kern/50803: mbuf-related kernel panic (sbappendaddr)

Eugene Grosbein eugen at www.svzserv.kemerovo.su
Thu Apr 10 19:50:26 PDT 2003


>Number:         50803
>Category:       kern
>Synopsis:       mbuf-related kernel panic (sbappendaddr)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Apr 10 19:50:09 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Eugene Grosbein
>Release:        FreeBSD 4.8-RC i386
>Organization:
Svyaz Service JSC
>Environment:
System: FreeBSD www.svzserv.kemerovo.su 4.8-RC FreeBSD 4.8-RC #0: Sun Mar 30 16:53:27 KRAST 2003 eu at www.svzserv.kemerovo.su:/home4/obj/home/src/sys/WWW i386


>Description:
	Yesterday evening my previosly rock-stable www/ftp server
	crashed with kernel panic. Just before crash kernel wrote:

Apr 10 21:48:59 www /kernel: All mbuf clusters exhausted, please see tuning(7).
Apr 10 21:49:30 www last message repeated 29 times

	I was prepared (better safe than sorry) and have crashdump.
	I will supply any additional information to help fix this.
	I can increase number of mbuf clusters but believe kernel
	must not panic even in such situation.
 
	Here is gdb backtrace.

Script started on Fri Apr 11 10:28:03 2003
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read called at /home/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 2627 in elfstab_build_psymtabs
Deprecated bfd_read called at /home/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf

IdlePTD at phsyical address 0x003aa000
initial pcb at physical address 0x00308c20
panicstr: sbappendaddr
panic messages:
---
panic: sbappendaddr

syncing disks... 1 
done
Uptime: 11d4h8m21s

dumping to dev #ad/0x20001, offset 2560
dump ata0: resetting devices .. done
254 253 252 251 250 249 248 247 246 245 244 243 242 241 240 239 238 237 236 235 234 233 232 231 230 229 228 227 226 225 224 223 222 221 220 219 218 217 216 215 214 213 212 211 210 209 208 207 206 205 204 203 202 201 200 199 198 197 196 195 194 193 192 191 190 189 188 187 186 185 184 183 182 181 180 179 178 177 176 175 174 173 172 171 170 169 168 167 166 165 164 163 162 161 160 159 158 157 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 119 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 100 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 
---
#0  dumpsys () at /home/src/sys/kern/kern_shutdown.c:487
487		if (dumping++) {
(kgdb) bt
#0  dumpsys () at /home/src/sys/kern/kern_shutdown.c:487
#1  0xc015d560 in boot (howto=256) at /home/src/sys/kern/kern_shutdown.c:316
#2  0xc015d9ad in panic (fmt=0xc02a3440 "sbappendaddr")
    at /home/src/sys/kern/kern_shutdown.c:595
#3  0xc017ee85 in sbappendaddr (sb=0xcda21e88, asa=0xc02db5c8, m0=0xc1c02300, 
    control=0x0) at /home/src/sys/kern/uipc_socket2.c:619
#4  0xc01ccacf in udp_input (m=0xc1c02300, off=20, proto=17)
    at /home/src/sys/netinet/udp_usrreq.c:425
#5  0xc01c208c in ip_input (m=0xc1c02300)
    at /home/src/sys/netinet/ip_input.c:927
#6  0xc01c20eb in ipintr () at /home/src/sys/netinet/ip_input.c:948
#7  0xc026f869 in swi_net_next ()
#8  0xc01801a7 in sendit (p=0xcd001dc0, s=22, mp=0xce6b9f18, flags=0)
    at /home/src/sys/kern/uipc_syscalls.c:583
#9  0xc01802b4 in sendto (p=0xcd001dc0, uap=0xce6b9f80)
    at /home/src/sys/kern/uipc_syscalls.c:636
#10 0xc027b899 in syscall2 (frame={tf_fs = -1078001617, tf_es = -831848401, 
      tf_ds = 47, tf_edi = 0, tf_esi = -1077941252, tf_ebp = -1077941424, 
      tf_isp = -831807532, tf_ebx = 64, tf_edx = -1077941252, tf_ecx = 337, 
      tf_eax = 133, tf_trapno = 7, tf_err = 2, tf_eip = 403837544, tf_cs = 31, 
      tf_eflags = 530, tf_esp = -1077942892, tf_ss = 47})
    at /home/src/sys/i386/i386/trap.c:1175
#11 0xc026e475 in Xint0x80_syscall ()
#12 0x8062168 in ?? ()
---Type <return> to continue, or q <return> to quit---
#13 0x8061f5c in ?? ()
#14 0x808a418 in ?? ()
#15 0x8060f4c in ?? ()
#16 0x804b54a in ?? ()
(kgdb) quit

