From scrappy@hub.org  Tue Dec 19 02:38:01 1995
Received: from mail.barrnet.net (mail.barrnet.net [131.119.246.7])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id CAA06567
          for <FreeBSD-gnats-submit@freebsd.org>; Tue, 19 Dec 1995 02:38:00 -0800 (PST)
Received: from hub.org (hub.org [199.166.238.138]) by mail.barrnet.net (8.7.1/MAIL-RELAY-LEN) with ESMTP id IAA07563 for <FreeBSD-gnats-submit@freebsd.org>; Tue, 12 Dec 1995 08:41:11 -0800 (PST)
Received: (from scrappy@localhost) by hub.org (8.7.3/8.7.3) id LAA00623; Tue, 12 Dec 1995 11:36:26 -0500 (EST)
Message-Id: <199512121636.LAA00623@hub.org>
Date: Tue, 12 Dec 1995 11:36:26 -0500 (EST)
From: "Marc G. Fournier" <scrappy@hub.org>
Reply-To: scrappy@hub.org
To: FreeBSD-gnats-submit@freebsd.org
Subject: panic: m_copydata
X-Send-Pr-Version: 3.2

>Number:         903
>Category:       kern
>Synopsis:       panic: m_copydata
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    olah
>State:          closed
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Dec 19 02:40:02 PST 1995
>Closed-Date:    Thu Feb 8 00:11:40 PST 1996
>Last-Modified:  Thu Feb  8 00:16:13 PST 1996
>Originator:     Marc G. Fournier
>Release:        FreeBSD 2.2-CURRENT i386
>Organization:
<>
>Environment:

dmesg of system:

FreeBSD 2.2-CURRENT #4: Tue Dec 12 05:39:49 EST 1995
    scrappy@hub.org:/usr/src/sys/compile/hubdebug
CPU: i386DX (386-class CPU)
real memory  = 8650752 (8448K bytes)
avail memory = 6971392 (6808K bytes)
DEVFS: ready for devices
Probing for devices on the ISA bus:
vt0 at 0x60-0x6f irq 1 on motherboard
vt0: tvga 9000, 80/132 col, color, 8 scr, mf2-kbd, [R3.20-b24]
sio0 at 0x3f8-0x3ff irq 4 on isa
sio0: type 16550A
sio1 at 0x2f8-0x2ff irq 3 on isa
sio1: type 16450
lpt0 not found at 0xffffffff
fdc0 at 0x3f0-0x3f7 irq 6 drq 2 on isa
fdc0: NEC 765
fd0: 1.44MB 3.5in
wdc0 at 0x1f0-0x1f7 irq 14 on isa
wdc0: unit 0 (wd0): <Maxtor 7345 AT>
wd0: 329MB (675450 sectors), 790 cyls, 15 heads, 57 S/T, 512 B/S
aha0 at 0x330-0x333 irq 11 drq 5 on isa
aha0 waiting for scsi devices to settle
(aha0:0:0): "QUANTUM LPS340S 020B" type 0 fixed SCSI 2
sd0(aha0:0:0): Direct-Access 327MB (670506 512 byte sectors)
(aha0:2:0): "CONNER CFA540S 13B0" type 0 fixed SCSI 2
sd1(aha0:2:0): Direct-Access 515MB (1056708 512 byte sectors)
(aha0:6:0): "QUANTUM LP240S GM240S01X 4.6" type 0 fixed SCSI 2
sd2(aha0:6:0): Direct-Access 234MB (479350 512 byte sectors)
npx0 on motherboard
npx0: 387 emulator
devfs ready to run
WARNING: / was not properly dismounted.


config of system:


#
# GENERIC -- Generic machine with WD/AHx/NCR/BTx family disks
#
#	GENERIC,v 1.45.2.3 1995/06/05 21:50:41 jkh Exp
#

machine		"i386"
cpu		"I386_CPU"
ident		hubdebug
maxusers	10

options 	DEVFS
options		DODUMP
options		DDB
options		MATH_EMULATE		#Support for x87 emulation
options		INET			#InterNETworking
options		FFS			#Berkeley Fast Filesystem
options		MSDOSFS			#MSDOS Filesystem
options		PROCFS			#Process filesystem
options		"COMPAT_43"		#Compatible with BSD 4.3
options		"SCSI_DELAY=15"		#Be pessimistic about Joe SCSI device
options		BOUNCE_BUFFERS		#include support for DMA bounce buffers
options		UCONSOLE		#Allow users to grab the console

config		kernel	root on wd0 

options		SYSVSHM
options		SYSVSEM
options		SYSVMSG

controller	isa0
#controller	pci0

controller	fdc0	at isa? port "IO_FD1" bio irq 6 drq 2 vector fdintr
disk		fd0	at fdc0 drive 0
disk		fd1	at fdc0 drive 1

controller	wdc0	at isa? port "IO_WD1" bio irq 14 vector wdintr
disk		wd0	at wdc0 drive 0
disk		wd1	at wdc0 drive 1

#controller	ncr0
controller	ahc0

controller	aha0	at isa? port "IO_AHA0" bio irq ? drq 5 vector ahaintr

controller	scbus0

device		sd0

device		st0

device		cd0	#Only need one of these, the code dynamically grows

# syscons is the default console driver, resembling an SCO console
#device		sc0	at isa? port "IO_KBD" tty irq 1 vector scintr
# Enable this and PCVT_FREEBSD for pcvt vt220 compatible console driver
device		vt0	at isa? port "IO_KBD" tty irq 1 vector pcrint
options		"PCVT_FREEBSD=210"	# pcvt running on FreeBSD 2.1
options 	PCVT_SCREENSAVER
options		PCVT_PRETTYSCRNS
#options		"PCVT_NSCREENS=7"
#options		XSERVER			# include code for XFree86

device		npx0	at isa? port "IO_NPX" irq 13 vector npxintr

device		sio0	at isa? port "IO_COM1" tty irq 4 vector siointr
device		sio1	at isa? port "IO_COM2" tty irq 3 vector siointr

device		lpt0	at isa? port? tty irq 7 vector lptintr

# Order is important here due to intrusive probes, do *not* alphabetize
# this list of network interfaces until the probes have been fixed.
# Right now it appears that the ie0 must be probed before ep0. See
# revision 1.20 of this file.
#device de0

pseudo-device	loop
pseudo-device	ether
pseudo-device	log
pseudo-device	sl	1
# ijppp uses tun instead of ppp device
#pseudo-device	ppp	1
pseudo-device	tun	1
pseudo-device	pty	16


>Description:

	On a reasonably regular basis, I get a 'panic: m_copydata' error
	and reboot of the system.  Having enabled DDB and DODUMP, I'm not
	getting a 'savecore', but it does put me into the kernel debugger
	instead of rebooting.

	Error:

	panic: m_copydata
	stopped at _Debugger+0x2b: movb $0,_in_Debugger.98

	Trace:

	_Debugger(f0111fe0,f011d5e4,efbffe94,14) at _Debugger+0x2b
	_panic(f011d5e3,14,ffffffff,f05f3880,efbfff20) at _panic+0x3b
	_m_copydata(0,ffffffff,1,f05f38e8,0) at _m_copydata+0x21
	_tcp_output(f05a4f00,f061169c,f0611b80,14,efbfff30) at 
		_tcp_output+0x635
	_tcp_input(f0611680,14) at _tcp_input+0x13da
	_ipintr(f0172117,0,efbf0027,27,3c) at _ipintr+0x429
	Bad User Frame pointer: 0xefbf9120

	I have a /var/crash directory created, but not core dump...

	In transcribing the Trace to paper, do I need *all* the lines,
	or is there only one or two that are significant?


>How-To-Repeat:

	

>Fix:
	
olah        96/01/04 13:34:32

  Modified:    sys/netinet  tcp_timer.c
  Log:
  Reverse the modification which caused the annoying m_copydata crash: set
  the TF_ACKNOW flag when the REXMT timer goes off to force a
  retransmission.  In certain situations pulling snd_nxt back to snd_una
  is not sufficient.
  
  Revision  Changes    Path
  1.13      +5 -1      src/sys/netinet/tcp_timer.c

>Release-Note:
>Audit-Trail:

From: "Garrett A. Wollman" <wollman@lcs.mit.edu>
To: scrappy@hub.org
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: kern/903: panic: m_copydata
Date: Tue, 19 Dec 1995 15:36:31 -0500

 <<On Tue, 12 Dec 1995 11:36:26 -0500 (EST), "Marc G. Fournier" <scrappy@hub.org> said:
 
 > 	and reboot of the system.  Having enabled DDB and DODUMP, I'm not
 > 	getting a 'savecore', but it does put me into the kernel debugger
 > 	instead of rebooting.
 
 `options DODUMP' has not been meaningful for some time.  You should
 use the dumpon(8) command to set up a swap area for dumps during
 bootup.  (There should be hooks in /etc/sysconfig for this, but I
 don't recall if they are mine or in the distribution version.)
 
 > 	I have a /var/crash directory created, but not core dump...
 
 > 	In transcribing the Trace to paper, do I need *all* the lines,
 > 	or is there only one or two that are significant?
 
 This is precisely the sort of situation where having a port-mortem
 dump is incredibly valuable, since otherwise I can but guess at the
 cause of your problem.
 
 -GAWollman
 
 --
 Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
 wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
 Opinions not those of| It is a bond more powerful than absence.  We like people
 MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant

From: "Marc G. Fournier" <scrappy@hub.org>
To: "Garrett A. Wollman" <wollman@lcs.mit.edu>
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: kern/903: panic: m_copydata
Date: Tue, 19 Dec 1995 15:59:32 -0500 (EST)

 On Tue, 19 Dec 1995, Garrett A. Wollman wrote:
 
 > <<On Tue, 12 Dec 1995 11:36:26 -0500 (EST), "Marc G. Fournier" <scrappy@hub.org> said:
 > 
 > > 	and reboot of the system.  Having enabled DDB and DODUMP, I'm not
 > > 	getting a 'savecore', but it does put me into the kernel debugger
 > > 	instead of rebooting.
 > 
 > `options DODUMP' has not been meaningful for some time.  You should
 > use the dumpon(8) command to set up a swap area for dumps during
 > bootup.  (There should be hooks in /etc/sysconfig for this, but I
 > don't recall if they are mine or in the distribution version.)
 >
 	Ack...okay, found the option in /etc/sysconfig and have it enabled...
 and have enabled it using dumpon...
 
 
 Marc G. Fournier | POP Mail  Telnet Acct  DNS Hosting
 scrappy@hub.org  |  WWW Services   Database Services  | Knowledge, 
  soon to be:     |                                    | Information and
 scrappy@ki.net   |      WWW: http://hub.org           | Communications, Inc
 
State-Changed-From-To: open->closed 
State-Changed-By: olah 
State-Changed-When: Thu Feb 8 00:11:40 PST 1996 
State-Changed-Why:  
Bug has been fixed and tested. 


Responsible-Changed-From-To: freebsd-bugs->olah 
Responsible-Changed-By: olah 
Responsible-Changed-When: Thu Feb 8 00:11:40 PST 1996 
Responsible-Changed-Why:  
>Unformatted:
