Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Jul 2021 04:07:43 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 257195] [tcp] Panic when RACK enabled: tcp_hptsi at /usr/src/sys/netinet/tcp_hpts.c:1662
Message-ID:  <bug-257195-7501-SuqvXu5wl8@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-257195-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-257195-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D257195

--- Comment #14 from iron.udjin@gmail.com ---
(In reply to iron.udjin from comment #12)

OS: stable/13-n246050-07ef7a034965

On another server I catched one more panic. But it has a little bit differe=
nt
trace:

Fatal trap 12: page fault while in kernel mode
cpuid =3D 39; apic id =3D 33
fault virtual address   =3D 0x18
fault code              =3D supervisor read data, page not present
instruction pointer     =3D 0x20:0xffffffff80fc1c20
stack pointer           =3D 0x0:0xfffffe0321555e90
frame pointer           =3D 0x0:0xfffffe0321555ed0
code segment            =3D base 0x0, limit 0xfffff, type 0x1b
                        =3D DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        =3D interrupt enabled, resume, IOPL =3D 0
current process         =3D 11 (swi1: hpts)
trap number             =3D 12
panic: page fault
cpuid =3D 39
time =3D 1624174594
KDB: stack backtrace:
#0 0xffffffff805f37a5 at kdb_backtrace+0x65
#1 0xffffffff805a9931 at vpanic+0x181
#2 0xffffffff805a97a3 at panic+0x43
#3 0xffffffff80852617 at trap_fatal+0x387
#4 0xffffffff8085266f at trap_pfault+0x4f
#5 0xffffffff80851ce3 at trap+0x253
#6 0xffffffff8082ac18 at calltrap+0x8
#7 0xffffffff80fb183c at rack_log_output+0xec
#8 0xffffffff80fa9a33 at rack_output+0x6ca3
#9 0xffffffff80718835 at tcp_hpts_thread+0x725
#10 0xffffffff8056cfed at ithread_loop+0x24d
#11 0xffffffff80569ebd at fork_exit+0x7d
#12 0xffffffff8082bc9e at fork_trampoline+0xe
Uptime: 9h40m48s
Dumping 21243 out of 196233
MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
55              __asm("movq %%gs:%P1,%0" : "=3Dr" (td) : "n" (offsetof(stru=
ct
pcpu,
(kgdb) #0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:55
#1  doadump (textdump=3D<optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffffffff805a9525 in kern_reboot (howto=3D260)
    at /usr/src/sys/kern/kern_shutdown.c:486
#3  0xffffffff805a99a0 in vpanic (fmt=3D<optimized out>, ap=3D<optimized ou=
t>)
    at /usr/src/sys/kern/kern_shutdown.c:919
#4  0xffffffff805a97a3 in panic (fmt=3D<unavailable>)
    at /usr/src/sys/kern/kern_shutdown.c:843
#5  0xffffffff80852617 in trap_fatal (frame=3D0xfffffe0321555dd0, eva=3D24)
    at /usr/src/sys/amd64/amd64/trap.c:943
#6  0xffffffff8085266f in trap_pfault (frame=3Dframe@entry=3D0xfffffe032155=
5dd0,=20
    usermode=3Dfalse, signo=3D<optimized out>, signo@entry=3D0x0,=20
    ucode=3D<optimized out>, ucode@entry=3D0x0)
    at /usr/src/sys/amd64/amd64/trap.c:760
#7  0xffffffff80851ce3 in trap (frame=3D0xfffffe0321555dd0)
    at /usr/src/sys/amd64/amd64/trap.c:438
#8  <signal handler called>
#9  rack_setup_offset_for_rsm (src_rsm=3D0xfffff814ec3da230,=20
    rsm=3D0xfffff81f552bebd0)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6024
    at /usr/src/sys/kern/kern_shutdown.c:919
#4  0xffffffff805a97a3 in panic (fmt=3D<unavailable>)
    at /usr/src/sys/kern/kern_shutdown.c:843
#5  0xffffffff80852617 in trap_fatal (frame=3D0xfffffe0321555dd0, eva=3D24)
    at /usr/src/sys/amd64/amd64/trap.c:943
#6  0xffffffff8085266f in trap_pfault (frame=3Dframe@entry=3D0xfffffe032155=
5dd0,=20
    usermode=3Dfalse, signo=3D<optimized out>, signo@entry=3D0x0,=20
    ucode=3D<optimized out>, ucode@entry=3D0x0)
    at /usr/src/sys/amd64/amd64/trap.c:760
#7  0xffffffff80851ce3 in trap (frame=3D0xfffffe0321555dd0)
    at /usr/src/sys/amd64/amd64/trap.c:438
#8  <signal handler called>
#9  rack_setup_offset_for_rsm (src_rsm=3D0xfffff814ec3da230,=20
    rsm=3D0xfffff81f552bebd0)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6024
#10 rack_clone_rsm (rack=3D<optimized out>, nrsm=3D0xfffff81f552bebd0,=20
    rsm=3D0xfffff814ec3da230, start=3D3444253360)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:6076
#11 rack_update_entry (tp=3Dtp@entry=3D0xfffffe07d12dc870,=20
    rack=3D0xfffffe07c8e3cd00, rsm=3D0xfffff814ec3da230, ts=3D34848115395,=
=20
    lenp=3Dlenp@entry=3D0xfffffe0321555f14, add_flag=3D<optimized out>)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:7169
#12 0xffffffff80fb183c in rack_log_output (tp=3Dtp@entry=3D0xfffffe07d12dc8=
70,=20
    to=3D<optimized out>, len=3Dlen@entry=3D253, seq_out=3D3444253107,=20
    th_flags=3D<optimized out>, th_flags@entry=3D16 '\020', err=3Derr@entry=
=3D0,=20
    cts=3D34848115395, hintrsm=3D0x0, add_flag=3D16384, s_mb=3D0xfffff80df0=
cd4800,=20
    s_moff=3D1)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:7384
#13 0xffffffff80fa9a33 in rack_fast_rsm_output (tp=3D<optimized out>,=20
    rack=3D<optimized out>, rsm=3D<optimized out>, ts_val=3D<optimized out>=
,=20
    cts=3D488377027, ms_cts=3D34848115, tv=3D0xfffffe0321556018,=20
    len=3D<optimized out>)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:154=
04
#14 rack_output (tp=3D<optimized out>)
    at /usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:164=
17
#15 0xffffffff80718835 in tcp_hptsi (hpts=3D0xfffff8184d9f3700)
    at /usr/src/sys/netinet/tcp_hpts.c:1613
#16 tcp_hpts_thread (ctx=3D0xfffff8184d9f3700)
    at /usr/src/sys/netinet/tcp_hpts.c:1832
#17 0xffffffff8056cfed in intr_event_execute_handlers (p=3D<optimized out>,=
=20
    ie=3D0xfffff8184d9d0c00) at /usr/src/sys/kern/kern_intr.c:1168
#18 ithread_execute_handlers (p=3D<optimized out>, ie=3D0xfffff8184d9d0c00)
    at /usr/src/sys/kern/kern_intr.c:1181
#19 ithread_loop (arg=3Darg@entry=3D0xfffff8184d9e3640)
    at /usr/src/sys/kern/kern_intr.c:1269
#20 0xffffffff80569ebd in fork_exit (
    callout=3D0xffffffff8056cda0 <ithread_loop>, arg=3D0xfffff8184d9e3640,=
=20
    frame=3D0xfffffe0321556480) at /usr/src/sys/kern/kern_fork.c:1083
#21 <signal handler called>
(kgdb)

There is also VIMAGE enabled.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-257195-7501-SuqvXu5wl8>