>Number:         8466
>Category:       kern
>Synopsis:       panic: uvm_page_lookup_freelist: unable to locate physseg
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 21 15:35:01 1999
>Last-Modified:
>Originator:     bill@psych.uw.edu.pl
>Organization:
>Release:        NetBSD-current 1.4K 1999.09.19
>Environment:
1.4K/i386


>Description:
(gdb) target kcore /var/crash/netbsd.13.core
panic: uvm_page_lookup_freelist: unable to locate physseg
#0  0xf0244b9b in vm_rfc1048 ()
(gdb)bt
#0  0xf0244b9b in vm_rfc1048 ()
#1  0x33e8000 in ?? ()
#2  0xf01ecfa3 in cpu_reboot (howto=260, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1211
#3  0xf012e3ac in log (level=-266056805, fmt=0x0)
    at ../../../../kern/subr_prf.c:217
#4  0xf01f27a1 in trap (frame={tf_es = 16, tf_ds = 16, tf_edi = -191122676, 
      tf_esi = -1, tf_ebp = -190816832, tf_ebx = -253409140, 
      tf_edx = -253493124, tf_ecx = 18, tf_eax = 0, tf_trapno = 0, tf_err = 0, 
      tf_eip = -267121168, tf_cs = 8, tf_eflags = 78406, tf_esp = -267102566, 
      tf_ss = -253409140, tf_vm86_es = -190816752, tf_vm86_ds = 0, 
      tf_vm86_fs = -263979008, tf_vm86_gs = -190816788})
    at ../../../../arch/i386/i386/trap.c:309
#5  0xf0100cc5 in calltrap ()
#6  0xf014e6a2 in genfs_fsync (v=0xf4a05e10)
    at ../../../../miscfs/genfs/genfs_vnops.c:88
#7  0xf01cd857 in ffs_sync (mp=0xf043f000, waitfor=2, cred=0xf041cf80, 
    p=0xf0287080) at ../../../../sys/vnode_if.h:449
#8  0xf0147958 in sys_sync (p=0xf0287080, v=0x0, retval=0x0)
    at ../../../../kern/vfs_syscalls.c:535
#9  0xf0146d0a in vfs_shutdown () at ../../../../kern/vfs_subr.c:2088
#10 0xf01ecf7b in cpu_reboot (howto=256, bootstr=0x0)
    at ../../../../arch/i386/i386/machdep.c:1198
#11 0xf012e3ac in log (level=-266071904, fmt=0xf038bf50 "")
    at ../../../../kern/subr_prf.c:217
#12 0xf01e5448 in uvm_page_lookup_freelist (pg=0xf038bf50)
    at ../../../../uvm/uvm_page_i.h:315
#13 0xf01e6413 in uvm_pagefree (pg=0xf038bf50)
    at ../../../../uvm/uvm_page.c:1081
#14 0xf01dcf5b in uvm_anfree (anon=0xf49708b0)
    at ../../../../uvm/uvm_anon.c:218
#15 0xf01e362a in uvm_map_clean (map=0xf48d221c, start=137072640, 
    end=137080832, flags=8) at ../../../../uvm/uvm_map.c:2590
#16 0xf01e4c0a in sys_madvise (p=0xf49f9144, v=0xf4a05f88, retval=0xf4a05f80)
    at ../../../../uvm/uvm_mmap.c:900
#17 0xf01f2d66 in syscall (frame={tf_es = 31, tf_ds = 31, tf_edi = 137072640, 
      tf_esi = 8192, tf_ebp = -272639928, tf_ebx = 1210555152, 
      tf_edx = 1212792832, tf_ecx = 8192, tf_eax = 75, tf_trapno = 3, 
      tf_err = 2, tf_eip = 1210513823, tf_cs = 23, tf_eflags = 12802, 
      tf_esp = -272639992, tf_ss = 31, tf_vm86_es = 0, tf_vm86_ds = 0, 
      tf_vm86_fs = 0, tf_vm86_gs = 0}) at ../../../../arch/i386/i386/trap.c:753
#18 0xf0100d71 in syscall1 ()
can not access 0xefbfd848, invalid translation (invalid PDE)
can not access 0xefbfd848, invalid translation (invalid PDE)
Cannot access memory at address 0xefbfd848.

# dmesg -M netbsd.13.core -N netbsd.13
NetBSD 1.4K (KLINTON) #3: Sun Sep 19 22:00:36 CEST 1999
    bill@klinton.morons.gov:/home/bill/mnt/src/sys/arch/i386/compile/KLINTON
cpu0: family 5 model 2 step 5
cpu0: Intel Pentium (P54C) (586-class)
total memory = 65152 KB
avail memory = 58584 KB
using 840 buffers containing 3360 KB of memory
mainbus0 (root)
pci0 at mainbus0 bus 0: configuration mode 1
pci0: i/o enabled, memory enabled
pchb0 at pci0 dev 0 function 0
pchb0: Intel 82437FX System Controller (TSC) (rev. 0x02)
pcib0 at pci0 dev 7 function 0
pcib0: Intel 82371FB PCI-to-ISA Bridge (PIIX) (rev. 0x02)
pciide0 at pci0 dev 7 function 1: Intel 82371FB IDE controller (PIIX)
pciide0: bus-master DMA support present
pciide0: primary channel wired to compatibility mode
wd0 at pciide0 channel 0 drive 0: <WDC AC22500L>
wd0: drive supports 16-sector pio transfers, lba addressing
wd0: 2441MB, 4960 cyl, 16 head, 63 sec, 512 bytes/sect x 4999680 sectors
wd0: 32-bits data port
wd0: drive supports PIO mode 4, DMA mode 2
pciide0: primary channel interrupting at irq 14
wd0(pciide0:0:0): using PIO mode 4, DMA mode 2 (using DMA data transfers)
pciide0: secondary channel wired to compatibility mode
pciide0: secondary channel ignored (disabled)
vga0 at pci0 dev 9 function 0: ATI Technologies Mach64 CT (rev. 0x09)
wsdisplay0 at vga0: console (80x25, vt100 emulation)
Brooktree Bt848 Video Capture (video multimedia, revision 0x12) at pci0 dev 11 function 0 not configured
ncr0 at pci0 dev 12 function 0: ncr 53c860 fast20 scsi
ncr0: interrupting at irq 11
ncr0: minsync=12, maxsync=137, maxoffs=8, 16 dwords burst, normal dma fifo
ncr0: single-ended, open drain IRQ driver
ncr0: restart (scsi reset).
scsibus0 at ncr0: 8 targets, 8 luns per target
sd0 at scsibus0 targ 0 lun 0: <HP, C1113F, 1.39> SCSI2 7/optical removable
sd0(ncr0:0:0): 5.0 MB/s (200 ns, offset 8)
sd0: drive offline
isa0 at pcib0
ep0 at isa0 port 0x300-0x30f irq 10: 3Com 3C509 Ethernet
ep0: address 00:60:8c:51:f4:79, 8KB byte-wide FIFO, 5:3 Rx:Tx split
ep0: 10base5, 10base2 (default 10base2)
com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
lpt0 at isa0 port 0x378-0x37b irq 7
sb0 at isa0 port 0x220-0x237 irq 5 drq 1 drq2 5: dsp v4.13
audio0 at sb0: full duplex
midi0 at sb0: <SB MIDI UART>
opl0 at sb0: model OPL3
midi1 at opl0: <SB Yamaha OPL3>
pckbc0 at isa0 port 0x60-0x64
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi2 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
isapnp0 at isa0 port 0x279: ISA Plug 'n Play device support
npx0 at isa0 port 0xf0-0xff: using exception 16
fdc0 at isa0 port 0x3f0-0x3f7 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB, 80 cyl, 2 head, 18 sec
isapnp0: no ISA Plug 'n Play devices found
apm0 at mainbus0: Power Management spec V1.2
apm0: A/C state: on
apm0: battery charge state: no battery
biomask 4840 netmask 4c40 ttymask 4cc2
boot device: wd0
root on wd0a dumps on wd0b
root file system type: ffs
IP Filter: initialized.  Default = pass all, Logging = enabled
wsdisplay0: screen 1 added (80x25, vt100 emulation)
wsdisplay0: screen 2 added (80x25, vt100 emulation)
wsdisplay0: screen 4 added (80x25, vt100 emulation)
wsmux1: connecting to wsdisplay0
sd0: disk label corrupted
pmap_page_remove: unmanaged page?
panic: uvm_page_lookup_freelist: unable to locate physseg
syncing disks... fatal privileged instruction fault in supervisor mode
trap type 0 code 0 eip f0140df0 cs 8 eflags 13246 cr2 8513000 cpl 0
panic: trap

>How-To-Repeat:
Hard to tell. X running of course. 
Many netscrape windows on virtual desktops.
Load was low rather.
Doing IPNAT. Probably one union mount.



>Fix:
I'm too lame to provide one.

>Audit-Trail:
>Unformatted: