netbsd boot error: assert failed: requested_size > NUM

To: syzkaller-netbsd-bugs%googlegroups.com@localhost
Subject: netbsd boot error: assert failed: requested_size > NUM
From: syzbot <syzbot+d420353bdc08d382b5ab%syzkaller.appspotmail.com@localhost>
Date: Sun, 16 Oct 2022 01:36:36 -0700
Hello,

syzbot found the following issue on:

HEAD commit:    6bfb81db0d13 pci_resource(9): Fix whitespace.
git tree:       netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13ae6ae6880000
kernel config:  https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=d420353bdc08d382b5ab
compiler:       g++ (Debian 10.2.1-6) 10.2.1 20210110

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d07174b6266e/disk-6bfb81db.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/942f328fef05/netbsd-6bfb81db.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d420353bdc08d382b5ab%syzkaller.appspotmail.com@localhost

[   1.0400934] panic: kernel diagnostic assertion "requested_size > 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_kmem.c", line 366 kmem_intr_free(0xffffada3af374000, 0)
[   1.0400934] cpu0: Begin traceback...
[   1.0400934] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[   1.0400934] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[   1.0400934] kmem_intr_free() at netbsd:kmem_intr_free+0x242 sys/kern/subr_kmem.c:373
[   1.0400934] kern_free() at netbsd:kern_free+0x86 sys/kern/kern_malloc.c:172
[   1.0400934] AcpiDsDeleteWalkState() at netbsd:AcpiDsDeleteWalkState+0x2ca sys/external/bsd/acpica/dist/dispatcher/dswstate.c:842
[   1.0400934] AcpiPsParseAml() at netbsd:AcpiPsParseAml+0x670 sys/external/bsd/acpica/dist/parser/psparse.c:517
[   1.0400934] AcpiPsExecuteMethod() at netbsd:AcpiPsExecuteMethod+0x6cf sys/external/bsd/acpica/dist/parser/psxface.c:244
[   1.0400934] AcpiNsEvaluate() at netbsd:AcpiNsEvaluate+0x6b4 sys/external/bsd/acpica/dist/namespace/nseval.c:250
[   1.0400934] AcpiRsSetSrsMethodData() at netbsd:AcpiRsSetSrsMethodData+0x19e sys/external/bsd/acpica/dist/resources/rsutils.c:861
[   1.0400934] AcpiSetCurrentResources() at netbsd:AcpiSetCurrentResources+0x11b sys/external/bsd/acpica/dist/resources/rsxface.c:346
[   1.0400934] acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b acpi_pci_link_route_irqs sys/dev/acpi/acpi_pci_link.c:905 [inline]
[   1.0400934] acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b sys/dev/acpi/acpi_pci_link.c:1068
[   1.0400934] mpacpi_findintr_linkdev() at netbsd:mpacpi_findintr_linkdev+0x84 sys/arch/x86/x86/mpacpi.c:1045
[   1.0400934] intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 intr_scan_bus sys/arch/x86/x86/mp.c:226 [inline]
[   1.0400934] intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 sys/arch/x86/x86/mp.c:191
[   1.0400934] pci_intr_map() at netbsd:pci_intr_map+0x2c3 sys/arch/x86/pci/pci_intr_machdep.c:156
[   1.0400934] pci_intx_alloc() at netbsd:pci_intx_alloc+0x46 sys/arch/x86/pci/pci_intr_machdep.c:448
[   1.0400934] pci_intr_alloc() at netbsd:pci_intr_alloc+0x11c sys/arch/x86/pci/pci_intr_machdep.c:573
[   1.0400934] virtio_pci_alloc_interrupts() at netbsd:virtio_pci_alloc_interrupts+0x3ca sys/dev/pci/virtio_pci.c:1105
[   1.0400934] virtio_child_attach_finish() at netbsd:virtio_child_attach_finish+0x83 sys/dev/pci/virtio.c:1312
[   1.0400934] viomb_attach() at netbsd:viomb_attach+0x5c3 sys/dev/pci/viomb.c:193
[   1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[   1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[   1.0400934] virtio_pci_rescan() at netbsd:virtio_pci_rescan+0x8e sys/dev/pci/virtio_pci.c:317
[   1.0400934] virtio_pci_attach() at netbsd:virtio_pci_attach+0x45b sys/dev/pci/virtio_pci.c:298
[   1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[   1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[   1.0400934] pci_probe_device() at netbsd:pci_probe_device+0xec9 sys/dev/pci/pci.c:488
[   1.0400934] pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x481 sys/dev/pci/pci.c:819
[   1.0400934] pcirescan() at netbsd:pcirescan+0x75 sys/dev/pci/pci.c:113
[   1.0400934] pciattach() at netbsd:pciattach+0x50f sys/dev/pci/pci.c:210
[   1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[   1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[   1.0400934] mp_pci_scan() at netbsd:mp_pci_scan+0x1d6 sys/arch/x86/x86/mp.c:96
[   1.0400934] amd64_mainbus_attach() at netbsd:amd64_mainbus_attach+0x467 sys/arch/amd64/amd64/amd64_mainbus.c:213
[   1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[   1.0400934] config_rootfound() at netbsd:config_rootfound+0x92 config_attach sys/kern/subr_autoconf.c:1810 [inline]
[   1.0400934] config_rootfound() at netbsd:config_rootfound+0x92 sys/kern/subr_autoconf.c:1290
[   1.0400934] cpu_configure() at netbsd:cpu_configure+0x58 sys/arch/amd64/amd64/autoconf.c:112
[   1.0400934] main() at netbsd:main+0x452 sys/kern/init_main.c:555
[   1.0400934] cpu0: End traceback...
[   1.0400934] fatal breakpoint trap in supervisor mode
[   1.0400934] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x202 cr2 0 ilevel 0x8 rsp 0xffffffff8709fcb0
[   1.0400934] curlwp 0xffffffff86742cc0 pid 0.0 lowest kstack 0xffffffff8709b2c0
Stopped in pid 0.0 (system) at  netbsd:breakpoint+0x5:  leave
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
kmem_intr_free() at netbsd:kmem_intr_free+0x242 sys/kern/subr_kmem.c:373
kern_free() at netbsd:kern_free+0x86 sys/kern/kern_malloc.c:172
AcpiDsDeleteWalkState() at netbsd:AcpiDsDeleteWalkState+0x2ca sys/external/bsd/acpica/dist/dispatcher/dswstate.c:842
AcpiPsParseAml() at netbsd:AcpiPsParseAml+0x670 sys/external/bsd/acpica/dist/parser/psparse.c:517
AcpiPsExecuteMethod() at netbsd:AcpiPsExecuteMethod+0x6cf sys/external/bsd/acpica/dist/parser/psxface.c:244
AcpiNsEvaluate() at netbsd:AcpiNsEvaluate+0x6b4 sys/external/bsd/acpica/dist/namespace/nseval.c:250
AcpiRsSetSrsMethodData() at netbsd:AcpiRsSetSrsMethodData+0x19e sys/external/bsd/acpica/dist/resources/rsutils.c:861
AcpiSetCurrentResources() at netbsd:AcpiSetCurrentResources+0x11b sys/external/bsd/acpica/dist/resources/rsxface.c:346
acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b acpi_pci_link_route_irqs sys/dev/acpi/acpi_pci_link.c:905 [inline]
acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b sys/dev/acpi/acpi_pci_link.c:1068
mpacpi_findintr_linkdev() at netbsd:mpacpi_findintr_linkdev+0x84 sys/arch/x86/x86/mpacpi.c:1045
intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 intr_scan_bus sys/arch/x86/x86/mp.c:226 [inline]
intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 sys/arch/x86/x86/mp.c:191
pci_intr_map() at netbsd:pci_intr_map+0x2c3 sys/arch/x86/pci/pci_intr_machdep.c:156
pci_intx_alloc() at netbsd:pci_intx_alloc+0x46 sys/arch/x86/pci/pci_intr_machdep.c:448
pci_intr_alloc() at netbsd:pci_intr_alloc+0x11c sys/arch/x86/pci/pci_intr_machdep.c:573
virtio_pci_alloc_interrupts() at netbsd:virtio_pci_alloc_interrupts+0x3ca sys/dev/pci/virtio_pci.c:1105
virtio_child_attach_finish() at netbsd:virtio_child_attach_finish+0x83 sys/dev/pci/virtio.c:1312
viomb_attach() at netbsd:viomb_attach+0x5c3 sys/dev/pci/viomb.c:193
config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
--db_more--


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller%googlegroups.com@localhost.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

-- 
You received this message because you are subscribed to the Google Groups "syzkaller-netbsd-bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-netbsd-bugs+unsubscribe%googlegroups.com@localhost.
To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-netbsd-bugs/000000000000cabb0e05eb22c18a%40google.com.
Follow-Ups:
- Re: netbsd boot error: assert failed: requested_size > NUM
  - From: syzbot
Prev by Date: netbsd boot error: assert failed: len <= map->dm_mapsize - offset
Next by Date: netbsd boot error: can't ssh into the instance (8)
Previous by Thread: netbsd boot error: assert failed: len <= map->dm_mapsize - offset
Next by Thread: Re: netbsd boot error: assert failed: requested_size > NUM
Indexes:
Home | Main Index | Thread Index | Old Index