ext2fs panic with Dfly 1.5.2

[Csaba Henk <csaba.henk@xxxxxxx>]

Hi,

I got the following panic after mounting an ext2 partition,
when doing an "ls" on the mount point.

Regards,
Csaba

Fatal trap 18: integer divide fault while in kernel mode
instruction pointer	= 0x8:0xc041b02c
stack pointer	        = 0x10:0xcaf418ac
frame pointer	        = 0x10:0xcaf418e0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 42 (ls)
current thread          = pri 6 

panic: from debugger


Fatal trap 3: breakpoint instruction fault while in kernel mode
instruction pointer	= 0x8:0xc04a6dee
stack pointer	        = 0x10:0xcaf416b4
frame pointer	        = 0x10:0xcaf416bc
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, def32 1, gran 1
processor eflags	= interrupt enabled, IOPL = 0
current process		= 42 (ls)
current thread          = pri 6 

panic: from debugger
Uptime: 1m38s

dumping to dev #ad/0x50001, offset 1621729
dump ata0: resetting devices .. done
64 63 62 61 60 59 58 57 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 28 27 26 25 24 23 22 21 20 19 18 17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 

GNU gdb 6.2.1
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-dragonfly".
(kgdb) bt
#0  dumpsys () at thread.h:81
#1  0xc02ad166 in boot (howto=260) at /usr/dispatch/src/sys/kern/kern_shutdown.c:365
#2  0xc02ad626 in panic (fmt=0xc0500f2a "from debugger") at /usr/dispatch/src/sys/kern/kern_shutdown.c:679
#3  0xc0162b2a in db_panic (addr=-1069436884, have_addr=0, count=-1, modif=0xcaf41718 "")
    at /usr/dispatch/src/sys/ddb/db_command.c:447
#4  0xc0162abf in db_command (last_cmdp=0xc05b75d0, cmd_table=0x0, aux_cmd_tablep=0xc055a4a4, aux_cmd_tablep_end=0xc055a4bc)
    at /usr/dispatch/src/sys/ddb/db_command.c:343
#5  0xc0162b9f in db_command_loop () at /usr/dispatch/src/sys/ddb/db_command.c:469
#6  0xc016589c in db_trap (type=18, code=0) at /usr/dispatch/src/sys/ddb/db_trap.c:71
#7  0xc04a6a98 in kdb_trap (type=18, code=0, regs=0xcaf4186c) at /usr/dispatch/src/sys/i386/i386/db_interface.c:150
#8  0xc04bb6a5 in trap_fatal (frame=0xcaf4186c, eva=0) at /usr/dispatch/src/sys/i386/i386/trap.c:1199
#9  0xc04bb118 in trap (frame=
      {tf_fs = 24, tf_es = -889978864, tf_ds = -1072103408, tf_edi = 0, tf_esi = -964579904, tf_ebp = -889972512, tf_isp = -889972584, tf_ebx = -889972488, tf_edx = 0, tf_ecx = -1060993916, tf_eax = 0, tf_trapno = 18, tf_err = 0, tf_eip = -1069436884, tf_cs = 8, tf_eflags = 66071, tf_esp = -889890304, tf_ss = 0}) at /usr/dispatch/src/sys/i386/i386/trap.c:858
#10 0xc04a7d7f in calltrap () at /usr/dispatch/src/sys/i386/i386/exception.s:774
#11 0xc041b02c in ufs_bmap (ap=0xcaf418f8) at /usr/dispatch/src/sys/vfs/ufs/ufs_bmap.c:96
#12 0xc0421ac2 in ufs_vnoperate (ap=0x0) at /usr/dispatch/src/sys/vfs/ufs/ufs_vnops.c:2382
#13 0xc03016f7 in vop_bmap (ops=0xc0c28484, vp=0x0, loffset=Unhandled dwarf expression opcode 0x93
) at /usr/dispatch/src/sys/kern/vfs_vopops.c:881
#14 0xc042123e in ufs_strategy (ap=0x0) at /usr/dispatch/src/sys/vfs/ufs/ufs_vnops.c:1778
#15 0xc0421ac2 in ufs_vnoperate (ap=0x0) at /usr/dispatch/src/sys/vfs/ufs/ufs_vnops.c:2382
#16 0xc030172d in vop_strategy (ops=0x0, vp=0xcaf55a00, bio=0xc0c28430) at /usr/dispatch/src/sys/kern/vfs_vopops.c:896
#17 0xc02e7a0f in vn_strategy (vp=0xcaf55a00, bio=0xc0c28484) at /usr/dispatch/src/sys/kern/vfs_bio.c:2786
#18 0xc02e46dc in bread (vp=0xcaf55a00, loffset=Unhandled dwarf expression opcode 0x93
) at /usr/dispatch/src/sys/kern/vfs_bio.c:611
#19 0xc0b0a914 in ?? ()
#20 0xcaf55a00 in ?? ()
#21 0x00000000 in ?? ()
#22 0x00000000 in ?? ()
#23 0x00001000 in ?? ()
#24 0xcaf41a60 in ?? ()
#25 0x00001000 in ?? ()
#26 0xc05f1724 in map_init ()
#27 0xcaf41a6c in ?? ()
#28 0xc02abe9f in kmem_slab_alloc (size=3404995196, align=0, flags=-964720192)
    at /usr/dispatch/src/sys/kern/kern_slaballoc.c:1171
#29 0xc0301244 in vop_read (ops=0x0, vp=0x0, uio=0x0, ioflag=0, cred=0x0) at /usr/dispatch/src/sys/kern/vfs_vopops.c:510
#30 0xc0b06f9e in ?? ()
#31 0xc67f89c0 in ?? ()
#32 0xcaf55a00 in ?? ()
#33 0xcaf41af8 in ?? ()
#34 0x00000000 in ?? ()
#35 0xc0b56120 in ?? ()
#36 0xc4356f00 in ?? ()
#37 0x00000000 in ?? ()
#38 0xcaf55a00 in ?? ()
#39 0x01020002 in ?? ()
#40 0x00020002 in ?? ()
#41 0x00000000 in ?? ()
#42 0x00000000 in ?? ()
#43 0xc0ae3000 in ?? ()
#44 0x01020002 in ?? ()
#45 0x00000000 in ?? ()
#46 0xc0ae3000 in ?? ()
#47 0x00001000 in ?? ()
#48 0xcaf41af0 in ?? ()
#49 0x00000001 in ?? ()
#50 0x00000000 in ?? ()
#51 0x00000000 in ?? ()
#52 0x00001000 in ?? ()
#53 0x00000001 in ?? ()
#54 0x00000000 in ?? ()
#55 0xc4356f00 in ?? ()
#56 0xcaf41c24 in ?? ()
#57 0xc3fdf840 in ?? ()
#58 0xc4356f00 in ?? ()
#59 0xcaf41b60 in ?? ()
#60 0xc03015b3 in vop_readdir (ops=0x0, vp=0x0, uio=0x0, cred=0x0, eofflag=0x0, ncookies=0x0, cookies=0x0)
    at /usr/dispatch/src/sys/kern/vfs_vopops.c:781
#61 0xc03015b3 in vop_readdir (ops=0x0, vp=0x0, uio=0x0, cred=0x0, eofflag=0x0, ncookies=0x0, cookies=0x0)
    at /usr/dispatch/src/sys/kern/vfs_vopops.c:781
#62 0xc02fe79f in kern_getdirentries (fd=0, buf=0x280b1000 <Address 0x280b1000 out of bounds>, count=4096, basep=0xcaf41be8, 
    res=0x0, direction=UIO_USERSPACE) at /usr/dispatch/src/sys/kern/vfs_syscalls.c:2905
#63 0xc02fe8c3 in getdirentries (uap=0xcaf41c24) at /usr/dispatch/src/sys/kern/vfs_syscalls.c:2947
#64 0xc04bba47 in syscall2 (frame=
      {tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 1268, tf_esi = 671793216, tf_ebp = -1077939544, tf_isp = -889971340, tf_ebx = 0, tf_edx = 671793216, tf_ecx = 671793152, tf_eax = 479, tf_trapno = 12, tf_err = 2, tf_eip = 134824764, tf_cs = 31, tf_eflags = 582, tf_esp = -1077939572, tf_ss = 47}) at /usr/dispatch/src/sys/i386/i386/trap.c:1420
#65 0xc04a7e0a in Xint0x80_syscall () at /usr/dispatch/src/sys/i386/i386/exception.s:852
#66 0x0000001f in ?? ()
#67 0x0000002f in ?? ()
#68 0x00000000 in ?? ()
#69 0x00000000 in ?? ()
#70 0x00000000 in ?? ()
#71 0x00000000 in ?? ()
#72 0x0268f000 in ?? ()
#73 0x0000000d in ?? ()
#74 0xc05cc214 in intr_info_ary ()
#75 0xcaf416ec in ?? ()
#76 0xcaf416d4 in ?? ()
#77 0xc4356f00 in ?? ()
#78 0xc02b30d6 in lwkt_preempt (ntd=0xbfbff2a8, critpri=31) at /usr/dispatch/src/sys/kern/lwkt_thread.c:861
Previous frame inner to this frame (corrupt stack?)