kern/54783: t_mmap crahes the kernel

[martin%NetBSD.org@localhost]

>Number:         54783
>Category:       kern
>Synopsis:       t_mmap crahes the kernel
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Dec 18 14:45:00 +0000 2019
>Originator:     Martin Husemann
>Release:        NetBSD 9.99.26
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD unpluged.duskware.de 9.99.26 NetBSD 9.99.26 (UNPLUGED) #280: Wed Dec 18 13:01:47 CET 2019 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src/sys/arch/evbarm/compile/UNPLUGED evbarm
Architecture: earm
Machine: evbarm
>Description:

I can reproducably (as non-root user) crash the kernel on this machine.

tp-start: 1576679784.224805, t_mmap, 9
tc-start: 1576679784.225301, mmap_block
tc-end: 1576679784.227739, mmap_block, skipped, Requires root privileges
tc-start: 1576679784.228226, mmap_err
tc-end: 1576679784.281310, mmap_err, passed
tc-start: 1576679784.283658, mmap_loan
[ 293.9037747] Mutex error: mutex_vector_exit,737: assertion failed: MUTEX_OWNER(mtx->mtx_owner) == curthread

[ 293.9037747] lock address : 0x00000000c2877294
[ 293.9037747] current cpu  :                  0
[ 293.9037747] current lwp  : 0x00000000c33989e0
[ 293.9037747] owner field  : 000000000000000000 wait/spin:                0/0

[ 293.9037747] panic: lock error: Mutex: mutex_vector_exit,737: assertion failed: MUTEX_OWNER(mtx->mtx_owner) == curthread: lock 0xc2877294 cpu 0 lwp 0xc33989e0
[ 293.9037747] cpu0: Begin traceback...
[ 293.9037747] 0xccdabd2c: netbsd:vpanic+0x114
[ 293.9037747] Bad frame pointer: 0xc0570760
[ 293.9037747] cpu0: End traceback...
[ 293.9037747] rebooting...


>How-To-Repeat:

cd /usr/tests/lib/libc/sys && atf-run t_mmap

>Fix:
n/a