[Bug 276761] panic: sbsndptr_noadv: sb_mb is NULL

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 01 Feb 2024 10:30:40 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276761

Richard Scheffenegger <rscheff@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |glebius@FreeBSD.org

--- Comment #2 from Richard Scheffenegger <rscheff@freebsd.org> ---
Daniel,

If you can deterministically reproduce this, that this is probably what Gleb
was looking for.

It is likely that this is an instance where the retransmit timer is active on a
closed (or closing) session, where the socket buffers were already freed...

The BT certainly looks like this - the open question is, why not all
outstanding timers get cancelled when a session is closing - one codepath seems
to be missing the relevant cleanups.

(This appears to have been exposed by my recent change of not discarding the
SACK scoreboard on an RTO - SACK retransmissions do re-arm the RTO timer.)

If you are looking for a quick workaround, we have one, but would really
appreciate your help into understanding the actual root cause (codepath where
session closure is not properly cleaning up).

-- 
You are receiving this mail because:
You are the assignee for the bug.