It get the same result, I think may be cause by my upload script? I will try to disable it to get result.
In another more high load server(without patch) using this script is no this problem.
gdb `which nginx` core
GNU gdb (Ubuntu/Linaro 7.2-1ubuntu11) 7.2
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/sbin/nginx...done.
[New Thread 17587]
warning: Can't read pathname for load map: 输入/输出错误.
Reading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libpthread.so.0
Reading symbols from /lib/x86_64-linux-gnu/libpcre.so.3...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libpcre.so.3
Reading symbols from /lib/libssl.so.0.9.8...(no debugging symbols found)...done.
Loaded symbols for /lib/libssl.so.0.9.8
Reading symbols from /lib/libcrypto.so.0.9.8...(no debugging symbols found)...done.
Loaded symbols for /lib/libcrypto.so.0.9.8
Reading symbols from /lib/x86_64-linux-gnu/libdl.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libdl.so.2
Reading symbols from /lib/x86_64-linux-gnu/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libz.so.1
Reading symbols from /usr/local/lib/libprofiler.so.0...done.
Loaded symbols for /usr/local/lib/libprofiler.so.0
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libc.so.6
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /usr/local/lib/libunwind.so.7...(no debugging symbols found)...done.
Loaded symbols for /usr/local/lib/libunwind.so.7
Reading symbols from /usr/lib/x86_64-linux-gnu/libstdc++.so.6...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libstdc++.so.6
Reading symbols from /lib/x86_64-linux-gnu/libm.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libm.so.6
Reading symbols from /lib/x86_64-linux-gnu/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libgcc_s.so.1
Reading symbols from /lib/x86_64-linux-gnu/libnss_compat.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_compat.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnsl.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnsl.so.1
Reading symbols from /lib/x86_64-linux-gnu/libnss_nis.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_nis.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_files.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnss_dns.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_dns.so.2
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libresolv.so.2
Core was generated by `nginx:'.
Program terminated with signal 11, Segmentation fault.
#0 0x000000000040cff5 in ngx_vslprintf (buf=0x7fff3babc4d5 "", last=0x7fff3babcca0 "\220\274\020\212\067\177", fmt=0x49a2ac "s\" failed", args=0x7fff3babc470) at src/core/ngx_string.c:253
253 while (*p && buf < last) {
(gdb) bt
#0 0x000000000040cff5 in ngx_vslprintf (buf=0x7fff3babc4d5 "", last=0x7fff3babcca0 "\220\274\020\212\067\177", fmt=0x49a2ac "s\" failed", args=0x7fff3babc470) at src/core/ngx_string.c:253
#1 0x000000000040731f in ngx_log_error_core (level=3, log=0x288eec0, err=14, fmt=0x49a2a2 "chmod() \"%s\" failed") at src/core/ngx_log.c:119
#2 0x00000000004124ac in ngx_ext_rename_file (src=0x2146620, to=0x2239458, ext=0x7fff3babcea0) at src/core/ngx_file.c:545
#3 0x000000000046c680 in ngx_http_file_cache_update (r=0x27a68d0, tf=0x2146618) at src/http/ngx_http_file_cache.c:808
#4 0x000000000045f8ba in ngx_http_upstream_process_request (r=0x27a68d0) at src/http/ngx_http_upstream.c:2697
#5 0x000000000045f6ff in ngx_http_upstream_process_upstream (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:2645
