kern/52322: kernel can panic in case of LFS64

[Shinichi Doyashiki <clare%csel.org@localhost>]

>Number:         52322
>Category:       kern
>Synopsis:       kernel can panic in case of LFS64
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jun 21 16:00:00 +0000 2017
>Originator:     Shinichi Doyashiki
>Release:        NetBSD 8.99.1
>Organization:
	at home
>Environment:
System: NetBSD kanako.csel.org 8.99.1 NetBSD 8.99.1 (KANAKO) #8: Mon Jun 12 07:05:20 JST 2017 clare%kanako.csel.org@localhost:/export/stage/hack/sys/arch/amd64/compile/KANAKO amd64
Architecture: x86_64
Machine: amd64
>Description:
	kernel can panic in case of LFS64 as following:

# gdb /export/stage/hack/sys/arch/amd64/compile/KANAKO/netbsd.gdb
GNU gdb (GDB) 7.12
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64--netbsd".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /export/stage/hack/sys/arch/amd64/compile/KANAKO/netbsd.gdb...done.
(gdb) target kvm netbsd.2.core
0xffffffff80229535 in cpu_reboot (howto=howto@entry=260,
    bootstr=bootstr@entry=0x0) at ../../../../arch/amd64/amd64/machdep.c:674
674                     dumpsys();
(gdb) bt
#0  0xffffffff80229535 in cpu_reboot (howto=howto@entry=260,
    bootstr=bootstr@entry=0x0) at ../../../../arch/amd64/amd64/machdep.c:674
#1  0xffffffff808de38c in vpanic (
    fmt=fmt@entry=0xffffffff80ee2355 "%s: %p: 0x%02x != 0x%02x\n",
    ap=ap@entry=0xfffffe810f14dde8) at ../../../../kern/subr_prf.c:342
#2  0xffffffff808de440 in panic (
    fmt=fmt@entry=0xffffffff80ee2355 "%s: %p: 0x%02x != 0x%02x\n")
    at ../../../../kern/subr_prf.c:258
#3  0xffffffff808d4397 in kmem_redzone_check (sz=1040, p=0xfffffe8012003800)
    at ../../../../kern/subr_kmem.c:655
#4  kmem_intr_free (p=0xfffffe8012003800, requested_size=1032)
    at ../../../../kern/subr_kmem.c:372
#5  0xffffffff8081c188 in lfs_freebuf (fs=0xfffffe804297b008,
    bp=0xfffffe81dd36d480) at ../../../../ufs/lfs/lfs_bio.c:759
#6  0xffffffff80825a19 in lfs_free_aiodone (bp=0xfffffe81dd36d480)
    at ../../../../ufs/lfs/lfs_segment.c:2513
#7  0xffffffff808e55a4 in workqueue_runlist (wq=0xfffffe810eef6580,
    wq=0xfffffe810eef6580, list=<synthetic pointer>)
    at ../../../../kern/subr_workqueue.c:104
#8  workqueue_worker (cookie=0xfffffe810eef6580)
    at ../../../../kern/subr_workqueue.c:135
#9  0xffffffff802008d7 in lwp_trampoline ()
#10 0x0000000000000000 in ?? ()

>How-To-Repeat:
	create LFS64 partition, mount it for objdir, and run build.sh
>Fix:
	unknown...