GENERIC 7.0-CURRENT from Dec 18 15:25 UTC, vmcore.32 Missing parameter validation? KDB: debugger backends: ddb KDB: current backend: ddb Copyright (c) 1992-2005 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 7.0-CURRENT #42: Sun Dec 18 16:37:34 CET 2005 pho@crashbox.osted.lan:/usr/src/sys/i386/compile/PHO WARNING: WITNESS option enabled, expect reduced performance. ACPI APIC Table: <A M I OEMAPIC > Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) XEON(TM) CPU 1.80GHz (1799.80-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf24 Stepping = 4 Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM> Logical CPUs per core: 2 real memory = 1073676288 (1023 MB) avail memory = 1040891904 (992 MB) : Trying to mount root from ufs:/dev/ad0s1a fxp0: link state changed to UP panic: m_prepend: MH_ALIGN not PKTHDR mbuf cpuid = 2 KDB: enter: panic [thread pid 638 tid 100151 ] Stopped at kdb_enter+0x2b: nop db> where Tracing pid 638 tid 100151 td 0xc537c900 kdb_enter(c087d644) at kdb_enter+0x2b panic(c0883f42,c08344e3,0,e,0) at panic+0x14b m_prepend(c4fb9b00,c,2,c4fb9b00,0) at m_prepend+0xae sendit(c537c900,4737e607,e778ec58,286f8a11,c4e3f5d0) at sendit+0x107 osendmsg(c537c900,e778ed04,c537c900,0,2) at osendmsg+0x5a syscall(2805003b,bfbf003b,bfbf003b,28050288,bfbfebdc) at syscall+0x27e Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (114, FreeBSD ELF32, osendmsg), eip = 0x2809b7f5, esp = 0xbfbfea40, ebp = 0xbfbfea88 --- db> call doadump Dumping 1023 MB (2 chunks) chunk 0: 1MB (159 pages) ... ok chunk 1: 1023MB (261872 pages) 1007 991 975 959 943 927 911 895 879 863 847 831 815 799 783 767 751 735 719 703 687 671 655 639 623 607 591 575 559 543 527 511 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok Dump complete = 0xf db> reset (kgdb) bt #0 doadump () at pcpu.h:165 #1 0xc046a7b3 in db_fncall (dummy1=0xc09c0100, dummy2=0x0, dummy3=0x0, dummy4=0xe778e9f0 "\034êxç4$\177À\bêxç\fêxç\220\a") at ../../../ddb/db_command.c:489 #2 0xc046a5b8 in db_command (last_cmdp=0xc092ef64, cmd_table=0x0, aux_cmd_tablep=0xc08a9038, aux_cmd_tablep_end=0xc08a9054) at ../../../ddb/db_command.c:404 #3 0xc046a680 in db_command_loop () at ../../../ddb/db_command.c:455 #4 0xc046c299 in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228 #5 0xc066b720 in kdb_trap (type=0x3, code=0x0, tf=0xe778eb88) at ../../../kern/subr_kdb.c:485 #6 0xc0810664 in trap (frame= {tf_fs = 0xe7780008, tf_es = 0xc0660028, tf_ds = 0xc0870028, tf_edi = 0xc0883f42, tf_esi = 0x1, tf_ebp = 0xe778ebc8, tf_isp = 0xe778ebb4, tf_ebx = 0xe778ebf4, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc066b427, tf_cs = 0x20, tf_eflags = 0x282, tf_esp = 0xe778ebe8, tf_ss = 0xc06514f3}) at ../../../i386/i386/trap.c:614 #7 0xc07fd51a in calltrap () at ../../../i386/i386/exception.s:137 #8 0xc066b427 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60 #9 0xc06514f3 in panic (fmt=0xc0883f42 "%s: MH_ALIGN not PKTHDR mbuf") at ../../../kern/kern_shutdown.c:549 #10 0xc068a302 in m_prepend (m=0xc4fb9a00, len=0xc, how=0xc1033000) at ../../../kern/uipc_mbuf.c:499 #11 0xc069294f in sendit (td=0xc537c900, s=0x4737e607, mp=0xe778ec58, flags=0x286f8a11) at ../../../kern/uipc_syscalls.c:696 #12 0xc0692cb6 in osendmsg (td=0xc537c900, uap=0xe778ed04) at ../../../kern/uipc_syscalls.c:888 #13 0xc0810ece in syscall (frame= {tf_fs = 0x2805003b, tf_es = 0xbfbf003b, tf_ds = 0xbfbf003b, tf_edi = 0x28050288, tf_esi = 0xbfbfebdc, tf_ebp = 0xbfbfea88, tf_isp = 0xe778ed64, tf_ebx = 0x9, tf_edx = 0x0, tf_ecx = 0x8049150, tf_eax = 0x72, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x2809b7f5, tf_cs = 0x33, tf_eflags = 0x293, tf_esp = 0xbfbfea40, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:1008 #14 0xc07fd56f in Xint0x80_syscall () at ../../../i386/i386/exception.s:190 (kgdb) f 12 #12 0xc0692cb6 in osendmsg (td=0xc537c900, uap=0xe778ed04) at ../../../kern/uipc_syscalls.c:888 888 error = sendit(td, uap->s, &msg, uap->flags); (kgdb) info loc msg = {msg_name = 0x0, msg_namelen = 0x0, msg_iov = 0xc4e3f5d0, msg_iovlen = 0x0, msg_control = 0x2806f2bc, msg_controllen = 0x0, msg_flags = 0x8000} iov = (struct iovec *) 0xc4e3f5d0 error = 0x0