kern/122283: [ipv6] [panic] Panic in ip_output related to IPv6 routes

Nick Sayer nsayer at
Tue Apr 8 22:40:03 UTC 2008

The following reply was made to PR kern/122283; it has been noted by GNATS.

From: Nick Sayer <nsayer at>
To: bug-followup at
Subject: Re: kern/122283: [ipv6] [panic] Panic in ip_output related to IPv6 routes
Date: Tue, 8 Apr 2008 15:30:49 -0700

 Latest example:
 Fatal trap 12: page fault while in kernel mode
 cpuid = 0; apic id = 00
 fault virtual address	= 0x34
 fault code		= supervisor read, page not present
 instruction pointer	= 0x20:0xc06f25b4
 stack pointer	        = 0x28:0xe688f798
 frame pointer	        = 0x28:0xe688f804
 code segment		= base 0x0, limit 0xfffff, type 0x1b
 			= DPL 0, pres 1, def32 1, gran 1
 processor eflags	= interrupt enabled, resume, IOPL = 0
 current process		= 1174 (imapd)
 trap number		= 12
 panic: page fault
 cpuid = 0
 Uptime: 6h12m31s
 Physical memory: 1015 MB
 Dumping 154 MB: 139 123 107 91 75 59 43 27 11
 (kgdb) bt
 #0  doadump () at pcpu.h:195
 #1  0xc062e2a7 in boot (howto=260) at /usr/src/sys/kern/ 
 #2  0xc062e569 in panic (fmt=Variable "fmt" is not available.
 ) at /usr/src/sys/kern/kern_shutdown.c:563
 #3  0xc084ce2c in trap_fatal (frame=0xe688f758, eva=52)
      at /usr/src/sys/i386/i386/trap.c:899
 #4  0xc084d0b0 in trap_pfault (frame=0xe688f758, usermode=0, eva=52)
      at /usr/src/sys/i386/i386/trap.c:812
 #5  0xc084da5c in trap (frame=0xe688f758) at /usr/src/sys/i386/i386/ 
 #6  0xc0833d3b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc06f25b4 in ip_output (m=0xc402f400, opt=0x0, ro=0xc3ee3344,  
      imo=0x0, inp=0x0) at /usr/src/sys/netinet/ip_output.c:235
 #8  0xc06ca751 in stf_output (ifp=0xc3ee8400, m=0xc402f400,  
      rt=0xc3fd6d20) at /usr/src/sys/net/if_stf.c:533
 #9  0xc077772d in nd6_output (ifp=0xc3ee8400, origifp=0xc3ee8400,
      m0=0xc3e8b200, dst=0xe688fa0c, rt0=0xc3fd6d20)
      at /usr/src/sys/netinet6/nd6.c:2123
 #10 0xc07749f2 in ip6_output (m0=0xc3e8b200, opt=0x0, ro=0xe688fa08,  
      im6o=0x0, ifpp=0x0, inp=0xc461f654)
      at /usr/src/sys/netinet6/ip6_output.c:927
 #11 0xc0750c21 in tcp_output (tp=0xc4a253a0)
      at /usr/src/sys/netinet/tcp_output.c:1114
 #12 0xc075af7a in tcp_usr_send (so=0xc48924a4, flags=Variable "flags"  
 is not available.
      at /usr/src/sys/netinet/tcp_usrreq.c:843
 ---Type <return> to continue, or q <return> to quit---
 #13 0xc0681785 in sosend_generic (so=0xc48924a4, addr=0x0,  
      top=0xc402f300, control=0x0, flags=0, td=0xc4a0c210)
      at /usr/src/sys/kern/uipc_socket.c:1240
 #14 0xc067d74f in sosend (so=0xc48924a4, addr=0x0, uio=0xe688fc60,  
      control=0x0, flags=0, td=0xc4a0c210)
      at /usr/src/sys/kern/uipc_socket.c:1286
 #15 0xc0667d4b in soo_write (fp=0xc43ba288, uio=0xe688fc60,
      active_cred=0xc4640400, flags=0, td=0xc4a0c210)
      at /usr/src/sys/kern/sys_socket.c:103
 #16 0xc06613f7 in dofilewrite (td=0xc4a0c210, fd=1, fp=0xc43ba288,
      auio=0xe688fc60, offset=-1, flags=0) at file.h:254
 #17 0xc06616d8 in kern_writev (td=0xc4a0c210, fd=1, auio=0xe688fc60)
      at /usr/src/sys/kern/sys_generic.c:401
 #18 0xc066174f in write (td=0xc4a0c210, uap=0xe688fcfc)
      at /usr/src/sys/kern/sys_generic.c:317
 #19 0xc084d405 in syscall (frame=0xe688fd38)
