kern/60310: (reproducable) kernel crash

["martin%NetBSD.org@localhost via gnats" <gnats-admin%NetBSD.org@localhost>]

>Number:         60310
>Category:       kern
>Synopsis:       (reproducable) kernel crash
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jun 03 22:00:01 +0000 2026
>Originator:     Martin Husemann
>Release:        NetBSD 11.99.6
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD out-of-the-silent-planet.aprisoft.de 11.99.6 NetBSD 11.99.6 (GENERIC64) #547: Wed Jun 3 12:39:03 CEST 2026 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/work/src/sys/arch/evbarm/compile/GENERIC64 evbarm
Architecture: aarch64
Machine: evbarm
>Description:

While running a full ATF test run with evbearmv7hf userland on a GENERIC64
kernel, during this test:

	fs/tmpfs/t_vnode_leak:main

I got a panic:

[ 12499.2367597] panic: pr_phinpage_check: [kmem-00256] item 0xffff000053542380 not part of pool
[ 12499.2367597] cpu0: Begin traceback...
[ 12499.2475244] trace fp ffffc000fcaa78d0
[ 12499.2475244] fp ffffc000fcaa7900 vpanic() at ffffc000005e1f44 netbsd:vpanic+0x1bc
[ 12499.2571450] fp ffffc000fcaa7960 panic() at ffffc000005e2004 netbsd:panic+0x44
[ 12499.2671414] fp ffffc000fcaa79f0 pool_cache_put_paddr() at ffffc000005ded64 netbsd:pool_cache_put_paddr+0x164
[ 12499.2771390] fp ffffc000fcaa7a40 mutex_obj_free() at ffffc00000589018 netbsd:mutex_obj_free+0x58
[ 12499.2871335] fp ffffc000fcaa7a60 vcache_free() at ffffc00000655aa8 netbsd:vcache_free+0x78
[ 12499.2871335] fp ffffc000fcaa7a80 vrelel() at ffffc00000656c70 netbsd:vrelel+0x6f0
[ 12499.2994771] fp ffffc000fcaa7b00 vrecycle() at ffffc00000657fcc netbsd:vrecycle+0x13c
[ 12499.3072584] fp ffffc000fcaa7b30 vdrain_one() at ffffc00000658734 netbsd:vdrain_one+0x1f0
[ 12499.3174026] fp ffffc000fcaa7b80 vfs_drainvnodes() at ffffc00000659f50 netbsd:vfs_drainvnodes+0x24
[ 12499.3272514] fp ffffc000fcaa7c00 sysctl_kern_maxvnodes() at ffffc00000559920 netbsd:sysctl_kern_maxvnodes+0xc0
[ 12499.3372472] fp ffffc000fcaa7cb0 sysctl_dispatch() at ffffc000005aa468 netbsd:sysctl_dispatch+0xc8
[ 12499.3372472] fp ffffc000fcaa7d40 netbsd32___sysctl() at ffffc000002a4cd4 netbsd:netbsd32___sysctl+0xd4
[ 12499.3526480] fp ffffc000fcaa7de0 netbsd32_syscall() at ffffc000000c9d8c netbsd:netbsd32_syscall+-0x1cfbc4
[ 12499.3620088] tf ffffc000fcaa7ed0 el0_trap() at ffffc000000c0ff0 netbsd:el1_trap_exit+0x68
[ 12499.3727637] ---- switchframe 0xffffc000fcaa7ed0 (304 bytes) ----
[ 12499.3727637]    x19=0000000000000000,    x20=0000000000000000
[ 12499.3854438]    x21=0000000000000000,    x22=0000000000000000
[ 12499.3854438]    x23=0000000000000000,    x24=0000000000000000
[ 12499.3971611]    x25=0000000000000000,    x26=0000000000000000
[ 12499.3971611]    x27=0000000000000000,    x28=0000000000000000
[ 12499.4088805] fp=x29=0000000000000000, lr=x30=0000000000000000
[ 12499.4088805] ------------------------------------------------
[ 12499.4206001] cpu0: End traceback...
Stopped in pid 28894.28894 (sysctl) at  netbsd:cpu_Debugger+0xc:        ldp     
x29, x30, [sp],#16

This is not reproducable by running the test itself only, but happens
again when I do the full ATF test run.

This is new fallout, last week's tests completed w/o any issues.

>How-To-Repeat:
s/a

>Fix:
n/a