From nobody@FreeBSD.org  Sat May  3 10:31:45 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id EF305106566B
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  3 May 2008 10:31:45 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id EEF708FC16
	for <freebsd-gnats-submit@FreeBSD.org>; Sat,  3 May 2008 10:31:45 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m43AV0AR048225
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 3 May 2008 10:31:00 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m43AV0qF048224;
	Sat, 3 May 2008 10:31:00 GMT
	(envelope-from nobody)
Message-Id: <200805031031.m43AV0qF048224@www.freebsd.org>
Date: Sat, 3 May 2008 10:31:00 GMT
From: "Justin Jon L. Jereza" <justinjereza@gmail.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: page fault on ppp start if tun0 doesn't exist
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         123363
>Category:       kern
>Synopsis:       [ppp] [tun] page fault on ppp start if tun0 doesn't exist
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    gavin
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat May 03 10:40:00 UTC 2008
>Closed-Date:    Wed Dec 03 12:43:01 UTC 2008
>Last-Modified:  Wed Dec 03 12:43:01 UTC 2008
>Originator:     Justin Jon L. Jereza
>Release:        FreeBSD 7.0-RELEASE-p1 i386
>Organization:
None
>Environment:
System: FreeBSD apollo.mainstreetph.dnsalias.com 7.0-RELEASE-p1 FreeBSD 7.0-RELEASE-p1 #0: Mon Apr 28 02:31:01 PHT 2008 root@apollo.mainstreetph.dnsalias.com:/usr/obj/usr/src/sys/APOLLO i386
>Description:
When ppp is configured to use PPPoE and the tun0 interface doesn't exist, kernel panics with a page fault.

Kernel dump and configuration file is available at http://mainstreetph.dnsalias.com/~justin/crash/

NOTE: web server may not be up at all times
>How-To-Repeat:
# /etc/rc.d/ppp stop
# ifconfig tun0 destroy
# /etc/rc.d/ppp start
>Fix:
Don't destroy tun0 interface.

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->feedback 
State-Changed-By: gavin 
State-Changed-When: Sat May 3 16:16:30 UTC 2008 
State-Changed-Why:  
To submitter: can you please obtain a backtrace of this panic on 
your own system with something like: 
kgdb /boot/kernel/kernel.symbols /path/to/vmcore.0 
and issue the "bt" command? 


Responsible-Changed-From-To: freebsd-bugs->gavin 
Responsible-Changed-By: gavin 
Responsible-Changed-When: Sat May 3 16:16:30 UTC 2008 
Responsible-Changed-Why:  
Track 

http://www.freebsd.org/cgi/query-pr.cgi?pr=123363 

From: "Justin Jereza" <justinjereza@gmail.com>
To: bug-followup@freebsd.org
Cc:  
Subject: Re: kern/123363: page fault on ppp start if tun0 doesn't exist
Date: Sun, 4 May 2008 01:30:14 +0800

 Backtrace:
 
