Re: kern/51729: Frequent network related kernel panics on router

[Hauke Fath <hf%spg.tu-darmstadt.de@localhost>]

Booting the secondary with a DIAGNOSTIC/DEBUG/LOCKDEBUG netbsd-7 kernel 
repeatedly ends up in

[...]
Waiting for DAD completion for statically configured addresses...
wm0: link state UP (was DOWN)
carp0: state transition from: INIT -> to: BACKUP
Mutex error: lockdebug_wantlock: acquiring sleep lock from interrupt context

lock address : 0xffffffff807d2e50 type     :     sleep/adaptive
initialized  : 0xffffffff803a8bb0
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
current cpu  :                  0 last held:                  3
current lwp  : 0xfffffe821e728840 last held: 000000000000000000
last locked  : 0xffffffff803a907a unlocked*: 0xffffffff803a91c6
owner field  : 000000000000000000 wait/spin:                0/0

Turnstile chain at 0xffffffff807665a0.
=> No active turnstile for this lock.

panic: LOCKDEBUG: Mutex error: lockdebug_wantlock: acquiring sleep lock 
from interrupt context
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x13c
snprintf() at netbsd:snprintf
lockdebug_more() at netbsd:lockdebug_more
mutex_enter() at netbsd:mutex_enter+0x43f
pool_put() at netbsd:pool_put+0x33
in6_ifloop_request() at netbsd:in6_ifloop_request+0x160
carp_setroute() at netbsd:carp_setroute+0x51
carp_setrun() at netbsd:carp_setrun+0xfe
carp_carpdev_state() at netbsd:carp_carpdev_state+0xcd
if_link_state_change() at netbsd:if_link_state_change+0x9c
mii_phy_update() at netbsd:mii_phy_update+0x74
igphy_service() at netbsd:igphy_service+0x5b
mii_pollstat() at netbsd:mii_pollstat+0x49
wm_intr() at netbsd:wm_intr+0x659
intr_biglock_wrapper() at netbsd:intr_biglock_wrapper+0x19
Xintr_ioapic_level1() at netbsd:Xintr_ioapic_level1+0xf2
--- interrupt ---
x86_mwait() at netbsd:x86_mwait+0xd
acpicpu_cstate_idle_enter() at netbsd:acpicpu_cstate_idle_enter+0xc2
acpicpu_cstate_idle() at netbsd:acpicpu_cstate_idle+0xb6
idle_loop() at netbsd:idle_loop+0x18c
cpu0: End traceback...

dumping to dev 18,1 (offset=3775271, size=2088091):
[...]