From nobody@FreeBSD.org  Mon Feb  2 21:15:58 2009
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 8DF82106572D
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  2 Feb 2009 21:15:58 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 6E62A8FC1A
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  2 Feb 2009 21:15:58 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n12LFwec098849
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 2 Feb 2009 21:15:58 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id n12LFwZp098848;
	Mon, 2 Feb 2009 21:15:58 GMT
	(envelope-from nobody)
Message-Id: <200902022115.n12LFwZp098848@www.freebsd.org>
Date: Mon, 2 Feb 2009 21:15:58 GMT
From: Vitaly Dodonov <dreamer.two@gmail.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: 7.1 panics with mpd netgraph interface changes
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         131310
>Category:       kern
>Synopsis:       [netgraph] [panic] 7.1 panics with mpd netgraph interface changes
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-net
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Feb 02 21:20:00 UTC 2009
>Closed-Date:    Mon Apr 13 23:35:55 UTC 2009
>Last-Modified:  Mon Apr 13 23:35:55 UTC 2009
>Originator:     Vitaly Dodonov
>Release:        7.1
>Organization:
>Environment:
FreeBSD d2s.local 7.1-RELEASE-p2 FreeBSD 7.1-RELEASE-p2 #15: Mon Feb  2 20:28:17 MSK 2009     d2@d2s.local:/usr/obj/usr/src/sys/D2S  amd64

>Description:
One week after upgrade to 7.1 system begin panic on pptp/pppoe client
connections

outgoing connections on fxp, incoming on lagg with re and msk in it

i don't have any special options in make.conf
kernel is 7.1 generic with netgraph pf altq options

kgdb kernel.debug /var/crash/vmcore.4
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...

Unread portion of the kernel message buffer:


Fatal trap 9: general protection fault while in kernel mode
cpuid = 0; apic id = 00
instruction pointer     = 0x8:0xffffffff801999f5
stack pointer           = 0x10:0xffffffffdba588c0
frame pointer           = 0x10:0x0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 3275 (mpd5)
trap number             = 9
panic: general protection fault
cpuid = 0
Uptime: 2h55m3s
Physical memory: 4083 MB
Dumping 1235 MB: 1220 1204 1188 1172 1156 1140 1124 1108 1092 1076 1060 1044 1028 1012 996 980 964 948 932 916 900 884 868 852 836 820 804 788 772 756 740 724 708 692 676 660 644 628 612 596 580 564 548 532 516 500 484 468 452 436 420 404 388 372 356 340 324 308 292 276 260 244 228 212 196 180 164 148 132 116 100 84 68 52 36 20 4

Reading symbols from /boot/kernel/zfs.ko...Reading symbols from /boot/kernel/zfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/zfs.ko
Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from /boot/kernel/opensolaris.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/opensolaris.ko
Reading symbols from /boot/kernel/geom_journal.ko...Reading symbols from /boot/kernel/geom_journal.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/geom_journal.ko
Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from /boot/kernel/if_lagg.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_lagg.ko
Reading symbols from /boot/kernel/if_vlan.ko...Reading symbols from /boot/kernel/if_vlan.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_vlan.ko
Reading symbols from /boot/kernel/ng_tcpmss.ko...Reading symbols from /boot/kernel/ng_tcpmss.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ng_tcpmss.ko
#0  doadump () at pcpu.h:195
195             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
(kgdb) backtrace
#0  doadump () at pcpu.h:195
#1  0x0000000000000004 in ?? ()
#2  0xffffffff802c7cd9 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#3  0xffffffff802c80e2 in panic (fmt=0x104 <Address 0x104 out of bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
#4  0xffffffff80462de3 in trap_fatal (frame=0xffffff0011317000, eva=Variable "eva" is not available.) at /usr/src/sys/amd64/amd64/trap.c:764
#5  0xffffffff80463935 in trap (frame=0xffffffffdba58810) at /usr/src/sys/amd64/amd64/trap.c:565
#6  0xffffffff804492ee in calltrap () at /usr/src/sys/amd64/amd64/exception.S:209
#7  0xffffffff801999f5 in pfi_instance_add (ifp=0xffffff00064ef800, net=128, flags=0) at /usr/src/sys/contrib/pf/net/pf_if.c:578
#8  0xffffffff80199cde in pfi_table_update (kt=0xffffff0006819510, kif=Variable "kif" is not available.) at /usr/src/sys/contrib/pf/net/pf_if.c:561
#9  0xffffffff80199f27 in pfi_dynaddr_update (dyn=0xffffff000684dd20) at /usr/src/sys/contrib/pf/net/pf_if.c:543
#10 0xffffffff80199f7d in pfi_kif_update (kif=0xffffff0006002a00) at /usr/src/sys/contrib/pf/net/pf_if.c:520
#11 0xffffffff80199fac in pfi_kif_update (kif=0xffffff00065e9c00) at /usr/src/sys/contrib/pf/net/pf_if.c:525
#12 0xffffffff8019a568 in pfi_ifaddr_event (arg=0xffffff00064ef800, ifp=dwarf2_read_address: Corrupted DWARF expression.) at /usr/src/sys/contrib/pf/net/pf_if.c:942
#13 0xffffffff8039de7c in in_control (so=Variable "so" is not available.) at /usr/src/sys/netinet/in.c:476
#14 0xffffffff8036449f in ifioctl (so=0xffffff00069cc870, cmd=2149607705, data=0xffffff0006234080 "ng3", td=0xffffff0011317000) at /usr/src/sys/net/if.c:1952
#15 0xffffffff803009e4 in kern_ioctl (td=0xffffff0011317000, fd=27, com=2149607705, data=0xffffff0006234080 "ng3") at file.h:268
#16 0xffffffff80300cea in ioctl (td=0xffffff0011317000, uap=0xffffffffdba58bf0) at /usr/src/sys/kern/sys_generic.c:570
#17 0xffffffff80463437 in syscall (frame=0xffffffffdba58c80) at /usr/src/sys/amd64/amd64/trap.c:907
#18 0xffffffff804494fb in Xfast_syscall () at /usr/src/sys/amd64/amd64/exception.S:330
#19 0x000000080188137c in ?? ()
Previous frame inner to this frame (corrupt stack?)
>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-amd64->freebsd-net 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Mon Feb 2 23:24:30 UTC 2009 
Responsible-Changed-Why:  
Looks like this might be network-related, but I'm not sure. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=131310 

From: Vitaly Dodonov <dreamer.two@gmail.com>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/131310: [panic] 7.1 panics with mpd netgraph interface 
	changes
Date: Tue, 3 Feb 2009 13:00:12 +0300

 --000e0cd2301abeffad046200bc47
 Content-Type: text/plain; charset=ISO-8859-1
 Content-Transfer-Encoding: 7bit
 
 tried switch to GENERIC, problem still exists without altq and other options
 
 FreeBSD d2s.local 7.1-RELEASE-p2 FreeBSD 7.1-RELEASE-p2 #0: Tue Feb  3
 09:13:03 MSK 2009     d2@d2s.local:/usr/obj/usr/src/sys/GENERIC  amd64
 
 /<4>sys/GENERIC# kgdb kernel.debug /var/crash/vmcore.5
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain
 conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "amd64-marcel-freebsd"...
 Unread portion of the kernel message buffer:
 
 Fatal trap 9: general protection fault while in kernel mode
 cpuid = 1; apic id = 01
 instruction pointer     = 0x8:0xffffffffdbebbb06
 stack pointer           = 0x10:0xffffffffdbff58a0
 frame pointer           = 0x10:0xffffffffdbff58f0
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 1746 (mpd5)
 trap number             = 9
 panic: general protection fault
 cpuid = 1
 Uptime: 3h9m14s
 Physical memory: 4078 MB
 Dumping 1267 MB: 1252 1236 1220 1204 1188 1172 1156 1140 1124 1108 1092 1076
 1060 1044 1028 1012 996 980 964 948 932 916 900 884 868 852 836 820 804 788
 772 756 740 724 708 692 676 660 644 628 612 596 580 564 548 532 516 500 484
 468 452 436 420 404 388 372 356 340 324 308 292 276 260 244 228 212 196 180
 164 148 132 116 100 84 68 52 36 20 4
 Reading symbols from /boot/kernel/zfs.ko...Reading symbols from
 /boot/kernel/zfs.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/zfs.ko
 Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols from
 /boot/kernel/opensolaris.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/opensolaris.ko
 Reading symbols from /boot/kernel/ng_pppoe.ko...Reading symbols from
 /boot/kernel/ng_pppoe.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_pppoe.ko
 Reading symbols from /boot/kernel/netgraph.ko...Reading symbols from
 /boot/kernel/netgraph.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/netgraph.ko
 Reading symbols from /boot/kernel/geom_journal.ko...Reading symbols from
 /boot/kernel/geom_journal.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/geom_journal.ko
 Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from
 /boot/kernel/if_lagg.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_lagg.ko
 Reading symbols from /boot/kernel/if_vlan.ko...Reading symbols from
 /boot/kernel/if_vlan.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_vlan.ko
 Reading symbols from /boot/kernel/pf.ko...Reading symbols from
 /boot/kernel/pf.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/pf.ko
 Reading symbols from /boot/kernel/ng_socket.ko...Reading symbols from
 /boot/kernel/ng_socket.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_socket.ko
 Reading symbols from /boot/kernel/ng_mppc.ko...Reading symbols from
 /boot/kernel/ng_mppc.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_mppc.ko
 Reading symbols from /boot/kernel/rc4.ko...Reading symbols from
 /boot/kernel/rc4.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/rc4.ko
 Reading symbols from /boot/kernel/ng_iface.ko...Reading symbols from
 /boot/kernel/ng_iface.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_iface.ko
 Reading symbols from /boot/kernel/ng_ppp.ko...Reading symbols from
 /boot/kernel/ng_ppp.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ppp.ko
 Reading symbols from /boot/kernel/ng_ether.ko...Reading symbols from
 /boot/kernel/ng_ether.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ether.ko
 Reading symbols from /boot/kernel/ng_tee.ko...Reading symbols from
 /boot/kernel/ng_tee.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_tee.ko
 Reading symbols from /boot/kernel/ng_tcpmss.ko...Reading symbols from
 /boot/kernel/ng_tcpmss.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_tcpmss.ko
 #0  doadump () at pcpu.h:195
 195             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
 (kgdb) backtrace
 #0  doadump () at pcpu.h:195
 #1  0x0000000000000004 in ?? ()
 #2  0xffffffff804b4ce9 in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:418
 #3  0xffffffff804b50f2 in panic (fmt=0x104 <Address 0x104 out of bounds>) at
 /usr/src/sys/kern/kern_shutdown.c:574
 #4  0xffffffff8078a173 in trap_fatal (frame=0xffffff00077ae000, eva=Variable
 "eva" is not available.) at /usr/src/sys/amd64/amd64/trap.c:764
 #5  0xffffffff8078acc5 in trap (frame=0xffffffffdbff57f0) at
 /usr/src/sys/amd64/amd64/trap.c:565
 #6  0xffffffff8077067e in calltrap () at
 /usr/src/sys/amd64/amd64/exception.S:209
 #7  0xffffffffdbebbb06 in pfi_instance_add (ifp=0xffffff000737b800, net=128,
 flags=0) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:578
 #8  0xffffffffdbebbdd6 in pfi_table_update (kt=0xffffff000772e510,
 kif=Variable "kif" is not available.) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:561
 #9  0xffffffffdbebc06b in pfi_dynaddr_update (dyn=0xffffff0007764d20) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:543
 #10 0xffffffffdbebc0be in pfi_kif_update (kif=0xffffff000739d500) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:520
 #11 0xffffffffdbebc0ec in pfi_kif_update (kif=0xffffff0007733000) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:525
 #12 0xffffffffdbebc15c in pfi_ifaddr_event (arg=Variable "arg" is not
 available.) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:942
 #13 0xffffffff8058b54c in in_control (so=Variable "so" is not available.) at
 /usr/src/sys/netinet/in.c:476
 #14 0xffffffff8054ea6f in ifioctl (so=0xffffff002007a5a0, cmd=2149607705,
 data=0xffffff0005ef3ac0 "ng2", td=0xffffff00077ae000) at
 /usr/src/sys/net/if.c:1952
 #15 0xffffffff804ed9f4 in kern_ioctl (td=0xffffff00077ae000, fd=26,
 com=2149607705, data=0xffffff0005ef3ac0 "ng2") at file.h:268
 #16 0xffffffff804edcfa in ioctl (td=0xffffff00077ae000,
 uap=0xffffffffdbff5bf0) at /usr/src/sys/kern/sys_generic.c:570
 #17 0xffffffff8078a7c7 in syscall (frame=0xffffffffdbff5c80) at
 /usr/src/sys/amd64/amd64/trap.c:907
 #18 0xffffffff8077088b in Xfast_syscall () at
 /usr/src/sys/amd64/amd64/exception.S:330
 #19 0x000000080188137c in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 
 --000e0cd2301abeffad046200bc47--

From: Vitaly Dodonov <dreamer.two@gmail.com>
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/131310: [panic] 7.1 panics with mpd netgraph interface 
	changes
Date: Fri, 13 Feb 2009 13:41:50 +0300

 i get another panics without mpd and netrgaph, seems it pf related panic
 first on using my pppoe provider with ppp and second on openvpn restart
 
 
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "amd64-marcel-freebsd"...
 
 Unread portion of the kernel message buffer:
 
 
 Fatal trap 9: general protection fault while in kernel mode
 cpuid = 0; apic id = 00
 instruction pointer     = 0x8:0xffffffffdbe96b06
 stack pointer           = 0x10:0xffffffffdbd3f8a0
 frame pointer           = 0x10:0xffffffffdbd3f8f0
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 2515 (ppp)
 trap number             = 9
 panic: general protection fault
 cpuid = 0
 Uptime: 2h50m5s
 Physical memory: 4079 MB
 Dumping 1266 MB: 1251 1235 1219 1203 1187 1171 1155 1139 1123 1107
 1091 1075 1059 1043 1027 1011 995 979 963 947 931 915 899 883 867 851
 835 819 803 787 771 755 739 723 707 691 675 659 643 627 611 595 579
 563 547 531 515 499 483 467 451 435 419 403 387 371 355 339 323 307
 291 275 259 243 227 211 195 179 163 147 131 115 99 83 67 51 35 19 3
 
 Reading symbols from /boot/kernel/zfs.ko...Reading symbols from
 /boot/kernel/zfs.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/zfs.ko
 Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols
 from /boot/kernel/opensolaris.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/opensolaris.ko
 Reading symbols from /boot/kernel/ng_pppoe.ko...Reading symbols from
 /boot/kernel/ng_pppoe.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_pppoe.ko
 Reading symbols from /boot/kernel/netgraph.ko...Reading symbols from
 /boot/kernel/netgraph.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/netgraph.ko
 Reading symbols from /boot/kernel/geom_journal.ko...Reading symbols
 from /boot/kernel/geom_journal.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/geom_journal.ko
 Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from
 /boot/kernel/if_lagg.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_lagg.ko
 Reading symbols from /boot/kernel/if_vlan.ko...Reading symbols from
 /boot/kernel/if_vlan.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_vlan.ko
 Reading symbols from /boot/kernel/pf.ko...Reading symbols from
 /boot/kernel/pf.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/pf.ko
 Reading symbols from /boot/kernel/ng_ether.ko...Reading symbols from
 /boot/kernel/ng_ether.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ether.ko
 Reading symbols from /boot/kernel/ng_socket.ko...Reading symbols from
 /boot/kernel/ng_socket.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_socket.ko
 Reading symbols from /boot/kernel/ng_iface.ko...Reading symbols from
 /boot/kernel/ng_iface.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_iface.ko
 Reading symbols from /boot/kernel/ng_ppp.ko...Reading symbols from
 /boot/kernel/ng_ppp.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ppp.ko
 Reading symbols from /boot/kernel/ng_tcpmss.ko...Reading symbols from
 /boot/kernel/ng_tcpmss.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_tcpmss.ko
 #0  doadump () at pcpu.h:195
 195             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
 (kgdb) backtrace
 #0  doadump () at pcpu.h:195
 #1  0x0000000000000004 in ?? ()
 #2  0xffffffff804b4dbb in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:418
 #3  0xffffffff804b5262 in panic (fmt=0x104 <Address 0x104 out of
 bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
 #4  0xffffffff80788903 in trap_fatal (frame=0xffffff0005f47000,
 eva=Variable "eva" is not available.
 ) at /usr/src/sys/amd64/amd64/trap.c:764
 #5  0xffffffff80789455 in trap (frame=0xffffffffdbd3f7f0) at
 /usr/src/sys/amd64/amd64/trap.c:565
 #6  0xffffffff8076ee0e in calltrap () at
 /usr/src/sys/amd64/amd64/exception.S:209
 #7  0xffffffffdbe96b06 in pfi_instance_add (ifp=0xffffff0007801000,
 net=128, flags=0) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:578
 #8  0xffffffffdbe96dd6 in pfi_table_update (kt=0xffffff0046583510,
 kif=Variable "kif" is not available.
 ) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:561
 #9  0xffffffffdbe9706b in pfi_dynaddr_update (dyn=0xffffff00465d0438)
 at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:543
 #10 0xffffffffdbe970be in pfi_kif_update (kif=0xffffff000750d200) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:520
 #11 0xffffffffdbe970ec in pfi_kif_update (kif=0xffffff00077c2500) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:525
 #12 0xffffffffdbe9715c in pfi_ifaddr_event (arg=Variable "arg" is not available.
 ) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:942
 #13 0xffffffff80589c5c in in_control (so=Variable "so" is not available.
 ) at /usr/src/sys/netinet/in.c:476
 #14 0xffffffff8054d17f in ifioctl (so=0xffffff00962dc000,
 cmd=2149607705, data=0xffffff007f5be200 "tun0", td=0xffffff0005f47000)
 at /usr/src/sys/net/if.c:1952
 #15 0xffffffff804ec104 in kern_ioctl (td=0xffffff0005f47000, fd=0,
 com=2149607705, data=0xffffff007f5be200 "tun0") at file.h:268
 #16 0xffffffff804ec40a in ioctl (td=0xffffff0005f47000,
 uap=0xffffffffdbd3fbf0) at /usr/src/sys/kern/sys_generic.c:570
 #17 0xffffffff80788f57 in syscall (frame=0xffffffffdbd3fc80) at
 /usr/src/sys/amd64/amd64/trap.c:907
 #18 0xffffffff8076f01b in Xfast_syscall () at
 /usr/src/sys/amd64/amd64/exception.S:330
 #19 0x000000080124637c in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 
 
