Date: Wed, 22 Dec 2021 23:26:53 +0000 From: bugzilla-noreply@freebsd.org To: net@FreeBSD.org Subject: [Bug 260393] Page Fault tcp_output/tcp_input Message-ID: <bug-260393-7501-1P3KWqwyrW@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-260393-7501@https.bugs.freebsd.org/bugzilla/> References: <bug-260393-7501@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D260393 --- Comment #67 from Dobri Dobrev <ddobrev85@gmail.com> --- (In reply to Michael Tuexen from comment #66) (kgdb) frame 12 #12 0xffffffff80e11a3b in tcp_m_copym (m=3D0x0, m@entry=3D0xfffff80bc680b50= 0, off0=3D1388, plen=3D<optimized out>, plen@entry=3D0xfffffe017fd6282c, segli= mit=3D1, seglimit@entry=3D0, segsize=3Dsegsize@entry=3D0, sb=3D<optimized out>,=20 hw_tls=3D<optimized out>) at /usr/src/sys/netinet/tcp_output.c:2011 2011 KASSERT(len =3D=3D M_COPYALL, (kgdb) print *(struct mbuf *)0xfffff80bc680b500 $1 =3D {{m_next =3D 0x0, m_slist =3D {sle_next =3D 0x0}, m_stailq =3D {stqe= _next =3D 0x0}}, {m_nextpkt =3D 0x0, m_slistpkt =3D {sle_next =3D 0x0}, m_stailqpkt =3D {stq= e_next =3D 0x0}},=20 m_data =3D 0xfffff8017874f000 "O\320mg\276\022\364u\353\271\061\270tI\356\063\227/\030\204\032d\\\252\274= \261`P=D2=B2\271\232F\343-\304\372\307<\031u\212\260\061=DF=90\264\306i\361= Vj\212\314=CF=93M\031R\257G\b\246\233\227\233,D\335C\220\273\022\025\223\25= 1\361\211\222e+0M)\201\233\034e'\222\203\242h\201\017w\026\065\365\242=D8= =AE\f\225\350\313\311\364$\244\262\265\370\375\237\f\206\303\r\"6\266F6\377= \352\270\036?\022\fJ\032'\225\203Q\332Fy*d\225\373", <incomplete sequence \303>, m_len =3D 1999, m_type =3D 1, m_flags =3D 1, {{= {m_pkthdr =3D {{snd_tag =3D 0x0, rcvif =3D 0x0}, tags =3D {slh_first =3D 0x0}, len = =3D 1297, flowid =3D 0, csum_flags =3D 0, fibnum =3D 0, numa_domain =3D 255 '\377',=20 rsstype =3D 0 '\000', {rcv_tstmp =3D 0, {l2hlen =3D 0 '\000', l3h= len =3D 0 '\000', l4hlen =3D 0 '\000', l5hlen =3D 0 '\000', inner_l2hlen =3D 0 '\000', inner_l3hlen =3D 0 '\000', inner_l4hlen =3D 0 '\000',=20 inner_l5hlen =3D 0 '\000'}}, PH_per =3D {eight =3D "\000\000\000\000\377\377\000", sixteen =3D {0, 0, 65535, 0}, thirtytwo =3D= {0, 65535}, sixtyfour =3D {281470681743360}, unintptr =3D {281470681743360},=20 ptr =3D 0xffff00000000}, PH_loc =3D {eight =3D "\000\000\000\000\000\000\000", sixteen =3D {0, 0, 0, 0}, thirtytwo =3D {0,= 0}, sixtyfour =3D {0}, unintptr =3D {0}, ptr =3D 0x0}}, {m_epg_npgs =3D 0 '\000= ', m_epg_nrdy =3D 0 '\000',=20 m_epg_hdrlen =3D 0 '\000', m_epg_trllen =3D 0 '\000', m_epg_1st_o= ff =3D 0, m_epg_last_len =3D 0, m_epg_flags =3D 0 '\000', m_epg_record_type =3D 0 '\0= 00', __spare =3D "\000", m_epg_enc_cnt =3D 0, m_epg_tls =3D 0x511,=20 m_epg_so =3D 