GENERIC 7.0-CURRENT from Dec 18 15:25 UTC, vmcore.32
Missing parameter validation?

KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #42: Sun Dec 18 16:37:34 CET 2005
    pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I  OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.80-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf24  Stepping = 4
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
  Logical CPUs per core: 2
real memory  = 1073676288 (1023 MB)
avail memory = 1040891904 (992 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
fxp0: link state changed to UP
panic: m_prepend: MH_ALIGN not PKTHDR mbuf
cpuid = 2
KDB: enter: panic
[thread pid 638 tid 100151 ]
Stopped at      kdb_enter+0x2b: nop
db> where
Tracing pid 638 tid 100151 td 0xc537c900
kdb_enter(c087d644) at kdb_enter+0x2b
panic(c0883f42,c08344e3,0,e,0) at panic+0x14b
m_prepend(c4fb9b00,c,2,c4fb9b00,0) at m_prepend+0xae
sendit(c537c900,4737e607,e778ec58,286f8a11,c4e3f5d0) at sendit+0x107
osendmsg(c537c900,e778ed04,c537c900,0,2) at osendmsg+0x5a
syscall(2805003b,bfbf003b,bfbf003b,28050288,bfbfebdc) at syscall+0x27e
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (114, FreeBSD ELF32, osendmsg), eip = 0x2809b7f5, esp = 0xbfbfea40, ebp = 0xbfbfea88 ---
db> call doadump
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc046a7b3 in db_fncall (dummy1=0xc09c0100, dummy2=0x0, dummy3=0x0, dummy4=0xe778e9f0 "\034x4$\177\bx\fx\220\a")
    at ../../../ddb/db_command.c:489
#2  0xc046a5b8 in db_command (last_cmdp=0xc092ef64, cmd_table=0x0, aux_cmd_tablep=0xc08a9038, aux_cmd_tablep_end=0xc08a9054)
    at ../../../ddb/db_command.c:404
#3  0xc046a680 in db_command_loop () at ../../../ddb/db_command.c:455
#4  0xc046c299 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#5  0xc066b720 in kdb_trap (type=0x3, code=0x0, tf=0xe778eb88) at ../../../kern/subr_kdb.c:485
#6  0xc0810664 in trap (frame=
      {tf_fs = 0xe7780008, tf_es = 0xc0660028, tf_ds = 0xc0870028, tf_edi = 0xc0883f42, tf_esi = 0x1, tf_ebp = 0xe778ebc8, tf_isp = 0xe778ebb4, tf_ebx = 0xe778ebf4, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc066b427, tf_cs = 0x20, tf_eflags = 0x282, tf_esp = 0xe778ebe8, tf_ss = 0xc06514f3}) at ../../../i386/i386/trap.c:614
#7  0xc07fd51a in calltrap () at ../../../i386/i386/exception.s:137
#8  0xc066b427 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60
#9  0xc06514f3 in panic (fmt=0xc0883f42 "%s: MH_ALIGN not PKTHDR mbuf") at ../../../kern/kern_shutdown.c:549
#10 0xc068a302 in m_prepend (m=0xc4fb9a00, len=0xc, how=0xc1033000) at ../../../kern/uipc_mbuf.c:499
#11 0xc069294f in sendit (td=0xc537c900, s=0x4737e607, mp=0xe778ec58, flags=0x286f8a11) at ../../../kern/uipc_syscalls.c:696
#12 0xc0692cb6 in osendmsg (td=0xc537c900, uap=0xe778ed04) at ../../../kern/uipc_syscalls.c:888
#13 0xc0810ece in syscall (frame=
      {tf_fs = 0x2805003b, tf_es = 0xbfbf003b, tf_ds = 0xbfbf003b, tf_edi = 0x28050288, tf_esi = 0xbfbfebdc, tf_ebp = 0xbfbfea88, tf_isp = 0xe778ed64, tf_ebx = 0x9, tf_edx = 0x0, tf_ecx = 0x8049150, tf_eax = 0x72, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x2809b7f5, tf_cs = 0x33, tf_eflags = 0x293, tf_esp = 0xbfbfea40, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:1008
#14 0xc07fd56f in Xint0x80_syscall () at ../../../i386/i386/exception.s:190
(kgdb) f 12
#12 0xc0692cb6 in osendmsg (td=0xc537c900, uap=0xe778ed04) at ../../../kern/uipc_syscalls.c:888
888             error = sendit(td, uap->s, &msg, uap->flags);
(kgdb) info loc
msg = {msg_name = 0x0, msg_namelen = 0x0, msg_iov = 0xc4e3f5d0, msg_iovlen = 0x0, msg_control = 0x2806f2bc, msg_controllen = 0x0,
  msg_flags = 0x8000}
iov = (struct iovec *) 0xc4e3f5d0
error = 0x0