 
 GNU gdb 6.1.1 [FreeBSD]
 Copyright 2004 Free Software Foundation, Inc.
 GDB is free software, covered by the GNU General Public License, and you are
 welcome to change it and/or distribute copies of it under certain conditions.
 Type "show copying" to see the conditions.
 There is absolutely no warranty for GDB.  Type "show warranty" for details.
 This GDB was configured as "amd64-marcel-freebsd"...
 
 Unread portion of the kernel message buffer:
 
 
 Fatal trap 9: general protection fault while in kernel mode
 cpuid = 0; apic id = 00
 instruction pointer     = 0x8:0xffffffffdbe7db06
 stack pointer           = 0x10:0xffffffffdbfef650
 frame pointer           = 0x10:0xffffffffdbfef6a0
 code segment            = base 0x0, limit 0xfffff, type 0x1b
                         = DPL 0, pres 1, long 1, def32 0, gran 1
 processor eflags        = interrupt enabled, resume, IOPL = 0
 current process         = 1802 (openvpn)
 trap number             = 9
 panic: general protection fault
 cpuid = 0
 Uptime: 1h7m42s
 Physical memory: 4079 MB
 Dumping 1036 MB: 1021 1005 989 973 957 941 925 909 893 877 861 845 829
 813 797 781 765 749 733 717 701 685 669 653 637 621 605 589 573 557
 541 525 509 493 477 461 445 429 413 397 381 365 349 333 317 301 285
 269 253 237 221 205 189 173 157 141 125 109 93 77 61 45 29 13
 
