Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Dec 2008 08:49:08 GMT
From:      Vyacheslav Bocharov <adeepv@gmail.com>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   kern/129904: kernel crash in "ifconfig destroy"
Message-ID:  <200812240849.mBO8n82c060779@www.freebsd.org>
Resent-Message-ID: <200812240850.mBO8o184069145@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         129904
>Category:       kern
>Synopsis:       kernel crash in "ifconfig destroy"
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed Dec 24 08:50:00 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Vyacheslav Bocharov
>Release:        7.1-Prerelease from 28 Nov
>Organization:
>Environment:
FreeBSD test.local 7.1-PRERELEASE FreeBSD 7.1-PRERELEASE #3: Fri Nov 28 13:30:22 EET 2008     root@test.local:/usr/obj/usr/src/sys/chip  i386

>Description:
Kernel dump while execute "ifconfig vlan destroy" command. Repeates at i386, amd64.
vmcore: http://acs-group.net.ua/vmcore.0
kernel config: http://acs-group.net.ua/chip

test# kgdb /boot/kernel/kernel vmcore.0
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x0
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0690f30
stack pointer           = 0x28:0xd826bac0
frame pointer           = 0x28:0xd826bb28
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
			processor eflags        = interrupt enabled, resume, IOPL = 0
			current process         = 970 (ifconfig)
			trap number             = 12
			panic: page fault
			cpuid = 0
			Uptime: 4m27s
			Physical memory: 435 MB
			Dumping 39 MB: 24 8
			
			Reading symbols from /boot/kernel/mpt.ko...Reading symbols from /boot/kernel/mpt
			.ko.symbols...done.
			done.
			Loaded symbols for /boot/kernel/mpt.ko
			Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/ac
			pi.ko.symbols...done.
			done.
			Loaded symbols for /boot/kernel/acpi.ko
			#0  doadump () at pcpu.h:196
			196     pcpu.h: No such file or directory.
			        in pcpu.h
			(kgdb) bt
			#0  doadump () at pcpu.h:196
			#1  0xc05e9601 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc05e9902 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc08744b3 in trap_fatal (frame=0xd826ba80, eva=0)
    at /usr/src/sys/i386/i386/trap.c:939
#4  0xc0874710 in trap_pfault (frame=0xd826ba80, usermode=0, eva=0)
    at /usr/src/sys/i386/i386/trap.c:852
#5  0xc08750d6 in trap (frame=0xd826ba80) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc085b28b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc0690f30 in vlan_unconfig_locked (ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:1095
#8  0xc06913a7 in vlan_unconfig (ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:1078
#9  0xc0691426 in vlan_clone_destroy (ifc=0xc0914d00, ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:762
#10 0xc068dddc in if_clone_destroyif (ifc=0xc0914d00, ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_clone.c:218
#11 0xc068e37f in if_clone_destroy (name=0xc3a2bac0 "vlan554")
    at /usr/src/sys/net/if_clone.c:196
#12 0xc068d18b in ifioctl (so=0xc3c58680, cmd=2149607801,
    data=0xc3a2bac0 "vlan554", td=0xc3ef28c0) at /usr/src/sys/net/if.c:1932
#13 0xc06294aa in soo_ioctl (fp=0xc3e4b04c, cmd=2149607801, data=0xc3a2bac0,
    active_cred=0xc3ea7400, td=0xc3ef28c0)
    at /usr/src/sys/kern/sys_socket.c:191
#14 0xc06222f5 in kern_ioctl (td=0xc3ef28c0, fd=3, com=2149607801,
    data=0xc3a2bac0 "vlan554") at file.h:268
#15 0xc0622454 in ioctl (td=0xc3ef28c0, uap=0xd826bcfc)
    at /usr/src/sys/kern/sys_generic.c:570
#16 0xc0874a49 in syscall (frame=0xd826bd38)
    at /usr/src/sys/i386/i386/trap.c:1090
#17 0xc085b2f0 in Xint0x80_syscall ()
    at /usr/src/sys/i386/i386/exception.s:255
#18 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)



>How-To-Repeat:
# grep vlan554 /etc/rc.conf
ifconfig_vlan554="vlan554 vlandev le0 192.168.88.2 netmask 255.255.255.0"

Script:

#!/bin/sh

i=0

while [ $i -le 100 ] ; do
    echo $i
    i=$(($i+1))
    ifconfig vlan555 create 
    ifconfig vlan555 vlan 555 vlandev le0
    ifconfig vlan555 192.168.182.3/24
    ifconfig vlan554 create
    j=0
    while [ $j -le 100 ] ; do
	j=$(($j+1))
    done
    ifconfig vlan555 destroy
    ifconfig vlan554 destroy

done

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200812240849.mBO8n82c060779>