From owner-freebsd-bugs Fri Feb 9 18:30:09 1996 Return-Path: owner-bugs Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id SAA06248 for bugs-outgoing; Fri, 9 Feb 1996 18:30:09 -0800 (PST) Received: (from gnats@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id SAA06241 Fri, 9 Feb 1996 18:30:05 -0800 (PST) Resent-Date: Fri, 9 Feb 1996 18:30:05 -0800 (PST) Resent-Message-Id: <199602100230.SAA06241@freefall.freebsd.org> Resent-From: gnats (GNATS Management) Resent-To: freebsd-bugs Resent-Reply-To: FreeBSD-gnats@freefall.FreeBSD.org, dillon@backplane.com Received: from apollo.backplane.com (apollo.backplane.com [204.156.134.254]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id SAA06053 for ; Fri, 9 Feb 1996 18:27:09 -0800 (PST) Received: (dillon@localhost) by apollo.backplane.com (8.6.12/8.6.5) id SAA11482; Fri, 9 Feb 1996 18:28:00 -0800 Message-Id: <199602100228.SAA11482@apollo.backplane.com> Date: Fri, 9 Feb 1996 18:28:00 -0800 From: Matthew Dillon Reply-To: dillon@backplane.com To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.2 Subject: kern/1013: kernel crash / crash dump backtrace (tcp stack) Sender: owner-bugs@freebsd.org Precedence: bulk >Number: 1013 >Category: kern >Synopsis: A crash in the tcp stack >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Feb 9 18:30:03 PST 1996 >Last-Modified: >Originator: Matthew Dillon >Organization: None >Release: FreeBSD 2.1-STABLE i386 >Environment: Pretty much a standard 2.2-CURRENT release FreeBSD apollo.backplane.com 2.2-CURRENT FreeBSD 2.2-CURRENT #0: Sun Dec 31 05:42:33 1995 dillon@apollo.backplane.com:/usr/src/sys/compile/APOLLO i386 Majority of external packet traffic via SLIP over 24x7 modem link to internet. >Description: System crashed, backtrace is included: panic: m_copydata #0 boot (howto=256) at ../../i386/i386/machdep.c:928 928 dumppcb.pcb_ptd = rcr3(); (kgdb) back #0 boot (howto=256) at ../../i386/i386/machdep.c:928 #1 0xf0114503 in panic (fmt=0xf011fad4 "m_copydata") at ../../kern/subr_prf.c:124 #2 0xf011fb01 in m_copydata (m=0x0, off=-1, len=1, cp=0xf0f1bde8 "m") at ../../kern/uipc_mbuf.c:371 #3 0xf014e185 in tcp_output (tp=0xf0eccb00) at ../../netinet/tcp_output.c:476 #4 0xf014d422 in tcp_input (m=0xf0f30c00, iphlen=20) at ../../netinet/tcp_input.c:1629 #5 0xf0146489 in ipintr () at ../../netinet/ip_input.c:460 (kgdb) frame 3 #3 0xf014e185 in tcp_output (tp=0xf0eccb00) at ../../netinet/tcp_output.c:476 476 m_copydata(so->so_snd.sb_mb, off, (int) len, (kgdb) print len $4 = 1 (kgdb) print off $5 = -1 (kgdb) print tp->snd_nxt $14 = 410467412 (kgdb) print tp->snd_una $15 = 410467413 (kgdb) (kgdb) frame 4 #4 0xf014d422 in tcp_input (m=0xf0f30c00, iphlen=20) at ../../netinet/tcp_input.c:1629 1629 (void) tcp_output(tp); (kgdb) print *ti $23 = {ti_i = {ih_next = 0xdeadc0de
, ih_prev = 0xdeadc0de
, ih_x1 = 222 'Þ', ih_pr = 192 'À', ih_len = -8531, ih_src = {s_addr = 3735929054}, ih_dst = {s_addr = 3735929054}}, ti_t = {th_sport = 49374, th_dport = 57005, th_seq = 3735929054, th_ack = 3735929054, th_x2 = 14 '\016', th_off = 13 '\r', th_flags = 192 'À', th_win = 57005, th_sum = 0, th_urp = 0}} (kgdb) (kgdb) print *tp $22 = {seg_next = 0xf0eccb00, seg_prev = 0xf0eccb00, t_state = 4, t_timer = {0, 0, 14400, 0}, t_rxtshift = 0, t_rxtcur = 14, t_dupacks = 0, t_maxseg = 492, t_maxopd = 512, t_force = 0, t_flags = 25056, t_template = 0xf0e55d14, t_inpcb = 0xf0f5be00, snd_una = 410467413, snd_nxt = 410467412, snd_up = 410467412, snd_wl1 = 3802969090, snd_wl2 = 410467413, iss = 410467412, snd_wnd = 16728, rcv_wnd = 16728, rcv_nxt = 3802969090, rcv_up = 3802969090, irs = 3802969089, rcv_adv = 3802985818, snd_max = 410467413, snd_cwnd = 492, snd_ssthresh = 984, t_idle = 0, t_rtt = 0, t_rtseq = 410467412, t_srtt = 16, t_rttvar = 12, t_rttmin = 2, max_sndwnd = 16728, t_oobflags = 0 '\000', t_iobc = 0 '\000', t_softerror = 0, snd_scale = 0 '\000', rcv_scale = 0 '\000', request_r_scale = 0 '\000', requested_s_scale = 0 '\000', ts_recent = 2049616, ts_recent_age = 1986206, last_ack_sent = 3802969090, cc_send = 2327, cc_recv = 1163934, t_duration = 7, t_tuba_pcb = 0x0, t_rttupdated = 1} (kgdb) >How-To-Repeat: Unknown >Fix: Unknown >Audit-Trail: >Unformatted: