Can someone look at a kernel crash dump?

[Pierre Abbat]

Here are the backtraces (?):

Unread portion of the kernel message buffer:
panic: assertion "m->wire_count > 0" failed in pmap_unwire_pte at 
/usr/src/sys/platform/pc32/i386/pmap.c:1091
cpuid = 1
Trace beginning at frame 0xd356bab0
panic(ffffffff,1,c067fe44,d356bae4,cc997a60) at panic+0x19e 0xc03839b3 
panic(c067fe44,c0733193,c07332a9,c0732964,443) at panic+0x19e 0xc03839b3 
pmap_unuse_pt(d356bb28,d4789898,28248000,1,c20fadc4) at pmap_unuse_pt+0xc5 
0xc0659b9c 
pmap_remove_all(c08aa370,c065bb9c,ff80a000,c065b504,d356bc50) at 
pmap_remove_all+0x1da 0xc0659de6 
pmap_page_protect(c1157e64,0,330ee000,0,d356bbc0) at pmap_page_protect+0xed 
0xc0659f48 
vm_fault_object(2,2816e000,2,d356bc74,d356bc68) at vm_fault_object+0x97b 
0xc0587955 
vm_fault(d35ddbf0,2816e000,2,c,d35ddbf0) at vm_fault+0x38b 0xc0588783 
trap_pfault(d590e618,0,d356bd40,d356bd20,0) at trap_pfault+0xd2 0xc065d4f3 
trap(d356bd40) at trap+0x402 0xc065d9aa 
calltrap() at calltrap+0xe 0xc062d227 
--- trap 0, eip = 0x7, esp = 0x10203, ebp = 0x280a49ec ---

_get_mycpu () at ./machine/thread.h:79
79	    __asm ("movl %%fs:globaldata,%0" : "=r" (gd) : "m"(__mycpu__dummy));
(kgdb) #0  _get_mycpu () at ./machine/thread.h:79
#1  md_dumpsys (di=0xc0c028e0) at 
/usr/src/sys/platform/pc32/i386/dump_machdep.c:264
#2  0xc0383168 in dumpsys () at /usr/src/sys/kern/kern_shutdown.c:925
#3  0xc038377e in boot (howto=<optimized out>) at 
/usr/src/sys/kern/kern_shutdown.c:387
#4  0xc03839e7 in panic (fmt=0xc067fe44 "assertion \"%s\" failed in %s at %s:
%u") at /usr/src/sys/kern/kern_shutdown.c:831
#5  0xc0659b9c in pmap_unwire_pte (info=<optimized out>, m=<optimized out>, 
pmap=<optimized out>) at /usr/src/sys/platform/pc32/i386/pmap.c:1091
#6  pmap_unuse_pt (pmap=0xd4789898, va=<unavailable>, mpte=0xc2252c6c, 
info=0xd356bb28) at /usr/src/sys/platform/pc32/i386/pmap.c:1131
#7  0xc0659de6 in pmap_remove_all (m=0xc1157e64) at 
/usr/src/sys/platform/pc32/i386/pmap.c:2038
#8  0xc0659f48 in pmap_page_protect (m=0xc1157e64, prot=0 '\000') at 
/usr/src/sys/platform/pc32/i386/pmap.c:3111
#9  0xc0587955 in vm_page_protect (prot=<optimized out>, m=<optimized out>) at 
/usr/src/sys/vm/vm_page.h:535
#10 vm_fault_object (fs=0xd356bc50, first_pindex=<optimized out>, fault_type=2 
'\002') at /usr/src/sys/vm/vm_fault.c:1660
#11 0xc0588783 in vm_fault (map=0xd35ddbf0, vaddr=672587776, 
fault_type=<optimized out>, fault_flags=12) at /usr/src/sys/vm/vm_fault.c:497
#12 0xc065d4f3 in trap_pfault (frame=0xd356bd40, usermode=<optimized out>, 
eva=<optimized out>) at /usr/src/sys/platform/pc32/i386/trap.c:1006
#13 0xc065d9aa in trap (frame=0xd356bd40) at 
/usr/src/sys/platform/pc32/i386/trap.c:596
#14 0xc062d227 in calltrap () at 
/usr/src/sys/platform/pc32/i386/exception.s:787
#15 0x2805367f in ?? ()
Backtrace stopped: previous frame inner to this frame (corrupt stack?)
(kgdb) (kgdb) 
Token           collisions owner
pmap_token               0 not held
dev_token                0 not held
vm_token          11036369 not held
vmspace_token            0 not held
kvm_token                0 not held
proc_token            3733 not held
tty_token           172439 not held
vnode_token              0 not held
vmobj_token         606484 not held
(kgdb) Cputime limit exceeded

panic: assertion "m->wire_count > 0" failed in pmap_unwire_pte at 
/usr/src/sys/platform/pc32/i386/pmap.c:1091
cpuid = 1
Trace beginning at frame 0xd356bab0
panic(ffffffff,1,c067fe44,d356bae4,cc997a60) at panic+0x19e 0xc03839b3 
panic(c067fe44,c0733193,c07332a9,c0732964,443) at panic+0x19e 0xc03839b3 
pmap_unuse_pt(d356bb28,d4789898,28248000,1,c20fadc4) at pmap_unuse_pt+0xc5 
0xc0659b9c 
pmap_remove_all(c08aa370,c065bb9c,ff80a000,c065b504,d356bc50) at 
pmap_remove_all+0x1da 0xc0659de6 
pmap_page_protect(c1157e64,0,330ee000,0,d356bbc0) at pmap_page_protect+0xed 
0xc0659f48 
vm_fault_object(2,2816e000,2,d356bc74,d356bc68) at vm_fault_object+0x97b 
0xc0587955 
vm_fault(d35ddbf0,2816e000,2,c,d35ddbf0) at vm_fault+0x38b 0xc0588783 
trap_pfault(d590e618,0,d356bd40,d356bd20,0) at trap_pfault+0xd2 0xc065d4f3 
trap(d356bd40) at trap+0x402 0xc065d9aa 
calltrap() at calltrap+0xe 0xc062d227 
--- trap 0, eip = 0x7, esp = 0x10203, ebp = 0x280a49ec ---

It's number 11 in my crash directory on leaf.

Pierre
-- 
Don't buy a French car in Holland. It may be a citroen.