Script started on Mon Mar 26 04:01:31 2007 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: panic: pmap_remove_all: illegal for unmanaged page, va: 0xe298000 cpuid = 0 KDB: stack backtrace: db_trace_self_wrapper(c06021c6) at 0xc0432819 = db_trace_self_wrapper+0x25 kdb_backtrace(100,c76f81b0,c7d80948,86b3,0,...) at 0xc04c9f75 = kdb_backtrace+0x29 panic(c061f0e7,e298000,c7d80948,86b3,0,...) at 0xc04aa7c9 = panic+0x109 pmap_remove_all(c7d80948) at 0xc05da838 = pmap_remove_all+0x1c vm_object_page_remove(c75e7780,86b3,0,86e5,0,0) at 0xc05a2f2f = vm_object_page_remove+0xe7 vm_object_sync(c75e7780,86b3000,0,32000,1,...) at 0xc05a1db1 = vm_object_sync+0x295 vm_map_sync(c5b228e8,2b07e000,2b0b0000,1,1) at 0xc059db3d = vm_map_sync+0x1e1 msync(c76f81b0,e3611d00) at 0xc059f8d9 = msync+0x6d syscall(e3611d38) at 0xc05df042 = syscall+0x29e Xint0x80_syscall() at 0xc05c88f0 = Xint0x80_syscall+0x20 --- syscall (65, FreeBSD ELF32, msync), eip = 0x282501fb, esp = 0xbfbfdc5c, ebp = 0xbfbfdc88 --- Uptime: 28m21s Physical memory: 883 MB Dumping 158 MB: 143 127 111 95 79 63 47 31 15 #0 doadump () at pcpu.h:172 172 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt #0 doadump () at pcpu.h:172 #1 0xc04aa51c in boot (howto=260) at ../../../kern/kern_shutdown.c:409 #2 0xc04aa82a in panic (fmt=0xc061f0e7 "pmap_remove_all: illegal for unmanaged page, va: 0x%x") at ../../../kern/kern_shutdown.c:563 #3 0xc05da838 in pmap_remove_all (m=0xc7d80948) at ../../../i386/i386/pmap.c:2103 #4 0xc05a2f2f in vm_object_page_remove (object=0xc75e7780, start=Unhandled dwarf expression opcode 0x93 ) at ../../../vm/vm_object.c:1831 #5 0xc05a1db1 in vm_object_sync (object=0xc75e7780, offset=141242368, size=204800, syncio=1, invalidate=1) at ../../../vm/vm_object.c:1061 #6 0xc059db3d in vm_map_sync (map=0xc5b228e8, start=721936384, end=722141184, syncio=1, invalidate=1) at ../../../vm/vm_map.c:2224 #7 0xc059f8d9 in msync (td=0x0, uap=0x0) at ../../../vm/vm_mmap.c:489 #8 0xc05df042 in syscall (frame=0xe3611d38) at ../../../i386/i386/trap.c:1010 #9 0xc05c88f0 in Xint0x80_syscall () at ../../../i386/i386/exception.s:196 #10 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) f 3 #3 0xc05da838 in pmap_remove_all (m=0xc7d80948) at ../../../i386/i386/pmap.c:2103 2103 panic("pmap_remove_all: illegal for unmanaged page, va: 0x%x", (kgdb) p *m $1 = {pageq = {tqe_next = 0xc7d80900, tqe_prev = 0xc7d80990}, listq = {tqe_next = 0xc7d80900, tqe_prev = 0xc7ccdd88}, left = 0xc7ccdd80, right = 0xc85e41f8, object = 0xc75e7780, pindex = 34483, phys_addr = 237600768, md = {pv_list_count = 0, pv_list = {tqh_first = 0x0, tqh_last = 0x0}}, queue = 0, flags = 152, pc = 0, wire_count = 1, cow = 0, hold_count = 0, oflags = 0, act_count = 0 '\0', busy = 0 '\0', valid = 255 'ÿ', dirty = 255 'ÿ'} (kgdb) up #4 0xc05a2f2f in vm_object_page_remove (object=0xc75e7780, start=Unhandled dwarf expression opcode 0x93 ) at ../../../vm/vm_object.c:1831 1831 pmap_remove_all(p); (kgdb) p *object $2 = {mtx = {lock_object = {lo_name = 0xc06155e7 "vm object", lo_type = 0xc0616bc1 "standard object", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4063449288, lpo_lineno = 0, lpo_type = 0xc061621c "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = {stqe_next = 0xc06d1a98}, lod_witness = 0xc06d1a98}}, mtx_lock = 3345973680, mtx_recurse = 0}, object_list = {tqe_next = 0xc7621c80, tqe_prev = 0xc780fc20}, shadow_head = {lh_first = 0x0}, shadow_list = {le_next = 0xc780f8c0, le_prev = 0xc144f408}, memq = {tqh_first = 0xc784fa20, tqh_last = 