assert failed: proccnt >= 0

assert failed: proccnt >= 0

Status: upstream: reported C repro on 2019/07/06 19:39
Reported-by: syzbot+a95f67b348a557728ff8@syzkaller.appspotmail.com
First crash: 1763d, last: 7d13h

▶ ▼ Last patch testing requests (8)


Created	Duration	User	Patch	Repo	Result
2022/06/29 15:31	26m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	report log
2022/06/29 14:02	31m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	report log
2022/06/29 11:58	30m	nogikh@google.com		https://github.com/NetBSD/src trunk	report log
2022/05/20 18:00	8m	nogikh@google.com		https://github.com/NetBSD/src trunk	error OK
2022/05/16 10:58	10m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	error OK
2022/05/13 11:17	12m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	error OK
2022/05/13 11:00	9m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	error OK
2022/04/19 14:32	8m	riastradh@netbsd.org	patch	https://github.com/NetBSD/src trunk	error OK

Sample crash report:

[  63.2996264] panic: kernel diagnostic assertion "proccnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinfo.c", line 242 uid=60928 diff=-1 proccnt=-1
[  63.2996264] cpu0: Begin traceback...
[  63.3196159] vpanic() at netbsd:vpanic+0xc9d
[  63.3696205] kern_assert() at netbsd:kern_assert+0x228
[  63.4196177] chgproccnt() at netbsd:chgproccnt+0x22e sys/kern/kern_uidinfo.c:241
[  63.4796177] do_sys_waitid() at netbsd:do_sys_waitid+0x4678 proc_free sys/kern/kern_exit.c:1259 [inline]
[  63.4796177] do_sys_waitid() at netbsd:do_sys_waitid+0x4678 sys/kern/kern_exit.c:690
[  63.5296175] sys___wait450() at netbsd:sys___wait450+0x2f3 sys/kern/kern_exit.c:745
[  63.5796148] syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
[  63.5796148] syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
[  63.5998507] --- syscall (number 449) ---
[  63.6096178] netbsd:syscall+0x60c:
[  63.6196959] cpu0: End traceback...
[  63.6196959] fatal breakpoint trap in supervisor mode
[  63.6196959] trap type 1 code 0 rip 0xffffffff8023686d cs 0x8 rflags 0x282 cr2 0x764b2ac1e0d0 ilevel 0 rsp 0xffffd800c792d740
[  63.6388641] curlwp 0xffffd80012bbb4c0 pid 1120.1120 lowest kstack 0xffffd800c79262c0
Stopped in pid 1120.1120 (syz-executor1581) at  netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
vpanic() at netbsd:vpanic+0xc9d
kern_assert() at netbsd:kern_assert+0x228
chgproccnt() at netbsd:chgproccnt+0x22e sys/kern/kern_uidinfo.c:241
do_sys_waitid() at netbsd:do_sys_waitid+0x4678 proc_free sys/kern/kern_exit.c:1259 [inline]
do_sys_waitid() at netbsd:do_sys_waitid+0x4678 sys/kern/kern_exit.c:690
sys___wait450() at netbsd:sys___wait450+0x2f3 sys/kern/kern_exit.c:745
syscall() at netbsd:syscall+0x60c sy_invoke sys/sys/syscallvar.h:94 [inline]
syscall() at netbsd:syscall+0x60c sys/arch/x86/x86/syscall.c:138
--- syscall (number 449) ---
netbsd:syscall+0x60c:
Panic string: kernel diagnostic assertion "proccnt >= 0" failed: file "/syzkaller/managers/ci2-netbsd-kmsan/kernel/sys/kern/kern_uidinfo.c", line 242 uid=60928 diff=-1 proccnt=-1
PID    LID S CPU     FLAGS       STRUCT LWP *               NAME WAIT
5054  5054 2   0         0   ffffd80012bbb900   syz-executor1581
4607  4607 2   0         0   ffffd800136d7ac0   syz-executor1581
3905  4528 2   0         0   ffffd800136e6b00   syz-executor1581
3905  4318 2   0         0   ffffd800136e6280   syz-executor1581
3905 >3905 7   1  10000000   ffffd800136e66c0   syz-executor1581
4787  4787 2   0         0   ffffd800136d7240   syz-executor1581
4788  4788 2   0         0   ffffd800136d7680   syz-executor1581
1240  1240 2   0       140   ffffd80012c47940   syz-executor1581
1241  1241 2   1       140   ffffd80012c47500   syz-executor1581
1243  1243 2   0       140   ffffd80012c470c0   syz-executor1581
1120 >1120 7   0        40   ffffd80012bbb4c0   syz-executor1581
1108  1108 2   0       140   ffffd80012bbb080   syz-executor1581
1224  1224 2   0       140   ffffd800122ffb00   syz-executor1581
1242  1242 3   0       180   ffffd800122ff6c0   syz-executor1581 nanoslp
1231  1231 3   0       180   ffffd8001251c300               sshd select
1082  1082 3   0       180   ffffd800122ff280              getty nanoslp
813    813 3   1       180   ffffd800125fcbc0              getty nanoslp
1222  1222 3   0       180   ffffd800121ffac0              getty nanoslp
1184  1184 3   0       1c0   ffffd800121fc200              getty ttyraw
952    952 3   0       180   ffffd800123902c0               sshd select
1088  1088 3   1       180   ffffd80012b8c8c0             powerd kqueue
700    700 3   0       180   ffffd80012b8c480            syslogd kqueue
747    747 3   0       180   ffffd80012b8c040             dhcpcd poll
742    742 3   0       180   ffffd8001251c740             dhcpcd poll
745    745 3   1       180   ffffd800125fc780             dhcpcd poll
598    598 3   0       180   ffffd80012390700             dhcpcd poll
292    292 3   0       180   ffffd800125fc340             dhcpcd poll
485    485 3   0       180   ffffd80012390b40             dhcpcd poll
291    291 3   0       180   ffffd8001251cb80             dhcpcd poll
1        1 3   0       180   ffffd80011ede100               init wait
0      673 3   0       200   ffffd800121fc640            physiod physiod
0      196 3   0       200   ffffd800121ff680          pooldrain pooldrain
0      195 3   0       200   ffffd800121ff240            ioflush syncer
0      194 3   1       200   ffffd800121fca80           pgdaemon pgdaemon
0      167 3   1       200   ffffd8001216ba40               usb7 usbevt
0      172 3   1       200   ffffd8001216b600               usb6 usbevt
0      170 3   1       200   ffffd8001216b1c0               usb5 usbevt
0      168 3   1       200   ffffd8001213ca00               usb4 usbevt
0      166 3   1       200   ffffd8001213c5c0               usb3 usbevt
0      165 3   1       200   ffffd8001213c180               usb2 usbevt
0       31 3   0       200   ffffd800120859c0               usb1 usbevt
0       63 2   0       240   ffffd80012085580               usb0
0      126 3   1       200   ffffd80012085140         usbtask-dr usbtsk
0      125 3   1       200   ffffd80011ede980         usbtask-hc usbtsk
0      124 3   0       200   ffffd800103f4b00          swwreboot swwreboot
0      123 3   0       200   ffffd80011ede540             npfgc0 npfgcw
0      122 3   1       200   ffffd80011ed1940            rt_free rt_free
0      121 3   1       200   ffffd80011ed1500              unpgc unpgc
0      120 3   0       200   ffffd80011ed10c0    key_timehandler key_timehandler
