kern/46606: NetBSD/i386 6.99.7 of today crashes during shutdown

[ryoon%NetBSD.org@localhost]

>Number:         46606
>Category:       kern
>Synopsis:       NetBSD/i386 6.99.7 of today crashes during shutdown
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jun 16 12:05:00 +0000 2012
>Originator:     Ryo ONODERA
>Release:        NetBSD 6.99.7
>Organization:
        
>Environment:
        
        
System: NetBSD hydrogen.elements.tetera.org 6.99.7 NetBSD 6.99.7 (LEAFGIRLD) 
#0: Sat Jun 16 20:47:57 JST 2012 
root%hydrogen.elements.tetera.org@localhost:/usr/obj/sys/arch/i386/compile/LEAFGIRLD
 i386
Architecture: i386
Machine: i386
>Description:
During shutdown, today's NetBSD/i386 6.99.7 panics.
This problem occurs every shutdown.

% crash -N netbsd.7 -M netbsd.7.core
Crash version 6.99.4, image version 6.99.7.
WARNING: versions differ, you may not be able to examine this image.
System panicked: kernel diagnostic assertion "lwpcnt >= 0" failed: file 
"/usr/src/sys/kern/kern_uidinfo.c", line 217
Backtrace from time of crash is available.
crash> tr
_KERNEL_OPT_NAPMBIOS(c0b9a1a4,104,c05dce08,8,5,0,0,db6fe938,c01004d4,c28e5008) a
t 0
_end(104,0,fff6,c0c43733,c07d9245,8,c2392e40,db6d3000,0,1) at db6fe998
vpanic(c0b9a1a4,db6fe998,78aedf37,c2a27020,c28e5008,0,db6fe9cc,c058e047,c0b9a1a4
,c0b9a370) at vpanic+0x1cf
kern_assert(c0b9a1a4,c0b9a370,c0bf33ae,c0bf3460,d9,0,0,c05658e5,c2ca6540,0) at k
ern_assert+0x23
chglwpcnt(0,ffffffff,db6fe9ec,c28e502c,c2ca65ac,c2c5f480,db6fea3c,c0551868,c2c5f
480,0) at chglwpcnt+0x58
lwp_free(c2a27020,0,0,c0d031a0,c2086780,2,db6fea7c,c2a27020,c28e5008,db6feae0) a
t lwp_free+0x62
lwp_wait1(c2ca6540,0,db6feae0,1,c2a272c0,0,1,c07d7bc4,6,c25a86f0) at lwp_wait1+0
x7f
exit_lwps(c2ca6540,3,0,ffffffff,c28ec9f8,0,142,c289ee70,0,0) at exit_lwps+0xec
exit1(c2ca6540,f,0,20007606,db6fecf4,c2c80d40,db6fecac,c07f1aba,f,20007606) at e
xit1+0x59
sigexit(c2ca6540,f,f,0,0,0,0,fffffffd,0,c2ca66d0) at sigexit+0x132
postsig(f,1000,0,c2c5d1f0,db6feca0,c0cc215c,db6feca0,c2ca6540,106,db6fed48) at p
ostsig+0x145
lwp_userret(c2ca6540,db6fecf4,db6fed1c,c28ec9f4,c24df348,c0c6a580,c2ca6540,c28e5
008,0,bb83e918) at lwp_userret+0x1a1
syscall(db6fed48,bb7500b3,bb7500ab,bfbf001f,bb9c001f,5,5,bb83f934,8062178,2) at 
s
yscall+0x18a
crash>
        
>How-To-Repeat:
cvs update -dP
build.sh kernel=GENERIC
install kernel
reboot
reboot
panic
        
>Fix:
        
I have no idea.


>Unformatted: