Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 May 2022 16:13:51 +0000
From:      bugzilla-noreply@freebsd.org
To:        net@FreeBSD.org
Subject:   [Bug 264257] Panic: Fatal trap 12: page fault while in kernel mode (if_io_tqg_4) - m_copydata ... at /usr/src/sys/kern/uipc_mbuf.c:659
Message-ID:  <bug-264257-7501-e9TT6coktZ@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-264257-7501@https.bugs.freebsd.org/bugzilla/>
References:  <bug-264257-7501@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D264257

--- Comment #5 from John Baldwin <jhb@FreeBSD.org> ---
Looks like it walked off the end of the mbuf chain as it tried to copy one =
byte
too many.  You could try going up to frame 8 (tcp_output) to see if the
arguments passed to m_copydata() are still around (looks like we know the m=
buf
chain via m@entry for frame 9, but knowing the original length and offset a=
nd
confirming it walked off the end would be good).  You'd have to figure out =
why
the length was wrong though and that might need more digging in the tp or t=
he
like.

--=20
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-264257-7501-e9TT6coktZ>