0xc784f7a0}, root = 0xc7d80948, size = 912385, generation = 7519, ref_count = 46, shadow_count = 0, type = 3 '\003', flags = 256, pg_color = 0, paging_in_progress = 1, resident_page_count = 2506, backing_object = 0x0, backing_object_offset = 0, pager_object_list = {tqe_next = 0xc75e9960, tqe_prev = 0xc07133e0}, handle = 0xc785be00, un_pager = {vnp = {vnp_size = -4008694390795731296}, devp = { devp_pglist = {tqh_first = 0xc784fea0, tqh_last = 0xc85e41b0}}, swp = {swp_bcount = -947585376}}} (kgdb) p *p $3 = {pageq = {tqe_next = 0xc7d80900, tqe_prev = 0xc7d80990}, listq = {tqe_next = 0xc7d80900, tqe_prev = 0xc7ccdd88}, left = 0xc7ccdd80, right = 0xc85e41f8, object = 0xc75e7780, pindex = 34483, phys_addr = 237600768, md = {pv_list_count = 0, pv_list = {tqh_first = 0x0, tqh_last = 0x0}}, queue = 0, flags = 152, pc = 0, wire_count = 1, cow = 0, hold_count = 0, oflags = 0, act_count = 0 '\0', busy = 0 '\0', valid = 255 'ÿ', dirty = 255 'ÿ'} (kgdb) up #5 0xc05a1db1 in vm_object_sync (object=0xc75e7780, offset=141242368, size=204800, syncio=1, invalidate=1) at ../../../vm/vm_object.c:1061 1061 vm_object_page_remove(object, (kgdb) p *object $4 = {mtx = {lock_object = {lo_name = 0xc06155e7 "vm object", lo_type = 0xc0616bc1 "standard object", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4063449288, lpo_lineno = 0, lpo_type = 0xc061621c "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = {stqe_next = 0xc06d1a98}, lod_witness = 0xc06d1a98}}, mtx_lock = 3345973680, mtx_recurse = 0}, object_list = {tqe_next = 0xc7621c80, tqe_prev = 0xc780fc20}, shadow_head = {lh_first = 0x0}, shadow_list = {le_next = 0xc780f8c0, le_prev = 0xc144f408}, memq = {tqh_first = 0xc784fa20, tqh_last = 0xc784f7a0}, root = 0xc7d80948, size = 912385, generation = 7519, ref_count = 46, shadow_count = 0, type = 3 '\003', flags = 256, pg_color = 0, paging_in_progress = 1, resident_page_count = 2506, backing_object = 0x0, backing_object_offset = 0, pager_object_list = {tqe_next = 0xc75e9960, tqe_prev = 0xc07133e0}, handle = 0xc785be00, un_pager = {vnp = {vnp_size = -4008694390795731296}, devp = { devp_pglist = {tqh_first = 0xc784fea0, tqh_last = 0xc85e41b0}}, swp = {swp_bcount = -947585376}}} (kgdb) up #6 0xc059db3d in vm_map_sync (map=0xc5b228e8, start=721936384, end=722141184, syncio=1, invalidate=1) at ../../../vm/vm_map.c:2224 2224 vm_object_sync(object, offset, size, syncio, invalidate); (kgdb) p *map $5 = {header = {prev = 0xc76061dc, next = 0xc59a55d8, left = 0x0, right = 0x0, start = 0, end = 3217031168, avail_ssize = 0, adj_free = 0, max_free = 0, object = {vm_object = 0x0, sub_map = 0x0}, offset = 0, eflags = 0, protection = 0 '\0', max_protection = 0 '\0', inheritance = 0 '\0', wired_count = 0, lastr = 0}, lock = {lock_object = {lo_name = 0xc0616237 "user map", lo_type = 0xc0616237 "user map", lo_flags = 37421056, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4026941319, lpo_lineno = 0, lpo_type = 0xc05f5fe0 "sx", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = {stqe_next = 0xc06d27e0}, lod_witness = 0xc06d27e0}}, sx_lock = 0xc06780f0, sx_cnt = -1, sx_shrd_cv = {cv_description = 0xc0616237 "user map", cv_waiters = 0}, sx_shrd_wcnt = 0, sx_excl_cv = {cv_description = 0xc0616237 "user map", cv_waiters = 0}, sx_excl_wcnt = 0, sx_xholder = 0xc76f81b0}, system_mtx = {lock_object = {lo_name = 0xc0615d44 "system map", lo_type = 0xc0615d44 "system map", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 641332203, lpo_lineno = 0, lpo_type = 0xc061621c "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = { stqe_next = 0xc06d3000}, lod_witness = 0xc06d3000}}, mtx_lock = 4, mtx_recurse = 0}, nentries = 150, size = 70619136, timestamp = 2024, needs_wakeup = 0 '\0', system_map = 0 '\0', flags = 0 '\0', root = 0xc83d4a18, pmap = 0xc5b229e0} (kgdb) up #7 0xc059f8d9 in msync (td=0x0, uap=0x0) at ../../../vm/vm_mmap.c:489 489 rv = vm_map_sync(map, addr, addr + size, (flags & MS_ASYNC) == 0, (kgdb) list 484 map = &td->td_proc->p_vmspace->vm_map; 485 486 /* 487 * Clean the pages and interpret the return value. 488 */ 489 rv = vm_map_sync(map, addr, addr + size, (flags & MS_ASYNC) == 0, 490 (flags & MS_INVALIDATE) != 0); 491 switch (rv) { 492 case KERN_SUCCESS: 493 return (0); (kgdb) up #8 0xc05df042 in syscall (frame=0xe3611d38) at ../../../i386/i386/trap.c:1010 1010 error = (*callp->sy_call)(td, args); (kgdb) p td $6 = (struct thread *) 0xc76f81b0 (kgdb) p 1@* $7 = {td_proc = 0xc76fcc08, td_plist = {tqe_next = 0x0, tqe_prev = 0xc76fcc10}, td_slpq = {tqe_next = 0x0, tqe_prev = 0xc5f1b6cc}, td_lockq = {tqe_next = 0x0, tqe_prev = 0xe35daab8}, td_selq = {tqh_first = 0x0, tqh_last = 0xc76f81cc}, td_sleepqueue = 0xc76f9180, td_turnstile = 0xc76fa6c0, td_umtxq = 0xc5e02440, td_tid = 100083, td_sigqueue = {sq_signals = {__bits = {0, 0, 0, 0}}, sq_kill = {__bits = {0, 0, 0, 0}}, sq_list = {tqh_first = 0x0, tqh_last = 0xc76f8204}, sq_proc = 0xc76fcc08, sq_flags = 1}, td_flags = 83951618, td_inhibitors = 0, td_pflags = 0, td_dupfd = 0, td_sqqueue = 0, td_wchan = 0x0, td_wmesg = 0x0, td_lastcpu = 0 '\0', td_oncpu = 0 '\0', td_owepreempt = 0 '\0', td_locks = 3, td_tsqueue = 255 'ÿ', td_blocked = 0x0, td_lockname = 0x0, td_contested = { lh_first = 0x0}, td_sleeplocks = 0xc070fb88, td_intr_nesting_level = 0, td_pinned = 1, td_mailbox = 0x0, td_ucred = 0xc7ca9300, td_standin = 0x0, td_upcall = 0x0, td_estcpu = 48, td_slptime = 0, td_pticks = 48, td_sticks = 48, td_iticks = 0, td_uticks = 0, td_uuticks = 0, td_usticks = 0, td_intrval = 4, td_oldsigmask = {__bits = {0, 0, 0, 0}}, td_sigmask = {__bits = {0, 0, 0, 0}}, td_generation = 98395, td_sigstk = {ss_sp = 0x0, ss_size = 0, ss_flags = 4}, td_kflags = 0, td_xsig = 0, td_profil_addr = 0, td_profil_ticks = 0, td_name = '\0' , td_base_pri = 186 'º', td_priority = 186 'º', td_pri_class = 3 '\003', td_user_pri = 186 'º', td_base_user_pri = 186 'º', td_pcb = 0xe3611d90, td_state = TDS_RUNNING, td_retval = {0, 0}, td_slpcallout = { c_links = {sle = {sle_next = 0x0}, tqe = {tqe_next = 0x0, tqe_prev = 0xd5e01690}}, c_time = 180680, c_arg = 0xc76f81b0, c_func = 0xc04d1178 , c_mtx = 0x0, c_flags = 16}, td_frame = 0xe3611d38, td_kstack_obj = 0xc75e8460, td_kstack = 3814785024, td_kstack_pages = 2, td_altkstack_obj = 0x0, td_altkstack = 0, td_altkstack_pages = 0, td_critnest = 0, td_md = {md_spinlock_count = 0, md_saved_flags = 2110022}, td_sched = 0xc76f8340, td_ar = 0x0, td_syscalls = 2886154} (kgdb) p *td->11Pd->td_proc->p_comm $8 = "Xorg\000\000r", '\0' (kgdb) p argstd_proc->p_comm $9 = {721936384, 204800, 2, 1, 8, 0, 141242368, 0} (kgdb) p 1@*s $10 = 721936384 (kgdb) Yyyy... Undefined command: "Yyyy". Try "help". (kgdb) p frame $11 = (struct trapframe *) 0xe3611d38 (kgdb) p 1@*me $12 = {tf_fs = 59, tf_es = 59, tf_ds = 59, tf_edi = 536870912, tf_esi = 16842756, tf_ebp = -1077945208, tf_isp = -480174748, tf_ebx = -1, tf_edx = 0, tf_ecx = -4096, tf_eax = 65, tf_trapno = 0, tf_err = 2, tf_eip = 673513979, tf_cs = 51, tf_eflags = 2110102, tf_esp = -1077945252, tf_ss = 59} (kgdb) quit Script done on Mon Mar 26 04:16:05 2007