> >  > #33 0xc02d3de7 in physio_done (wk=0xc110ec24, dummy=0x0)
> >  >     at /home/rpaulo/netbsd/src/sys/kern/kern_physio.c:207
> >  > 207                     wakeup(mbp);
> >  
> >  - "p *bp" at frame #33, please.
> 
> (gdb) print *bp
> $1 = {b_u = {u_actq = {tqe_next = 0xdeadbeef, tqe_prev = 0xc110eb90}, 
>     u_work = {wk_entry = {sqe_next = 0xdeadbeef}}}, b_interlock = {
>     lock_data = 1, 
>     lock_file = 0xc04c7320 "/home/rpaulo/netbsd/src/sys/kern/kern_physio.c", 
>     unlock_file = 0xc04c89c0 "/home/rpaulo/netbsd/src/sys/kern/kern_synch.c", 
>     lock_line = 160, unlock_line = 525, list = {tqe_next = 0x0, 
>       tqe_prev = 0xc04f9cd0}, lock_holder = 0}, b_flags = 8388624, 
>   b_error = 0, b_prio = 1, b_bufsize = -559038737, b_bcount = -559038737, 
>   b_resid = -559038737, can not access 0xdeadbeef, invalid translation (invalid PDE)
> can not access 0xdeadbeef, invalid translation (invalid PDE)
> can not access 0xdeadbeef, invalid translation (invalid PDE)
> can not access 0xdeadbeef, invalid translation (invalid PDE)
> can not access 0xdeadbeef, invalid translation (invalid PDE)
> can not access 0xdeadbeef, invalid translation (invalid PDE)
> b_dev = 4294967295, b_un = {
>     b_addr = 0xdeadbeef <Address 0xdeadbeef out of bounds>}, 
>   b_blkno = -2401053088876216593, b_rawblkno = -2401053088876216593, 
>   b_iodone = 0xdeadbeef, b_proc = 0xdeadbeef, b_vp = 0xdeadbeef, b_dep = {
>     lh_first = 0x0}, b_saveaddr = 0xdeadbeef, b_fspriv = {
>     bf_private = 0xdeadbeef, bf_dcookie = -2401053088876216593}, b_hash = {
>     le_next = 0xdeadbeef, le_prev = 0xdeadbeef}, b_vnbufs = {
>     le_next = 0xdeadbeef, le_prev = 0xdeadbeef}, b_freelist = {
>     tqe_next = 0xdeadbeef, tqe_prev = 0xdeadbeef}, b_lblkno = -1, 
>   b_freelistindex = 1}

seems very weird.
can you provide the dump?

YAMAMOTO Takashi