kern/54732: reproducable sh3 kernel crash

[martin%NetBSD.org@localhost]

>Number:         54732
>Category:       kern
>Synopsis:       reproducable sh3 kernel crash
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 03 12:20:00 +0000 2019
>Originator:     Martin Husemann
>Release:        NetBSD 9.99.19
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD last-of-the-heroes.aprisoft.de 9.99.19 NetBSD 9.99.19 (GENERIC) #30: Mon Dec 2 15:37:33 CET 2019 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src/sys/arch/landisk/compile/GENERIC landisk
Architecture: sh3el
Machine: landisk
>Description:

On this machine I can reproducably crash the kernel with:

cd /usr/tests/lib/libc/gen && atf-run t_spawn_ls

Output:
[..]
tc-start: 1575375185.10384, t_spawn_ls
tc-so:total 8
tc-so:drwx------  2 root  wheel   0 Dec  3 13:13 .
tc-so:drwxrwxrwt  5 root  wheel  72 Dec  3 13:13 ..
tc-end: 1575375185.209811, t_spawn_ls, passed
tc-start: 1575375185.213831, t_spawn_missing
tc-end: 1575375185.318265, t_spawn_missing, passed
tc-start: 1575375185.322178, t_spawn_nonexec
tc-end: 1575375185.428548, t_spawn_nonexec, passed
tc-start: 1575375185.432452, t_spawn_zero
tc-end: 1575375185.538711, t_spawn_zero, passed
tc-start: 1575375185.542622, t_spawnp_ls

and there it crashes:

[ 67055.7555297] Reader / writer lock error: rw_vector_enter,365: locking against myself
[ 67055.7555297] lock address : 0x000000008fe4b464
[ 67055.7555297] current cpu  :                  0
[ 67055.7555297] current lwp  : 0x000000008f8c4cc0
[ 67056.0050155] owner/count  : 0x000000008f8c4cc0 flags    : 0x0000000000000004
[ 67056.0908084] panic: lock error: Reader / writer lock: rw_vector_enter,365: locking against myself: lock 0x8fe4b464 cpu 0 lwp 0x8f8c4cc0
[ 67056.2404191] cpu0: Begin traceback...
[ 67056.2867076] db_panic() at netbsd:vpanic+0xea
[ 67056.3366835] vpanic() at netbsd:panic+0x18
[ 67056.3816694] panic() at netbsd:lockdebug_abort+0x6c
[ 67056.4465328] lockdebug_abort() at netbsd:rw_abort.constprop.3+0x1e
[ 67056.5218635] rw_abort.constprop.3() at netbsd:rw_enter+0x9a
[ 67056.5846445] rw_enter() at netbsd:exit1+0x14e
[ 67056.6460350] exit1() at netbsd:sigexit+0x204
[ 67056.6955439] sigexit() at netbsd:postsig+0xd0
[ 67056.7553995] postsig() at netbsd:lwp_userret+0xf0
[ 67056.8064474] lwp_userret() at 8c0081fa
[ 67056.8524897] userret() at 0
[ 67056.8859698] cpu0: End traceback...




>How-To-Repeat:
s/a

>Fix:
n/a