Script started on Mon Mar 26 03:07:45 2007 wkoszek@laptop:/usr/src/sys/i386/compile/LAPTOP26032007# kgdb /boot/kernel/kernel /var/crash/vmcore.39 [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd". Unread portion of the kernel message buffer: panic: pmap_remove_all: illegal for unmanaged page, va: 0x2b62f000 cpuid = 0 KDB: stack backtrace: db_trace_self_wrapper(c05fefc5) at 0xc0432519 = db_trace_self_wrapper+0x25 kdb_backtrace(100,c5c771b0,c7a8c900,7bf8,0,...) at 0xc04c965d = kdb_backtrace+0x29 panic(c061b2ea,2b62f000,c7a8c900,7bf8,0,...) at 0xc04aa0e5 = panic+0x109 pmap_remove_all(c7a8c900) at 0xc05d7998 = pmap_remove_all+0x1c vm_object_page_remove(c5ab5640,7bf8,0,7c2a,0,0) at 0xc05a013f = vm_object_page_remove+0xe7 vm_object_sync(c5ab5640,7bf8000,0,32000,1,...) at 0xc059efc1 = vm_object_sync+0x295 vm_map_sync(c5b1e2f8,29b00000,29b32000,1,1) at 0xc059ad4d = vm_map_sync+0x1e1 msync(c5c771b0,e163fd00) at 0xc059cae9 = msync+0x6d syscall(e163fd38) at 0xc05dc17e = syscall+0x28e Xint0x80_syscall() at 0xc05c5a50 = Xint0x80_syscall+0x20 --- syscall (65, FreeBSD ELF32, msync), eip = 0x282501fb, esp = 0xbfbfdc5c, ebp = 0xbfbfdc88 --- Uptime: 20m57s Physical memory: 883 MB Dumping 168 MB: (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) 153 (CTRL-C to abort) 137 121 105 89 73 (CTRL-C to abort) 57 (CTRL-C to abort) (CTRL-C to abort) (CTRL-C to abort) 41 25 9 #0 doadump () at pcpu.h:172 172 __asm __volatile("movl %%fs:0,%0" : "=r" (td)); (kgdb) bt #0 doadump () at pcpu.h:172 #1 0xc04a9e38 in boot (howto=260) at ../../../kern/kern_shutdown.c:409 #2 0xc04aa146 in panic (fmt=0xc061b2ea "pmap_remove_all: illegal for unmanaged page, va: 0x%x") at ../../../kern/kern_shutdown.c:563 #3 0xc05d7998 in pmap_remove_all (m=0xc7a8c900) at ../../../i386/i386/pmap.c:2103 #4 0xc05a013f in vm_object_page_remove (object=0xc5ab5640, start=Unhandled dwarf expression opcode 0x93 ) at ../../../vm/vm_object.c:1831 #5 0xc059efc1 in vm_object_sync (object=0xc5ab5640, offset=129990656, size=204800, syncio=1, invalidate=1) at ../../../vm/vm_object.c:1061 #6 0xc059ad4d in vm_map_sync (map=0xc5b1e2f8, start=699400192, end=699604992, syncio=1, invalidate=1) at ../../../vm/vm_map.c:2224 #7 0xc059cae9 in msync (td=0x0, uap=0x0) at ../../../vm/vm_mmap.c:489 #8 0xc05dc17e in syscall (frame=0xe163fd38) at ../../../i386/i386/trap.c:1010 #9 0xc05c5a50 in Xint0x80_syscall () at ../../../i386/i386/exception.s:196 #10 0x00000033 in ?? () Previous frame inner to this frame (corrupt stack?) (kgdb) f 3 #3 0xc05d7998 in pmap_remove_all (m=0xc7a8c900) at ../../../i386/i386/pmap.c:2103 2103 panic("pmap_remove_all: illegal for unmanaged page, va: 0x%x", (kgdb) p *m $1 = {pageq = {tqe_next = 0xc7a8c8b8, tqe_prev = 0xc7a8c948}, listq = {tqe_next = 0xc7a8c8b8, tqe_prev = 0xc7a8c950}, left = 0xc7a8c948, right = 0xc7aaa900, object = 0xc5ab5640, pindex = 31736, phys_addr = 727904256, md = { pv_list_count = 0, pv_list = {tqh_first = 0x0, tqh_last = 0x0}}, queue = 0, flags = 152, pc = 0, wire_count = 1, cow = 0, hold_count = 0, oflags = 0, act_count = 0 '\0', busy = 0 '\0', valid = 255 'ÿ', dirty = 255 'ÿ'} (kgdb) list 2098 #if defined(PMAP_DIAGNOSTIC) 2099 /* 2100 * XXX This makes pmap_remove_all() illegal for non-managed pages! 