[Bug 261167] wpa_supplicant kernel panic entering multi-user mode after running /etc/netstart in single user mode
Date: Thu, 13 Jan 2022 03:51:11 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=261167
--- Comment #1 from Graham Perrin <grahamperrin@gmail.com> ---
Created attachment 230974
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=230974&action=edit
core.txt.3 is too large for Bugzilla; compressed
Unread portion of the kernel message buffer:
#0 0xffffffff80c71b51 at witness_debugger+0x71
#1 0xffffffff80c72caa at witness_warn+0x3ea
#2 0xffffffff810c8a96 at trap_pfault+0x86
#3 0xffffffff8109a298 at calltrap+0x8
#4 0xffffffff80d96e5b at ieee80211_sta_join1+0xbb
#5 0xffffffff80d97d48 at ieee80211_sta_join+0x428
#6 0xffffffff80d8bea7 at ieee80211_ioctl_setmlme+0x287
#7 0xffffffff80d8988a at ieee80211_ioctl_set80211+0x5da
#8 0xffffffff80d8843b at ieee80211_ioctl+0x31b
#9 0xffffffff80d29f84 at ifioctl+0x7f4
#10 0xffffffff80c77482 at kern_ioctl+0x202
#11 0xffffffff80c771d6 at sys_ioctl+0x126
#12 0xffffffff810c93be at amd64_syscall+0x12e
#13 0xffffffff8109abab at fast_syscall_common+0xf8
Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x1f
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff80d9a4c4
stack pointer = 0x28:0xfffffe01121269a0
frame pointer = 0x28:0xfffffe01121269b0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 28578 (wpa_supplicant)
trap number = 12
panic: page fault
cpuid = 1
time = 1642034588
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0112126760
vpanic() at vpanic+0x17f/frame 0xfffffe01121267b0
panic() at panic+0x43/frame 0xfffffe0112126810
trap_fatal() at trap_fatal+0x385/frame 0xfffffe0112126870
trap_pfault() at trap_pfault+0xab/frame 0xfffffe01121268d0
calltrap() at calltrap+0x8/frame 0xfffffe01121268d0
--- trap 0xc, rip = 0xffffffff80d9a4c4, rsp = 0xfffffe01121269a0, rbp =
0xfffffe01121269b0 ---
ieee80211_del_node_nt() at ieee80211_del_node_nt+0x34/frame 0xfffffe01121269b0
ieee80211_sta_join1() at ieee80211_sta_join1+0xbb/frame 0xfffffe0112126a00
ieee80211_sta_join() at ieee80211_sta_join+0x428/frame 0xfffffe0112126a50
ieee80211_ioctl_setmlme() at ieee80211_ioctl_setmlme+0x287/frame
0xfffffe0112126af0
ieee80211_ioctl_set80211() at ieee80211_ioctl_set80211+0x5da/frame
0xfffffe0112126b60
ieee80211_ioctl() at ieee80211_ioctl+0x31b/frame 0xfffffe0112126bd0
ifioctl() at ifioctl+0x7f4/frame 0xfffffe0112126cc0
kern_ioctl() at kern_ioctl+0x202/frame 0xfffffe0112126d30
sys_ioctl() at sys_ioctl+0x126/frame 0xfffffe0112126e00
amd64_syscall() at amd64_syscall+0x12e/frame 0xfffffe0112126f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0112126f30
--- syscall (54, FreeBSD ELF64, sys_ioctl), rip = 0x3103d923d01a, rsp =
0x7fffffffe578, rbp = 0x7fffffffe5d0 ---
KDB: enter: panic
Uptime: 17m7s
(ada0:ahcich0:0:0:0): spin-down
Dumping 1978 out of 16265 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%
__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
55 __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" (offsetof(struct
