kern/72539: Panic: vm_page_remove(): page not found in hash

Xin LI delphij at frontfree.net
Mon Nov 15 00:53:07 PST 2004


Hi, Matthew,

Would you please have INVARIANTS and INVARIANT_SUPPORT in your
kernel configuration and try again?  I think it would be helpful
for us to figure out what was happening.

In addition, Matt Dillon has suggested[1] that you run his vmpageinfo
program on the dump, please have a try.

[1] http://lists.freebsd.org/pipermail/freebsd-hackers/2004-November/008954.html

Thanks in advance!

On Sun, Nov 14, 2004 at 05:43:52PM +0000, Matthew Seaman wrote:
> On Fri, Nov 12, 2004 at 03:50:08AM +0000, Xin LI wrote:
> 
> > I think this is related on what I am currently working on.  Would you
> > please try the patch found in:
> > 	http://people.freebsd.org/~delphij/patch-RELENG_4-vm_page.c
> 
> Tried that: unfortunately it seems to have had little effect.  That
> perl script can still knock over the system in a few minutes --
> although one time I tested, the script ran to completion, but then I
> ended up with some weird filesystem corruption, and had to reboot and
> fsck manually to clear it.
> 
> Symptoms this time were a little different: X simply froze up, and the
> system eventually rebooted after panicing.
> 
> Copyright (c) 1992-2004 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
> 	The Regents of the University of California. All rights reserved.
> FreeBSD 4.10-STABLE #88: Sun Nov 14 16:39:39 GMT 2004
>     root at happy-idiot-talk.infracaninophile.co.uk:/usr/obj/usr/src/sys/HAPPY-IDIOT-TALK
> Timecounter "i8254"  frequency 1193182 Hz
> Timecounter "TSC"  frequency 1400058433 Hz
> CPU: AMD Athlon(TM) XP1600+ (1400.06-MHz 686-class CPU)
>   Origin = "AuthenticAMD"  Id = 0x662  Stepping = 2
>   Features=0x383f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,
> #0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
> 487		if (dumping++) {
> (kgdb) bt/full
> A syntax error in expression, near `full'.
> (kgdb) bt\full
> #0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
> 	error = 0
> #1  0xc017fc3b in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:316
> 	howto = 256
> #2  0xc0180079 in panic (fmt=0xc0351bac "%s")
>     at /usr/src/sys/kern/kern_shutdown.c:595
> 	fmt = 0xc0351bac "%s"
> 	bootopt = 256
> 	buf = "page fault", '\000' <repeats 245 times>
> #3  0xc02ee11f in trap_fatal (frame=0xd8946e08, eva=15728691)
>     at /usr/src/sys/i386/i386/trap.c:974
> 	frame = (struct trapframe *) 0xd8946e08
> 	code = 16
> 	type = 12
> 	ss = 16
> 	esp = 0
> 	softseg = {ssd_base = 0, ssd_limit = 1048575, ssd_type = 27, 
>   ssd_dpl = 0, ssd_p = 1, ssd_xx = 13, ssd_xx1 = 1, ssd_def32 = 1, 
>   ssd_gran = 1}
> #4  0xc02eddcd in trap_pfault (frame=0xd8946e08, usermode=0, eva=15728691)
>     at /usr/src/sys/i386/i386/trap.c:867
> 	va = 15728640
> 	vm = (struct vmspace *) 0x0
> 	map = 0xd7559cc0
> 	rv = 0
> 	ftype = 1 '\001'
> 	p = (struct proc *) 0xd8788c20
> #5  0xc02ed973 in trap (frame={tf_fs = 16, tf_es = 16, tf_ds = 16, 
>       tf_edi = 134963200, tf_esi = 1, tf_ebp = -661361072, 
>       tf_isp = -661361100, tf_ebx = -661236196, tf_edx = 15728671, 
>       tf_ecx = 6074742, tf_eax = 262139, tf_trapno = 12, tf_err = 0, 
>       tf_eip = -1071181420, tf_cs = 8, tf_eflags = 66050, tf_esp = 0, 
>       tf_ss = -661236196}) at /usr/src/sys/i386/i386/trap.c:466
> 	p = (struct proc *) 0xd8788c20
> 	sticks = 15607082675286076940
> 	i = 0
> 	ucode = 0
> 	type = 12
> 	code = 0
> 	eva = 15728691
> #6  0xc0271194 in vm_page_lookup (object=0xd896561c, pindex=1)
>     at /usr/src/sys/vm/vm_page.c:515
> 	object = 0x0
> 	pindex = 1
> 	m = 0x0
> 	generation = 0
> #7  0xc02ebaa8 in pmap_prefault (pmap=0xd7559d2c, addra=134959104, 
>     entry=0xd75ccf00) at /usr/src/sys/i386/i386/pmap.c:2400
> 	lobject = 0xd896561c
> 	i = 1
> 	starta = 134959104
> 	addr = 134963200
> 	pindex = 1
> 	m = 0x0
> 	mpte = 0x0
> 	object = 0xd896561c
> #8  0xc026971a in vm_fault (map=0xd7559cc0, vaddr=134959104, 
>     fault_type=2 '\002', fault_flags=8) at /usr/src/sys/vm/vm_fault.c:844
> 	fault_type = 2 '\002'
> 	prot = 3 '\003'
> 	result = 0
> 	wired = 0
> 	map_generation = 22
> 	next_object = 0x0
> 	marray = {0x0, 0xd8788c20, 0xd8788c20, 0xd7559cc0, 0x80b5000, 
>   0xc017476f, 0xd8946f28, 0x1, 0xd8788c20, 0x0, 0xd8946f24, 0xd7559cc0, 
>   0xd7559cc0, 0xd75ccf00, 0xd8946f3c, 0xc02ef8c2}
> 	hardfault = 0
> 	faultcount = 0
> 	fs = {m = 0xc11a8e90, object = 0xd896561c, pindex = 0, 
>   first_m = 0xc11a8e90, first_object = 0xd896561c, first_pindex = 0, 
>   map = 0xd7559cc0, entry = 0xd75ccf00, lookup_still_valid = 0, vp = 0x0}
> #9  0xc02edd62 in trap_pfault (frame=0xd8946fa8, usermode=1, eva=134960316)
>     at /usr/src/sys/i386/i386/trap.c:847
> 	va = 134959104
> 	vm = (struct vmspace *) 0x0
> 	map = 0xd7559cc0
> 	rv = 0
> 	ftype = 2 '\002'
> ---Type <return> to continue, or q <return> to quit---
> 	p = (struct proc *) 0xd8788c20
> #10 0xc02ed827 in trap (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, 
>       tf_edi = 49694, tf_esi = 135016448, tf_ebp = -1077938976, 
>       tf_isp = -661360684, tf_ebx = 0, tf_edx = 135016448, tf_ecx = 135016448, 
>       tf_eax = 0, tf_trapno = 12, tf_err = 7, tf_eip = 134550919, tf_cs = 31, 
>       tf_eflags = 66118, tf_esp = -1077938980, tf_ss = 47})
>     at /usr/src/sys/i386/i386/trap.c:377
> 	p = (struct proc *) 0xd8788c20
> 	sticks = 0
> 	i = 0
> 	ucode = 0
> 	type = 12
> 	code = 0
> 	eva = 134960316
> #11 0x8051587 in ?? ()
> No symbol table info available.
> #12 0x8051930 in ?? ()
> No symbol table info available.
> #13 0x804b15c in ?? ()
> No symbol table info available.
> #14 0x804ac55 in ?? ()
> No symbol table info available.
> #15 0x804aa1b in ?? ()
> No symbol table info available.
> #16 0x80525f3 in ?? ()
> No symbol table info available.
> #17 0x804813e in ?? ()
> No symbol table info available.
> (kgdb) quit
> 
> Script done on Sun Nov 14 17:40:59 2004


Cheers,
-- 
Xin LI <delphij frontfree net>	http://www.delphij.net/
See complete headers for GPG key and other information.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-bugs/attachments/20041115/c50ade5b/attachment.bin


More information about the freebsd-bugs mailing list