[Bug 264257] [tcp] Panic: Fatal trap 12: page fault while in kernel mode (if_io_tqg_4) - m_copydata ... at /usr/src/sys/kern/uipc_mbuf.c:659

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=264257

Timothy Pearson <tpearson@raptorengineering.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tpearson@raptorengineering.
                   |                            |com

--- Comment #114 from Timothy Pearson <tpearson@raptorengineering.com> ---
We're still seeing a very similar panic on a FreeBSD 13 router system that
includes this patch in the kernel:

Tracing command kernel pid 0 tid 100012 td 0xfffffe001ed50720 (CPU 1)
kdb_enter() at kdb_enter+0x37/frame 0xfffffe001bd3f5b0
vpanic() at vpanic+0x1b0/frame 0xfffffe001bd3f600
panic() at panic+0x43/frame 0xfffffe001bd3f660
trap_fatal() at trap_fatal+0x385/frame 0xfffffe001bd3f6c0
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe001bd3f720
calltrap() at calltrap+0x8/frame 0xfffffe001bd3f720
--- trap 0xc, rip = 0xffffffff80d3d250, rsp = 0xfffffe001bd3f7f0, rbp =
0xfffffe001bd3f850 ---
m_copym() at m_copym+0x30/frame 0xfffffe001bd3f850
ip_fragment() at ip_fragment+0x24f/frame 0xfffffe001bd3f8f0
ip_output() at ip_output+0x13d5/frame 0xfffffe001bd3fa30
ip_forward() at ip_forward+0x3cf/frame 0xfffffe001bd3fae0
ip_input() at ip_input+0x79e/frame 0xfffffe001bd3fb70
netisr_dispatch_src() at netisr_dispatch_src+0xb9/frame 0xfffffe001bd3fbc0
ether_demux() at ether_demux+0x138/frame 0xfffffe001bd3fbf0
ether_nh_input() at ether_nh_input+0x355/frame 0xfffffe001bd3fc50
netisr_dispatch_src() at netisr_dispatch_src+0xb9/frame 0xfffffe001bd3fca0
ether_input() at ether_input+0x69/frame 0xfffffe001bd3fd00
iflib_rxeof() at iflib_rxeof+0xc27/frame 0xfffffe001bd3fe00
_task_fn_rx() at _task_fn_rx+0x72/frame 0xfffffe001bd3fe40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0x15d/frame 0xfffffe001bd3fec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame
0xfffffe001bd3fef0
fork_exit() at fork_exit+0x7e/frame 0xfffffe001bd3ff30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe001bd3ff30
--- trap 0, rip = 0xffffffff80c313af, rsp = 0, rbp = 0x3 ---
mi_startup() at mi_startup+0xdf/frame 0x3

Will try the workaround to see if the issue still appears.  Note it can be
several weeks between panics, so we won't know if the workaround is still a
solution until the end of April.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.