port-sparc/54734: sparc panics running ATF tests

[gson%gson.org@localhost (Andreas Gustafsson)]

>Number:         54734
>Category:       port-sparc
>Synopsis:       sparc panics running ATF tests
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    port-sparc-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Dec 04 08:15:00 +0000 2019
>Originator:     Andreas Gustafsson
>Release:        NetBSD-current
>Organization:

>Environment:
System: NetBSD
Architecture: sparc
Machine: sparc
>Description:

As of source date 2019.12.03.16.45.21, NetBSD-current/sparc panics
while running the ATF tests.  For example,

  http://www.gson.org/netbsd/bugs/build/sparc/2019/2019.12.03.16.45.21/test.log

contains:

  lib/libc/sys/t_getrusage (278/844): 6 test cases
      getrusage_err: [0.051956s] Passed.
      getrusage_maxrss: [ 2459.5996110] panic: TAILQ_PREREMOVE head 0xf0002008 elm 0xf075b040 /tmp/bracket/build/2019.12.03.16.45.21-sparc/src/sys/kern/kern_sleepq.c:112
  [ 2459.5996110] cpu0: Begin traceback...
  [ 2459.5996110] 0x0(0xf04536c0, 0xf53eec20, 0xf054cc00, 0xf054dc00, 0x104, 0xf054dbc8) at netbsd:panic+0x20
  [ 2459.5996110] panic(0xf04536c0, 0xf0002008, 0xf075b040, 0xf049ca60, 0x70, 0xf0756d90) at netbsd:sleepq_remove+0x21c
  [ 2459.5996110] sleepq_remove(0xf0002008, 0xf075b040, 0xf084e3a0, 0xf049a400, 0x206, 0xf075b040) at netbsd:cv_wakeup_one+0x80
  [ 2459.5996110] cv_wakeup_one(0xf0002008, 0x0, 0xf0525bdc, 0xf049a400, 0xf0756d90, 0xf075b040) at netbsd:xc_broadcast+0x1ec
  [ 2459.5996110] xc_broadcast(0x0, 0x40, 0x1, 0xf0531f78, 0x0, 0xf0531480) at netbsd:xc_barrier+0x14
  [ 2459.5996110] xc_barrier(0x0, 0xf0c75d20, 0xf084e3a0, 0xf049a400, 0x20e, 0x7c) at netbsd:pool_cache_invalidate_groups+0x5c
  [ 2459.5996110] pool_cache_invalidate_groups(0xf07066e0, 0xf08674e0, 0xf0bed470, 0xf08674ec, 0xf0c75d20, 0x0) at netbsd:pool_cache_invalidate+0xa4
  [ 2459.5996110] pool_cache_invalidate(0xf07066e0, 0xf0afb300, 0xf084e3a0, 0xf04a2800, 0xf08674e0, 0x0) at netbsd:pool_reclaim+0x64
  [ 2459.5996110] pool_reclaim(0xf07066e0, 0x0, 0xf0706754, 0xf049a400, 0xf084e3a0, 0xf071c2a0) at netbsd:pool_drain+0x6c
  [ 2459.5996110] pool_drain(0x0, 0xf0549034, 0x0, 0xf0526800, 0xf054d400, 0xf07066e0) at netbsd:uvmpd_pool_drain_thread+0x90
  [ 2459.5996110] uvmpd_pool_drain_thread(0xf0522348, 0xf0548130, 0xf052cd40, 0xf05511f0, 0xf0549034, 0x0) at netbsd:lwp_trampoline+0x8
  [ 2459.5996110] cpu0: End traceback...
  [ 2459.5996110] Frame pointer is at 0xf53eea38
  [ 2459.5996110] Call traceback:
  [ 2459.5996110]	  pc = 0xf002cd4c  args = (0xf0478f00, 0x0, 0xfff4, 0xf0457398, 0xf03134ec, 0xf052c000) fp = 0xf53eeaa8
  [ 2459.5996110]	  pc = 0xf03137bc  args = (0x104, 0x0, 0xf04536c0, 0xf53eec20, 0xf0549c00, 0x0) fp = 0xf53eeb10
  [ 2459.5996110]	  pc = 0xf0313868  args = (0xf04536c0, 0xf53eec20, 0xf054cc00, 0xf054dc00, 0x104, 0xf054dbc8) fp = 0xf53eeb70
  [ 2459.5996110]	  pc = 0xf02e0370  args = (0xf04536c0, 0xf0002008, 0xf075b040, 0xf049ca60, 0x70, 0xf0756d90) fp = 0xf53eebd8
  [ 2459.5996110]	  pc = 0xf02abea8  args = (0xf0002008, 0xf075b040, 0xf084e3a0, 0xf049a400, 0x206, 0xf075b040) fp = 0xf53eec38
  [ 2459.5996110]	  pc = 0xf031e0c0  args = (0xf0002008, 0x0, 0xf0525bdc, 0xf049a400, 0xf0756d90, 0xf075b040) fp = 0xf53eec98
  [ 2459.5996110]	  pc = 0xf031e204  args = (0x0, 0x40, 0x1, 0xf0531f78, 0x0, 0xf0531480) fp = 0xf53eecf8
  [ 2459.5996110]	  pc = 0xf030fb48  args = (0x0, 0xf0c75d20, 0xf084e3a0, 0xf049a400, 0x20e, 0x7c) fp = 0xf53eed58
  [ 2459.5996110]	  pc = 0xf0310b74  args = (0xf07066e0, 0xf08674e0, 0xf0bed470, 0xf08674ec, 0xf0c75d20, 0x0) fp = 0xf53eedb8
  [ 2459.5996110]	  pc = 0xf0310c30  args = (0xf07066e0, 0xf0afb300, 0xf084e3a0, 0xf04a2800, 0xf08674e0, 0x0) fp = 0xf53eee18
  [ 2459.5996110]	  pc = 0xf0311048  args = (0xf07066e0, 0x0, 0xf0706754, 0xf049a400, 0xf084e3a0, 0xf071c2a0) fp = 0xf53eee90
  [ 2459.5996110]	  pc = 0xf0296b6c  args = (0x0, 0xf0549034, 0x0, 0xf0526800, 0xf054d400, 0xf07066e0) fp = 0xf53eeef0
  [ 2459.5996110]	  pc = 0xf000a194  args = (0xf0522348, 0xf0548130, 0xf052cd40, 0xf05511f0, 0xf0549034, 0x0) fp = 0xf53eef50
  [ 2459.5996110]	  pc = 0x0  args = (0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fp = 0x0

  [ 2459.5996110] dumping to dev 7,1 offset 164063
  [ 2459.5996110] dump succeeded
  [ 2459.5996110] rebooting

The crashes started some time during the period of build breakage that
started with:

  commit 2019.12.01.14.28.01 ad src/sys/uvm/uvm_init.c 1.50
  commit 2019.12.01.14.30.01 ad src/sys/uvm/uvm_fault.c 1.211

and ended with:

  commit 2019.12.01.23.14.47 uwe src/sys/uvm/uvm_anon.c 1.67
  commit 2019.12.01.23.14.47 uwe src/sys/uvm/uvm_km.c 1.150
  commit 2019.12.01.23.14.47 uwe src/sys/uvm/uvm_pager.c 1.113
  commit 2019.12.01.23.14.47 uwe src/sys/uvm/uvm_swap.c 1.183

>How-To-Repeat:

>Fix: