ksymoops 2.4.9 on i686 2.6.0.  Options used
     -V (default)
     -k /proc/ksyms (default)
     -l /proc/modules (default)
     -o /lib/modules/2.6.0/ (default)
     -m /usr/src/linux/System.map (default)

Warning: You did not tell me where to find symbol information.  I will
assume that the log matches the kernel and modules that are running
right now and I'll use the default options above for symbol resolution.
If the current kernel and/or modules do not match the log, you can get
more accurate output by telling me the kernel version and where to find
map, modules, ksyms etc.  ksymoops -h explains the options.

Error (regular_file): read_ksyms stat /proc/ksyms failed
No modules in ksyms, skipping objects
No ksyms, skipping lsmod
0000000
Machine check exception polling timer started.
Unable to handle kernel NULL pointer dereference at virtual address 00000000
c027bbae
*pde = 00000000
Oops: 0000 [#1]
CPU:    0
EIP:    0060:[<c027bbae>]    Not tainted VLI
Using defaults from ksymoops -t elf32-i386 -a i386
EFLAGS: 00010286
eax: 00000000   ebx: 00005401   ecx: 00000000   edx: bfff7188
esi: fffffff8   edi: c1757000   ebp: df5ddbc0   esp: df0b7eb8
ds: 007b   es: 007b   ss: 0068
Stack: 00000150 00000000 00000000 dfad1118 00000001 df09c400 400fc850 df332700 
       00000000 c0148bfe df332700 df73aac0 400fc850 00000000 df34a3f0 df09c400 
       00000000 df332700 df332720 df0dcd00 400fc850 c011be72 df332700 df73aac0 
Call Trace:
 [<c0148bfe>] handle_mm_fault+0xde/0x180
 [<c011be72>] do_page_fault+0x312/0x512
 [<c014b11a>] do_brk+0x1ea/0x230
 [<c0276b31>] tty_ioctl+0x3b1/0x4d0
 [<c0168f93>] sys_ioctl+0xf3/0x280
 [<c011bb60>] do_page_fault+0x0/0x512
 [<c03fa4fb>] syscall_call+0x7/0xb
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 57 56 53 81 ec a4 00 00 00 8b bc 24 b8 00 00 00 8b 9c 24 c0 00 00 00 8b 87 64 09 00 00 <8b> 30 8b 04 b5 a0 fe 54 c0 89 34 24 89 44 24 44 e8 7d 6c 00 00 


>>EIP; c027bbae <vt_ioctl+1e/1f00>   <=====

>>esi; fffffff8 <__kernel_rt_sigreturn+2bb8/????>
>>edi; c1757000 <_end+11f919c/3fa9f19c>
>>ebp; df5ddbc0 <_end+1f07fd5c/3fa9f19c>
>>esp; df0b7eb8 <_end+1eb5a054/3fa9f19c>

Trace; c0148bfe <handle_mm_fault+de/180>
Trace; c011be72 <do_page_fault+312/512>
Trace; c014b11a <do_brk+1ea/230>
Trace; c0276b31 <tty_ioctl+3b1/4d0>
Trace; c0168f93 <sys_ioctl+f3/280>
Trace; c011bb60 <do_page_fault+0/512>
Trace; c03fa4fb <syscall_call+7/b>

This architecture has variable length instructions, decoding before eip
is unreliable, take these instructions with a pinch of salt.

