Another FS panic

Hi,

Just for the record - another panic in VFS:
# mount_smbfs //user_at_host /mnt
# ls /mnt
gives:

Fatal trap 12: Page fault in kernel mode

Script started on Mon Apr  4 01:18:24 2005
# kgdb kernel.debug /usr/crash/vmcore.1
[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
#0  doadump () at pcpu.h:164
164		__asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:164
#1  0xc04a05b3 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:398
#2  0xc04a08d1 in panic (fmt=0xc0600100 "from debugger") at /usr/src/sys/kern/kern_shutdown.c:554
#3  0xc042a7a7 in db_panic (addr=-1044027892, have_addr=0, count=-1, modif=0xe5745774 "")
    at /usr/src/sys/ddb/db_command.c:435
#4  0xc042a720 in db_command (last_cmdp=0xc06534a4, cmd_table=0x0, aux_cmd_tablep=0xc0627a58, 
    aux_cmd_tablep_end=0xc0627a5c) at /usr/src/sys/ddb/db_command.c:349
#5  0xc042a811 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
#6  0xc042c6a1 in db_trap (type=12, code=0) at /usr/src/sys/ddb/db_main.c:221
#7  0xc04bc204 in kdb_trap (type=0, code=0, tf=0xe5745928) at /usr/src/sys/kern/subr_kdb.c:421
#8  0xc05ddc08 in trap_fatal (frame=0xe5745928, eva=0) at /usr/src/sys/i386/i386/trap.c:801
#9  0xc05dd943 in trap_pfault (frame=0xe5745928, usermode=0, eva=590) at /usr/src/sys/i386/i386/trap.c:724
#10 0xc05dd523 in trap (frame=
      {tf_fs = -445382632, tf_es = -445382640, tf_ds = -1068564464, tf_edi = 0, tf_esi = -445359152, tf_ebp = -445359472, tf_isp = -445359788, tf_ebx = 0, tf_edx = -1044845328, tf_ecx = 582, tf_eax = -445359564, tf_trapno = 12, tf_err = 0, tf_eip = -1044027892, tf_cs = 8, tf_eflags = 66118, tf_esp = -1042899452, tf_ss = -445359564})
    at /usr/src/sys/i386/i386/trap.c:414
#11 0xc05cf6fa in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#12 0xe5740018 in ?? ()
#13 0xe5740010 in ?? ()
#14 0xc04f0010 in bdirty (bp=0x0) at /usr/src/sys/kern/vfs_bio.c:1015
#15 0xc05f5c9a in VOP_LOOKUP_APV (vop=0x0, a=0xe5745ba8) at vnode_if.c:100
#16 0xc04fabf1 in lookup (ndp=0xe5745ba8) at vnode_if.h:56
#17 0xc04fa4b1 in namei (ndp=0xe5745ba8) at /usr/src/sys/kern/vfs_lookup.c:193
#18 0xc0508219 in kern_lstat (td=0xc1b8ecf0, path=0x0, pathseg=UIO_USERSPACE, sbp=0x0)
    at /usr/src/sys/kern/vfs_syscalls.c:2106
#19 0xc05081a4 in lstat (td=0x0, uap=0xe5745d14) at /usr/src/sys/kern/vfs_syscalls.c:2090
#20 0xc05ddf1e in syscall (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 134554696, tf_esi = 134554624, tf_ebp = -1077942792, tf_isp = -445358732, tf_ebx = 672735556, tf_edx = 134554624, tf_ecx = 134564864, tf_eax = 190, tf_trapno = 12, tf_err = 2, tf_eip = 672181535, tf_cs = 31, tf_eflags = 582, tf_esp = -1077942948, tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:951
#21 0xc05cf74f in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:200
#22 0x0000002f in ?? ()
#23 0x0000002f in ?? ()
#24 0x0000002f in ?? ()
#25 0x08052448 in ?? ()
#26 0x08052400 in ?? ()
#27 0xbfbfe5f8 in ?? ()
#28 0xe5745d74 in ?? ()
#29 0x28192144 in ?? ()
#30 0x08052400 in ?? ()
#31 0x08054c00 in ?? ()
#32 0x000000be in ?? ()
#33 0x0000000c in ?? ()
#34 0x00000002 in ?? ()
#35 0x2810ad1f in ?? ()
#36 0x0000001f in ?? ()
#37 0x00000246 in ?? ()
#38 0xbfbfe55c in ?? ()
#39 0x0000002f in ?? ()
#40 0x00000000 in ?? ()
#41 0x00000000 in ?? ()
#42 0x00000000 in ?? ()
#43 0x00000000 in ?? ()
#44 0x1f447000 in ?? ()
#45 0xc1b8dde4 in ?? ()
#46 0xc1b8ecf0 in ?? ()
---Type <return> to continue, or q <return> to quit--- 
#47 0xe5745588 in ?? ()
#48 0xe5745568 in ?? ()
#49 0xc196c170 in ?? ()
#50 0xc04b361b in sched_switch (td=0x8052400, newtd=0x28192144, flags=Cannot access memory at address 0xbfbfe608
) at /usr/src/sys/kern/sched_4bsd.c:963
Previous frame inner to this frame (corrupt stack?)
(kgdb) fr 14
#14 0xc04f0010 in bdirty (bp=0x0) at /usr/src/sys/kern/vfs_bio.c:1015
1015		KASSERT(bp->b_bufobj != NULL, ("No b_bufobj %p", bp));
(kgdb) list
1010	{
1011	
1012		CTR3(KTR_BUF, "bdirty(%p) vp %p flags %X",
1013		    bp, bp->b_vp, bp->b_flags);
1014		KASSERT(BUF_REFCNT(bp) == 1, ("bdirty: bp %p not locked",bp));
1015		KASSERT(bp->b_bufobj != NULL, ("No b_bufobj %p", bp));
1016		KASSERT(bp->b_flags & B_REMFREE || bp->b_qindex == QUEUE_NONE,
1017		    ("bdirty: buffer %p still on queue %d", bp, bp->b_qindex));
1018		bp->b_flags &= ~(B_RELBUF);
1019		bp->b_iocmd = BIO_WRITE;
(kgdb) fr 15
#15 0xc05f5c9a in VOP_LOOKUP_APV (vop=0x0, a=0xe5745ba8) at vnode_if.c:100
100			rc = vop->vop_lookup(a);
(kgdb) list
95		VNASSERT(vop != NULL, a->a_dvp, ("No vop_lookup(%p, %p)", a->a_dvp, a));
96	#ifdef	DEBUG_VFS_LOCKS
97		vop_lookup_pre(a);
98	#endif
99		if (vop->vop_lookup != NULL)
100			rc = vop->vop_lookup(a);
101		else
102			rc = vop->vop_bypass(&a->a_gen);
103		CTR3(KTR_VOP,
104		    "VOP_LOOKUP(dvp 0x%lX, vpp 0x%lX, cnp 0x%lX)",
Script done on Mon Apr  4 01:23:18 2005


Any clues, or things I can do to help investigate the problem?

# uname -v
FreeBSD 6.0-CURRENT #0: Sun Apr  3 11:15:43 CEST 2005     root_at_xxx:/usr/obj/usr/src/sys/TPAD 


Cheers,

Wiktor Niesiobedzki