-current panics with mount_null(8)

[Kouichirou Hiratsuka <hira%po6.nsk.ne.jp@localhost>]

Hello,

Today's -current panics with mount_null(8).

> boot -s
# mount /
# mount /usr
# mount /work
# mount -t null /work/NetBSD/src /usr/src
(panic)

Here is a backtrace.

# gdb netbsd.gdb
GNU gdb 6.5
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386--netbsdelf"...
(gdb) target kvm netbsd.1.core
#0  0xc046cee2 in cpu_reboot (howto=256, bootstr=0x0)
    at /usr/src/sys/arch/i386/i386/machdep.c:885
885                     dumpsys();
(gdb) bt
#0  0xc046cee2 in cpu_reboot (howto=256, bootstr=0x0)
    at /usr/src/sys/arch/i386/i386/machdep.c:885
#1  0xc01c8f79 in db_sync_cmd (addr=-1066569371, have_addr=false, 
    count=-1066569376, modif=0xccd82690 
"$(D*"(B&$(D),*@(Bcqm$(D*"(Bdqm$(D*"(Bc")
    at /usr/src/sys/ddb/db_command.c:1359
#2  0xc01c9598 in db_command (last_cmdp=0xc0677c3c)
    at /usr/src/sys/ddb/db_command.c:921
#3  0xc01c98ef in db_command_loop () at /usr/src/sys/ddb/db_command.c:566
#4  0xc01cc800 in db_trap (type=1, code=0) at /usr/src/sys/ddb/db_trap.c:101
#5  0xc04681f0 in kdb_trap (type=1, code=0, regs=0xccd828bc)
    at /usr/src/sys/arch/i386/i386/db_interface.c:231
#6  0xc04711d5 in trap (frame=0xccd828bc)
    at /usr/src/sys/arch/i386/i386/trap.c:346
#7  0xc010cdc8 in calltrap ()
#8  0xc04668bc in breakpoint ()
#9  0xc03dd9a0 in panic (fmt=0xc062fffd "lock error")
    at /usr/src/sys/kern/subr_prf.c:257
#10 0xc03d821d in lockdebug_abort (lock=0xccd3f4ac, ops=0xc06805b0, 
    func=0xc05c9344 "rw_vector_enter", msg=0xc062e0d9 "locking against myself")
    at /usr/src/sys/kern/subr_lockdebug.c:864
#11 0xc03bf37a in rw_abort (rw=0x1, func=<value optimized out>, msg=0x0)
    at /usr/src/sys/kern/kern_rwlock.c:197
#12 0xc03bf96a in rw_vector_enter (rw=0xccd3f4ac, op=RW_READER)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/kern/kern_rwlock.c:354
#13 0xc0412c84 in vfs_busy (mp=0xccd3f484, op=RW_READER)
    at /usr/src/sys/kern/vfs_subr.c:305
#14 0xc0412ed2 in getnewvnode (tag=VT_NULL, mp=0xccd3f484, vops=0xc262ca00, 
    vpp=0xccd82aac) at /usr/src/sys/kern/vfs_subr.c:506
#15 0xc0424568 in layer_node_alloc (mp=0xccd3f484, lowervp=0xcb95d8f8, 
    vpp=0xccd82aec) at /usr/src/sys/miscfs/genfs/layer_subr.c:212
#16 0xc042451c in layer_node_create (mp=0xccd3f484, lowervp=0xcb95d8f8, 
    newvpp=0xccd82b7c) at /usr/src/sys/miscfs/genfs/layer_subr.c:331
#17 0xc02d64c2 in nullfs_mount (mp=0xccd3f484, 
    path=0xbfbfe588 <Address 0xbfbfe588 out of bounds>, data=0xc28bf400, 
    data_len=0xccd82ce0) at /usr/src/sys/miscfs/nullfs/null_vfsops.c:176
#18 0xc0414eb4 in VFS_MOUNT (mp=0xccd3f484, 
    a=0xbfbfe588 <Address 0xbfbfe588 out of bounds>, b=0xc28bf400, 
    c=0xccd82ce0) at /usr/src/sys/kern/vfs_subr2.c:1035
#19 0xc041b08a in do_sys_mount (l=0xccd5ea40, vfsops=0xc067c9e0, 
    type=0x8048d12 <Address 0x8048d12 out of bounds>, 
    path=0xbfbfe588 <Address 0xbfbfe588 out of bounds>, flags=0, 
    data=0xbfbfed88, data_seg=UIO_USERSPACE, data_len=112, retval=0xccd82d28)
    at /usr/src/sys/kern/vfs_syscalls.c:358
#20 0xc041b419 in sys___mount50 (l=0xccd5ea40, uap=0xccd82d00, 
    retval=0xccd82d28) at /usr/src/sys/kern/vfs_syscalls.c:460
#21 0xc0470cd0 in syscall (frame=0xccd82d48)
---Type <return> to continue, or q <return> to quit---
    at /usr/src/sys/arch/i386/i386/syscall.c:102
#22 0xc0100514 in syscall1 ()
(gdb)

best regards.
-- 
 Kouichirou Hiratsuka
   hira%po6.nsk.ne.jp@localhost