Hi! I tried to install 6.0-BETA1 under qemu emulator. But the system panic while install process begin extract files into hard drive. Maybe this is a bug of qemu, but maybe not.. -- WBR, Andrey V. Elsukov OK boot -v GDB: debug ports: sio GDB: current port: sio KDB: debugger backends: ddb gdb KDB: current backend: ddb SMAP type=01 base=0000000000000000 len=000000000009fc00 SMAP type=01 base=0000000000100000 len=0000000007f00000 Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.0-BETA1 #0: Fri Jul 22 18:38:13 UTC 2005 root_at_heavennet.ru:/usr/obj/usr/src/sys/GENERIC WARNING: WITNESS option enabled, expect reduced performance. Preloaded elf kernel "/boot/kernel/kernel" at 0xc0eb6000. Preloaded mfs_root "/boot/mfsroot" at 0xc0eb6108. Calibrating clock(s) ... i8254 clock: 1190716 Hz CLK_USE_I8254_CALIBRATION not specified - using default frequency Timecounter "i8254" frequency 1193182 Hz quality 0 Calibrating TSC clock ... TSC clock: 1470119905 Hz CPU: Pentium II/Pentium II Xeon/Celeron (1470.12-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x633 Stepping = 3 Features=0x780a9fd<FPU,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,PGE,CMOV,MMX,FXSR,SSE,SSE2> real memory = 134217728 (128 MB) Physical memory chunk(s): 0x0000000000001000 - 0x000000000009efff, 647168 bytes (158 pages) 0x0000000000100000 - 0x00000000003fffff, 3145728 bytes (768 pages) 0x0000000001028000 - 0x0000000007d87fff, 114688000 bytes (28000 pages) avail memory = 117665792 (112 MB) bios32: Found BIOS32 Service Directory header at 0xc00f9c90 bios32: Entry = 0xf9ca0 (c00f9ca0) Rev = 0 Len = 1 pcibios: PCI BIOS entry at 0xf0000+0x9ce0 Other BIOS signatures found: wlan: <802.11 Link Layer> null: <null device, zero device> random: <entropy source, Software, Yarrow> nfslock: pseudo-device io: <I/O> mem: <memory> npx0: [FAST] npx0: <math processor> on motherboard npx0: INT 16 interface cpu0 on motherboard pci_open(1): mode 1 addr port (0x0cf8) is 0x80000000 pci_open(1a): mode1res=0x80000000 (0x80000000) pci_cfgcheck: device 0 [class=060000] [hdr=00] is there (id=12378086) pcibios: BIOS version 2.10 Found $PIR table, 6 entries at 0xc00f9f40 PCI-Only Interrupts: none Location Bus Device Pin Link IRQs embedded 0 1 A 0x60 3 4 5 6 7 9 10 11 12 14 15 embedded 0 1 B 0x61 3 4 5 6 7 9 10 11 12 14 15 embedded 0 1 C 0x62 3 4 5 6 7 9 10 11 12 14 15 embedded 0 1 D 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 1 0 2 A 0x61 3 4 5 6 7 9 10 11 12 14 15 slot 1 0 2 B 0x62 3 4 5 6 7 9 10 11 12 14 15 slot 1 0 2 C 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 1 0 2 D 0x60 3 4 5 6 7 9 10 11 12 14 15 slot 2 0 3 A 0x62 3 4 5 6 7 9 10 11 12 14 15 slot 2 0 3 B 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 2 0 3 C 0x60 3 4 5 6 7 9 10 11 12 14 15 slot 2 0 3 D 0x61 3 4 5 6 7 9 10 11 12 14 15 slot 3 0 4 A 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 3 0 4 B 0x60 3 4 5 6 7 9 10 11 12 14 15 slot 3 0 4 C 0x61 3 4 5 6 7 9 10 11 12 14 15 slot 3 0 4 D 0x62 3 4 5 6 7 9 10 11 12 14 15 slot 4 0 5 A 0x60 3 4 5 6 7 9 10 11 12 14 15 slot 4 0 5 B 0x61 3 4 5 6 7 9 10 11 12 14 15 slot 4 0 5 C 0x62 3 4 5 6 7 9 10 11 12 14 15 slot 4 0 5 D 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 5 0 6 A 0x61 3 4 5 6 7 9 10 11 12 14 15 slot 5 0 6 B 0x62 3 4 5 6 7 9 10 11 12 14 15 slot 5 0 6 C 0x63 3 4 5 6 7 9 10 11 12 14 15 slot 5 0 6 D 0x60 3 4 5 6 7 9 10 11 12 14 15 pcib0: <Host to PCI bridge> pcibus 0 on motherboard pir0: <PCI Interrupt Routing Table: 6 Entries> on motherboard $PIR: Links after initial probe: Link IRQ Rtd Ref IRQs 0x60 255 N 6 3 4 5 6 7 9 10 11 12 14 15 0x61 255 N 6 3 4 5 6 7 9 10 11 12 14 15 0x62 255 N 6 3 4 5 6 7 9 10 11 12 14 15 0x63 255 N 6 3 4 5 6 7 9 10 11 12 14 15 $PIR: Found matching pin for 0.3.INTA at func 0: 11 $PIR: Links after initial IRQ discovery: Link IRQ Rtd Ref IRQs 0x60 255 N 6 3 4 5 6 7 9 10 11 12 14 15 0x61 255 N 6 3 4 5 6 7 9 10 11 12 14 15 0x62 11 Y 6 3 4 5 6 7 9 10 11 12 14 15 0x63 255 N 6 3 4 5 6 7 9 10 11 12 14 15 $PIR: IRQs used by BIOS: 11 $PIR: Interrupt Weights: [ 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ] [ 0 0 0 0 0 0 0 0 0 0 0 6 0 0 0 0 ] pci0: <PCI bus> on pcib0 pci0: physical bus=0 found-> vendor=0x8086, dev=0x1237, revid=0x02 bus=0, slot=0, func=0 class=06-00-00, hdrtype=0x00, mfdev=0 cmdreg=0x0000, statreg=0x0000, cachelnsz=0 (dwords) lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns) found-> vendor=0x8086, dev=0x7000, revid=0x00 bus=0, slot=1, func=0 class=06-01-00, hdrtype=0x00, mfdev=1 cmdreg=0x0007, statreg=0x0200, cachelnsz=0 (dwords) lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns) found-> vendor=0x8086, dev=0x7010, revid=0x00 bus=0, slot=1, func=1 class=01-01-00, hdrtype=0x00, mfdev=0 cmdreg=0x0001, statreg=0x0000, cachelnsz=0 (dwords) lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns) map[20]: type 4, range 32, base 0000c000, size 4, enabled found-> vendor=0x1013, dev=0x00b8, revid=0x00 bus=0, slot=2, func=0 class=03-00-00, hdrtype=0x00, mfdev=0 cmdreg=0x0003, statreg=0x0000, cachelnsz=0 (dwords) lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns) map[10]: type 3, range 32, base f0000000, size 25, enabled map[14]: type 1, range 32, base f2000000, size 12, enabled found-> vendor=0x10ec, dev=0x8029, revid=0x00 bus=0, slot=3, func=0 class=02-00-00, hdrtype=0x00, mfdev=0 cmdreg=0x0001, statreg=0x0000, cachelnsz=0 (dwords) lattimer=0x00 (0 ns), mingnt=0x00 (0 ns), maxlat=0x00 (0 ns) intpin=a, irq=11 map[10]: type 4, range 32, base 0000c100, size 8, enabled $PIR: 0:3 INTA routed to irq 11 isab0: <PCI-ISA bridge> at device 1.0 on pci0 isa0: <ISA bus> on isab0 atapci0: <Intel PIIX3 WDMA2 controller> port 0xc000-0xc00f at device 1.1 on pci0 atapci0: Reserved 0x10 bytes for rid 0x20 type 4 at 0xc000 atapci0: unable to map interrupt ata2: <ATA channel 0> on atapci0 device_attach: ata2 attach returned 6 pci0: <display, VGA> at device 2.0 (no driver attached) ed0: <NE2000 PCI Ethernet (RealTek 8029)> port 0xc100-0xc1ff irq 11 at device 3.0 on pci0 ed0: Reserved 0x100 bytes for rid 0x10 type 4 at 0xc100 ed0: [GIANT-LOCKED] ed0: bpf attached ed0: Ethernet address: 52:54:00:12:34:56 ed0: if_start running deferred for Giant ed0: type NE2000 (16 bit) ed: ed0 already exists; skipping it pnp_identify: Trying Read_Port at 203 pnp_identify: Trying Read_Port at 243 pnp_identify: Trying Read_Port at 283 pnp_identify: Trying Read_Port at 2c3 pnp_identify: Trying Read_Port at 303 pnp_identify: Trying Read_Port at 343 pnp_identify: Trying Read_Port at 383 pnp_identify: Trying Read_Port at 3c3 PNP Identify complete ex_isa_identify() unknown: status reg test failed ff unknown: status reg test failed ff unknown: status reg test failed ff unknown: status reg test failed ff unknown: status reg test failed ff unknown: status reg test failed ff sc: sc0 already exists; skipping it vga: vga0 already exists; skipping it isa_probe_children: disabling PnP devices isa_probe_children: probing non-PnP devices pmtimer0 on isa0 orm0: <ISA Option ROM> at iomem 0xc0000-0xc7fff on isa0 adv0: not probed (disabled) aha0: not probed (disabled) aic0: not probed (disabled) ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0 ata0: reset tp1 mask=03 ostat0=50 ostat1=00 ata0: stat0=0x50 err=0x01 lsb=0x00 msb=0x00 ata0: stat1=0x00 err=0x01 lsb=0xff msb=0xff ata0: reset tp2 stat0=50 stat1=00 devices=0x1<ATA_MASTER> ata0: [MPSAFE] ata1 at port 0x170-0x177,0x376 irq 15 on isa0 ata1: reset tp1 mask=03 ostat0=40 ostat1=00 ata1: stat0=0x00 err=0x01 lsb=0x14 msb=0xeb ata1: stat1=0x00 err=0x01 lsb=0xff msb=0xff ata1: reset tp2 stat0=00 stat1=00 devices=0x4<ATAPI_MASTER> ata1: [MPSAFE] atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0 atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0 atkbd: the current kbd controller command byte 0061 atkbd: keyboard ID 0x83ab (2) kbdc: RESET_KBD return code:00fa kbdc: RESET_KBD status:00aa kbd0 at atkbd0 kbd0: atkbd0, AT 101/102 (2), config:0x1, flags:0x1d0000 atkbd0: [GIANT-LOCKED] psm0: current command byte:0061 kbdc: TEST_AUX_PORT status:0000 kbdc: RESET_AUX return code:00fa kbdc: RESET_AUX status:00aa kbdc: RESET_AUX ID:0000 kbdc: RESET_AUX return code:00fa kbdc: RESET_AUX status:00aa kbdc: RESET_AUX ID:0000 psm: status 00 02 64 psm: status 00 00 64 psm: status 00 03 64 psm: status 00 03 64 psm: data 08 00 00 psm: status 00 02 64 psm0: <PS/2 Mouse> irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model IntelliMouse Explorer, device ID 4-00, 5 buttons psm0: config:00000000, flags:00000008, packet size:4 psm0: syncmask:08, syncbits:00 bt0: not probed (disabled) cs0: not probed (disabled) fdc0 failed to probe at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0 fe0: not probed (disabled) ie0: not probed (disabled) lnc0: not probed (disabled) ppc0: parallel port found at 0x378 ppc0: using extended I/O port range ppc0: EPP SPP ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0 ppc0: Generic chipset (EPP/NIBBLE) in COMPATIBLE mode ppbus0: <Parallel port bus> on ppc0 plip0: <PLIP network interface> on ppbus0 plip0: bpf attached lpt0: <Printer> on ppbus0 lpt0: Interrupt-driven port ppi0: <Parallel I/O> on ppbus0 sc0: <System console> at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x100> sc0: fb0, kbd0, terminal emulator: sc (syscons terminal) sio0: irq maps: 0x1 0x11 0x11 0x11 sio0 at port 0x3f8-0x3ff irq 4 flags 0x90 on isa0 sio0: type 16450, console sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled sio1: irq maps: 0x1 0x1 0x1 0x1 sio1: probe failed test(s): 0 1 2 4 6 7 9 sio1 failed to probe at port 0x2f8-0x2ff irq 3 on isa0 sio2: not probed (disabled) sio3: not probed (disabled) sn0: not probed (disabled) vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 vt0: not probed (disabled) isa_probe_children: probing PnP devices Device configuration finished. procfs registered Timecounter "TSC" frequency 1470119905 Hz quality 800 Timecounters tick every 1.000 msec lo0: bpf attached ata0-master: pio=PIO2 wdma=BIOSDMA udma=UDMA66 cable=80 wire md0: Preloaded image </boot/mfsroot> 4423680 bytes at 0xc0a7c1a0 ad0: 800MB <QEMU HARDDISK 0.7.0> at ata0-master PIO2 ad0: 1638400 sectors [1625C/16H/63S] 16 sectors/interrupt 1 depth queue ad0: Adaptec check1 failed GEOM: new disk ad0 ad0: LSI (v3) check1 failed ad0: LSI (v2) check1 failed ad0: FreeBSD check1 failed ata0-master: pio=PIO3 wdma=WDMA1 udma=BIOSDMA cable=40 wire acd0: <QEMU CD-ROM/0.7.0> CDROM drive at ata1 as master acd0: read 689KB/s (689KB/s), 512KB buffer, PIO3 acd0: Reads: acd0: Writes: acd0: Mechanism: ejectable tray, unlocked acd0: Medium: no/blank disc ATA PseudoRAID loaded Trying to mount root from ufs:/dev/md0 start_init: trying /sbin/init start_init: trying /sbin/oinit start_init: trying /sbin/init.bak start_init: trying /rescue/init start_init: trying /stand/sysinstall /stand/sysinstall running as init on serial console Slab at 0xc182ef70, freei 28 = 0. panic: Duplicate free of item 0xc182ee70 from zone 0xc144adc0(g_bio) cpuid = 0 KDB: enter: panic [thread pid 3 tid 100021 ] Stopped at kdb_enter+0x2b: nop db> tr Tracing pid 3 tid 100021 td 0xc16e2300 kdb_enter(c0854cc4) at kdb_enter+0x2b panic(c086f6a3,c182ee70,c144adc0,c084f7a8,c086f687) at panic+0x127 uma_dbg_free(c144adc0,0,c182ee70) at uma_dbg_free+0x110 uma_zfree_arg(c144adc0,c182ee70,0) at uma_zfree_arg+0x66 g_destroy_bio(c182ee70) at g_destroy_bio+0x13 g_vfs_done(c182ee70) at g_vfs_done+0x5a biodone(c182ee70,c7f89cc4,0,c084f76b,1e4) at biodone+0x57 g_io_schedule_up(c16e2300) at g_io_schedule_up+0xb5 g_up_procbody(0,c7f89d38,0,c05feb04,0) at g_up_procbody+0x5a fork_exit(c05feb04,0,c7f89d38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip = 0, esp = 0xc7f89d6c, ebp = 0 --- db> (gdb) bt #0 kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at /usr/src/sys/kern/subr_kdb.c:270 #1 0xc0631c5b in panic (fmt=0xc086f6a3 "Duplicate free of item %p from zone %p(%s)\n") at /usr/src/sys/kern/kern_shutdown.c:537 #2 0xc0780630 in uma_dbg_free (zone=0xc144adc0, slab=0xc182ef70, item=0xc182ee70) at /usr/src/sys/vm/uma_dbg.c:303 #3 0xc077f416 in uma_zfree_arg (zone=0xc144adc0, item=0xc182ee70, udata=0x0) at /usr/src/sys/vm/uma_core.c:2257 #4 0xc05fe01b in g_destroy_bio (bp=0xc182ee70) at uma.h:304 #5 0xc0600eda in g_vfs_done (bip=0xc182ee70) at /usr/src/sys/geom/geom_vfs.c:84 #6 0xc0678cd7 in biodone (bp=0xc182ee70) at /usr/src/sys/kern/vfs_bio.c:2892 #7 0xc05fe899 in g_io_schedule_up (tp=0xc16e2300) at /usr/src/sys/geom/geom_io.c:489 #8 0xc05feb5e in g_up_procbody () at /usr/src/sys/geom/geom_kern.c:95 #9 0xc061eba0 in fork_exit (callout=0xc05feb04 <g_up_procbody>, arg=0x0, frame=0xc7f89d38) at /usr/src/sys/kern/kern_fork.c:789 #10 0xc07da21c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:206 (gdb) f 2 #2 0xc0780630 in uma_dbg_free (zone=0xc144adc0, slab=0xc182ef70, item=0xc182ee70) at /usr/src/sys/vm/uma_dbg.c:303 303 } (gdb) i lo keg = 0xc1444500 slabref = 0x12 freei = 28 (gdb) p *keg $2 = { uk_link = { le_next = 0xc1444460, le_prev = 0xc14445a0 }, uk_lock = { mtx_object = { lo_class = 0xc08b95e4, lo_name = 0xc084f7a8 "g_bio", lo_type = 0xc086f0bb "UMA zone", lo_flags = 4390912, lo_list = { tqe_next = 0xc091b9a0, tqe_prev = 0xc091ba78 }, lo_witness = 0xc092eb30 }, mtx_lock = 3245220608, mtx_recurse = 0 }, uk_hash = { uh_slab_hash = 0x0, uh_hashsize = 0, uh_hashmask = 0 }, uk_zones = { lh_first = 0xc144adc0 }, uk_part_slab = { lh_first = 0xc182ff70 }, uk_free_slab = { lh_first = 0x0 }, uk_full_slab = { lh_first = 0xc182ef70 }, uk_recurse = 0, uk_align = 0, uk_pages = 2, uk_free = 28, uk_size = 132, uk_rsize = 132, uk_maxpages = 0, uk_init = 0, uk_fini = 0, uk_allocf = 0xc077de7c <page_alloc>, uk_freef = 0xc077dfe8 <page_free>, uk_obj = 0x0, uk_kva = 0, uk_slabzone = 0x0, uk_pgoff = 3952, uk_ppera = 1, uk_ipers = 29, uk_flags = 0 } (gdb) f 3 #3 0xc077f416 in uma_zfree_arg (zone=0xc144adc0, item=0xc182ee70, udata=0x0) at /usr/src/sys/vm/uma_core.c:2257 2257 if (bucket) { (gdb) i lo keg = 0xc1444500 cache = 0xc3c87a48 bucket = 0xc182ee70 bflags = 18 cpu = 18 (gdb) p *keg $3 = {uk_link = {le_next = 0xc1444460, le_prev = 0xc14445a0}, uk_lock = {mtx_object = { lo_class = 0xc08b95e4, lo_name = 0xc084f7a8 "g_bio", lo_type = 0xc086f0bb "UMA zone", lo_flags = 4390912, lo_list = {tqe_next = 0xc091b9a0, tqe_prev = 0xc091ba78}, lo_witness = 0xc092eb30}, mtx_lock = 3245220608, mtx_recurse = 0}, uk_hash = { uh_slab_hash = 0x0, uh_hashsize = 0, uh_hashmask = 0}, uk_zones = {lh_first = 0xc144adc0}, uk_part_slab = {lh_first = 0xc182ff70}, uk_free_slab = {lh_first = 0x0}, uk_full_slab = { lh_first = 0xc182ef70}, uk_recurse = 0, uk_align = 0, uk_pages = 2, uk_free = 28, uk_size = 132, uk_rsize = 132, uk_maxpages = 0, uk_init = 0, uk_fini = 0, uk_allocf = 0xc077de7c <page_alloc>, uk_freef = 0xc077dfe8 <page_free>, uk_obj = 0x0, uk_kva = 0, uk_slabzone = 0x0, uk_pgoff = 3952, uk_ppera = 1, uk_ipers = 29, uk_flags = 0} (gdb) p *cache $5 = {uc_freebucket = 0x0, uc_allocbucket = 0x10000, uc_allocs = 14351934073453150208} (gdb) p *bucket $6 = {ub_link = {le_next = 0x201, le_prev = 0x0}, ub_cnt = 0, ub_entries = 0, ub_bucket = 0xc182ee7c} (gdb) f 4 #4 0xc05fe01b in g_destroy_bio (bp=0xc182ee70) at uma.h:304 304 uma_zfree_arg(zone, item, NULL); (gdb) f 5 #5 0xc0600eda in g_vfs_done (bip=0xc182ee70) at /usr/src/sys/geom/geom_vfs.c:84 84 /usr/src/sys/geom/geom_vfs.c: No such file or directory. in /usr/src/sys/geom/geom_vfs.c (gdb) i lo bp = (struct buf *) 0xc3c87a48 (gdb) p *bp $8 = {b_bufobj = 0x0, b_bcount = 65536, b_caller1 = 0x0, b_data = 0xc72c5000 <Address 0xc72c5000 out of bounds>, b_error = 0, b_iocmd = 1 '\001', b_ioflags = 2 '\002', b_iooffset = 209569792, b_resid = 0, b_iodone = 0, b_blkno = 409316, b_offset = 4096, b_bobufs = {tqe_next = 0x0, tqe_prev = 0x0}, b_left = 0x0, b_right = 0x0, b_vflags = 0, b_freelist = {tqe_next = 0xc3c87900, tqe_prev = 0xc097a38c}, b_qindex = 0, b_flags = 1610613252, b_xflags = 0 '\0', b_lock = {lk_interlock = 0xc091dbf8, lk_flags = 0, lk_sharecount = 0, lk_waitcount = 0, lk_exclusivecount = 0, lk_prio = 80, lk_wmesg = 0xc085c1f3 "bufwait", lk_timo = 0, lk_lockholder = 0xffffffff, lk_newlock = 0x0}, b_bufsize = 65536, b_runningbufspace = 0, b_kvabase = 0xc72c5000 <Address 0xc72c5000 out of bounds>, b_kvasize = 65536, b_lblkno = 2, b_vp = 0x0, b_dirtyoff = 0, b_dirtyend = 131072, b_rcred = 0x0, b_wcred = 0x0, b_saveaddr = 0xc72c5000, b_pager = {pg_reqpage = 0}, b_cluster = {cluster_head = { tqh_first = 0xc3cbf0e8, tqh_last = 0xc3cc1958}, cluster_entry = {tqe_next = 0xc3cbf0e8, tqe_prev = 0xc3cc1958}}, b_pages = {0xc1631a28, 0xc1636b70, 0xc1637db8, 0xc1631b00, 0xc162ca48, 0xc169ae90, 0xc163a2d8, 0xc162e620, 0xc169c168, 0xc16391b0, 0xc16301f8, 0xc1646140, 0xc1639b88, 0xc1630bd0, 0xc1630318, 0xc1620760, 0xc1642318, 0xc162b260, 0xc162a0a8, 0xc162dff0, 0xc1635e38, 0xc163f780, 0xc16409c8, 0xc1640110, 0xc163e658, 0xc163efa0, 0xc16401e8, 0xc1640b30, 0xc163f978, 0xc162e2c0, 0xc162f508, 0xc1635850}, b_npages = 16, b_dep = {lh_first = 0x0}} (gdb) f 7 #7 0xc05fe899 in g_io_schedule_up (tp=0xc16e2300) at /usr/src/sys/geom/geom_io.c:489 489 "%ld len %ld", bp, bp->bio_to->name, (gdb) i lo bp = (struct bio *) 0xc182ee70 mymutex = {mtx_object = {lo_class = 0xc08b95e4, lo_name = 0xc084fa06 "g_xup", lo_type = 0xc084fa06 "g_xup", lo_flags = 196608, lo_list = {tqe_next = 0xc7f8ccc4, tqe_prev = 0xc180531c}, lo_witness = 0xc092d910}, mtx_lock = 3245220608, mtx_recurse = 0} (gdb) p *bp $11 = {bio_cmd = 1 '\001', bio_flags = 2 '\002', bio_cflags = 0 '\0', bio_pflags = 0 '\0', bio_dev = 0x0, bio_disk = 0x0, bio_offset = 209569792, bio_bcount = 65536, bio_data = 0xc72c5000 <Address 0xc72c5000 out of bounds>, bio_error = 0, bio_resid = 0, bio_done = 0xc0600e80 <g_vfs_done>, bio_driver1 = 0x0, bio_driver2 = 0x0, bio_caller1 = 0x0, bio_caller2 = 0xc3c87a48, bio_queue = {tqe_next = 0x0, tqe_prev = 0xc091ba20}, bio_attribute = 0x0, bio_from = 0xc17ee4c0, bio_to = 0xc1831080, bio_length = 65536, bio_completed = 65536, bio_children = 2, bio_inbed = 2, bio_parent = 0x0, bio_t0 = {sec = 153, frac = 12239613778584672861}, bio_task = 0, bio_task_arg = 0x0, bio_pblkno = 0} (gdb) f 8 #8 0xc05feb5e in g_up_procbody () at /usr/src/sys/geom/geom_kern.c:95 95 (gdb) i lo p = (struct proc *) 0x12 tp = (struct thread *) 0xc16e2300 (gdb) p *tp $12 = {td_proc = 0xc170a000, td_ksegrp = 0xc16e3720, td_plist = {tqe_next = 0x0, tqe_prev = 0xc170a010}, td_kglist = {tqe_next = 0x0, tqe_prev = 0xc16e372c}, td_slpq = { tqe_next = 0x0, tqe_prev = 0xc16d92a0}, td_lockq = {tqe_next = 0x0, tqe_prev = 0xc7f8cbc8}, td_runq = {tqe_next = 0x0, tqe_prev = 0x0}, td_selq = {tqh_first = 0x0, tqh_last = 0x0}, td_sleepqueue = 0xc16d92a0, td_turnstile = 0xc16d7a40, td_umtxq = 0xc16d7a00, td_tid = 100021, td_flags = 16777216, td_inhibitors = 0, td_pflags = 0, td_dupfd = 0, td_wchan = 0x0, td_wmesg = 0x0, td_lastcpu = 0 '\0', td_oncpu = 0 '\0', td_owepreempt = 0 '\0', td_locks = 0, td_blocked = 0x0, td_ithd = 0x0, td_lockname = 0x0, td_contested = {lh_first = 0x0}, td_sleeplocks = 0xc096b818, td_intr_nesting_level = 0, td_pinned = 0, td_mailbox = 0x0, td_ucred = 0xc16d5080, td_standin = 0x0, td_upcall = 0x0, td_sticks = 22, td_uuticks = 0, td_usticks = 0, td_intrval = 0, td_oldsigmask = {__bits = {0, 0, 0, 0}}, td_sigmask = {__bits = { 0, 0, 0, 0}}, td_siglist = {__bits = {0, 0, 0, 0}}, td_generation = 514, td_sigstk = { ss_sp = 0x0, ss_size = 0, ss_flags = 0}, td_kflags = 0, td_xsig = 0, td_profil_addr = 0, td_profil_ticks = 0, td_base_pri = 76 'L', td_priority = 76 'L', td_pcb = 0xc7f89d90, td_state = TDS_RUNNING, td_retval = {0, 0}, td_slpcallout = {c_links = {sle = {sle_next = 0x0}, tqe = {tqe_next = 0x0, tqe_prev = 0xc3c6b374}}, c_time = 16017, c_arg = 0xc16e2300, c_func = 0xc064f6bc <sleepq_timeout>, c_mtx = 0x0, c_flags = 16}, td_frame = 0xc7f89d38, td_kstack_obj = 0xc14628c4, td_kstack = 3354951680, td_kstack_pages = 2, td_altkstack_obj = 0x0, td_altkstack = 0, td_altkstack_pages = 0, td_critnest = 1, td_md = {md_spinlock_count = 0, md_saved_flags = 524358}, td_sched = 0xc16e2454} (gdb) bt #0 0xc0649863 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60 #1 0xc0631c5b in panic (fmt=0xc086f8c2 "vm_fault: fault on nofault entry, addr: %lx") at /usr/src/sys/kern/kern_shutdown.c:537 #2 0xc0781828 in vm_fault (map=0xc1461000, vaddr=3341631488, fault_type=2 '\002', fault_flags=0) at /usr/src/sys/vm/vm_fault.c:277 #3 0xc07ec90f in trap_pfault (frame=0xc856fc44, usermode=0, eva=3341633536) at /usr/src/sys/i386/i386/trap.c:740 #4 0xc07ec5a9 in trap (frame= {tf_fs = 8, tf_es = 40, tf_ds = 40, tf_edi = -953333760, tf_esi = -1049700864, tf_ebp = -933823324, tf_isp = -933823376, tf_ebx = 368, tf_edx = 368, tf_ecx = 1024, tf_eax = -953333760, tf_trapno = 12, tf_err = 2, tf_eip = -1068684600, tf_cs = 32, tf_eflags = 524870, tf_esp = -1049700632, tf_ss = -933823328}) at /usr/src/sys/i386/i386/trap.c:441 #5 0xc07da1ba in calltrap () at /usr/src/sys/i386/i386/exception.s:137 #6 0x00000008 in ?? () #7 0x00000028 in ?? () #8 0x00000028 in ?? () #9 0xc72d4800 in ?? () #10 0xc16ed600 in ?? () #11 0xc856fca4 in ?? () #12 0xc856fc70 in ?? () #13 0x00000170 in ?? () #14 0x00000170 in ?? () #15 0x00000400 in ?? () #16 0xc72d4800 in ?? () #17 0x0000000c in ?? () #18 0x00000002 in ?? () #19 0xc04d2ac8 in ata_pio_read (request=0xc1829190, length=2048) at cpufunc.h:229 #20 0xc04d1768 in ata_end_transaction (request=0xc1829190) at /usr/src/sys/dev/ata/ata-lowlevel.c:393 #21 0xc04c1ac7 in ata_interrupt (data=0xc16ed600) at /usr/src/sys/dev/ata/ata-all.c:323 #22 0xc061f76c in ithread_loop (arg=0xc16f9800) at /usr/src/sys/kern/kern_intr.c:545 #23 0xc061eba0 in fork_exit (callout=0xc061f650 <ithread_loop>, arg=0xc16f9800, frame=0xc856fd38) at /usr/src/sys/kern/kern_fork.c:789 #24 0xc07da21c in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:206 (gdb)Received on Mon Jul 25 2005 - 02:22:58 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:39 UTC