#6 0x000000000045ed87 in ngx_http_upstream_send_response (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:2330
#7 0x000000000045d38c in ngx_http_upstream_process_header (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:1630
#8 0x000000000045bdba in ngx_http_upstream_handler (ev=0x7f382f880ec0) at src/http/ngx_http_upstream.c:924
#9 0x00000000004322a1 in ngx_epoll_process_events (cycle=0x1828d90, timer=213, flags=1) at src/event/modules/ngx_epoll_module.c:635
#10 0x00000000004259b6 in ngx_process_events_and_timers (cycle=0x1828d90) at src/event/ngx_event.c:245
#11 0x0000000000430680 in ngx_worker_process_cycle (cycle=0x1828d90, data=0x0) at src/os/unix/ngx_process_cycle.c:800
#12 0x000000000042d987 in ngx_spawn_process (cycle=0x1828d90, proc=0x4304fd <ngx_worker_process_cycle>, data=0x0, name=0x49c6a0 "worker process", respawn=-4) at src/os/unix/ngx_process.c:196
#13 0x000000000042f891 in ngx_start_worker_processes (cycle=0x1828d90, n=4, type=-4) at src/os/unix/ngx_process_cycle.c:360
#14 0x000000000042f46a in ngx_master_process_cycle (cycle=0x1828d90) at src/os/unix/ngx_process_cycle.c:249
#15 0x00000000004054b9 in main (argc=1, argv=0x7fff3babd638) at src/core/nginx.c:405
(gdb) backtrace full
#0 0x000000000040cff5 in ngx_vslprintf (buf=0x7fff3babc4d5 "", last=0x7fff3babcca0 "\220\274\020\212\067\177", fmt=0x49a2ac "s\" failed", args=0x7fff3babc470) at src/core/ngx_string.c:253
p = 0x0
zero = 32 ' '
d = -1978670320
f = 0
scale = 0
len = 46
slen = 18446744073709551615
i64 = 0
ui64 = 0
ms = 0
width = 0
sign = 1
hex = 0
max_width = 0
frac_width = 0
n = 2147479551
v = 0x404e40
vv = 0x6b5f60
#1 0x000000000040731f in ngx_log_error_core (level=3, log=0x288eec0, err=14, fmt=0x49a2a2 "chmod() \"%s\" failed") at src/core/ngx_log.c:119
args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff3babcd70, reg_save_area = 0x7fff3babccb0}}
p = 0x7fff3babc4cc "chmod() \""
last = 0x7fff3babcca0 "\220\274\020\212\067\177"
msg = 0x7fff3babc4cc "chmod() \""
errstr = "2011/08/27 00:12:23 [crit] 17587#0: *161816 chmod() \"\000\000\000\020\273\020\212\006\000\000\000\344r\377\001\000\000\000\000 ʫ;\377\177\000\000@N@\000\000\000\000\000\377\357\377\177\000\000\000\000\320\362\257\001\000\000\000\000\220\223\017\212\067\177\000\000\v\vJ\000\000\000\000\000\260ɫ;\377\177\000\000\260ū;\377\177\000\000\220\223\017\212\067\177\000\000t\003\000\000\000\000\000\000pʫ;\377\177\000\000@N@\000\000\000\000\000[,C", '\000' <repeats 13 times>"\220, ʫ;\377\177\000\000@N@\000\000\000\000\000[,C\000\000\000\000\000\032\316l\002\000\000\000\000\262\000\000\000\000\000\000\000tw\001\002\000\000\000\000\255\001\000\000\000\000\000\000\270"...
#2 0x00000000004124ac in ngx_ext_rename_file (src=0x2146620, to=0x2239458, ext=0x7fff3babcea0) at src/core/ngx_file.c:545
name = 0x24531a0 "\a"
err = 0
cf = {size = 25934928, buf_size = 41576656, access = 140734194503312, time = 4245912, log = 0x7fff3babcdf0}
#3 0x000000000046c680 in ngx_http_file_cache_update (r=0x27a68d0, tf=0x2146618) at src/http/ngx_http_file_cache.c:808
fs_size = 0
rc = 4557437
uniq = 0
fi = {st_dev = 140734194503248, st_ino = 4557810, st_nlink = 140734194503312, st_mode = 26099352, st_uid = 0, st_gid = 1001115232, __pad0 = 32767, st_rdev = 4656351, st_size = 140734194502976, st_blksize = 1, st_blocks = 16,
st_atim = {tv_sec = 16, tv_nsec = 34900240}, st_mtim = {tv_sec = 4678845, tv_nsec = 35885888}, st_ctim = {tv_sec = 38091144, tv_nsec = 3641}, __unused = {-2, 25566800, 47286217320}}
c = 0x2239450
ext = {access = 384, path_access = 384, time = -1, fd = 4365586, create_path = 1, delete_file = 1, log = 0x288eec0}
cache = 0x18cb888
#4 0x000000000045f8ba in ngx_http_upstream_process_request (r=0x27a68d0) at src/http/ngx_http_upstream.c:2697
del = 139879292341952
tf = 0x0
p = 0x2453988
u = 0x2239100
#5 0x000000000045f6ff in ngx_http_upstream_process_upstream (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:2645
c = 0x7f378a109290
#6 0x000000000045ed87 in ngx_http_upstream_send_response (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:2330
tcp_nodelay = 0
n = 140734194503664
rc = 0
p = 0x2453988
c = 0x7f378a10bc90
clcf = 0x18e3330
#7 0x000000000045d38c in ngx_http_upstream_process_header (r=0x27a68d0, u=0x2239100) at src/http/ngx_http_upstream.c:1630
n = 396
rc = 0
c = 0x7f378a109290
#8 0x000000000045bdba in ngx_http_upstream_handler (ev=0x7f382f880ec0) at src/http/ngx_http_upstream.c:924
c = 0x7f378a10bc90
r = 0x27a68d0
ctx = 0x288ef00
---Type <return> to continue, or q <return> to quit---
u = 0x2239100
#9 0x00000000004322a1 in ngx_epoll_process_events (cycle=0x1828d90, timer=213, flags=1) at src/event/modules/ngx_epoll_module.c:635
events = 1
revents = 5
instance = 0
i = 0
level = 140734194503920
err = 0
rev = 0x7f382f880ec0
wev = 0x7f3789f553f8
queue = 0x6c2f60
c = 0x7f378a109290
#10 0x00000000004259b6 in ngx_process_events_and_timers (cycle=0x1828d90) at src/event/ngx_event.c:245
flags = 1
timer = 213
delta = 1314375143673
#11 0x0000000000430680 in ngx_worker_process_cycle (cycle=0x1828d90, data=0x0) at src/os/unix/ngx_process_cycle.c:800
i = 0
c = 0x7fff3babd630
#12 0x000000000042d987 in ngx_spawn_process (cycle=0x1828d90, proc=0x4304fd <ngx_worker_process_cycle>, data=0x0, name=0x49c6a0 "worker process", respawn=-4) at src/os/unix/ngx_process.c:196
on = 1
pid = 0
s = 1
#13 0x000000000042f891 in ngx_start_worker_processes (cycle=0x1828d90, n=4, type=-4) at src/os/unix/ngx_process_cycle.c:360
i = 1
ch = {command = 1, pid = 17586, slot = 0, fd = 13}
#14 0x000000000042f46a in ngx_master_process_cycle (cycle=0x1828d90) at src/os/unix/ngx_process_cycle.c:249
title = 0x1904836 "*\221"
p = 0x190484a "8748"
size = 21
i = 1
n = 11206445643057
sigio = 0
set = {__val = {0 <repeats 16 times>}}
itv = {it_interval = {tv_sec = 0, tv_usec = 0}, it_value = {tv_sec = 0, tv_usec = 6}}
live = 1
delay = 0
ls = 0x0
ccf = 0x18294f0
#15 0x00000000004054b9 in main (argc=1, argv=0x7fff3babd638) at src/core/nginx.c:405
i = 47
log = 0x6c0d60
cycle = 0x1828d90
init_cycle = {conf_ctx = 0x0, pool = 0x1828240, log = 0x6c0d60, new_log = {log_level = 0, file = 0x0, connection = 0, handler = 0, data = 0x0, action = 0x0}, files = 0x0, free_connections = 0x0, free_connection_n = 0,
reusable_connections_queue = {prev = 0x0, next = 0x0}, listening = {elts = 0x0, nelts = 0, size = 0, nalloc = 0, pool = 0x0}, pathes = {elts = 0x0, nelts = 0, size = 0, nalloc = 0, pool = 0x0}, open_files = {last = 0x0,
part = {elts = 0x0, nelts = 0, next = 0x0}, size = 0, nalloc = 0, pool = 0x0}, shared_memory = {last = 0x0, part = {elts = 0x0, nelts = 0, next = 0x0}, size = 0, nalloc = 0, pool = 0x0}, connection_n = 0, files_n = 0,
connections = 0x0, read_events = 0x0, write_events = 0x0, old_cycle = 0x0, conf_file = {len = 21, data = 0x49977e "/etc/nginx/nginx.conf"}, conf_param = {len = 0, data = 0x0}, conf_prefix = {len = 11,
data = 0x49977e "/etc/nginx/nginx.conf"}, prefix = {len = 17, data = 0x49976c "/usr/local/nginx/"}, lock_file = {len = 0, data = 0x0}, hostname = {len = 0, data = 0x0}}
ccf = 0x1829c90
