kern/53004: union_lookup returning . (0xbc332e90) not same as startdir (0xc1fa8a40)

[Marc G.Fournier]

>Number:         53004
>Category:       kern
>Synopsis:       union_lookup returning . (0xbc332e90) not same as startdir (0xc1fa8a40)
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jun 06 20:10:07 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Marc G. Fournier
>Release:        FreeBSD 4.8-STABLE i386
>Organization:
Hub.Org Networking Services (http://www.hub.org)
>Environment:
System: FreeBSD hub.org 4.8-STABLE FreeBSD 4.8-STABLE #1: Sat May 31 22:57:04 ADT 2003 root at pluto.hub.org:/usr/obj/usr/src/sys/kernel i386


	
>Description:

Script started on Sat Jun  7 00:03:16 2003
jupiter# gdb -k kernel.debug vmcore.1
<copyright text deleted>
SMP 2 cpus
IdlePTD at phsyical address 0x0033c000
initial pcb at physical address 0x002adfa0
panicstr: union_lookup returning . (0xbc332e90) not same as startdir (0xc1fa8a40)
panic messages:
---
panic: union_lookup returning . (0xbc332e90) not same as startdir (0xc1fa8a40)
mp_lock = 01000001; cpuid = 1; lapic.id = 00000000
boot() called on cpu#1

syncing disks... 2 
done
Uptime: 13h15m28s

<dumping to ... deleted>
---
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
487		if (dumping++) {
(kgdb) where
#0  dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487
#1  0x80150d9b in boot (howto=256) at /usr/src/sys/kern/kern_shutdown.c:316
#2  0x8015120d in panic (fmt=0x8025c2a0 "union_lookup returning . (%p) not same as startdir (%p)") at /usr/src/sys/kern/kern_shutdown.c:595
#3  0x8018eee4 in union_lookup (ap=0xbc332e00) at /usr/src/sys/miscfs/union/union_vnops.c:615
#4  0x8017dac5 in lookup (ndp=0xbc332e7c) at vnode_if.h:52
#5  0x8017d5c0 in namei (ndp=0xbc332e7c) at /usr/src/sys/kern/vfs_lookup.c:153
#6  0x80183921 in lstat (p=0xbc28ed40, uap=0xbc332f80) at /usr/src/sys/kern/vfs_syscalls.c:1824
#7  0x8023da35 in syscall2 (frame={tf_fs = 47, tf_es = 47, tf_ds = 47, tf_edi = 134554112, tf_esi = 2143288252, tf_ebp = 2143279584, tf_isp = -1137496108, 
      tf_ebx = 2143281760, tf_edx = 134548962, tf_ecx = 990, tf_eax = 190, tf_trapno = 12, tf_err = 2, tf_eip = 673051168, tf_cs = 31, tf_eflags = 518, tf_esp = 2143279444, 
      tf_ss = 47}) at /usr/src/sys/i386/i386/trap.c:1175
#8  0x8022af5b in Xint0x80_syscall ()
cannot read proc at 0
(kgdb) up 3
#3  0x8018eee4 in union_lookup (ap=0xbc332e00) at /usr/src/sys/miscfs/union/union_vnops.c:615
615			panic("union_lookup returning . (%p) not same as startdir (%p)", ap->a_vpp, dvp);
(kgdb) list
610	
611	#ifdef DIAGNOSTIC
612		if (cnp->cn_namelen == 1 &&
613		    cnp->cn_nameptr[0] == '.' &&
614		    *ap->a_vpp != dvp) {
615			panic("union_lookup returning . (%p) not same as startdir (%p)", ap->a_vpp, dvp);
616		}
617	#endif
618	
619		return (error);
(kgdb) print @ *ap
$1 = {a_desc = 0x80279880, a_dvp = 0xc1fa8a40, a_vpp = 0xbc332e90, a_cnp = 0xbc332ea4}
(kgdb) print ap->a_vpp
$2 = (struct vnode **) 0xbc332e90
(kgdb) print dvp
$3 = (struct vnode *) 0xc1fa8a40
(kgdb) quit
jupiter# exit
exit

Script done on Sat Jun  7 00:04:05 2003

If there is more out of hte vmcore that I can provide, please ask ...

>How-To-Repeat:

  there is alot running on the machine, so it could be pretty much anything,
but I had just typed in pkg_delete -f <pkg> when it crashed ... may or may
not be related ...

>Fix:

	


>Release-Note:
>Audit-Trail:
>Unformatted: