From owner-freebsd-bugs@FreeBSD.ORG Sun Nov 14 17:44:00 2004 Return-Path: Delivered-To: freebsd-bugs@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 60C9916A4CE; Sun, 14 Nov 2004 17:44:00 +0000 (GMT) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1CE0143D31; Sun, 14 Nov 2004 17:43:59 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1])iAEHhqjG000999 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 14 Nov 2004 17:43:52 GMT (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)iAEHhqxi000998; Sun, 14 Nov 2004 17:43:52 GMT (envelope-from matthew) Date: Sun, 14 Nov 2004 17:43:52 +0000 From: Matthew Seaman To: Xin LI Message-ID: <20041114174352.GA876@happy-idiot-talk.infracaninophile.co.uk> References: <200411120350.iAC3o8xF072944@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw" Content-Disposition: inline In-Reply-To: <200411120350.iAC3o8xF072944@freefall.freebsd.org> User-Agent: Mutt/1.4.2.1i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.6 (smtp.infracaninophile.co.uk [IPv6:::1]); Sun, 14 Nov 2004 17:43:52 +0000 (GMT) X-Virus-Scanned: ClamAV 0.80/587/Sun Nov 14 01:57:41 2004 clamav-milter version 0.80j on smtp.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-0.9 required=5.0 tests=ALL_TRUSTED,AWL,RAZOR2_CHECK autolearn=ham version=3.0.1 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-bugs@FreeBSD.org Subject: Re: kern/72539: Panic: vm_page_remove(): page not found in hash X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Nov 2004 17:44:00 -0000 --wac7ysb48OaltWcw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Nov 12, 2004 at 03:50:08AM +0000, Xin LI wrote: > I think this is related on what I am currently working on. Would you > please try the patch found in: > http://people.freebsd.org/~delphij/patch-RELENG_4-vm_page.c Tried that: unfortunately it seems to have had little effect. That perl script can still knock over the system in a few minutes -- although one time I tested, the script ran to completion, but then I ended up with some weird filesystem corruption, and had to reboot and fsck manually to clear it. Symptoms this time were a little different: X simply froze up, and the system eventually rebooted after panicing. Script started on Sun Nov 14 17:39:56 2004 Password:=0D GNU gdb 4.18 (FreeBSD)=0D Copyright 1998 Free Software Foundation, Inc.=0D GDB is free software, covered by the GNU General Public License, and you ar= e=0D welcome to change it and/or distribute copies of it under certain condition= s.=0D Type "show copying" to see the conditions.=0D There is absolutely no warranty for GDB. Type "show warranty" for details.= =0D This GDB was configured as "i386-unknown-freebsd"...Deprecated bfd_read cal= led at /usr/src/gnu/usr.bin/binutils/gdb/../../../../contrib/gdb/gdb/dbxrea= d.c line 2627 in elfstab_build_psymtabs=0D Deprecated bfd_read called at /usr/src/gnu/usr.bin/binutils/gdb/../../../..= /contrib/gdb/gdb/dbxread.c line 933 in fill_symbuf=0D =0D IdlePTD at physical address 0x00970000=0D initial pcb at physical address 0x0039f580=0D panicstr: page fault=0D panic messages:=0D ---=0D Fatal trap 12: page fault while in kernel mode=0D fault virtual address =3D 0xf00033=0D fault code =3D supervisor read, page not present=0D instruction pointer =3D 0x8:0xc0271194=0D stack pointer =3D 0x10:0xd8946e48=0D frame pointer =3D 0x10:0xd8946e50=0D code segment =3D base 0x0, limit 0xfffff, type 0x1b=0D =3D DPL 0, pres 1, def32 1, gran 1=0D processor eflags =3D interrupt enabled, resume, IOPL =3D 0=0D current process =3D 49692 (sh)=0D interrupt mask =3D none=0D trap number =3D 12=0D panic: page fault=0D =0D syncing disks... 26 7 =0D done=0D Uptime: 9m38s=0D =0D dumping to dev #da/0x20001, offset 1048736=0D dump 511 510 509 508 507 506 505 504 503 502 501 500 499 498 497 496 495 49= 4 493 492 491 490 489 488 487 486 485 484 483 482 481 480 479 478 477 476 4= 75 474 473 472 471 470 469 468 467 466 465 464 463 462 461 460 459 458 457 = 456 455 454 453 452 451 450 449 448 447 446 445 444 443 442 441 440 439 438= 437 436 435 434 433 432 431 430 429 428 427 426 425 424 423 422 421 420 41= 9 418 417 416 415 414 413 412 411 410 409 408 407 406 405 404 403 402 401 4= 00 399 398 397 396 395 394 393 392 391 390 389 388 387 386 385 384 383 382 = 381 380 379 378 377 376 375 374 373 372 371 370 369 368 367 366 365 364 363= 362 361 360 359 358 357 356 355 354 353 352 351 350 349 348 347 346 345 34= 4 343 342 341 340 339 338 337 336 335 334 333 332 331 330 329 328 327 326 3= 25 324 323 322 321 320 319 318 317 316 315 314 313 312 311 310 309 308 307 = 306 305 304 303 302 301 300 299 298 297 296 295 294 293 292 291 290 289 288= 287 286 285 284 283 282 281 280 279 278 277 276 275 274 273 272 271 270 26= 9 268 267 266 265 264 263 262 261 260 259 258 257 256 255 254 253 252 251 2= 50 249 248 247 246 245 244 243 242 241 240 239 238 237 236 235 234 233 232 = 231 230 229 228 227 226 225 224 223 222 221 220 219 218 217 216 215 214 213= 212 211 210 209 208 207 206 205 204 203 202 201 200 199 198 197 196 195 19= 4 193 192 191 190 189 188 187 186 185 184 183 182 181 180 179 178 177 176 1= 75 174 173 172 171 170 169 168 167 166 165 164 163 162 161 160 159 158 157 = 156 155 154 153 152 151 150 149 148 147 146 145 144 143 142 141 140 139 138= 137 136 135 134 133 132 131 130 129 128 127 126 125 124 123 122 121 120 11= 9 118 117 116 115 114 113 112 111 110 109 108 107 106 105 104 103 102 101 1= 00 99 98 97 96 95 94 93 92 91 90 89 88 87 86 85 84 83 82 81 80 79 78 77 76 = 75 74 73 72 71 70 69 68 67 66 65 64 63 62 61 60 59 58 57 56 55 54 53 52 51 = 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 = 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 110>ipf= w: 65534 Deny TCP 81.134.118.108:4382 81.2.69.223:135 in via de0=0D pid 82168 (procmail), uid 0: exited on signal 11=0D Waiting (max 60 seconds) for system process `vnlru' to stop...stopped=0D Waiting (max 60 seconds) for system process `bufdaemon' to stop...stopped=0D Waiting (max 60 seconds) for system process `syncer' to stop...stopped=0D =0D syncing disks... 10 5 =0D done=0D Copyright (c) 1992-2004 The FreeBSD Project.=0D Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994=0D The Regents of the University of California. All rights reserved.=0D FreeBSD 4.10-STABLE #88: Sun Nov 14 16:39:39 GMT 2004=0D root@happy-idiot-talk.infracaninophile.co.uk:/usr/obj/usr/src/sys/HAPPY= -IDIOT-TALK=0D Timecounter "i8254" frequency 1193182 Hz=0D Timecounter "TSC" frequency 1400058433 Hz=0D CPU: AMD Athlon(TM) XP1600+ (1400.06-MHz 686-class CPU)=0D Origin =3D "AuthenticAMD" Id =3D 0x662 Stepping =3D 2=0D Features=3D0x383f9ff=0D #3 0xc02ee11f in trap_fatal (frame=3D0xd8946e08, eva=3D15728691)=0D at /usr/src/sys/i386/i386/trap.c:974=0D frame =3D (struct trapframe *) 0xd8946e08=0D code =3D 16=0D type =3D 12=0D ss =3D 16=0D esp =3D 0=0D softseg =3D {ssd_base =3D 0, ssd_limit =3D 1048575, ssd_type =3D 27, =0D ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 13, ssd_xx1 =3D 1, ssd_def32 =3D 1= , =0D ssd_gran =3D 1}=0D #4 0xc02eddcd in trap_pfault (frame=3D0xd8946e08, usermode=3D0, eva=3D1572= 8691)=0D at /usr/src/sys/i386/i386/trap.c:867=0D va =3D 15728640=0D vm =3D (struct vmspace *) 0x0=0D map =3D 0xd7559cc0=0D rv =3D 0=0D ftype =3D 1 '\001'=0D p =3D (struct proc *) 0xd8788c20=0D #5 0xc02ed973 in trap (frame=3D{tf_fs =3D 16, tf_es =3D 16, tf_ds =3D 16, = =0D tf_edi =3D 134963200, tf_esi =3D 1, tf_ebp =3D -661361072, =0D tf_isp =3D -661361100, tf_ebx =3D -661236196, tf_edx =3D 15728671, =0D tf_ecx =3D 6074742, tf_eax =3D 262139, tf_trapno =3D 12, tf_err =3D 0= , =0D tf_eip =3D -1071181420, tf_cs =3D 8, tf_eflags =3D 66050, tf_esp =3D = 0, =0D tf_ss =3D -661236196}) at /usr/src/sys/i386/i386/trap.c:466=0D p =3D (struct proc *) 0xd8788c20=0D sticks =3D 15607082675286076940=0D i =3D 0=0D ucode =3D 0=0D type =3D 12=0D code =3D 0=0D eva =3D 15728691=0D #6 0xc0271194 in vm_page_lookup (object=3D0xd896561c, pindex=3D1)=0D at /usr/src/sys/vm/vm_page.c:515=0D object =3D 0x0=0D pindex =3D 1=0D m =3D 0x0=0D generation =3D 0=0D #7 0xc02ebaa8 in pmap_prefault (pmap=3D0xd7559d2c, addra=3D134959104, =0D entry=3D0xd75ccf00) at /usr/src/sys/i386/i386/pmap.c:2400=0D lobject =3D 0xd896561c=0D i =3D 1=0D starta =3D 134959104=0D addr =3D 134963200=0D pindex =3D 1=0D m =3D 0x0=0D mpte =3D 0x0=0D object =3D 0xd896561c=0D #8 0xc026971a in vm_fault (map=3D0xd7559cc0, vaddr=3D134959104, =0D fault_type=3D2 '\002', fault_flags=3D8) at /usr/src/sys/vm/vm_fault.c:8= 44=0D fault_type =3D 2 '\002'=0D prot =3D 3 '\003'=0D result =3D 0=0D wired =3D 0=0D map_generation =3D 22=0D next_object =3D 0x0=0D marray =3D {0x0, 0xd8788c20, 0xd8788c20, 0xd7559cc0, 0x80b5000, =0D 0xc017476f, 0xd8946f28, 0x1, 0xd8788c20, 0x0, 0xd8946f24, 0xd7559cc0, =0D 0xd7559cc0, 0xd75ccf00, 0xd8946f3c, 0xc02ef8c2}=0D hardfault =3D 0=0D faultcount =3D 0=0D fs =3D {m =3D 0xc11a8e90, object =3D 0xd896561c, pindex =3D 0, =0D first_m =3D 0xc11a8e90, first_object =3D 0xd896561c, first_pindex =3D 0, = =0D map =3D 0xd7559cc0, entry =3D 0xd75ccf00, lookup_still_valid =3D 0, vp = =3D 0x0}=0D #9 0xc02edd62 in trap_pfault (frame=3D0xd8946fa8, usermode=3D1, eva=3D1349= 60316)=0D at /usr/src/sys/i386/i386/trap.c:847=0D va =3D 134959104=0D vm =3D (struct vmspace *) 0x0=0D map =3D 0xd7559cc0=0D rv =3D 0=0D ftype =3D 2 '\002'=0D ---Type to continue, or q to quit---=0D p =3D (struct proc *) 0xd8788c20=0D #10 0xc02ed827 in trap (frame=3D{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D 47, = =0D tf_edi =3D 49694, tf_esi =3D 135016448, tf_ebp =3D -1077938976, =0D tf_isp =3D -661360684, tf_ebx =3D 0, tf_edx =3D 135016448, tf_ecx =3D= 135016448, =0D tf_eax =3D 0, tf_trapno =3D 12, tf_err =3D 7, tf_eip =3D 134550919, t= f_cs =3D 31, =0D tf_eflags =3D 66118, tf_esp =3D -1077938980, tf_ss =3D 47})=0D at /usr/src/sys/i386/i386/trap.c:377=0D p =3D (struct proc *) 0xd8788c20=0D sticks =3D 0=0D i =3D 0=0D ucode =3D 0=0D type =3D 12=0D code =3D 0=0D eva =3D 134960316=0D #11 0x8051587 in ?? ()=0D No symbol table info available.=0D #12 0x8051930 in ?? ()=0D No symbol table info available.=0D #13 0x804b15c in ?? ()=0D No symbol table info available.=0D #14 0x804ac55 in ?? ()=0D No symbol table info available.=0D #15 0x804aa1b in ?? ()=0D No symbol table info available.=0D #16 0x80525f3 in ?? ()=0D No symbol table info available.=0D #17 0x804813e in ?? ()=0D No symbol table info available.=0D (kgdb) quit=0D Script done on Sun Nov 14 17:40:59 2004 Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --wac7ysb48OaltWcw Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBl5lYiD657aJF7eIRAkUHAJ41+70/OmwINyA/zH1L5CL/Goy6EACgr6Rj N+Uz716dqKFudH/+RzhFZXE= =FHr0 -----END PGP SIGNATURE----- --wac7ysb48OaltWcw--