syzbot


assert "vp->v_usecount == NUM" failed in vfs_subr.c

Status: auto-obsoleted due to no activity on 2024/09/02 03:01
Reported-by: syzbot+4c48bad8069a26f76add@syzkaller.appspotmail.com
First crash: 57d, last: 55d

Sample crash report:
0Wd-C)s:ra-doV N!s<۵]tJKpVۢOv}"$3SЯ..?3Ϋ>uVtp)na&y}Jk9´Ŵ<%}&C350panic: kernel diagnostic assertion "vp->v_usecount == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/vfs_subr.c", line 639
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 201867  77715      0   0x8000000          0    0  syz-executor
*200576  26654      0   0x8000000  0x4000000    1K syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830d70b0) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8308ab4a,ffffffff830aa06a,27f,ffffffff83026945) at __assert+0x29
vdoom(fffffd806c608870) at vdoom+0x105 sys/kern/vfs_subr.c:641
ufs_inactive(ffff80002a1544f8) at ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
VOP_INACTIVE(fffffd806c608870,ffff8000ffff47c0) at VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
vclean(fffffd806c608870,8,ffff8000ffff47c0) at vclean+0x234 sys/kern/vfs_subr.c:1107
vgonel(fffffd806c608870,ffff8000ffff47c0) at vgonel+0xec sys/kern/vfs_subr.c:1197
vop_generic_revoke(ffff80002a154688) at vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
VOP_REVOKE(fffffd806b6b6a80,1) at VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
ptmioctl(5100,40287401,ffff80002a154b50,3,ffff8000ffff47c0) at ptmioctl+0x832 sys/kern/tty_pty.c:1172
VOP_IOCTL(fffffd80740b26c8,40287401,ffff80002a154b50,3,fffffd807f7d3410,ffff8000ffff47c0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd80620d6720,40287401,ffff80002a154b50,ffff8000ffff47c0) at vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff8000ffff47c0,ffff80002a154d30,ffff80002a154c80) at sys_ioctl+0x67c
end trace frame: 0xffff80002a154d20, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "vp->v_usecount == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/vfs_subr.c", line 639
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830d70b0) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8308ab4a,ffffffff830aa06a,27f,ffffffff83026945) at __assert+0x29
vdoom(fffffd806c608870) at vdoom+0x105 sys/kern/vfs_subr.c:641
ufs_inactive(ffff80002a1544f8) at ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
VOP_INACTIVE(fffffd806c608870,ffff8000ffff47c0) at VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
vclean(fffffd806c608870,8,ffff8000ffff47c0) at vclean+0x234 sys/kern/vfs_subr.c:1107
vgonel(fffffd806c608870,ffff8000ffff47c0) at vgonel+0xec sys/kern/vfs_subr.c:1197
vop_generic_revoke(ffff80002a154688) at vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
VOP_REVOKE(fffffd806b6b6a80,1) at VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
ptmioctl(5100,40287401,ffff80002a154b50,3,ffff8000ffff47c0) at ptmioctl+0x832 sys/kern/tty_pty.c:1172
VOP_IOCTL(fffffd80740b26c8,40287401,ffff80002a154b50,3,fffffd807f7d3410,ffff8000ffff47c0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd80620d6720,40287401,ffff80002a154b50,ffff8000ffff47c0) at vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff8000ffff47c0,ffff80002a154d30,ffff80002a154c80) at sys_ioctl+0x67c
syscall(ffff80002a154d30) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a154d30) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8462f553270, count: -16
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a154380
rbx               0xffff800029b7cd87
rdx                                0
rcx               0xffff8000ffff47c0
rax               0xffff800029b7bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xc00d3919cdb2f1ed
r11               0xbff8b1440a6792fb
r12               0xffff800029b7cb88
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81ff41c5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a154370
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=200576 pid=26654 tcnt=3 stat=onproc
    flags process=8000000 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff5468,0xffff8000ffff51f0
    process=0xffff8000ffff0018 user=0xffff80002a14f000, vmspace=0xfffffd806c546dd8
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 31348  172517  34853      0  2   0x8000000                syz-executor
 77715  201867  28935      0  7   0x8000000                syz-executor
 26654  383686  71023      0  2   0x8000000                syz-executor
*26654  200576  71023      0  7   0xc000000                syz-executor
 26654  430227  71023      0  2   0xc000000                syz-executor
 11163  269008  57479      0  3   0x8000080  nanoslp       syz-executor
 11163  401352  57479      0  3   0xc000000  smrbar        syz-executor
 11163   56479  57479      0  3   0xc000080  fsleep        syz-executor
 11163  416635  57479      0  3   0xc000080  fsleep        syz-executor
  5234   57288  75708      0  3   0x9000080  nanoslp       syz-executor
  5234   72855  75708      0  3   0xd000080  kqsel         syz-executor
  5234  200360  75708      0  3   0xd000080  fsleep        syz-executor
 66033  252524   9695      0  3   0x8000080  nanoslp       syz-executor
 66033  115159   9695      0  3   0xc000080  fsleep        syz-executor
 66033  289731   9695      0  3   0xc000080  sbwait        syz-executor
 66033   98898   9695      0  3   0xc000080  fsleep        syz-executor
 47208  381089    594      0  3   0x8000080  nanoslp       syz-executor
 47208  335118    594      0  3   0xc000080  ttyout        syz-executor
 47208   30317    594      0  3   0xc000080  fsleep        syz-executor
 47262  130493  25587      0  3   0x8000080  nanoslp       syz-executor
 47262  170789  25587      0  3   0xc000080  kqsel         syz-executor
 47262  318734  25587      0  3   0xc000080  fsleep        syz-executor
 75708  418289  98541      0  3   0x8000082  nanoslp       syz-executor
 34853   73761  98541      0  3   0x8000082  nanoslp       syz-executor
 71023  303988  98541      0  3   0x8000082  nanoslp       syz-executor
   594  355932  98541      0  3   0x8000082  nanoslp       syz-executor
 57479  430294  98541      0  3   0x8000082  nanoslp       syz-executor
  9695  305175  98541      0  3   0x8000082  nanoslp       syz-executor
 25587  169363  98541      0  3   0x8000082  nanoslp       syz-executor
 28935  219348  98541      0  3   0x8000082  nanoslp       syz-executor
 66351  444752      0      0  3     0x14200  bored         sosplice
  5474  300509      1      0  3  0x18100083  ttyopn        getty
 98541  331507  67224      0  3   0x8000082  kqread        syz-executor
 67224   63249  36486      0  3   0x810008a  sigsusp       ksh
 36486  386263  93501      0  3  0x18000098  kqread        sshd-session
 93501  430773  63751      0  3  0x18000092  kqread        sshd-session
 63751   32818      1      0  3  0x18000088  kqread        sshd
 27977  257306  60148     74  3  0x19100092  bpf           pflogd
 60148  159061      1      0  3  0x18000080  sbwait        pflogd
 30786   83939  54524     73  3  0x19100010  ffs_fsync     syslogd
 54524  445795      1      0  3  0x18100082  sbwait        syslogd
 40774    8435      1      0  3  0x18100080  kqread        resolvd
 42648  144758  39099     77  3  0x18100092  kqread        dhcpleased
 15500   31760  39099     77  3  0x18100092  kqread        dhcpleased
 39099  342398      1      0  3  0x18000080  kqread        dhcpleased
 78947  110915      0      0  3     0x14200  bored         smr
 58008   93085      0      0  2     0x14200                zerothread
 70666  335503      0      0  3     0x14200  aiodoned      aiodoned
 78058  122101      0      0  3     0x14200  syncer        update
 19116  188440      0      0  3     0x14200  cleaner       cleaner
 87958  312381      0      0  3     0x14200  reaper        reaper
 56350  463529      0      0  3     0x14200  pgdaemon      pagedaemon
 50687  466976      0      0  3     0x14200  bored         viomb
  8646  294586      0      0  3  0x40014200  acpi0         acpi0
 18749  252776      0      0  3  0x40014200                idle1
 65552  506243      0      0  3     0x14200  bored         softnet3
  9605  399032      0      0  3     0x14200  bored         softnet2
 41814  210246      0      0  3     0x14200  bored         softnet1
 49479  373824      0      0  3     0x14200  bored         softnet0
 36185  323263      0      0  3     0x14200  bored         systqmp
 46108  437938      0      0  3     0x14200  bored         systq
 56398   40871      0      0  3     0x14200  tmoslp        softclockmp
 17472  511731      0      0  3  0x40014200  tmoslp        softclock
 23027   41708      0      0  3  0x40014200                idle0
     1  180159      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex /syzkaller/managers/multicore/kernel/sys/kern/vfs_subr.c:119 r = 0 (0xffffffff8348b0d8)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  vdoom+0x2b sys/kern/vfs_subr.c:639
#4  ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
#5  VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
#6  vclean+0x234 sys/kern/vfs_subr.c:1107
#7  vgonel+0xec sys/kern/vfs_subr.c:1197
#8  vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
#9  VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#10 ptmioctl+0x832 sys/kern/tty_pty.c:1172
#11 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#12 vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
#13 sys_ioctl+0x67c
#14 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#14 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#15 Xsyscall+0x128
Process 26654 (syz-executor) thread 0xffff8000ffff47c0 (200576)
exclusive rrwlock inode r = 0 (0xfffffd8062145918)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vclean+0x176 sys/kern/vfs_subr.c:1081
#5  vgonel+0xec sys/kern/vfs_subr.c:1197
#6  vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
#7  VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#8  ptmioctl+0x832 sys/kern/tty_pty.c:1172
#9  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#10 vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
#11 sys_ioctl+0x67c
#12 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#12 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#13 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8356b120)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  vn_ioctl+0x4d sys/kern/vfs_vnops.c:508
#2  sys_ioctl+0x67c
#3  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#3  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#4  Xsyscall+0x128
exclusive mutex /syzkaller/managers/multicore/kernel/sys/kern/vfs_subr.c:119 r = 0 (0xffffffff8348b0d8)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  vdoom+0x2b sys/kern/vfs_subr.c:639
#4  ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
#5  VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
#6  vclean+0x234 sys/kern/vfs_subr.c:1107
#7  vgonel+0xec sys/kern/vfs_subr.c:1197
#8  vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
#9  VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#10 ptmioctl+0x832 sys/kern/tty_pty.c:1172
#11 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#12 vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
#13 sys_ioctl+0x67c
#14 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#14 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#15 Xsyscall+0x128
Process 11163 (syz-executor) thread 0xffff800029fe6a58 (401352)
exclusive rwlock clonelk r = 0 (0xffffffff8349c520)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  if_clone_destroy+0x67
#2  ifioctl+0x5c5
#3  sys_ioctl+0x67c
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
Process 30786 (syslogd) thread 0xffff8000ffffd960 (83939)
exclusive rrwlock inode r = 0 (0xfffffd806e4a40a0)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2927
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10229  10435K   10891K 166960K     12121        0
            pcb    18     13K      14K 166960K       170        0
         rtable   245      8K       8K 166960K       881        0
             pf    32      9K      13K 166960K        99        0
         ifaddr    45     15K      16K 166960K       118        0
        ifgroup    55      2K       2K 166960K       135        0
         sysctl     1      0K       2K 166960K         2        0
       counters    64     36K      36K 166960K       108        0
       ioctlops     0      0K       4K 166960K      1533        0
            iov     1      2K      18K 166960K        22        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1464     92K      93K 166960K      2088        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        12        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        65        0
        dirhash    12      2K       3K 166960K        27        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    18     65K      97K 166960K       705        0
          sigio     0      0K       0K 166960K        12        0
           proc    70     91K     128K 166960K       980        0
        subproc   104      6K       6K 166960K       299        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        41        0
       in_multi    99      7K       7K 166960K       274        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   169    758K     758K 166960K       169        0
           exec     0      0K       1K 166960K       592        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   246     73K     108K 166960K      7378        0
       UVM aobj    47      4K       4K 166960K        47        0
     pinsyscall    43     86K     105K 166960K      2168        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K        21        0
            NDP    12      0K       2K 166960K        80        0
           temp    50   6809K    6877K 166960K     24019        0
         kqueue    14     20K      28K 166960K        88        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      125    0      122     2     0     2     2     0     8    1
rtentry    112      286    0      174     4     0     4     4     0     8    0
unpcb      144      493    0      471     8     5     3     6     0     8    1
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      808      191    0      186     8     1     7     7     0     8    6
arp        120       49    0       31     1     0     1     1     0     8    0
inpcb      336      725    0      714    12     6     6     7     0     8    5
nd6        136       78    0       52     1     0     1     1     0     8    0
kcovpl      48       23    0       15     1     0     1     1     0     8    0
ppxss      1168       5    0        5     2     2     0     1     0     8    0
pffrag     232        6    0        3     1     0     1     1     0   482    0
pffrnode    88        6    0        3     1     0     1     1     0     8    0
pffrent     40       12    0        9     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        0     1     0     1     1     0     8    0
pfanchor   1288       1    0        1     1     1     0     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       54    0       15     1     0     1     1     0     8    0
pfstkey    128       54    0       15     2     0     2     2     0     8    0
pfstate    376       54    0       15     4     0     4     4     0     8    0
pfrule     1344      26    0       19     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     1137    0      674    29     0    29    29     0     8    0
art_table   32     1138    0      674     4     0     4     4     0     8    0
art_node    16      285    0      183     1     0     1     1     0     8    0
sysvmsgpl   40        4    0        4     1     1     0     1     0     8    0
semapl     112       63    0       53     1     0     1     1     0     8    0
shmpl      112       44    0        0     2     0     2     2     0     8    0
dirhash    1024      27    0       10     3     0     3     3     0     8    0
dino2pl    256     2290    0      763    96     0    96    96     0     8    0
ffsino     272     2290    0      763   103     0   103   103     0     8    0
nchpl      144     3005    0     1307    64     0    64    64     0     8    0
uvmvnodes   80     2949    0        0    61     0    61    61     0     8    0
vnodes     216     2949    0        0   164     0   164   164     0     8    0
namei      1024   11685    0    11685     2     1     1     2     0     8    1
percpumem   16       68    0       22     1     0     1     1     0     8    0
vmpool     696        5    0        5     2     2     0     1     0     8    0
kstatmem   264       68    0       44     2     0     2     2     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216    14969    0    14968     9     8     1     8     1     8    0
plimitpl   152      180    0      160     1     0     1     1     0     8    0
sigapl     424      975    0      924     9     2     7     7     0     8    0
futexpl     64     6858    0     6851     1     0     1     1     0     8    0
knotepl    120      477    0        0    15     0    15    15     0     8    0
kqueuepl   216      194    0      181     3     2     1     3     0     8    0
pipepl     320      285    0      258     8     5     3     8     0     8    0
fdescpl    496      956    0      924     6     1     5     6     0     8    0
filepl     152     5753    0     5492    28    15    13    25     0     8    2
lockfpl    104      189    0      187     1     0     1     1     0     8    0
lockfspl    48       72    0       70     1     0     1     1     0     8    0
sessionpl  144       38    0       29     1     0     1     1     0     8    0
pgrppl      48       65    0       48     1     0     1     1     0     8    0
ucredpl    104      780    0      766     1     0     1     1     0     8    0
zombiepl   144      924    0      924     1     0     1     1     0     8    1
processpl  1152     975    0      924     5     1     4     5     0     8    0
procpl     648     1627    0     1562     8     1     7     7     0     8    0
srpgc       96        4    0        4     2     1     1     1     0     8    1
sosppl     168        3    0        3     2     2     0     1     0     8    0
sockpl     664     1349    0     1313    27    17    10    20     0     8    6
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096       3    0        0     1     0     1     1     0     8    0
mcl2k      2048     244    0        0    31     0    31    31     0     8    0
mtagpl      96        7    0        0     1     0     1     1     0     8    0
mbufpl     256      314    0        0    18     0    18    18     0     8    0
bufpl      280     5798    0       96   408     0   408   408     0     8    0
anonpl      24   195807    0   190170    65     2    63    65     0   185   17
amapchunkpl 152   23334    0    22760    34     0    34    34     0   158    9
amappl16   200     4545    0     4464    22    10    12    17     0     8    4
amappl15   192       12    0       12     2     1     1     1     0     8    1
amappl14   184      167    0      155     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1833    0     1802     4     2     2     3     0     8    0
amappl11   160       53    0       39     1     0     1     1     0     8    0
amappl10   152       28    0       28     1     1     0     1     0     8    0
amappl9    144      129    0      128     1     0     1     1     0     8    0
amappl8    136       24    0       21     1     0     1     1     0     8    0
amappl7    128      133    0      121     1     0     1     1     0     8    0
amappl6    120      312    0      311     1     0     1     1     0     8    0
amappl5    112      207    0      196     1     0     1     1     0     8    0
amappl4    104      367    0      347     1     0     1     1     0     8    0
amappl3     96     4674    0     4562     4     0     4     4     0     8    0
amappl2     88      826    0      762     2     0     2     2     0     8    0
amappl1     80    10401    0     9813    15     1    14    14     0     8    0
amappl      88     6877    0     6694     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       46    0        0     1     0     1     1     0     8    0
uaddrrnd    24      961    0      929     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      961    0      929     1     0     1     1     0     8    0
vmmpekpl   168     9938    0     9888     3     0     3     3     0     8    0
vmmpepl    168    67532    0    65545   105    10    95   100     0   357    5
vmsppl     440      960    0      929     6     2     4     5     0     8    0
rwobjpl     56    25387    0    21387    61     3    58    58     0     8    0
pdppl      4096    1929    0     1858   121    48    73    87     0     8    2
pvpl        32    29857    0        0   243     2   241   241     0   265    0
pmappl     248      960    0      929     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      433    0       61    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8341fff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002db73e80,ffff80000006bc00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 sys/kern/kern_lock.c:144
syscall(ffff80002db74050) at syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002db74050) at syscall+0xad6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6f95b4ff8af0, count: 6
ddb{0}> trace
x86_ipi_db(ffffffff8341fff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002db73e80,ffff80000006bc00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8356af18) at __mp_lock+0x192 sys/kern/kern_lock.c:144
syscall(ffff80002db74050) at syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002db74050) at syscall+0xad6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6f95b4ff8af0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830d70b0) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8308ab4a,ffffffff830aa06a,27f,ffffffff83026945) at __assert+0x29
vdoom(fffffd806c608870) at vdoom+0x105 sys/kern/vfs_subr.c:641
ufs_inactive(ffff80002a1544f8) at ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
VOP_INACTIVE(fffffd806c608870,ffff8000ffff47c0) at VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
vclean(fffffd806c608870,8,ffff8000ffff47c0) at vclean+0x234 sys/kern/vfs_subr.c:1107
vgonel(fffffd806c608870,ffff8000ffff47c0) at vgonel+0xec sys/kern/vfs_subr.c:1197
vop_generic_revoke(ffff80002a154688) at vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
VOP_REVOKE(fffffd806b6b6a80,1) at VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
ptmioctl(5100,40287401,ffff80002a154b50,3,ffff8000ffff47c0) at ptmioctl+0x832 sys/kern/tty_pty.c:1172
VOP_IOCTL(fffffd80740b26c8,40287401,ffff80002a154b50,3,fffffd807f7d3410,ffff8000ffff47c0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd80620d6720,40287401,ffff80002a154b50,ffff8000ffff47c0) at vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff8000ffff47c0,ffff80002a154d30,ffff80002a154c80) at sys_ioctl+0x67c
end trace frame: 0xffff80002a154d20, count: 0
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830d70b0) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8308ab4a,ffffffff830aa06a,27f,ffffffff83026945) at __assert+0x29
vdoom(fffffd806c608870) at vdoom+0x105 sys/kern/vfs_subr.c:641
ufs_inactive(ffff80002a1544f8) at ufs_inactive+0x188 sys/ufs/ufs/ufs_inode.c:89
VOP_INACTIVE(fffffd806c608870,ffff8000ffff47c0) at VOP_INACTIVE+0x107 sys/kern/vfs_vops.c:495
vclean(fffffd806c608870,8,ffff8000ffff47c0) at vclean+0x234 sys/kern/vfs_subr.c:1107
vgonel(fffffd806c608870,ffff8000ffff47c0) at vgonel+0xec sys/kern/vfs_subr.c:1197
vop_generic_revoke(ffff80002a154688) at vop_generic_revoke+0x32a sys/kern/vfs_default.c:105
VOP_REVOKE(fffffd806b6b6a80,1) at VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
ptmioctl(5100,40287401,ffff80002a154b50,3,ffff8000ffff47c0) at ptmioctl+0x832 sys/kern/tty_pty.c:1172
VOP_IOCTL(fffffd80740b26c8,40287401,ffff80002a154b50,3,fffffd807f7d3410,ffff8000ffff47c0) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd80620d6720,40287401,ffff80002a154b50,ffff8000ffff47c0) at vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff8000ffff47c0,ffff80002a154d30,ffff80002a154c80) at sys_ioctl+0x67c
syscall(ffff80002a154d30) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a154d30) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x8462f553270, count: -16

Crashes (23):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/07/14 03:01 openbsd 4fa86b90e8e4 eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/14 00:50 openbsd 4fa86b90e8e4 eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 21:24 openbsd 4fa86b90e8e4 eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 20:48 openbsd 4fa86b90e8e4 eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 16:54 openbsd 4fa86b90e8e4 eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 13:52 openbsd ba080721f3fe eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 09:32 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 08:39 openbsd ba080721f3fe eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 08:16 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 02:26 openbsd ba080721f3fe eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 02:25 openbsd ba080721f3fe eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 02:09 openbsd ba080721f3fe eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/13 00:39 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 21:37 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 21:18 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 20:16 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 18:42 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 17:50 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 17:48 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 17:03 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 16:33 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 15:51 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid assert "vp->v_usecount == NUM" failed in vfs_subr.c
2024/07/12 15:01 openbsd e24fbf55691f eaeb5c15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "vp->v_usecount == NUM" failed in vfs_subr.c
* Struck through repros no longer work on HEAD.