Date: Fri, 9 Feb 1996 18:28:00 -0800 From: Matthew Dillon <dillon@backplane.com> To: FreeBSD-gnats-submit@freebsd.org Subject: kern/1013: kernel crash / crash dump backtrace (tcp stack) Message-ID: <199602100228.SAA11482@apollo.backplane.com> Resent-Message-ID: <199602100230.SAA06241@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 1013
>Category: kern
>Synopsis: A crash in the tcp stack
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri Feb 9 18:30:03 PST 1996
>Last-Modified:
>Originator: Matthew Dillon
>Organization:
None
>Release: FreeBSD 2.1-STABLE i386
>Environment:
Pretty much a standard 2.2-CURRENT release
FreeBSD apollo.backplane.com 2.2-CURRENT FreeBSD 2.2-CURRENT #0: Sun Dec 31 05:42:33 1995 dillon@apollo.backplane.com:/usr/src/sys/compile/APOLLO i386
Majority of external packet traffic via SLIP over 24x7 modem link to internet.
>Description:
System crashed, backtrace is included:
panic: m_copydata
#0 boot (howto=256) at ../../i386/i386/machdep.c:928
928 dumppcb.pcb_ptd = rcr3();
(kgdb) back
#0 boot (howto=256) at ../../i386/i386/machdep.c:928
#1 0xf0114503 in panic (fmt=0xf011fad4 "m_copydata") at ../../kern/subr_prf.c:124
#2 0xf011fb01 in m_copydata (m=0x0, off=-1, len=1, cp=0xf0f1bde8 "m") at ../../kern/uipc_mbuf.c:371
#3 0xf014e185 in tcp_output (tp=0xf0eccb00) at ../../netinet/tcp_output.c:476
#4 0xf014d422 in tcp_input (m=0xf0f30c00, iphlen=20) at ../../netinet/tcp_input.c:1629
#5 0xf0146489 in ipintr () at ../../netinet/ip_input.c:460
(kgdb) frame 3
#3 0xf014e185 in tcp_output (tp=0xf0eccb00) at ../../netinet/tcp_output.c:476
476 m_copydata(so->so_snd.sb_mb, off, (int) len,
(kgdb) print len
$4 = 1
(kgdb) print off
$5 = -1
(kgdb) print tp->snd_nxt
$14 = 410467412
(kgdb) print tp->snd_una
$15 = 410467413
(kgdb)
(kgdb) frame 4
#4 0xf014d422 in tcp_input (m=0xf0f30c00, iphlen=20) at ../../netinet/tcp_input.c:1629
1629 (void) tcp_output(tp);
(kgdb) print *ti
$23 = {ti_i = {ih_next = 0xdeadc0de <Address 0xdeadc0de out of bounds>, ih_prev = 0xdeadc0de <Address 0xdeadc0de out of bounds>, ih_x1 = 222 'Þ', ih_pr = 192 'À',
ih_len = -8531, ih_src = {s_addr = 3735929054}, ih_dst = {s_addr = 3735929054}}, ti_t = {th_sport = 49374, th_dport = 57005, th_seq = 3735929054,
th_ack = 3735929054, th_x2 = 14 '\016', th_off = 13 '\r', th_flags = 192 'À', th_win = 57005, th_sum = 0, th_urp = 0}}
(kgdb)
(kgdb) print *tp
$22 = {seg_next = 0xf0eccb00, seg_prev = 0xf0eccb00, t_state = 4, t_timer = {0, 0, 14400, 0}, t_rxtshift = 0, t_rxtcur = 14, t_dupacks = 0, t_maxseg = 492,
t_maxopd = 512, t_force = 0, t_flags = 25056, t_template = 0xf0e55d14, t_inpcb = 0xf0f5be00, snd_una = 410467413, snd_nxt = 410467412, snd_up = 410467412,
snd_wl1 = 3802969090, snd_wl2 = 410467413, iss = 410467412, snd_wnd = 16728, rcv_wnd = 16728, rcv_nxt = 3802969090, rcv_up = 3802969090, irs = 3802969089,
rcv_adv = 3802985818, snd_max = 410467413, snd_cwnd = 492, snd_ssthresh = 984, t_idle = 0, t_rtt = 0, t_rtseq = 410467412, t_srtt = 16, t_rttvar = 12, t_rttmin = 2,
max_sndwnd = 16728, t_oobflags = 0 '\000', t_iobc = 0 '\000', t_softerror = 0, snd_scale = 0 '\000', rcv_scale = 0 '\000', request_r_scale = 0 '\000',
requested_s_scale = 0 '\000', ts_recent = 2049616, ts_recent_age = 1986206, last_ack_sent = 3802969090, cc_send = 2327, cc_recv = 1163934, t_duration = 7,
t_tuba_pcb = 0x0, t_rttupdated = 1}
(kgdb)
>How-To-Repeat:
Unknown
>Fix:
Unknown
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199602100228.SAA11482>