[Bug 201466] ifconfig called from ruby shell class causes kernel panic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=201466

Allan Jude <allanjude at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |allanjude at FreeBSD.org

--- Comment #5 from Allan Jude <allanjude at FreeBSD.org> ---
This sh one-liner allows me to reproduce a similar crash consistently (usually
2-3 iterations:

for i in $(jot 100); do result=$(ifconfig epair create); sleep 0.25; ifconfig
$result destroy; done


With a sleep time over 0.5 seconds, it seems to be fine.

This is reproducible on 11-CURRENT as well.


FreeBSD 102rc1 10.2-RC1 FreeBSD 10.2-RC1 #0 r285832: Fri Jul 24 01:08:13 UTC
201
5     root at releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC  amd64

panic: page fault

Unread portion of the kernel message buffer:
epair1a: Ethernet address: 02:ff:70:00:05:0a


Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 02
fault virtual address   = 0x0
fault code              = supervisor read instruction, page not present
instruction pointer     = 0x20:0x0
stack pointer           = 0x28:0xfffffe00f7181870
frame pointer           = 0x28:0xfffffe00f71818c0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 1072 (ifconfig)
trap number             = 12
panic: page fault
cpuid = 2
KDB: stack backtrace:
#0 0xffffffff80a15f70 at kdb_backtrace+0x60
#1 0xffffffff809d9b26 at vpanic+0x126
#2 0xffffffff809d99f3 at panic+0x43
#3 0xffffffff80ddbcab at trap_fatal+0x36b
#4 0xffffffff80ddbfad at trap_pfault+0x2ed
#5 0xffffffff80ddb64a at trap+0x47a
#6 0xffffffff80dc19c2 at calltrap+0x8
#7 0xffffffff80a9c39b at ifioctl+0x13ab
#8 0xffffffff80a2de65 at kern_ioctl+0x255
#9 0xffffffff80a2db60 at sys_ioctl+0x140
#10 0xffffffff80ddc5c7 at amd64_syscall+0x357
#11 0xffffffff80dc1cab at Xfast_syscall+0xfb
Uptime: 2m48s
Dumping 272 out of 4067 MB:..6%..12%..24%..36%..42%..53%..65%..71%..83%..95%

Reading symbols from /boot/kernel/if_epair.ko.symbols...done.
Loaded symbols for /boot/kernel/if_epair.ko.symbols
#0  doadump (textdump=<value optimized out>) at pcpu.h:219
219     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=<value optimized out>) at pcpu.h:219
#1  0xffffffff809d9782 in kern_reboot (howto=260)
    at /usr/src/sys/kern/kern_shutdown.c:451
#2  0xffffffff809d9b65 in vpanic (fmt=<value optimized out>,
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:758
#3  0xffffffff809d99f3 in panic (fmt=0x0)
    at /usr/src/sys/kern/kern_shutdown.c:687
#4  0xffffffff80ddbcab in trap_fatal (frame=<value optimized out>,
    eva=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:851
#5  0xffffffff80ddbfad in trap_pfault (frame=0xfffffe00f71817c0,
    usermode=<value optimized out>) at /usr/src/sys/amd64/amd64/trap.c:674
#6  0xffffffff80ddb64a in trap (frame=0xfffffe00f71817c0)
    at /usr/src/sys/amd64/amd64/trap.c:440
#7  0xffffffff80dc19c2 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:236
#8  0x0000000000000000 in ?? ()

-- 
You are receiving this mail because:
You are the assignee for the bug.