syzbot


assert "ps->ps_uvncount == NUM" failed: filepanic: kernel diagnostic assertion "((flags & PGO_LOCKED) != NUM && rw_lock_

Status: upstream: reported on 2024/11/13 04:42
Reported-by: syzbot+bbf33e1145d96b4dd5d6@syzkaller.appspotmail.com
First crash: 8d14h, last: 8d14h

Sample crash report:
panic: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: filepanic: kernel diagnostic assertion "((flags & PGO_LOCKED) != 0 && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_vnode.c", line 954
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*258468  88841      0           0          0    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f6312) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a7cd6,ffffffff82febe76,3ba,ffffffff830c95c0) at __assert+0x29
uvn_get(fffffd806d138ac0,47000,ffff80002a130950,ffff80002a1307cc,3,1,2758c642826e4d45,47000) at uvn_get+0x69b sys/uvm/uvm_vnode.c:953
uvm_fault_lower_lookup(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950) at uvm_fault_lower_lookup+0x10e sys/uvm/uvm_fault.c:1130
uvm_fault_lower(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950,ffff80002ef83c10) at uvm_fault_lower+0x6f sys/uvm/uvm_fault.c:1236
uvm_fault(fffffd806ce31e18,110c27a000,0,1) at uvm_fault+0x2f0 sys/uvm/uvm_fault.c:637
upageflttrap(ffff80002a130b60,110c27a477) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002a130b60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7daa2a663590, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_unveil.c", line 188
 cpu1: kernel diagnostic assertion "((flags & PGO_LOCKED) != 0 && rw_lock_held(uobj->vmobjlock)) || (flags & PGO_LOCKED) == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_vnode.c", line 954
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f6312) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a7cd6,ffffffff82febe76,3ba,ffffffff830c95c0) at __assert+0x29
uvn_get(fffffd806d138ac0,47000,ffff80002a130950,ffff80002a1307cc,3,1,2758c642826e4d45,47000) at uvn_get+0x69b sys/uvm/uvm_vnode.c:953
uvm_fault_lower_lookup(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950) at uvm_fault_lower_lookup+0x10e sys/uvm/uvm_fault.c:1130
uvm_fault_lower(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950,ffff80002ef83c10) at uvm_fault_lower+0x6f sys/uvm/uvm_fault.c:1236
uvm_fault(fffffd806ce31e18,110c27a000,0,1) at uvm_fault+0x2f0 sys/uvm/uvm_fault.c:637
upageflttrap(ffff80002a130b60,110c27a477) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002a130b60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7daa2a663590, count: -10
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a1305f0
rbx               0xffff800029b7cdbf
rdx                                0
rcx               0xffff80002ef83c10
rax               0xffff800029b7bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x2753de198c56e9d2
r11                0xe3d8bf72b738d1b
r12               0xffff800029b7cbc0
r13                                0
r14               0xffffffff834c2bc0    cpu_info_full_primary+0x2bc0
r15                              0x1
rip               0xffffffff82500785    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a1305e0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=258468 pid=88841 tcnt=2 stat=onproc
    flags process=0 proc=0
    runpri=86, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002ef82a58,0xffff8000371baa60
    process=0xffff8000371e5220 user=0xffff80002a12b000, vmspace=0xfffffd806ce31e18
    estcpu=36, cpticks=7, pctcpu=0.0, user=2, sys=5, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 63774  254217  40389      0  2           0                syz-executor
 63774   22086  40389      0  3   0x4000080  fsleep        syz-executor
 72516  114332  13172      0  2        0x10                syz-executor
 72516  136061  13172      0  2   0x4000010                syz-executor
*88841  258468  41376      0  7           0                syz-executor
 88841  441084  41376      0  3   0x4000080  fsleep        syz-executor
 56476  522819  98918      0  2           0                syz-executor
 56476  510700  98918      0  3   0x4000080  fsleep        syz-executor
 56476  405666  98918      0  3   0x4000080  fsleep        syz-executor
 86311  449955  45671      0  2           0                syz-executor
 86311  445135  45671      0  3   0x4000080  fsleep        syz-executor
 86311   38267  45671      0  3   0x4000080  kqread        syz-executor
 86311  286936  45671      0  3   0x4000080  fsleep        syz-executor
 53078  331733  72074      0  2         0x2                syz-executor
 13172  120237  72074      0  3        0x82  nanoslp       syz-executor
 44852   63890  72074      0  3        0x82  nanoslp       syz-executor
 11851  400170      0      0  3     0x14200  acct          acct
 41376  518350  72074      0  3        0x82  nanoslp       syz-executor
 98918  127930  72074      0  3        0x82  nanoslp       syz-executor
 40389  225426  72074      0  3        0x82  nanoslp       syz-executor
 99536  424876      0      0  3     0x14280  nfsidl        nfsio
 15339  163105      0      0  3     0x14280  nfsidl        nfsio
 10771   16990      0      0  3     0x14280  nfsidl        nfsio
 92087  104714      0      0  3     0x14280  nfsidl        nfsio
 52088  226522      0      0  3     0x14280  nfsidl        nfsio
 57764  386351      0      0  3     0x14280  nfsidl        nfsio
 15254  502922      0      0  3     0x14280  nfsidl        nfsio
 60421  375767      0      0  3     0x14280  nfsidl        nfsio
 31104  158288      0      0  3     0x14280  nfsidl        nfsio
 11701    6740      0      0  3     0x14280  nfsidl        nfsio
  9783  471908      0      0  3     0x14280  nfsidl        nfsio
 33223  295836      0      0  3     0x14280  nfsidl        nfsio
 44496  284890      0      0  3     0x14280  nfsidl        nfsio
 43576  517144      0      0  3     0x14280  nfsidl        nfsio
 82861  228571      0      0  3     0x14280  nfsidl        nfsio
 72499  459536      0      0  3     0x14280  nfsidl        nfsio
 61973  445627      0      0  3     0x14280  nfsidl        nfsio
 97847  298588      0      0  3     0x14280  nfsidl        nfsio
 20573  206453      0      0  3     0x14280  nfsidl        nfsio
 78984  352037      0      0  3     0x14280  nfsidl        nfsio
 51810  246856      0      0  3     0x14200  bored         sosplice
  2896  446922  58989      0  3    0x100082  sbwait        ndp
 58989  208201      1      0  3    0x10008a  sigsusp       sh
 70981   90061  72074      0  3        0x82  wait          syz-executor
 45671   18086  72074      0  3        0x82  nanoslp       syz-executor
 72074   52190  23533      0  3        0x82  kqread        syz-executor
 23533  504595  12573      0  3    0x10008a  sigsusp       ksh
 12573  492181  49795      0  3        0x98  kqread        sshd-session
 49795  475942  33493      0  3        0x92  kqread        sshd-session
 12315  434723      1      0  3    0x100083  ttyin         getty
 33493  321824      1      0  3        0x88  kqread        sshd
 63062  165774  69106     74  3   0x1100092  bpf           pflogd
 69106  221397      1      0  3        0x80  sbwait        pflogd
 65198  411786  65477     73  3   0x1100090  kqread        syslogd
 65477  196182      1      0  3    0x100082  sbwait        syslogd
 29604  370128      1      0  3    0x100080  kqread        resolvd
 61469  167125   6324     77  3    0x100092  kqread        dhcpleased
 37245   93228   6324     77  3    0x100092  kqread        dhcpleased
  6324  279190      1      0  3        0x80  kqread        dhcpleased
 46004  134105      0      0  3     0x14200  bored         smr
 70263  362910      0      0  3     0x14200  pgzero        zerothread
 12966  503977      0      0  3     0x14200  aiodoned      aiodoned
 84496  112284      0      0  3     0x14200  syncer        update
 27633  522081      0      0  3     0x14200  cleaner       cleaner
 11695   90398      0      0  2     0x14200                reaper
 71083  486527      0      0  3     0x14200  pgdaemon      pagedaemon
 47148  296142      0      0  3     0x14200  bored         viomb
 20747  191853      0      0  3  0x40014200  acpi0         acpi0
 59576  357255      0      0  3  0x40014200                idle1
 78846   21898      0      0  3     0x14200  bored         softnet3
  1376  236738      0      0  3     0x14200  bored         softnet2
 52919  511592      0      0  3     0x14200  bored         softnet1
 31426  166868      0      0  3     0x14200  bored         softnet0
 63554  437035      0      0  3     0x14200  bored         systqmp
 27922  327716      0      0  3     0x14200  bored         systq
 46349  396441      0      0  3     0x14200  tmoslp        softclockmp
 52092   75429      0      0  3  0x40014200  tmoslp        softclock
 62683   13825      0      0  3  0x40014200                idle0
     1  135300      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 56476 (syz-executor) thread 0xffff800029fd96d0 (510700)
Process 11695 (reaper) thread 0xffff800029fd8cb0 (90398)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10211  11152K   12714K 166960K     20305        0
            pcb    17     20K      25K 166960K      1397        0
         rtable   125      5K       8K 166960K       961        0
             pf    40     18K      26K 166960K       255        0
         ifaddr    34      5K       8K 166960K       182        0
        ifgroup    64      2K       2K 166960K       291        0
         sysctl     4      1K       1K 166960K        15        0
       counters    68     36K      37K 166960K       224        0
       ioctlops     0      0K       4K 166960K      2197        0
            iov     0      0K      24K 166960K       443        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1682    106K     106K 166960K      5982        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        78        0
         VM map     2      1K       1K 166960K         2        0
            sem    24     11K      11K 166960K        66        0
        dirhash    12      2K       3K 166960K       135        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    18     65K      89K 166960K      5118        0
          sigio     0      0K       0K 166960K       358        0
           proc    79    127K     128K 166960K      1265        0
        subproc   117      7K       7K 166960K       196        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       815        0
       in_multi    51      3K       7K 166960K       411        0
    ether_multi     1      0K       0K 166960K        50        0
            mrt     1      0K       0K 166960K        22        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K      1379        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         8        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   285     74K      91K 166960K     49956        0
       UVM aobj    50      4K       6K 166960K        60        0
     pinsyscall    45     90K     107K 166960K      6429        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       361        0
            NDP    14      0K       2K 166960K       133        0
           temp    87   6828K    7084K 166960K    185117        0
         kqueue    14     20K      32K 166960K       887        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      612    0      608     9     6     3     4     0     8    2
rtentry    112      295    0      246     4     1     3     4     0     8    0
unpcb      144     4343    0     4324    35    31     4     6     0     8    3
syncache   336       13    0       13     2     2     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      808     1862    0     1854    44    37     7     8     0     8    6
arp        120       56    0       48     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        3    0        3     1     1     0     1     0     8    0
inpcb      336     7259    0     7247    93    84     9    21     0     8    7
nd6        136       62    0       52     1     0     1     1     0     8    0
pkpcb       40       92    0       92    16    15     1     1     0     8    1
kcovpl      48       15    0        6     1     0     1     1     0     8    0
ppxss      1168      50    0       50    11    10     1     1     0     8    1
pfstscr     40        2    0        1     1     0     1     1     0     8    0
pffrag     232       30    0       26     1     0     1     1     0   482    0
pffrnode    88       27    0       24     1     0     1     1     0     8    0
pffrent     40      112    0      108     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24      435    0      315     2     0     2     2     0     8    0
pfstkey    128      437    0      317     7     0     7     7     0     8    0
pfstate    376      435    0      316    20     0    20    20     0     8    0
pfrule     1344      23    0       18     2     1     1     2     0     8    0
art_heap8  4096       4    0        1     3     0     3     3     0     8    0
art_heap4  256     1349    0     1077    34    16    18    31     0     8    0
art_table   32     1353    0     1078     4     1     3     4     0     8    0
art_node    16      280    0      238     1     0     1     1     0     8    0
sysvmsgpl   40       28    0       24     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       59    0       37     1     0     1     1     0     8    0
shmpl      112       57    0       10     2     0     2     2     0     8    0
dirhash    1024     100    0       83     3     0     3     3     0     8    0
dino2pl    256    10451    0     8926    96     0    96    96     0     8    0
ffsino     272    10451    0     8926   103     0   103   103     0     8    0
nchpl      144    17900    0    16198    64     0    64    64     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   65149    0    65148     7     5     2     2     0     8    1
percpumem   16      126    0       78     1     0     1     1     0     8    0
