From nobody Sun Jul 18 04:07:43 2021 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id B25AB12A3701 for ; Sun, 18 Jul 2021 04:07:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4GSBJw0qQtz3JY8 for ; Sun, 18 Jul 2021 04:07:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id B50521CE4A for ; Sun, 18 Jul 2021 04:07:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 16I47hRc073069 for ; Sun, 18 Jul 2021 04:07:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 16I47hF8073068 for net@FreeBSD.org; Sun, 18 Jul 2021 04:07:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 257195] [tcp] Panic when RACK enabled: tcp_hptsi at /usr/src/sys/netinet/tcp_hpts.c:1662 Date: Sun, 18 Jul 2021 04:07:43 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 13.0-STABLE X-Bugzilla-Keywords: crash, needs-qa X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: iron.udjin@gmail.com X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: mfc-stable13? X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D257195 --- Comment #14 from iron.udjin@gmail.com --- (In reply to iron.udjin from comment #12) OS: stable/13-n246050-07ef7a034965 On another server I catched one more panic. But it has a little bit differe= nt trace: Fatal trap 12: page fault while in kernel mode cpuid =3D 39; apic id =3D 33 fault virtual address =3D 0x18 fault code =3D supervisor read data, page not present instruction pointer =3D 0x20:0xffffffff80fc1c20 stack pointer =3D 0x0:0xfffffe0321555e90 frame pointer =3D 0x0:0xfffffe0321555ed0 code segment =3D base 0x0, limit 0xfffff, type 0x1b =3D DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags =3D interrupt enabled, resume, IOPL =3D 0 current process =3D 11 (swi1: hpts) trap number =3D 12 panic: page fault cpuid =3D 39 time =3D 1624174594 KDB: stack backtrace: #0 0xffffffff805f37a5 at kdb_backtrace+0x65 #1 0xffffffff805a9931 at vpanic+0x181 #2 0xffffffff805a97a3 at panic+0x43 #3 0xffffffff80852617 at trap_fatal+0x387 #4 0xffffffff8085266f at trap_pfault+0x4f #5 0xffffffff80851ce3 at trap+0x253 #6 0xffffffff8082ac18 at calltrap+0x8 #7 0xffffffff80fb183c at rack_log_output+0xec #8 0xffffffff80fa9a33 at rack_output+0x6ca3 #9 0xffffffff80718835 at tcp_hpts_thread+0x725 #10 0xffffffff8056cfed at ithread_loop+0x24d #11 0xffffffff80569ebd at fork_exit+0x7d #12 0xffffffff8082bc9e at fork_trampoline+0xe Uptime: 9h40m48s Dumping 21243 out of 196233 MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91% __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 55 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru= ct pcpu, (kgdb) #0 __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55 #1 doadump (textdump=3D) at /usr/src/sys/kern/kern_shutdown.c:399 #2 0xffffffff805a9525 in kern_reboot (howto=3D260) at /usr/src/sys/kern/kern_shutdown.c:486 #3 0xffffffff805a99a0 in vpanic (fmt=3D, ap=3D) at /usr/src/sys/kern/kern_shutdown.c:919 #4 0xffffffff805a97a3 in panic (fmt=3D) at /usr/src/sys/kern/kern_shutdown.c:843 #5 0xffffffff80852617 in trap_fatal (frame=3D0xfffffe0321555dd0, eva=3D24) at /usr/src/sys/amd64/amd64/trap.c:943 #6 0xffffffff8085266f in trap_pfault (frame=3Dframe@entry=3D0xfffffe032155= 5dd0,=20 usermode=3Dfalse, signo=3D, signo@entry=3D0x0,=20 ucode=3D, ucode@entry=3D0x0) at /usr/src/sys/amd64/amd64/trap.c:760 #7 0xffffffff80851ce3 in trap (frame=3D0xfffffe0321555dd0) at /usr/src/sys/amd64/amd64/trap.c:438 #8 #9 rack_setup_offset_for_rsm (src_rsm=3D0xfffff814ec3da230,=20 rsm=3D0xfffff81f552bebd0) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6024 at /usr/src/sys/kern/kern_shutdown.c:919 #4 0xffffffff805a97a3 in panic (fmt=3D) at /usr/src/sys/kern/kern_shutdown.c:843 #5 0xffffffff80852617 in trap_fatal (frame=3D0xfffffe0321555dd0, eva=3D24) at /usr/src/sys/amd64/amd64/trap.c:943 #6 0xffffffff8085266f in trap_pfault (frame=3Dframe@entry=3D0xfffffe032155= 5dd0,=20 usermode=3Dfalse, signo=3D, signo@entry=3D0x0,=20 ucode=3D, ucode@entry=3D0x0) at /usr/src/sys/amd64/amd64/trap.c:760 #7 0xffffffff80851ce3 in trap (frame=3D0xfffffe0321555dd0) at /usr/src/sys/amd64/amd64/trap.c:438 #8 #9 rack_setup_offset_for_rsm (src_rsm=3D0xfffff814ec3da230,=20 rsm=3D0xfffff81f552bebd0) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6024 #10 rack_clone_rsm (rack=3D, nrsm=3D0xfffff81f552bebd0,=20 rsm=3D0xfffff814ec3da230, start=3D3444253360) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6076 #11 rack_update_entry (tp=3Dtp@entry=3D0xfffffe07d12dc870,=20 rack=3D0xfffffe07c8e3cd00, rsm=3D0xfffff814ec3da230, ts=3D34848115395,= =20 lenp=3Dlenp@entry=3D0xfffffe0321555f14, add_flag=3D) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:7169 #12 0xffffffff80fb183c in rack_log_output (tp=3Dtp@entry=3D0xfffffe07d12dc8= 70,=20 to=3D, len=3Dlen@entry=3D253, seq_out=3D3444253107,=20 th_flags=3D, th_flags@entry=3D16 '\020', err=3Derr@entry= =3D0,=20 cts=3D34848115395, hintrsm=3D0x0, add_flag=3D16384, s_mb=3D0xfffff80df0= cd4800,=20 s_moff=3D1) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:7384 #13 0xffffffff80fa9a33 in rack_fast_rsm_output (tp=3D,=20 rack=3D, rsm=3D, ts_val=3D= ,=20 cts=3D488377027, ms_cts=3D34848115, tv=3D0xfffffe0321556018,=20 len=3D) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:154= 04 #14 rack_output (tp=3D) at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:164= 17 #15 0xffffffff80718835 in tcp_hptsi (hpts=3D0xfffff8184d9f3700) at /usr/src/sys/netinet/tcp_hpts.c:1613 #16 tcp_hpts_thread (ctx=3D0xfffff8184d9f3700) at /usr/src/sys/netinet/tcp_hpts.c:1832 #17 0xffffffff8056cfed in intr_event_execute_handlers (p=3D,= =20 ie=3D0xfffff8184d9d0c00) at /usr/src/sys/kern/kern_intr.c:1168 #18 ithread_execute_handlers (p=3D, ie=3D0xfffff8184d9d0c00) at /usr/src/sys/kern/kern_intr.c:1181 #19 ithread_loop (arg=3Darg@entry=3D0xfffff8184d9e3640) at /usr/src/sys/kern/kern_intr.c:1269 #20 0xffffffff80569ebd in fork_exit ( callout=3D0xffffffff8056cda0 , arg=3D0xfffff8184d9e3640,= =20 frame=3D0xfffffe0321556480) at /usr/src/sys/kern/kern_fork.c:1083 #21 (kgdb) There is also VIMAGE enabled. --=20 You are receiving this mail because: You are the assignee for the bug.=