppp0 destroy while
ppp was running.

Reagrads,
gg.

# kgdb /usr/src/sys/amd64/compile/TEST/kernel.debug vmcore.0
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Unde
fined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd".

Unread portion of the kernel message buffer:


Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer     = 0x8:0xffffffff804757d0
stack pointer           = 0x10:0xffffffffa569c940
frame pointer           = 0x10:0xffffffffa569ca60
code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 31 (swi0: sio)
panic: from debugger
cpuid = 0
Uptime: 36m28s
Dumping 1023 MB (2 chunks)
   chunk 0: 1MB (156 pages) ... ok
   chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 83
1 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 51
1 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 19
1 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:172
172     pcpu.h: No such file or directory.
         in pcpu.h
#0  doadump () at pcpu.h:172
#1  0xffffffff803faa0c in boot (howto=260)
     at ../../../kern/kern_shutdown.c:399
#2  0xffffffff803fa4ab in panic (fmt=0xffffffff8062d726 "from debugger")
     at ../../../kern/kern_shutdown.c:555
#3  0xffffffff801c7402 in db_panic (addr=0, have_addr=0, count=0, modif=0x0)
     at ../../../ddb/db_command.c:435
#4  0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404
#5  0xffffffff801c9853 in db_trap (type=-1519794512, code=0)
     at ../../../ddb/db_main.c:221
#6  0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa569c890)
     at ../../../kern/subr_kdb.c:485
#7  0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa569c890,
     eva=18446742975232440144) at ../../../amd64/amd64/trap.c:679
#8  0xffffffff805c33a1 in trap (frame=
       {tf_rdi = -2401050962867404546, tf_rsi = 0, tf_rdx = -1519793496, tf_rcx =
  -2401050962867404546, tf_r8 = 80, tf_r9 = -1519793536, tf_rax = -24010509628674
04546, tf_rbx = -2140624749, tf_rbp = -1519793568, tf_r10 = 0, tf_r11 = 16, tf_r
12 = -2143174672, tf_r13 = 0, tf_r14 = -2140624751, tf_r15 = 0, tf_trapno = 9, t
f_addr = 0, tf_flags = 2, tf_err = 0, tf_rip = -2142808112, tf_cs = 8, tf_rflags
  = 66118, tf_rsp = -1519793832, tf_ss = 16})
     at ../../../amd64/amd64/trap.c:492
#9  0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168
#10 0xffffffff804757d0 in strlcpy ()
     at ../../../kern/kern_shutdown.c:555
#3  0xffffffff801c7402 in db_panic (addr=0, have_addr=0, count=0, modif=0x0)
     at ../../../ddb/db_command.c:435
#4  0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404
#5  0xffffffff801c9853 in db_trap (type=-1519794512, code=0)
     at ../../../ddb/db_main.c:221
#6  0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa569c890)
     at ../../../kern/subr_kdb.c:485
#7  0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa569c890,
     eva=18446742975232440144) at ../../../amd64/amd64/trap.c:679
#8  0xffffffff805c33a1 in trap (frame=
       {tf_rdi = -2401050962867404546, tf_rsi = 0, tf_rdx = -1519793496, tf_rcx =
  -2401050962867404546, tf_r8 = 80, tf_r9 = -1519793536, tf_rax = -24010509628674
04546, tf_rbx = -2140624749, tf_rbp = -1519793568, tf_r10 = 0, tf_r11 = 16, tf_r
12 = -2143174672, tf_r13 = 0, tf_r14 = -2140624751, tf_r15 = 0, tf_trapno = 9, t
f_addr = 0, tf_flags = 2, tf_err = 0, tf_rip = -2142808112, tf_cs = 8, tf_rflags
  = 66118, tf_rsp = -1519793832, tf_ss = 16})
     at ../../../amd64/amd64/trap.c:492
#9  0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168
#10 0xffffffff804757d0 in strlcpy ()
#11 0xffffffffa569ca80 in ?? ()
#12 0x0000000000000000 in ?? ()
Previous frame identical to this frame (corrupt stack?)


[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Unde
fined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd".

Unread portion of the kernel message buffer:
<118>.
<118>Terminated
<118>.
<118>Jan  7 13:20:13 magarac syslogd: exiting on signal 15


Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer     = 0x8:0xffffffff8043fc90
stack pointer           = 0x10:0xffffffffa7e71890
frame pointer           = 0x10:0xffffffffa7e718b0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 579 (pppd)


Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer     = 0x8:0xffffffff8043fc90
stack pointer           = 0x10:0xffffffffa7e71890
frame pointer           = 0x10:0xffffffffa7e718b0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 579 (pppd)
Dumping 1023 MB (2 chunks)
   chunk 0: 1MB (156 pages) ... ok
   chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 83
1 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 51
1 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 19
1 175 159 143 127 111 95 79 63 47 31 15

#0  doadump () at pcpu.h:172
172     pcpu.h: No such file or directory.
         in pcpu.h
(kgdb)
(kgdb) backtrace
#0  doadump () at pcpu.h:172
#1  0xffffffff801c74f1 in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0x0)
     at ../../../ddb/db_command.c:489
#2  0xffffffff801c7945 in db_command_loop () at ../../../ddb/db_command.c:404
#3  0xffffffff801c9853 in db_trap (type=-1478027776, code=0)
     at ../../../ddb/db_main.c:221
#4  0xffffffff8041a549 in kdb_trap (type=9, code=0, tf=0xffffffffa7e717e0)
     at ../../../kern/subr_kdb.c:485
#5  0xffffffff805c2e35 in trap_fatal (frame=0xffffffffa7e717e0,
     eva=18446742974867610672) at ../../../amd64/amd64/trap.c:679
#6  0xffffffff805c33a1 in trap (frame=
       {tf_rdi = -2401050962867404578, tf_rsi = -1098841940944, tf_rdx = 0, tf_rc
x = 622, tf_r8 = -2140674520, tf_r9 = -1098841940944, tf_rax = -2401050962867404
578, tf_rbx = -1098479361024, tf_rbp = -1478027088, tf_r10 = 0, tf_r11 = 4, tf_r
12 = -1098479361024, tf_r13 = -2138808448, tf_r14 = -1098841956352, tf_r15 = -10
98490738688, tf_trapno = 9, tf_addr = 0, tf_flags = -2143359391, tf_err = 0, tf_
rip = -2143028080, tf_cs = 8, tf_rflags = 66182, tf_rsp = -1478027104, tf_ss = 1
6}) at ../../../amd64/amd64/trap.c:492
#7  0xffffffff805af8eb in calltrap () at ../../../amd64/amd64/exception.S:168
#8  0xffffffff8043fc90 in m_freem (mb=0xdeadc0dedeadc0de) at mbuf.h:447
#9  0xffffffff804873b6 in pppasyncrelinq (sc=0xffffff003d872400)
     at ../../../net/ppp_tty.c:270
#10 0xffffffff80487457 in pppclose (tp=0xffffff003cd98850, flag=669686832)
     at ../../../net/ppp_tty.c:252
#11 0xffffffff80438ad5 in ttioctl (tp=0xffffff003cd98800, cmd=2147775515,
     data=0xffffff003cdc7780, flag=3) at linedisc.h:93
#12 0xffffffff8043ac53 in ttyioctl (dev=0xdeadc0dedeadc0de, cmd=2147775515,
     data=0xffffff003cdc7780 "", flag=3, td=0xfffffffd)
     at ../../../kern/tty.c:3224
#13 0xffffffff803cec85 in giant_ioctl (dev=0xffffff003cda5600,
     cmd=2147775515, data=0xffffff003cdc7780 "", fflag=3,
     td=0xffffff0027ea9c30) at ../../../kern/kern_conf.c:288
#14 0xffffffff8039d6ff in devfs_ioctl_f (fp=0xffffff0030bfc870,
     com=2147775515, data=0xffffffff8083f340, cred=0x26e,
     td=0xffffff0027ea9c30) at ../../../fs/devfs/devfs_vnops.c:407
#15 0xffffffff80429837 in ioctl (td=0xffffff0027ea9c30,
     uap=0xffffffffa7e71c00) at file.h:259
#16 0xffffffff805c3cf7 in syscall (frame=
       {tf_rdi = 5, tf_rsi = 2147775515, tf_rdx = 5347264, tf_rcx = 34374038268,
tf_r8 = -2140497280, tf_r9 = 140737488349784, tf_rax = 54, tf_rbx = 5, tf_rbp =
0, tf_r10 = 1, tf_r11 = 582, tf_r12 = 1500, tf_r13 = 0, tf_r14 = 34375374336, tf
_r15 = 0, tf_trapno = 12, tf_addr = 5347268, tf_flags = 12, tf_err = 2, tf_rip =
  34374100300, tf_cs = 43, tf_rflags = 582, tf_rsp = 140737488349784, tf_ss = 35}
) at ../../../amd64/amd64/trap.c:821
#17 0xffffffff805afa88 in Xfast_syscall ()
     at ../../../amd64/amd64/exception.S:270
#18 0x0000000800db254c in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb)


#dmesg

Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
 	The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #9: Sat Jan  7 12:15:00 CET 2006
     root_at_magarac:/usr/src/sys/amd64/compile/TEST
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) 64 Processor 3200+ (2009.79-MHz K8-class CPU)
   Origin = "AuthenticAMD"  Id = 0x20ff0  Stepping = 0
   Features=0x78bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2>
   Features2=0x1<SSE3>
   AMD Features=0xe2500800<SYSCALL,NX,MMX+,FFXSR,LM,3DNow+,3DNow>
   AMD Features2=0x1<LAHF>
usable memory  = 1062264832 (1013 MB)
avail memory = 1022590976 (975 MB)
ACPI APIC Table: <Nvidia AWRDACPI>
ioapic0 <Version 1.1> irqs 0-23 on motherboard
acpi0: <Nvidia AWRDACPI> on motherboard
acpi0: Power Button (fixed)
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff,0xcf0-0xcf3 on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <NVIDIA nForce3-250 AGP Controller> on hostb0
isab0: <PCI-ISA bridge> at device 1.0 on pci0
isa0: <ISA bus> on isab0
pci0: <serial bus, SMBus> at device 1.1 (no driver attached)
ohci0: <OHCI (generic) USB controller> mem 0xf6003000-0xf6003fff irq 20 at device 2.0 on pci0
ohci0: [GIANT-LOCKED]
usb0: OHCI version 1.0, legacy support
usb0: <OHCI (generic) USB controller> on ohci0
usb0: USB revision 1.0
uhub0: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 4 ports with 4 removable, self powered
ohci1: <OHCI (generic) USB controller> mem 0xf6004000-0xf6004fff irq 21 at device 2.1 on pci0
ohci1: [GIANT-LOCKED]
usb1: OHCI version 1.0, legacy support
usb1: <OHCI (generic) USB controller> on ohci1
usb1: USB revision 1.0
uhub1: nVidia OHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 4 ports with 4 removable, self powered
ehci0: <NVIDIA nForce3 250 USB 2.0 controller> mem 0xf6005000-0xf60050ff irq 22 at device 2.2 on pci0
ehci0: [GIANT-LOCKED]
usb2: EHCI version 1.0
usb2: companion controllers, 4 ports each: usb0 usb1
usb2: <NVIDIA nForce3 250 USB 2.0 controller> on ehci0
usb2: USB revision 2.0
uhub2: nVidia EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub2: 8 ports with 8 removable, self powered
pci0: <multimedia, audio> at device 6.0 (no driver attached)
atapci0: <nVidia nForce3 Pro UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 8.0 on pci0
ata0: <ATA channel 0> on atapci0
ata1: <ATA channel 1> on atapci0
atapci1: <nVidia nForce3 Pro SATA150 controller> port 0x9f0-0x9f7,0xbf0-0xbf3,0x970-0x977,0xb70-0xb73,0xd800-0xd80f,0xdc00-0xdc7f irq 21 at device 10.0 on pci0
ata2: <ATA channel 0> on atapci1
ata3: <ATA channel 1> on atapci1
pcib1: <ACPI PCI-PCI bridge> at device 11.0 on pci0
pci1: <ACPI PCI bus> on pcib1
vgapci0: <VGA-compatible display> port 0x9000-0x90ff mem 0xe0000000-0xe7ffffff,0xf3000000-0xf300ffff irq 16 at device 0.0 on pci1
vgapci1: <VGA-compatible display> mem 0xe8000000-0xefffffff,0xf3010000-0xf301ffff at device 0.1 on pci1
pcib2: <ACPI PCI-PCI bridge> at device 14.0 on pci0
pci2: <ACPI PCI bus> on pcib2
skc0: <Marvell Gigabit Ethernet> port 0xa000-0xa0ff mem 0xf5000000-0xf5003fff irq 19 at device 11.0 on pci2
skc0: bad VPD resource id: expected 82 got 0
skc0: Marvell Yukon Lite Gigabit Ethernet rev. (0x9)
sk0: <Marvell Semiconductor, Inc. Yukon> on skc0
sk0: Ethernet address: 00:14:85:22:8f:62
miibus0: <MII bus> on sk0
e1000phy0: <Marvell 88E1000 Gigabit PHY> on miibus0
e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto
fdc0: <floppy drive controller> port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on acpi0
fdc0: [FAST]
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sio0: configured irq 4 not in bitmap of probed irqs 0
sio0: port may not be enabled
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
ppc0: <Standard parallel printer port> port 0x378-0x37f irq 7 on acpi0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
ppbus0: <Parallel port bus> on ppc0
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
psm0: <PS/2 Mouse> irq 12 on atkbdc0
psm0: [GIANT-LOCKED]
psm0: model IntelliMouse, device ID 3
orm0: <ISA Option ROM> at iomem 0xc0000-0xccfff pnpid ORM0000 on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ugen0: American Power Conversion Back-UPS CS 350 FW:807.q5.I USB FW:q5, rev 1.10/0.06, addr 2
Timecounter "TSC" frequency 2009790478 Hz quality 800
Timecounters tick every 1.000 msec
IP Filter: v4.1.10 initialized.  Default = pass all, Logging = disabled
ad0: 76318MB <WDC WD800BB-19JHA0 05.01C05> at ata0-master UDMA100
acd0: CDRW <ASUS CRW-5224A/1.36> at ata1-master UDMA33
Trying to mount root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
pcm0: <nVidia nForce3 250> port 0xb800-0xb8ff,0xbc00-0xbc7f mem 0xf6001000-0xf6001fff irq 20 at device 6.0 on pci0
pcm0: <Avance Logic ALC850 AC97 Codec>
Received on Sat Jan 07 2006 - 11:42:48 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:50 UTC