Code;  c027bb83 <.text.lock.misc+70/7d>
00000000 <_EIP>:
Code;  c027bb83 <.text.lock.misc+70/7d>
   0:   90                        nop    
Code;  c027bb84 <.text.lock.misc+71/7d>
   1:   90                        nop    
Code;  c027bb85 <.text.lock.misc+72/7d>
   2:   90                        nop    
Code;  c027bb86 <.text.lock.misc+73/7d>
   3:   90                        nop    
Code;  c027bb87 <.text.lock.misc+74/7d>
   4:   90                        nop    
Code;  c027bb88 <.text.lock.misc+75/7d>
   5:   90                        nop    
Code;  c027bb89 <.text.lock.misc+76/7d>
   6:   90                        nop    
Code;  c027bb8a <.text.lock.misc+77/7d>
   7:   90                        nop    
Code;  c027bb8b <.text.lock.misc+78/7d>
   8:   90                        nop    
Code;  c027bb8c <.text.lock.misc+79/7d>
   9:   90                        nop    
Code;  c027bb8d <.text.lock.misc+7a/7d>
   a:   90                        nop    
Code;  c027bb8e <.text.lock.misc+7b/7d>
   b:   90                        nop    
Code;  c027bb8f <.text.lock.misc+7c/7d>
   c:   90                        nop    
Code;  c027bb90 <vt_ioctl+0/1f00>
   d:   55                        push   %ebp
Code;  c027bb91 <vt_ioctl+1/1f00>
   e:   57                        push   %edi
Code;  c027bb92 <vt_ioctl+2/1f00>
   f:   56                        push   %esi
Code;  c027bb93 <vt_ioctl+3/1f00>
  10:   53                        push   %ebx
Code;  c027bb94 <vt_ioctl+4/1f00>
  11:   81 ec a4 00 00 00         sub    $0xa4,%esp
Code;  c027bb9a <vt_ioctl+a/1f00>
  17:   8b bc 24 b8 00 00 00      mov    0xb8(%esp,1),%edi
Code;  c027bba1 <vt_ioctl+11/1f00>
  1e:   8b 9c 24 c0 00 00 00      mov    0xc0(%esp,1),%ebx
Code;  c027bba8 <vt_ioctl+18/1f00>
  25:   8b 87 64 09 00 00         mov    0x964(%edi),%eax

This decode from eip onwards should be reliable

Code;  c027bbae <vt_ioctl+1e/1f00>
00000000 <_EIP>:
Code;  c027bbae <vt_ioctl+1e/1f00>   <=====
   0:   8b 30                     mov    (%eax),%esi   <=====
Code;  c027bbb0 <vt_ioctl+20/1f00>
   2:   8b 04 b5 a0 fe 54 c0      mov    0xc054fea0(,%esi,4),%eax
Code;  c027bbb7 <vt_ioctl+27/1f00>
   9:   89 34 24                  mov    %esi,(%esp,1)
Code;  c027bbba <vt_ioctl+2a/1f00>
   c:   89 44 24 44               mov    %eax,0x44(%esp,1)
Code;  c027bbbe <vt_ioctl+2e/1f00>
  10:   e8 7d 6c 00 00            call   6c92 <_EIP+0x6c92>

 <1>Unable to handle kernel NULL pointer dereference at virtual address 00000000
c027bbae
*pde = 00000000
Oops: 0000 [#2]
CPU:    0
EIP:    0060:[<c027bbae>]    Not tainted VLI
EFLAGS: 00010286
eax: 00000000   ebx: 00005401   ecx: 00000000   edx: bffff260
esi: fffffff8   edi: c1757000   ebp: df5ddbc0   esp: df167eb8
ds: 007b   es: 007b   ss: 0068
Stack: c0147e88 c14e37c0 c010ad90 bffff858 bffff8b0 df4d9400 40153f5c df4dadc0 
       00000001 c0148c69 df4dadc0 df5e4dc0 df167f00 df167f60 c0160c58 bffff320 
       df167f00 00000060 0000000a 00000000 00000000 00000013 00002180 00000001 
Call Trace:
 [<c0147e88>] do_wp_page+0x298/0x320
 [<c010ad90>] setup_frame+0x110/0x1f0
 [<c0148c69>] handle_mm_fault+0x149/0x180
 [<c0160c58>] cp_new_stat64+0x118/0x140
 [<c0276b31>] tty_ioctl+0x3b1/0x4d0
 [<c0168f93>] sys_ioctl+0xf3/0x280
 [<c03fa4fb>] syscall_call+0x7/0xb
Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 57 56 53 81 ec a4 00 00 00 8b bc 24 b8 00 00 00 8b 9c 24 c0 00 00 00 8b 87 64 09 00 00 <8b> 30 8b 04 b5 a0 fe 54 c0 89 34 24 89 44 24 44 e8 7d 6c 00 00 


>>EIP; c027bbae <vt_ioctl+1e/1f00>   <=====

>>esi; fffffff8 <__kernel_rt_sigreturn+2bb8/????>
>>edi; c1757000 <_end+11f919c/3fa9f19c>
>>ebp; df5ddbc0 <_end+1f07fd5c/3fa9f19c>
>>esp; df167eb8 <_end+1ec0a054/3fa9f19c>

Trace; c0147e88 <do_wp_page+298/320>
Trace; c010ad90 <setup_frame+110/1f0>
Trace; c0148c69 <handle_mm_fault+149/180>
Trace; c0160c58 <cp_new_stat64+118/140>
Trace; c0276b31 <tty_ioctl+3b1/4d0>
Trace; c0168f93 <sys_ioctl+f3/280>
Trace; c03fa4fb <syscall_call+7/b>

This architecture has variable length instructions, decoding before eip
is unreliable, take these instructions with a pinch of salt.

Code;  c027bb83 <.text.lock.misc+70/7d>
00000000 <_EIP>:
Code;  c027bb83 <.text.lock.misc+70/7d>
   0:   90                        nop    
Code;  c027bb84 <.text.lock.misc+71/7d>
   1:   90                        nop    
Code;  c027bb85 <.text.lock.misc+72/7d>
   2:   90                        nop    
Code;  c027bb86 <.text.lock.misc+73/7d>
   3:   90                        nop    
Code;  c027bb87 <.text.lock.misc+74/7d>
   4:   90                        nop    
Code;  c027bb88 <.text.lock.misc+75/7d>
   5:   90                        nop    
Code;  c027bb89 <.text.lock.misc+76/7d>
   6:   90                        nop    
Code;  c027bb8a <.text.lock.misc+77/7d>
   7:   90                        nop    
Code;  c027bb8b <.text.lock.misc+78/7d>
   8:   90                        nop    
Code;  c027bb8c <.text.lock.misc+79/7d>
   9:   90                        nop    
Code;  c027bb8d <.text.lock.misc+7a/7d>
   a:   90                        nop    
Code;  c027bb8e <.text.lock.misc+7b/7d>
   b:   90                        nop    
Code;  c027bb8f <.text.lock.misc+7c/7d>
   c:   90                        nop    
Code;  c027bb90 <vt_ioctl+0/1f00>
   d:   55                        push   %ebp
Code;  c027bb91 <vt_ioctl+1/1f00>
   e:   57                        push   %edi
Code;  c027bb92 <vt_ioctl+2/1f00>
   f:   56                        push   %esi
Code;  c027bb93 <vt_ioctl+3/1f00>
  10:   53                        push   %ebx
Code;  c027bb94 <vt_ioctl+4/1f00>
  11:   81 ec a4 00 00 00         sub    $0xa4,%esp
Code;  c027bb9a <vt_ioctl+a/1f00>
  17:   8b bc 24 b8 00 00 00      mov    0xb8(%esp,1),%edi
Code;  c027bba1 <vt_ioctl+11/1f00>
  1e:   8b 9c 24 c0 00 00 00      mov    0xc0(%esp,1),%ebx
Code;  c027bba8 <vt_ioctl+18/1f00>
  25:   8b 87 64 09 00 00         mov    0x964(%edi),%eax

This decode from eip onwards should be reliable

Code;  c027bbae <vt_ioctl+1e/1f00>
00000000 <_EIP>:
Code;  c027bbae <vt_ioctl+1e/1f00>   <=====
   0:   8b 30                     mov    (%eax),%esi   <=====
Code;  c027bbb0 <vt_ioctl+20/1f00>
   2:   8b 04 b5 a0 fe 54 c0      mov    0xc054fea0(,%esi,4),%eax
Code;  c027bbb7 <vt_ioctl+27/1f00>
   9:   89 34 24                  mov    %esi,(%esp,1)
Code;  c027bbba <vt_ioctl+2a/1f00>
   c:   89 44 24 44               mov    %eax,0x44(%esp,1)
Code;  c027bbbe <vt_ioctl+2e/1f00>
  10:   e8 7d 6c 00 00            call   6c92 <_EIP+0x6c92>


1 warning and 1 error issued.  Results may not be reliable.