Bug 129904 - [vlan] [panic] kernel crash in "ifconfig destroy"
Summary: [vlan] [panic] kernel crash in "ifconfig destroy"
Status: Closed FIXED
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: Unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: VANHULLEBUS Yvan
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-12-24 08:50 UTC by Vyacheslav Bocharov
Modified: 2009-03-16 12:37 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Vyacheslav Bocharov 2008-12-24 08:50:00 UTC
Kernel dump while execute "ifconfig vlan destroy" command. Repeates at i386, amd64.
vmcore: http://acs-group.net.ua/vmcore.0
kernel config: http://acs-group.net.ua/chip

test# kgdb /boot/kernel/kernel vmcore.0
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x0
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0690f30
stack pointer           = 0x28:0xd826bac0
frame pointer           = 0x28:0xd826bb28
code segment            = base rx0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
			processor eflags        = interrupt enabled, resume, IOPL = 0
			current process         = 970 (ifconfig)
			trap number             = 12
			panic: page fault
			cpuid = 0
			Uptime: 4m27s
			Physical memory: 435 MB
			Dumping 39 MB: 24 8
			
			Reading symbols from /boot/kernel/mpt.ko...Reading symbols from /boot/kernel/mpt
			.ko.symbols...done.
			done.
			Loaded symbols for /boot/kernel/mpt.ko
			Reading symbols from /boot/kernel/acpi.ko...Reading symbols from /boot/kernel/ac
			pi.ko.symbols...done.
			done.
			Loaded symbols for /boot/kernel/acpi.ko
			#0  doadump () at pcpu.h:196
			196     pcpu.h: No such file or directory.
			        in pcpu.h
			(kgdb) bt
			#0  doadump () at pcpu.h:196
			#1  0xc05e9601 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc05e9902 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc08744b3 in trap_fatal (frame=0xd826ba80, eva=0)
    at /usr/src/sys/i386/i386/trap.c:939
#4  0xc0874710 in trap_pfault (frame=0xd826ba80, usermode=0, eva=0)
    at /usr/src/sys/i386/i386/trap.c:852
#5  0xc08750d6 in trap (frame=0xd826ba80) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc085b28b in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc0690f30 in vlan_unconfig_locked (ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:1095
#8  0xc06913a7 in vlan_unconfig (ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:1078
#9  0xc0691426 in vlan_clone_destroy (ifc=0xc0914d00, ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_vlan.c:762
#10 0xc068dddc in if_clone_destroyif (ifc=0xc0914d00, ifp=0xc3a0ac00)
    at /usr/src/sys/net/if_clone.c:218
#11 0xc068e37f in if_clone_destroy (name=0xc3a2bac0 "vlan554")
    at /usr/src/sys/net/if_clone.c:196
#12 0xc068d18b in ifioctl (so=0xc3c58680, cmd=2149607801,
    data=0xc3a2bac0 "vlan554", td=0xc3ef28c0) at /usr/src/sys/net/if.c:1932
#13 0xc06294aa in soo_ioctl (fp=0xc3e4b04c, cmd=2149607801, data=0xc3a2bac0,
    active_cred=0xc3ea7400, td=0xc3ef28c0)
    at /usr/src/sys/kern/sys_socket.c:191
#14 0xc06222f5 in kern_ioctl (td=0xc3ef28c0, fd=3, com=2149607801,
    data=0xc3a2bac0 "vlan554") at file.h:268
#15 0xc0622454 in ioctl (td=0xc3ef28c0, uap=0xd826bcfc)
    at /usr/src/sys/kern/sys_generic.c:570
#16 0xc0874a49 in syscall (frame=0xd826bd38)
    at /usr/src/sys/i386/i386/trap.c:1090
#17 0xc085b2f0 in Xint0x80_syscall ()
    at /usr/src/sys/i386/i386/exception.s:255
#18 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)

How-To-Repeat: # grep vlan554 /etc/rc.conf
ifconfig_vlan554="vlan554 vlandev le0 192.168.88.2 netmask 255.255.255.0"

Script:

#!/bin/sh

i=0

while [ $i -le 100 ] ; do
    echo $i
    i=$(($i+1))
    ifconfig vlan555 create 
    ifconfig vlan555 vlan 555 vlandev le0
    ifconfig vlan555 192.168.182.3/24
    ifconfig vlan554 create
    j=0
    while [ $j -le 100 ] ; do
	j=$(($j+1))
    done
    ifconfig vlan555 destroy
    ifconfig vlan554 destroy

done
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2008-12-25 03:27:33 UTC
Responsible Changed
From-To: freebsd-bugs->freebsd-net

Over to maintainer(s).
Comment 2 VANHULLEBUS Yvan freebsd_committer freebsd_triage 2008-12-31 15:38:46 UTC
State Changed
From-To: open->feedback

Your problem seems to be the same as described in kern/126850. 
It has been fixed in TRUNK by jfv@ and I MFCed it for FreeBSD 7.1-RC2. 
Please try again with RC2 and confirm us that it also fixes your issue. 



Comment 3 VANHULLEBUS Yvan freebsd_committer freebsd_triage 2008-12-31 15:38:46 UTC
Responsible Changed
From-To: freebsd-net->vanhu

Your problem seems to be the same as described in kern/126850. 
It has been fixed in TRUNK by jfv@ and I MFCed it for FreeBSD 7.1-RC2. 
Please try again with RC2 and confirm us that it also fixes your issue.
Comment 4 VANHULLEBUS Yvan freebsd_committer freebsd_triage 2009-03-16 12:36:14 UTC
State Changed
From-To: feedback->closed

No feedback, it is probably the same issue as described 
in kern/126850.