[Bug 220140] net/mpd5 - on pine64 - system crash - Fatal data abort

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220140

            Bug ID: 220140
           Summary: net/mpd5 - on pine64 - system crash - Fatal data abort
           Product: Ports & Packages
           Version: Latest
          Hardware: arm64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: mav at FreeBSD.org
          Reporter: hlh at restart.be
          Assignee: mav at FreeBSD.org
             Flags: maintainer-feedback?(mav at FreeBSD.org)

on a pine64+ 2GB
FreeBSD norquay.restart.bel 12.0-CURRENT FreeBSD 12.0-CURRENT #0 r319859M: Sat
Jun 17 16:11:45 CEST 2017    
root at norquay.restart.bel:/usr/obj/usr/src/sys/NORQUAY  arm64

When I start mpd5 to establish a internet connection, the system crash:

[root at norquay ~]# service mpd5 forcestart
Starting mpd5.
[root at norquay ~]# WARNING: attempt to domain_add(netgraph) after
domainfinalize()
Fatal data abort:
  x0: fffffd004bc70b88
  x1:                4
  x2: fffffd0002c7c9c0
  x3:              915
  x4:                0
  x5:                0
  x6: ffffffffffffffff
  x7:               40
  x8:                2
  x9:                0
 x10: fffffd0002c7c9c0
 x11:                0
 x12:                1
 x13:                0
 x14:                1
 x15: ffff0000007681f8
 x16: ffff000052b4c7b0
 x17: ffff000000271704
 x18: ffff00009b2a4680
 x19:                0
 x20: fffffd004bc70b88
 x21: fffffd004bc70b00
 x22: fffffd004bc70b68
 x23: ffff00009b2a46d0
 x24: fffffd004bc70b00
 x25: fffffd003cd3de80
 x26:                1
 x27: fffffd004bce06c8
 x28:                0
 x29: ffff00009b2a46b0
  sp: ffff00009b2a4680
  lr: ffff000052b3e484
 elr: ffff000052b3e490
spsr:         60000345
 far:                0
 esr:         96000007
[ thread pid 1512 tid 101427 ]
Stopped at      ng_snd_item+0x384:      ldrb    w9, [x9]
db> bt
Tracing pid 1512 tid 101427 td 0xfffffd0002c7c9c0
db_trace_self() at db_stack_trace+0xec
         pc = 0xffff0000005a2700  lr = 0xffff0000000851e8
         sp = 0xffff00009b2a4020  fp = 0xffff00009b2a4050

db_stack_trace() at db_command+0x23c
         pc = 0xffff0000000851e8  lr = 0xffff000000084e68
         sp = 0xffff00009b2a4060  fp = 0xffff00009b2a4140

db_command() at db_command_loop+0x60
         pc = 0xffff000000084e68  lr = 0xffff000000084c10
         sp = 0xffff00009b2a4150  fp = 0xffff00009b2a4170

db_command_loop() at db_trap+0xf4
         pc = 0xffff000000084c10  lr = 0xffff000000087c14
         sp = 0xffff00009b2a4180  fp = 0xffff00009b2a43a0

db_trap() at kdb_trap+0x180
         pc = 0xffff000000087c14  lr = 0xffff0000002d2110
         sp = 0xffff00009b2a43b0  fp = 0xffff00009b2a4410

kdb_trap() at data_abort+0x1a0
         pc = 0xffff0000002d2110  lr = 0xffff0000005b8020
         sp = 0xffff00009b2a4420  fp = 0xffff00009b2a44d0

data_abort() at handle_el1h_sync+0x74
         pc = 0xffff0000005b8020  lr = 0xffff0000005a4074
         sp = 0xffff00009b2a44e0  fp = 0xffff00009b2a45f0

handle_el1h_sync() at ng_snd_item+0x374
         pc = 0xffff0000005a4074  lr = 0xffff000052b3e480
         sp = 0xffff00009b2a4600  fp = 0xffff00009b2a46b0

ng_snd_item() at ngc_send+0x1bc
         pc = 0xffff000052b3e480  lr = 0xffff000052abbcc0
         sp = 0xffff00009b2a46c0  fp = 0xffff00009b2a4740

ngc_send() at sosend_generic+0x454
         pc = 0xffff000052abbcc0  lr = 0xffff00000031a19c
         sp = 0xffff00009b2a4750  fp = 0xffff00009b2a47f0

sosend_generic() at kern_sendit+0x264
         pc = 0xffff00000031a19c  lr = 0xffff00000032098c
         sp = 0xffff00009b2a4800  fp = 0xffff00009b2a4890

kern_sendit() at sendit+0x1a4
         pc = 0xffff00000032098c  lr = 0xffff000000320ce0
         sp = 0xffff00009b2a48a0  fp = 0xffff00009b2a48e0

sendit() at sys_sendto+0x50
         pc = 0xffff000000320ce0  lr = 0xffff000000320b2c
         sp = 0xffff00009b2a48f0  fp = 0xffff00009b2a4930

sys_sendto() at do_el0_sync+0xa90
         pc = 0xffff000000320b2c  lr = 0xffff0000005b8b30
         sp = 0xffff00009b2a4940  fp = 0xffff00009b2a4a70

do_el0_sync() at handle_el0_sync+0x74
         pc = 0xffff0000005b8b30  lr = 0xffff0000005a41f4
         sp = 0xffff00009b2a4a80  fp = 0xffff00009b2a4b90

handle_el0_sync() at 0x405e4e28
         pc = 0xffff0000005a41f4  lr = 0x00000000405e4e28
         sp = 0xffff00009b2a4ba0  fp = 0x0000ffffffffe760

db> 

With the mpd.conf:

startup:
        # enable TCP-Wrapper (hosts_access(5)) to block unfriendly clients
        set global enable tcp-wrapper
        set user hlh guru admin
        # configure the console
        set console self 0.0.0.0 5005
        set console open
        # configure the web interface
        set web self 0.0.0.0 5006
        set web open

default:
        load scarlet

scarlet:
        create bundle static B0
        set bundle enable compression

# Configure IP addressing -- we get both endpoint assignments from peer.
        set ipcp ranges 0.0.0.0/0 0.0.0.0/0
        set ipcp yes vjcomp

# Configure the interface: default route, idle timeout.
        set iface route default
        set iface enable tcpmssfix
        set iface disable on-demand
        set iface idle 0
        set iface up-script /usr/local/etc/mpd5/adsl.linkup
        set iface down-script /usr/local/etc/mpd5/adsl.linkdown

# Configure the (only) link. We expect to be authenticated by peer.
        create link static L0 pppoe
        set link action bundle B0
        set auth authname "xxxxxxxx at SCARLET"
        set link max-redial 0
        set link mtu 1492
        set link keep-alive 10 60
        set link no acfcomp protocomp
        set link disable chap pap
        set link accept chap

        set pppoe iface awg0
#       set pppoe service "SCARLET"

        open

Henri

-- 
You are receiving this mail because:
You are the assignee for the bug.