port-hpcarm/38597: 4.99.62 hpcarm kernel dies with NULL pmap in pmap_fault_fixup

[rafal%netbsd.org@localhost]

>Number:         38597
>Category:       port-hpcarm
>Synopsis:       4.99.62 hpcarm kernel dies with NULL pmap in pmap_fault_fixup
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    port-hpcarm-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue May 06 16:00:00 +0000 2008
>Originator:     rafal%netbsd.org@localhost
>Release:        NetBSD 4.99.62
>Organization:
TNF
>Environment:
System: NetBSD j720 4.99.62 NetBSD 4.99.62 (J720) #8: Tue May  6 09:04:45 EDT 
2008 
rafal%fearless-vampire-killer.waterside.net@localhost:/extra/netbsd-src/hpcarm-bughunt.head/src/sys/arch/hpcarm/compile/J720
Architecture: arm
Machine: hpcarm
>Description:
        LOCKDEBUG / DIAGNOSTIC Kernel dies early in the boot process (while
        doing uvm_init()) with a 'lockdebug_lookup: uninitialized lock' panic.
        Passing the return address through to more of the lockdebug functions
        gets me a return address in what looks like pmap_fault_fixup(); from
        the panic, it appears that the pmap pointer is NULL.

        Boot log with some extra debug goo below:

        [...hpcboot stuff snipped...]
        kernsize=0x3b125c
        Allocating page tables
        IRQ stack: p0xc0010000 v0xc0010000
        ABT stack: p0xc0011000 v0xc0011000
        UND stack: p0xc0012000 v0xc0012000
        SVC stack: p0xc0013000 v0xc0013000
        Creating L1 page table
        Mapping kernel
        pmap_map_chunk: pa=0xc0040000 va=0xc0040000 size=0x44c000 
resid=0x44c000 prot=0x3 cache=1
        LLLLLLLLLLLLSSSLLLLLLLLPPPPPPPPPPPP
        Constructing L2 page tables
        pmap_map_chunk: pa=0xc0010000 va=0xc0010000 size=0x1000 resid=0x1000 
prot=0x3 cache=1
        P
        pmap_map_chunk: pa=0xc0011000 va=0xc0011000 size=0x1000 resid=0x1000 
prot=0x3 cache=1
        P
        pmap_map_chunk: pa=0xc0012000 va=0xc0012000 size=0x1000 resid=0x1000 
prot=0x3 cache=1
        P
        pmap_map_chunk: pa=0xc0013000 va=0xc0013000 size=0x2000 resid=0x2000 
prot=0x3 cache=1
        PP
        pmap_map_chunk: pa=0xc0000000 va=0xc0000000 size=0x4000 resid=0x4000 
prot=0x3 cache=2
        PPPP
        pmap_map_chunk: pa=0xc0000000 va=0xc0000000 size=0x10000 resid=0x10000 
prot=0x3 cache=2
        L
        devmap: 80050000 -> 80050023 @ d000d000
        pmap_map_chunk: pa=0x80050000 va=0xd000d000 size=0x24 resid=0x1000 
prot=0x3 cache=0
        P
        pmap_map_chunk: pa=0xe0000000 va=0xc0018000 size=0x8000 resid=0x8000 
prot=0x3 cache=1
        PPPPPPPP
        done.
        init subsystems: stacks vectors c02aa1ac c02aa7bc c02a9db0
        undefined freemempos=c0021000
        MMU enabled. control=c000107d
        kernsize=0x44c000 (including 0x96913 symbols)
        about to init kernel lock
        about to init UVM
        uvm_amap_init()
        uvm_page_init()
        uvm_map_init()
        uvm_km_init()
        uao_init()
        panic: lockdebug_lookup: uninitialized lock (lock=0x14, from=c02ae0e0)
        Begin traceback...
        0xc0014bc8
                scp=0xc0014bc8 rlv=0xc0014b94 (0xc0014b94)
                rsp=0xc0014b9c rfp=0xc022a2d0
        0xe1a0c00d
                scp=0xe1a0c00d rlv=0xc0345b68 (netbsd:__kernassert+0x39e1c)
                rsp=0xc03c0260 rfp=0xc0382898
        *HANG*

>How-To-Repeat:
        Boot -current LOCKDEBUG/DIAGNOSTIC kernel on hpcarm.

>Fix:
        ??

>Unformatted:
                Sources from 5/5/08, ~ 1400 EDT.