port-amd64/53129: Xserve Early2008 (A1246) does not boot from UEFI install image (kernel panic)

[h-masuda%ootani.nagata.kobe.jp@localhost]

>Number:         53129
>Category:       port-amd64
>Synopsis:       Xserve Early2008 (A1246) does not boot from UEFI install image (kernel panic)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-amd64-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Mar 26 05:35:00 +0000 2018
>Originator:     Hideo MASUDA
>Release:        NetBSD 8.99.14 (GENERIC) #0: Sun Mar 25 09:34:02 UTC 2018
>Organization:
Personal
>Environment:
NetBSD 8.99.14 (GENERIC) #0: Sun Mar 25 09:34:02 UTC 2018 mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64
>Description:
Xserve Early2008 (A1246) does not boot from UEFI install image.
This machine is booted with MacOS X and works fine.

Console output is below:

Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
    2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017,
    2018 The NetBSD Foundation, Inc.  All rights reserved.
Copyright (c) 1982, 1986, 1989, 1991, 1993
    The Regents of the University of California.  All rights reserved.

NetBSD 8.99.14 (GENERIC) #0: Sun Mar 25 09:34:02 UTC 2018
        mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC
total memory = 2055 MB
avail memory = 1973 MB
panic: kernel diagnostic assertion "(pi->pi_magic == PI_MAGIC)" failed: file "/usr/src/sys/kern/subr_pool.c", line 878 pool_get: [kmem-448] free list modified: magic=ffffffff; page 0xffffe4007ffd4000; item addr 0xffffe4007ffd4e40
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x140
ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
pool_get() at netbsd:pool_get+0x7aa
pool_cache_get_slow() at netbsd:pool_cache_get_slow+0x1b4
pool_cache_get_paddr() at netbsd:pool_cache_get_paddr+0x270
kmem_intr_alloc() at netbsd:kmem_intr_alloc+0x77
kmem_alloc() at netbsd:kmem_alloc+0x4a
vfs_opv_init() at netbsd:vfs_opv_init+0x79
vfs_attach() at netbsd:vfs_attach+0x5c
ptyfs_modcmd() at netbsd:ptyfs_modcmd+0x53
module_do_builtin.isra.1() at netbsd:module_do_builtin.isra.1+0x15d
module_init_class() at netbsd:module_init_class+0x110
main() at netbsd:main+0x26c
cpu0: End traceback...
fatal breakpoint trap in supervisor mode
trap type 1 code 0 rip 0xffffffff8021db05 cs 0x8 rflags 0x202 cr2 0 ilevel 0x8 rsp 0xffffffff817fcaf0
curlwp 0xffffffff81481ea0 pid 0.1 lowest kstack 0xffffffff817f82c0
Stopped in pid 0.1 (system) at  netbsd:breakpoint+0x5:  leave
db{0}> trace
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0x140
ch_voltag_convert_in() at netbsd:ch_voltag_convert_in
pool_get() at netbsd:pool_get+0x7aa
pool_cache_get_slow() at netbsd:pool_cache_get_slow+0x1b4
pool_cache_get_paddr() at netbsd:pool_cache_get_paddr+0x270
kmem_intr_alloc() at netbsd:kmem_intr_alloc+0x77
kmem_alloc() at netbsd:kmem_alloc+0x4a
vfs_opv_init() at netbsd:vfs_opv_init+0x79
vfs_attach() at netbsd:vfs_attach+0x5c
ptyfs_modcmd() at netbsd:ptyfs_modcmd+0x53
module_do_builtin.isra.1() at netbsd:module_do_builtin.isra.1+0x15d
module_init_class() at netbsd:module_init_class+0x110
main() at netbsd:main+0x26c
db{0}> 

>How-To-Repeat:
On helper PC:
- get ftp://nyftp.netbsd.org/pub/NetBSD-daily/HEAD/201803251510Z/images/NetBSD-8.99.14-amd64-uefi-install.img.gz
- insert USB memory stick, recognized "/dev/sdb"
- gunzip -c NetBSD-8.99.14-amd64-uefi-install.img.gz | dd of=/dev/sdb bs=1024k

On Xserve Early2008 (A1246)
- insert USB memory stick
- Power on with holding Alt/Option key down
- Choose "EFI Boot"
- Hit SPACE key and choose "4. Drop to boot prompt"
- consdev com0 (VGA output may be wrong)
- boot -12 (Disable ACPI and SMP)

* Same without "-12" option for boot.
* 8.0_BETA may cause a same panic.

>Fix:
unknown