GENERIC HEAD from Dec 22 11:17 UTC, vmcore.191

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2007 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 8.0-CURRENT #0: Sun Dec 23 17:52:28 CET 2007
    pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.81-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf24  Stepping = 4
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
  Logical CPUs per core: 2
real memory  = 1073676288 (1023 MB)
avail memory = 1036521472 (988 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
fxp0: link state changed to UP
linux: pid 1418 (syscall): syscall stime not implemented
linux: pid 1448 (syscall): syscall fstat not implemented
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
linux: pid 1836 (syscall): syscall olduname not implemented


Fatal trap 12: page fault while in kernel mode
cpuid = 3; apic id = 07
fault virtual address   = 0x4b62619c
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc0a741eb
stack pointer           = 0x28:0xe6a12ab8
frame pointer           = 0x28:0xe6a12b24
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 2168 (syscall)
[thread pid 2168 tid 100103 ]
Stopped at      copystr+0x13:   lodsb   (%esi)
db> where
Tracing pid 2168 tid 100103 td 0xc4434440
copystr(e6a12b44,0,f0,c0c753f0,c0b03bef,...) at copystr+0x13
kern_lstat(c4434440,4b62619c,1,e6a12c14,0,...) at kern_lstat+0x4f
linux_lstat(c4434440,e6a12cfc,e6a12cf8,e6a12d1c,c4bacba0,...) at linux_lstat+0x32
syscall(e6a12d38) at syscall+0x2b3
Xint0x80_syscall() at Xint0x80_syscall+0x20
--- syscall (84, Linux ELF, linux_lstat), eip = 0x28126b32, esp = 0xbfbfeb4c, ebp = 0xbfbfebb8 ---
db> call doadump
Physical memory: 1011 MB
Dumping 153 MB: 138 122 106 90 74 58 42 26 10
Dump complete
= 0xf

i0xc07e500f is in kern_lstat (../../../kern/vfs_syscalls.c:2161).
2156            int error, vfslocked;
2157
2158            NDINIT(&nd, LOOKUP,
2159                NOFOLLOW | LOCKLEAF | LOCKSHARED | MPSAFE | AUDITVNODE1,
2160                pathseg, path, td);
2161            if ((error = namei(&nd)) != 0)
2162                    return (error);
2163            vfslocked = NDHASGIANT(&nd);
2164            vp = nd.ni_vp;
2165            error = vn_stat(vp, &sb, td->td_ucred, NOCRED, td);

--
Test scenario: Linux syscall with randum arguments