2101 */ 2102 if (m->flags & PG_FICTITIOUS) { 2103 panic("pmap_remove_all: illegal for unmanaged page, va: 0x%x", 2104 VM_PAGE_TO_PHYS(m)); 2105 } 2106 #endif 2107 mtx_assert(&vm_page_queue_mtx, MA_OWNED); (kgdb) up #4 0xc05a013f in vm_object_page_remove (object=0xc5ab5640, start=Unhandled dwarf expression opcode 0x93 ) at ../../../vm/vm_object.c:1831 1831 pmap_remove_all(p); (kgdb) p *object $2 = {mtx = {lock_object = {lo_name = 0xc06117b0 "vm object", lo_type = 0xc0612d90 "standard object", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4063449288, lpo_lineno = 0, lpo_type = 0xc06123e5 "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}}, mtx_lock = 3318182320, mtx_recurse = 0}, object_list = {tqe_next = 0xc5ab55a0, tqe_prev = 0xc5ab57c0}, shadow_head = { lh_first = 0x0}, shadow_list = {le_next = 0x0, le_prev = 0x0}, memq = {tqh_first = 0xc5aa9a20, tqh_last = 0xc5aa97a0}, root = 0xc7a8c900, size = 912385, generation = 3517, ref_count = 20, shadow_count = 0, type = 3 '\003', flags = 256, pg_color = 0, paging_in_progress = 1, resident_page_count = 1172, backing_object = 0x0, backing_object_offset = 0, pager_object_list = {tqe_next = 0xc5ab5500, tqe_prev = 0xc06c8740}, handle = 0xc7995500, un_pager = {vnp = {vnp_size = -4059246911814984032}, devp = {devp_pglist = {tqh_first = 0xc5aa9ea0, tqh_last = 0xc7aaa870}}, swp = {swp_bcount = -978674016}}} (kgdb) p *p $3 = {pageq = {tqe_next = 0xc7a8c8b8, tqe_prev = 0xc7a8c948}, listq = {tqe_next = 0xc7a8c8b8, tqe_prev = 0xc7a8c950}, left = 0xc7a8c948, right = 0xc7aaa900, object = 0xc5ab5640, pindex = 31736, phys_addr = 727904256, md = { pv_list_count = 0, pv_list = {tqh_first = 0x0, tqh_last = 0x0}}, queue = 0, flags = 152, pc = 0, wire_count = 1, cow = 0, hold_count = 0, oflags = 0, act_count = 0 '\0', busy = 0 '\0', valid = 255 'ÿ', dirty = 255 'ÿ'} (kgdb) list 1826 p != NULL && (p->pindex < end || end == 0); 1827 p = next) { 1828 next = TAILQ_NEXT(p, listq); 1829 1830 if (p->wire_count != 0) { 1831 pmap_remove_all(p); 1832 if (!clean_only) 1833 p->valid = 0; 1834 continue; 1835 } (kgdb) up #5 0xc059efc1 in vm_object_sync (object=0xc5ab5640, offset=129990656, size=204800, syncio=1, invalidate=1) at ../../../vm/vm_object.c:1061 1061 vm_object_page_remove(object, (kgdb) p *oject No symbol "oject" in current context. (kgdb) p *o1@bt $4 = {mtx = {lock_object = {lo_name = 0xc06117b0 "vm object", lo_type = 0xc0612d90 "standard object", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4063449288, lpo_lineno = 0, lpo_type = 0xc06123e5 "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = {stqe_next = 0x0}, lod_witness = 0x0}}, mtx_lock = 3318182320, mtx_recurse = 0}, object_list = {tqe_next = 0xc5ab55a0, tqe_prev = 0xc5ab57c0}, shadow_head = { lh_first = 0x0}, shadow_list = {le_next = 0x0, le_prev = 0x0}, memq = {tqh_first = 0xc5aa9a20, tqh_last = 0xc5aa97a0}, root = 0xc7a8c900, size = 912385, generation = 3517, ref_count = 20, shadow_count = 0, type = 3 '\003', flags = 256, pg_color = 0, paging_in_progress = 1, resident_page_count = 1172, backing_object = 0x0, backing_object_offset = 0, pager_object_list = {tqe_next = 0xc5ab5500, tqe_prev = 0xc06c8740}, handle = 0xc7995500, un_pager = {vnp = {vnp_size = -4059246911814984032}, devp = {devp_pglist = {tqh_first = 0xc5aa9ea0, tqh_last = 0xc7aaa870}}, swp = {swp_bcount = -978674016}}} (kgdb) list 1056 } 1057 if ((object->type == OBJT_VNODE || 1058 object->type == OBJT_DEVICE) && invalidate) { 1059 boolean_t purge; 1060 purge = old_msync || (object->type == OBJT_DEVICE); 1061 vm_object_page_remove(object, 1062 OFF_TO_IDX(offset), 1063 OFF_TO_IDX(offset + size + PAGE_MASK), 1064 purge ? FALSE : TRUE); 1065 } (kgdb) up #6 0xc059ad4d in vm_map_sync (map=0xc5b1e2f8, start=699400192, end=699604992, syncio=1, invalidate=1) at ../../../vm/vm_map.c:2224 2224 vm_object_sync(object, offset, size, syncio, invalidate); (kgdb) p *map $5 = {header = {prev = 0xc1449aa0, next = 0xc5a11ae4, left = 0x0, right = 0x0, start = 0, end = 3217031168, avail_ssize = 0, adj_free = 0, max_free = 0, object = {vm_object = 0x0, sub_map = 0x0}, offset = 0, eflags = 0, protection = 0 '\0', max_protection = 0 '\0', inheritance = 0 '\0', wired_count = 0, lastr = 0}, lock = { lock_object = {lo_name = 0xc0612400 "user map", lo_type = 0xc0612400 "user map", lo_flags = 37421056, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 4026941319, lpo_lineno = 0, lpo_type = 0xc05f2e8c "sx", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = {lod_list = { stqe_next = 0x0}, lod_witness = 0x0}}, sx_lock = 0xc06752d0, sx_cnt = -1, sx_shrd_cv = { cv_description = 0xc0612400 "user map", cv_waiters = 0}, sx_shrd_wcnt = 0, sx_excl_cv = { cv_description = 0xc0612400 "user map", cv_waiters = 0}, sx_excl_wcnt = 0, sx_xholder = 0xc5c771b0}, system_mtx = { lock_object = {lo_name = 0xc0611f0d "system map", lo_type = 0xc0611f0d "system map", lo_flags = 21168128, lo_profile_obj = {lpo_acqtime = 0, lpo_waittime = 0, lpo_filename = 0x0, lpo_namehash = 641332203, lpo_lineno = 0, lpo_type = 0xc06123e5 "sleep mutex", lpo_contest_holding = 0, lpo_contest_locking = 0}, lo_witness_data = { lod_list = {stqe_next = 0x0}, lod_witness = 0x0}}, mtx_lock = 4, mtx_recurse = 0}, nentries = 118, size = 52948992, timestamp = 776, needs_wakeup = 0 '\0', system_map = 0 '\0', flags = 0 '\0', root = 0xc7a84bb0, pmap = 0xc5b1e3f0} (kgdb) list 2219 offset = tentry->offset + (offset - tentry->start); 2220 vm_map_unlock_read(smap); 2221 } else { 2222 object = current->object.vm_object; 2223 } 2224 vm_object_sync(object, offset, size, syncio, invalidate); 2225 start += size; 2226 } 2227 2228 vm_map_unlock_read(map); (kgdb) up #7 0xc059cae9 in msync (td=0x0, uap=0x0) at ../../../vm/vm_mmap.c:489 489 rv = vm_map_sync(map, addr, addr + size, (flags & MS_ASYNC) == 0, (kgdb) p *td Cannot access memory at address 0x0 (kgdb) p *uap Cannot access memory at address 0x0 (kgdb) list 484 map = &td->td_proc->p_vmspace->vm_map; 485 486 /* 487 * Clean the pages and interpret the return value. 488 */ 489 rv = vm_map_sync(map, addr, addr + size, (flags & MS_ASYNC) == 0, 490 (flags & MS_INVALIDATE) != 0); 491 switch (rv) { 492 case KERN_SUCCESS: 493 return (0); (kgdb) quit wkoszek@laptop:/usr/src/sys/i386/compile/LAPTOP26032007# exit exit Script done on Mon Mar 26 03:09:17 2007