Script done on Fri Apr 11 10:28:39 2003

	My server's kernel config follows.

# WWW kernel config
# 15 Mar 2003

machine		i386
#cpu		I386_CPU
#cpu		I486_CPU
cpu		I586_CPU
cpu		I686_CPU
ident		WWW
maxusers	128
options		MAXDSIZ=(256*1024*1024)
options		DFLDSIZ=(256*1024*1024)

makeoptions	DEBUG=-g		#Build kernel with gdb(1) debug symbols

#options 	MATH_EMULATE		#Support for x87 emulation
options		CLK_CALIBRATION_LOOP
options		CLK_USE_I8254_CALIBRATION
options		CLK_USE_TSC_CALIBRATION

options 	INET			#InterNETworking
#options 	INET6			#IPv6 communications protocols
options 	FFS			#Berkeley Fast Filesystem
options 	FFS_ROOT		#FFS usable as root device [keep this!]
options 	SOFTUPDATES		#Enable FFS soft updates support
options 	MFS			#Memory Filesystem
#options 	MD_ROOT			#MD is a potential root device
options 	NFS			#Network Filesystem
#options 	NFS_ROOT		#NFS usable as root device, NFS required
options 	MSDOSFS			#MSDOS Filesystem
options 	NULLFS			#NULL filesystem
options 	CD9660			#ISO 9660 Filesystem
options 	CD9660_ROOT		#CD-ROM usable as root, CD9660 required
#options 	PROCFS			#Process filesystem
options 	COMPAT_43		#Compatible with BSD 4.3 [KEEP THIS!]
options 	SCSI_DELAY=15000	#Delay (in ms) before probing SCSI
options 	UCONSOLE		#Allow users to grab the console
options 	USERCONFIG		#boot -c editor
options 	VISUAL_USERCONFIG	#visual boot -c editor
options 	KTRACE			#ktrace(1) support
options 	SYSVSHM			#SYSV-style shared memory
options 	SYSVMSG			#SYSV-style message queues
options 	SYSVSEM			#SYSV-style semaphores
options		SHMMAXPGS=4096
options 	P1003_1B		#Posix P1003_1B real-time extensions
options 	_KPOSIX_PRIORITY_SCHEDULING
options		ICMP_BANDLIM		#Rate limit bad replies
options 	KBD_INSTALL_CDEV	# install a CDEV entry in /dev
options		PPP_BSDCOMP
options		PPP_DEFLATE
options		PPP_FILTER
options		NSWAPDEV=4
options		MSGBUF_SIZE=140960

device		isa
options		"AUTO_EOI_1"

device		eisa
device		pci

# Floppy drives
device		fdc0	at isa? port IO_FD1 irq 6 drq 2
device		fd0	at fdc0 drive 0
#device		fd1	at fdc0 drive 1
#
# If you have a Toshiba Libretto with its Y-E Data PCMCIA floppy,
# don't use the above line for fdc0 but the following one:
#device		fdc0

# ATA and ATAPI devices
#device		ata0	at isa? port IO_WD1 irq 14
#device		ata1	at isa? port IO_WD2 irq 15
device		ata
device		atadisk			# ATA disk drives
device		atapicd			# ATAPI CDROM drives
#device		atapifd			# ATAPI floppy drives
#device		atapist			# ATAPI tape drives
options 	ATA_STATIC_ID		#Static device numbering

# atkbdc0 controls both the keyboard and the PS/2 mouse
device		atkbdc0	at isa? port IO_KBD
device		atkbd0	at atkbdc? irq 1 flags 0x1
device		psm0	at atkbdc? irq 12

device		vga0	at isa?
options		VESA

# splash screen/screen saver
pseudo-device	splash

# syscons is the default console driver, resembling an SCO console
device		sc0	at isa? flags 0x100
options		MAXCONS=16
options		SC_HISTORY_SIZE=1000

# Floating point support - do not disable.
device		npx0	at nexus? port IO_NPX irq 13

# Power management support (see LINT for more options)
#device		apm0    at nexus? disable flags 0x20 # Advanced Power Management

# Serial (COM) ports
device		sio0	at isa? port IO_COM1 flags 0x10 irq 4
device		sio1	at isa? port IO_COM2 irq 3
#device		sio2	at isa? disable port IO_COM3 irq 5
#device		sio3	at isa? disable port IO_COM4 irq 9

# Parallel port
device		ppc0	at isa? irq 7
device		ppbus		# Parallel port bus (required)
device		lpt		# Printer
#device		plip		# TCP/IP over parallel
device		ppi		# Parallel port interface device
#device		vpo		# Requires scbus and da

# PCI Ethernet NICs.
#device		de		# DEC/Intel DC21x4x (``Tulip'')
#device		txp		# 3Com 3cR990 (``Typhoon'')
#device		vx		# 3Com 3c590, 3c595 (``Vortex'')

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device		miibus		# MII bus support
#device		dc		# DEC/Intel 21143 and various workalikes
device		fxp		# Intel EtherExpress PRO/100B (82557, 82558)
#device		pcn		# AMD Am79C97x PCI 10/100 NICs
#device		rl		# RealTek 8129/8139
#device		sf		# Adaptec AIC-6915 (``Starfire'')
#device		sis		# Silicon Integrated Systems SiS 900/SiS 7016
#device		ste		# Sundance ST201 (D-Link DFE-550TX)
#device		tl		# Texas Instruments ThunderLAN
#device		tx		# SMC EtherPower II (83c170 ``EPIC'')
#device		vr		# VIA Rhine, Rhine II
#device		wb		# Winbond W89C840F
#device		wx		# Intel Gigabit Ethernet Card (``Wiseman'')
#device		xl		# 3Com 3c90x (``Boomerang'', ``Cyclone'')

device pcm0 at isa? port ? irq 5 drq 1

# Pseudo devices - the number indicates how many units to allocate.
pseudo-device	loop		# Network loopback
pseudo-device	ether		# Ethernet support
#pseudo-device	sl	1	# Kernel SLIP
pseudo-device	ppp	6	# Kernel PPP
pseudo-device	tun		# Packet tunnel.
pseudo-device	pty	64	# Pseudo-ttys (telnet etc)
pseudo-device	snp	8
pseudo-device	vn
pseudo-device	gzip
pseudo-device	speaker
#pseudo-device	md		# Memory "disks"
pseudo-device	gif		# IPv6 and IPv4 tunneling
#pseudo-device	faith	1	# IPv6-to-IPv4 relaying (translation)

# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device	bpf		#Berkeley packet filter

options		QUOTA
options 	IPFIREWALL
options 	IPFIREWALL_VERBOSE
#options 	IPFIREWALL_VERBOSE_LIMIT=100
options 	IPDIVERT
options 	IPFIREWALL_FORWARD
options 	TCP_DROP_SYNFIN		#drop TCP packets with SYN+FIN
options 	DUMMYNET
options		NMBCLUSTERS=8192
options 	IBCS2
options		DDB
options		DDB_UNATTENDED
options		RANDOM_IP_ID
options		UFS_DIRHASH
options		USER_LDT
options		UCONSOLE
options		ACCEPT_FILTER_HTTP
options 	NULLFS			#NULL filesystem

>How-To-Repeat:

	N/A

>Fix:

	Unknown for me.

Eugene Grosbein


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list