 Reading symbols from /boot/kernel/zfs.ko...Reading symbols from
 /boot/kernel/zfs.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/zfs.ko
 Reading symbols from /boot/kernel/opensolaris.ko...Reading symbols
 from /boot/kernel/opensolaris.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/opensolaris.ko
 Reading symbols from /boot/kernel/geom_journal.ko...Reading symbols
 from /boot/kernel/geom_journal.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/geom_journal.ko
 Reading symbols from /boot/kernel/if_lagg.ko...Reading symbols from
 /boot/kernel/if_lagg.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_lagg.ko
 Reading symbols from /boot/kernel/if_vlan.ko...Reading symbols from
 /boot/kernel/if_vlan.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/if_vlan.ko
 Reading symbols from /boot/kernel/pf.ko...Reading symbols from
 /boot/kernel/pf.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/pf.ko
 Reading symbols from /boot/kernel/netgraph.ko...Reading symbols from
 /boot/kernel/netgraph.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/netgraph.ko
 Reading symbols from /boot/kernel/ng_ether.ko...Reading symbols from
 /boot/kernel/ng_ether.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ether.ko
 Reading symbols from /boot/kernel/ng_pppoe.ko...Reading symbols from
 /boot/kernel/ng_pppoe.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_pppoe.ko
 Reading symbols from /boot/kernel/ng_socket.ko...Reading symbols from
 /boot/kernel/ng_socket.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_socket.ko
 Reading symbols from /boot/kernel/ng_iface.ko...Reading symbols from
 /boot/kernel/ng_iface.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_iface.ko
 Reading symbols from /boot/kernel/ng_ppp.ko...Reading symbols from
 /boot/kernel/ng_ppp.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_ppp.ko
 Reading symbols from /boot/kernel/ng_tcpmss.ko...Reading symbols from
 /boot/kernel/ng_tcpmss.ko.symbols...done.
 done.
 Loaded symbols for /boot/kernel/ng_tcpmss.ko
 #0  doadump () at pcpu.h:195
 195             __asm __volatile("movq %%gs:0,%0" : "=r" (td));
 (kgdb) backtrace
 #0  doadump () at pcpu.h:195
 #1  0x0000000000000004 in ?? ()
 #2  0xffffffff804b4dbb in boot (howto=260) at
 /usr/src/sys/kern/kern_shutdown.c:418
 #3  0xffffffff804b5262 in panic (fmt=0x104 <Address 0x104 out of
 bounds>) at /usr/src/sys/kern/kern_shutdown.c:574
 #4  0xffffffff80788903 in trap_fatal (frame=0xffffff006ef98000,
 eva=Variable "eva" is not available.
 ) at /usr/src/sys/amd64/amd64/trap.c:764
 #5  0xffffffff80789455 in trap (frame=0xffffffffdbfef5a0) at
 /usr/src/sys/amd64/amd64/trap.c:565
 #6  0xffffffff8076ee0e in calltrap () at
 /usr/src/sys/amd64/amd64/exception.S:209
 #7  0xffffffffdbe7db06 in pfi_instance_add (ifp=0xffffff0006883000,
 net=128, flags=0) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:578
 #8  0xffffffffdbe7ddd6 in pfi_table_update (kt=0xffffff0006795000,
 kif=Variable "kif" is not available.
 ) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:561
 #9  0xffffffffdbe7e06b in pfi_dynaddr_update (dyn=0xffffff0006793ca8)
 at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:543
 #10 0xffffffffdbe7e0be in pfi_kif_update (kif=0xffffff0006021500) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:520
 #11 0xffffffffdbe7e0ec in pfi_kif_update (kif=0xffffff0006021400) at
 /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:525
 #12 0xffffffffdbe7e15c in pfi_ifaddr_event (arg=Variable "arg" is not available.
 ) at /usr/src/sys/modules/pf/../../contrib/pf/net/pf_if.c:942
 #13 0xffffffff80589c5c in in_control (so=Variable "so" is not available.
 ) at /usr/src/sys/netinet/in.c:476
 #14 0xffffffff8054b822 in if_purgeaddrs (ifp=0xffffff0006418800) at
 /usr/src/sys/net/if.c:684
 #15 0xffffffff8055852d in tunclose (dev=Variable "dev" is not available.
 ) at /usr/src/sys/net/if_tun.c:475
 #16 0xffffffff8047cb5c in giant_close (dev=0xffffff00066b3a00,
 fflag=7, devtype=8192, td=0xffffff006ef98000) at
 /usr/src/sys/kern/kern_conf.c:374
 #17 0xffffffff80442b84 in devfs_close (ap=0xffffffffdbfef950) at
 /usr/src/sys/fs/devfs/devfs_vnops.c:463
 #18 0xffffffff80541022 in vn_close (vp=0xffffff00067f9dc8, flags=7,
 file_cred=0xffffff0006800d00, td=0xffffff006ef98000) at vnode_if.h:228
 #19 0xffffffff805410ca in vn_closefile (fp=0xffffff013a0b3700,
 td=0xffffff006ef98000) at /usr/src/sys/kern/vfs_vnops.c:867
 #20 0xffffffff80441d05 in devfs_close_f (fp=Variable "fp" is not available.
 ) at /usr/src/sys/fs/devfs/devfs_vnops.c:479
 #21 0xffffffff80482291 in fdrop (fp=0xffffff013a0b3700,
 td=0xffffff006ef98000) at file.h:299
 #22 0xffffffff804834d6 in closef (fp=0xffffff013a0b3700,
 td=0xffffff006ef98000) at /usr/src/sys/kern/kern_descrip.c:2033
 #23 0xffffffff80483cf7 in kern_close (td=0xffffff006ef98000,
 fd=Variable "fd" is not available.
 ) at /usr/src/sys/kern/kern_descrip.c:1125
 #24 0xffffffff80788f57 in syscall (frame=0xffffffffdbfefc80) at
 /usr/src/sys/amd64/amd64/trap.c:907
 #25 0xffffffff8076f01b in Xfast_syscall () at
 /usr/src/sys/amd64/amd64/exception.S:330
 #26 0x0000000800c5c39c in ?? ()
 Previous frame inner to this frame (corrupt stack?)
 (kgdb)

From: Mikolaj Golub <to.my.trociny@gmail.com>
To: bug-followup@FreeBSD.org,Vitaly Dodonov <dreamer.two@gmail.com>
Cc: Semenchuk Oleg <darkibot@gmail.com>
Subject: Re: kern/131310: [netgraph] [panic] 7.1 panics with mpd netgraph interface changes
Date: Fri, 10 Apr 2009 15:09:38 +0300

 This pr is closely related to kern/130977. You can try the patch from it, which
 adds if_delgroup(ifp, IFG_ALL) to if_detach().
 
 -- 
 Mikolaj Golub

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/131310: commit references a PR
Date: Fri, 10 Apr 2009 14:42:02 +0000 (UTC)

 Author: mlaier
 Date: Fri Apr 10 14:41:51 2009
 New Revision: 190895
 URL: http://svn.freebsd.org/changeset/base/190895
 
 Log:
   Remove interfaces from IFG_ALL on detach.  This cures a couple of pf panics
   when using the "self" keyword in tables or as ()-style host address and
   fixes "ifconfig -g all" output.
   
   PR:		kern/130977, kern/131310
   Submitted by:	Mikolaj Golub
   MFC after:	3 days
 
 Modified:
   head/sys/net/if.c
 
 Modified: head/sys/net/if.c
 ==============================================================================
 --- head/sys/net/if.c	Fri Apr 10 14:24:12 2009	(r190894)
 +++ head/sys/net/if.c	Fri Apr 10 14:41:51 2009	(r190895)
 @@ -887,6 +887,7 @@ if_detach(struct ifnet *ifp)
  	rt_ifannouncemsg(ifp, IFAN_DEPARTURE);
  	EVENTHANDLER_INVOKE(ifnet_departure_event, ifp);
  	devctl_notify("IFNET", ifp->if_xname, "DETACH", NULL);
 +	if_delgroup(ifp, IFG_ALL);
  
  	IF_AFDATA_LOCK(ifp);
  	for (dp = domains; dp; dp = dp->dom_next) {
 _______________________________________________
 svn-src-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscribe@freebsd.org"
 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/131310: commit references a PR
Date: Fri, 10 Apr 2009 19:16:29 +0000 (UTC)

 Author: mlaier
 Date: Fri Apr 10 19:16:14 2009
 New Revision: 190903
 URL: http://svn.freebsd.org/changeset/base/190903
 
 Log:
   Follow up for r190895  It's not only the "all" group that is affected, but
   all groups on the given interface.
   
   PR:		kern/130977, kern/131310
   MFC after:	3 days (%vnet)
 
 Modified:
   head/sys/net/if.c
 
 Modified: head/sys/net/if.c
 ==============================================================================
 --- head/sys/net/if.c	Fri Apr 10 18:46:46 2009	(r190902)
 +++ head/sys/net/if.c	Fri Apr 10 19:16:14 2009	(r190903)
 @@ -141,6 +141,7 @@ static int	if_delmulti_locked(struct ifn
  static void	do_link_state_change(void *, int);
  static int	if_getgroup(struct ifgroupreq *, struct ifnet *);
  static int	if_getgroupmembers(struct ifgroupreq *);
 +static void	if_delgroups(struct ifnet *);
  
  #ifdef INET6
  /*
 @@ -887,7 +888,7 @@ if_detach(struct ifnet *ifp)
  	rt_ifannouncemsg(ifp, IFAN_DEPARTURE);
  	EVENTHANDLER_INVOKE(ifnet_departure_event, ifp);
  	devctl_notify("IFNET", ifp->if_xname, "DETACH", NULL);
 -	if_delgroup(ifp, IFG_ALL);
 +	if_delgroups(ifp);
  
  	IF_AFDATA_LOCK(ifp);
  	for (dp = domains; dp; dp = dp->dom_next) {
 @@ -1025,6 +1026,54 @@ if_delgroup(struct ifnet *ifp, const cha
  }
  
  /*
 + * Remove an interface from all groups
 + */
 +static void
 +if_delgroups(struct ifnet *ifp)
 +{
 +	INIT_VNET_NET(ifp->if_vnet);
 +	struct ifg_list		*ifgl;
 +	struct ifg_member	*ifgm;
 +	char groupname[IFNAMSIZ];
 +
 +	IFNET_WLOCK();
 +	while (!TAILQ_EMPTY(&ifp->if_groups)) {
 +		ifgl = TAILQ_FIRST(&ifp->if_groups);
 +
 +		strlcpy(groupname, ifgl->ifgl_group->ifg_group, IFNAMSIZ);
 +
 +		IF_ADDR_LOCK(ifp);
 +		TAILQ_REMOVE(&ifp->if_groups, ifgl, ifgl_next);
 +		IF_ADDR_UNLOCK(ifp);
 +
 +		TAILQ_FOREACH(ifgm, &ifgl->ifgl_group->ifg_members, ifgm_next)
 +			if (ifgm->ifgm_ifp == ifp)
 +				break;
 +
 +		if (ifgm != NULL) {
 +			TAILQ_REMOVE(&ifgl->ifgl_group->ifg_members, ifgm,
 +			    ifgm_next);
 +			free(ifgm, M_TEMP);
 +		}
 +
 +		if (--ifgl->ifgl_group->ifg_refcnt == 0) {
 +			TAILQ_REMOVE(&V_ifg_head, ifgl->ifgl_group, ifg_next);
 +			EVENTHANDLER_INVOKE(group_detach_event,
 +			    ifgl->ifgl_group);
 +			free(ifgl->ifgl_group, M_TEMP);
 +		}
 +		IFNET_WUNLOCK();
 +
 +		free(ifgl, M_TEMP);
 +
 +		EVENTHANDLER_INVOKE(group_change_event, groupname);
 +
 +		IFNET_WLOCK();
 +	}
 +	IFNET_WUNLOCK();
 +}
 +
 +/*
   * Stores all groups from an interface in memory pointed
   * to by data
   */
 _______________________________________________
 svn-src-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscribe@freebsd.org"
 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: kern/131310: commit references a PR
Date: Mon, 13 Apr 2009 22:47:12 +0000 (UTC)

 Author: mlaier
 Date: Mon Apr 13 22:17:03 2009
 New Revision: 191025
 URL: http://svn.freebsd.org/changeset/base/191025
 
 Log:
   MFH r190903 & r190895:
     Remove interfaces from interface groups on detach.
   
   Reported by:	various
   Submitted by:	Mikolaj Golub (r190895)
   PR:		kern/130977, kern/131310
   Approved by:	re (gnn)
 
 Modified:
   stable/7/sys/   (props changed)
   stable/7/sys/contrib/pf/   (props changed)
   stable/7/sys/dev/ath/ath_hal/   (props changed)
   stable/7/sys/dev/cxgb/   (props changed)
   stable/7/sys/net/if.c
 
 Modified: stable/7/sys/net/if.c
 ==============================================================================
 --- stable/7/sys/net/if.c	Mon Apr 13 21:04:53 2009	(r191024)
 +++ stable/7/sys/net/if.c	Mon Apr 13 22:17:03 2009	(r191025)
 @@ -128,6 +128,7 @@ static void	if_start_deferred(void *cont
  static void	do_link_state_change(void *, int);
  static int	if_getgroup(struct ifgroupreq *, struct ifnet *);
  static int	if_getgroupmembers(struct ifgroupreq *);
 +static void	if_delgroups(struct ifnet *);
  #ifdef INET6
  /*
   * XXX: declare here to avoid to include many inet6 related files..
 @@ -828,6 +829,7 @@ if_detach(struct ifnet *ifp)
  	rt_ifannouncemsg(ifp, IFAN_DEPARTURE);
  	EVENTHANDLER_INVOKE(ifnet_departure_event, ifp);
  	devctl_notify("IFNET", ifp->if_xname, "DETACH", NULL);
 +	if_delgroups(ifp);
  
  	IF_AFDATA_LOCK(ifp);
  	for (dp = domains; dp; dp = dp->dom_next) {
 @@ -963,6 +965,53 @@ if_delgroup(struct ifnet *ifp, const cha
  }
  
  /*
 + * Remove an interface from all groups
 + */
 +static void
 +if_delgroups(struct ifnet *ifp)
 +{
 +	struct ifg_list		*ifgl;
 +	struct ifg_member	*ifgm;
 +	char groupname[IFNAMSIZ];
 +
 +	IFNET_WLOCK();
 +	while (!TAILQ_EMPTY(&ifp->if_groups)) {
 +		ifgl = TAILQ_FIRST(&ifp->if_groups);
 +
 +		strlcpy(groupname, ifgl->ifgl_group->ifg_group, IFNAMSIZ);
 +
 +		IF_ADDR_LOCK(ifp);
 +		TAILQ_REMOVE(&ifp->if_groups, ifgl, ifgl_next);
 +		IF_ADDR_UNLOCK(ifp);
 +
 +		TAILQ_FOREACH(ifgm, &ifgl->ifgl_group->ifg_members, ifgm_next)
 +			if (ifgm->ifgm_ifp == ifp)
 +				break;
 +
 +		if (ifgm != NULL) {
 +			TAILQ_REMOVE(&ifgl->ifgl_group->ifg_members, ifgm,
 +			    ifgm_next);
 +			free(ifgm, M_TEMP);
 +		}
 +
 +		if (--ifgl->ifgl_group->ifg_refcnt == 0) {
 +			TAILQ_REMOVE(&ifg_head, ifgl->ifgl_group, ifg_next);
 +			EVENTHANDLER_INVOKE(group_detach_event,
 +			    ifgl->ifgl_group);
 +			free(ifgl->ifgl_group, M_TEMP);
 +		}
 +		IFNET_WUNLOCK();
 +
 +		free(ifgl, M_TEMP);
 +
 +		EVENTHANDLER_INVOKE(group_change_event, groupname);
 +
 +		IFNET_WLOCK();
 +	}
 +	IFNET_WUNLOCK();
 +}
 +
 +/*
   * Stores all groups from an interface in memory pointed
   * to by data
   */
 _______________________________________________
 svn-src-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-src-all
 To unsubscribe, send any mail to "svn-src-all-unsubscribe@freebsd.org"
 
State-Changed-From-To: open->closed 
State-Changed-By: mlaier 
State-Changed-When: Mon Apr 13 23:35:02 UTC 2009 
State-Changed-Why:  
Fix commited to head and stable/7.  Thanks. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=131310 
>Unformatted:
