From owner-freebsd-bugs Wed Jan 8 3:50:12 2003 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3554337B405 for ; Wed, 8 Jan 2003 03:50:04 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 077EC43EE1 for ; Wed, 8 Jan 2003 03:50:02 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h08Bo1NS005384 for ; Wed, 8 Jan 2003 03:50:01 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h08Bo1BZ005383; Wed, 8 Jan 2003 03:50:01 -0800 (PST) Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4707F37B401 for ; Wed, 8 Jan 2003 03:40:31 -0800 (PST) Received: from kandojozsef-bkp.iif.hu (kandojozsef-bkp.iif.hu [193.6.21.134]) by mx1.FreeBSD.org (Postfix) with ESMTP id 47BAB43ED8 for ; Wed, 8 Jan 2003 03:40:30 -0800 (PST) (envelope-from root@kandojozsef-bkp.iif.hu) Received: from kandojozsef-bkp.iif.hu (localhost.fsn.hu [127.0.0.1]) by kandojozsef-bkp.iif.hu (8.12.6/8.12.6) with ESMTP id h08BeS2J016710 for ; Wed, 8 Jan 2003 12:40:28 +0100 (CET) (envelope-from root@kandojozsef-bkp.iif.hu) Received: (from root@localhost) by kandojozsef-bkp.iif.hu (8.12.6/8.12.6/Submit) id h08BeRKB016701; Wed, 8 Jan 2003 12:40:27 +0100 (CET) Message-Id: <200301081140.h08BeRKB016701@kandojozsef-bkp.iif.hu> Date: Wed, 8 Jan 2003 12:40:27 +0100 (CET) From: Attila Nagy To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Subject: kern/46861: RELENG_5_0 crashes when used as an FTP server. Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 46861 >Category: kern >Synopsis: RELENG_5_0 crashes when used as an FTP server. >Confidential: no >Severity: critical >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Jan 08 03:50:01 PST 2003 >Closed-Date: >Last-Modified: >Originator: Attila Nagy >Release: FreeBSD 5.0-RC i386 >Organization: www.fsn.hu >Environment: System: FreeBSD kandojozsef-bkp.iif.hu 5.0-RC FreeBSD 5.0-RC #11: Tue Jan 7 12:36:00 CET 2003 root@kandojozsef-bkp.iif.hu:/usr/obj/usr/src/sys/TEST i386 >Description: This machine is used as a FTP/HTTP/RSYNC server. The programs used for these protocols are: in-tree ftpd, mathopd, rsync. The machine has a quite fast internet connection (Gbps), but it's limited by its Intel PRO/100 card (fxp). After running some hours with a moderate load (50-80 Mbps traffic) the machine crashes. I've attached the related gdb, dmesg, and the kernel config output. This machine works very stable with RELENG_4, but I need 5.0 because of the >How-To-Repeat: Just install a FreeBSD 5.0 on a busy FTP server... >Fix: If I would know... --- crash.20030108 begins here --- Script started on Wed Jan 8 12:21:22 2003 You have mail. kandojozsef-bkp# gdb -k kernel.debug vmcore.1 GNU gdb 5.2.1 (FreeBSD) Copyright 2002 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-undermydesk-freebsd"... panic: bwrite: buffer is not busy??? panic messages: --- Fatal trap 12: page fault while in kernel mode fault virtual address = 0x11 fault code = supervisor read, page not present instruction pointer = 0x8:0xc020be10 stack pointer = 0x10:0xd9121b64 frame pointer = 0x10:0xd9121b70 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 7956 (ftpd) trap number = 12 panic: page fault syncing disks, buffers remaining... panic: bwrite: buffer is not busy??? Uptime: 19h9m7s amr0: flushing cache...done Dumping 511 MB 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304 320 336 352 368 384 400 416 432 448 464 480 496 --- #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232 232 dumping++; (kgdb) where #0 doadump () at /usr/src/sys/kern/kern_shutdown.c:232 #1 0xc01ce252 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:364 #2 0xc01ce493 in panic () at /usr/src/sys/kern/kern_shutdown.c:517 #3 0xc02138b2 in bwrite (bp=0xce74b220) at /usr/src/sys/kern/vfs_bio.c:796 #4 0xc0214f95 in vfs_bio_awrite (bp=0xce74b220) at /usr/src/sys/kern/vfs_bio.c:1643 #5 0xc0197c91 in spec_fsync (ap=0xd912195c) at /usr/src/sys/fs/specfs/spec_vnops.c:462 #6 0xc0196ff8 in spec_vnoperate (ap=0x0) at /usr/src/sys/fs/specfs/spec_vnops.c:126 #7 0xc0273551 in ffs_sync (mp=0xc413be00, waitfor=2, cred=0xc150ae80, td=0xc031b740) at vnode_if.h:612 #8 0xc0228bbb in sync (td=0xc031b740, uap=0x0) at /usr/src/sys/kern/vfs_syscalls.c:138 #9 0xc01cde3c in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:273 #10 0xc01ce493 in panic () at /usr/src/sys/kern/kern_shutdown.c:517 #11 0xc02cc632 in trap_fatal (frame=0xd9121b24, eva=0) at /usr/src/sys/i386/i386/trap.c:844 #12 0xc02cc312 in trap_pfault (frame=0xd9121b24, usermode=0, eva=17) at /usr/src/sys/i386/i386/trap.c:758 #13 0xc02cbe00 in trap (frame= {tf_fs = 24, tf_es = -653131760, tf_ds = -1071841264, tf_edi = -990805156, tf_esi = 0, tf_ebp = -653124752, tf_isp = -653124784, tf_ebx = -990805412, tf_edx = -1048468992, tf_ecx = -990884732, tf_eax = 1, tf_trapno = 12, tf_err = 0, t---Type to continue, or q to quit--- f_eip = -1071596016, tf_cs = 8, tf_eflags = 66050, tf_esp = -1071826949, tf_ss = 134729673}) at /usr/src/sys/i386/i386/trap.c:445 #14 0xc02bc658 in calltrap () at {standard input}:98 #15 0xc02536c1 in tcp_usr_send (so=0xc4f04c00, flags=0, m=0xc181a200, nam=0x0, control=0x0, td=0xc4eda0e0) at /usr/src/sys/netinet/tcp_usrreq.c:688 #16 0xc02098ed in sosend (so=0xc4f04c00, addr=0x0, uio=0xd9121c70, top=0xc181a200, control=0x0, flags=0, td=0xc4eda0e0) at /usr/src/sys/kern/uipc_socket.c:715 #17 0xc01f8aed in soo_write (fp=0x0, uio=0xd9121c70, active_cred=0xc58a2980, flags=0, td=0xc4eda0e0) at /usr/src/sys/kern/sys_socket.c:106 #18 0xc01f1e28 in dofilewrite (td=0xc4eda0e0, fp=0xc4c8ddd4, fd=0, buf=0x8079000, nbyte=0, offset=0, flags=0) at file.h:215 #19 0xc01f1c69 in write (td=0xc4eda0e0, uap=0xd9121d10) at /usr/src/sys/kern/sys_generic.c:329 #20 0xc02cc95a in syscall (frame= {tf_fs = 672792623, tf_es = -1078001617, tf_ds = -1078001617, tf_edi = 672814264, tf_esi = -1077940816, tf_ebp = -1077940792, tf_isp = -653124236, tf_ebx = 134713344, tf_edx = 0, tf_ecx = 0, tf_eax = 4, tf_trapno = 0, tf_err = 2, tf_eip = 672271203, tf_cs = 31, tf_eflags = 518, tf_esp = -1077940884, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1033 #21 0xc02bc6ad in Xint0x80_syscall () at {standard input}:140 ---Can't read userspace from dump, or kernel process--- # dmesg Copyright (c) 1992-2003 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 5.0-RC #11: Tue Jan 7 12:36:00 CET 2003 root@kandojozsef-bkp.iif.hu:/usr/obj/usr/src/sys/TEST Preloaded elf kernel "/boot/kernel/kernel" at 0xc041e000. Preloaded elf module "/boot/kernel/acpi.ko" at 0xc041e0a8. Timecounter "i8254" frequency 1193182 Hz Timecounter "TSC" frequency 1133383473 Hz CPU: Pentium III/Pentium III Xeon/Celeron (1133.38-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x6b1 Stepping = 1 Features=0x383fbff real memory = 536805376 (511 MB) avail memory = 517009408 (493 MB) Initializing GEOMetry subsystem Pentium Pro MTRR support enabled npx0: on motherboard npx0: INT 16 interface acpi0: on motherboard ACPI-0625: *** Info: GPE Block0 defined as GPE0 to GPE31 ACPI-0625: *** Info: GPE Block1 defined as GPE32 to GPE63 Using $PIR table, 12 entries at 0xc00fdf00 acpi0: power button is handled as a fixed feature programming model. Timecounter "ACPI-fast" frequency 3579545 Hz acpi_timer0: <32-bit timer at 3.579545MHz> port 0x1208-0x120b on acpi0 acpi_cpu0: on acpi0 acpi_cpu1: on acpi0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 fxp0: port 0x1c00-0x1c3f mem 0xfd000000-0xfd01ffff,0xfd020000-0xfd020fff irq 10 at device 2.0 on pci0 fxp0: Ethernet address 00:30:6e:1f:00:0a inphy0: on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto ahc0: port 0x1400-0x14ff mem 0xfd021000-0xfd021fff irq 5 at device 3.0 on pci0 aic7880: Ultra Wide Channel A, SCSI Id=7, 16/253 SCBs fxp1: port 0x1c40-0x1c7f mem 0xfd100000-0xfd1fffff,0xfd022000-0xfd022fff irq 12 at device 4.0 on pci0 fxp1: Ethernet address 00:03:47:de:aa:8e inphy1: on miibus1 inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto amr0: mem 0xfd400000-0xfd40ffff irq 9 at device 6.0 on pci0 amr0: Firmware \^A\^BH , BIOS \^C\^BG , 32MB RAM pci0: at device 7.0 (no driver attached) atapci0: port 0x1c80-0x1c8f,0x374-0x377,0x170-0x177,0x3f4-0x3f7,0x1f0-0x1f7 at device 15.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 ata1: at 0x170 irq 15 on atapci0 isab0: at device 15.3 on pci0 isa0: on isab0 pcib1: on acpi0 pci5: on pcib1 sym0: <1010-66> port 0x2000-0x20ff mem 0xfd410000-0xfd411fff,0xfd412000-0xfd4123ff irq 12 at device 4.0 on pci5 sym0: Symbios NVRAM, ID 7, Fast-80, SE, parity checking sym0: open drain IRQ line driver, using on-chip SRAM sym0: using LOAD/STORE-based firmware. sym0: handling phase mismatch from SCRIPTS. sym1: <1010-66> port 0x2400-0x24ff mem 0xfd414000-0xfd415fff,0xfd412400-0xfd4127ff irq 9 at device 4.1 on pci5 sym1: Symbios NVRAM, ID 7, Fast-80, LVD, parity checking sym1: open drain IRQ line driver, using on-chip SRAM sym1: using LOAD/STORE-based firmware. sym1: handling phase mismatch from SCRIPTS. fdc0: port 0x3f7,0x3f0-0x3f5 irq 6 drq 2 on acpi0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 sio0 port 0x2f8-0x2ff irq 3 on acpi0 sio0: type 16550A sio1 port 0x3f8-0x3ff irq 4 on acpi0 sio1: type 16550A atkbdc0: port 0x64,0x60 irq 1 on acpi0 atkbd0: flags 0x1 irq 1 on atkbdc0 kbd0 at atkbd0 pmtimer0 on isa0 orm0: