kern/47972: iwn panic

[christos%netbsd.org@localhost]

>Number:         47972
>Category:       kern
>Synopsis:       iwn panic
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jun 29 00:40:00 +0000 2013
>Originator:     Christos Zoulas
>Release:        NetBSD 6.99.22
>Organization:
        Bozo the Clown Productions
>Environment:
System: NetBSD quasar.astron.com 6.99.22 NetBSD 6.99.22 (QUASAR) #32: Thu Jun 
27 12:29:09 EDT 2013  
christos%quasar.astron.com@localhost:/usr/src/sys/arch/amd64/compile/QUASAR 
amd64

Architecture: x86_64
Machine: amd64
>Description:
panic: assert_sleepable: Interrupt caller=0xffffffff887a74ab

Here is the backtrace.

crash> bt
_KERNEL_OPT_NARCNET() at 0
_KERNEL_OPT_ACPI_SCANPCI() at _KERNEL_OPT_ACPI_SCANPCI+0x5
db_sifting_cmd() at db_sifting_cmd
db_command() at db_command+0xc7
db_command_loop() at db_command_loop+0xd8
db_trap() at db_trap+0xf3
kdb_trap() at kdb_trap+0x10d
trap() at trap+0x2de
--- trap (number 1) ---
breakpoint() at breakpoint+0x5
vpanic() at vpanic+0x136
printf_nolog() at printf_nolog
assert_sleepable() at assert_sleepable+0xa8
pool_cache_get_paddr() at pool_cache_get_paddr+0x165
kmem_intr_alloc() at kmem_intr_alloc+0x68
kern_malloc() at kern_malloc+0x6e
in6_createmkludge() at in6_createmkludge+0x3e
in6_ifattach() at in6_ifattach+0x86
in6_if_up() at in6_if_up+0x9e
ieee80211_notify_node_join() at ieee80211_notify_node_join+0xf6
ieee80211_newstate() at ieee80211_newstate+0x5a2
iwn_newstate() at iwn_newstate+0x369
ieee80211_recv_mgmt() at ieee80211_recv_mgmt+0x1694
ieee80211_input() at ieee80211_input+0x9f2
iwn_notif_intr() at iwn_notif_intr+0xd42
iwn_intr() at iwn_intr+0x489
intr_biglock_wrapper() at intr_biglock_wrapper+0x1d
Xintr_ioapic_level6() at Xintr_ioapic_level6+0xf2
--- interrupt ---
x86_mwait() at x86_mwait+0xd
acpicpu_cstate_idle_enter() at acpicpu_cstate_idle_enter+0x48
acpicpu_cstate_idle() at acpicpu_cstate_idle+0xbc
idle_loop() at idle_loop+0x196
crash> 


>How-To-Repeat:
>Fix: