4.99.54 i386 system crashed

[Jukka Salmi <j+nbsd%2008.salmi.ch@localhost>]

Hello,

a 4.99.54 NetBSD/i386 system just crashed while traversing a mounted
SMB/CIFS file system. I was running X when this happened and "blindly"
typed (and apparently mistyped) ddb commands. This was in the message
buffer after restart:

uvm_fault(0xc04d8f80, 0, 1) -> 0xe
kernel: supervisor trap page fault, code=0
Stopped in pid 0.5 (system) at  netbsd:seldestroy+0x32: movl    0x8(%edx),%eax
db> No such command
db> No such command
db> seldestroy(c2039348,c20392c0,0,ffffffff,7fffffff) at netbsd:seldestroy+0x32
sofree(c20392c0,c20239c4,0,b0,b0) at netbsd:sofree+0x75
in_pcbdetach(c1ab63cc,c20239c4,cb395d00,c02c5308,c04dacc0) at 
netbsd:in_pcbdetach+0x31
tcp_close(c20239c4,cabafd40,c02fd060,4,c2023a4c) at netbsd:tcp_close+0x11c
tcp_timer_2msl(c20239c4,2,1,cab9e32c,c04845c0) at netbsd:tcp_timer_2msl+0x7b
callout_softclock(0,caba6780,0,c19a0480,0) at netbsd:callout_softclock+0x21d
softint_dispatch(caba6d20,1,0,0,0) at netbsd:softint_dispatch+0x5f
DDB lost frame for netbsd:Xsoftintr+0x3d, trying 0xcb395d88
Xsoftintr() at netbsd:Xsoftintr+0x3d
--- interrupt ---
uvm_fault(0xc04d8f80, 0, 1) -> 0xe
kernel: supervisor trap page fault, code=0
Faulted in DDB; continuing...
db> syncing disks... 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 giving up

dumping to dev 0,1 offset 3146535


A crash dump has been created:

$ ls -lh netbsd.0*
-rw-r-----  1 root  wheel  4.2M Mar  8 18:18 netbsd.0
-rw-r-----  1 root  wheel  147M Mar  8 18:18 netbsd.0.core
$ gdb netbsd.0
GNU gdb 6.5
[...]
This GDB was configured as "i386--netbsdelf"...
(gdb) target kvm netbsd.0.core
#0  0xc036bdf2 in cpu_reboot ()
(gdb) bt
#0  0xc036bdf2 in cpu_reboot ()
#1  0xc014d939 in db_sync_cmd ()
#2  0xc014df58 in db_command ()
#3  0xc014e292 in db_command_loop ()
#4  0xc015118c in db_trap ()
#5  0xc036700e in kdb_trap ()
#6  0xc036fd68 in trap ()
#7  0xc01030c8 in calltrap ()
#8  0xc02e4872 in seldestroy ()
#9  0xc0302ca5 in sofree ()
#10 0xc0111921 in in_pcbdetach ()
#11 0xc01212dc in tcp_close ()
#12 0xc012181b in tcp_timer_2msl ()
#13 0xc02d018d in callout_softclock ()
#14 0xc02c621f in softint_dispatch ()
#15 0xc0100e4d in Xsoftintr ()
#16 0x00000000 in ?? ()


Any hints?

Regards, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~