NetBSD Problem Report #47062

From www@NetBSD.org  Fri Oct 12 13:47:46 2012
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	by www.NetBSD.org (Postfix) with ESMTP id EF8FA63E19D
	for <gnats-bugs@gnats.NetBSD.org>; Fri, 12 Oct 2012 13:47:45 +0000 (UTC)
Message-Id: <20121012134744.D9B9D63B8DB@www.NetBSD.org>
Date: Fri, 12 Oct 2012 13:47:44 +0000 (UTC)
From: roy@marples.name
Reply-To: roy@marples.name
To: gnats-bugs@NetBSD.org
Subject: panic: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/usr/src/sys/kern/kern_uidinfo.c", line 217
X-Send-Pr-Version: www-1.0

>Number:         47062
>Category:       kern
>Synopsis:       panic: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/usr/src/sys/kern/kern_uidinfo.c", line 217
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Oct 12 13:50:00 +0000 2012
>Closed-Date:    Tue Oct 13 13:01:35 +0000 2015
>Last-Modified:  Tue Oct 13 13:01:35 +0000 2015
>Originator:     Roy Marples
>Release:        -current
>Organization:
>Environment:
NetBSD uberlaptop 6.99.12 NetBSD 6.99.12 (GENERIC) #1: Wed Oct 10 19:16:47 BST 2012  roy@uberlaptop:/usr/obj/sys/arch/i386/compile/GENERIC i386
>Description:
panic: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/usr/src/sys/kern/kern_uidinfo.c", line 217
cpu0: Begin traceback...
kern_assert(c0e50024,c0e50016,c0e50058,c0e4ffe8,d9,ffffffff,c23d21b0,db151bd0,c06d2ba6,0) at netbsd:kern_assert+0x27
chglwpcnt(0,ffffffff,c06d7df7,0,471b40,db151b00,db151b00,c32b7540,c32b7540,db151bd0) at netbsd:chglwpcnt+0x64
lwp_free(c3364d40,0,0,c06f4f5e,c3364d40,c32b7501,c32b8a2c,1,0,c06c7ed6) at netbsd:lwp_free+0xf1
lwp_wait(c32b7540,0,0,1,db151c2c,0,c32b8a2c,0,db151cb4,c06c815b) at netbsd:lwp_wait+0x10c
exit_lwps(c32b7540,c2919480,1,c32b4500,c32b4400,1,db151c98,c0a1d8d9,4,2) at netbsd:exit_lwps+0x129
exit1(c32b7540,100,c32b8a2c,db151ce0,c0a2c907,c32b7540,db151cf8,db151d20,0,db151d3c) at netbsd:exit1+0xf8
exit1(c32b7540,db151cf8,db151d20,0,db151d3c,c0a2cc21,c0f94f6c,c32b7540,db151cf8,db151d20) at netbsd:exit1
sy_call(c0f94f6c,c32b7540,db151cf8,db151d20,1,bbacaff4,bfbfec90,bba9de4b,c32b7540,2) at netbsd:sy_call+0x2e
syscall() at netbsd:syscall+0x12b
--- syscall (number 1) ---
bba439a7:
cpu0: End traceback...

>How-To-Repeat:
Just reboot -current on an x86 :)
>Fix:

>Release-Note:

>Audit-Trail:
From: christos@zoulas.com (Christos Zoulas)
To: gnats-bugs@NetBSD.org, kern-bug-people@netbsd.org, 
	gnats-admin@netbsd.org, netbsd-bugs@netbsd.org
Cc: 
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt >= 0" failed: file "/usr/src/sys/kern/kern_uidinfo.c", line 217
Date: Fri, 12 Oct 2012 10:22:28 -0400

 On Oct 12,  1:50pm, roy@marples.name (roy@marples.name) wrote:
 -- Subject: kern/47062: panic: kernel diagnostic assertion "lwpcnt >= 0" fail

 Is that reproducible? What's the current process running when that happens?

 christos

From: Roy Marples <roy@marples.name>
To: <gnats-bugs@netbsd.org>
Cc: <kern-bug-people@netbsd.org>, <gnats-admin@netbsd.org>,
 <netbsd-bugs@netbsd.org>
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt
 =?UTF-8?Q?=3E=3D=20=30=22=20failed=3A=20file=20=22/usr/src/sys/kern/kern?=
 =?UTF-8?Q?=5Fuidinfo=2Ec=22=2C=20line=20=32=31=37?=
Date: Fri, 12 Oct 2012 16:18:22 +0100

 On 12/10/2012 15:25, christos@zoulas.com wrote:
 >  On Oct 12,  1:50pm, roy@marples.name (roy@marples.name) wrote:
 >  -- Subject: kern/47062: panic: kernel diagnostic assertion "lwpcnt 
 > >= 0" fail
 >
 >  Is that reproducible? What's the current process running when that 
 > happens?

 100% reproducible.
 Hard to say what the current process is as it only happens during the 
 shutdown sequence.

 Roy

From: christos@zoulas.com (Christos Zoulas)
To: Roy Marples <roy@marples.name>, <gnats-bugs@netbsd.org>
Cc: <kern-bug-people@netbsd.org>, <gnats-admin@netbsd.org>, 
	<netbsd-bugs@netbsd.org>
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt =?UTF-8?Q?=3E=3D=20=30=22=20failed=3A=20file=20=22/usr/src/sys/kern/kern?= =?UTF-8?Q?=5Fuidinfo=2Ec=22=2C=20line=20=32=31=37?=
Date: Fri, 12 Oct 2012 12:06:15 -0400

 On Oct 12,  4:18pm, roy@marples.name (Roy Marples) wrote:
 -- Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt =?UTF-

 | 100% reproducible.
 | Hard to say what the current process is as it only happens during the 
 | shutdown sequence.

 run ps from ddb? I can send you a patch to debug this if you want.

 christos

From: Roy Marples <roy@marples.name>
To: <christos@zoulas.com>
Cc: <gnats-bugs@netbsd.org>, <kern-bug-people@netbsd.org>,
 <gnats-admin@netbsd.org>, <netbsd-bugs@netbsd.org>
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt
 =?UTF-8?Q?=3E=3D=20=30=22=20failed=3A=20file=20=22/usr/src/sys/kern/kern?=
 =?UTF-8?Q?=5Fuidinfo=2Ec=22=2C=20line=20=32=31=37?=
Date: Fri, 12 Oct 2012 19:54:33 +0100

 On 12/10/2012 17:06, christos@zoulas.com wrote:
 > On Oct 12,  4:18pm, roy@marples.name (Roy Marples) wrote:
 > -- Subject: Re: kern/47062: panic: kernel diagnostic assertion 
 > "lwpcnt =?UTF-
 >
 > | 100% reproducible.
 > | Hard to say what the current process is as it only happens during 
 > the
 > | shutdown sequence.
 >
 > run ps from ddb? I can send you a patch to debug this if you want.

 The process is hald-runner all the time after 5 reboots on the same 
 pid.

From: Thomas Klausner <wiz@NetBSD.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt >= 0"
 failed: file "/usr/src/sys/kern/kern_uidinfo.c", line 217
Date: Fri, 12 Oct 2012 21:39:03 +0200

 On Fri, Oct 12, 2012 at 06:55:11PM +0000, Roy Marples wrote:
 >  The process is hald-runner all the time after 5 reboots on the same 
 >  pid.

 I've heard multiple times that hald is not save and causes panics. It
 did at one point for me as well (though it had worked some time ago as
 well) and I've since disabled it.
  Thomas

From: Roy Marples <roy@marples.name>
To: <gnats-bugs@netbsd.org>
Cc: <kern-bug-people@netbsd.org>, <gnats-admin@netbsd.org>,
 <netbsd-bugs@netbsd.org>
Subject: Re: kern/47062: panic: kernel diagnostic assertion "lwpcnt
 =?UTF-8?Q?=3E=3D=20=30=22=20=20failed=3A=20file=20=22/usr/src/sys/kern/ke?=
 =?UTF-8?Q?rn=5Fuidinfo=2Ec=22=2C=20line=20=32=31=37?=
Date: Fri, 12 Oct 2012 21:27:38 +0100

 On 12/10/2012 20:40, Thomas Klausner wrote:
 >  I've heard multiple times that hald is not save and causes panics. 
 > It
 >  did at one point for me as well (though it had worked some time ago 
 > as
 >  well) and I've since disabled it.

 Regardless of how safe or unsafe it is, no userspace process should be 
 able to panic the kernel.

State-Changed-From-To: open->closed
State-Changed-By: roy@NetBSD.org
State-Changed-When: Tue, 13 Oct 2015 13:01:35 +0000
State-Changed-Why:
Fixed in sys/kern/kern_lwp.c r1.177


>Unformatted:

Home	PR Database Search