crash with recent build (2007-01-06T11:20+001)

[Juraj Hercek <nbsd%hck.sk@localhost>]

Hello,

I got a crash when running xen domu kernel built today. It seems all 
DomU crash (at least install and my custom kernel do). More information 
in attached file.

-- Juraj

...
Kernelized RAIDframe activated
IPsec: Initialized Security Association Processing.
xenbus0: using event channel 1                     
xbd0 at xenbus0 id 3: Xen Virtual Block Device Interface
xbd0: using event channel 5                             
xbd1 at xenbus0 id 4: Xen Virtual Block Device Interface
xbd1: using event channel 6                             
xennet0 at xenbus0 id 0: Xen Virtual Network Interface
xennet0: MAC address 00:40:95:04:01:f1                
xennet0: using event channel 7        
kernel: supervisor trap page fault, code=0
Stopped at      netbsd:bufq_get+0x9:    movl    0x4(%eax),%edx
db> show reg                                                  
ds          0x11
es          0x11
fs          0x31
gs          0x11
edi         0xc0e84ce0  _prop_dictionary_keysym32_pool+0xc7d80
esi         0                                                 
ebp         0xcafbdf5c
ebx         0xc13387e0
edx         0xc141b03c
ecx         0xc0e84cd0  _prop_dictionary_keysym32_pool+0xc7d70
eax         0                                                 
eip         0xc03db645  bufq_get+0x9
cs          0x9                     
eflags      0x10282
esp         0xcafbdf54
ss          0x11      
netbsd:bufq_get+0x9:    movl    0x4(%eax),%edx
db> bt                                        
bufq_get(0,cafbdf88,c056d020,fffffe00,0) at netbsd:bufq_get+0x9
dk_start(c056cec8,c141b03c,c056d020,0,c04a2af1) at netbsd:dk_start+0x75
dk_iodone(c056cec8,c141b03c,c0566ff0,c056d020,0) at netbsd:dk_iodone+0x41
xbd_handler(c141b000,c0e84ad0,0,0,0) at netbsd:xbd_handler+0x2c4         
DDB lost frame for netbsd:Xresume_xenev4+0x3e, trying 0xcafbdff4
Xresume_xenev4() at netbsd:Xresume_xenev4+0x3e                  
--- interrupt ---                             
0:               
db> 

$ addr2line -e netbsd.gdb 0xc03db645
/home/juraj/work/netbsd/src/sys/kern/subr_bufq.c:177

$ objdump -S --start-address=0xc03db63c --stop-address=0xc03db65a netbsd.gdb



netbsd.gdb:     file format elf32-i386

Disassembly of section .text:

c03db63c <bufq_get>:
}

struct buf *
bufq_get(struct bufq_state *bufq)
{
c03db63c:       55                      push   %ebp
c03db63d:       89 e5                   mov    %esp,%ebp
c03db63f:       83 ec 08                sub    $0x8,%esp

        return (*bufq->bq_get)(bufq, 1);
c03db642:       8b 45 08                mov    0x8(%ebp),%eax
c03db645:       8b 50 04                mov    0x4(%eax),%edx
c03db648:       c7 44 24 04 01 00 00    movl   $0x1,0x4(%esp)
c03db64f:       00 
c03db650:       8b 45 08                mov    0x8(%ebp),%eax
c03db653:       89 04 24                mov    %eax,(%esp)
c03db656:       ff d2                   call   *%edx
}
c03db658:       c9                      leave  
c03db659:       c3                      ret    

=> bufq seems to be NULL :-(