kern/39325: panic in pool_get

[spz%NetBSD.org@localhost]

>Number:         39325
>Category:       kern
>Synopsis:       fatal protection fault in supervisor mode from pool_get
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Aug 09 11:10:00 +0000 2008
>Originator:     S.P.Zeidler
>Release:        NetBSD 4.99.71
>Organization:
        TNF
>Environment:
        
        
System: NetBSD b2.netbsd.org 4.99.71 NetBSD 4.99.71 (FAITH) #0: Wed Jul 30 
06:25:19 UTC 2008 
spz@ADMIN:/chroots/current-src/amd64/obj/sys/arch/amd64/compile/FAITH amd64
Architecture: x86_64
Machine: amd64

>Description:

fatal protection fault in supervisor mode
trap type 4 code 0 rip ffffffff802f480b cs 8 rflags 10246 cr2  7f7ffdff5000 cpl 
7 rsp ffff800047e18958
kernel: protection fault trap, code=0
Stopped in pid 0.2 (system) at  netbsd:pool_get+0x16b:  movq    0x30(%rsi),%r12
db{0}> bt
pool_get() at netbsd:pool_get+0x16b
rnd_sample_allocate_isr() at netbsd:rnd_sample_allocate_isr+0x31
rnd_add_uint32() at netbsd:rnd_add_uint32+0x15b
wddone() at netbsd:wddone+0x89
wdc_ata_bio_done() at netbsd:wdc_ata_bio_done+0x9e
wdc_ata_bio_intr() at netbsd:wdc_ata_bio_intr+0x1df
wdcintr() at netbsd:wdcintr+0xd7
pciide_pci_intr() at netbsd:pciide_pci_intr+0x52
intr_biglock_wrapper() at netbsd:intr_biglock_wrapper+0x1d
Xintr_ioapic_level2() at netbsd:Xintr_ioapic_level2+0xf7
--- interrupt ---
x86_mwait() at netbsd:x86_mwait+0xd
idle_loop() at netbsd:idle_loop+0xe9
db{0}> mach cpu
addr            dev     id      flags   ipis    curlwp          fpcurlwp
0xffffffff80793fc0      cpu0    0       3009    0       0xffff80004748cba0      0
xffff8000560e9420
0xffff80000402b000      cpu1    1       f002    0       0xffff80004a1dd800      
       0
x0
db{0}> sh reg
ds          0x89a8
es          0xff60
fs          0x6fc8
gs          0xff60
rdi         0xffffffff808335d2  rnd_mempool+0xb2
rsi         0xed1a45c2e04bc7d0
rbp         0xffff800047e18978
rbx         0xffffffff80833520  rnd_mempool
rdx         0
rcx         0xffffffff80793fc0  cpu_info_primary
rax         0x3
r8          0xffff800003fe3860
r9          0x60
r10         0
r11         0xffffffff80369d90  _bus_dmamap_unload
r12         0
r13         0xffffffff808335d0  rnd_mempool+0xb0
r14         0xfdcb440
r15         0xffff8000040be8f8
rip         0xffffffff802f480b  pool_get+0x16b
cs          0x8
rflags      0x10246
rsp         0xffff800047e18958
ss          0x10
netbsd:pool_get+0x16b:  movq    0x30(%rsi),%r12
db{0}> mach cpu 1
using CPU 1
db{0}> bt
_kernel_lock() at netbsd:_kernel_lock+0xc7
cdev_open() at netbsd:cdev_open+0x8d
spec_open() at netbsd:spec_open+0x15e
VOP_OPEN() at netbsd:VOP_OPEN+0x62
vn_open() at netbsd:vn_open+0x13d
sys_open() at netbsd:sys_open+0xeb
syscall() at netbsd:syscall+0x9a
db{0}> sh reg
ds          0
es          0
fs          0
gs          0
rdi         0
rsi         0x402
rbp         0xffff800049c7b930
rbx         0
rdx         0x6
rcx         0
rax         0
r8          0
r9          0
r10         0
r11         0xffff800049f49900
r12         0xffff80000402b000
r13         0x1
r14         0xffff80004a1dd800
r15         0
rip         0xffffffff802cb837  _kernel_lock+0xc7
cs          0x8
rflags      0x246
rsp         0xffff800049c7b8f0
ss          0x10
netbsd:_kernel_lock+0xc7:       movzbl  0x569202(%rip),%eax
db{0}> sh uvm
Current UVM status:
  pagesize=4096 (0x1000), pagemask=0xfff, pageshift=12
  505554 VM pages: 160769 active, 49288 inactive, 1750 wired, 195909 free
  pages  13390 anon, 195474 file, 2945 exec
  freemin=64, free-target=85, wired-max=168518
  faults=605816035, traps=609327459, intrs=57998669, ctxswitch=366801788
  softint=163751041, syscalls=-832418384, swapins=19509, swapouts=19524
  fault counts:
    noram=193, noanon=0, pgwait=0, pgrele=0
    ok relocks(total)=1227173(1227175), anget(retrys)=231254772(0), amapcopy=312
651765
    neighbor anon/obj pg=221004041/903109027, gets(lock/unlock)=1287950792/12271
60
    cases: anon=155121761, anoncow=66868805, obj=1045020574, prcopy=242931012, p
rzero=-966269572
  daemon and swap counts:
    woke=84050, revs=82895, scans=24342866, obscans=23467335, anscans=0
    busy=0, freed=23467335, reactivate=11345, deactivate=29956532
    pageouts=0, pending=0, nswget=0
    nswapdev=1, swpgavail=65535
    swpages=65535, swpginuse=0, swpgonly=0, paging=0
db{0}> sh pool
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff802f3c63 cs 8 rflags 10246 cr2  39 cpl 8 rsp 
ffff800047e18480
kernel: page fault trap, code=0
Faulted in DDB; continuing...

Things of note about the system: currently running a RAID with one disk failed.
The exact source tree the system was built with is no longer available, but the 
kernel build directory is.

>How-To-Repeat:
        trying to avoid doing that :-P
>Fix:

>Unformatted:
        Jul 30 ~5:00 UTC