netbsd boot error: assert failed: requested_size > NUM

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 6bfb81db0d13 pci_resource(9): Fix whitespace.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13ae6ae6880000
kernel config: https://syzkaller.appspot.com/x/.config?x=1420f906d33d9f1f
dashboard link: https://syzkaller.appspot.com/bug?extid=d420353bdc08d382b5ab
compiler: g++ (Debian 10.2.1-6) 10.2.1 20210110

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/d07174b6266e/disk-6bfb81db.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/942f328fef05/netbsd-6bfb81db.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+d42035...@syzkaller.appspotmail.com

[ 1.0400934] panic: kernel diagnostic assertion "requested_size > 0" failed: file "/syzkaller/managers/ci2-netbsd-kubsan/kernel/sys/kern/subr_kmem.c", line 366 kmem_intr_free(0xffffada3af374000, 0)
[ 1.0400934] cpu0: Begin traceback...
[ 1.0400934] vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
[ 1.0400934] kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
[ 1.0400934] kmem_intr_free() at netbsd:kmem_intr_free+0x242 sys/kern/subr_kmem.c:373
[ 1.0400934] kern_free() at netbsd:kern_free+0x86 sys/kern/kern_malloc.c:172
[ 1.0400934] AcpiDsDeleteWalkState() at netbsd:AcpiDsDeleteWalkState+0x2ca sys/external/bsd/acpica/dist/dispatcher/dswstate.c:842
[ 1.0400934] AcpiPsParseAml() at netbsd:AcpiPsParseAml+0x670 sys/external/bsd/acpica/dist/parser/psparse.c:517
[ 1.0400934] AcpiPsExecuteMethod() at netbsd:AcpiPsExecuteMethod+0x6cf sys/external/bsd/acpica/dist/parser/psxface.c:244
[ 1.0400934] AcpiNsEvaluate() at netbsd:AcpiNsEvaluate+0x6b4 sys/external/bsd/acpica/dist/namespace/nseval.c:250
[ 1.0400934] AcpiRsSetSrsMethodData() at netbsd:AcpiRsSetSrsMethodData+0x19e sys/external/bsd/acpica/dist/resources/rsutils.c:861
[ 1.0400934] AcpiSetCurrentResources() at netbsd:AcpiSetCurrentResources+0x11b sys/external/bsd/acpica/dist/resources/rsxface.c:346
[ 1.0400934] acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b acpi_pci_link_route_irqs sys/dev/acpi/acpi_pci_link.c:905 [inline]
[ 1.0400934] acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b sys/dev/acpi/acpi_pci_link.c:1068
[ 1.0400934] mpacpi_findintr_linkdev() at netbsd:mpacpi_findintr_linkdev+0x84 sys/arch/x86/x86/mpacpi.c:1045
[ 1.0400934] intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 intr_scan_bus sys/arch/x86/x86/mp.c:226 [inline]
[ 1.0400934] intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 sys/arch/x86/x86/mp.c:191
[ 1.0400934] pci_intr_map() at netbsd:pci_intr_map+0x2c3 sys/arch/x86/pci/pci_intr_machdep.c:156
[ 1.0400934] pci_intx_alloc() at netbsd:pci_intx_alloc+0x46 sys/arch/x86/pci/pci_intr_machdep.c:448
[ 1.0400934] pci_intr_alloc() at netbsd:pci_intr_alloc+0x11c sys/arch/x86/pci/pci_intr_machdep.c:573
[ 1.0400934] virtio_pci_alloc_interrupts() at netbsd:virtio_pci_alloc_interrupts+0x3ca sys/dev/pci/virtio_pci.c:1105
[ 1.0400934] virtio_child_attach_finish() at netbsd:virtio_child_attach_finish+0x83 sys/dev/pci/virtio.c:1312
[ 1.0400934] viomb_attach() at netbsd:viomb_attach+0x5c3 sys/dev/pci/viomb.c:193
[ 1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[ 1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[ 1.0400934] virtio_pci_rescan() at netbsd:virtio_pci_rescan+0x8e sys/dev/pci/virtio_pci.c:317
[ 1.0400934] virtio_pci_attach() at netbsd:virtio_pci_attach+0x45b sys/dev/pci/virtio_pci.c:298
[ 1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[ 1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[ 1.0400934] pci_probe_device() at netbsd:pci_probe_device+0xec9 sys/dev/pci/pci.c:488
