Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Jun 2022 21:34:40 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 264257] [tcp] Panic: Fatal trap 12: page fault while in kernel mode (if_io_tqg_4) - m_copydata ... at /usr/src/sys/kern/uipc_mbuf.c:659
Message-ID:  <bug-264257-7501-cPjSONFcjC@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-264257-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-264257-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D264257

--- Comment #37 from Richard Scheffenegger <rscheff@freebsd.org> ---
Can you provide the vmcore (and kernel.debug) files?

Or check=20
f 10
p *tp
p *tp->sackhint.nexthole
p tp->snd_una +  tp->t_inpcb->inp_socket->so_snd.sb_ccc
p/x tp->t_flags
p/x tp->t_flags2
p *tp->t_timers

So far, this seems to be the signature:
t_state =3D=3D 8 (LAST_ACK)
snd_max =3D=3D snd_una + so_snd.sb_ccc + 2 (! should be one to account for =
the FIN)
snd_fack < sackhole.end (rescue retransmission - this is new in fbsd13)
t_rxtshift =3D=3D 6..12 (many retransmission timeouts, indicating the client
disappeared - temporarily)
t_rtseq =3D=3D snd_una + so_snd.sb_ccc
snd_recover =3D=3D snd_max (indicating the double-accounting for FIN happen=
d prior
of entering loss recovery, or "many" packets prior of the actual panic)

t_flags =3D 0x20100274 (TF_CONGRECOVERY, TF_FASTRECOVERY, TF_SACK_PERMIT,
TF_SENTFIN, TF_REQ_SCALE, TF_RCVD_SCALE, TF_NODELAY, TF_ACKNOW)

--=20
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-264257-7501-cPjSONFcjC>