Panic in gv_init_td on RELENG_6

[I assume -current is still OK for RELENG_6?]

Just had a panic on RELENG_6 with gvinum. I created a RAID5 array,
and it was listed as down. I tried to start it and the following
happened on the console:


GEOM_VINUM: plex u1.p0 state change: down -> degraded
GEOM_VINUM: plex u1.p0 state change: degraded -> down
panic: gv_init_td: NULL gp
cpuid = 0
KDB: enter: panic
[thread pid 624 tid 100085 ]
Stopped at      kdb_enter+0x2b: nop     
db> where
Tracing pid 624 tid 100085 td 0xc20c6300
kdb_enter(c0854b84) at kdb_enter+0x2b
panic(c217a125,0,df659cec,c0642ccf,c091db80) at panic+0x127
gv_init_td(c213e100,df659d38,c213e100,c2177f34,0) at gv_init_td+0x112
fork_exit(c2177f34,c213e100,df659d38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xdf659d6c, ebp = 0 ---
db> call doadump
Dumping 639 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 639MB (163568 pages) 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset


I took a look at the dump, but I can't see anything obviously helpful.
I'm guessing the useful bit is in frames 11 to 14. Please advise if
there is anything further I can do. I seem to be able to replicate this
easily.


kgdb: kvm_read: invalid address (0xc1bff900)
kgdb: kvm_read: invalid address (0xc1bff780)
kgdb: kvm_read: invalid address (0xc1bff600)
kgdb: kvm_read: invalid address (0xc1bff480)
kgdb: kvm_read: invalid address (0xc1bff300)
kgdb: kvm_read: invalid address (0xc1bff180)
kgdb: kvm_read: invalid address (0xc1bffd80)
kgdb: kvm_read: invalid address (0xc1bffc00)
kgdb: kvm_read: invalid address (0xc1bffa80)
kgdb: kvm_read: invalid address (0xc1bff000)
[GDB will not be able to debug user-mode threads:
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-marcel-freebsd".
#0  doadump () at pcpu.h:165
165     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc0468e13 in db_fncall (dummy1=0, dummy2=0, dummy3=0, dummy4=0xdf659b1c "H\233eß,õ|À4\233eß8\233eß\220\a")
    at /usr/src/sys/ddb/db_command.c:489
#2  0xc0468c18 in db_command (last_cmdp=0xc0902a84, cmd_table=0x0, aux_cmd_tablep=0xc0880068, aux_cmd_tablep_end=0xc0880084)
    at /usr/src/sys/ddb/db_command.c:349
#3  0xc0468ce0 in db_command_loop () at /usr/src/sys/ddb/db_command.c:455
#4  0xc046a881 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:221
#5  0xc0649a9c in kdb_trap (type=3, code=0, tf=0xdf659c60) at /usr/src/sys/kern/subr_kdb.c:473
#6  0xc07ec5fc in trap (frame=
      {tf_fs = -547028984, tf_es = -1067188184, tf_ds = -1065025496, tf_edi = -1038638811, tf_esi = 1, tf_ebp = -546988896, tf_isp = -546988916, tf_ebx = -546988852, tf_edx = 0, tf_ecx = -1056755712, tf_eax = 18, tf_trapno = 3, tf_err = 0, tf_eip = -1067149309, tf_cs = 32, tf_eflags = 662, tf_esp = -546988864, tf_ss = -1067246597}) at /usr/src/sys/i386/i386/trap.c:600
#7  0xc07da09a in calltrap () at /usr/src/sys/i386/i386/exception.s:137
#8  0xdf650008 in ?? ()
#9  0xc0640028 in link_elf_load_file (cls=0xc0854b84, filename=0x100 <Address 0x100 out of bounds>, result=0x0)
    at /usr/src/sys/kern/link_elf.c:640
#10 0xc0631bfb in panic (fmt=0x296 <Address 0x296 out of bounds>) at /usr/src/sys/kern/kern_shutdown.c:537
#11 0xc2178046 in ?? ()
#12 0xc217a125 in ?? ()
#13 0x00000000 in ?? ()
#14 0xdf659cec in ?? ()
#15 0xc0642ccf in critical_exit () at kern_switch.c:610
#16 0xc061eb40 in fork_exit (callout=0, arg=0xc213e100, frame=0xdf659d38) at /usr/src/sys/kern/kern_fork.c:789
#17 0xc07da0fc in fork_trampoline () at /usr/src/sys/i386/i386/exception.s:206
(kgdb) 


-- 
Tim Bishop
http://www.bishnet.net/tim/
PGP Key: 0x5AE7D984