5.4 panic: vm_page_dirty: page is free!

Tue May 16 12:48:05 PDT 2006

Hi,

just had the following panic on 5.4-RELEASE-p13. Please tell me, if can
provide more infos to track this down.

bye,
Hilko

Script started on Tue May 16 21:41:08 2006
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
#0  doadump () at pcpu.h:159
159	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) backtrace
#0  doadump () at pcpu.h:159
#1  0xc04d71d1 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:410
#2  0xc04d74cb in panic (fmt=0xc0653301 "_mtx_lock_sleep: recursed on non-recursive mutex %s @ %s:%d\n")
    at /usr/src/sys/kern/kern_shutdown.c:566
#3  0xc04cf196 in _mtx_lock_sleep (m=0xc06f4c60, td=0xc1494600, opts=0, file=0xc066b5cf "/usr/src/sys/i386/i386/pmap.c", 
    line=1657) at /usr/src/sys/kern/kern_mutex.c:448
#4  0xc04ceea1 in _mtx_lock_flags (m=0xc06f4c60, opts=0, file=0xc066b5cf "/usr/src/sys/i386/i386/pmap.c", line=1657)
    at /usr/src/sys/kern/kern_mutex.c:273
#5  0xc0609074 in pmap_remove (pmap=0xc06f4c60, sva=3432853504, eva=3437047808) at /usr/src/sys/i386/i386/pmap.c:1657
#6  0xc05cb594 in vm_map_delete (map=0xc0c3b000, start=3234050048, end=3437047808) at /usr/src/sys/vm/vm_map.c:2290
#7  0xc05cb642 in vm_map_remove (map=0xc0c3b000, start=3432853504, end=3437047808) at /usr/src/sys/vm/vm_map.c:2319
#8  0xc05c8425 in kmem_free (map=0xc0c3b000, addr=0, size=4194304) at /usr/src/sys/vm/vm_kern.c:209
#9  0xc0613334 in vesa_unmap_buffer (vaddr=3432853504, size=4194304) at /usr/src/sys/i386/isa/vesa.c:851
#10 0xc0613766 in vesa_set_mode (adp=0xc06dec20, mode=24) at /usr/src/sys/i386/isa/vesa.c:1038
#11 0xc05f5d89 in set_mode (scp=0xc1000400) at /usr/src/sys/dev/syscons/syscons.c:3418
#12 0xc05f3ba8 in restore_scrn_saver_mode (scp=0xc1000400, changemode=1) at /usr/src/sys/dev/syscons/syscons.c:2025
#13 0xc05f39a8 in scsplash_saver (sc=0xc06f5860, show=0) at /usr/src/sys/dev/syscons/syscons.c:1912
#14 0xc05f3c0d in stop_scrn_saver (sc=0xc06f5860, saver=0xc05f38e0 <scsplash_saver>) at /usr/src/sys/dev/syscons/syscons.c:2043
#15 0xc05f31b8 in sccnupdate (scp=0xc06f22c0) at /usr/src/sys/dev/syscons/syscons.c:1602
#16 0xc05f2e62 in sccnputc (cd=0xc069c820, c=0) at /usr/src/sys/dev/syscons/syscons.c:1465
#17 0xc05094ad in cnputc (c=112) at /usr/src/sys/kern/tty_cons.c:590
#18 0xc04f0911 in putchar (c=112, arg=0xcc9c39bc) at /usr/src/sys/kern/subr_prf.c:341
#19 0xc04f0bd7 in kvprintf (fmt=0xc065400e "anic: %s\n", func=0xc04f08c0 <putchar>, arg=0xcc9c39bc, radix=10, 
    ap=0xcc9c39dc "àÔjÀàÔjÀ") at /usr/src/sys/kern/subr_prf.c:526
#20 0xc04f0803 in printf (fmt=0xc065400d "panic: %s\n") at /usr/src/sys/kern/subr_prf.c:294
#21 0xc04d742f in panic (fmt=0xc0666346 "vm_page_dirty: page is free!") at /usr/src/sys/kern/kern_shutdown.c:535
#22 0xc05d0b59 in vm_page_dirty (m=0x0) at /usr/src/sys/vm/vm_page.c:457
#23 0xc0608f41 in pmap_remove_pte (pmap=0xc06f4c60, ptq=0xc0d3fb18, va=3336994816) at /usr/src/sys/i386/i386/pmap.c:1606
#24 0xc0609118 in pmap_remove (pmap=0xc06f4c60, sva=3336994816, eva=3337060352) at /usr/src/sys/i386/i386/pmap.c:1713
#25 0xc05cb594 in vm_map_delete (map=0xc0c200c0, start=3233939648, end=3337060352) at /usr/src/sys/vm/vm_map.c:2290
#26 0xc05c89f8 in kmem_free_wakeup (map=0xc0c200c0, addr=3336994816, size=0) at /usr/src/sys/vm/vm_kern.c:467
#27 0xc04c0ad8 in do_execve (td=0xc1494600, fname=0x811a6a0 <Address 0x811a6a0 out of bounds>, argv=0x0, envv=0x0, mac_p=0x0)
    at /usr/src/sys/kern/kern_exec.c:722
#28 0xc04c0097 in kern_execve (td=0xc1494600, fname=0x811a6a0 <Address 0x811a6a0 out of bounds>, argv=0x811a6f0, envv=0x80ea600, 
    mac_p=0x0) at /usr/src/sys/kern/kern_exec.c:230
#29 0xc04bfff8 in execve (td=0xc1494600, uap=0x0) at /usr/src/sys/kern/kern_exec.c:176
#30 0xc060d678 in syscall (frame=
---Type <return> to continue, or q <return> to quit---
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 0, tf_esi = 0, tf_ebp = 0, tf_isp = 0, tf_ebx = 0, tf_edx = 0, tf_ecx = 0, tf_eax = 0, tf_trapno = 0, tf_err = 0, tf_eip = 671427040, tf_cs = 31, tf_eflags = 514, tf_esp = -1077941200, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1009
#31 0xc05fcc6f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:201
#32 0x0000002f in ?? ()
#33 0x0000002f in ?? ()
#34 0x0000002f in ?? ()
#35 0x00000000 in ?? ()
#36 0x00000000 in ?? ()
#37 0x00000000 in ?? ()
#38 0x00000000 in ?? ()
#39 0x00000000 in ?? ()
#40 0x00000000 in ?? ()
#41 0x00000000 in ?? ()
#42 0x00000000 in ?? ()
#43 0x00000000 in ?? ()
#44 0x00000000 in ?? ()
#45 0x280529e0 in ?? ()
#46 0x0000001f in ?? ()
#47 0x00000202 in ?? ()
#48 0xbfbfec30 in ?? ()
#49 0x0000002f in ?? ()
#50 0xa1900c89 in ?? ()
#51 0x00419120 in ?? ()
#52 0x01900c8b in ?? ()
#53 0x4191180d in ?? ()
#54 0x046c9000 in ?? ()
#55 0xc14018d4 in ?? ()
#56 0xc1494600 in ?? ()
#57 0xcc9c385c in ?? ()
#58 0xcc9c3844 in ?? ()
#59 0xc0ec1c00 in ?? ()
#60 0xc04e6bcb in sched_switch (td=0x811a650, newtd=0x811a6a0, flags=Cannot access memory at address 0xbfbfea98
) at /usr/src/sys/kern/sched_4bsd.c:881
Previous frame inner to this frame (corrupt stack?)
(kgdb) quit

Script done on Tue May 16 21:41:30 2006