Here's a backtrace of a smbfs panic. Looks like it does not correctly handle the smbfs_getpages error it is encountering and leaves garbage vnodes lying around. The panic probably comes from the VI_LOCK macro call on smbfs_node.c line 321.
# cp blah.tar.gz ~tim cp: /home/tim/blah.tar.gz: Bad address in dmesg: smbfs_getpages: error 60 vm_fault: pager read error, pid 433 (cp) Upon trying to halt: syncing disks, buffers remaining... done Fatal trap 12: page fault while in kernel mode fault virtual address = 0xdeadc0de fault code = supervisor read, page not present instruction pointer = 0x8:0xc0171e23 stack pointer = 0x10:0xc5bd2a1c frame pointer = 0x10:0xc5bd2a3c code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, def32 1, gran 1 process eflags = interrupt enabled, IOPL = 0 current process = halt kernel: type 12 trap, code=0 Stopped at _mtx_lock_flags+0x43: cmpl $0xc02afd80,0(%ebx) db> trace _mtx_lock_flags(deadc0de,0,c0f280b7,141,c0f05000) at _mtx_lock_flags+0x43 smbfs_reclaim(c5bd2a94,12,c0602540,c0602540,0) at smbfs_reclaim+0x11a vclean(c0f53a68,8,c0602540,6,c0f53a68) at vclean+0x229 vgonel(c0f53a68,c0602540,c02903f2,94a,0) at vgonel+0x5c smbfs_umount(c0ea8400,80000,c0602540,c0602540,0) at smbfs_umount+0x3c dounmount(c0ea8400,80000,c0602540,ffffffff,c216304c) at dounmount+0x204 vfs_unmountall(...) boot(...) reboot(...) syscall(...) Xint0x80_syscall(...) --- syscall (55, FreeBSD ELF32, reboot), eip = 0x8048e9f, esp = 0xbfbffb1c, ebp = 0xbfbffb60 --- Tim To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message