      at /usr/src/sys/i386/i386/trap.c:1035
 #20 0xc0833da0 in Xint0x80_syscall () at /usr/src/sys/i386/i386/ 
 #21 0x00000033 in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 ifconfig -au
 re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu  
 	ether 00:17:31:e9:bc:66
 	inet6 fe80::217:31ff:fee9:bc66%re0 prefixlen 64 scopeid 0x1
 	inet netmask 0xfffffff0 broadcast
 	inet6 2002:478d:4001:0:217:31ff:fee9:bc66 prefixlen 64
 	inet6 2002:478d:4001:: prefixlen 64 anycast
 	media: Ethernet autoselect (1000baseTX <full-duplex>)
 	status: active
 lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
 	inet6 ::1 prefixlen 128
 	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
 	inet netmask 0xff000000
 stf0: flags=1<UP> metric 0 mtu 1280
 	inet6 2002:478d:4001::1 prefixlen 16
 Routing tables
 Destination        Gateway            Flags    Refs      Use  Netif  
 default         UGS         0  4858740    re0     link#1             UC          0        0    re0        00:17:31:e9:bc:66  UHLW        1      558    lo0        00:1b:63:f4:52:c8  UHLW        2   181265    re0     
 920       00:02:3b:02:a7:51  UHLW        2        0    re0    
 1198          UH          0  1736581    lo0
 Destination                       Gateway                        
 Flags      Netif Expire
 ::/96                             ::1                            
 UGRS        lo0 =>
 default                           2002:c058:6301::               
 UGS        stf0
 ::1                               ::1                            
 UHL         lo0
 ::ffff:                 ::1                            
 UGRS        lo0
 2002::/24                         ::1                            
 UGRS        lo0 =>
 2002::/16                         2002:478d:4001::1              
 U          stf0
 2002:478d:4001::                  00:17:31:e9:bc:66              
 UHL         lo0 =>
 2002:478d:4001::/64               link#1                         
 UC          re0
 2002:478d:4001::1                 link#3                         
 UHL         lo0
 2002:478d:4001:0:217:31ff:fee9:bc66 00:17:31:e9:bc:66              
 UHL         lo0
 2002:7f00::/24                    ::1                            
 UGRS        lo0
 2002:e000::/20                    ::1                            
 UGRS        lo0
 2002:ff00::/24                    ::1                            
 UGRS        lo0
 fe80::/10                         ::1                            
 UGRS        lo0
 fe80::%re0/64                     link#1                         
 UC          re0
 fe80::217:31ff:fee9:bc66%re0      00:17:31:e9:bc:66              
 UHL         lo0
 fe80::%lo0/64                     fe80::1%lo0                    
 U           lo0
 fe80::1%lo0                       link#2                         
 UHL         lo0
 ff01:1::/32                       link#1                         
 UC          re0
 ff01:2::/32                       ::1                            
 UC          lo0
 ff02::/16                         ::1                            
 UGRS        lo0
 ff02::%re0/32                     link#1                         
 UC          re0
 ff02::%lo0/32                     ::1                            
 UC          lo0

More information about the freebsd-bugs mailing list