From nobody Wed Dec 22 23:26:53 2021 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id A2F3C18F7D06 for ; Wed, 22 Dec 2021 23:26:53 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JK8bx3F4vz3LLN for ; Wed, 22 Dec 2021 23:26:53 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4D24525E33 for ; Wed, 22 Dec 2021 23:26:53 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 1BMNQrt5091626 for ; Wed, 22 Dec 2021 23:26:53 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 1BMNQrlG091625 for net@FreeBSD.org; Wed, 22 Dec 2021 23:26:53 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 260393] Page Fault tcp_output/tcp_input Date: Wed, 22 Dec 2021 23:26:53 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.0-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: ddobrev85@gmail.com X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1640215613; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=OCvUJgrsa9bNlPwkKkgsizbQxByGZnFmvlrB5Ikk/dU=; b=wz8F9pZ7uFHcoHwdmlVpxix3aKWZOsMKRiKigJhiD0b4o/ugaDb+vEc+zYC5LwoEZavD8E wwaSdVrkl1SXQFpS4xmurPPdGqCS5VUhrvHTTkup0tcFE2NTOsT6yp5uaw14uyXUi5BKWh jKnkuwgd3LiUIf+bCXV5SbARIWAdwhcSNDbps6jX+ZIiHYqTzF3j02cIeh8x2GazcKtwBy 72ZhRoVjHu3zh47+4xC2K2SG8zTGRLs4MHRcB3tE8uk4l7CwS3R1B2D+HmW3Ian9LqyLsE Oa1X7i+iDP+WDIvuvQpRwZh/S+7CbjyAWV2lwtyLZPfNewf5PD0OU4SYDTqSTQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1640215613; a=rsa-sha256; cv=none; b=o53FrmPx3wwtibut5JHKOxAOIah567vQMeMiwfz38JLDdk4e/SflEkiL+g9/DotGeaI2Jp 3/YFEOXgAF6JxGrgI6n0N4xWAkTBudmHYgAENcRM9zdP4mvuQ/0UKVWWxKfc7sqMqUygaT hghOoxAFOIkJHV4H5FvEUdvY4zFiaXIMpg17/gCQG10zPIz03HjO6yrhOhuBnVuviBXVEa 5J3UrcTm8FFL3hW/GX2+fbGhEZ+zAAun4iEd7vyeDcFQ+YEze0ctj/3AVYlHKiz5rsBiKG Xc3g7PPh/4jXtKc6W7Adx9SxmNYwNBLAS2Pogfe5q8bm6BYzyS/+hE+98mSaDw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D260393 --- Comment #67 from Dobri Dobrev --- (In reply to Michael Tuexen from comment #66) (kgdb) frame 12 #12 0xffffffff80e11a3b in tcp_m_copym (m=3D0x0, m@entry=3D0xfffff80bc680b50= 0, off0=3D1388, plen=3D, plen@entry=3D0xfffffe017fd6282c, segli= mit=3D1, seglimit@entry=3D0, segsize=3Dsegsize@entry=3D0, sb=3D,=20 hw_tls=3D) at /usr/src/sys/netinet/tcp_output.c:2011 2011 KASSERT(len =3D=3D M_COPYALL, (kgdb) print *(struct mbuf *)0xfffff80bc680b500 $1 =3D {{m_next =3D 0x0, m_slist =3D {sle_next =3D 0x0}, m_stailq =3D {stqe= _next =3D 0x0}}, {m_nextpkt =3D 0x0, m_slistpkt =3D {sle_next =3D 0x0}, m_stailqpkt =3D {stq= e_next =3D 0x0}},=20 m_data =3D 0xfffff8017874f000 "O\320mg\276\022\364u\353\271\061\270tI\356\063\227/\030\204\032d\\\252\274= \261`P=D2=B2\271\232F\343-\304\372\307<\031u\212\260\061=DF=90\264\306i\361= Vj\212\314=CF=93M\031R\257G\b\246\233\227\233,D\335C\220\273\022\025\223\25= 1\361\211\222e+0M)\201\233\034e'\222\203\242h\201\017w\026\065\365\242=D8= =AE\f\225\350\313\311\364$\244\262\265\370\375\237\f\206\303\r\"6\266F6\377= \352\270\036?\022\fJ\032'\225\203Q\332Fy*d\225\373", , m_len =3D 1999, m_type =3D 1, m_flags =3D 1, {{= {m_pkthdr =3D {{snd_tag =3D 0x0, rcvif =3D 0x0}, tags =3D {slh_first =3D 0x0}, len = =3D 1297, flowid =3D 0, csum_flags =3D 0, fibnum =3D 0, numa_domain =3D 255 '\377',=20 rsstype =3D 0 '\000', {rcv_tstmp =3D 0, {l2hlen =3D 0 '\000', l3h= len =3D 0 '\000', l4hlen =3D 0 '\000', l5hlen =3D 0 '\000', inner_l2hlen =3D 0 '\000', inner_l3hlen =3D 0 '\000', inner_l4hlen =3D 0 '\000',=20 inner_l5hlen =3D 0 '\000'}}, PH_per =3D {eight =3D "\000\000\000\000\377\377\000", sixteen =3D {0, 0, 65535, 0}, thirtytwo =3D= {0, 65535}, sixtyfour =3D {281470681743360}, unintptr =3D {281470681743360},=20 ptr =3D 0xffff00000000}, PH_loc =3D {eight =3D "\000\000\000\000\000\000\000", sixteen =3D {0, 0, 0, 0}, thirtytwo =3D {0,= 0}, sixtyfour =3D {0}, unintptr =3D {0}, ptr =3D 0x0}}, {m_epg_npgs =3D 0 '\000= ', m_epg_nrdy =3D 0 '\000',=20 m_epg_hdrlen =3D 0 '\000', m_epg_trllen =3D 0 '\000', m_epg_1st_o= ff =3D 0, m_epg_last_len =3D 0, m_epg_flags =3D 0 '\000', m_epg_record_type =3D 0 '\0= 00', __spare =3D "\000", m_epg_enc_cnt =3D 0, m_epg_tls =3D 0x511,=20 m_epg_so =3D 0xff000000000000, m_epg_seqno =3D 0, m_epg_stailq =3D {stqe_next =3D 0xffff00000000}}}, {m_ext =3D {{ext_count =3D 2, ext_cnt =3D 0xdeadc0de00000002}, ext_size =3D 2048, ext_type =3D 6, ext_flags =3D 1, {{ ext_buf =3D 0xfffff8017874f000 "O\320mg\276\022\364u\353\271\061\270tI\356\063\227/\030\204\032d\\\252\274= \261`P=D2=B2\271\232F\343-\304\372\307<\031u\212\260\061=DF=90\264\306i\361= Vj\212\314=CF=93M\031R\257G\b\246\233\227\233,D\335C\220\273\022\025\223\25= 1\361\211\222e+0M)\201\233\034e'\222\203\242h\201\017w\026\065\365\242=D8= =AE\f\225\350\313\311\364$\244\262\265\370\375\237\f\206\303\r\"6\266F6\377= \352\270\036?\022\fJ\032'\225\203Q\332Fy*d\225\373", , ext_arg2 =3D 0x0}, {extpg_pa =3D {1844673528393= 2426240, 0, 16045693110842147038, 16045693110842147038, 16045693110842147038},=20 extpg_trail =3D "\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\2= 55\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\= 300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336= \336\300\255\336\336\300\255", , extpg_hdr =3D "\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\2= 55\336\336\300\255"}}, ext_free =3D 0x0,=20 ext_arg1 =3D 0x0}, m_pktdat =3D 0xfffff80bc680b558 "\002"}}, m_da= t =3D 0xfffff80bc680b520 ""}} (kgdb) print *(int32_t *)0xfffffe017fd6282c $2 =3D 612 (kgdb) frame 14 #14 0xffffffff80e0607a in tcp_do_segment (m=3D, th=3D0xfffff80bc659e87a, so=3D, tp=3D0xfffffe0252e24000, drop_hdrlen=3D40, tlen=3D, iptos=3D0 '\000') at /usr/src/sys/netinet/tcp_input.c:2822 2822 tcp_sack_partialack= (tp, th); (kgdb) print *th $3 =3D {th_sport =3D 43204, th_dport =3D 63248, th_seq =3D 2812027976, th_a= ck =3D 324807354, th_x2 =3D 0 '\000', th_off =3D 5 '\005', th_flags =3D 16 '\020',= th_win =3D 16103, th_sum =3D 0, th_urp =3D 0} (kgdb) print *tp $4 =3D {t_inpcb =3D 0xfffff8090099b1f0, t_fb =3D 0xffffffff81b414a0 , t_fb_ptr =3D 0x0, t_maxseg =3D 1400, t_logstate =3D 0, t= _port =3D 0, t_state =3D 6, t_idle_reduce =3D 0, t_delayed_ack =3D 0, t_fin_is_rst =3D 0= ,=20 t_log_state_set =3D 0, bits_spare =3D 0, t_flags =3D 554697333, snd_una = =3D 324805966, snd_max =3D 324807967, snd_nxt =3D 324807967, snd_up =3D 3248059= 66, snd_wnd =3D 65800, snd_cwnd =3D 1400, t_peakrate_thr =3D 0, ts_offset =3D 0= ,=20 rfbuf_ts =3D 12071754, rcv_numsacks =3D 0, t_tsomax =3D 65535, t_tsomaxse= gcount =3D 37, t_tsomaxsegsize =3D 4096, rcv_nxt =3D 2812027976, rcv_adv =3D 281209383= 2, rcv_wnd =3D 65856, t_flags2 =3D 1024, t_srtt =3D 7549, t_rttvar =3D 947,=20 ts_recent =3D 0, snd_scale =3D 2 '\002', rcv_scale =3D 6 '\006', snd_limi= ted =3D 0 '\000', request_r_scale =3D 6 '\006', last_ack_sent =3D 2812027976, t_rcvti= me =3D 2159165013, rcv_up =3D 2812027976, t_segqlen =3D 0, t_segqmbuflen =3D 0,=20 t_segq =3D {tqh_first =3D 0x0, tqh_last =3D 0xfffffe0252e24090}, t_in_pkt= =3D 0x0, t_tail_pkt =3D 0x0, t_timers =3D 0xfffffe0252e242a8, t_vnet =3D 0xfffff8010= 582fec0, snd_ssthresh =3D 2800, snd_wl1 =3D 2812027976, snd_wl2 =3D 324805966,=20 irs =3D 2812024397, iss =3D 324701574, t_acktime =3D 0, t_sndtime =3D 215= 9073224, ts_recent_age =3D 0, snd_recover =3D 324807967, cl4_spare =3D 0, t_oobflags= =3D 0 '\000', t_iobc =3D 0 '\000', t_rxtcur =3D 64000, t_rxtshift =3D 8,=20 t_rtttime =3D 0, t_rtseq =3D 324807965, t_starttime =3D 2158904990, t_fby= te_in =3D 2158905017, t_fbyte_out =3D 2158905018, t_pmtud_saved_maxseg =3D 0, t_blackhole_enter =3D 0, t_blackhole_exit =3D 0, t_rttmin =3D 30, t_rttbest= =3D 7842,=20 t_softerror =3D 0, max_sndwnd =3D 65800, snd_cwnd_prev =3D 5600, snd_ssth= resh_prev =3D 2800, snd_recover_prev =3D 324776566, t_sndzerowin =3D 0, t_rttupdated = =3D 15, snd_numholes =3D 1, t_badrxtwin =3D 2158964144, snd_holes =3D { tqh_first =3D 0xfffff806d01890a0, tqh_last =3D 0xfffff806d01890b0}, snd= _fack =3D 324807354, sackblks =3D {{start =3D 2812027975, end =3D 2812027976}, {start= =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0,=20 end =3D 0}, {start =3D 0, end =3D 0}}, sackhint =3D {nexthole =3D 0xfffff806d01890a0, sack_bytes_rexmit =3D 0, last_sack_ack =3D 324807354, delivered_data =3D 1388, sacked_bytes =3D 611, recover_fs =3D 3400, prr_del= ivered =3D 6800,=20 prr_out =3D 7588}, t_rttlow =3D 190, rfbuf_cnt =3D 0, tod =3D 0x0, t_sn= drexmitpack =3D 47, t_rcvoopack =3D 0, t_toe =3D 0x0, cc_algo =3D 0xffffffff81b3e350 , ccv =3D 0xfffffe0252e243f0, osd =3D 0xfffffe0252e24418,= =20 t_bytes_acked =3D 0, t_maxunacktime =3D 0, t_keepinit =3D 0, t_keepidle = =3D 0, t_keepintvl =3D 0, t_keepcnt =3D 0, t_dupacks =3D 0, t_lognum =3D 0, t_logl= imit =3D 5000, t_pacing_rate =3D -1, t_logs =3D {stqh_first =3D 0x0,=20 stqh_last =3D 0xfffffe0252e24218}, t_lin =3D 0x0, t_lib =3D 0x0, t_outp= ut_caller =3D 0x0, t_stats =3D 0x0, t_logsn =3D 0, gput_ts =3D 0, gput_seq =3D 0, gpu= t_ack =3D 0, t_stats_gput_prev =3D 0, t_maxpeakrate =3D 0, t_sndtlppack =3D 0,=20 t_sndtlpbyte =3D 0, t_sndbytes =3D 125990, t_snd_rxt_bytes =3D 40040, t_tfo_client_cookie_len =3D 0 '\000', t_end_info_status =3D 0, t_tfo_pendin= g =3D 0x0, t_tfo_cookie =3D {client =3D '\000' , server =3D 0}, { t_end_info_bytes =3D "\000\000\000\000\000\000\000", t_end_info =3D 0}} (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=