kstatmem   264      184    0      156     9     6     3     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72       23    0       23    14    13     1     1     0     8    1
scxspl     216    52783    0    52783    25    24     1     8     1     8    1
plimitpl   152     1225    0     1207     1     0     1     1     0     8    0
sigapl     424     5444    0     5371    10     1     9     9     0     8    0
futexpl     64    79121    0    79114     1     0     1     1     0     8    0
knotepl    120      803    0        0    24     0    24    24     0     8    0
kqueuepl   216     1749    0     1739    18    17     1     5     0     8    0
pipepl     320      749    0      717    14    11     3     8     0     8    0
fdescpl    496     5397    0     5365     5     0     5     5     0     8    0
filepl     152    40021    0    39747    72    54    18    22     0     8    5
lockfpl    104     2392    0     2390     5     4     1     2     0     8    0
lockfspl    48      866    0      864     1     0     1     1     0     8    0
sessionpl  144       39    0       30     1     0     1     1     0     8    0
pgrppl      48      316    0      298     1     0     1     1     0     8    0
ucredpl    104     6974    0     6958     1     0     1     1     0     8    0
zombiepl   144     5766    0     5764     4     3     1     1     0     8    0
processpl  1160    5444    0     5371     6     0     6     6     0     8    0
procpl     648    13748    0    13666    10     2     8     8     0     8    0
srpgc       96       20    0       20     7     7     0     1     0     8    0
sosppl     168       37    0       37    13    13     0     1     0     8    0
sockpl     664    12381    0    12346   116   105    11    23     0     8    7
mcl64k     65536     17    0        0     3     0     3     3     0     8    0
mcl16k     16384     18    0        0     3     0     3     3     0     8    0
mcl12k     12288      9    0        0     1     0     1     1     0     8    0
mcl9k      9216       5    0        0     1     0     1     1     0     8    0
mcl8k      8192      22    0        0     3     0     3     3     0     8    0
mcl4k      4096     156    0        0    19     1    18    19     0     8    0
mcl2k2     2112       4    0        0     1     0     1     1     0     8    0
mcl2k      2048      47    0        0     5     0     5     5     0     8    0
mtagpl      96      102    0        0     3     0     3     3     0     8    0
mbufpl     256     1322    0        0    77     0    77    77     0     8    0
bufpl      280    15056    0     8882   442     0   442   442     0     8    0
anonpl      24   668109    0   662602   170   114    56    73     0   185    8
amapchunkpl 152  163850    0   163139    96    58    38    38     0   158    8
amappl16   200    16155    0    16116   154   142    12    28     0     8    6
amappl15   192        9    0        9     1     1     0     1     0     8    0
amappl14   184      152    0      139     1     0     1     1     0     8    0
amappl13   176       12    0       12     2     2     0     1     0     8    0
amappl12   168     6205    0     6171     3     1     2     2     0     8    0
amappl11   160       89    0       75     1     0     1     1     0     8    0
amappl10   152       15    0       15     2     2     0     1     0     8    0
amappl9    144      132    0      132     1     1     0     1     0     8    0
amappl8    136       47    0       44     1     0     1     1     0     8    0
amappl7    128      126    0      112     1     0     1     1     0     8    0
amappl6    120      246    0      243     1     0     1     1     0     8    0
amappl5    112      173    0      160     1     0     1     1     0     8    0
amappl4    104      385    0      361     1     0     1     1     0     8    0
amappl3     96    30422    0    30304     6     2     4     4     0     8    0
amappl2     88     5807    0     5718     3     0     3     3     0     8    0
amappl1     80    25523    0    24920    15     0    15    15     0     8    0
amappl      88    48964    0    48744     7     1     6     6     0    92    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma32768   32768      2    0        2     2     2     0     1     0     8    0
dma4096    4096       3    0        3     2     2     0     1     0     8    0
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma512     512       33    0       33     1     1     0     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      258    0      258     5     5     0     1     0     8    0
dma64       64        7    0        7     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       20    0       19     1     0     1     1     0     8    0
