From nobody Thu Jun 19 01:20:51 2025 X-Original-To: net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bN2qR6xZ0z5yM7r for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bN2qR4xmhz3tW0 for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296051; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K+s8Q+4/jVviIUY3BZgQScTCn0beTKFD1bqe8sZ1Z/U=; b=YaQefbjVDPqpJtpdMlILm76ijWFh17LKnR7ZD4kNXRumP2YuQBNjTJZVx9qVGJt3DqvA8H MpsGO7D8Y+cKFyRX5Mgw0XodFmtVGtq3educn0oi6H8Nkl1Jh5+0SEHlQ9W09eJZIYP3F6 9uExfSxBvSnfxcGxLjJ/GkXJpL6nI6jil1WwHgB3m+y8XECJIgyJKhP2rHpHYKqzIRV9vO VsPG89AFnJj4hujkE3OuVMhMjbqwB7ZeCmQ1924tjMaNFee4fyF4LCguD1xotDflxA/sfX YU1YuUjrZo6HGdh5UGAeMI65C4sfImFzN3G7fcmSVw8cnzwdw6MwMnu2kajIPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1750296051; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=K+s8Q+4/jVviIUY3BZgQScTCn0beTKFD1bqe8sZ1Z/U=; b=EToqiNy/QrwDeD9GNz1lSSCTYSBMOpkUvFcrzTbTKOaRPn8rogbIcnLpJInjaPUCeGLMP/ McR4ZYMLfl0NvzfuvfNwInb4DtqDCFsWy9kTmxHUAxarOsQEfXn9hRH+oXwfdSdKFKgU3H bI7uELWcPVweOlfwLkE/Jxb9V1Ft8yQZoCr4F92DsPZfAH9B2F5M+i2DufBRFDj7V6MCQA iFJu12Rv8cM2hARtRR+0JaREILB663Fnoc73mmHx3xcr5B4BKCqZmrZQ3zED4bagaMPaYt nGwQ8KLrrM3OFi/pTSdUvhScZDyBn7mXkO4CD/nkRjbbR5W9zkQ+K2yhIqf0nw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1750296051; a=rsa-sha256; cv=none; b=F2wpOXLCaa2qN8L1s+3mrGhR1IJtEvfXw7sS7Vfz76vCm0Y+aXTyQvq7UsBNx4dAtCbfV4 D5q3c0XjSSKtxoPrx9cUINuME4RwuWzInQoW3RQ7qmSh8B1aQXdQ6/482PGDIHcVHXutZq YQCrvT+52DkFfJXRiZsKPnNytzertREIfY0BnmbXGxTs95LRut8GgpM6TbvlFKx1gnvH3R 5d/QCEZ9Ai3sDJuFp1yI7thr5Wyq1cyZ+SEUfPTjR5iJZDbnTq0lTBqRNJrOH+iyOcR3/y e9p5s0cpuo1gcMM3M7cmfUsrpNtIzH0kMCkMaRU9KOQn+eOxu4drZ82y+FHwQQ== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bN2qR2mNdztKb for ; Thu, 19 Jun 2025 01:20:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 55J1KpuU002099 for ; Thu, 19 Jun 2025 01:20:51 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 55J1KpcW002097 for net@FreeBSD.org; Thu, 19 Jun 2025 01:20:51 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 287229] IP reassembly issue in FreeBSD 14.1 Date: Thu, 19 Jun 2025 01:20:51 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 14.2-STABLE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: rgrimes@FreeBSD.org X-Bugzilla-Status: Open X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: tuexen@freebsd.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: cc Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D287229 Rodney W. Grimes changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rgrimes@FreeBSD.org --- Comment #14 from Rodney W. Grimes --- (In reply to Timo Voelker from comment #10) The number of list entries (net.inet.ip.maxfragbucketsize) seems relevant h= ere. Out of the box, your FreeBSD VM has set maxfragbucketsize=3D1. This means i= f the FreeBSD VM must insert a new entry (i.e., when the first fragment of a pack= et has been received) in a bucket that already contains an entry, it removes t= his one first. In consequence, FreeBSD is probably unable to reassemble that pa= cket with the removed fragments. So I believe the "relevant bug" here is that maxfrqgbucksize is allowed to = go to 1, there should be a clamp on the calculation to prevent this absurd val= ue that would lead to the behavior uncovered by artificially reducing kernel memory space. There are many values that we calculate based on tuning parameters and those values should have reasonable clamps on them, if they = lead to bad behavior when they go to low or two high. --=20 You are receiving this mail because: You are on the CC list for the bug.=