Bug #2257

panic: m_copydata, negative off -1

Added by pavalos about 3 years ago. Updated about 3 years ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:sepherosa% Done:

0%

Category:-
Target version:-

Description

DragonFly v2.13.0.437.g2b9050-DEVELOPMENT #10: Thu Dec 1 21:50:44 PST 2011 :/usr/obj/usr/src/sys/YLEM64

#0 _get_mycpu () at ./machine/thread.h:69
#1 md_dumpsys (di=<optimized out>) at /usr/src/sys/platform/pc64/x86_64/dump_machdep.c:263
#2 0xffffffff802bb205 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:925
#3 0xffffffff802bb86b in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:387
#4 0xffffffff802bbb22 in panic (fmt=0xffffffff804b63df "m_copydata, negative off %d") at /usr/src/sys/kern/kern_shutdown.c:831
#5 0xffffffff8030042d in m_copydata (m=0x0, off=<unavailable>, len=1, cp=0xffffffe1997ca154 "") at /usr/src/sys/kern/uipc_mbuf.c:1425
#6 0xffffffff8036bd06 in tcp_output (tp=0xffffffe19645af90) at /usr/src/sys/netinet/tcp_output.c:739
#7 0xffffffff8036acc3 in tcp_input (mp=<optimized out>, offp=<optimized out>, proto=<optimized out>) at /usr/src/sys/netinet/tcp_input.c:2565
#8 0xffffffff80361166 in transport_processing_oncpu (m=0x0, hlen=20, ip=0xffffffe14957e010) at /usr/src/sys/netinet/ip_input.c:395
#9 0xffffffff803632a3 in ip_input (m=0xffffffe1518faa00) at /usr/src/sys/netinet/ip_input.c:960
#10 0xffffffff803632cd in ip_input_handler (msg=<optimized out>) at /usr/src/sys/netinet/ip_input.c:416
#11 0xffffffff8034fc75 in netisr_handle (num=2, m=0xffffffe1518faa00) at /usr/src/sys/net/netisr.c:416
#12 0xffffffff8034c4ef in ether_demux_oncpu (ifp=<optimized out>, m=0xffffffe1518faa00) at /usr/src/sys/net/if_ethersubr.c:1218
#13 0xffffffff8034c631 in ether_input_oncpu (ifp=0xffffffe0fd908000, m=0xffffffe1518faa00) at /usr/src/sys/net/if_ethersubr.c:1289
#14 0xffffffff8034d342 in ether_input_handler (nmsg=<optimized out>) at /usr/src/sys/net/if_ethersubr.c:1407
#15 0xffffffff8034f2db in netmsg_service_loop (arg=<optimized out>) at /usr/src/sys/net/netisr.c:307
#16 0xffffffff802c690f in lwkt_deschedule_self (td=<unavailable>) at /usr/src/sys/kern/lwkt_thread.c:357
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Files are being uploaded to leaf:~pavalos/crash/*41

--Peter

noname (199 Bytes) pavalos, 12/11/2011 11:35 AM

History

#1 Updated by pavalos about 3 years ago

  • Status changed from New to Closed
  • Assignee set to sepherosa

Fixed in 1ff9b7d322dc5a26f7173aa8c38ecb79da80e419.

Also available in: Atom PDF