aobjpl      72       59    0       10     1     0     1     1     0     8    0
uaddrrnd    24     5397    0     5364     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     5397    0     5364     1     0     1     1     0     8    0
vmmpekpl   168    40696    0    40635     3     0     3     3     0     8    0
vmmpepl    168   330753    0   328698   171    72    99   110     0   357    4
vmsppl     448     5396    0     5364     6     1     5     5     0     8    0
rwobjpl     56    86701    0    79654   112     9   103   106     0     8    0
pdppl      4096   10801    0    10728   171    96    75    83     0     8    2
pvpl        32    20110    0        0   163     1   162   162     0   265    0
pmappl     248     5396    0     5364     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      692    0      260    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff834c1ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff835b1128) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835b1128) at __mp_lock+0x192 sys/kern/kern_lock.c:144
softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
cnputc(65) at cnputc+0x61 sys/dev/cons.c:218
db_putchar(65) at db_putchar+0x65c sys/ddb/db_output.c:155
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
db_printf(ffffffff830956bf) at db_printf+0x9b
panic(ffffffff830f6312) at panic+0x103 sys/kern/subr_prf.c:216
__assert(ffffffff830a7cd6,ffffffff8306202e,bc,ffffffff83024a05) at __assert+0x29
unveil_destroy(ffff8000371e68c8) at unveil_destroy+0x1dd sys/kern/kern_unveil.c:188
exit1(ffff8000367b2f78,0,0,1) at exit1+0x60f sys/kern/kern_exit.c:233
end trace frame: 0xffff80002d572b80, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff834c1ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff835b1128) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835b1128) at __mp_lock+0x192 sys/kern/kern_lock.c:144
softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
cnputc(65) at cnputc+0x61 sys/dev/cons.c:218
db_putchar(65) at db_putchar+0x65c sys/ddb/db_output.c:155
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
db_printf(ffffffff830956bf) at db_printf+0x9b
panic(ffffffff830f6312) at panic+0x103 sys/kern/subr_prf.c:216
__assert(ffffffff830a7cd6,ffffffff8306202e,bc,ffffffff83024a05) at __assert+0x29
unveil_destroy(ffff8000371e68c8) at unveil_destroy+0x1dd sys/kern/kern_unveil.c:188
exit1(ffff8000367b2f78,0,0,1) at exit1+0x60f sys/kern/kern_exit.c:233
sys_exit(ffff8000367b2f78,ffff80002d572c60,ffff80002d572bb0) at sys_exit+0x1a
syscall(ffff80002d572c60) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline]
syscall(ffff80002d572c60) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7e08f95b4a30, count: -17
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f6312) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a7cd6,ffffffff82febe76,3ba,ffffffff830c95c0) at __assert+0x29
uvn_get(fffffd806d138ac0,47000,ffff80002a130950,ffff80002a1307cc,3,1,2758c642826e4d45,47000) at uvn_get+0x69b sys/uvm/uvm_vnode.c:953
uvm_fault_lower_lookup(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950) at uvm_fault_lower_lookup+0x10e sys/uvm/uvm_fault.c:1130
uvm_fault_lower(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950,ffff80002ef83c10) at uvm_fault_lower+0x6f sys/uvm/uvm_fault.c:1236
uvm_fault(fffffd806ce31e18,110c27a000,0,1) at uvm_fault+0x2f0 sys/uvm/uvm_fault.c:637
upageflttrap(ffff80002a130b60,110c27a477) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002a130b60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7daa2a663590, count: 5
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f6312) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a7cd6,ffffffff82febe76,3ba,ffffffff830c95c0) at __assert+0x29
uvn_get(fffffd806d138ac0,47000,ffff80002a130950,ffff80002a1307cc,3,1,2758c642826e4d45,47000) at uvn_get+0x69b sys/uvm/uvm_vnode.c:953
uvm_fault_lower_lookup(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950) at uvm_fault_lower_lookup+0x10e sys/uvm/uvm_fault.c:1130
uvm_fault_lower(ffff80002a1309d8,ffff80002a130a10,ffff80002a130950,ffff80002ef83c10) at uvm_fault_lower+0x6f sys/uvm/uvm_fault.c:1236
uvm_fault(fffffd806ce31e18,110c27a000,0,1) at uvm_fault+0x2f0 sys/uvm/uvm_fault.c:637
upageflttrap(ffff80002a130b60,110c27a477) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002a130b60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7daa2a663590, count: -10

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/13 04:42 openbsd ecb88bd12f5e 62026c85 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "ps->ps_uvncount == NUM" failed: filepanic: kernel diagnostic assertion "((flags & PGO_LOCKED) != NUM && rw_lock_
* Struck through repros no longer work on HEAD.