PANIC: bad pte

Hi,

i got a "bad pte" panic today. Happened when trying to join an empty IRC
channel with xchat.
After core dump and reboot, fsck got a signal 4 (no core available for
that). I fixed the system with a FreeSBIE cd (freesbie fsck to check /,
then mount / ro to get fstab, and check remaining filesystems with a
working copy of fsck in /usr/obj)

Backtrace follows. I hope someone can see anything from that. I have a
core dump available.

FreeBSD klamath.ankon.de.eu.org 6.0-CURRENT FreeBSD 6.0-CURRENT #11: Wed
Aug 18 13:44:19 CEST 2004    
root_at_klamath.ankon.de.eu.org:/usr/obj/usr/src/sys/KLAMATH  i386
(sources from ~3hours earlier IIRC)

Thank you.

Best Regards,
Andreas


---8<---
panic: bad pte
Uptime: 2d16h19m30s
Dumping 511 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 256 272 288 304
320 336
3                                                                                       
52 368 384 400 416 432 448 464 480 496
---
#0  doadump () at pcpu.h:159
159     pcpu.h: No such file or directory.
        in pcpu.h
doadump () at pcpu.h:159
159     in pcpu.h
(kgdb) where
#0  doadump () at pcpu.h:159
#1  0xc04f6641 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:396
#2  0xc04f68fd in panic (fmt=0xc06c2a29 "bad pte")
    at /usr/src/sys/kern/kern_shutdown.c:558
#3  0xc066ffd5 in pmap_remove_pages (pmap=0xc3101ed0, sva=0,
eva=3217031168)
    at /usr/src/sys/i386/i386/pmap.c:2580
#4  0xc04ddef9 in exit1 (td=0xc21f8b00, rv=256) at vm_map.h:252
#5  0xc04dd8f4 in sys_exit (td=0xc21f8b00, uap=0x0)
    at /usr/src/sys/kern/kern_exit.c:94
#6  0xc0672e77 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077942324, tf_esi
= 0,
tf_                                                                                       
ebp = -1077942776, tf_isp = -624206476, tf_ebx = 1, tf_edx = 2057,
tf_ecx = 2,
t                                                                                       
f_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip = 135243691, tf_cs = 31,
tf_eflags                                                                                       
 = 658, tf_esp = -1077942804, tf_ss = 47})
    at /usr/src/sys/i386/i386/trap.c:1004
#7  0xc0665d7f in Xint0x80_syscall () at
/usr/src/sys/i386/i386/exception.s:201
#8  0x0000002f in ?? ()
#9  0x0000002f in ?? ()
#10 0x0000002f in ?? ()
#11 0xbfbfe7cc in ?? ()
#12 0x00000000 in ?? ()
#13 0xbfbfe608 in ?? ()
#14 0xdacb5d74 in ?? ()
---Type <return> to continue, or q <return> to quit---  
#15 0x00000001 in ?? ()
#16 0x00000809 in ?? ()
#17 0x00000002 in ?? ()
#18 0x00000001 in ?? ()
#19 0x0000000c in ?? ()
#20 0x00000002 in ?? ()
#21 0x080fa7ab in ?? ()
#22 0x0000001f in ?? ()
#23 0x00000292 in ?? ()
#24 0xbfbfe5ec in ?? ()
#25 0x0000002f in ?? ()
#26 0x00000000 in ?? ()
#27 0x00000000 in ?? ()
#28 0x00000000 in ?? ()
#29 0x00000000 in ?? ()
#30 0x140d4000 in ?? ()
#31 0xc1d809a0 in ?? ()
#32 0xc1e4cc80 in ?? ()
#33 0xdacb5cb0 in ?? ()
#34 0xdacb5c98 in ?? ()
#35 0xc21f8b00 in ?? ()
#36 0xc05068fb in sched_switch (td=0x1, newtd=0xbfbfe7cc)
    at /usr/src/sys/kern/sched_ule.c:1207
Previous frame inner to this frame (corrupt stack?)
(kgdb) bt full
#0  doadump () at pcpu.h:159
No locals.
#1  0xc04f6641 in boot (howto=260) at
/usr/src/sys/kern/kern_shutdown.c:396
        first_buf_printf = 1
#2  0xc04f68fd in panic (fmt=0xc06c2a29 "bad pte")
    at /usr/src/sys/kern/kern_shutdown.c:558
        td = (struct thread *) 0xc21f8b00
        bootopt = 260
        newpanic = 0
        ap = 0xc21f8b00 ""
        buf = "bad pte", '\0' <repeats 248 times>
#3  0xc066ffd5 in pmap_remove_pages (pmap=0xc3101ed0, sva=0,
eva=3217031168)
    at /usr/src/sys/i386/i386/pmap.c:2580
        pte = (pt_entry_t *) 0xbfc200b0
        tpte = 0
        m = 0xc1c026b8
        pv = 0xd2bcbab0
        npv = 0xbfc200b0
#4  0xc04ddef9 in exit1 (td=0xc21f8b00, rv=256) at vm_map.h:252
        new_switchtime = {sec = 1258832036, frac = 3260380928}
        p = (struct proc *) 0xc2557700
        nq = (struct proc *) 0xc04f79b2
        q = (struct proc *) 0xc3101e10
---Type <return> to continue, or q <return> to quit---
        tp = (struct tty *) 0xc1fcb000
        ttyvp = (struct vnode *) 0xc1fcb000
        vm = (struct vmspace *) 0xc3101e10
        vtmp = (struct vnode *) 0xc3101e10
        tracevp = (struct vnode *) 0xc3101e10
        tracecred = (struct ucred *) 0xc1fcb000
        plim = (struct plimit *) 0xc3101e10
        refcnt = 0
#5  0xc04dd8f4 in sys_exit (td=0xc21f8b00, uap=0x0)
    at /usr/src/sys/kern/kern_exit.c:94
No locals.
#6  0xc0672e77 in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = -1077942324, tf_esi
= 0, tf_ebp = -1077942776, tf_isp = -624206476, tf_ebx = 1, tf_edx =
2057, tf_ecx = 2, tf_eax = 1, tf_trapno = 12, tf_err = 2, tf_eip =
135243691, tf_cs = 31, tf_eflags = 658, tf_esp = -1077942804, tf_ss =
47})
    at /usr/src/sys/i386/i386/trap.c:1004
        params = 0xbfbfe5f0---Can't read userspace from dump, or kernel
process---

(kgdb) frame 3
#3  0xc066ffd5 in pmap_remove_pages (pmap=0xc3101ed0, sva=0,
eva=3217031168)
    at /usr/src/sys/i386/i386/pmap.c:2580
2580                            panic("bad pte");
(kgdb) p *pte
---Can't read userspace from dump, or kernel process---

(kgdb) info locals
pte = (pt_entry_t *) 0xbfc200b0
tpte = 0
m = 0xc1c026b8
pv = 0xd2bcbab0
npv = 0xbfc200b0
(kgdb) p pte
$1 = (pt_entry_t *) 0xbfc200b0
(kgdb) p *pte
---Can't read userspace from dump, or kernel process---

(kgdb)