Hi Dave, I can't open vmcore for 2.6.20-rc2 vanilla kernel with crash. I am using latest crash version 4.0-3.16. ****************************************************************************** crash 4.0-3.16 Copyright (C) 2002, 2003, 2004, 2005, 2006 Red Hat, Inc. Copyright (C) 2004, 2005, 2006 IBM Corporation Copyright (C) 1999-2006 Hewlett-Packard Co Copyright (C) 2005, 2006 Fujitsu Limited Copyright (C) 2006 VA Linux Systems Japan K.K. Copyright (C) 2005 NEC Corporation Copyright (C) 1999, 2002 Silicon Graphics, Inc. Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. This program is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Enter "help copying" to see the conditions. This program has absolutely no warranty. Enter "help warranty" for details. GNU gdb 6.1 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu"... WARNING: invalid linux_banner pointer: 756e694c crash: vmlinux and vmcore do not match! Usage: crash [-h [opt]][-v][-s][-i file][-d num] [-S] [mapfile] [namelist] [dumpfile] Enter "crash -h" for details. ****************************************************************************** Looks like address of linux_banner is being interpreted wrongly. Following are the vmcore program headers. Program Headers: Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg Align NOTE 0x0000f4 0x00000000 0x00000000 0x00290 0x00290 0 LOAD 0x000384 0xc0000000 0x00000000 0xa0000 0xa0000 RWE 0 LOAD 0x0a0384 0xc0100000 0x00100000 0xf00000 0xf00000 RWE 0 LOAD 0xfa0384 0xc9000000 0x09000000 0x2f000000 0x2f000000 RWE 0 LOAD 0x2ffa0384 0xffffffff 0x38000000 0x9ffb0580 0x9ffb0580 RWE 0 LOAD 0xcff50904 0xffffffff 0x00000000 0x28000000 0x28000000 RWE 0 I am also pasting below "crash -d7 vmlinux vmcore" output. crash 4.0-3.16 Copyright (C) 2002, 2003, 2004, 2005, 2006 Red Hat, Inc. Copyright (C) 2004, 2005, 2006 IBM Corporation Copyright (C) 1999-2006 Hewlett-Packard Co Copyright (C) 2005, 2006 Fujitsu Limited Copyright (C) 2006 VA Linux Systems Japan K.K. Copyright (C) 2005 NEC Corporation Copyright (C) 1999, 2002 Silicon Graphics, Inc. Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. This program is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Enter "help copying" to see the conditions. This program has absolutely no warranty. Enter "help warranty" for details. vmcore_data: flags: a0 (KDUMP_LOCAL|KDUMP_ELF32) ndfd: 3 ofp: 456764c0 header_size: 900 num_pt_load_segments: 5 pt_load_segment[0]: file_offset: 384 phys_start: 0 phys_end: a0000 zero_fill: 0 pt_load_segment[1]: file_offset: a0384 phys_start: 100000 phys_end: 1000000 zero_fill: 0 pt_load_segment[2]: file_offset: fa0384 phys_start: 9000000 phys_end: 38000000 zero_fill: 0 pt_load_segment[3]: file_offset: 2ffa0384 phys_start: 38000000 phys_end: d7fb0580 zero_fill: 0 pt_load_segment[4]: file_offset: cff50904 phys_start: 0 phys_end: 28000000 zero_fill: 0 elf_header: 84056f8 elf32: 84056f8 notes32: 840572c load32: 840574c elf64: 0 notes64: 0 load64: 0 nt_prstatus: 84057ec nt_prpsinfo: 0 nt_taskstruct: 0 task_struct: 0 page_size: 0 switch_stack: 0 xen_kdump_data: (unused) num_prstatus_notes: 4 nt_prstatus_percpu: 084057ec 08405890 08405934 084059d8 Elf32_Ehdr: e_ident: \177ELF e_ident[EI_CLASS]: 1 (ELFCLASS32) e_ident[EI_DATA]: 1 (ELFDATA2LSB) e_ident[EI_VERSION]: 1 (EV_CURRENT) e_ident[EI_OSABI]: 0 (ELFOSABI_SYSV) e_ident[EI_ABIVERSION]: 