crashes in amd64 8.99.51/9.99.2 with panic: pr_find_pagehead: [npfcn4pl]

[Geoff Wing <gcw%pobox.com@localhost>]

Hi,
I'm getting quite a few crashes in 8.99.51/9.99.2 on amd64

8.99.51 + modules I built
9.99.2 + modules from nyftp (NetBSD 9.99.2 (GENERIC) #0: Wed Jul 31 16:40:25 UTC 2019)

It seems to be related to npf although when I booted with npf started
during rc processing and then issuing "/etc/rc.d/npf stop" I was still
getting crashes after some time.

Any ideas?  Something funny going on when npf is obtaining pages?

Regards,
Geoff


8.99.51 crash:
panic: pr_find_pagehead: [npfcn4pl] item 0xffff98a0b89491b8 poolid 182 != 181
cpu1: Begin traceback...
vpanic() at netbsd:vpanic+0x160
snprintf() at netbsd:snprintf
pool_put() at netbsd:pool_put+0x6b9
pool_cache_invalidate_groups() at netbsd:pool_cache_invalidate_groups+0x71
pool_cache_invalidate() at netbsd:pool_cache_invalidate+0xd5
pool_reclaim() at netbsd:pool_reclaim+0xa7
pool_drain() at netbsd:pool_drain+0x85
uvmpd_pool_drain_thread() at netbsd:uvmpd_pool_drain_thread+0x74
cpu1: End traceback...


9.99.2 crash (doesn't have the pool_cache_invalidate() call):
panic: pr_find_pagehead: [npfcn4pl] item 0xffff95f81443e038 poolid 175 != 174
cpu0: Begin traceback...
vpanic() at netbsd:vpanic+0x160
snprintf() at netbsd:snprintf
pool_put() at netbsd:pool_put+0x6b9
pool_cache_invalidate_groups() at netbsd:pool_cache_invalidate_groups+0x71
pool_reclaim() at netbsd:pool_reclaim+0xa7
pool_drain() at netbsd:pool_drain+0x85
uvmpd_pool_drain_thread() at netbsd:uvmpd_pool_drain_thread+0x74
cpu0: End traceback...