From nobody Mon Feb 12 10:23:54 2024 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TYLCg1k7vz59WZ4 for ; Mon, 12 Feb 2024 10:23:59 +0000 (UTC) (envelope-from tuexen@freebsd.org) Received: from drew.franken.de (mail-n.franken.de [193.175.24.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.franken.de", Issuer "Sectigo RSA Domain Validation Secure Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TYLCf5zNtz4RCl for ; Mon, 12 Feb 2024 10:23:58 +0000 (UTC) (envelope-from tuexen@freebsd.org) Authentication-Results: mx1.freebsd.org; none Received: from smtpclient.apple (unknown [IPv6:2a02:8109:1140:c3d:2000:826:171b:5496]) (Authenticated sender: micmac) by drew.franken.de (Postfix) with ESMTPSA id 2998A721E2806; Mon, 12 Feb 2024 11:23:55 +0100 (CET) Content-Type: text/plain; charset=us-ascii List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.400.31\)) Subject: Re: kernel crash in tcp_subr.c:2386 From: tuexen@freebsd.org In-Reply-To: Date: Mon, 12 Feb 2024 11:23:54 +0100 Cc: current@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: <625E0EA4-9413-45AD-B05C-500833A1D527@freebsd.org> References: <1707730255-92643-mlmmj-52dbb05a@FreeBSD.org> To: Alexander Leidinger X-Mailer: Apple Mail (2.3774.400.31) X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00, T_SCC_BODY_TEXT_LINE autolearn=disabled version=3.4.1 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mail-n.franken.de X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:680, ipnet:193.174.0.0/15, country:DE] X-Rspamd-Queue-Id: 4TYLCf5zNtz4RCl X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated > On Feb 12, 2024, at 10:36, Alexander Leidinger = wrote: >=20 > Hi, >=20 > I got a coredump with sources from 2024-02-10-144617 (GMT+0100): Hi Alexander, we are aware of this problem, but haven't found a way to reproduce it. Do you know how to reproduce this? Best regards Michael > ---snip--- > __curthread () at = /space/system/usr_src/sys/amd64/include/pcpu_aux.h:57 > 57 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" = (offsetof(struct pcpu, > (kgdb) #0 __curthread () at = /space/system/usr_src/sys/amd64/include/pcpu_aux.h:57 > td =3D > #1 doadump (textdump=3Dtextdump@entry=3D1) > at /space/system/usr_src/sys/kern/kern_shutdown.c:403 > error =3D 0 > coredump =3D > #2 0xffffffff8052fe85 in kern_reboot (howto=3D260) > at /space/system/usr_src/sys/kern/kern_shutdown.c:521 > once =3D 0 > __pc =3D > #3 0xffffffff80530382 in vpanic ( > fmt=3D0xffffffff808df476 "Assertion %s failed at %s:%d", > ap=3Dap@entry=3D0xfffffe08a079ebf0) > at /space/system/usr_src/sys/kern/kern_shutdownc:973 > buf =3D "Assertion !callout_active(&tp->t_callout) failed at = /space/system/usr_src/sys/netinet/tcp_subr.c:2386", '\000' > __pc =3D > __pc =3D > __pc =3D > other_cpus =3D {__bits =3D {14680063, 0 }} > td =3D 0xfffff8068ef99740 > bootopt =3D > newpanic =3D > #4 0xffffffff805301d3 in panic (fmt=3D) > at /space/system/usr_src/sys/kern/kern_shutdown.c:889 > ap =3D {{gp_offset =3D 32, fp_offset =3D 48, > overflow_arg_area =3D 0xfffffe08a079ec20, > reg_save_area =3D 0xfffffe08a079ebc0}} > #5 0xffffffff806c9d8c in tcp_discardcb = (tp=3Dtp@entry=3D0xfffff80af441ba80) > at /space/system/usr_src/sys/netinet/tcp_subr.c:2386 > inp =3D 0xfffff80af441ba80 > so =3D 0xfffff804d23d2780 > m =3D > isipv6 =3D > #6 0xffffffff806d6291 in tcp_usr_detach (so=3D0xfffff804d23d2780) > at /space/system/usr_src/sys/netinet/tcp_usrreq.c:214 > inp =3D 0xfffff80af441ba80 > tp =3D 0xfffff80af441ba80 > #7 0xffffffff805dba57 in sofree (so=3D0xfffff804d23d2780) > at /space/system/usr_src/sys/kern/uipc_socket.c:1205 > pr =3D 0xffffffff80a8bd18 > #8 sorele_locked (so=3Dso@entry=3D0xfffff804d23d2780) > at /space/system/usr_src/sys/kern/uipc_socket.c:1232 > No locals. > #9 0xffffffff805dc8c0 in soclose (so=3D0xfffff804d23d2780) > at /space/system/usr_src/sys/kern/uipc_socket.c:1302 > lqueue =3D {tqh_first =3D 0xfffff8068ef99740, > tqh_last =3D 0xfffffe08a079ed40} > error =3D 0 > saved_vnet =3D 0x0 > last =3D > listening =3D > #10 0xffffffff804ccbd1 in fo_close (fp=3D0xfffff805f2dfc500, = td=3D) > at /space/system/usr_src/sys/sys/file.h:390 > No locals. > #11 _fdrop (fp=3Dfp@entry=3D0xfffff805f2dfc500, td=3D, > td@entry=3D0xfffff8068ef99740) > at /space/system/usr_src/sys/kern/kern_descrip.c:3666 > count =3D > error =3D > #12 0xffffffff804d02f3 in closef (fp=3Dfp@entry=3D0xfffff805f2dfc500, > td=3Dtd@entry=3D0xfffff8068ef99740) > at /space/system/usr_src/sys/kern/kern_descrip.c:2839 > _error =3D 0 > _fp =3D 0xfffff805f2dfc500 > lf =3D {l_start =3D -8791759350504, l_len =3D -8791759350528, = l_pid =3D 0, > l_type =3D 0, l_whence =3D 0, l_sysid =3D 0} > vp =3D > fdtol =3D > fdp =3D > #13 0xffffffff804cd50c in closefp_impl (fdp=3D0xfffffe07afebf860, = fd=3D19, > fp=3D0xfffff805f2dfc500, td=3D0xfffff8068ef99740, audit=3D) > at /space/system/usr_src/sys/kern/kern_descrip.c:1315 > error =3D > #14 closefp (fdp=3D0xfffffe07afebf860, fd=3D19, fp=3D0xfffff805f2dfc500,= > td=3D0xfffff8068ef99740, holdleaders=3Dtrue, audit=3D) > at /space/system/usr_src/sys/kern/kern_descrip.c:1372 > No locals. > #15 0xffffffff808597d6 in syscallenter (td=3D0xfffff8068ef99740) > at = /space/system/usr_src/sys/amd64/amd64/../../kern/subr_syscall.c:186 > se =3D 0xffffffff80a48330 > p =3D 0xfffffe07f29995c0 > sa =3D 0xfffff8068ef99b30 > error =3D > sy_thr_static =3D > traced =3D > #16 amd64_syscall (td=3D0xfffff8068ef99740, traced=3D0) > at /space/system/usr_src/sys/amd64/amd64/trap.c:1192 > ksi =3D {ksi_link =3D {tqe_next =3D 0xfffffe08a079ef30, > tqe_prev =3D 0xffffffff808588af }, ksi_info =3D = { > si_signo =3D 1, si_errno =3D 0, si_code =3D 2015268872, = si_pid =3D -512, > si_uid =3D 2398721856, si_status =3D -2042, > si_addr =3D 0xfffffe08a079ef40, si_value =3D {sival_int =3D = -1602621824, > sival_ptr =3D 0xfffffe08a079ee80, sigval_int =3D = -1602621824, > sigval_ptr =3D 0xfffffe08a079ee80}, _reason =3D {_fault =3D= { > _trapno =3D 1489045984}, _timer =3D {_timerid =3D = 1489045984, > _overrun =3D 17999}, _mesgq =3D {_mqd =3D 1489045984}, = _poll =3D { > _band =3D 77306605406688}, _capsicum =3D {_syscall =3D = 1489045984}, > __spare__ =3D {__spare1__ =3D 77306605406688, __spare2__ = =3D { > 1489814048, 17999, 208, 0, 0, 0, 992191072}}}}, > ksi_flags =3D 975329968, ksi_sigq =3D 0xffffffff8082f8f3 = } > #17 > No locals. > #18 0x00003af13b17fc9a in ?? () > No symbol table info available. > Backtrace stopped: Cannot access memory at address 0x3af13a225ab8 > ---snip--- >=20 > Any ideas? >=20 > Due to another issue in userland, I updated to 2024-02-11-212006, but = I have the above mentioned version and core still in a BE if needed >=20 > Bye, > Alexander.