From nobody Sun Sep 21 13:51:33 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cV72G0VX7z688Pb for ; Sun, 21 Sep 2025 13:51:34 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cV72F6MM0z3nw0 for ; Sun, 21 Sep 2025 13:51:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1758462693; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SBPbPJ67yGEgQCgboxJvsEgfl2woH6pTk6ACRHjRmAU=; b=GmWF1Wa/F82iayleakkwqTU2KxpQmsal2p5VoTnfBziMaMkONfrdrE1o+EwoJ7bXL9nKeN ki2rRkDIUJRQMGDM+8ugQaRlQJXaabwTSWtZOIR85CxLs0wSH/5IUp1jDPOL4EWi/KfqmG OwzA2NTTIlES8Vc++74UCLBKtaRd3r5+8n4t8XwMxIU1gbl8dGAACsD8DtI8BQNOMvD+q5 Jj7y8bDywlVDXMhpRVKCAntuXSYQgLbeUSdY1tGIKyH9cNx7wQntEUztT/WV+3q48T5xDq wNEv2p/ptvd0iNfxNIXeg7/r2Fh5Y+xtV4YQkpdF8hdxsmP5UZPj/bcc128+/A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1758462693; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=SBPbPJ67yGEgQCgboxJvsEgfl2woH6pTk6ACRHjRmAU=; b=nEP5X4Q1thT299rQqecLT4JuswZJ8s5NQXeP2IQ+dPBeAnCxjVNRgSM8vZZ766v5WZiOps ptGKVqECTHbOGezCOth0PLOJfRld0qiEtHjFth8YTp24mHP9fk1kAOUHq00pisVJev99Ls PAiq4HOoj8SBZrWFLjFHc5HP9tlBg77w3Ex8viOH1fHXRiPVNETz8PbTHr09mrB/RgyL+v WtCOfXZg4aGRmsfh5iSUzI7LyAwpAekkzh/6B8BGB7dQ5UI074wVXNMD6kdRrjbLNOrzhx B6eYlB/l4K/WfG3T8lKfBGxgNEnXH/K2v1DWc6lHvmILSGlah24N45tokN8L2A== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1758462693; a=rsa-sha256; cv=none; b=Kh2CLg43G7iKEF1CbS1JrPekm9cs4hZ8SUXYyUsS9y0B48UydgBLJnNfTBzBwUh6A827ej 4A4dNYkyfAM01PRmJwNwUTck9yMhrkDydw7jEe5a3nmk39YeEHTqIClZZNHUZcTHPyr8S6 NwNQXdnp4zNb9mczyVUsbUdTodFHYA5die0MvpQWSM1JehGn7aX6i4CCE3D0lV6EpNEW0T XR+8l2cx/0LUy2SNMP4yISRm5t26GNEzKua21gk4KBib1VTVhewunzl/dWZ50aIEIT6iPz recUBlIkpeI14gt6bA2QS8ARn4ITwgMc7EWSI1QfD0X42KBG968gqmiBiJnTRQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4cV72F5l8dz24Q for ; Sun, 21 Sep 2025 13:51:33 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 58LDpXtQ071623 for ; Sun, 21 Sep 2025 13:51:33 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 58LDpXM7071622 for net@FreeBSD.org; Sun, 21 Sep 2025 13:51:33 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 289734] panic tcp_usr_close while running mount command after configure NFS over TLS Date: Sun, 21 Sep 2025 13:51:33 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-CURRENT X-Bugzilla-Keywords: crash, vendor X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: rmacklem@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: net@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D289734 Rick Macklem changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rmacklem@FreeBSD.org --- Comment #1 from Rick Macklem --- (In reply to Wafa Hamzah from comment #0) I haven't looked at the crash yet, but here are a few configuration related comments: V4: / -sec=3Dsys:krb5p:tls There should be an error in /var/log/messages for the above. It should look like: V4: / -sec=3Dsys:krb5p -tls (You only need krb5p if clients are going to be doing sec=3Dkrb5p mounts. Also, you always want "krb5i" as well for Linux clients because they sometimes use "krb5i" even when you've specified "krb5p".) Run the following command: # rpc.tlsservd This suggests you didn't reboot after doing the configuration. (Although rebooting should not be necessary, there are ordering dependencies w.r.t. the various server daemons, so you should (re)start all of them after setting the configuration and rebooting is the easy way to do so.) --> This might be why you are getting the crashes. mount -o tls 13.0.0.2:/tmp /mnt This is an NFSv3 mount. It should work, although I'll admit I haven't tested using NFS-over-TLS for NFSv3 recently. (It is a recently adopted feature aimed at NFSv4.) --> Again, this might explain why you are getting crashes. I will try an NFSv3 mount in a few days (I'm not at home right now) and see if I can reproduce the crash. --=20 You are receiving this mail because: You are the assignee for the bug.=