 #0  doadump () at pcpu.h:195
 #1  0xc075c1e7 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:409
 #2  0xc075c4ac in panic (fmt=Variable "fmt" is not available.
 ) at /usr/src/sys/kern/kern_shutdown.c:563
 #3  0xc0a4efac in trap_fatal (frame=0xd68229e4, eva=392) at
 /usr/src/sys/i386/i386/trap.c:899
 #4  0xc0a4f210 in trap_pfault (frame=0xd68229e4, usermode=0, eva=392)
 at /usr/src/sys/i386/i386/trap.c:812
 #5  0xc0a4fbd9 in trap (frame=0xd68229e4) at /usr/src/sys/i386/i386/trap.c:490
 #6  0xc0a3684b in calltrap () at /usr/src/sys/i386/i386/exception.s:139
 #7  0xc074fd02 in _mtx_lock_sleep (m=0xc3014d08, tid=3276153360,
 opts=0, file=0x0, line=0)
    at /usr/src/sys/kern/kern_mutex.c:335
 #8  0xc048b3e1 in hfsc_class_destroy (cl=0xc5b16000) at
 /usr/src/sys/contrib/altq/altq/altq_hfsc.c:595
 #9  0xc048b65b in hfsc_remove_altq (a=0xc45aa8c0) at
 /usr/src/sys/contrib/altq/altq/altq_hfsc.c:350
 #10 0xc04904ba in altq_remove (a=0xc45aa8c0) at
 /usr/src/sys/contrib/altq/altq/altq_subr.c:655
 #11 0xc317f309 in ?? ()
 #12 0xc45aa8c0 in ?? ()
 #13 0xc0b7edc0 in M_DEVBUF ()
 #14 0xc31948e8 in ?? ()
 #15 0x01000000 in ?? ()
 #16 0x00000000 in ?? ()
 #17 0xc2ea88b0 in ?? ()
 #18 0xd6822be4 in ?? ()
 #19 0xc3184295 in ?? ()
 #20 0x00000016 in ?? ()
 #21 0x00000000 in ?? ()
 #22 0xc3191864 in ?? ()
 #23 0x00000c55 in ?? ()
 #24 0xc36c68d8 in ?? ()
 #25 0x00000006 in ?? ()
 #26 0xc36c6908 in ?? ()
 #27 0xc3462210 in ?? ()
 #28 0xc0ae10d5 in ?? ()
 #29 0x00000119 in ?? ()
 #30 0xd6822ae8 in ?? ()
 #31 0xc0a64955 in VOP_UNLOCK_APV (vop=0x16, a=0x0) at vnode_if.c:1676
 Previous frame inner to this frame (corrupt stack?)

From: "Justin Jereza" <justinjereza@gmail.com>
To: bug-followup@FreeBSD.org, justinjereza@gmail.com
Cc:  
Subject: Re: kern/123363: [ppp] [tun] page fault on ppp start if tun0 doesn't exist
Date: Sun, 18 May 2008 04:49:57 +0800

 New bug filed which might be related to this one. Backtrace looks
 similar. --> `kern/123726'
State-Changed-From-To: feedback->open 
State-Changed-By: gavin 
State-Changed-When: Thu Aug 21 16:01:45 UTC 2008 
State-Changed-Why:  
Feedback was received 

http://www.freebsd.org/cgi/query-pr.cgi?pr=123363 
State-Changed-From-To: open->feedback 
State-Changed-By: gavin 
State-Changed-When: Thu Aug 21 16:11:18 UTC 2008 
State-Changed-Why:  
To submitter: are you able to update to 7-STABLE and determine if this was 
fixed by the patch in PR kern/123726 please?  Although you make no mention 
of using PF in your PR, the cause and backtrace do look sufficiently 
similar for me to suspect that it may well indeed be the same bug. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=123363 

From: "Justin Jereza" <justinjereza@gmail.com>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/123363: [ppp] [tun] page fault on ppp start if tun0 doesn't exist
Date: Sun, 14 Sep 2008 22:20:47 +0800

 > To submitter: are you able to update to 7-STABLE and determine if this was
 > fixed by the patch in PR kern/123726 please? Although you make no mention
 > of using PF in your PR, the cause and backtrace do look sufficiently
 > similar for me to suspect that it may well indeed be the same bug.
 
 I just noticed the updated status on the bug and yes, I was using PF.
 I just didn't think it was relevant although it is mentioned in the
 backtrace. Unfortunately, I cannot test this anymore since the PPPoE
 modem was replaced with an ADSL bridge by the telco.
 
 -- 
 Justin Jereza
 LPIC-1
State-Changed-From-To: feedback->closed 
State-Changed-By: gavin 
State-Changed-When: Wed Dec 3 12:42:05 UTC 2008 
State-Changed-Why:  
Close, I'm pretty sure this is a duplicate of kern/123726 

http://www.freebsd.org/cgi/query-pr.cgi?pr=123363 
>Unformatted:
