[Bug 260393] Page Fault tcp_output/tcp_input

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 23 Dec 2021 12:02:27 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260393

--- Comment #71 from Dobri Dobrev <ddobrev85@gmail.com> ---
(In reply to Hans Petter Selasky from comment #70)

(kgdb) frame 14
#14 0xffffffff80e0607a in tcp_do_segment (m=<optimized out>,
th=0xfffff80bc659e87a, so=<optimized out>, tp=0xfffffe0252e24000,
drop_hdrlen=40, tlen=<optimized out>, iptos=0 '\000') at
/usr/src/sys/netinet/tcp_input.c:2822
2822                                                    tcp_sack_partialack(tp,
th);
(kgdb) print /x *(tp->t_inpcb)
$5 = {inp_hash = {cle_next = 0x0, cle_prev = 0xfffffe020ae2fe18},
inp_pcbgrouphash = {cle_next = 0x0, cle_prev = 0x0}, inp_lock = {lock_object =
{lo_name = 0xffffffff811d9a83, lo_flags = 0x56b0000, lo_data = 0x0, 
      lo_witness = 0xfffff8207fd75100}, rw_lock = 0xfffffe017fed7720}, inp_hpts
= {tqe_next = 0x0, tqe_prev = 0x0}, inp_hpts_request = 0x0, inp_in_hpts = 0x0,
inp_in_input = 0x0, inp_hpts_cpu = 0x0, inp_irq_cpu = 0x0, 
  inp_refcount = 0x2, inp_flags = 0x8802000, inp_flags2 = 0x0, inp_input_cpu =
0x0, inp_hpts_cpu_set = 0x0, inp_input_cpu_set = 0x0, inp_hpts_calls = 0x0,
inp_input_calls = 0x0, inp_irq_cpu_set = 0x0, inp_spare_bits2 = 0x0, 
  inp_numa_domain = 0xff, inp_ppcb = 0xfffffe0252e24000, inp_socket =
0xfffff80900858000, inp_hptsslot = 0x0, inp_hpts_drop_reas = 0x0, inp_input =
{tqe_next = 0x0, tqe_prev = 0x0}, inp_pcbinfo = 0xfffffe00d856f758, 
  inp_pcbgroup = 0x0, inp_pcbgroup_wild = {cle_next = 0x0, cle_prev = 0x0},
inp_cred = 0xfffff80107538500, inp_flow = 0x0, inp_vflag = 0x1, inp_ip_ttl =
0x40, inp_ip_p = 0x0, inp_ip_minttl = 0x0, inp_flowid = 0x5e457bf3, 
  inp_snd_tag = 0x0, inp_flowtype = 0x82, inp_rss_listen_bucket = 0x0, inp_inc
= {inc_flags = 0x0, inc_len = 0x0, inc_fibnum = 0x1, inc_ie = {ie_fport =
0xa8c4, ie_lport = 0xf710, ie_dependfaddr = {id46_addr = {
          ia46_pad32 = {0x0, 0x0, 0x0}, ia46_addr4 = {s_addr = 0x2f2912b5}},
id6_addr = {__u6_addr = {__u6_addr8 = {0x0 <repeats 12 times>, 0xb5, 0x12,
0x29, 0x2f}, __u6_addr16 = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b5, 
              0x2f29}, __u6_addr32 = {0x0, 0x0, 0x0, 0x2f2912b5}}}},
ie_dependladdr = {id46_addr = {ia46_pad32 = {0x0, 0x0, 0x0}, ia46_addr4 =
{s_addr = 0xd011ca95}}, id6_addr = {__u6_addr = {__u6_addr8 = {
              0x0 <repeats 12 times>, 0x95, 0xca, 0x11, 0xd0}, __u6_addr16 =
{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca95, 0xd011}, __u6_addr32 = {0x0, 0x0, 0x0,
0xd011ca95}}}}, ie6_zoneid = 0x0}}, inp_label = 0x0, 
  inp_sp = 0xfffff80c371a4160, {inp_ip_tos = 0x0, inp_options = 0x0,
inp_moptions = 0x0}, {in6p_options = 0x0, in6p_outputopts = 0x0, in6p_moptions
