[Bug 278171] Reproducible kernel crash on 14.0-RELEASE and 14.0-STABLE

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 04 Apr 2024 16:42:24 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278171

            Bug ID: 278171
           Summary: Reproducible kernel crash on 14.0-RELEASE and
                    14.0-STABLE
           Product: Base System
           Version: 14.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: thomas.dreibholz@gmail.com

Created attachment 249709
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=249709&action=edit
PCAP trace of the SCTP communication

I made some tests with rsplib (https://github.com/dreibh/rsplib) on freshly
installed FreeBSD VMs (14.0-RELEASE and 14.0-STABLE) under VirtualBox as well
as Proxmox. With the following simple steps, I can reproducibly crash all these
systems:

Build:
git clone https://github.com/dreibh/rsplib
cd rsplib
cmake . -DENABLE_QT=OFF
make
cd src
./rspregistrar

In another shell, or on another machine in the same network:
./rspserver
=> crash with reboot

Background:
rspserver finds rspregistrar by its ASAP Announces via UDP. Then, it
establishes an SCTP association via SCTP 1-to-many-style socket calls. For the
established association to rspregistrar, it calls sctp_peeloff() to get a new
socket descriptor. I suspect that something is wrong here with SCTP, leading to
the crash.

Attachments:
* A PCAP trace on another machine, where rspregistrar had been started, in
order to get a PCAP trace up to the crash.

-- 
You are receiving this mail because:
You are the assignee for the bug.