syzbot


assert "len >= NUM &panic: kernel diagnostic assertion "!_kernel_lock_held()" failed in kern_fork.c

Status: closed as dup on 2022/02/14 07:11
Reported-by: syzbot+87fad7a9bd0b5e330bc3@syzkaller.appspotmail.com
First crash: 1034d, last: 1034d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
assert "len >= NUM && !M_READONLY(m)" failed in uipc_mbuf.c syz 153 1032d 1041d

Sample crash report:
panic: kernel diagnostic assertion "len >= 0 &panic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_fork.c", line 677
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 71626  96774      0           0          0    1  syz-executor.1
  84999  95272      0           0  0x4000000    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff82579a90) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff825ec6cc,ffffffff825d3098,2a5,ffffffff825ab946) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: 11
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: kernel diagnostic assertion "len >= 0 && !M_READONLY(m)" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/uipc_mbuf.c", line 1384
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_fork.c", line 677
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff82579a90) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff825ec6cc,ffffffff825d3098,2a5,ffffffff825ab946) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: -4
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800022c6aa90
rbx               0xffff800020ce9bff
rdx                                0
rcx                                0
rax               0xffff80002c34d510
r8                 0x101010101010101
r9                0x8080808080808080
r10                 0x540016704692ab
r11               0x4c8cec2ff59e0a75
r12               0xffff800020ce9a00
r13                                0
r14               0xffffffff828eca00    cpu_info_full_primary+0x2a00
r15                              0x1
rip               0xffffffff82237da8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800022c6aa80
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.1) pid=71626 stat=onproc
    flags process=0 proc=0
    pri=83, usrpri=83, nice=20
    forw=0xffffffffffffffff, list=0xffff80002c34da50,0xffff80002c34d280
    process=0xffff80002c1454e0 user=0xffff800022c65000, vmspace=0xfffffd8067e26178
    estcpu=33, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 40697  425016  45521      0  2           0                syz-executor.5
 40697  391520  45521      0  3   0x4000080  fsleep        syz-executor.5
 33384  208122  45021      0  2           0                syz-executor.2
*96774   71626  51673      0  7           0                syz-executor.1
 95272   39738   3059      0  2           0                syz-executor.0
 95272   84999   3059      0  7   0x4000000                syz-executor.0
 81704  259349    547      0  2           0                syz-executor.6
 27820  338450  80962      0  2           0                syz-executor.3
 63408  388752  95451      0  2           0                syz-executor.7
 63408  178775  95451      0  3   0x4000080  fsleep        syz-executor.7
 16208  428874  19640      0  2           0                syz-executor.4
 45521  494145  94902      0  3        0x82  nanoslp       syz-executor.5
  3059  346489  94902      0  3        0x82  nanoslp       syz-executor.0
 19640  141860  94902      0  3        0x82  nanoslp       syz-executor.4
  8016  516277      0      0  3     0x14200  acct          acct
 45021  454330  94902      0  3        0x82  nanoslp       syz-executor.2
 80962  193398  94902      0  3        0x82  nanoslp       syz-executor.3
 85161  207231      1      0  3    0x100083  ttyin         getty
   547  300767  94902      0  3        0x82  nanoslp       syz-executor.6
  4650  132250      0      0  3     0x14280  nfsidl        nfsio
 33560  220289      0      0  3     0x14280  nfsidl        nfsio
 98451  465984      0      0  3     0x14280  nfsidl        nfsio
   823    4513      0      0  3     0x14280  nfsidl        nfsio
 85022  325359      0      0  3     0x14280  nfsidl        nfsio
 90297  369945      0      0  3     0x14280  nfsidl        nfsio
 80346  102686      0      0  3     0x14280  nfsidl        nfsio
 58281   55977      0      0  3     0x14280  nfsidl        nfsio
 82025  180003      0      0  3     0x14280  nfsidl        nfsio
 10422  183853      0      0  3     0x14280  nfsidl        nfsio
 24029  492636      0      0  3     0x14280  nfsidl        nfsio
 12177  450949      0      0  3     0x14280  nfsidl        nfsio
 11390  422379      0      0  3     0x14280  nfsidl        nfsio
 20676  487127      0      0  3     0x14280  nfsidl        nfsio
 79276  226282      0      0  3     0x14280  nfsidl        nfsio
 84461  394549      0      0  3     0x14280  nfsidl        nfsio
 25661  101214      0      0  3     0x14280  nfsidl        nfsio
 83034  469420      0      0  3     0x14280  nfsidl        nfsio
 44703  314163      0      0  3     0x14280  nfsidl        nfsio
 11259  326334      0      0  3     0x14280  nfsidl        nfsio
 98240   75787      0      0  3     0x14200  bored         sosplice
 95451  436460  94902      0  3        0x82  nanoslp       syz-executor.7
 51673   85880  94902      0  2         0x2                syz-executor.1
 94902  122826  33383      0  3        0x82  thrsleep      syz-fuzzer
 94902    6395  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902  360657  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902  473334  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902  446442  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902   43329  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902  502675  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 94902  124929  33383      0  3   0x4000082  kqread        syz-fuzzer
 94902  123291  33383      0  3   0x4000082  thrsleep      syz-fuzzer
 33383  351242  92552      0  3    0x10008a  sigsusp       ksh
 92552  335788  91896      0  3        0x9a  kqread        sshd
 91896  175150      1      0  3        0x88  kqread        sshd
 51059  350045  53772     74  3    0x100092  bpf           pflogd
 53772  440040      1      0  3        0x80  netio         pflogd
 40061   47318   9042     73  3    0x100090  kqread        syslogd
  9042  347614      1      0  3    0x100082  netio         syslogd
 64656  124510      1      0  3    0x100080  kqread        resolvd
 19276  211544  25169     77  3    0x100092  kqread        dhcpleased
  7947  413841  25169     77  3    0x100092  kqread        dhcpleased
 25169  204596      1      0  3        0x80  kqread        dhcpleased
 91215  390572      0      0  3     0x14200  bored         smr
 95135  124958      0      0  2     0x14200                zerothread
 81231  521498      0      0  3     0x14200  aiodoned      aiodoned
 22351  114054      0      0  3     0x14200  syncer        update
 32886  295640      0      0  3     0x14200  cleaner       cleaner
 11505   59957      0      0  3     0x14200  reaper        reaper
 35167   52235      0      0  3     0x14200  pgdaemon      pagedaemon
 80832  341617      0      0  3     0x14200  bored         viomb
 94761  414030      0      0  3  0x40014200  acpi0         acpi0
 48540  204700      0      0  3  0x40014200                idle1
 52470   42865      0      0  3     0x14200  bored         softnet
 59127  213274      0      0  3     0x14200  bored         systqmp
 40564  236042      0      0  3     0x14200  bored         systq
  4118  257308      0      0  3  0x40014200  bored         softclock
 69467  518042      0      0  3  0x40014200                idle0
     1  461038      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 95272 (syz-executor.0) thread 0xffff8000211437a8 (84999)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82ac44c8)
#0  witness_lock+0x44d
#1  vn_write+0x42 sys/kern/vfs_vnops.c:399
#2  dofilewritev+0x19c sys/kern/sys_generic.c:381
#3  sys_write+0x83 sys/kern/sys_generic.c:301
#4  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#4  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#5  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10214   6563K    7278K  78643K     32051        0
            pcb    13     18K      20K  78643K      1025        0
         rtable   253     11K      15K  78643K      1847        0
         ifaddr   102     22K      23K  78643K      1264        0
         sysctl     2      0K       0K  78643K         2        0
       counters    58     35K      36K  78643K       176        0
       ioctlops     0      0K       4K  78643K      2943        0
            iov     0      0K      24K  78643K       570        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         5        0
         vnodes  1433     90K      90K  78643K      8111        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        56        0
         VM map     2      1K       1K  78643K         2        0
            sem    13      5K      10K  78643K        80        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    18     65K      85K  78643K      7651        0
          sigio     0      0K       0K  78643K        25        0
           proc    70     87K     124K  78643K      1360        0
        subproc   104      6K       6K  78643K       376        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       450        0
       in_multi    99      6K       6K  78643K       542        0
    ether_multi     1      0K       0K  78643K        84        0
            mrt     1      0K       0K  78643K        49        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   175    784K     784K  78643K       175        0
           exec     0      0K       2K  78643K      1531        0
     pfkey data     0      0K       0K  78643K         4        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   422    337K     338K  78643K     98317        0
       UVM aobj   131      8K       8K  78643K       147        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       266        0
            NDP    14      0K       2K  78643K       129        0
           temp   142   4709K    4837K  78643K     72647        0
         kqueue    13     20K      28K  78643K       578        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      331    0      328     5     4     1     3     0     8    0
rtentry    112      429    0      322     4     0     4     4     0     8    0
unpcb      136     3037    0     3022    33    32     1     6     0     8    0
syncache   296       28    0       28     7     7     0     1     0     8    0
tcpqe       32       23    0       23     3     3     0     1     0     8    0
tcpcb      736     3431    0     3427    97    90     7    17     0     8    6
arp        120       72    0       54     1     0     1     1     0     8    0
inpcb      304     7758    0     7751    99    90     9    16     0     8    8
rttmr       72       19    0       19     4     4     0     1     0     8    0
nd6         48       96    0       67     1     0     1     1     0     8    0
pkpcb       40        7    0        7     2     2     0     1     0     8    0
kcovpl      48       28    0       20     1     0     1     1     0     8    0
ppxss      1248      23    0       23     6     6     0     1     0     8    0
pfstscr     40        9    0        9     3     3     0     1     0     8    0
pffrag     232       27    0       24     2     1     1     1     0   482    0
pffrnode    88       27    0       24     2     1     1     1     0     8    0
pffrent     40      138    0      135     2     1     1     1     0     8    0
pfosfp      40     1434    0     1009     5     0     5     5     0     8    0
pfosfpen   112     1434    0      714    21     0    21    21     0     8    0
pfrktable  1344     250    0      244     5     4     1     2     0     8    0
pftag       88      103    0       98     4     3     1     1     0     8    0
pfstitem    24       74    0       72     1     0     1     1     0     8    0
pfstkey    112       98    0       96     2     1     1     2     0     8    0
pfstate    320       85    0       83     4     3     1     4     0     8    0
pfrule     1360     480    0      438     5     1     4     4     0     8    0
art_heap8  4096       4    0        3     3     2     1     3     0     8    0
art_heap4  256     1665    0     1191    40    10    30    31     0     8    0
art_table   32     1669    0     1194     4     0     4     4     0     8    0
art_node    16      428    0      334     1     0     1     1     0     8    0
sysvmsgpl   40       85    0       51     1     0     1     1     0     8    0
semupl     112        4    0        4     2     2     0     1     0     8    0
semapl     112       71    0       60     1     0     1     1     0     8    0
shmpl      112      144    0       16     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    12389    0    10941    92     0    92    92     0     8    0
ffsino     272    12389    0    10941    98     0    98    98     0     8    0
nchpl      144    23250    0    21625    63     0    63    63     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     224     5926    0        0   349     0   349   349     0     8    0
namei      1024   75103    0    75103     2     1     1     2     0     8    1
percpumem   16      100    0       59     1     0     1     1     0     8    0
vcpupl     2048      49    0        0     7     0     7     7     0     8    0
vmpool     560       55    0        6     4     0     4     4     0     8    0
pfiaddrpl  120       76    0       71     4     3     1     1     0     8    0
scsiplug    72       10    0       10     3     3     0     1     0     8    0
scxspl     216    63555    0    63555    21    20     1     8     0     8    1
plimitpl   152      861    0      846     1     0     1     1     0     8    0
sigapl     424     7938    0     7871     8     0     8     8     0     8    0
futexpl     64    79566    0    79564     1     0     1     1     0     8    0
knotepl    120      444    0        0     9     2     7     7     0     8    0
kqueuepl   216     1322    0     1313    18    17     1     5     0     8    0
pipepl     336     1577    0     1549    52    49     3    11     0     8    0
fdescpl    496     7902    0     7871     5     1     4     5     0     8    0
filepl     152    48346    0    48105    72    58    14    19     0     8    4
lockfpl    104     8251    0     8248    16    15     1     4     0     8    0
lockfspl    48     3834    0     3831     3     2     1     2     0     8    0
sessionpl  144       46    0       29     1     0     1     1     0     8    0
pgrppl      48       46    0       29     1     0     1     1     0     8    0
ucredpl     96     5103    0     5091     1     0     1     1     0     8    0
zombiepl   144     7871    0     7871     2     1     1     1     0     8    1
processpl  1064    7938    0     7871     5     0     5     5     0     8    0
procpl     672    22448    0    22370    18    10     8     9     0     8    0
srpgc       96       35    0       35     6     6     0     1     0     8    0
sosppl     168       47    0       47     4     4     0     1     0     8    0
sockpl     480    11135    0    11110   245   233    12    29     0     8    8
mcl64k     65536     25    0        0     4     1     3     3     0     8    0
mcl16k     16384     33    0        0     5     2     3     3     0     8    0
mcl12k     12288     26    0        0     2     0     2     2     0     8    0
mcl9k      9216      17    0        0     2     0     2     2     0     8    0
mcl8k      8192      17    0        0     3     0     3     3     0     8    0
mcl4k      4096      18    0        0     3     0     3     3     0     8    0
mcl2k2     2112      10    0        0     1     0     1     1     0     8    0
mcl2k      2048     360    0        0    34     0    34    34     0     8    0
mtagpl      96     1365    0        0    33     0    33    33     0     8    0
mbufpl     256     1667    0        0   100     0   100   100     0     8    0
bufpl      288    15914    0     9578   453     0   453   453     0     8    0
anonpl      24  2177754    0  2159266   221    94   127   171     0   186    0
amapchunkpl 152  235708    0   234885    63    27    36    48     0   158    0
amappl16   200    19452    0    18824    94    59    35    59     0     8    1
amappl15   192     3358    0     3347     1     0     1     1     0     8    0
amappl14   184       56    0       51     1     0     1     1     0     8    0
amappl13   176     1049    0     1045     1     0     1     1     0     8    0
amappl12   168      635    0      631     1     0     1     1     0     8    0
amappl11   160      222    0      203     1     0     1     1     0     8    0
amappl10   152      576    0      567     1     0     1     1     0     8    0
amappl9    144     1899    0     1895     1     0     1     1     0     8    0
amappl8    136     1717    0     1617     4     0     4     4     0     8    0
amappl7    128      790    0      780     1     0     1     1     0     8    0
amappl6    120     1700    0     1674     2     1     1     2     0     8    0
amappl5    112     8100    0     8077     1     0     1     1     0     8    0
amappl4    104     1815    0     1782     2     1     1     2     0     8    0
amappl3     96     2690    0     2677     1     0     1     1     0     8    0
amappl2     88     1974    0     1924     7     5     2     3     0     8    0
amappl1     80   141736    0   141168    19     5    14    19     0     8    0
amappl      88    97350    0    97077     8     0     8     8     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      146    0       16     3     0     3     3     0     8    0
uaddrrnd    24     7957    0     7877     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     7957    0     7877     1     0     1     1     0     8    0
vmmpekpl   168    62882    0    62812     4     0     4     4     0     8    0
vmmpepl    168   720075    0   717297   227    92   135   145     0   357    6
vmsppl     368     7956    0     7877     9     1     8     8     0     8    0
rwobjpl     56   176938    0   169219   118     7   111   115     0     8    0
pdppl      4096   15921    0    15803   369   251   118   118     0     8    0
pvpl        32  3703269    0  3680334   386   181   205   271     0   265    0
pmappl     248     7956    0     7877     6     1     5     5     0     8    0
extentpl    40       58    0       38     1     0     1     1     0     8    0
phpool     112     1382    0      410    28     0    28    28     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffffffff828ebff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82ac42c0) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82ac42c0) at __mp_lock+0x122 sys/kern/kern_lock.c:147
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x1f
cnputc(26) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(26) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff825f2af2) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff82579a90) at panic+0xd7 sys/kern/subr_prf.c:220
__assert(ffffffff825ec6cc,ffffffff82560ab1,568,ffffffff8258f284) at __assert+0x25 sys/kern/subr_prf.c:161
m_align(fffffd807433ce00,ffffffd8) at m_align+0x1a0 sys/kern/uipc_mbuf.c:1385
bpf_movein(ffff8000289081e8,ffff800000c9aa00,ffff800028907f48,ffff800028907e48) at bpf_movein+0x25e sys/net/bpf.c:228
end trace frame: 0xffff800028907fa0, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff828ebff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82ac42c0) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82ac42c0) at __mp_lock+0x122 sys/kern/kern_lock.c:147
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x1f
cnputc(26) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(26) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff825f2af2) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff82579a90) at panic+0xd7 sys/kern/subr_prf.c:220
__assert(ffffffff825ec6cc,ffffffff82560ab1,568,ffffffff8258f284) at __assert+0x25 sys/kern/subr_prf.c:161
m_align(fffffd807433ce00,ffffffd8) at m_align+0x1a0 sys/kern/uipc_mbuf.c:1385
bpf_movein(ffff8000289081e8,ffff800000c9aa00,ffff800028907f48,ffff800028907e48) at bpf_movein+0x25e sys/net/bpf.c:228
bpfwrite(31700,ffff8000289081e8,1) at bpfwrite+0x169 sys/net/bpf.c:644
spec_write(ffff800028908040) at spec_write+0xd4 sys/kern/spec_vnops.c:309
VOP_WRITE(fffffd8065a4e790,ffff8000289081e8,1,fffffd807f7d86c0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
vn_write(fffffd80635fad18,ffff8000289081e8,0) at vn_write+0x157 sys/kern/vfs_vnops.c:414
dofilewritev(ffff8000211437a8,3,ffff8000289081e8,0,ffff8000289082e0) at dofilewritev+0x19c sys/kern/sys_generic.c:381
sys_write(ffff8000211437a8,ffff800028908288,ffff8000289082e0) at sys_write+0x83 sys/kern/sys_generic.c:301
syscall(ffff800028908350) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800028908350) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3f82ec355f0, count: -22
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff82579a90) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff825ec6cc,ffffffff825d3098,2a5,ffffffff825ab946) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: 11
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff82579a90) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff825ec6cc,ffffffff825d3098,2a5,ffffffff825ab946) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: -4

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/02/12 08:44 openbsd b92d1435fff2 8b9ca619 .config console log report ci-openbsd-multicore assert "len >= NUM &panic: kernel diagnostic assertion "!_kernel_lock_held()" failed in kern_fork.c
* Struck through repros no longer work on HEAD.