[ 1.0400934] pci_enumerate_bus() at netbsd:pci_enumerate_bus+0x481 sys/dev/pci/pci.c:819
[ 1.0400934] pcirescan() at netbsd:pcirescan+0x75 sys/dev/pci/pci.c:113
[ 1.0400934] pciattach() at netbsd:pciattach+0x50f sys/dev/pci/pci.c:210
[ 1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[ 1.0400934] config_found() at netbsd:config_found+0x354 sys/kern/subr_autoconf.c:1262
[ 1.0400934] mp_pci_scan() at netbsd:mp_pci_scan+0x1d6 sys/arch/x86/x86/mp.c:96
[ 1.0400934] amd64_mainbus_attach() at netbsd:amd64_mainbus_attach+0x467 sys/arch/amd64/amd64/amd64_mainbus.c:213
[ 1.0400934] config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
[ 1.0400934] config_rootfound() at netbsd:config_rootfound+0x92 config_attach sys/kern/subr_autoconf.c:1810 [inline]
[ 1.0400934] config_rootfound() at netbsd:config_rootfound+0x92 sys/kern/subr_autoconf.c:1290
[ 1.0400934] cpu_configure() at netbsd:cpu_configure+0x58 sys/arch/amd64/amd64/autoconf.c:112
[ 1.0400934] main() at netbsd:main+0x452 sys/kern/init_main.c:555
[ 1.0400934] cpu0: End traceback...
[ 1.0400934] fatal breakpoint trap in supervisor mode
[ 1.0400934] trap type 1 code 0 rip 0xffffffff80235375 cs 0x8 rflags 0x202 cr2 0 ilevel 0x8 rsp 0xffffffff8709fcb0
[ 1.0400934] curlwp 0xffffffff86742cc0 pid 0.0 lowest kstack 0xffffffff8709b2c0
Stopped in pid 0.0 (system) at netbsd:breakpoint+0x5: leave
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0xec sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x2f2 sys/kern/subr_prf.c:293
kern_assert() at netbsd:kern_assert+0x65 sys/arch/amd64/amd64/db_disasm.c:1074
kmem_intr_free() at netbsd:kmem_intr_free+0x242 sys/kern/subr_kmem.c:373
kern_free() at netbsd:kern_free+0x86 sys/kern/kern_malloc.c:172
AcpiDsDeleteWalkState() at netbsd:AcpiDsDeleteWalkState+0x2ca sys/external/bsd/acpica/dist/dispatcher/dswstate.c:842
AcpiPsParseAml() at netbsd:AcpiPsParseAml+0x670 sys/external/bsd/acpica/dist/parser/psparse.c:517
AcpiPsExecuteMethod() at netbsd:AcpiPsExecuteMethod+0x6cf sys/external/bsd/acpica/dist/parser/psxface.c:244
AcpiNsEvaluate() at netbsd:AcpiNsEvaluate+0x6b4 sys/external/bsd/acpica/dist/namespace/nseval.c:250
AcpiRsSetSrsMethodData() at netbsd:AcpiRsSetSrsMethodData+0x19e sys/external/bsd/acpica/dist/resources/rsutils.c:861
AcpiSetCurrentResources() at netbsd:AcpiSetCurrentResources+0x11b sys/external/bsd/acpica/dist/resources/rsxface.c:346
acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b acpi_pci_link_route_irqs sys/dev/acpi/acpi_pci_link.c:905 [inline]
acpi_pci_link_route_interrupt() at netbsd:acpi_pci_link_route_interrupt+0x65b sys/dev/acpi/acpi_pci_link.c:1068
mpacpi_findintr_linkdev() at netbsd:mpacpi_findintr_linkdev+0x84 sys/arch/x86/x86/mpacpi.c:1045
intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 intr_scan_bus sys/arch/x86/x86/mp.c:226 [inline]
intr_find_mpmapping() at netbsd:intr_find_mpmapping+0x297 sys/arch/x86/x86/mp.c:191
pci_intr_map() at netbsd:pci_intr_map+0x2c3 sys/arch/x86/pci/pci_intr_machdep.c:156
pci_intx_alloc() at netbsd:pci_intx_alloc+0x46 sys/arch/x86/pci/pci_intr_machdep.c:448
pci_intr_alloc() at netbsd:pci_intr_alloc+0x11c sys/arch/x86/pci/pci_intr_machdep.c:573
virtio_pci_alloc_interrupts() at netbsd:virtio_pci_alloc_interrupts+0x3ca sys/dev/pci/virtio_pci.c:1105
virtio_child_attach_finish() at netbsd:virtio_child_attach_finish+0x83 sys/dev/pci/virtio.c:1312
viomb_attach() at netbsd:viomb_attach+0x5c3 sys/dev/pci/viomb.c:193
config_attach_internal() at netbsd:config_attach_internal+0x4d6 sys/kern/subr_autoconf.c:1775
--db_more--


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.