From nobody Mon Feb 12 19:30:44 2024 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TYZLZ62zDz5BQqQ for ; Mon, 12 Feb 2024 19:30:46 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from omta001.cacentral1.a.cloudfilter.net (omta001.cacentral1.a.cloudfilter.net [3.97.99.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TYZLZ4xz1z4vj8; Mon, 12 Feb 2024 19:30:46 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Authentication-Results: mx1.freebsd.org; none Received: from shw-obgw-4001a.ext.cloudfilter.net ([10.228.9.142]) by cmsmtp with ESMTPS id ZZSorkjxuxDxGZc0srnVoS; Mon, 12 Feb 2024 19:30:46 +0000 Received: from spqr.komquats.com ([70.66.152.170]) by cmsmtp with ESMTPSA id Zc0rrCZ9FZ0jDZc0rr3vLQ; Mon, 12 Feb 2024 19:30:46 +0000 X-Authority-Analysis: v=2.4 cv=P8GZhTAu c=1 sm=1 tr=0 ts=65ca71e6 a=y8EK/9tc/U6QY+pUhnbtgQ==:117 a=y8EK/9tc/U6QY+pUhnbtgQ==:17 a=kj9zAlcOel0A:10 a=k7vzHIieQBIA:10 a=6I5d2MoRAAAA:8 a=pGLkceISAAAA:8 a=YxBL1-UpAAAA:8 a=EkcXrb_YAAAA:8 a=5X-dCmgiurBNT7On90IA:9 a=CjuIK1q_8ugA:10 a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 a=LK5xJRSDVpKd5WXXoEvA:22 Received: from slippy.cwsent.com (slippy [10.1.1.91]) by spqr.komquats.com (Postfix) with ESMTP id EAD46B5; Mon, 12 Feb 2024 11:30:44 -0800 (PST) Received: by slippy.cwsent.com (Postfix, from userid 1000) id E089D185; Mon, 12 Feb 2024 11:30:44 -0800 (PST) X-Mailer: exmh version 2.9.0 11/07/2018 with nmh-1.8+dev Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: tuexen@freebsd.org cc: Alexander Leidinger , current@freebsd.org Subject: Re: kernel crash in tcp_subr.c:2386 In-reply-to: <625E0EA4-9413-45AD-B05C-500833A1D527@freebsd.org> References: <1707730255-92643-mlmmj-52dbb05a@FreeBSD.org> <625E0EA4-9413-45AD-B05C-500833A1D527@freebsd.org> Comments: In-reply-to tuexen@freebsd.org message dated "Mon, 12 Feb 2024 11:23:54 +0100." List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 12 Feb 2024 11:30:44 -0800 Message-Id: <20240212193044.E089D185@slippy.cwsent.com> X-CMAE-Envelope: MS4xfFWKmf6syDprgDaxB4zGD7Tz9Y/5Upfu+EwMxV/5Yybo1aN2rUrjvraD6mynpePEaK1uNkJ/8h5h25aUWpyOWIcgVw3SMnXn81cKpu44qxAJ+ycOlXh+ ABK61Uaw4u4mQbZj8R9zbOUjg0ufa6aq2IMkOr2xzZg4Db74Ch07kGTPq70bq3V/Ija2cr11P+xA7+JK0hKpjjAMVJPkQAi8Vjrb5RuQ6ERfvTwWPOpU0V6p DXDlA1MFicJGLSw8rIQuwmSUnMIWOk6judbV/APYZxM= X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:16509, ipnet:3.96.0.0/15, country:US] X-Rspamd-Queue-Id: 4TYZLZ4xz1z4vj8 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated In message <625E0EA4-9413-45AD-B05C-500833A1D527@freebsd.org>, tuexen@freebsd.o rg writes: > > On Feb 12, 2024, at 10:36, Alexander Leidinger = > wrote: > >=20 > > Hi, > >=20 > > I got a coredump with sources from 2024-02-10-144617 (GMT+0100): > Hi Alexander, > > we are aware of this problem, but haven't found a way to reproduce it. > Do you know how to reproduce this? I've reproduced this by rebooting any one of my machines in my basement. The other machines will panic as below. I've reverted the three tcp timer commits, expecting one of them to be the cause. > > Best regards > Michael > > ---snip--- > > __curthread () at = > /space/system/usr_src/sys/amd64/include/pcpu_aux.h:57 > > 57 __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" = > (offsetof(struct pcpu, > > (kgdb) #0 __curthread () at = > /space/system/usr_src/sys/amd64/include/pcpu_aux.h:57 > > td =3D > > #1 doadump (textdump=3Dtextdump@entry=3D1) > > at /space/system/usr_src/sys/kern/kern_shutdown.c:403 > > error =3D 0 > > coredump =3D > > #2 0xffffffff8052fe85 in kern_reboot (howto=3D260) > > at /space/system/usr_src/sys/kern/kern_shutdown.c:521 > > once =3D 0 > > __pc =3D > > #3 0xffffffff80530382 in vpanic ( > > fmt=3D0xffffffff808df476 "Assertion %s failed at %s:%d", > > ap=3Dap@entry=3D0xfffffe08a079ebf0) > > at /space/system/usr_src/sys/kern/kern_shutdownc:973 > > buf =3D "Assertion !callout_active(&tp->t_callout) failed at = > /space/system/usr_src/sys/netinet/tcp_subr.c:2386", '\000' times> > > __pc =3D > > __pc =3D > > __pc =3D > > other_cpus =3D {__bits =3D {14680063, 0 }} > > td =3D 0xfffff8068ef99740 > > bootopt =3D > > newpanic =3D > > #4 0xffffffff805301d3 in panic (fmt=3D) > > at /space/system/usr_src/sys/kern/kern_shutdown.c:889 > > ap =3D {{gp_offset =3D 32, fp_offset =3D 48, > > overflow_arg_area =3D 0xfffffe08a079ec20, > > reg_save_area =3D 0xfffffe08a079ebc0}} > > #5 0xffffffff806c9d8c in tcp_discardcb = > (tp=3Dtp@entry=3D0xfffff80af441ba80) > > at /space/system/usr_src/sys/netinet/tcp_subr.c:2386 > > inp =3D 0xfffff80af441ba80 > > so =3D 0xfffff804d23d2780 > > m =3D > > isipv6 =3D > > #6 0xffffffff806d6291 in tcp_usr_detach (so=3D0xfffff804d23d2780) > > at /space/system/usr_src/sys/netinet/tcp_usrreq.c:214 > > inp =3D 0xfffff80af441ba80 > > tp =3D 0xfffff80af441ba80 > > #7 0xffffffff805dba57 in sofree (so=3D0xfffff804d23d2780) > > at /space/system/usr_src/sys/kern/uipc_socket.c:1205 > > pr =3D 0xffffffff80a8bd18 > > #8 sorele_locked (so=3Dso@entry=3D0xfffff804d23d2780) > > at /space/system/usr_src/sys/kern/uipc_socket.c:1232 > > No locals. > > #9 0xffffffff805dc8c0 in soclose (so=3D0xfffff804d23d2780) > > at /space/system/usr_src/sys/kern/uipc_socket.c:1302 > > lqueue =3D {tqh_first =3D 0xfffff8068ef99740, > > tqh_last =3D 0xfffffe08a079ed40} > > error =3D 0 > > saved_vnet =3D 0x0 > > last =3D > > listening =3D > > #10 0xffffffff804ccbd1 in fo_close (fp=3D0xfffff805f2dfc500, = > td=3D) > > at /space/system/usr_src/sys/sys/file.h:390 > > No locals. > > #11 _fdrop (fp=3Dfp@entry=3D0xfffff805f2dfc500, td=3D, > > td@entry=3D0xfffff8068ef99740) > > at /space/system/usr_src/sys/kern/kern_descrip.c:3666 > > count =3D > > error =3D > > #12 0xffffffff804d02f3 in closef (fp=3Dfp@entry=3D0xfffff805f2dfc500, > > td=3Dtd@entry=3D0xfffff8068ef99740) > > at /space/system/usr_src/sys/kern/kern_descrip.c:2839 > > _error =3D 0 > > _fp =3D 0xfffff805f2dfc500 > > lf =3D {l_start =3D -8791759350504, l_len =3D -8791759350528, = > l_pid =3D 0, > > l_type =3D 0, l_whence =3D 0, l_sysid =3D 0} > > vp =3D > > fdtol =3D > > fdp =3D > > #13 0xffffffff804cd50c in closefp_impl (fdp=3D0xfffffe07afebf860, = > fd=3D19, > > fp=3D0xfffff805f2dfc500, td=3D0xfffff8068ef99740, audit=3D out>) > > at /space/system/usr_src/sys/kern/kern_descrip.c:1315 > > error =3D > > #14 closefp (fdp=3D0xfffffe07afebf860, fd=3D19, fp=3D0xfffff805f2dfc500,= > > > td=3D0xfffff8068ef99740, holdleaders=3Dtrue, audit=3D out>) > > at /space/system/usr_src/sys/kern/kern_descrip.c:1372 > > No locals. > > #15 0xffffffff808597d6 in syscallenter (td=3D0xfffff8068ef99740) > > at = > /space/system/usr_src/sys/amd64/amd64/../../kern/subr_syscall.c:186 > > se =3D 0xffffffff80a48330 > > p =3D 0xfffffe07f29995c0 > > sa =3D 0xfffff8068ef99b30 > > error =3D > > sy_thr_static =3D > > traced =3D > > #16 amd64_syscall (td=3D0xfffff8068ef99740, traced=3D0) > > at /space/system/usr_src/sys/amd64/amd64/trap.c:1192 > > ksi =3D {ksi_link =3D {tqe_next =3D 0xfffffe08a079ef30, > > tqe_prev =3D 0xffffffff808588af }, ksi_info =3D = > { > > si_signo =3D 1, si_errno =3D 0, si_code =3D 2015268872, = > si_pid =3D -512, > > si_uid =3D 2398721856, si_status =3D -2042, > > si_addr =3D 0xfffffe08a079ef40, si_value =3D {sival_int =3D = > -1602621824, > > sival_ptr =3D 0xfffffe08a079ee80, sigval_int =3D = > -1602621824, > > sigval_ptr =3D 0xfffffe08a079ee80}, _reason =3D {_fault =3D= > { > > _trapno =3D 1489045984}, _timer =3D {_timerid =3D = > 1489045984, > > _overrun =3D 17999}, _mesgq =3D {_mqd =3D 1489045984}, = > _poll =3D { > > _band =3D 77306605406688}, _capsicum =3D {_syscall =3D = > 1489045984}, > > __spare__ =3D {__spare1__ =3D 77306605406688, __spare2__ = > =3D { > > 1489814048, 17999, 208, 0, 0, 0, 992191072}}}}, > > ksi_flags =3D 975329968, ksi_sigq =3D 0xffffffff8082f8f3 = > } > > #17 > > No locals. > > #18 0x00003af13b17fc9a in ?? () > > No symbol table info available. > > Backtrace stopped: Cannot access memory at address 0x3af13a225ab8 > > ---snip--- > >=20 > > Any ideas? > >=20 > > Due to another issue in userland, I updated to 2024-02-11-212006, but = > I have the above mentioned version and core still in a BE if needed > >=20 > > Bye, > > Alexander. > > -- Cheers, Cy Schubert FreeBSD UNIX: Web: https://FreeBSD.org NTP: Web: https://nwtime.org e^(i*pi)+1=0