0      119 3   1       200   ffffd80011ecc900    icmp6_wqinput/1 icmp6_wqinput
0      118 3   0       200   ffffd80011ecc4c0    icmp6_wqinput/0 icmp6_wqinput
0      117 3   0       200   ffffd80011ecc080          nd6_timer nd6_timer
0      116 3   1       200   ffffd80011eaa8c0    carp6_wqinput/1 carp6_wqinput
0      115 3   0       200   ffffd80011eaa480    carp6_wqinput/0 carp6_wqinput
0      114 3   1       200   ffffd80011eaa040     carp_wqinput/1 carp_wqinput
0      113 3   0       200   ffffd80011cecb80     carp_wqinput/0 carp_wqinput
0      112 3   1       200   ffffd80011cec740     icmp_wqinput/1 icmp_wqinput
0      111 3   0       200   ffffd80011ceebc0     icmp_wqinput/0 icmp_wqinput
0      110 3   0       200   ffffd80011cee340           rt_timer rt_timer
0      109 3   0       200   ffffd80011cee780        vmem_rehash vmem_rehash
0      100 3   0       200   ffffd80011cec300          entbutler entropy
0       99 3   0       200   ffffd800117e0b40              viomb balloon
0       98 3   1       200   ffffd800117e0700      vioif0_txrx/1 vioif0_txrx
0       97 3   0       200   ffffd800117e02c0      vioif0_txrx/0 vioif0_txrx
0       30 3   0       200   ffffd800103f46c0           scsibus0 sccomp
0       29 3   0       200   ffffd800103f4280               pms0 pmsreset
0       28 3   1       200   ffffd800103d9ac0            xcall/1 xcall
0       27 1   1       200   ffffd800103d9680          softser/1
0       26 1   1       200   ffffd800103d9240          softclk/1
0       25 1   1       200   ffffd800103d7a80          softbio/1
0       24 1   1       200   ffffd800103d7640          softnet/1
0       23 1   1       201   ffffd800103d7200             idle/1
0       22 3   0       200   ffffd8000f1e3a40           lnxsyswq lnxsyswq
0       21 3   0       200   ffffd8000f1e3600           lnxubdwq lnxubdwq
0       20 3   0       200   ffffd8000f1e31c0           lnxpwrwq lnxpwrwq
0       19 3   0       200   ffffd8000f1e1a00           lnxlngwq lnxlngwq
0       18 3   0       200   ffffd8000f1e15c0           lnxhipwq lnxhipwq
0       17 3   0       200   ffffd8000f1e1180           lnxrcugc lnxrcugc
0       16 3   0       200   ffffd8000f1db9c0             sysmon smtaskq
0       15 3   0       200   ffffd8000f1db580         pmfsuspend pmfsuspend
0       14 3   0       200   ffffd8000f1db140           pmfevent pmfevent
0       13 3   0       200   ffffd8000f1d9980         sopendfree sopendfr
0       12 3   1       200   ffffd8000f1d9540             ifwdog ifwdog
0       11 3   0       200   ffffd8000f1d9100            iflnkst iflnkst
0       10 3   0       200   ffffd8000f1cf940           nfssilly nfssilly
0        9 3   0       200   ffffd8000f1cf500             vdrain vdrain
0        8 3   1       200   ffffd8000f1cf0c0          modunload mod_unld
0        7 3   0       200   ffffd8000ebdb900            xcall/0 xcall
0        6 1   0       200   ffffd8000ebdb4c0          softser/0
0        5 1   0       200   ffffd8000ebdb080          softclk/0
0        4 1   0       200   ffffd8000ebd98c0          softbio/0
0        3 1   0       200   ffffd8000ebd9480          softnet/0
0        2 1   0       201   ffffd8000ebd9040             idle/0
0        0 3   0       200   ffffffff8686ea80            swapper uvm
[Locks tracked through LWPs]

****** LWP 3905.3905 (syz-executor1581) @ 0xffffd800136e66c0, l_stat=7

*** Locks held:

* Lock 0 (initialized at netbsd:amap_ctor+0xdf sys/uvm/uvm_amap.c:265)
lock address : ffffd8001335b740
type         : sleep/adaptive
initialized  : netbsd:amap_ctor+0xdf
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  1
relevant lwp : 0xffffd800136e66c0 last held: 0xffffd800136e66c0
last locked* : netbsd:uvm_fault_internal+0x1d08
unlocked     : netbsd:uvm_fault_upper_enter+0x12e9
owner/count  : 000000000000000000 flags    : 000000000000000000
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 4787.4787 (syz-executor1581) @ 0xffffd800136d7240, l_stat=2

*** Locks held:

* Lock 0 (initialized at netbsd:pmap_ctor+0xc0 sys/arch/x86/x86/pmap.c:2872)
lock address : ffffd80012bb8e00
type         : sleep/adaptive
initialized  : netbsd:pmap_ctor+0xc0
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd800136d7240 last held: 0xffffd800136d7240
last locked* : netbsd:pmap_enter_ma+0x11ce
unlocked     : netbsd:pmap_extract+0x72d
owner field  : 0xffffd800136d7240 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

*** Locks wanted: none

****** LWP 742.742 (dhcpcd) @ 0xffffd8001251c740, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001251c740 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 745.745 (dhcpcd) @ 0xffffd800125fc780, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd800125fc780 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 485.485 (dhcpcd) @ 0xffffd80012390b40, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012390b40 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 291.291 (dhcpcd) @ 0xffffd8001251cb80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8001251cb80 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.26 (softclk/1) @ 0xffffd800103d9240, l_stat=1

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  1 last held:                  0
relevant lwp : 0xffffd800103d9240 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.11 (iflnkst) @ 0xffffd8000f1d9100, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd8000f1d9100 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

****** LWP 0.0 (swapper) @ 0xffffffff8686ea80, l_stat=3

*** Locks held: none

*** Locks wanted:

* Lock 0 (initialized at netbsd:module_hook_init+0x43 sys/kern/kern_module_hook.c:132)
lock address : netbsd:module_hook
type         : sleep/adaptive
initialized  : netbsd:module_hook_init+0x43
shared holds :                  0 exclusive:                  0
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffffff8686ea80 last held: 000000000000000000
last locked  : 0
unlocked*    : 0
owner field  : 000000000000000000 wait/spin:                0/0
Turnstile: no active turnstile for this lock.

[Locks tracked through CPUs]

******* Locks held on cpu0:

* Lock 0 (initialized at netbsd:kprintf_init+0xcb sys/kern/subr_prf.c:156)
lock address : netbsd:kprintf_mtx
type         : spin
initialized  : netbsd:kprintf_init+0xcb
shared holds :                  0 exclusive:                  1
shares wanted:                  0 exclusive:                  0
relevant cpu :                  0 last held:                  0
relevant lwp : 0xffffd80012bbb4c0 last held: 0xffffd80012bbb4c0
last locked* : netbsd:vpanic+0x624
unlocked     : netbsd:log+0x618
owner field  : 0x0000000000000800 wait/spin:                0/1

              PAGE FLAG   PQ            UOBJECT              UANON
0xffffd80000017180 0001 00000000                0x0                0x0
0xffffd80000017200 0041 00000000                0x0                0x0
0xffffd80000017280 0041 00000000                0x0                0x0
0xffffd80000017300 0041 00000000                0x0                0x0
0xffffd80000017380 0041 00000000                0x0                0x0
0xffffd80000017400 0041 00000000                0x0                0x0
0xffffd80000017480 0041 00000000                0x0                0x0
0xffffd80000017500 0041 00000000                0x0                0x0
0xffffd80000017580 0041 00000000                0x0                0x0
0xffffd80000017600 0041 00000000                0x0                0x0
0xffffd80000017680 0041 00000000                0x0                0x0
0xffffd80000017700 0041 00000000                0x0                0x0
0xffffd80000017780 0041 00000000                0x0                0x0
0xffffd80000017800 0041 00000000                0x0                0x0
0xffffd80000017880 0041 00000000                0x0                0x0
0xffffd80000017900 0041 00000000                0x0                0x0
0xffffd80000017980 0041 00000000                0x0                0x0
0xffffd80000017a00 0041 00000000                0x0                0x0
0xffffd80000017a80 0041 00000000                0x0                0x0
0xffffd80000017b00 0041 00000000                0x0                0x0
0xffffd80000017b80 0041 00000000                0x0                0x0
0xffffd80000017c00 0041 00000000                0x0                0x0
0xffffd80000017c80 0041 00000000                0x0                0x0
0xffffd80000017d00 0041 00000000                0x0                0x0
0xffffd80000017d80 0041 00000000                0x0                0x0
0xffffd80000017e00 0041 00000000                0x0                0x0
0xffffd80000017e80 0041 00000000                0x0                0x0
0xffffd80000017f00 0041 00000000                0x0                0x0
0xffffd80000017f80 0041 00000000                0x0                0x0
0xffffd80000018000 0041 00000000                0x0                0x0
0xffffd80000018080 0041 00000000                0x0                0x0
0xffffd80000018100 0041 00000000                0x0                0x0
0xffffd80000018180 0041 00000000                0x0                0x0
0xffffd80000018200 0041 00000000                0x0                0x0
0xffffd80000018280 0041 00000000                0x0                0x0
0xffffd80000018300 0041 00000000                0x0                0x0
0xffffd80000018380 0041 00000000                0x0                0x0
0xffffd80000018400 0041 00000000                0x0                0x0
0xffffd80000018480 0041 00000000                0x0                0x0
0xffffd80000018500 0041 00000000                0x0                0x0
0xffffd80000018580 0041 00000000                0x0                0x0
0xffffd80000018600 0041 00000000                0x0                0x0
0xffffd80000018680 0041 00000000                0x0                0x0
0xffffd80000018700 0041 00000000                0x0                0x0
0xffffd80000018780 0041 00000000                0x0                0x0
0xffffd80000018800 0041 00000000                0x0                0x0
0xffffd80000018880 0041 00000000                0x0                0x0
0xffffd80000018900 0041 00000000                0x0                0x0
0xffffd80000018980 0041 00000000                0x0                0x0
0xffffd80000018a00 0041 00000000                0x0                0x0
0xffffd80000018a80 0041 00000000                0x0                0x0
0xffffd80000018b00 0041 00000000                0x0                0x0
0xffffd80000018b80 0041 00000000                0x0                0x0
0xffffd80000018c00 0041 00000000                0x0                0x0
0xffffd80000018c80 0041 00000000                0x0                0x0
0xffffd80000018d00 0041 00000000                0x0                0x0
0xffffd80000018d80 0041 00000000                0x0                0x0
0xffffd80000018e00 0041 00000000                0x0                0x0
0xffffd80000018e80 0041 00000000                0x0                0x0
0xffffd80000018f00 0041 00000000                0x0                0x0
0xffffd80000018f80 0041 00000000                0x0                0x0
0xffffd80000019000 0041 00000000                0x0                0x0
0xffffd80000019080 0041 00000000                0x0                0x0
0xffffd80000019100 0041 00000000                0x0                0x0
0xffffd80000019180 0041 00000000                0x0                0x0
0xffffd80000019200 0041 00000000                0x0                0x0
0xffffd80000019280 0041 00000000                0x0                0x0
0xffffd80000019300 0041 00000000                0x0                0x0
0xffffd80000019380 0041 00000000                0x0                0x0
0xffffd80000019400 0041 00000000                0x0                0x0
0xffffd80000019480 0041 00000000                0x0                0x0
0xffffd80000019500 0041 00000000                0x0                0x0
0xffffd80000019580 0041 00000000                0x0                0x0
0xffffd80000019600 0041 00000000                0x0                0x0
0xffffd80000019680 0041 00000000                0x0                0x0
0xffffd80000019700 0041 00000000                0x0                0x0
0xffffd80000019780 0041 00000000                0x0                0x0
0xffffd80000019800 0041 00000000                0x0                0x0
0xffffd80000019880 0041 00000000                0x0                0x0
0xffffd80000019900 0041 00000000                0x0                0x0
0xffffd80000019980 0041 00000000                0x0                0x0
0xffffd80000019a00 0041 00000000                0x0                0x0
0xffffd80000019a80 0041 00000000                0x0                0x0
0xffffd80000019b00 0041 00000000                0x0                0x0
0xffffd80000019b80 0041 00000000                0x0                0x0
0xffffd80000019c00 0041 00000000                0x0                0x0
0xffffd80000019c80 0041 00000000                0x0                0x0
0xffffd80000019d00 0041 00000000                0x0                0x0
0xffffd80000019d80 0041 00000000                0x0                0x0
0xffffd80000019e00 0041 00000000                0x0                0x0
0xffffd80000019e80 0041 00000000                0x0                0x0
0xffffd80000019f00 0041 00000000                0x0                0x0
0xffffd80000019f80 0041 00000000                0x0                0x0
0xffffd8000001a000 0041 00000000                0x0                0x0
0xffffd8000001a080 0041 00000000                0x0                0x0
0xffffd8000001a100 0041 00000000                0x0                0x0
0xffffd8000001a180 0041 00000000                0x0                0x0
0xffffd8000001a200 0041 00000000                0x0                0x0
0xffffd8000001a280 0041 00000000                0x0                0x0
0xffffd8000001a300 0041 00000000                0x0                0x0
0xffffd8000001a380 0041 00000000                0x0                0x0
0xffffd8000001a400 0041 00000000                0x0                0x0
0xffffd8000001a480 0041 00000000                0x0                0x0
0xffffd8000001a500 0041 00000000                0x0                0x0
0xffffd8000001a580 0041 00000000                0x0                0x0
0xffffd8000001a600 0041 00000000                0x0                0x0
0xffffd8000001a680 0041 00000000                0x0                0x0
0xffffd8000001a700 0041 00000000                0x0                0x0
0xffffd8000001a780 0041 00000000                0x0                0x0
0xffffd8000001a800 0041 00000000                0x0                0x0
0xffffd8000001a880 0041 00000000                0x0                0x0
0xffffd8000001a900 0041 00000000                0x0                0x0
0xffffd8000001a980 0041 00000000                0x0                0x0
0xffffd8000001aa00 0041 00000000                0x0                0x0
0xffffd8000001aa80 0041 00000000                0x0                0x0
0xffffd8000001ab00 0041 00000000                0x0                0x0
0xffffd8000001ab80 0041 00000000                0x0                0x0
0xffffd8000001ac00 0041 00000000                0x0                0x0
0xffffd8000001ac80 0041 00000000                0x0                0x0
0xffffd8000001ad00 0041 00000000                0x0                0x0
0xffffd8000001ad80 0041 00000000                0x0                0x0
0xffffd8000001ae00 0041 00000000                0x0                0x0
0xffffd8000001ae80 0041 00000000                0x0                0x0
0xffffd8000001af00 0041 00000000                0x0                0x0
0xffffd8000001af80 0041 00000000                0x0                0x0
0xffffd8000001b000 0041 00000000                0x0                0x0
0xffffd8000001b080 0041 00000000                0x0                0x0
0xffffd8000001b100 0041 00000000                0x0                0x0
0xffffd8000001b180 0041 00000000                0x0                0x0
0xffffd8000001b200 0041 00000000                0x0                0x0
0xffffd8000001b280 0041 00000000                0x0                0x0
0xffffd8000001b300 0041 00000000                0x0                0x0
0xffffd8000001b380 0041 00000000                0x0                0x0
0xffffd8000001b400 0041 00000000                0x0                0x0
0xffffd8000001b480 0041 00000000                0x0                0x0
0xffffd8000001b500 0041 00000000                0x0                0x0
0xffffd8000001b580 0041 00000000                0x0                0x0
0xffffd8000001b600 0041 00000000                0x0                0x0
0xffffd8000001b680 0041 00000000                0x0                0x0
0xffffd8000001b700 0041 00000000                0x0                0x0
0xffffd8000001b780 0041 00000000                0x0                0x0
0xffffd8000001b800 0041 00000000                0x0                0x0
0xffffd8000001b880 0041 00000000                0x0                0x0
0xffffd8000001b900 0041 00000000                0x0                0x0
0xffffd8000001b980 0041 00000000                0x0                0x0
0xffffd8000001ba00 0041 00000000                0x0                0x0
0xffffd8000001ba80 0041 00000000                0x0                0x0
0xffffd8000001bb00 0041 00000000                0x0                0x0
0xffffd8000001bb80 0041 00000000                0x0                0x0
0xffffd8000001bc00 0041 00000000                0x0                0x0
0xffffd8000001bc80 0041 00000000                0x0                0x0
0xffffd8000001bd00 0041 00000000                0x0                0x0
0xffffd8000001bd80 0041 00000000                0x0                0x0
0xffffd8000001be00 0041 00000000                0x0                0x0
0xffffd8000001be80 0041 00000000                0x0                0x0
0xffffd8000001bf00 0041 00000000                0x0                0x0
0xffffd8000001bf80 0041 00000000                0x0                0x0
0xffffd8000001c000 0041 00000000                0x0                0x0
0xffffd8000001c080 0041 00000000                0x0                0x0
0xffffd8000001c100 0041 00000000                0x0                0x0
0xffffd8000001c180 0041 00000000                0x0                0x0
0xffffd8000001c200 0041 00000000                0x0                0x0
0xffffd8000001c280 0041 00000000                0x0                0x0
0xffffd8000001c300 0041 00000000                0x0                0x0
0xffffd8000001c380 0041 00000000                0x0                0x0
0xffffd8000001c400 0041 00000000                0x0                0x0
0xffffd8000001c480 0041 00000000                0x0                0x0
0xffffd8000001c500 0041 00000000                0x0                0x0
0xffffd8000001c580 0041 00000000                0x0                0x0
0xffffd8000001c600 0041 00000000                0x0                0x0
0xffffd8000001c680 0041 00000000                0x0                0x0
0xffffd8000001c700 0041 00000000                0x0                0x0
0xffffd8000001c780 0041 00000000                0x0                0x0
0xffffd8000001c800 0001 00000000                0x0                0x0
0xffffd8000001c880 0001 00000000                0x0                0x0
0xffffd8000001c900 0001 00000000                0x0                0x0
0xffffd8000001c980 0001 00000000                0x0                0x0
0xffffd8000001ca00 0001 00000000                0x0                0x0
0xffffd8000001ca80 0001 00000000                0x0                0x0
0xffffd8000001cb00 0001 00000000                0x0                0x0
0xffffd8000001cb80 0001 00000000                0x0                0x0
0xffffd8000001cc00 0001 00000000                0x0                0x0
0xffffd8000001cc80 0001 00000000                0x0                0x0
0xffffd8000001cd00 0001 00000000                0x0                0x0
0xffffd8000001cd80 0001 00000000                0x0                0x0
0xffffd8000001ce00 0001 00000000                0x0                0x0
0xffffd8000001ce80 0001 00000000                0x0                0x0
0xffffd8000001cf00 0001 00000000                0x0                0x0
0xffffd8000001cf80 0001 00000000                0x0                0x0
0xffffd8000001d000 0001 00000000                0x0                0x0
0xffffd8000001d080 0001 00000000                0x0                0x0
0xffffd8000001d100 0001 00000000                0x0                0x0
0xffffd8000001d180 0001 00000000                0x0                0x0
0xffffd8000001d200 0001 00000000                0x0                0x0
0xffffd8000001d280 0001 00000000                0x0                0x0
0xffffd8000001d300 0001 00000000                0x0                0x0
0xffffd8000001d380 0001 00000000                0x0                0x0
0xffffd8000001d400 0001 00000000                0x0                0x0
0xffffd8000001d480 0001 00000000                0x0

Crashes (168):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	Syz repro	C repro	Assets (help?)	Manager	Title
2024/01/14 13:23	netbsd	23ee83f7c0ae	551587c1	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2024/01/04 05:43	netbsd	23ee83f7c0ae	28c42cff	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/12/09 20:45	netbsd	23ee83f7c0ae	28b24332	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/12/02 02:13	netbsd	23ee83f7c0ae	f819d6f7	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/12/02 01:52	netbsd	23ee83f7c0ae	f819d6f7	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/11/22 16:26	netbsd	23ee83f7c0ae	03e12510	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/11/21 12:12	netbsd	23ee83f7c0ae	cb976f63	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/30 12:23	netbsd	3b1bc23486c3	62df2017	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/30 05:35	netbsd	532e75535bf0	62df2017	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/01/05 14:48	netbsd	0a1d38e06539	1dac8c7a	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/01/05 14:02	netbsd	0a1d38e06539	1dac8c7a	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/01/05 13:51	netbsd	0a1d38e06539	1dac8c7a	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2022/09/26 23:28	netbsd	e73c048607cc	d59ba983	.config	console log	report	syz	C		ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2022/09/26 23:11	netbsd	e73c048607cc	d59ba983	.config	console log	report	syz	C	[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2022/06/12 13:53	netbsd	b440e49b7769	0d5abf15	.config	console log	report	syz	C		ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2019/10/25 01:05	netbsd	5ae042d1a3ed	d01bb02a	.config	console log	report	syz	C		ci2-netbsd
2023/10/23 19:22	netbsd	23ee83f7c0ae	989a3687	.config	console log	report	syz		[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2022/09/26 23:25	netbsd	e73c048607cc	d59ba983	.config	console log	report	syz		[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2021/03/12 04:07	netbsd	b960aff9b7de	429d8a6b	.config	console log	report				ci2-netbsd-kmsan	assert failed: proccnt >= 0
2024/04/27 00:54	netbsd	c4e31442c4fd	059e9963	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2024/04/24 15:09	netbsd	2e1e90e5f913	21339d7b	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2024/04/23 19:50	netbsd	8a12906d648f	21339d7b	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2024/04/17 05:53	netbsd	124fe5e84c3f	18f6e127	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2024/01/17 22:08	netbsd	23ee83f7c0ae	c9a1c95b	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2024/01/09 13:45	netbsd	23ee83f7c0ae	4807fb37	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/12/31 22:12	netbsd	23ee83f7c0ae	fb427a07	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/09/28 17:01	netbsd	23ee83f7c0ae	d265efd8	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/08/29 06:43	netbsd	23ee83f7c0ae	7ba13a15	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/08/02 18:17	netbsd	db13d6e65c8a	b178af49	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/07/27 19:27	netbsd	0459de2c1eab	92476829	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/07/19 18:49	netbsd	dd6154bc8ee1	022df2bb	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/07/19 05:29	netbsd	dd6154bc8ee1	022df2bb	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/07/18 08:16	netbsd	74cbc1c40f53	20f8b3c2	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/07/13 09:34	netbsd	54cd507a2324	86081196	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/06/30 01:31	netbsd	5030526ab8de	01298212	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/06/25 02:05	netbsd	ed1ea27f95d0	79782afc	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/06/08 18:03	netbsd	96d4dd836825	058b3a5a	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/05/24 00:10	netbsd	35cd7db68570	4bce1a3e	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/05/13 08:48	netbsd	ef3f2fc49311	2b9ba477	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/05/05 22:05	netbsd	1a468f83e1b7	de870ca5	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/30 03:11	netbsd	532e75535bf0	62df2017	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/04/27 07:07	netbsd	46c47d72310e	19a3dabe	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/24 17:32	netbsd	fca07fef41df	fdc18293	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/04/24 07:40	netbsd	7e84a51f1e0f	2b32bd34	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/18 22:10	netbsd	84f548f78efc	d931e9f0	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/04/18 08:49	netbsd	6314f572eadf	436577a9	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/16 00:19	netbsd	d753befd383b	ec410564	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/04/10 12:50	netbsd	d581bab2e6a2	71147e29	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/04/09 17:41	netbsd	d581bab2e6a2	71147e29	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/04/08 10:53	netbsd	d581bab2e6a2	71147e29	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/04/05 20:20	netbsd	8550355b26af	8b834965	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/05 09:28	netbsd	8550355b26af	831373d3	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kubsan	assert failed: proccnt >= NUM
2023/04/04 19:32	netbsd	8550355b26af	928dd177	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/04/03 18:01	netbsd	2f11cfddd4d1	41147e3e	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/03/29 06:53	netbsd	141185f67e84	fc067f05	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/03/25 12:53	netbsd	484ca534b46e	fbf0499a	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/22 15:17	netbsd	d4484a26d7dc	8b4eb097	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/03/17 17:14	netbsd	460d007cedbe	7939252e	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/14 04:49	netbsd	7e454875ad3b	026e2200	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/13 03:08	netbsd	97bf0c054366	5205ef30	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/03/06 18:43	netbsd	041cae022225	f8902b57	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/04 06:03	netbsd	f980e1f7aaa5	f8902b57	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/02 16:20	netbsd	c034dd5c9bfb	f8902b57	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd	assert failed: proccnt >= NUM
2023/03/02 09:49	netbsd	7485e75e446b	f8902b57	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/02/16 01:15	netbsd	4735c700132e	6be0f1f5	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2023/02/02 15:30	netbsd	3013c7cb3466	16d19e30	.config	console log	report			[disk image] [netbsd.gdb]	ci2-netbsd-kmsan	assert failed: proccnt >= NUM
2020/12/31 21:21	netbsd	59ee1e305b67	79264ae3	.config	console log	report				ci2-netbsd
2019/07/06 19:38	netbsd	bb5f3b7247c9	f62e1e85		console log	report				ci2-netbsd

* ~~Struck through~~ repros no longer work on HEAD.