kern/58552: panic via genfs_getpages - ufs_bmaparray

[spz%NetBSD.org@localhost]

>Number:         58552
>Category:       kern
>Synopsis:       panic via genfs_getpages - ufs_bmaparray
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Aug 04 08:30:00 +0000 2024
>Originator:     S.P.Zeidler
>Release:        NetBSD 10.0_STABLE 20240527
>Organization:
	The NetBSD Foundation
>Environment:
System: NetBSD morden.netbsd.org 10.0_STABLE NetBSD 10.0_STABLE (NBFTP) #0: Tue May 28 07:18:01 UTC 2024 spz%franklin.NetBSD.org@localhost:/home/netbsd/10/amd64/obj/sys/arch/amd64/compile/NBFTP amd64
Architecture: x86_64
Machine: amd64
>Description:
[ 5864557.5601213] uvm_fault(0xfffff48ffb0e0668, 0x826ea1000, 1) -> e
[ 5864557.5701215] fatal page fault in supervisor mode
[ 5864557.5701215] trap type 6 code 0 rip 0xffffffff808d0cd4 cs 0x8 rflags 0x10202 cr2 0x826ea10f8 ilevel 0 rsp 0xffff828c9c4b2338
[ 5864557.5701215] curlwp 0xfffff48b150b5680 pid 9552.9552 lowest kstack 0xffff828c9c4ae2c0
kernel: page fault trap, code=0
Stopped in pid 9552.9552 (rsync) at     netbsd:incore+0x32:     cmpq    %rsi,d8(
%rax)
incore() at netbsd:incore+0x32
ufs_bmaparray() at netbsd:ufs_bmaparray+0x16c
ufs_bmap() at netbsd:ufs_bmap+0x4d
VOP_BMAP() at netbsd:VOP_BMAP+0x6a
genfs_getpages() at netbsd:genfs_getpages+0xd55
VOP_GETPAGES() at netbsd:VOP_GETPAGES+0x58
ra_startio() at netbsd:ra_startio+0x94
uvm_ra_request() at netbsd:uvm_ra_request+0x124
uvn_get() at netbsd:uvn_get+0xa7
ubc_fault() at netbsd:ubc_fault+0x11e
uvm_fault_internal() at netbsd:uvm_fault_internal+0x3eb
trap() at netbsd:trap+0x2f9
--- trap (number 6) ---
copyout() at netbsd:copyout+0x33
ubc_uiomove() at netbsd:ubc_uiomove+0x104
ffs_read() at netbsd:ffs_read+0xd0
VOP_READ() at netbsd:VOP_READ+0x42
vn_read() at netbsd:vn_read+0x18e
dofileread() at netbsd:dofileread+0x79
sys_read() at netbsd:sys_read+0x49
syscall() at netbsd:syscall+0x1fc
--- syscall (number 3) ---
netbsd:syscall+0x1fc:
ds          2310
es          7048
fs          7098
gs          7040
rdi         fffff48d36a6d940
rsi         fffffffffffffff4
rbp         ffff828c9c4b2380
rbx         0
rdx         ffff82805d132000
rcx         fffff48b150b5680
rax         826ea1020
r8          0
r9          ffff828c9c4b23dc
r10         fffffffffffffff4
r11         2
r12         fffff48d36a6d940
r13         fffffffffffffff4
r14         0
r15         fffff48b3807f200
rip         ffffffff808d0cd4    incore+0x32
cs          8
rflags      10202
rsp         ffff828c9c4b2338
ss          10
netbsd:incore+0x32:     cmpq    %rsi,d8(%rax)

a savecore is available, ask for location and access
>How-To-Repeat:
	hopefully not too often
>Fix: