Date: Mon, 20 Dec 1999 08:51:54 -0800 From: Tamiji Homma <thomma@baynetworks.com> To: current@freebsd.org Subject: vm_page_remove panic Message-ID: <19991220085154E.thomma@baynetworks.com>
next in thread | raw e-mail | index | archive | help
Hi,
I have been seeing vm_page_remove panic three times since
last week. During make world once, cvsup twice. It seems
reproducible.
Any clue?
Thanks
Tammy
snoopy# uname -a
FreeBSD snoopy.pochi.com 4.0-CURRENT FreeBSD 4.0-CURRENT #94: Sun Dec 19=
10:40:05 PST 1999 root@snoopy.pochi.com:/usr/src/sys/compile/SNOOPY=
i386
snoopy# gdb -k /usr/src/sys/compile/SNOOPY/kernel.debug /var/crash/vmcor=
e.1
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you=
are
welcome to change it and/or distribute copies of it under certain condit=
ions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for detai=
ls.
This GDB was configured as "i386-unknown-freebsd"...
IdlePTD 3440640
initial pcb at 2c8300
panicstr: from debugger
panic messages:
---
panic: vm_page_remove(): page not found in hash
panic: from debugger
Uptime: 8h7m54s
dumping to dev #ad/0x30001, offset 393216
dump ata0: resetting devices .. done
64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 =
40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 =
16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 =
---
#0 boot (howto=3D260) at ../../kern/kern_shutdown.c:303
303 dumppcb.pcb_cr3 =3D rcr3();
(kgdb) where
#0 boot (howto=3D260) at ../../kern/kern_shutdown.c:303
#1 0xc015b4ed in panic (fmt=3D0xc0275294 "from debugger")
at ../../kern/kern_shutdown.c:553
#2 0xc012faa5 in db_panic (addr=3D-1071395625, have_addr=3D0, count=3D-=
1, =
modif=3D0xc62e8b50 "") at ../../ddb/db_command.c:433
#3 0xc012fa45 in db_command (last_cmdp=3D0xc02a565c, cmd_table=3D0xc02a=
54bc, =
aux_cmd_tablep=3D0xc02c46e4) at ../../ddb/db_command.c:333
#4 0xc012fb0a in db_command_loop () at ../../ddb/db_command.c:455
#5 0xc0131b9b in db_trap (type=3D3, code=3D0) at ../../ddb/db_trap.c:71=
#6 0xc023ca7b in kdb_trap (type=3D3, code=3D0, regs=3D0xc62e8c54)
at ../../i386/i386/db_interface.c:157
#7 0xc024b3d0 in trap (frame=3D{tf_fs =3D 16, tf_es =3D 16, tf_ds =3D 1=
6, =
tf_edi =3D 1074780922, tf_esi =3D 256, tf_ebp =3D -970027876, =
tf_isp =3D -970027904, tf_ebx =3D -1071073184, tf_edx =3D 10737418=
24, =
tf_ecx =3D 0, tf_eax =3D 18, tf_trapno =3D 3, tf_err =3D 0, =
tf_eip =3D -1071395625, tf_cs =3D 8, tf_eflags =3D 582, tf_esp =3D=
-1071030625, =
tf_ss =3D -1071137789}) at ../../i386/i386/trap.c:533
#8 0xc023ccd7 in Debugger (msg=3D0xc027bc03 "panic") at machine/cpufunc=
.h:64
#9 0xc015b4e4 in panic (
fmt=3D0xc028b860 "vm_page_remove(): page not found in hash")
at ../../kern/kern_shutdown.c:551
#10 0xc020cb53 in vm_page_remove (m=3D0xc04d05b0) at ../../vm/vm_page.c:=
448
#11 0xc020d194 in vm_page_free_toq (m=3D0xc04d05b0) at ../../vm/vm_page.=
c:1080
#12 0xc020cedb in vm_page_alloc (object=3D0xc6336900, pindex=3D3, page_r=
eq=3D0)
---Type <return> to continue, or q <return> to quit---
at ../../vm/vm_page.h:504
#13 0xc017e588 in allocbuf (bp=3D0xc1c90900, size=3D8192)
at ../../kern/vfs_bio.c:2375
#14 0xc017e17e in getblk (vp=3D0xc639d640, blkno=3D1, size=3D8192, slpfl=
ag=3D0, =
slptimeo=3D0) at ../../kern/vfs_bio.c:2153
#15 0xc01f3554 in ffs_balloc (ap=3D0xc62e8e68) at ../../ufs/ffs/ffs_ball=
oc.c:170
#16 0xc01fc1dd in ffs_write (ap=3D0xc62e8ea0) at vnode_if.h:1035
#17 0xc018cd4e in vn_write (fp=3D0xc09aa100, uio=3D0xc62e8eec, cred=3D0x=
c08fbd80, =
flags=3D0, p=3D0xc5dca700) at vnode_if.h:363
#18 0xc0168515 in dofilewrite (p=3D0xc5dca700, fp=3D0xc09aa100, fd=3D9, =
buf=3D0x843400c, nbyte=3D7461, offset=3D-1, flags=3D0) at ../../sys/=
file.h:156
#19 0xc016841b in write (p=3D0xc5dca700, uap=3D0xc62e8f80)
at ../../kern/sys_generic.c:297
#20 0xc024bc9e in syscall (frame=3D{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D=
47, =
tf_edi =3D 7461, tf_esi =3D 7461, tf_ebp =3D 139553084, tf_isp =3D=
-970027052, =
tf_ebx =3D 137571960, tf_edx =3D 138625036, tf_ecx =3D 138616616, =
tf_eax =3D 4, =
tf_trapno =3D 0, tf_err =3D 2, tf_eip =3D 136619508, tf_cs =3D 31,=
=
tf_eflags =3D 518, tf_esp =3D 139553064, tf_ss =3D 47})
at ../../i386/i386/trap.c:1057
#21 0xc023d386 in Xint0x80_syscall ()
#22 0x819b12a in ?? ()
#23 0x81a793f in ?? ()
#24 0x81a2c37 in ?? ()
#25 0x8171a1c in ?? ()
---Type <return> to continue, or q <return> to quit---
#26 0x8171756 in ?? ()
#27 0x81a385a in ?? ()
#28 0x81a35ec in ?? ()
#29 0x8062f2b in ?? ()
#30 0x806341b in ?? ()
#31 0x8061f98 in ?? ()
#32 0x805e2d7 in ?? ()
#33 0x805dd7c in ?? ()
#34 0x81e8ed8 in ?? ()
#35 0x81e8cea in ?? ()
#36 0xbfbffc48 in ?? ()
#37 0x0 in ?? ()
(kgdb) frame 11
#11 0xc020d194 in vm_page_free_toq (m=3D0xc04d05b0) at ../../vm/vm_page.=
c:1080
1080 vm_page_remove(m);
(kgdb) p *m
$1 =3D {pageq =3D {tqe_next =3D 0xc04dd7b0, tqe_prev =3D 0xc02e1e10}, hn=
ext =3D 0x0, =
listq =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc044a18c}, object =3D 0xc6=
3c62a0, =
pindex =3D 1, phys_addr =3D 59547648, queue =3D 0, flags =3D 0, pc =3D=
10, =
wire_count =3D 0, hold_count =3D 0, act_count =3D 0 '\000', busy =3D 0=
'\000', =
valid =3D 255 '=FF', dirty =3D 0 '\000'}
(kgdb) down
#10 0xc020cb53 in vm_page_remove (m=3D0xc04d05b0) at ../../vm/vm_page.c:=
448
448 panic("vm_page_remove(): page not found in hash");
(kgdb) p *bucket
Cannot access memory at address 0x0.
(kgdb) p bucket
$2 =3D (struct vm_page **) 0x0
(kgdb) p m
$3 =3D 0xc04d05b0
(kgdb) p m->object
$4 =3D 0xc63c62a0
(kgdb) p *m->object
$5 =3D {object_list =3D {tqe_next =3D 0xc63c69e0, tqe_prev =3D 0xc636506=
0}, =
shadow_head =3D {tqh_first =3D 0x0, tqh_last =3D 0xc63c62a8}, shadow_l=
ist =3D {
tqe_next =3D 0xf00, tqe_prev =3D 0x0}, memq =3D {tqh_first =3D 0xc04=
4a080, =
tqh_last =3D 0xc04d05bc}, generation =3D 3846, size =3D 3, ref_count=
=3D 0, =
shadow_count =3D 0, hash_rand =3D -2516167, type =3D 2 '\002', flags =3D=
0, =
pg_color =3D 9, paging_in_progress =3D 0, resident_page_count =3D 2, =
backing_object =3D 0xf00, backing_object_offset =3D 0, pager_object_li=
st =3D {
tqe_next =3D 0x0, tqe_prev =3D 0xd00}, handle =3D 0xc634e6e0, un_pag=
er =3D {vnp =3D {
vnp_size =3D 8200}, devp =3D {devp_pglist =3D {tqh_first =3D 0x200=
8, =
tqh_last =3D 0x0}}, swp =3D {swp_bcount =3D 8200}}}
(kgdb) p m->pindex
$6 =3D 1
(kgdb) quit
snoopy# dmesg
Copyright (c) 1992-1999 The FreeBSD Project.
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
FreeBSD 4.0-CURRENT #94: Sun Dec 19 10:40:05 PST 1999
root@snoopy.pochi.com:/usr/src/sys/compile/SNOOPY
Timecounter "i8254" frequency 1193182 Hz
CPU: AMD-K6tm w/ multimedia extensions (300.68-MHz 586-class CPU)
Origin =3D "AuthenticAMD" Id =3D 0x570 Stepping =3D 0
Features=3D0x8001bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8,MMX>
AMD Features=3D0x400<<b10>>
real memory =3D 67108864 (65536K bytes)
avail memory =3D 61755392 (60308K bytes)
Preloaded elf kernel "kernel" at 0xc0336000.
md0: Malloc disk
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
isab0: <VIA 82C586 PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
ata-pci0: <VIA 82C586 ATA controller> at device 7.1 on pci0
ata-pci0: Busmastering DMA supported
ata0 at 0x01f0 irq 14 on ata-pci0
ata1 at 0x0170 irq 15 on ata-pci0
vga-pci0: <Matrox MGA 2064W graphics accelerator> at device 8.0 on pci0
pcm0: <AudioPCI ES1371> irq 11 at device 9.0 on pci0
fxp0: <Intel EtherExpress Pro 10/100B Ethernet> irq 12 at device 10.0 on=
pci0
fxp0: Ethernet address 00:a0:c9:e8:ba:11
fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f7 irq 6 drq 2 on isa0
fdc0: FIFO enabled, 8 bytes threshold
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
ata-isa0: already registered as ata0
ata-isa1: already registered as ata1
atkbdc0: <keyboard controller (i8042)> at port 0x60-0x6f on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
vga0: <Generic ISA VGA> at port 0x3b0-0x3df iomem 0xa0000-0xbffff on isa=
0
sc0: <System console> on isa0
sc0: VGA <16 virtual consoles, flags=3D0x200>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
sio2: configured irq 5 not in bitmap of probed irqs 0x400
sio2 at port 0x3e8-0x3ef irq 5 on isa0
sio2: type 16550A
sio3 at port 0x3e0-0x3e7 irq 9 on isa0
sio3: type 16550A
ppc0 at port 0x378-0x37f irq 7 flags 0x40 on isa0
ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode
plip0: <PLIP network interface> on ppbus 0
lpt0: <generic printer> on ppbus 0
lpt0: Interrupt-driven port
ppi0: <generic parallel i/o> on ppbus 0
ad0: <QUANTUM FIREBALL SE6.4A/API.0A00> ATA-3 disk at ata0 as master
ad0: 6149MB (12594960 sectors), 13328 cyls, 15 heads, 63 S/T, 512 B/S
ad0: 16 secs/int, 1 depth queue, UDMA33
ad2: <Maxtor 91152D8/WAS82739> ATA-4 disk at ata1 as master
ad2: 10991MB (22510656 sectors), 22332 cyls, 16 heads, 63 S/T, 512 B/S
ad2: 16 secs/int, 1 depth queue, UDMA33
acd0: <FX001DE/J03> CDROM drive at ata1 as slave =
acd0: read 689KB/s (689KB/s), 128KB buffer, PIO
acd0: Reads:
acd0: Audio: play, 255 volume levels
acd0: Mechanism: ejectable tray
acd0: Medium: CD-ROM 120mm data disc loaded, unlocked
Mounting root from ufs:/dev/ad0s2a
WARNING: / was not properly dismounted
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991220085154E.thomma>