Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 04 Apr 2024 16:42:24 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 278171] Reproducible kernel crash on 14.0-RELEASE and 14.0-STABLE
Message-ID:  <bug-278171-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D278171

            Bug ID: 278171
           Summary: Reproducible kernel crash on 14.0-RELEASE and
                    14.0-STABLE
           Product: Base System
           Version: 14.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: thomas.dreibholz@gmail.com

Created attachment 249709
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D249709&action=
=3Dedit
PCAP trace of the SCTP communication

I made some tests with rsplib (https://github.com/dreibh/rsplib) on freshly
installed FreeBSD VMs (14.0-RELEASE and 14.0-STABLE) under VirtualBox as we=
ll
as Proxmox. With the following simple steps, I can reproducibly crash all t=
hese
systems:

Build:
git clone https://github.com/dreibh/rsplib
cd rsplib
cmake . -DENABLE_QT=3DOFF
make
cd src
./rspregistrar

In another shell, or on another machine in the same network:
./rspserver
=3D> crash with reboot

Background:
rspserver finds rspregistrar by its ASAP Announces via UDP. Then, it
establishes an SCTP association via SCTP 1-to-many-style socket calls. For =
the
established association to rspregistrar, it calls sctp_peeloff() to get a n=
ew
socket descriptor. I suspect that something is wrong here with SCTP, leadin=
g to
the crash.

Attachments:
* A PCAP trace on another machine, where rspregistrar had been started, in
order to get a PCAP trace up to the crash.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-278171-227>