[Bug 288904] [tcp] page fault in tcp_default_output

[email protected] Fri, 19 Jun 2026 09:05:53 +0000
Newsgroups gmane.os.freebsd.devel.net
Message-ID <[email protected]/bugzilla/>
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288904

Andrey V. Elsukov <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #20 from Andrey V. Elsukov <[email protected]> ---
I have the panic with the similar backtrace, but the system is based on
15.0-CURRENT: kern.osreldate: 1500025
Not sure it is worth investigating, I'll keep the core for a while.

Unread portion of the kernel message buffer:
panic: error while FIN with SACK rxmit
cpuid = 6
time = 1781851312
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00e41f0a10
vpanic() at vpanic+0x13f/frame 0xfffffe00e41f0b40
panic() at panic+0x43/frame 0xfffffe00e41f0ba0
tcp_default_output() at tcp_default_output+0x2e14/frame 0xfffffe00e41f0d70
tcp_timer_rexmt() at tcp_timer_rexmt+0x6b6/frame 0xfffffe00e41f0dd0
tcp_timer_enter() at tcp_timer_enter+0x15e/frame 0xfffffe00e41f0e10
softclock_call_cc() at softclock_call_cc+0x139/frame 0xfffffe00e41f0ec0
softclock_thread() at softclock_thread+0xc6/frame 0xfffffe00e41f0ef0
fork_exit() at fork_exit+0x82/frame 0xfffffe00e41f0f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00e41f0f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Uptime: 69d22h48m39s

(kgdb) bt
#0  __curthread () at /usr/src/sys/amd64/include/pcpu_aux.h:57
#1  doadump (textdump=textdump@entry=1) at
/usr/src/sys/kern/kern_shutdown.c:404
#2  0xffffffff80b534c0 in kern_reboot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:524
#3  0xffffffff80b539dc in vpanic (fmt=0xffffffff8129750b "error while FIN with
SACK rxmit", ap=ap@entry=0xfffffe00e41f0b80) at
/usr/src/sys/kern/kern_shutdown.c:979
#4  0xffffffff80b53823 in panic (fmt=<unavailable>) at
/usr/src/sys/kern/kern_shutdown.c:892
#5  0xffffffff80d57604 in tcp_default_output (tp=0xfffff80fcd2f6a80,
tp@entry=<error reading variable: value is not available>) at
/usr/src/sys/netinet/tcp_output.c:1675
#6  0xffffffff80d69636 in tcp_output_locked (tp=0xfffff80fcd2f6a80) at
/usr/src/sys/netinet/tcp_timer.c:298
#7  tcp_timer_rexmt (tp=0xfffff80fcd2f6a80) at
/usr/src/sys/netinet/tcp_timer.c:815
#8  0xffffffff80d68b5e in tcp_timer_enter (xtp=0xfffff80fcd2f6a80) at
/usr/src/sys/netinet/tcp_timer.c:890
#9  0xffffffff80b71f99 in softclock_call_cc (c=0xfffff80fcd2f6c20,
cc=cc@entry=0xffffffff8398a300, direct=direct@entry=0) at
/usr/src/sys/kern/kern_timeout.c:714
#10 0xffffffff80b73606 in softclock_thread (arg=arg@entry=0xffffffff8398a300)
at /usr/src/sys/kern/kern_timeout.c:846
#11 0xffffffff80b08052 in fork_exit (callout=0xffffffff80b73540
<softclock_thread>, arg=0xffffffff8398a300, frame=0xfffffe00e41f0f40) at
/usr/src/sys/kern/kern_fork.c:1151

-- 
You are receiving this mail because:
You are the assignee for the bug.