0 e_type: 4 (ET_CORE) e_machine: 3 (EM_386) e_version: 1 (EV_CURRENT) e_entry: 0 e_phoff: 34 e_shoff: 0 e_flags: 0 e_ehsize: 34 e_phentsize: 20 e_phnum: 6 e_shentsize: 0 e_shnum: 0 e_shstrndx: 0 Elf32_Phdr: p_type: 4 (PT_NOTE) p_offset: 244 (f4) p_vaddr: 0 p_paddr: 0 p_filesz: 656 (290) p_memsz: 656 (290) p_flags: 0 () p_align: 0 Elf32_Phdr: p_type: 1 (PT_LOAD) p_offset: 900 (384) p_vaddr: c0000000 p_paddr: 0 p_filesz: 655360 (a0000) p_memsz: 655360 (a0000) p_flags: 7 (PF_X|PF_W|PF_R) p_align: 0 Elf32_Phdr: p_type: 1 (PT_LOAD) p_offset: 656260 (a0384) p_vaddr: c0100000 p_paddr: 100000 p_filesz: 15728640 (f00000) p_memsz: 15728640 (f00000) p_flags: 7 (PF_X|PF_W|PF_R) p_align: 0 Elf32_Phdr: p_type: 1 (PT_LOAD) p_offset: 16384900 (fa0384) p_vaddr: c9000000 p_paddr: 9000000 p_filesz: 788529152 (2f000000) p_memsz: 788529152 (2f000000) p_flags: 7 (PF_X|PF_W|PF_R) p_align: 0 Elf32_Phdr: p_type: 1 (PT_LOAD) p_offset: 804914052 (2ffa0384) p_vaddr: ffffffff p_paddr: 38000000 p_filesz: 2684028288 (9ffb0580) p_memsz: 2684028288 (9ffb0580) p_flags: 7 (PF_X|PF_W|PF_R) p_align: 0 Elf32_Phdr: p_type: 1 (PT_LOAD) p_offset: -806024956 (cff50904) p_vaddr: ffffffff p_paddr: 0 p_filesz: 671088640 (28000000) p_memsz: 671088640 (28000000) p_flags: 7 (PF_X|PF_W|PF_R) p_align: 0 Elf32_Nhdr: n_namesz: 5 ("CORE") n_descsz: 144 n_type: 1 (NT_PRSTATUS) 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 c058e008 00000020 00000000 f70b007b 0000007b 00000000 000000d8 00000000 c0103240 00000060 00000246 c058ffc0 00000068 00000000 Elf32_Nhdr: n_namesz: 5 ("CORE") n_descsz: 144 n_type: 1 (NT_PRSTATUS) 00000000 00000000 00000000 00000000 00000000 00000000 00000da5 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 c053c240 c0527930 00000000 00000000 00000063 00000000 00000000 0000007b 0000007b 00000000 f618df30 c053c240 c013e8cf 00000060 00000046 f618df08 00000068 00000000 Elf32_Nhdr: n_namesz: 5 ("CORE") n_descsz: 144 n_type: 1 (NT_PRSTATUS) 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 cb124008 00000000 00000000 f77c007b 0000007b 00000000 000000d8 00000000 c0103240 00000060 00000246 cb125fa4 00000068 00000000 Elf32_Nhdr: n_namesz: 5 ("CORE") n_descsz: 144 n_type: 1 (NT_PRSTATUS) 00000000 00000000 00000000 00000000 00000000 00000000 00000ade 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 000000fa 003d0900 00000000 00000998 f75bbf6c f75bbf40 cb02aa00 0000007b f70b007b 00000000 f7e800d8 cb02aa00 c040dac7 00000060 00000046 f75bbed4 00000068 00000000 gdb vmlinux GNU gdb 6.1 Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu"... <readmem: c0413a20, KVADDR, "kernel_config_data", 32768, (ROE), 8fa1020> crash: CONFIG_NR_CPUS: 32 crash: CONFIG_HZ: 250 <readmem: c0623d00, KVADDR, "xtime", 8, (FOE), 83be098> <readmem: c0524344, KVADDR, "init_uts_ns", 390, (ROE), 83be67c> <readmem: c0412000, KVADDR, "linux_banner", 4, (FOE), bfee229c> WARNING: invalid linux_banner pointer: 756e694c <readmem: 756e694c, KVADDR, "accessible check", 4, (ROE|Q), bfee20d4> crash: invalid kernel virtual address: 756e694c type: "accessible check" crash: vmlinux and vmcore do not match! Usage: crash [-h [opt]][-v][-s][-i file][-d num] [-S] [mapfile] [namelist] [dumpfile] Enter "crash -h" for details. Thanks Vivek -- Crash-utility mailing list Crash-utility@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/crash-utility