pcpu,
(kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1 doadump (textdump=textdump@entry=1)
at /usr/src/sys/kern/kern_shutdown.c:399
#2 0xffffffff80c00ba4 in kern_reboot (howto=260)
at /usr/src/sys/kern/kern_shutdown.c:487
#3 0xffffffff80c0100e in vpanic (fmt=0xffffffff811d5bb8 "%s",
ap=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:920
#4 0xffffffff80c00d63 in panic (fmt=<unavailable>)
at /usr/src/sys/kern/kern_shutdown.c:844
#5 0xffffffff810c8a05 in trap_fatal (frame=0xfffffe01121268e0, eva=31)
at /usr/src/sys/amd64/amd64/trap.c:946
#6 0xffffffff810c8abb in trap_pfault (frame=0xfffffe01121268e0,
usermode=false, signo=<optimized out>, ucode=<optimized out>)
at /usr/src/sys/amd64/amd64/trap.c:765
#7 <signal handler called>
#8 0xffffffff80d9a4c4 in ieee80211_del_node_nt (nt=0xfffffe00c7213640,
ni=0xfffffe0136ddc000) at /usr/src/sys/net80211/ieee80211_node.c:1379
#9 0xffffffff80d96e5b in ieee80211_sta_join1 (
selbs=selbs@entry=0xfffffe01165ba000)
at /usr/src/sys/net80211/ieee80211_node.c:865
#10 0xffffffff80d97d48 in ieee80211_sta_join (
vap=vap@entry=0xfffff80004851000, chan=<optimized out>,
se=<optimized out>) at /usr/src/sys/net80211/ieee80211_node.c:1040
#11 0xffffffff80d8bea7 in setmlme_assoc_sta (vap=0xfffff80004851000,
mac=0xfffffe0112126a94 "X\037(t\a\250piano", ssid_len=<optimized out>,
ssid=<optimized out>) at /usr/src/sys/net80211/ieee80211_ioctl.c:1576
#12 ieee80211_ioctl_setmlme (vap=vap@entry=0xfffff80004851000,
ireq=ireq@entry=0xfffffe0112126d50)
at /usr/src/sys/net80211/ieee80211_ioctl.c:1633
#13 0xffffffff80d8988a in ieee80211_ioctl_set80211 (
vap=vap@entry=0xfffff80004851000, cmd=<optimized out>,
ireq=ireq@entry=0xfffffe0112126d50)
at /usr/src/sys/net80211/ieee80211_ioctl.c:2953
#14 0xffffffff80d8843b in ieee80211_ioctl (ifp=<optimized out>,
cmd=2149607914, data=0xfffffe0112126d50 "wlan0")
at /usr/src/sys/net80211/ieee80211_ioctl.c:3633
#15 0xffffffff80d29f84 in ifioctl (so=0xfffff80013ce7780,
cmd=<optimized out>, data=<optimized out>, td=0xfffffe0114643720)
at /usr/src/sys/net/if.c:3022
#16 0xffffffff80c77482 in fo_ioctl (fp=<optimized out>, com=2149607914,
data=0xffffffff8120d151, active_cred=0xfffffe0136ddc018,
td=0xfffffe0114643720) at /usr/src/sys/sys/file.h:364
#17 kern_ioctl (td=<optimized out>, td@entry=0xfffffe0114643720,
fd=<optimized out>, com=com@entry=2149607914,
data=0xffffffff8120d151 "/usr/src/sys/net80211/ieee80211_node.c",
data@entry=0xfffffe0112126d50 "wlan0")
at /usr/src/sys/kern/sys_generic.c:803
#18 0xffffffff80c771d6 in sys_ioctl (td=0xfffffe0114643720,
uap=0xfffffe0114643b10) at /usr/src/sys/kern/sys_generic.c:711
#19 0xffffffff810c93be in syscallenter (td=<optimized out>)
at /usr/src/sys/amd64/amd64/../../kern/subr_syscall.c:189
#20 amd64_syscall (td=0xfffffe0114643720, traced=0)
at /usr/src/sys/amd64/amd64/trap.c:1191
#21 <signal handler called>
#22 0x00003103d923d01a in ?? ()
Backtrace stopped: Cannot access memory at address 0x7fffffffe578
(kgdb)
--
You are receiving this mail because:
You are the assignee for the bug.