kern/49396: reproducable panic on puffs

[martin%NetBSD.org@localhost]

>Number:         49396
>Category:       kern
>Synopsis:       reproducable panic on puffs
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Nov 16 13:10:00 +0000 2014
>Originator:     Martin Husemann
>Release:        NetBSD 7.99.1
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD space-truckin.duskware.de 7.99.1 NetBSD 7.99.1 (CUBIETRUCK) #98: Sun Nov 16 11:22:24 CET 2014 martin%night-owl.duskware.de@localhost:/usr/src/sys/arch/evbarm/compile/CUBIETRUCK evbarm
Architecture: earmv7hfeb
Machine: evbarm
>Description:

Running the resize_ffs test reproducably panics my machine:

uvm_fault(0x805462f8, ffffe000, 1) -> e
Fatal kernel mode data abort: 'Translation Fault (S)'
trapframe: 0xbf109c60                                
FSR=00000005, FAR=fffffffc, spsr=a0070213
r0 =00000001, r1 =e4082000, r2 =00000001, r3 =bf20e3e0
r4 =fffffff0, r5 =be525b80, r6 =bf20e3e0, r7 =be909e00
r8 =bf20e3e0, r9 =805410f8, r10=fffffff0, r11=bf109ccc
r12=bf109cd0, ssp=bf109cb0, slr=80146360, pc =80146378
                                                      
Stopped in pid 13929.1 (tar) at netbsd:mutex_oncpu+0x30:        ldr     r0, [r4,
 #0x00c]                                                                       
db{1}> bt
0xbf109ccc: netbsd:mutex_oncpu+0xc
0xbf109d2c: netbsd:mutex_enter+0xb0
0xbf109d7c: puffs:puffs_msg_wait+0xd8
0xbf109d9c: puffs:puffs_msg_wait2+0x1c
0xbf109de4: puffs:puffs_vnop_rename+0x188
0xbf109df4: puffs:puffs_vnop_checkop+0x120
0xbf109e34: netbsd:VOP_RENAME+0x80        
0xbf109eec: netbsd:do_sys_renameat+0x478
0xbf109f0c: netbsd:sys_rename+0x38      
0xbf109f7c: netbsd:syscall+0x88   

db{1}> x/i mutex_oncpu 
netbsd:mutex_oncpu:     mov     r12, r13
netbsd:mutex_oncpu+0x4: push    {r4, r11-r12, r14-r15}
netbsd:mutex_oncpu+0x8: sub     r11, r12, #0x00000004
netbsd:mutex_oncpu+0xc: sub     r13, r13, #0x0000000c
netbsd:mutex_oncpu+0x10:        mov     r4, r0



>How-To-Repeat:
On a machine with pseudo-device putter enabled:
# cd /usr/tests/sbin/resize_ffs/
# atf-run t_grow |atf-report 

>Fix:
n/a