Panic... r350849 panic: m_copydata, negative off -1

I do have a core if folks want to look.

r350849

Unread portion of the kernel message buffer:
panic: m_copydata, negative off -1
cpuid = 0
time = 1566090669
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 
0xfffffe011a798720
vpanic() at vpanic+0x19d/frame 0xfffffe011a798770
panic() at panic+0x43/frame 0xfffffe011a7987d0
m_copydata() at m_copydata+0x17a/frame 0xfffffe011a798850
rack_output() at rack_output+0x2c00/frame 0xfffffe011a798a70
tcp_hpts_thread() at tcp_hpts_thread+0x5e6/frame 0xfffffe011a798b50
ithread_loop() at ithread_loop+0x187/frame 0xfffffe011a798bb0
fork_exit() at fork_exit+0x84/frame 0xfffffe011a798bf0
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe011a798bf0
--- trap 0, rip = 0, rsp = 0, rbp = 0 ---
Uptime: 6d22h22m59s
Dumping 28815 out of 131026 
MB:..1%..11%..21%..31%..41%..51%..61%..71%..81%..91%

__curthread () at /usr/src/sys/amd64/include/pcpu.h:246
246             __asm("movq %%gs:%P1,%0" : "=r" (td) : "n" 
(OFFSETOF_CURTHREAD));
(kgdb) #0  __curthread () at /usr/src/sys/amd64/include/pcpu.h:246
#1  doadump (textdump=1) at /usr/src/sys/kern/kern_shutdown.c:392
#2  0xffffffff804bb950 in kern_reboot (howto=260)
     at /usr/src/sys/kern/kern_shutdown.c:479
#3  0xffffffff804bbdc9 in vpanic (fmt=<optimized out>, ap=<optimized 
out>)
     at /usr/src/sys/kern/kern_shutdown.c:905
#4  0xffffffff804bbb03 in panic (fmt=<unavailable>)
     at /usr/src/sys/kern/kern_shutdown.c:832
#5  0xffffffff8054868a in m_copydata (m=<optimized out>, 
off=<unavailable>,
     len=<unavailable>, cp=<unavailable>) at 
/usr/src/sys/kern/uipc_mbuf.c:622
#6  0xffffffff8268bda0 in rack_output (tp=<optimized out>)
     at 
/usr/src/sys/modules/tcp/rack/../../../netinet/tcp_stacks/rack.c:7957
#7  0xffffffff80679176 in tcp_hptsi (hpts=<optimized out>)
     at /usr/src/sys/netinet/tcp_hpts.c:1621
#8  tcp_hpts_thread (ctx=<optimized out>)
     at /usr/src/sys/netinet/tcp_hpts.c:1842
#9  0xffffffff80484997 in intr_event_execute_handlers (p=<optimized 
out>,
     ie=<optimized out>) at /usr/src/sys/kern/kern_intr.c:1148
#10 ithread_execute_handlers (p=<optimized out>, ie=<optimized out>)
     at /usr/src/sys/kern/kern_intr.c:1161
#11 ithread_loop (arg=<optimized out>) at 
/usr/src/sys/kern/kern_intr.c:1241
#12 0xffffffff80481544 in fork_exit (
     callout=0xffffffff80484810 <ithread_loop>, arg=0xfffff80106ec01a0,
     frame=0xfffffe011a798c00) at /usr/src/sys/kern/kern_fork.c:1057
#13 <signal handler called>

-- 
Larry Rosenman                     http://www.lerctr.org/~ler
Phone: +1 214-642-9640                 E-Mail: ler_at_lerctr.org
US Mail: 5708 Sabbia Dr, Round Rock, TX 78665-2106