GENERIC 6.0-BETA5 from Sep 26 20:40 UTC, vmcore.37

KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-BETA5 #6: Mon Sep 26 22:57:39 CEST 2005
    pho@crashbox.osted.lan:/usr/src/sys/i386/compile/Generic
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.81-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf24  Stepping = 4
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
  Hyperthreading: 2 logical CPUs
real memory  = 1073676288 (1023 MB)
avail memory = 1041612800 (993 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
fxp0: link state changed to UP
panic: spec nodes went here
cpuid = 0
KDB: enter: panic
[thread pid 101 tid 100099 ]
Stopped at      kdb_enter+0x2b: nop
db> where
Tracing pid 101 tid 100099 td 0xc239e000
kdb_enter(c0876248) at kdb_enter+0x2b
panic(c0888d70,c090b920,e514cb18,e514cb08,c0822c9d) at panic+0x14b
ffsext_strategy(e514cb18) at ffsext_strategy+0x68
VOP_STRATEGY_APV(c090b920,e514cb18) at VOP_STRATEGY_APV+0x51
bufstrategy(c39c42e0,d647b868) at bufstrategy+0x28
bufwrite(d647b868) at bufwrite+0xf4
vfs_bio_awrite(d647b868,1b,1,c239e000,c273b000) at vfs_bio_awrite+0x203
flushbufqueues(0) at flushbufqueues+0x443
buf_daemon(0,e514cd38) at buf_daemon+0xe7
fork_exit(c06852dc,0,e514cd38) at fork_exit+0x71
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xe514cd6c, ebp = 0 ---
db> call doadump
Dumping 1023 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

#0  doadump () at pcpu.h:165
165             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
(kgdb) bt
#0  doadump () at pcpu.h:165
#1  0xc0468dc7 in db_fncall (dummy1=0x0, dummy2=0x0, dummy3=0x0, dummy4=0xe514c93c "hÉ\024åXA\177ÀTÉ\024åXÉ\024å\220\a")
    at ../../../ddb/db_command.c:489
#2  0xc0468bcc in db_command (last_cmdp=0xc091b2c4, cmd_table=0x0, aux_cmd_tablep=0xc089884c, aux_cmd_tablep_end=0xc0898868)
    at ../../../ddb/db_command.c:349
#3  0xc0468c94 in db_command_loop () at ../../../ddb/db_command.c:455
#4  0xc046a849 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#5  0xc06568ec in kdb_trap (type=0x3, code=0x0, tf=0xe514ca80) at ../../../kern/subr_kdb.c:473
#6  0xc0812048 in trap (frame=
      {tf_fs = 0xe5140008, tf_es = 0xc0650028, tf_ds = 0xc0870028, tf_edi = 0xc0888d70, tf_esi = 0x1, tf_ebp = 0xe514cac0, tf_isp = 0xe514caac, tf_ebx = 0xe514caec, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc0656653, tf_cs = 0x20, tf_eflags = 0x296, tf_esp = 0xe514cae0, tf_ss = 0xc063d5b7}) at ../../../i386/i386/trap.c:601
#7  0xc07ff0fa in calltrap () at ../../../i386/i386/exception.s:139
#8  0xc0656653 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60
#9  0xc063d5b7 in panic (fmt=0xc0888d70 "spec nodes went here") at ../../../kern/kern_shutdown.c:549
#10 0xc078f6b8 in ffsext_strategy (ap=0xe514cb18) at ../../../ufs/ffs/ffs_vnops.c:1245
#11 0xc0822c9d in VOP_STRATEGY_APV (vop=0xc090b920, a=0xe514cb18) at vnode_if.c:1796
#12 0xc0688744 in bufstrategy (bo=0xc39c42e0, bp=0x12) at vnode_if.h:928
#13 0xc0683074 in bufwrite (bp=0xd647b868) at buf.h:415
#14 0xc0684b1f in vfs_bio_awrite (bp=0xd647b868) at buf.h:399
#15 0xc06858cf in flushbufqueues (flushdeps=0x0) at ../../../kern/vfs_bio.c:2107
#16 0xc06853c3 in buf_daemon () at ../../../kern/vfs_bio.c:1981
#17 0xc0627545 in fork_exit (callout=0xc06852dc <buf_daemon>, arg=0x0, frame=0xe514cd38) at ../../../kern/kern_fork.c:789
#18 0xc07ff15c in fork_trampoline () at ../../../i386/i386/exception.s:208
(kgdb) f 10
#10 0xc078f6b8 in ffsext_strategy (ap=0xe514cb18) at ../../../ufs/ffs/ffs_vnops.c:1245
1245            panic("spec nodes went here");
(kgdb) l
1240            if (VTOI(vp)->i_fs->fs_magic == FS_UFS2_MAGIC &&
1241                lbn < 0 && lbn >= -NXADDR)
1242             return (VOP_STRATEGY_APV(&ufs_vnodeops, ap));
1243            if (vp->v_type == VFIFO)
1244             return (VOP_STRATEGY_APV(&ufs_fifoops, ap));
1245            panic("spec nodes went here");
1246    }
1247
1248    /*
1249     * Vnode extattr transaction commit/abort
(kgdb) info loc
vp = (struct vnode *) 0xc39c4220
lbn = Unhandled dwarf expression opcode 0x93
(kgdb) p *vp
$1 = {v_type = VDIR, v_tag = 0xc0879920 "ufs", v_op = 0xc090b920, v_data = 0xc39b8e70, v_mount = 0xc273b000, v_nmntvnodes = {
    tqe_next = 0xc395d880, tqe_prev = 0xc39c4344}, v_un = {vu_mount = 0x0, vu_socket = 0x0, vu_cdev = 0x0, vu_fifoinfo = 0x0},
  v_hashlist = {le_next = 0x0, le_prev = 0xc253f1d8}, v_hash = 0x2e6c9, v_cache_src = {lh_first = 0x0}, v_cache_dst = {
    tqh_first = 0xc3952d48, tqh_last = 0xc3952d58}, v_dd = 0xc39db000, v_cstart = 0x0, v_lasta = 0x0, v_lastw = 0x0, v_clen = 0x0,
  v_lock = {lk_interlock = 0xc09331c8, lk_flags = 0x40040, lk_sharecount = 0x0, lk_waitcount = 0x0, lk_exclusivecount = 0x1,
    lk_prio = 0x50, lk_wmesg = 0xc0879920 "ufs", lk_timo = 0x33, lk_lockholder = 0xc239e000, lk_newlock = 0x0}, v_interlock = {
    mtx_object = {lo_class = 0xc08d23a4, lo_name = 0xc087ae5d "vnode interlock", lo_type = 0xc087ae5d "vnode interlock",
      lo_flags = 0x30000, lo_list = {tqe_next = 0x0, tqe_prev = 0x0}, lo_witness = 0x0}, mtx_lock = 0x4, mtx_recurse = 0x0},
  v_vnlock = 0xc39c4278, v_holdcnt = 0x2, v_usecount = 0x1, v_iflag = 0x0, v_vflag = 0x4, v_writecount = 0x0, v_freelist = {
    tqe_next = 0xc39c1770, tqe_prev = 0xc39d0608}, v_bufobj = {bo_mtx = 0xc39c429c, bo_clean = {bv_hd = {tqh_first = 0xd647b868,
        tqh_last = 0xd647b8a0}, bv_root = 0xd647b868, bv_cnt = 0x1}, bo_dirty = {bv_hd = {tqh_first = 0x0, tqh_last = 0xc39c42f4},
      bv_root = 0x0, bv_cnt = 0x0}, bo_numoutput = 0x1, bo_flag = 0x0, bo_ops = 0xc08d8624, bo_bsize = 0x4000, bo_object = 0x0,
    bo_synclist = {le_next = 0xc379b610, le_prev = 0xc39db0f8}, bo_private = 0xc39c4220, __bo_vnode = 0xc39c4220}, v_pollinfo = 0x0,
  v_label = 0x0}