0xff000000000000, m_epg_seqno =3D 0, m_epg_stailq =3D {stqe_next =3D 0xffff00000000}}}, {m_ext =3D {{ext_count =3D 2, ext_cnt =3D 0xdeadc0de00000002}, ext_size =3D 2048, ext_type =3D 6, ext_flags =3D 1, {{ ext_buf =3D 0xfffff8017874f000 "O\320mg\276\022\364u\353\271\061\270tI\356\063\227/\030\204\032d\\\252\274= \261`P=D2=B2\271\232F\343-\304\372\307<\031u\212\260\061=DF=90\264\306i\361= Vj\212\314=CF=93M\031R\257G\b\246\233\227\233,D\335C\220\273\022\025\223\25= 1\361\211\222e+0M)\201\233\034e'\222\203\242h\201\017w\026\065\365\242=D8= =AE\f\225\350\313\311\364$\244\262\265\370\375\237\f\206\303\r\"6\266F6\377= \352\270\036?\022\fJ\032'\225\203Q\332Fy*d\225\373", <incomplete sequence \303>, ext_arg2 =3D 0x0}, {extpg_pa =3D {1844673528393= 2426240, 0, 16045693110842147038, 16045693110842147038, 16045693110842147038},=20 extpg_trail =3D "\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\2= 55\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\= 300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336= \336\300\255\336\336\300\255", <incomplete sequence \336>, extpg_hdr =3D "\336\300\255\336\336\300\255\336\336\300\255\336\336\300\255\336\336\300\2= 55\336\336\300\255"}}, ext_free =3D 0x0,=20 ext_arg1 =3D 0x0}, m_pktdat =3D 0xfffff80bc680b558 "\002"}}, m_da= t =3D 0xfffff80bc680b520 ""}} (kgdb) print *(int32_t *)0xfffffe017fd6282c $2 =3D 612 (kgdb) frame 14 #14 0xffffffff80e0607a in tcp_do_segment (m=3D<optimized out>, th=3D0xfffff80bc659e87a, so=3D<optimized out>, tp=3D0xfffffe0252e24000, drop_hdrlen=3D40, tlen=3D<optimized out>, iptos=3D0 '\000') at /usr/src/sys/netinet/tcp_input.c:2822 2822 tcp_sack_partialack= (tp, th); (kgdb) print *th $3 =3D {th_sport =3D 43204, th_dport =3D 63248, th_seq =3D 2812027976, th_a= ck =3D 324807354, th_x2 =3D 0 '\000', th_off =3D 5 '\005', th_flags =3D 16 '\020',= th_win =3D 16103, th_sum =3D 0, th_urp =3D 0} (kgdb) print *tp $4 =3D {t_inpcb =3D 0xfffff8090099b1f0, t_fb =3D 0xffffffff81b414a0 <tcp_def_funcblk>, t_fb_ptr =3D 0x0, t_maxseg =3D 1400, t_logstate =3D 0, t= _port =3D 0, t_state =3D 6, t_idle_reduce =3D 0, t_delayed_ack =3D 0, t_fin_is_rst =3D 0= ,=20 t_log_state_set =3D 0, bits_spare =3D 0, t_flags =3D 554697333, snd_una = =3D 324805966, snd_max =3D 324807967, snd_nxt =3D 324807967, snd_up =3D 3248059= 66, snd_wnd =3D 65800, snd_cwnd =3D 1400, t_peakrate_thr =3D 0, ts_offset =3D 0= ,=20 rfbuf_ts =3D 12071754, rcv_numsacks =3D 0, t_tsomax =3D 65535, t_tsomaxse= gcount =3D 37, t_tsomaxsegsize =3D 4096, rcv_nxt =3D 2812027976, rcv_adv =3D 281209383= 2, rcv_wnd =3D 65856, t_flags2 =3D 1024, t_srtt =3D 7549, t_rttvar =3D 947,=20 ts_recent =3D 0, snd_scale =3D 2 '\002', rcv_scale =3D 6 '\006', snd_limi= ted =3D 0 '\000', request_r_scale =3D 6 '\006', last_ack_sent =3D 2812027976, t_rcvti= me =3D 2159165013, rcv_up =3D 2812027976, t_segqlen =3D 0, t_segqmbuflen =3D 0,=20 t_segq =3D {tqh_first =3D 0x0, tqh_last =3D 0xfffffe0252e24090}, t_in_pkt= =3D 0x0, t_tail_pkt =3D 0x0, t_timers =3D 0xfffffe0252e242a8, t_vnet =3D 0xfffff8010= 582fec0, snd_ssthresh =3D 2800, snd_wl1 =3D 2812027976, snd_wl2 =3D 324805966,=20 irs =3D 2812024397, iss =3D 324701574, t_acktime =3D 0, t_sndtime =3D 215= 9073224, ts_recent_age =3D 0, snd_recover =3D 324807967, cl4_spare =3D 0, t_oobflags= =3D 0 '\000', t_iobc =3D 0 '\000', t_rxtcur =3D 64000, t_rxtshift =3D 8,=20 t_rtttime =3D 0, t_rtseq =3D 324807965, t_starttime =3D 2158904990, t_fby= te_in =3D 2158905017, t_fbyte_out =3D 2158905018, t_pmtud_saved_maxseg =3D 0, t_blackhole_enter =3D 0, t_blackhole_exit =3D 0, t_rttmin =3D 30, t_rttbest= =3D 7842,=20 t_softerror =3D 0, max_sndwnd =3D 65800, snd_cwnd_prev =3D 5600, snd_ssth= resh_prev =3D 2800, snd_recover_prev =3D 324776566, t_sndzerowin =3D 0, t_rttupdated = =3D 15, snd_numholes =3D 1, t_badrxtwin =3D 2158964144, snd_holes =3D { tqh_first =3D 0xfffff806d01890a0, tqh_last =3D 0xfffff806d01890b0}, snd= _fack =3D 324807354, sackblks =3D {{start =3D 2812027975, end =3D 2812027976}, {start= =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0, end =3D 0}, {start =3D 0,=20 end =3D 0}, {start =3D 0, end =3D 0}}, sackhint =3D {nexthole =3D 0xfffff806d01890a0, sack_bytes_rexmit =3D 0, last_sack_ack =3D 324807354, delivered_data =3D 1388, sacked_bytes =3D 611, recover_fs =3D 3400, prr_del= ivered =3D 6800,=20 prr_out =3D 7588}, t_rttlow =3D 190, rfbuf_cnt =3D 0, tod =3D 0x0, t_sn= drexmitpack =3D 47, t_rcvoopack =3D 0, t_toe =3D 0x0, cc_algo =3D 0xffffffff81b3e350 <newreno_cc_algo>, ccv =3D 0xfffffe0252e243f0, osd =3D 0xfffffe0252e24418,= =20 t_bytes_acked =3D 0, t_maxunacktime =3D 0, t_keepinit =3D 0, t_keepidle = =3D 0, t_keepintvl =3D 0, t_keepcnt =3D 0, t_dupacks =3D 0, t_lognum =3D 0, t_logl= imit =3D 5000, t_pacing_rate =3D -1, t_logs =3D {stqh_first =3D 0x0,=20 stqh_last =3D 0xfffffe0252e24218}, t_lin =3D 0x0, t_lib =3D 0x0, t_outp= ut_caller =3D 0x0, t_stats =3D 0x0, t_logsn =3D 0, gput_ts =3D 0, gput_seq =3D 0, gpu= t_ack =3D 0, t_stats_gput_prev =3D 0, t_maxpeakrate =3D 0, t_sndtlppack =3D 0,=20 t_sndtlpbyte =3D 0, t_sndbytes =3D 125990, t_snd_rxt_bytes =3D 40040, t_tfo_client_cookie_len =3D 0 '\000', t_end_info_status =3D 0, t_tfo_pendin= g =3D 0x0, t_tfo_cookie =3D {client =3D '\000' <repeats 15 times>, server =3D 0}, { t_end_info_bytes =3D "\000\000\000\000\000\000\000", t_end_info =3D 0}} (kgdb) --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-260393-7501-1P3KWqwyrW>