From mw@satan.rz.fhtw-berlin.de  Mon Nov 27 12:52:23 2000
Return-Path: <mw@satan.rz.fhtw-berlin.de>
Received: from satan.rz.fhtw-berlin.de (unknown [141.45.5.137])
	by hub.freebsd.org (Postfix) with ESMTP id D7CEC37B479
	for <FreeBSD-gnats-submit@freebsd.org>; Mon, 27 Nov 2000 12:52:22 -0800 (PST)
Received: (from mw@localhost)
	by satan.rz.fhtw-berlin.de (8.11.1/8.11.1) id eARKqLD67547;
	Mon, 27 Nov 2000 21:52:21 +0100 (CET)
	(envelope-from mw)
Message-Id: <200011272052.eARKqLD67547@satan.rz.fhtw-berlin.de>
Date: Mon, 27 Nov 2000 21:52:21 +0100 (CET)
From: mw@fhtw-berlin.de
Sender: mw@satan.rz.fhtw-berlin.de
Reply-To: mw@fhtw-berlin.de
To: FreeBSD-gnats-submit@freebsd.org
Subject: kernel panic with pppoe-server
X-Send-Pr-Version: 3.2

>Number:         23145
>Category:       i386
>Synopsis:       pppoe-test-program panics the server
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    brian
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Nov 27 13:00:02 PST 2000
>Closed-Date:    Tue Jun 29 09:24:36 GMT 2004
>Last-Modified:  Tue Jun 29 09:24:36 GMT 2004
>Originator:     Matthias Waehlisch
>Release:        FreeBSD 4.2-STABLE i386
>Organization:
FHTW Berlin, HRZ
>Environment:

FreeBSD pppoeserv.rz.fhtw-berlin.de 4.2-STABLE FreeBSD 4.2-STABLE #0: Th
u Nov 23 16:14:35 GMT 2000     root@dummy.rz.fhtw-berlin.de:/usr/src/sys/compile
/PPPOESERV  i386	

>Description:

We want to install a WLAN on our campus. The decision for authentication is pppoe. 
We started pppoed with following option:
	/usr/libexec/pppoed -dF -e "/usr/sbin/ppp -direct server" xl1

For the ppp we use the following configuration (/etc/ppp/ppp.conf):
 	default:
	        set device PPPoE:xl1
        	set speed sync
        	set mtu 1492
        	set mru 1492
	server:
        	set cd
        	set login
        	enable proxy
        	set ifaddr 192.168.35.1
        	set radius /etc/radius.conf
        	enable PAP

After starting the pppoed everything is fine. clients are able to connect and communicate with the network.
But a windows pppoe-test-programm shows the dark side - kernel panic:

	Fatal trap 12: page fault while in kernel mode
	fault virtaul address   =       0x0
	fault code              =       supervisor read, page not present
	instruction pointer     =       0x8:0xc19ca36d
	stack pointer           =       0x10:0xcc2cbee0
	frame pointer           =       0x10:0xcc2cbef4
	code segment            =       base 0x0, limit 0xfffff, type 0x1b
                        	=       DPL 0, pres 1, def32 1, gran 1
	processor eflags        =       interrupt enabled, resume, IOPL = 0
	current process         =       165 (ppp)
	interrupt mask          =       
	trap number             =       12
	panic: page fault

	syncing disk... 15 15

The trigger for this phenomenon was Poet 1.6 on a Windows-client (pppoe-test-programm):
	http://home.t-online.de/home/hanewin/poet-e.htm
Second test-part brought the server to crash.

-----dmesg-output
Copyright (c) 1992-2000 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 4.2-STABLE #0: Thu Nov 23 16:14:35 GMT 2000
    root@dummy.rz.fhtw-berlin.de:/usr/src/sys/compile/PPPOESERV
Timecounter "i8254"  frequency 1193182 Hz
CPU: AMD Athlon(tm) Processor (800.03-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x622  Stepping = 2
  Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR>
  AMD Features=0xc0400000<AMIE,DSP,3DNow!>
real memory  = 134201344 (131056K bytes)
avail memory = 125968384 (123016K bytes)
Preloaded elf kernel "kernel" at 0xc0438000.
Pentium Pro MTRR support enabled
md0: Malloc disk
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib2: <VIA 82C598MVP (Apollo MVP3) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib2
pci1: <NVidia Riva Ultra Vanta TNT2 graphics accelerator> at 0.0 irq 11
isab0: <VIA 82C686 PCI-ISA bridge> at device 4.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <VIA 82C686 ATA66 controller> port 0xd800-0xd80f at device 4.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
chip2: <VIA 82C686 AC97 Audio> port 0xb000-0xb003,0xb400-0xb403,0xb800-0xb8ff irq 12 at device 4.5 on pci0
xl0: <3Com 3c905C-TX Fast Etherlink XL> port 0xa400-0xa47f mem 0xdf800000-0xdf80007f irq 10 at device 11.0 on pci0
xl0: Ethernet address: 00:01:02:b0:13:cd
miibus0: <MII bus> on xl0
xlphy0: <3c905C 10/100 internal PHY> on miibus0
xlphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
xl1: <3Com 3c905C-TX Fast Etherlink XL> port 0xa000-0xa07f mem 0xdf000000-0xdf00007f irq 9 at device 13.0 on pci0
xl1: Ethernet address: 00:50:da:de:d2:01
miibus1: <MII bus> on xl1
xlphy1: <3c905C 10/100 internal PHY> on miibus1
xlphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pcib1: <Host to PCI bridge> on motherboard
pci2: <PCI bus> on pcib1
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
kbd0 at atkbd0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
plip0: <PLIP network interface> on ppbus0
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
ad0: 19623MB <IBM-DTLA-305020> [39870/16/63] at ata0-master UDMA66
acd0: CDROM <ATAPI 50X CDROM> at ata1-master using PIO4
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
module_register: module netgraph already exists!
linker_file_sysinit "netgraph.ko" failed to register! 17

>How-To-Repeat:

download the test-client from:
	http://home.t-online.de/home/hanewin/poet-e.htm	
and run it against the pppoe-server.

>Fix:

?????


>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: kris 
State-Changed-When: Sat Jun 2 03:00:42 PDT 2001 
State-Changed-Why:  
Can you please obtain a panic traceback?  See the handbook 
section on kernel debugging. 


Responsible-Changed-From-To: freebsd-bugs->brian 
Responsible-Changed-By: kris 
Responsible-Changed-When: Sat Jun 2 03:00:42 PDT 2001 
Responsible-Changed-Why:  
Brian is Mr PPPOE 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=23145 
State-Changed-From-To: feedback->closed 
State-Changed-By: brian 
State-Changed-When: Tue Jun 29 09:23:07 GMT 2004 
State-Changed-Why:  
Timed out waiting for feedback 

http://www.freebsd.org/cgi/query-pr.cgi?pr=23145 
>Unformatted:
