kern/46400: kernel crash (ptsopen ... kauth_cred_getdata -> specificdata_getspecific -> mutex_vector_enter)

[cheusov%tut.by@localhost]

>Number:         46400
>Category:       kern
>Synopsis:       kernel crash (ptsopen ... kauth_cred_getdata -> 
>specificdata_getspecific -> mutex_vector_enter)
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed May 02 13:25:00 +0000 2012
>Originator:     Aleksey Cheusov
>Release:        NetBSD 6.0_BETA
>Organization:
>Environment:
System: NetBSD work.imb.invention.com 6.0_BETA NetBSD 6.0_BETA (GENERIC) #6: 
Fri Apr 6 20:00:44 FET 2012 
cheusov%work.imb.invention.com@localhost:/srv/obj-current/sys/arch/i386/compile/GENERIC
 i386
Architecture: i386
Machine: i386
>Description:
If LOCKDEBUG option is enabled,
starting the xterm or mrxvt crashes the 6.0_BETA kernel.

Stacktrace is below

#3  0xc07a638f in panic (fmt=0xc0beed3b "LOCKDEBUG") at 
/srv/src_netbsd6/sys/kern/subr_prf.c:205
#4  0xc079de44 in lockdebug_abort1 (ld=0xc32058c0, s=6, func=0xc0b3e9b4 
"lockdebug_barrier", msg=0xc0beeddc "spin lock held", dopanic=true) at 
/srv/src_netbsd6/sys/kern/subr_lockdebug.c:784
#5  0xc054327a in mutex_vector_enter (mtx=0xc6ddd820) at 
/srv/src_netbsd6/sys/kern/kern_mutex.c:498
#6  0xc07a7852 in specificdata_getspecific (sd=0xc310f000, ref=0xc6ddd81c, 
key=0) at /srv/src_netbsd6/sys/kern/subr_specificdata.c:316
#7  0xc05266a2 in kauth_cred_getdata (cred=0xc6ddd780, key=0xc30fc030) at 
/srv/src_netbsd6/sys/kern/kern_auth.c:554
#8  0xc0e302ad in ?? ()
#9  0xc0525bbd in kauth_authorize_action_internal (scope=0xc58b0a00, 
cred=0xc6ddd780, action=1, arg0=0xc58b0a00, arg1=0x0, arg2=0x0, arg3=0x0) at 
/srv/src_netbsd6/sys/kern/kern_auth.c:968
#10 0xc05270f5 in kauth_authorize_action (scope=0xc31100f0, cred=0xc6ddd780, 
action=1, arg0=0xc58b0a00, arg1=0x0, arg2=0x0, arg3=0x0) at 
/srv/src_netbsd6/sys/kern/kern_auth.c:993
#11 0xc05278a6 in kauth_authorize_device_tty (cred=0xc6ddd780, action=1, 
tty=0xc58b0a00) at /srv/src_netbsd6/sys/kern/kern_auth.c:1071
#12 0xc0809538 in ptsopen (dev=1281, flag=2, devtype=8192, l=0xc5970d20) at 
/srv/src_netbsd6/sys/kern/tty_pty.c:348
#13 0xc07960fd in cdev_open (dev=1281, flag=2, devtype=8192, l=0xc5970d20) at 
/srv/src_netbsd6/sys/kern/subr_devsw.c:835
#14 0xc077e0f0 in spec_open (v=0xf0f329a4) at 
/srv/src_netbsd6/sys/miscfs/specfs/spec_vnops.c:446
#15 0xc08e1184 in VOP_OPEN (vp=0xc496b6e0, mode=2, cred=0xffffffff) at 
/srv/src_netbsd6/sys/kern/vnode_if.c:234
#16 0xc080a231 in cttyopen (dev=256, flag=2, mode=8192, l=0xc5970d20) at 
/srv/src_netbsd6/sys/kern/tty_tty.c:77
#17 0xc07960fd in cdev_open (dev=256, flag=2, devtype=8192, l=0xc5970d20) at 
/srv/src_netbsd6/sys/kern/subr_devsw.c:835
#18 0xc077e0f0 in spec_open (v=0xf0f32ad4) at 
/srv/src_netbsd6/sys/miscfs/specfs/spec_vnops.c:446
#19 0xc08e1166 in VOP_OPEN (vp=0xc39bdd10, mode=2, cred=0xc6ddd780) at 
/srv/src_netbsd6/sys/kern/vnode_if.c:234
#20 0xc08c296c in vn_open (ndp=0xf0f32bfc, fmode=2, cmode=0) at 
/srv/src_netbsd6/sys/kern/vfs_vnops.c:230
#21 0xc08b9bf2 in do_open (l=0xc5970d20, pb=<optimized out>, open_flags=1, 
open_mode=0, fd=0xf0f32c7c) at /srv/src_netbsd6/sys/kern/vfs_syscalls.c:1508
#22 0xc08bbbfc in sys_open (l=0xc5970d20, uap=0xf0f32cf4, retval=0xf0f32d1c) at 
/srv/src_netbsd6/sys/kern/vfs_syscalls.c:1577
#23 0xc07c1b4d in sy_call (rval=0xf0f32d1c, uap=0xf0f32cf4, l=0xc5970d20, 
sy=0xc0c8473c) at /srv/src_netbsd6/sys/sys/syscallvar

>How-To-Repeat:
mk.conf:
   USE_SSP=yes
GENERIC:
   options        LOCKDEBUG
   options        DEBUG
   makeoptions    DEBUG="-g"

Start xterm or mrxvt in X11.

>Fix:

Unknown