https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=297352

            Bug ID: 297352
           Summary: panic in m_copydata() from tcp_sack_partialack() or
                    tcp_do_segment()
           Product: Base System
           Version: 14.4-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

2 panics occurred recently:

Text recognized from IPKVM.

06 Aug 2026 
trap_pfault() at trap_pfault+0x3e0/frame 0xfffffe00d2fd0510
calltrap() at calltrap+0x8/frame 0xfffffe00d2fd0510
--- trap 0xc, rip = 0xffffffff80c14db8, rsp = 0xfffffe00d2fd05e0, rbp =
0xfffffe00d2fd0650 ---
m_copydata() at m_copydata+0x58/frame 0xfffffe00d2fd0650
tcp_default_output() at tcp_default_output+0x12ba/frame 0xfffffe00d2fd0810
tcp_sack_partialack() at tcp_sack_partialack+0xbd/frame 0xfffffe00d2fd0840
tcp_do_segment() at tcp_do_segment+0x1fe7/frame 0xfffffe00d2fd0920
tcp_input_with_port() at tcp_input_with_port+0xf20/frame 0xfffffe00d2fd0a60
tcp_input() at tcp_input+0xb/frame 0xfffffe00d2fd0a70
ip_input() at ip_input+0x237/frame 0xfffffe00d2fd0ad0
netisr_dispatch_src() at netisr_dispatch_src+0x9f/frame 0xfffffe00d2fd0b20
ether_demux() at ether_demux+0x149/frame 0xfffffe00d2fd0b50
ether_nh_input() at ether_nh_input+0x36a/frame 0xfffffe00d2fd0bb0
netisr_dispatch_src() at netisr_dispatch_src+0x9f/frame 0xfffffe00d2fd0c00
ether_input() at ether_input+0x56/frame 0xfffffe00d2fd0c50
tcp_push_and_replace() at tcp_push_and_replace+0x25/frame 0xfffffe00d2fd0c80
tcp_lro_flush() at tcp_lro_flush+0x78/frame 0xfffffe00d2fd0cb0
tcp_lro_flush_all() at tcp_lro_flush_all+0x213/frame 0xfffffe00d2fd0d00
iflib_rxeof() at iflib_rxeof+0xc6d/frame 0xfffffe00d2fd0e00
_task_fn_rx() at _task_fn_rx+0x72/frame 0xfffffe00d2fd0e40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0x14e/frame 0xfffffe00d2fd0ec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame
0xfffffe00d2fd0ef0
fork_exit() at fork_exit+0x81/frame 0xfffffe00d2fd0f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00d2fd0f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100035 ]
Stopped at     kdb_enter+0x33: movq   $0,0x1013092(%rip)
db>


07 june 2026
--- trap 0xc, rip = 0xffffffff80c14068, rsp = 0xfffffffe0115d35510, rbp =
0xfffffffe0115d35580 ---
m_copydata() at m_copydata+0x58/frame 0xfffffffe0115d35580
tcp_default_output() at tcp_default_output+0x12ba/frame 0xfffffffe0115d35740
tcp_do_segment() at tcp_do_segment+0x2b84/frame 0xfffffffe0115d35820
tcp_input_with_port() at tcp_input_with_port+0xf20/frame 0xfffffffe0115d35960
tcp_input() at tcp_input+0xb/frame 0xfffffffe0115d35970
ip_input() at ip_input+0x237/frame 0xfffffffe0115d359d0
netisr_dispatch_src() at netisr_dispatch_src+0x9f/frame 0xfffffffe0115d35a20
ether_demux() at ether_demux+0x149/frame 0xfffffffe0115d35a50
ether_nh_input() at ether_nh_input+0x36a/frame 0xfffffffe0115d35ab0
netisr_dispatch_src() at netisr_dispatch_src+0x9f/frame 0xfffffffe0115d35b00
ether_input() at ether_input+0x56/frame 0xfffffffe0115d35b50
ether_demux() at ether_demux+0x99/frame 0xfffffffe0115d35b80
ether_nh_input() at ether_nh_input+0x36a/frame 0xfffffffe0115d35be0
netisr_dispatch_src() at netisr_dispatch_src+0x9f/frame 0xfffffffe0115d35c30
ether_input() at ether_input+0x56/frame 0xfffffffe0115d35c80
tcp_lro_flush() at tcp_lro_flush+0x31f/frame 0xfffffffe0115d35cb0
tcp_lro_flush_all() at tcp_lro_flush_all+0x213/frame 0xfffffffe0115d35d00
iflib_rxeof() at iflib_rxeof+0xc6d/frame 0xfffffffe0115d35e00
_task_fn_rx() at _task_fn_rx+0x72/frame 0xfffffffe0115d35e40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0x14e/frame
0xfffffffe0115d35ec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame
0xfffffffe0115d35ef0
fork_exit() at fork_exit+0x81/frame 0xfffffffe0115d35f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffffe0115d35f30
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
KDB: enter: panic
[ thread pid 0 tid 100023 ]
Stopped at     kdb_enter+0x33: movq   $0,0x1013942(%rip)
db>

My kernel is GENERIC with SUIDDIR, DDB options.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to