⬢ DragonFlyBSD Kernel Audit
DF-4079 / panic_console_full.log
← back to finding ↓ download raw
	options=43<RXCSUM,TXCSUM,RSS>
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
	groups: lo
vtnet0: flags=808843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,PROXY> metric 0 mtu 1500
	options=28<VLAN_MTU,JUMBO_MTU>
	ether 52:54:00:12:34:56
	inet6 fe80::5054:ff:fe12:3456%vtnet0 prefixlen 64 tentative scopeid 0x1
	media: Ethernet 1000baseT <full-duplex>
	status: active
route: writing to routing socket: File exists
add net default: gateway 10.0.2.2: File exists
Additional routing options:.
Starting devd.
Additional TCP options:.
Mounting NFS file systems:.
ELF ldconfig path: /lib /usr/lib /usr/local/lib /usr/local/libdata/ldconfig/pkg
Building databases...
Starting syslogd.
Oct 15 12:54:06 dfbsd syslogd: kernel boot file is /boot/kernel/kernel

No core dumps found.
swap low/high-water marks set to 41940/62910
swapon: adding /dev/vbd0s1b as swap device
NFS CLIENT: access_cache_timeout=5 neg_cache_timeout=3.
Starting local daemons:.
Updating motd.
Configuring syscons: blanktime.
Starting sshd.
sendmail_submit: /etc/mail/aliases.db not present,  generating
sendmail_clientmqueue: /etc/mail/aliases.db not present,  generating
Starting cron.
Local package initialization:.

Thu Oct 15 12:54:06 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: df4079: dispatching the REAL kernel oce_rq_handler()=0xffffffff805c9e50 (static oce_rx() runs inside it)
df4079: 16 real clusters posted via REAL oce_alloc_rx_bufs() (frag_size=2048)
df4079: === case 1: CQE pkt_size=16383 num_fragments=1 -> max chain data 1x2048 ===
df4079: REAL oce_rx delivered chain to if_input(ifp=0xfffff80118574ac0): [0xfffff8011779c200 m_len=2048]
df4079: m_pkthdr.len (claimed) = 16383   sum(m_len) (actual) = 2048
df4079: *** CHAIN INVARIANT VIOLATION: pkthdr.len exceeds chain data by 14335 PHANTOM bytes (mbuf contract m_pkthdr.len == sum(m_len) broken by oce_rx, oce_if.c:1299) ***
df4079: dispatching the stack offset-walker m_copydata(m, off=2056, 8) -- off is within pkthdr.len but beyond the chain's real 2048 bytes (sys/kern/uipc_mbuf.c:1671)
panic: m_copydata: offset > size of mbuf chain
cpuid = 5
Trace beginning at frame 0xfffff801182e3628
m_copydata() at m_copydata+0x6e 0xffffffff806be34e 
m_copydata() at m_copydata+0x6e 0xffffffff806be34e 
df4079_input() at df4079_input+0x129 0xffffffff82600179 
oce_rx.isra.10() at oce_rx.isra.10+0x287 0xffffffff805c7997 
oce_rq_handler() at oce_rq_handler+0xbf 0xffffffff805c9f0f 
df4079_sysctl_go() at df4079_sysctl_go+0x597 0xffffffff82600727 
Debugger("panic")

CPU5 stopping CPUs: 0x0000001f
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db>