netbsd boot error: panic: [ 2.ADDR] LOCKDEBUG: Mutex error: mi_switch,528: spin lock held

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 9695800e Panic instead of printf, same as syscall.
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=15bd7e41e00000
kernel config: https://syzkaller.appspot.com/x/.config?x=6e4d6bd2b8e377a2
dashboard link: https://syzkaller.appspot.com/bug?extid=dcb29a8e8ba246bd1801
compiler: g++ (Ubuntu 5.4.0-6ubuntu1~16.04.12) 5.4.0 20160609

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+dcb29a...@syzkaller.appspotmail.com

[ 2.0167757] target 2 lun 0: <Google, PersistentDisk, 1> disk
fixedpanic: [ 2.0738484] LOCKDEBUG: Mutex error: mi_switch,528: spin lock
held
[ 2.0769025] cpu1: Begin t: cebaccati
2.0769025] g a geometry
[ 2.0769025] sd0: 8192 MB, 8192 cyl, 64 head, 32 sec, 512 bytes/sect x
16777216 sectors
[ 2.0968807] vpanic() at sd0: fabricating a geometry
[ 2.1204485] netbsd:vpanic+0x241
[ 2.1268960] sd0: async, 8-bit transfers, tagged queueing
[ 2.1569554] snprintf() at netbsd:snprintf
[ 2.1569554] lockdebug_more() at netbsd:lockdebug_more
[ 2.1569554] lockdebug_barrier() at netbsd:lockdebug_barrier+0xfe
sys/kern/subr_lockdebug.c:684
[ 2.1569554] mi_switch() at netbsd:mi_switch+0xfb
sys/kern/kern_synch.c:532
[ 2.1569554] idle_loop() at netbsd:idle_loop+0x34a x86_curlwp
sys/arch/amd64/compile/obj/GENERIC_SYZKALLER/./machine/cpu.h:79 [inline]
[ 2.1569554] idle_loop() at netbsd:idle_loop+0x34a sys/kern/kern_idle.c:99
[ 2.1569554] cpu_hatch() at netbsd:cpu_hatch+0x267
sys/arch/x86/x86/cpu.c:970
[ 2.1569554] Bad frame pointer: 0xffffcc000f738100
[ 2.1569554] cpu1: End traceback...
[ 2.1569554] fatal breakpoint trap in supervisor mode
[ 2.1569554] trap type 1 code 0 rip 0xffffffff8021ccb5 cs 0x8 rflags
0x246 cr2 0 ilevel 0x8 rsp 0xffffcc016db37b50
[ 2.1569554] curlwp 0xffffcc000f738100 pid 0.20 lowest kstack
0xffffcc016db302c0
Stopped in pid 0.20 (system) at netbsd:breakpoint+0x5: leave
db{1}>


---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Maxime Villard]

dismiss

#syz invalid