netbsd boot error: panic: 1 -> 0 (2)

[syzbot]

Hello,

syzbot found the following crash on:

HEAD commit: 2c5524b0 sunxi_gpio: set interrupt debounce filter to HOSC..
git tree: netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=1386fcd2a00000
dashboard link: https://syzkaller.appspot.com/bug?extid=a424f3daa2f78ff9fa6e

Unfortunately, I don't have any reproducer for this crash yet.

IMPORTANT: if you fix the bug, please add the following tag to the commit:
Reported-by: syzbot+a424f3...@syzkaller.appspotmail.com

ddb.onpanic: 1 -> 0
Starting network.
IPv6 mode: host
Configuring network interfaces: vioif0vioif0: carrier acquired
DUID 00:01:00:01:24:89:b1:63:52:54:00:12:34:56
vioif0: IAID 0a:80:00:db
vioif0: adding address fe80::a14f:377b:8bec:f136
vioif0: soliciting a DHCP lease
vioif0: offered 10.128.0.219 from 169.254.169.254
vioif0: soliciting an IPv6 router
vioif0: leased 10.128.0.219 for 86400 seconds
vioif0: adding route to 10.128.0.219/32
vioif0: adding host route to 10.128.0.1
vioif0: adding default route via 10.128.0.1
vioif0: Setting hostname: ci2-netbsd-test-0.c.syzkaller.internal
forked to background, child pid 213
.
Adding interface aliases:.
Waiting for DAD to complete for statically configured addresses...
Starting dhcpcd.
Building databases: dev, utmp, utmpx.
wsconscfg: Cannot open `/dev/ttyEcfg': Device not configured
wsconscfg: Cannot open `/dev/ttyEcfg': Device not configured
wsconscfg: Cannot open `/dev/ttyEcfg': Device not configured
wsconscfg: Cannot open `/dev/ttyEcfg': Device not configured
Starting syslogd.
Mounting all file systems...
[ 14.4456827] /dev/sd0a: file system not clean (fs_clean=0x4); please
fsck(8)
[ 14.4557243] /dev/sd0a: lost blocks 0 files 0
Clearing temporary files.
Checking quotas: done.
swapctl: setting dump device to /dev/sd0b
Starting virecover.
Checking for core dump...
savecore: no core dump
Starting local daemons:.
Updating motd.
Starting powerd.
Starting sshd.
[ 15.9881343] panic: ffs_blkfree_common: freeing free frag: dev = 0x400,
block = 339743, fs = /
[ 15.9881343] cpu1: Begin traceback...
[ 15.9981408] vpanic() at netbsd:vpanic+0x267
[ 16.0281870] snprintf() at netbsd:snprintf
[ 16.0482173] ffs_blkfree_common() at netbsd:ffs_blkfree_common+0x18b0
[ 16.0782680] ffs_blkfree_cg() at netbsd:ffs_blkfree_cg+0x30a
[ 16.0983090] ffs_blkfree() at netbsd:ffs_blkfree+0x272
[ 16.1195841] ffs_realloccg() at netbsd:ffs_realloccg+0x794
[ 16.1483965] ffs_balloc() at netbsd:ffs_balloc+0x2139
[ 16.1684102] ufs_gop_alloc() at netbsd:ufs_gop_alloc+0x13e
[ 16.1884409] ufs_balloc_range() at netbsd:ufs_balloc_range+0x2df
[ 16.2084732] ffs_write() at netbsd:ffs_write+0x693
[ 16.2285094] VOP_WRITE() at netbsd:VOP_WRITE+0x13a
[ 16.2585534] vn_write() at netbsd:vn_write+0x1c3
[ 16.2785856] do_filewritev() at netbsd:do_filewritev+0x452
[ 16.3086323] syscall() at netbsd:syscall+0x397
[ 16.3186483] --- syscall (number 121) ---
[ 16.3286637] 794395e4270a:
[ 16.3286637] cpu1: End traceback...

[ 16.3286637] dumping to dev 4,1 (offset=8, size=1965980):
[ 16.3386790] dump failed: insufficient space (263793 < 2281451)


[ 17.9412136] rebooting...
SeaBIOS (version 1.8.2-20190503_170316-google)
Total RAM Size = 0x00000001e0000000 = 7680 MiB
CPUs found: 2 Max CPUs supported: 2
found virtio-scsi at 0:3
virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0
removable=0
virtio-scsi blksize=512 sectors=4194304 = 2048 MiB
drive 0x000f2760: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304
Booting from Hard Disk 0...

>> NetBSD/x86 BIOS Boot, Revision 5.11 (Tue May 28 16:43:24 UTC 2019) (from
>> NetBSD 8.99.41)
>> Memory: 639/3144640 k

1. Boot normally
2. Boot single user
3. Drop to boot prompt

Choose an option; RETURN for default; SPACE to stop countdown.
Option 1 will be chosen in 5 seconds. 4 seconds. 3
seconds. 2 seconds. 1 seconds. 0 seconds.
0 seconds.
command(s): rndseed /var/db/entropy-file;boot
default boot twice, skipping...
| / - \ | / - \ 41282720| / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - +2757472\ | / - \ |
/ - [1088488\ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ +1367400| / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | +1046821/ - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ |
/ - \ | / - \ | / - \ | / - \ | / - ]=0x2d57c68
\ | / - \ | / - \ | / - \ | / - \ | / - \ | / - \ | / - WARNING: couldn't
open /var/db/entropy-file
WARNING: 1 module failed to load
[ 1.0000000] pool redzone disabled for 'pdppl'
[ 1.0000000] pool redzone disabled for 'kmem-4096'
[ 1.0000000] Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002,
2003, 2004, 2005,
[ 1.0000000] 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014,
2015, 2016, 2017,
[ 1.0000000] 2018, 2019 The NetBSD Foundation, Inc. All rights
reserved.
[ 1.0000000] Copyright (c) 1982, 1986, 1989, 1991, 1993
[ 1.0000000] The Regents of the University of California. All rights
reserved.

[ 1.0000000] NetBSD 8.99.42 (GENERIC_SYZKALLER) #287: Tue Jun 4 22:44:03
UTC 2019
[ 1.0000000]
root@ci2:/syzkaller/managers/netbsd/kernel/sys/arch/amd64/compile/obj/GENERIC_SYZKALLER
[ 1.0000000] total memory = 7679 MB
[ 1.0000000] avail memory = 6660 MB
[ 1.0000000] pool redzone disabled for 'buf64k'
[ 1.0000000] cpu_rng: RDRAND
[ 1.0000000] running cgd selftest aes-xts-256 aes-xts-512 done
[ 1.0000030] mainbus0 (root)
[ 1.0000030] ACPI: RSDP 0x00000000000F27A0 000014 (v00 Google)
[ 1.0000030] ACPI: RSDT 0x00000000BFFFDA50 000038 (v01 Google GOOGRSDT
00000001 GOOG 00000001)
[ 1.0000030] ACPI: FACP 0x00000000BFFFFF00 0000F4 (v02 Google GOOGFACP
00000001 GOOG 00000001)
[ 1.0000030] ACPI: DSDT 0x00000000BFFFDA90 0018BA (v01 Google GOOGDSDT
00000001 GOOG 00000001)
[ 1.0000030] ACPI: FACS 0x00000000BFFFFEC0 000040
[ 1.0000030] ACPI: SSDT 0x00000000BFFFF540 000980 (v01 Google GOOGSSDT
00000001 GOOG 00000001)
[ 1.0000030] ACPI: APIC 0x00000000BFFFF450 000076 (v01 Google GOOGAPIC
00000001 GOOG 00000001)
[ 1.0000030] ACPI: WAET 0x00000000BFFFF420 000028 (v01 Google GOOGWAET
00000001 GOOG 00000001)
[ 1.0000030] ACPI: SRAT 0x00000000BFFFF350 0000C8 (v01 Google GOOGSRAT
00000001 GOOG 00000001)
[ 1.0000030] ACPI: 2 ACPI AML tables successfully acquired and loaded
[ 1.0000030] ioapic0 at mainbus0 apid 0
[ 1.0000030] cpu0 at mainbus0 apid 0
[ 1.0000030] cpu0: Intel(R) Xeon(R) CPU @ 2.30GHz, id 0x306f0
[ 1.0000030] cpu0: package 0, core 0, smt 0
[ 1.0000030] cpu1 at mainbus0 apid 1
[ 1.0000030] cpu1: Intel(R) Xeon(R) CPU @ 2.30GHz, id 0x306f0
[ 1.0000030] cpu1: package 0, core 0, smt 1
[ 1.0000030] acpi0 at mainbus0: Intel ACPICA 20190405
[ 1.0000030] acpi0: fixed power button present
[ 1.0000030] acpi0: fixed sleep button present
[ 1.0461133] pckbc1 at acpi0 (KBD, PNP0303) (kbd port): io 0x60,0x64 irq 1
[ 1.0461133] pckbc2 at acpi0 (MOU, PNP0F13) (aux port): irq 12
[ 1.0461133] COM1 (PNP0501) at acpi0 not configured
[ 1.0461133] COM2 (PNP0501) at acpi0 not configured
[ 1.0461133] COM3 (PNP0501) at acpi0 not configured
[ 1.0461133] COM4 (PNP0501) at acpi0 not configured
[ 1.0461133] PEVT (QEMU0001) at acpi0 not configured
[ 1.0461133] ACPI: Enabled 16 GPEs in block 00 to 0F
[ 1.0461133] pckbd0 at pckbc1 (kbd slot)
[ 1.0461133] pckbc1: using irq 1 for kbd slot
[ 1.0461133] wskbd0 at pckbd0 mux 1
[ 1.0461133] pms0 at pckbc1 (aux slot)
[ 1.0461133] pckbc1: using irq 12 for aux slot
[ 1.0461133] wsmouse0 at pms0 mux 0
[ 1.0461133] pci0 at mainbus0 bus 0: configuration mode 1
[ 1.0461133] pchb0 at pci0 dev 0 function 0: vendor 8086 product 1237
(rev. 0x02)
[ 1.0461133] pcib0 at pci0 dev 1 function 0: vendor 8086 product 7110
(rev. 0x03)
[ 1.0461133] piixpm0 at pci0 dev 1 function 3: vendor 8086 product 7113
(rev. 0x03)
[ 1.0461133] piixpm0: SMBus disabled
[ 1.0461133] virtio0 at pci0 dev 3 function 0
[ 1.0461133] virtio0: Virtio SCSI Device (rev. 0x00)
[ 1.0461133] vioscsi0 at virtio0: Features: 0x0
[ 1.0461133] vioscsi0: cmd_per_lun 256 qsize 8192 seg_max 64 max_target
253 max_lun 1
[ 1.0461133] virtio0: config interrupting at msix0 vec 0
[ 1.0461133] virtio0: queues interrupting at msix0 vec 1
[ 1.0461133] scsibus0 at vioscsi0: 16 targets, 1 lun per target
[ 1.0461133] virtio1 at pci0 dev 4 function 0
[ 1.0461133] virtio1: Virtio Network Device (rev. 0x00)
[ 1.0461133] vioif0 at virtio1: Features: 0x30020<CTRL_VQ,STATUS,MAC>
[ 1.0461133] vioif0: Ethernet address 42:01:0a:80:00:db
[ 1.0461133] virtio1: config interrupting at msix1 vec 0
[ 1.0461133] virtio1: queues interrupting at msix1 vec 1
[ 1.0461133] isa0 at pcib0
[ 1.0461133] com0 at isa0 port 0x3f8-0x3ff irq 4: ns16550a, working fifo
[ 1.0461133] com0: console
[ 1.0461133] com1 at isa0 port 0x2f8-0x2ff irq 3: ns16550a, working fifo
[ 1.0461133] attimer0 at isa0 port 0x40-0x43
[ 1.0461133] pcppi0 at isa0 port 0x61
[ 1.0461133] spkr0 at pcppi0: PC Speaker
[ 1.0461133] wsbell at spkr0 not configured
[ 1.0461133] midi0 at pcppi0: PC speaker
[ 1.0461133] sysbeep0 at pcppi0
[ 1.0461133] attimer0: attached to pcppi0
[ 1.0461133] acpicpu0 at cpu0: ACPI CPU
[ 1.0461133] acpicpu1 at cpu1: ACPI CPU
[ 1.5796392] sd0 at scsibus0 target 2 lun 0: <Google, PersistentDisk, 1>
disk fixed
[ 1.5897366] sd0: fabricating a geometry
[ 1.5897366] sd0: 2048 MB, 2048 cyl, 64 head, 32 sec, 512 bytes/sect x
4194304 sectors
[ 1.6016464] sd0: fabricating a geometry
[ 1.6016464] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6154866] sd0: async, 8-bit transfers, tagged queueing
[ 1.6294048] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6397421] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6497984] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6597343] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6696523] boot device: sd0
[ 1.6696523] root on sd0a dumps on sd0b
[ 1.6797606] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.6900492] sd0: 1048576 trailing sectors not covered by disklabel
[ 1.7195386] root file system type: ffs
[ 1.7195386] kern.module.path=/stand/amd64/8.99.42/modules
[ 1.7295037] clock: unknown CMOS layout
Tue Jun 4 22:51:34 UTC 2019
Starting root file system check:
/dev/rsd0a: INCORRECT BLOCK COUNT I=770 (4 should be 0) (CORRECTED)
/dev/rsd0a: INCORRECT BLOCK COUNT I=2408 (4 should be 0) (CORRECTED)
339808 DUP I=2433
/dev/rsd0a: UNEXPECTED INCONSISTENCY; RUN fsck_ffs MANUALLY.
Automatic file system check failed; help!
ERROR: ABORTING BOOT (sending SIGTERM to parent)!
[1] Terminated rc_real_work "${@}" 2>&1 |
Done(1) rc_postprocess
Enter pathname of shell or RETURN for /bin/sh:

---
This bug is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this bug report. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[Maxime Villard]

#syz invalid