Date: Thu, 21 Dec 1995 12:38:22 -0800 From: Faried Nawaz <fn@pain.csrv.uidaho.edu> To: current@freebsd.org Subject: another m_copydata crash Message-ID: <199512212038.MAA00467@pain.csrv.uidaho.edu>
next in thread | raw e-mail | index | archive | help
i had > 3 crashes today, but /var/crash (actually /usr/crash) filled up
so i only got the first dump.
Script started on Thu Dec 21 12:35:25 1995
; gdb -k -q
(kgdb) symbol-file kernel.debug
Reading symbols from kernel.debug...done.
(kgdb) exec-file /var/crash/kernel.20
(kgdb) core-file /var/crash/vmcore.20
IdlePTD 1a2000
current pcb at 1937fc
panic: m_copydata
#0 boot (howto=256) at ../../i386/i386/machdep.c:913
913 savectx(&dumppcb, 0);
(kgdb) where
#0 boot (howto=256) at ../../i386/i386/machdep.c:913
#1 0xf010fbc3 in panic (fmt=0xf0118724 "m_copydata")
at ../../kern/subr_prf.c:124
#2 0xf0118751 in m_copydata (m=0x0, off=-1, len=1, cp=0xf082a0e8 "")
at ../../kern/uipc_mbuf.c:371
#3 0xf013b9b5 in tcp_output (tp=0xf06cba00) at ../../netinet/tcp_output.c:476
#4 0xf013ac4a in tcp_input (m=0xf082f280, iphlen=20)
at ../../netinet/tcp_input.c:1629
#5 0xf0135b69 in ipintr () at ../../netinet/ip_input.c:464
#6 0xf0159ffd in swi_net_next ()
#7 0xf015f0d8 in cpu_switch ()
(kgdb) up
#1 0xf010fbc3 in panic (fmt=0xf0118724 "m_copydata")
at ../../kern/subr_prf.c:124
124 boot(bootopt);
(kgdb) up
#2 0xf0118751 in m_copydata (m=0x0, off=-1, len=1, cp=0xf082a0e8 "")
at ../../kern/uipc_mbuf.c:371
371 panic("m_copydata");
(kgdb) up
#3 0xf013b9b5 in tcp_output (tp=0xf06cba00) at ../../netinet/tcp_output.c:476
476 m_copydata(so->so_snd.sb_mb, off, (int) len,
(kgdb) print *tp
$1 = {seg_next = 0xf082f2ac, seg_prev = 0xf082f2ac, t_state = 4, t_timer = {0,
0, 14400, 0}, t_rxtshift = 0, t_rxtcur = 128, t_dupacks = 0,
t_maxseg = 492, t_maxopd = 512, t_force = 0, t_flags = 25057,
t_template = 0xf081b414, t_inpcb = 0xf076d700, snd_una = 4063703594,
snd_nxt = 4063703593, snd_up = 4063703593, snd_wl1 = 1720394763,
snd_wl2 = 4063703594, iss = 4063703593, snd_wnd = 16728, rcv_wnd = 16728,
rcv_nxt = 1720394754, rcv_up = 1720394754, irs = 1720394753,
rcv_adv = 1720411482, snd_max = 4063703594, snd_cwnd = 492,
snd_ssthresh = 984, t_idle = 0, t_rtt = 0, t_rtseq = 4063703593,
t_srtt = 480, t_rttvar = 120, t_rttmin = 2, max_sndwnd = 16728,
t_oobflags = 0 '\000', t_iobc = 0 '\000', t_softerror = 0,
snd_scale = 0 '\000', rcv_scale = 0 '\000', request_r_scale = 0 '\000',
requested_s_scale = 0 '\000', ts_recent = 2539439, ts_recent_age = 309962,
last_ack_sent = 1720394754, cc_send = 4064, cc_recv = 37581,
t_duration = 58, t_tuba_pcb = 0x0, t_rttupdated = 1}
(kgdb) up
#4 0xf013ac4a in tcp_input (m=0xf082f280, iphlen=20)
at ../../netinet/tcp_input.c:1629
1629 (void) tcp_output(tp);
(kgdb) print *m
$2 = {m_hdr = {mh_next = 0x0, mh_nextpkt = 0x0, mh_len = 0,
mh_data = 0xf082f2e8 "", mh_type = 1, mh_flags = 2}, M_dat = {MH = {
MH_pkthdr = {len = 60, rcvif = 0xf0193c7c}, MH_dat = {MH_ext = {
ext_buf = 0x4000e898 <Address 0x4000e898 out of bounds>,
ext_free = 0x48782d33, ext_size = 17563648},
MH_databuf = "\230è\000@3-xH\000\000\f\001\022\b\b\000\000ºlð\000ºlð\000\006\000\000Í\213\001r\201erm\200ò\202ð\013$\213f*27ò \021XA\000\000\000\000\001\001\b\n\000&¿ë\000\004ºÊ\001\001\013\006\000\000\222Í\000\000\000\000\000\000\000\000\001", '\000' <repeats 14 times>}},
M_databuf = "<\000\000\000|<\031ð\230è\000@3-xH\000\000\f\001\022\b\b\000\000ºlð\000ºlð\000\006\000\000Í\213\001r\201erm\200ò\202ð\013$\213f*27ò \021XA\000\000\000\000\001\001\b\n\000&¿ë\000\004ºÊ\001\001\013\006\000\000\222Í\000\000\000\000\000\000\000\000\001", '\000' <repeats 14 times>}}
(kgdb) print *ti
$3 = {ti_i = {ih_next = 0xf06cba00 "¬ò\202ð¬ò\202ð\004",
ih_prev = 0xf06cba00 "¬ò\202ð¬ò\202ð\004", ih_x1 = 0 '\000',
ih_pr = 6 '\006', ih_len = 0, ih_src = {s_addr = 1912703949}, ih_dst = {
s_addr = 1836213633}}, ti_t = {th_sport = 62080, th_dport = 61570,
th_seq = 1720394763, th_ack = 4063703594, th_x2 = 0 '\000',
th_off = 10 '\n', th_flags = 17 '\021', th_win = 16728, th_sum = 0,
th_urp = 0}}
(kgdb) up
#5 0xf0135b69 in ipintr () at ../../netinet/ip_input.c:464
464 goto next;
(kgdb) quit
; exit
Script done on Thu Dec 21 12:36:41 1995
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199512212038.MAA00467>