Re: bird crashes kernel

It's probably worth capturing output of route -n monitor while this is happening.

Userland-triggerable kernel panic is definitely a bug of some sort, so please
send it to bugs@.

On 2020-04-01, Bastien Durel <bastien@durel.org> wrote:
> Hello,
>
> I tried to replace ospfd & ospf6d by bird, as they don't seem to handle
> wireguard tunnels well, but soon after bird starts (or stops), I get a
> panic (copied from console):
>
> fremen# /etc/rc.d/bird stop
> birduvm_fault(0xfffffd813f96b000, 0x18, 0, 1) -> e
> fatal page fault in supervisor mode
> trap type 6 code 0 rip ffffffff81a49c6b cs 8 rflags 10206 cr2 18 cpl 0 rsp ffff8000336d08c0
> gsbase 0xffffffff81f44ff0 kgsbase 0x0
> panic: trap type 6, code=0, pc=ffffffff81a49c6b
> Starting stack trace...
> panic() at panic+0x11b
> kerntrap(ffff8000336d0810) at kerntrap+0x114
> alltraps_kern_meltdown(6,28001,0,0,ffff8000015b2dd0,18) at alltraps_kern_meltdown+0x7b
> ml_purge(18) at ml_purge+0x1b
> arp_rtrequest() at arp_rtrequest+0x180
> rtm_output(ffff8000014b6600,ffff8000336d0ad0,ffff8000336d0a28,40,0) at rtm_output+0x41d
> route_output(fffffd808b525500,fffffd813212c090,0,0) at route_output+0x329
> route_usrreq(fffffd813212c090,9,fffffd808b525500,0,0,ffff800033566548) at route_usrreq+0x207
> sosend(fffffd813212c090,0,ffff8000336d0d28,0,0,80) at sosend+0x383
> dofilewritev(ffff800033566548,5,ffff8000336d0d28,0,ffff8000336d0e00) at dofilewritev+0xf9
> sys_write(ffff800033566548,ffff8000336d0da0,ffff8000336d0e00) at sys_write+0x51
> syscall(ffff8000336d0e70) at syscall+0x389
> Xsyscall(6,4,1eee94104820,4,1eee9c8370d8,1eeec4584c80) at Xsyscall+0x128
> end of kernel
> end trace frame: 0x7f7fffff62c0, count: 244
> End of stack trace.
> syncing disks...10 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 giving up
>
> Here is the dmesg :
>
> [...]
> arpresolve: 10.42.42.0: route contains no arp information
> arpresolve: 10.42.42.0: route contains no arp information
> arpresolve: 10.42.42.0: route contains no arp information
> uvm_fault(0xfffffd813f96b000, 0x18, 0, 1) -> e
> fatal page fault in supervisor mode
> trap type 6 code 0 rip ffffffff81a49c6b cs 8 rflags 10206 cr2 18 cpl 0 rsp ffff8000336d08c0
> gsbase 0xffffffff81f44ff0 kgsbase 0x0
> panic: trap type 6, code=0, pc=ffffffff81a49c6b
> Starting stack trace...
> panic() at panic+0x11b
> kerntrap(ffff8000336d0810) at kerntrap+0x114
> alltraps_kern_meltdown(6,28001,0,0,ffff8000015b2dd0,18) at alltraps_kern_meltdown+0x7b
> ml_purge(18) at ml_purge+0x1b
> arp_rtrequest() at arp_rtrequest+0x180
> rtm_output(ffff8000014b6600,ffff8000336d0ad0,ffff8000336d0a28,40,0) at rtm_output+0x41d
> route_output(fffffd808b525500,fffffd813212c090,0,0) at route_output+0x329
> route_usrreq(fffffd813212c090,9,fffffd808b525500,0,0,ffff800033566548) at route_usrreq+0x207
> sosend(fffffd813212c090,0,ffff8000336d0d28,0,0,80) at sosend+0x383
> dofilewritev(ffff800033566548,5,ffff8000336d0d28,0,ffff8000336d0e00) at dofilewritev+0xf9
> sys_write(ffff800033566548,ffff8000336d0da0,ffff8000336d0e00) at sys_write+0x51
> syscall(ffff8000336d0e70) at syscall+0x389
> Xsyscall(6,4,1eee94104820,4,1eee9c8370d8,1eeec4584c80) at Xsyscall+0x128
> end of kernel
> end trace frame: 0x7f7fffff62c0, count: 244
> End of stack trace.
> syncing disks...presolve: 10.42.42.0: route contains no arp informat
> OpenBSD 6.6 (GENERIC.MP) #7: Thu Mar 12 11:55:22 MDT 2020
> root@syspatch-66-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 4196302848 (4001MB)
> avail mem = 4056403968 (3868MB)
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 2.8 @ 0x8ce22000 (85 entries)
> bios0: vendor American Megatrends Inc. version "5.12" date 11/23/2018
> bios0: Default string Default string
> acpi0 at bios0: ACPI 6.0
> acpi0: sleep states S0 S3 S5
> acpi0: tables DSDT FACP APIC FPDT FIDT MCFG SSDT SSDT HPET SSDT SSDT UEFI SSDT LPIT SSDT SSDT SSDT SSDT DBGP DBG2 SSDT DMAR ASF! WSMT
> acpi0: wakeup devices RP09(S3) PXSX(S3) RP10(S3) PXSX(S3) RP11(S3) PXSX(S3) RP12(S3) PXSX(S3) RP13(S3) PXSX(S3) RP01(S3) PXSX(S3) RP02(S3) PXSX(S3) RP03(S3) PXSX(S3) [...]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Celeron(R) CPU 3855U @ 1.60GHz, 1596.83 MHz, 06-4e-03
> cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,ERMS,INVPCID,RDSEED,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
> cpu0: apic clock running at 24MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1.1.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Celeron(R) CPU 3855U @ 1.60GHz, 1596.29 MHz, 06-4e-03
> cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,ERMS,INVPCID,RDSEED,SMAP,CLFLUSHOPT,PT,MD_CLEAR,TSXFA,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 120 pins
> acpimcfg0 at acpi0
> acpimcfg0: addr 0xe0000000, bus 0-255
> acpihpet0 at acpi0: 23999999 Hz
> acpiprt0 at acpi0: bus 0 (PCI0)
> acpiprt1 at acpi0: bus -1 (PEG0)
> acpiprt2 at acpi0: bus -1 (PEG1)
> acpiprt3 at acpi0: bus -1 (PEG2)
> acpiprt4 at acpi0: bus -1 (RP09)
> acpiprt5 at acpi0: bus -1 (RP10)
> acpiprt6 at acpi0: bus -1 (RP11)
> acpiprt7 at acpi0: bus -1 (RP12)
> acpiprt8 at acpi0: bus -1 (RP13)
> acpiprt9 at acpi0: bus 1 (RP01)
> acpiprt10 at acpi0: bus 2 (RP02)
> acpiprt11 at acpi0: bus 3 (RP03)
> acpiprt12 at acpi0: bus 4 (RP04)
> acpiprt13 at acpi0: bus 5 (RP05)
> acpiprt14 at acpi0: bus 6 (RP06)
> acpiprt15 at acpi0: bus -1 (RP07)
> acpiprt16 at acpi0: bus -1 (RP08)
> acpiprt17 at acpi0: bus -1 (RP17)
> acpiprt18 at acpi0: bus -1 (RP18)
> acpiprt19 at acpi0: bus -1 (RP19)
> acpiprt20 at acpi0: bus -1 (RP20)
> acpiprt21 at acpi0: bus -1 (RP21)
> acpiprt22 at acpi0: bus -1 (RP22)
> acpiprt23 at acpi0: bus -1 (RP23)
> acpiprt24 at acpi0: bus -1 (RP24)
> acpiprt25 at acpi0: bus -1 (RP14)
> acpiprt26 at acpi0: bus -1 (RP15)
> acpiprt27 at acpi0: bus -1 (RP16)
> acpiec0 at acpi0: not present
> acpicpu0 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), C1(1000@1 mwait.1), PSS
> acpicpu1 at acpi0: C3(200@1034 mwait.1@0x60), C2(200@151 mwait.1@0x33), C1(1000@1 mwait.1), PSS
> acpipwrres0 at acpi0: FN00, resource for FAN0
> acpipwrres1 at acpi0: FN01, resource for FAN1
> acpipwrres2 at acpi0: FN02, resource for FAN2
> acpipwrres3 at acpi0: FN03, resource for FAN3
> acpipwrres4 at acpi0: FN04, resource for FAN4
> acpitz0 at acpi0: critical temperature is 119 degC
> acpitz1 at acpi0: critical temperature is 119 degC
> acpipci0 at acpi0 PCI0: 0x00000000 0x00000011 0x00000001
> acpicmos0 at acpi0
> "INT344B" at acpi0 not configured
> acpibtn0 at acpi0: SLPB
> "PNP0C14" at acpi0 not configured
> "INT33A1" at acpi0 not configured
> acpibtn1 at acpi0: PWRB
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> "PNP0C0B" at acpi0 not configured
> acpivideo0 at acpi0: GFX0
> acpivout0 at acpivideo0: DD1F
> cpu0: using VERW MDS workaround (except on vmm entry)
> cpu0: Enhanced SpeedStep 1596 MHz: speeds: 1601, 1600, 1500, 1400, 1300, 1200, 1100, 1000, 900, 800, 700, 600, 500, 400 MHz
> pci0 at mainbus0 bus 0
> pchb0 at pci0 dev 0 function 0 "Intel Core 6G Host" rev 0x08
> inteldrm0 at pci0 dev 2 function 0 "Intel HD Graphics 510" rev 0x07
> drm0 at inteldrm0
> inteldrm0: msi
> "Intel Core GMM" rev 0x00 at pci0 dev 8 function 0 not configured
> xhci0 at pci0 dev 20 function 0 "Intel 100 Series xHCI" rev 0x21: msi, xHCI 1.0
> usb0 at xhci0: USB revision 3.0
> uhub0 at usb0 configuration 1 interface 0 "Intel xHCI root hub" rev 3.00/1.00 addr 1
> pchtemp0 at pci0 dev 20 function 2 "Intel 100 Series Thermal" rev 0x21
> dwiic0 at pci0 dev 21 function 0 "Intel 100 Series I2C" rev 0x21: apic 2 int 16
> iic0 at dwiic0
> dwiic1 at pci0 dev 21 function 1 "Intel 100 Series I2C" rev 0x21: apic 2 int 17
> iic1 at dwiic1
> "Intel 100 Series MEI" rev 0x21 at pci0 dev 22 function 0 not configured
> ahci0 at pci0 dev 23 function 0 "Intel 100 Series AHCI" rev 0x21: msi, AHCI 1.3.1
> ahci0: PHY offline on port 0
> ahci0: port 1: 6.0Gb/s
> scsibus1 at ahci0: 32 targets
> sd0 at scsibus1 targ 1 lun 0: <ATA, KINGSTON SMS200S, 600A> naa.50026b7253081a83
> sd0: 28626MB, 512 bytes/sector, 58626288 sectors, thin
> ppb0 at pci0 dev 28 function 0 "Intel 100 Series PCIE" rev 0xf1: msi
> pci1 at ppb0 bus 1
> em0 at pci1 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:65
> ppb1 at pci0 dev 28 function 1 "Intel 100 Series PCIE" rev 0xf1: msi
> pci2 at ppb1 bus 2
> em1 at pci2 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:66
> ppb2 at pci0 dev 28 function 2 "Intel 100 Series PCIE" rev 0xf1: msi
> pci3 at ppb2 bus 3
> em2 at pci3 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:67
> ppb3 at pci0 dev 28 function 3 "Intel 100 Series PCIE" rev 0xf1: msi
> pci4 at ppb3 bus 4
> em3 at pci4 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:68
> ppb4 at pci0 dev 28 function 4 "Intel 100 Series PCIE" rev 0xf1: msi
> pci5 at ppb4 bus 5
> em4 at pci5 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:69
> ppb5 at pci0 dev 28 function 5 "Intel 100 Series PCIE" rev 0xf1: msi
> pci6 at ppb5 bus 6
> em5 at pci6 dev 0 function 0 "Intel I211" rev 0x03: msi, address 40:62:31:01:4b:6a
> "Intel 100 Series UART" rev 0x21 at pci0 dev 30 function 0 not configured
> pcib0 at pci0 dev 31 function 0 "Intel 100 Series LPC" rev 0x21
> "Intel 100 Series PMC" rev 0x21 at pci0 dev 31 function 2 not configured
> azalia0 at pci0 dev 31 function 3 "Intel 100 Series HD Audio" rev 0x21: msi
> azalia0: no supported codecs
> ichiic0 at pci0 dev 31 function 4 "Intel 100 Series SMBus" rev 0x21: apic 2 int 16
> iic2 at ichiic0
> isa0 at pcib0
> isadma0 at isa0
> com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
> com0: console
> com1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
> pcppi0 at isa0 port 0x61
> spkr0 at pcppi0
> vmm0 at mainbus0: VMX/EPT
> vscsi0 at root
> scsibus2 at vscsi0: 256 targets
> softraid0 at root
> scsibus3 at softraid0: 256 targets
> root on sd0a (d560a7ae33c40936.a) swap on sd0b dump on sd0b
> WARNING: / was not properly unmounted
> inteldrm0: 1024x768, 32bpp
> wsdisplay0 at inteldrm0 mux 1: console (std, vt100 emulation)
> wsdisplay0: screen 1-5 added (std, vt100 emulation)
> pppoe0: host unique tag found, but it belongs to a connection in state 3
> pppoe: received PADO but could not find request for it
>
> The network stops working as soon as I start bird, then the machine
> crashes after a while, or when I stop bird from console.
>
> Do you have hints about these problems ?
>
> Thanks,
>