NetBSD Problem Report #59675

From sc.dying@gmail.com  Mon Sep 29 07:02:16 2025
Return-Path: <sc.dying@gmail.com>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 3C3B21A9239
	for <gnats-bugs@gnats.NetBSD.org>; Mon, 29 Sep 2025 07:02:16 +0000 (UTC)
Message-Id: <0bb4822a-540d-476f-8d23-b63062e046eb@gmail.com>
Date: Mon, 29 Sep 2025 07:01:52 +0000
From: sc.dying@gmail.com
To: gnats-bugs@NetBSD.org
Subject: pppoe crashes kernel

>Number:         59675
>Category:       kern
>Synopsis:       pppoe crashes kernel
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Sep 29 07:05:00 +0000 2025
>Originator:     sc.dying@gmail.com
>Release:        NetBSD/amd64 11.0_BETA on 20250816163208Z
>Organization:
>Environment:
System: NetBSD  11.0_BETA NetBSD 11.0_BETA (GENERIC) #0: Sat Aug 16 16:32:08 UTC 2025 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64 x86_64
Architecture: x86_64
Machine: amd64
>Description:
I'm trying to update my amd64 pppoe client to 11.0_BETA.
Before update userlands, I replace only kernel, reboot,
and start pppoe session. one sec later, kernel crashed.

(ifconfig pppoe0 up)
[ 829.0468355] panic: kernel diagnostic assertion "(kpreempt_disabled() || cpu_softintr_p() || ISSET(curlwp->l_pflag, LP_BOUND))" failed: file "/usr/src/sys/kern/subr_psref.c", line 344 passive references are CPU-local, but preemption is enabled and the caller is not in a softint or CPU-bound LWP
[ 829.0768346] cpu1: Begin traceback...
[ 829.0768346] vpanic() at netbsd:vpanic+0x171
[ 829.0768346] kern_assert() at netbsd:kern_assert+0x4b
[ 829.0868350] psref_release() at netbsd:psref_release+0x1b5
[ 829.0968348] sppp_ipcp_tlu() at netbsd:sppp_ipcp_tlu+0x212
[ 829.0968348] sppp_wq_work() at netbsd:sppp_wq_work+0x48
[ 829.1068354] workqueue_worker() at netbsd:workqueue_worker+0xfa
[ 829.1168350] cpu1: End traceback...

-current kernel on amd64 crashes, too.
But Raspberry PI 3b+ /w 11.99.3/earmv7hf does not.


>How-To-Repeat:
	Please see Description.
	As a PPPoE server I build 11.99.3/earmv7hf kernel with
	PPPOE_SERVER and run it on rpi3b+.

Server:
!pppoectl -e ure1 $int
!pppoectl $int \
	authproto=chap \
	myauthname=myname \
	myauthsecret=mysecret \
	hisauthproto=none
!ifconfig $int link0
inet 10.64.0.1 10.64.0.2 down

Client:
!pppoectl -e re1 $int
!pppoectl $int \
	authproto=chap \
	myauthname=myname \
	myauthsecret=mysecret \
	hisauthproto=none \
	query-dns=3 \
	max-auth-failure=3
inet 0.0.0.0 0.0.0.1


>Fix:
	Yes, please.

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.47 2022/09/11 19:34:41 kim Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2025 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.