crash in rn_walktree on reboot/shutdown

[Christoph Egger <Christoph_Egger%gmx.de@localhost>]

Hi!

On NetBSD/i386 -current, I get a crash on every reboot/shutdown.

uvm_fault(0xcb3815cc, 0, 1) -> 0xe
fatal page fault in supervisor mode
trap type 6 code 0 eip c0501ff5 cs 8 eflags 286 cr2 8 ilevel 6
kernel: supervisor trap page fault, code=0
Stopped in pid 477.1 (reboot) at        netbsd:rn_walktree+0x65:        cmpw
$
0,0x8(%esi)
db{0}> bt
rn_walktree(c11b9980,c05323f0,cb52d9e4,6,0,c11c8800,cb52db6c,0,c0300f20,caac8010
) at netbsd:rn_walktree+0x65
rt_walktree(2,c0300f20,caac8010,0,0,1,cb52da4c,c068be1b,0,0) at
netbsd:rt_walktr
ee+0x32
if_detach(caac8010,ffffffff,10,ca876720,ca876732,cb366000,caac8d00,caac8000,caac
8d00,c097bae0) at netbsd:if_detach+0xaf
tlp_detach(caac8000,0,10,c098e500,c09cca60,caac8d00,cb52dbec,c058fa57,caac8d00,4
) at netbsd:tlp_detach+0x79
tlp_pci_detach(caac8d00,4,cb52dbec,c059d8b6,c058e2e6,ca877200,2d,caac8d00,1,cb50
f7e0) at netbsd:tlp_pci_detach+0x1b
config_detach(caac8d00,4,c058fcff,c0a1b160,0,0,cb52dc3c,c0482e89,0,0) at
netbsd:
config_detach+0x157
config_detach_all(0,0,0,1,23,cb50f7e0,cb52dcdc,0,0,0) at
netbsd:config_detach_al
l+0x86
cpu_reboot(0,0,cb52dc7c,c046299c,ca426f00,cb382b40,cb50f7e0,cb52dda0,2a,cb92d780
) at netbsd:cpu_reboot+0x1b9
sys_reboot(cb50f7e0,cb52dd00,cb52dd28,cb52dd00,cb3815cc,cb4b1774,d0,0,0,bfbfeb28
) at netbsd:sys_reboot+0x52
syscall(cb52dd48,b3,ab,1f,1f,0,0,bfbfeb28,2,256) at netbsd:syscall+0xb9
db{0}> show reg
ds          0x10
es          0x10
fs          0x30
gs          0x10
edi         0xcb52d9e4
esi         0
ebp         0xcb52d9bc
ebx         0
edx         0xc117e090
ecx         0xc117e090
eax         0xc117e120
eip         0xc0501ff5  rn_walktree+0x65
cs          0x8
eflags      0x286
esp         0xcb52d9a4
ss          0x10
netbsd:rn_walktree+0x65:        cmpw    $0,0x8(%esi)