kern/69612: 4.10-STABLE crashes everyday

[ocherrier]

>Number:         69612
>Category:       kern
>Synopsis:       4.10-STABLE crashes everyday
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jul 26 10:20:07 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     ocherrier
>Release:        FreeBSD 4.10-STABLE #2: Sat Jul 24 22:04:43 CEST 2004
>Organization:
>Environment:
FreeBSD xx.com 4.10-STABLE FreeBSD 4.10-STABLE #2: Sat Jul 24 22:04:43 CEST 2004     xx at xx.com :/usr/obj/usr/src/sys/DEBUG  i386
>Description:
(the DEBUG kernel is a GENERIC one with "options DDB" added.)

This server crashes about everyday (with a floatting hour) with the following informations:

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x292c8f05
fault code              = supervisor read, page not present
instruction pointer     = 0x8 :0xc0279973
stack pointer           = 0x10:0xccd9cd98
frame pointer           = 0x10:0xccd9ce1c
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 207 (nmbd)
interrupt mask          = none
kernel: type 12 trap, code=0
stopped at      ifconf+0xa7:    movl    0(%eax),%ebx

db> trace
ifconf(c0086924,ccd9cea8,ccd9cea8,c7ee1ea0,8) at ifconf+0xa7
ifioctl(cc5106e0,c0086924,ccd9cea8,c7ee1ea0,c1091b00) at ifioctl+0x29
soo_ioctl(c1091b00,c0086924,ccd9cea8,c7ee1ea0,c7ee1ea0) at soo_ioctl+0x132
ioctl(c7ee1ea0,ccd9cf80,410411f5,bfbff960) at ioctl+0x20a
syscall2(2f,812002f,bfbf002f,bfbff960,bfbfebe0) at syscall2+0x1f5
Xint0x80_syscall() at Xint0x80_syscall+0x25
db>
db>ps
 pid    proc    addr    uid     ppid    pgrp    flag    stat    wmesg   wchan   cmd
..
 207    c7ee1ea0 ccd9a000 0     1       207     0000005 2                       nmbd
..

db>show registers
cs              0x8
ds              0x10
es              0x10
fs              0x10
ss              0x10
eax     0x292c8f85
ecx             0
edx     0xccd9a000
ebx     0xc8fca47c
esp     0xccd9cd98
ebp     0xccd9ce1c
esi     0xbfbfcd88
edi             0x1e68
eip     0xc8279973      ifconf+0xa7

>How-To-Repeat:

>Fix:
      
>Release-Note:
>Audit-Trail:
>Unformatted: