GENERIC HEAD from Mar 25 12:55 UTC, vmcore.506
Insufficient parameter validation.

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 7.0-CURRENT #2: Sat Mar 25 15:28:50 CET 2006
    pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I  OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.14-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf13  Stepping = 3
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory  = 267583488 (255 MB)
avail memory = 252137472 (240 MB)
:
Trying to mount root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
rl0: link state changed to DOWN
panic: m_prepend: MH_ALIGN not PKTHDR mbuf
cpuid = 0
KDB: enter: panic
[thread pid 1118 tid 100169 ]
Stopped at      kdb_enter+0x2b: nop
db> where
Tracing pid 1118 tid 100169 td 0xc2783510
kdb_enter(c089bf32) at kdb_enter+0x2b
panic(c08a2d42,c0851313,0,e,0) at panic+0x14b
m_prepend(c23c4c00,c,2,c23c4c00,0) at m_prepend+0xae
sendit(c2783510,d937a968,cd43bc5c,7ba38d14,c22d4790) at sendit+0x107
osendmsg(c2783510,cd43bd04,c2783510,cd43bca8,c067b675) at osendmsg+0x5a
syscall(2805003b,bfbf003b,bfbf003b,2805188c,bfbfebc8) at syscall+0x27e
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (114, FreeBSD ELF32, osendmsg), eip = 0x280a4355, esp = 0xbfbfea30, ebp = 0xbfbfea78 ---
db> show pcpu
cpuid        = 0
curthread    = 0xc2783510: pid 1118 "syscall"
curpcb       = 0xcd43bd90
fpcurthread  = none
idlethread   = 0xc21bd510: pid 10 "idle: cpu0"
APIC ID      = 0
currentldt   = 0x50
spin locks held:
db> call doadump
Dumping 254 MB (2 chunks)
  chunk 0: 1MB (159 pages) ... ok
  chunk 1: 255MB (65072 pages) 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15 ... ok

Dump complete
= 0xf
db> reset

(kgdb) bt
#0  doadump () at pcpu.h:166
#1  0xc046bfa7 in db_fncall (dummy1=0xcd43ba24, dummy2=0x0, dummy3=0xc09e8a40, dummy4=0xcd43ba00 "\020ºCÍ\024ºCÍ\220\a")
    at ../../../ddb/db_command.c:479
#2  0xc046bdb8 in db_command (last_cmdp=0xc0950164, cmd_table=0x0) at ../../../ddb/db_command.c:395
#3  0xc046be76 in db_command_loop () at ../../../ddb/db_command.c:446
#4  0xc046da8d in db_trap (type=0x3, code=0x0) at ../../../ddb/db_main.c:228
#5  0xc0682cbc in kdb_trap (type=0x3, code=0x0, tf=0xcd43bb8c) at ../../../kern/subr_kdb.c:485
#6  0xc0824e10 in trap (frame=
      {tf_fs = 0xcd430008, tf_es = 0xc0680028, tf_ds = 0xc0890028, tf_edi = 0xc08a2d42, tf_esi = 0x1, tf_ebp = 0xcd43bbcc, tf_isp = 0xcd43bbb8, tf_ebx = 0xcd43bbf8, tf_edx = 0x0, tf_ecx = 0xc1033000, tf_eax = 0x12, tf_trapno = 0x3, tf_err = 0x0, tf_eip = 0xc06829c3, tf_cs = 0x20, tf_eflags = 0x286, tf_esp = 0xcd43bbec, tf_ss = 0xc066825b}) at ../../../i386/i386/trap.c:622
#7  0xc081130a in calltrap () at ../../../i386/i386/exception.s:137
#8  0xc06829c3 in kdb_enter (msg=0x12 <Address 0x12 out of bounds>) at cpufunc.h:60
#9  0xc066825b in panic (fmt=0xc08a2d42 "%s: MH_ALIGN not PKTHDR mbuf") at ../../../kern/kern_shutdown.c:552
#10 0xc06a2c72 in m_prepend (m=0xc23c6400, len=0xc, how=0xc1033000) at ../../../kern/uipc_mbuf.c:500
#11 0xc06ab9fb in sendit (td=0xc2783510, s=0xd937a968, mp=0xcd43bc5c, flags=0x7ba38d14) at ../../../kern/uipc_syscalls.c:696
#12 0xc06abd62 in osendmsg (td=0xc2783510, uap=0xcd43bd04) at ../../../kern/uipc_syscalls.c:888
#13 0xc0825676 in syscall (frame=
      {tf_fs = 0x2805003b, tf_es = 0xbfbf003b, tf_ds = 0xbfbf003b, tf_edi = 0x2805188c, tf_esi = 0xbfbfebc8, tf_ebp = 0xbfbfea78, tf_isp = 0xcd43bd64, tf_ebx = 0x9, tf_edx = 0x0, tf_ecx = 0x8049150, tf_eax = 0x72, tf_trapno = 0x0, tf_err = 0x2, tf_eip = 0x280a4355, tf_cs = 0x33, tf_eflags = 0x246, tf_esp = 0xbfbfea30, tf_ss = 0x3b}) at ../../../i386/i386/trap.c:1016
#14 0xc081135f in Xint0x80_syscall () at ../../../i386/i386/exception.s:190
#15 0x00000033 in ?? ()
(kgdb) f 12
#12 0xc06abd62 in osendmsg (td=0xc2783510, uap=0xcd43bd04) at ../../../kern/uipc_syscalls.c:888
888             error = sendit(td, uap->s, &msg, uap->flags);
(kgdb) l
883             error = copyiniov(msg.msg_iov, msg.msg_iovlen, &iov, EMSGSIZE);
884             if (error)
885                     return (error);
886             msg.msg_iov = iov;
887             msg.msg_flags = MSG_COMPAT;
888             error = sendit(td, uap->s, &msg, uap->flags);
889             free(iov, M_IOV);
890             return (error);
891     }
892     #endif
(kgdb) p msg
$4 = {msg_name = 0x0, msg_namelen = 0x4e000, msg_iov = 0xc22d4790, msg_iovlen = 0x0, msg_control = 0x44e00, msg_controllen = 0x0,
  msg_flags = 0x8000}