= 0x0, in6p_icmp6filt = 0x0, in6p_cksum = 0x0, in6p_hops = 0x0}, 
  inp_portlist = {cle_next = 0xfffff80c25133d90, cle_prev =
0xfffff80c2574e160}, inp_phd = 0xfffff80105bbbf00, inp_gencnt = 0xa07c7c,
spare_ptr = 0x0, inp_rt_cookie = 0x63, {inp_route = {ro_nh =
0xfffff8016f136d00, 
      ro_lle = 0xfffff8013c8a2a80, ro_prepend = 0x0, ro_plen = 0x0, ro_flags =
0x180, ro_mtu = 0x0, spare = 0x0, ro_dst = {sa_len = 0x10, sa_family = 0x2,
sa_data = {0x0, 0x0, 0xb5, 0x12, 0x29, 0x2f, 0x0, 0x0, 0x0, 0x0, 
          0x0, 0x0, 0x0, 0x0}}}, inp_route6 = {ro_nh = 0xfffff8016f136d00,
ro_lle = 0xfffff8013c8a2a80, ro_prepend = 0x0, ro_plen = 0x0, ro_flags = 0x180,
ro_mtu = 0x0, spare = 0x0, ro_dst = {sin6_len = 0x10, 
        sin6_family = 0x2, sin6_port = 0x0, sin6_flowinfo = 0x2f2912b5,
sin6_addr = {__u6_addr = {__u6_addr8 = {0x0 <repeats 16 times>}, __u6_addr16 =
{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, __u6_addr32 = {0x0, 0x0, 0x0, 
              0x0}}}, sin6_scope_id = 0x0}}}, inp_list = {cle_next =
0xfffff80c2580e000, cle_prev = 0xfffff80c2574e1d0}, inp_epoch_ctx = {data =
{0x0, 0x0}}}
(kgdb) print /x *(tp->t_inpcb->inp_socket)
$6 = {so_lock = {lock_object = {lo_name = 0xffffffff81203282, lo_flags =
0x1430000, lo_data = 0x0, lo_witness = 0xfffff8207fd84300}, mtx_lock = 0x0},
so_count = 0x0, so_rdsel = {si_tdlist = {tqh_first = 0x0, 
      tqh_last = 0x0}, si_note = {kl_list = {slh_first = 0x0}, kl_lock =
0xffffffff80cd4440, kl_unlock = 0xffffffff80cd4480, kl_assert_lock =
0xffffffff80cd44c0, kl_lockarg = 0xfffff80900858000, kl_autodestroy = 0x0}, 
    si_mtx = 0x0}, so_wrsel = {si_tdlist = {tqh_first = 0x0, tqh_last = 0x0},
si_note = {kl_list = {slh_first = 0x0}, kl_lock = 0xffffffff80cd4550, kl_unlock
= 0xffffffff80cd4590, kl_assert_lock = 0xffffffff80cd45d0, 
      kl_lockarg = 0xfffff80900858000, kl_autodestroy = 0x0}, si_mtx = 0x0},
so_type = 0x1, so_options = 0x10004, so_linger = 0x0, so_state = 0x410b, so_pcb
= 0xfffff8090099b1f0, so_vnet = 0xfffff8010582fec0, 
  so_proto = 0xffffffff81b3be40, so_timeo = 0x0, so_error = 0x0, so_rerror =
0x0, so_sigio = 0x0, so_cred = 0xfffff80107538500, so_label = 0x0, so_gencnt =
0xa23ff6, so_emuldata = 0x0, so_dtor = 0x0, osd = {
    osd_nslots = 0x0, osd_slots = 0x0, osd_next = {le_next = 0x0, le_prev =
0x0}}, so_fibnum = 0x1, so_user_cookie = 0x0, so_ts_clock = 0x0,
so_max_pacing_rate = 0x0, {{so_rcv = {sb_mtx = {lock_object = {
            lo_name = 0xffffffff8127fc0a, lo_flags = 0x1030000, lo_data = 0x0,
lo_witness = 0xfffff8207fd74800}, mtx_lock = 0x0}, sb_sx = {lock_object =
{lo_name = 0xffffffff812debe2, lo_flags = 0x2330000, lo_data = 0x0, 
            lo_witness = 0xfffff8207fd84400}, sx_lock = 0x1}, sb_sel =
0xfffff80900858028, sb_state = 0x20, sb_mb = 0x0, sb_mbtail = 0x0,
sb_lastrecord = 0x0, sb_sndptr = 0x0, sb_fnrdy = 0x0, sb_sndptroff = 0x0, 
        sb_acc = 0x0, sb_ccc = 0x0, sb_hiwat = 0x10108, sb_mbcnt = 0x0, sb_mcnt
= 0x0, sb_ccnt = 0x0, sb_mbmax = 0x80840, sb_ctl = 0x0, sb_tlscc = 0x0,
sb_tlsdcc = 0x0, sb_lowat = 0x1, sb_timeo = 0x0, sb_tls_seqno = 0x0, 
        sb_tls_info = 0x0, sb_mtls = 0x0, sb_mtlstail = 0x0, sb_flags = 0x800,
sb_upcall = 0x0, sb_upcallarg = 0x0, sb_aiojobq = {tqh_first = 0x0, tqh_last =
0xfffff80900858230}, sb_aiotask = {ta_link = {stqe_next = 0x0}, 
          ta_pending = 0x0, ta_priority = 0x0, ta_flags = 0x0, ta_func =
0xffffffff80caceb0, ta_context = 0xfffff80900858000}}, so_snd = {sb_mtx =
{lock_object = {lo_name = 0xffffffff81296bb1, lo_flags = 0x1030000, 
            lo_data = 0x0, lo_witness = 0xfffff8207fd74780}, mtx_lock =
0xfffffe017fed7720}, sb_sx = {lock_object = {lo_name = 0xffffffff8130e57d,
lo_flags = 0x2330000, lo_data = 0x0, lo_witness = 0xfffff8207fd84380}, 
          sx_lock = 0x1}, sb_sel = 0xfffff80900858070, sb_state = 0x10, sb_mb =
0xfffff80bc680b500, sb_mbtail = 0xfffff80bc680b500, sb_lastrecord =
0xfffff80bc680b500, sb_sndptr = 0xfffff80bc680b500, sb_fnrdy = 0x0, 
        sb_sndptroff = 0x0, sb_acc = 0x7cf, sb_ccc = 0x7cf, sb_hiwat = 0x10108,
sb_mbcnt = 0x900, sb_mcnt = 0x1, sb_ccnt = 0x1, sb_mbmax = 0x80840, sb_ctl =
0x0, sb_tlscc = 0x0, sb_tlsdcc = 0x0, sb_lowat = 0x800, 
        sb_timeo = 0x0, sb_tls_seqno = 0x0, sb_tls_info = 0x0, sb_mtls = 0x0,
sb_mtlstail = 0x0, sb_flags = 0x800, sb_upcall = 0x0, sb_upcallarg = 0x0,
sb_aiojobq = {tqh_first = 0x0, tqh_last = 0xfffff80900858348}, 
        sb_aiotask = {ta_link = {stqe_next = 0x0}, ta_pending = 0x0,
ta_priority = 0x0, ta_flags = 0x0, ta_func = 0xffffffff80cad6f0, ta_context =
0xfffff80900858000}}, so_list = {tqe_next = 0xffffffffffffffff, 
        tqe_prev = 0xffffffffffffffff}, so_listen = 0x0, so_qstate = 0x0,
so_peerlabel = 0x0, so_oobmark = 0x0, so_ktls_rx_list = {stqe_next = 0x0}},
{sol_incomp = {tqh_first = 0xffffffff8127fc0a, tqh_last = 0x1030000}, 
      sol_comp = {tqh_first = 0xfffff8207fd74800, tqh_last = 0x0}, sol_qlen =
0x812debe2, sol_incqlen = 0xffffffff, sol_qlimit = 0x2330000, sol_accept_filter
= 0xfffff8207fd84400, sol_accept_filter_arg = 0x1, 
      sol_accept_filter_str = 0xfffff80900858028, sol_upcall = 0x20,
sol_upcallarg = 0x0, sol_sbrcv_lowat = 0x0, sol_sbsnd_lowat = 0x0,
sol_sbrcv_hiwat = 0x0, sol_sbsnd_hiwat = 0x0, sol_sbrcv_flags = 0x0, 
      sol_sbsnd_flags = 0x0, sol_sbrcv_timeo = 0x0, sol_sbsnd_timeo = 0x0,
sol_lastover = {tv_sec = 0x1010800000000, tv_usec = 0x0}, sol_overcount =
0x0}}}
(kgdb)

-- 
You are receiving this mail because:
You are the assignee for the bug.