From owner-freebsd-current Mon Dec 20 8:52:19 1999 Delivered-To: freebsd-current@freebsd.org Received: from baynet.baynetworks.com (ns1.BayNetworks.COM [134.177.3.20]) by hub.freebsd.org (Postfix) with ESMTP id 020D115256 for ; Mon, 20 Dec 1999 08:52:15 -0800 (PST) (envelope-from thomma@BayNetworks.COM) Received: from mailhost.BayNetworks.COM (h016b.s86b1.BayNetworks.COM [134.177.1.107]) by baynet.baynetworks.com (8.9.1/8.9.1) with ESMTP id IAA04384 for ; Mon, 20 Dec 1999 08:50:55 -0800 (PST) Received: from fedex.engwest.baynetworks.com (fedex.engwest.baynetworks.com [134.177.110.46]) by mailhost.BayNetworks.COM (8.9.1/8.8.8) with ESMTP id IAA02481 for ; Mon, 20 Dec 1999 08:50:53 -0800 (PST) Received: from carrera.engwest (carrera [134.177.160.237]) by fedex.engwest.baynetworks.com (8.8.8+Sun/8.8.8) with SMTP id IAA14498 for ; Mon, 20 Dec 1999 08:52:11 -0800 (PST) Received: from localhost by carrera.engwest (SMI-8.6/SMI-SVR4) id IAA10130; Mon, 20 Dec 1999 08:51:54 -0800 To: current@freebsd.org Subject: vm_page_remove panic X-Mailer: Mew version 1.92 on Emacs 19.28 / Mule 2.3 (SUETSUMUHANA) Mime-Version: 1.0 Content-Type: Text/Plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Message-Id: <19991220085154E.thomma@baynetworks.com> Date: Mon, 20 Dec 1999 08:51:54 -0800 From: Tamiji Homma X-Dispatcher: imput version 971024 Lines: 270 Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, I have been seeing vm_page_remove panic three times since last week. During make world once, cvsup twice. It seems reproducible. Any clue? Thanks Tammy snoopy# uname -a FreeBSD snoopy.pochi.com 4.0-CURRENT FreeBSD 4.0-CURRENT #94: Sun Dec 19= 10:40:05 PST 1999 root@snoopy.pochi.com:/usr/src/sys/compile/SNOOPY= i386 snoopy# gdb -k /usr/src/sys/compile/SNOOPY/kernel.debug /var/crash/vmcor= e.1 GNU gdb 4.18 Copyright 1998 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you= are welcome to change it and/or distribute copies of it under certain condit= ions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for detai= ls. This GDB was configured as "i386-unknown-freebsd"... IdlePTD 3440640 initial pcb at 2c8300 panicstr: from debugger panic messages: --- panic: vm_page_remove(): page not found in hash panic: from debugger Uptime: 8h7m54s dumping to dev #ad/0x30001, offset 393216 dump ata0: resetting devices .. done 64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 = 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 = 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 = --- #0 boot (howto=3D260) at ../../kern/kern_shutdown.c:303 303 dumppcb.pcb_cr3 =3D rcr3(); (kgdb) where #0 boot (howto=3D260) at ../../kern/kern_shutdown.c:303 #1 0xc015b4ed in panic (fmt=3D0xc0275294 "from debugger") at ../../kern/kern_shutdown.c:553 #2 0xc012faa5 in db_panic (addr=3D-1071395625, have_addr=3D0, count=3D-= 1, = modif=3D0xc62e8b50 "") at ../../ddb/db_command.c:433 #3 0xc012fa45 in db_command (last_cmdp=3D0xc02a565c, cmd_table=3D0xc02a= 54bc, = aux_cmd_tablep=3D0xc02c46e4) at ../../ddb/db_command.c:333 #4 0xc012fb0a in db_command_loop () at ../../ddb/db_command.c:455 #5 0xc0131b9b in db_trap (type=3D3, code=3D0) at ../../ddb/db_trap.c:71= #6 0xc023ca7b in kdb_trap (type=3D3, code=3D0, regs=3D0xc62e8c54) at ../../i386/i386/db_interface.c:157 #7 0xc024b3d0 in trap (frame=3D{tf_fs =3D 16, tf_es =3D 16, tf_ds =3D 1= 6, = tf_edi =3D 1074780922, tf_esi =3D 256, tf_ebp =3D -970027876, = tf_isp =3D -970027904, tf_ebx =3D -1071073184, tf_edx =3D 10737418= 24, = tf_ecx =3D 0, tf_eax =3D 18, tf_trapno =3D 3, tf_err =3D 0, = tf_eip =3D -1071395625, tf_cs =3D 8, tf_eflags =3D 582, tf_esp =3D= -1071030625, = tf_ss =3D -1071137789}) at ../../i386/i386/trap.c:533 #8 0xc023ccd7 in Debugger (msg=3D0xc027bc03 "panic") at machine/cpufunc= .h:64 #9 0xc015b4e4 in panic ( fmt=3D0xc028b860 "vm_page_remove(): page not found in hash") at ../../kern/kern_shutdown.c:551 #10 0xc020cb53 in vm_page_remove (m=3D0xc04d05b0) at ../../vm/vm_page.c:= 448 #11 0xc020d194 in vm_page_free_toq (m=3D0xc04d05b0) at ../../vm/vm_page.= c:1080 #12 0xc020cedb in vm_page_alloc (object=3D0xc6336900, pindex=3D3, page_r= eq=3D0) ---Type to continue, or q to quit--- at ../../vm/vm_page.h:504 #13 0xc017e588 in allocbuf (bp=3D0xc1c90900, size=3D8192) at ../../kern/vfs_bio.c:2375 #14 0xc017e17e in getblk (vp=3D0xc639d640, blkno=3D1, size=3D8192, slpfl= ag=3D0, = slptimeo=3D0) at ../../kern/vfs_bio.c:2153 #15 0xc01f3554 in ffs_balloc (ap=3D0xc62e8e68) at ../../ufs/ffs/ffs_ball= oc.c:170 #16 0xc01fc1dd in ffs_write (ap=3D0xc62e8ea0) at vnode_if.h:1035 #17 0xc018cd4e in vn_write (fp=3D0xc09aa100, uio=3D0xc62e8eec, cred=3D0x= c08fbd80, = flags=3D0, p=3D0xc5dca700) at vnode_if.h:363 #18 0xc0168515 in dofilewrite (p=3D0xc5dca700, fp=3D0xc09aa100, fd=3D9, = buf=3D0x843400c, nbyte=3D7461, offset=3D-1, flags=3D0) at ../../sys/= file.h:156 #19 0xc016841b in write (p=3D0xc5dca700, uap=3D0xc62e8f80) at ../../kern/sys_generic.c:297 #20 0xc024bc9e in syscall (frame=3D{tf_fs =3D 47, tf_es =3D 47, tf_ds =3D= 47, = tf_edi =3D 7461, tf_esi =3D 7461, tf_ebp =3D 139553084, tf_isp =3D= -970027052, = tf_ebx =3D 137571960, tf_edx =3D 138625036, tf_ecx =3D 138616616, = tf_eax =3D 4, = tf_trapno =3D 0, tf_err =3D 2, tf_eip =3D 136619508, tf_cs =3D 31,= = tf_eflags =3D 518, tf_esp =3D 139553064, tf_ss =3D 47}) at ../../i386/i386/trap.c:1057 #21 0xc023d386 in Xint0x80_syscall () #22 0x819b12a in ?? () #23 0x81a793f in ?? () #24 0x81a2c37 in ?? () #25 0x8171a1c in ?? () ---Type to continue, or q to quit--- #26 0x8171756 in ?? () #27 0x81a385a in ?? () #28 0x81a35ec in ?? () #29 0x8062f2b in ?? () #30 0x806341b in ?? () #31 0x8061f98 in ?? () #32 0x805e2d7 in ?? () #33 0x805dd7c in ?? () #34 0x81e8ed8 in ?? () #35 0x81e8cea in ?? () #36 0xbfbffc48 in ?? () #37 0x0 in ?? () (kgdb) frame 11 #11 0xc020d194 in vm_page_free_toq (m=3D0xc04d05b0) at ../../vm/vm_page.= c:1080 1080 vm_page_remove(m); (kgdb) p *m $1 =3D {pageq =3D {tqe_next =3D 0xc04dd7b0, tqe_prev =3D 0xc02e1e10}, hn= ext =3D 0x0, = listq =3D {tqe_next =3D 0x0, tqe_prev =3D 0xc044a18c}, object =3D 0xc6= 3c62a0, = pindex =3D 1, phys_addr =3D 59547648, queue =3D 0, flags =3D 0, pc =3D= 10, = wire_count =3D 0, hold_count =3D 0, act_count =3D 0 '\000', busy =3D 0= '\000', = valid =3D 255 '=FF', dirty =3D 0 '\000'} (kgdb) down #10 0xc020cb53 in vm_page_remove (m=3D0xc04d05b0) at ../../vm/vm_page.c:= 448 448 panic("vm_page_remove(): page not found in hash"); (kgdb) p *bucket Cannot access memory at address 0x0. (kgdb) p bucket $2 =3D (struct vm_page **) 0x0 (kgdb) p m $3 =3D 0xc04d05b0 (kgdb) p m->object $4 =3D 0xc63c62a0 (kgdb) p *m->object $5 =3D {object_list =3D {tqe_next =3D 0xc63c69e0, tqe_prev =3D 0xc636506= 0}, = shadow_head =3D {tqh_first =3D 0x0, tqh_last =3D 0xc63c62a8}, shadow_l= ist =3D { tqe_next =3D 0xf00, tqe_prev =3D 0x0}, memq =3D {tqh_first =3D 0xc04= 4a080, = tqh_last =3D 0xc04d05bc}, generation =3D 3846, size =3D 3, ref_count= =3D 0, = shadow_count =3D 0, hash_rand =3D -2516167, type =3D 2 '\002', flags =3D= 0, = pg_color =3D 9, paging_in_progress =3D 0, resident_page_count =3D 2, = backing_object =3D 0xf00, backing_object_offset =3D 0, pager_object_li= st =3D { tqe_next =3D 0x0, tqe_prev =3D 0xd00}, handle =3D 0xc634e6e0, un_pag= er =3D {vnp =3D { vnp_size =3D 8200}, devp =3D {devp_pglist =3D {tqh_first =3D 0x200= 8, = tqh_last =3D 0x0}}, swp =3D {swp_bcount =3D 8200}}} (kgdb) p m->pindex $6 =3D 1 (kgdb) quit snoopy# dmesg Copyright (c) 1992-1999 The FreeBSD Project. Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. FreeBSD 4.0-CURRENT #94: Sun Dec 19 10:40:05 PST 1999 root@snoopy.pochi.com:/usr/src/sys/compile/SNOOPY Timecounter "i8254" frequency 1193182 Hz CPU: AMD-K6tm w/ multimedia extensions (300.68-MHz 586-class CPU) Origin =3D "AuthenticAMD" Id =3D 0x570 Stepping =3D 0 Features=3D0x8001bf AMD Features=3D0x400<> real memory =3D 67108864 (65536K bytes) avail memory =3D 61755392 (60308K bytes) Preloaded elf kernel "kernel" at 0xc0336000. md0: Malloc disk npx0: on motherboard npx0: INT 16 interface pcib0: on motherboard pci0: on pcib0 isab0: at device 7.0 on pci0 isa0: on isab0 ata-pci0: at device 7.1 on pci0 ata-pci0: Busmastering DMA supported ata0 at 0x01f0 irq 14 on ata-pci0 ata1 at 0x0170 irq 15 on ata-pci0 vga-pci0: at device 8.0 on pci0 pcm0: irq 11 at device 9.0 on pci0 fxp0: irq 12 at device 10.0 on= pci0 fxp0: Ethernet address 00:a0:c9:e8:ba:11 fdc0: at port 0x3f0-0x3f7 irq 6 drq 2 on isa0 fdc0: FIFO enabled, 8 bytes threshold fd0: <1440-KB 3.5" drive> on fdc0 drive 0 ata-isa0: already registered as ata0 ata-isa1: already registered as ata1 atkbdc0: at port 0x60-0x6f on isa0 atkbd0: irq 1 on atkbdc0 vga0: at port 0x3b0-0x3df iomem 0xa0000-0xbffff on isa= 0 sc0: on isa0 sc0: VGA <16 virtual consoles, flags=3D0x200> sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A sio1 at port 0x2f8-0x2ff irq 3 on isa0 sio1: type 16550A sio2: configured irq 5 not in bitmap of probed irqs 0x400 sio2 at port 0x3e8-0x3ef irq 5 on isa0 sio2: type 16550A sio3 at port 0x3e0-0x3e7 irq 9 on isa0 sio3: type 16550A ppc0 at port 0x378-0x37f irq 7 flags 0x40 on isa0 ppc0: Generic chipset (NIBBLE-only) in COMPATIBLE mode plip0: on ppbus 0 lpt0: on ppbus 0 lpt0: Interrupt-driven port ppi0: on ppbus 0 ad0: ATA-3 disk at ata0 as master ad0: 6149MB (12594960 sectors), 13328 cyls, 15 heads, 63 S/T, 512 B/S ad0: 16 secs/int, 1 depth queue, UDMA33 ad2: ATA-4 disk at ata1 as master ad2: 10991MB (22510656 sectors), 22332 cyls, 16 heads, 63 S/T, 512 B/S ad2: 16 secs/int, 1 depth queue, UDMA33 acd0: CDROM drive at ata1 as slave = acd0: read 689KB/s (689KB/s), 128KB buffer, PIO acd0: Reads: acd0: Audio: play, 255 volume levels acd0: Mechanism: ejectable tray acd0: Medium: CD-ROM 120mm data disc loaded, unlocked Mounting root from ufs:/dev/ad0s2a WARNING: / was not properly dismounted To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message