syzbot


panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k

Status: closed as invalid on 2022/06/29 05:10
Reported-by: syzbot+deb2ad0e44761a516cc6@syzkaller.appspotmail.com
First crash: 880d, last: 880d

Sample crash report:
panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 678
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*273731  84507  32767        0x10          0    1  syz-executor.1
  70698  94209  32767        0x10          0    0  syz-executor.6
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8259a81b) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff8261357c,ffffffff825d7a31,2a6,ffffffff825cf550) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: 11
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: vop_generic_badop
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 678
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8259a81b) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff8261357c,ffffffff825d7a31,2a6,ffffffff825cf550) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: -4
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002c984370
rbx               0xffff800020ce9c5f
rdx                                0
rcx                                0
rax               0xffff80002610d510
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x1c9a81917b788d3b
r11               0x81b6fc778a0fe6e1
r12               0xffff800020ce9a60
r13                                0
r14               0xffffffff8297ea60    cpu_info_full_primary+0x2a60
r15                              0x1
rip               0xffffffff81329348    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80002c984360
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.1) pid=273731 stat=onproc
    flags process=10<SUGID> proc=0
    pri=86, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff80002610d270,0xffffffff82a204b8
    process=0xffff8000246854e0 user=0xffff80002c97f000, vmspace=0xfffffd806fe31b98
    estcpu=36, cpticks=2, pctcpu=0.0
    user=0, sys=2, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*84507  273731  48541  32767  7        0x10                syz-executor.1
 88934  262567  93778  32767  2        0x10                syz-executor.5
 88934  173007  93778  32767  2   0x4000010                syz-executor.5
 88934  457135  93778  32767  2   0x4000010                syz-executor.5
 22090  510649  65134  32767  2        0x10                syz-executor.3
 22090  474333  65134  32767  3   0x4000090  fsleep        syz-executor.3
 22090  100721  65134  32767  3   0x4000090  fsleep        syz-executor.3
 22090   12586  65134  32767  3   0x4000090  fsleep        syz-executor.3
 39452  342935  87899  32767  3        0x90  nanoslp       syz-executor.7
 39452  181517  87899  32767  3   0x4000090  fsleep        syz-executor.7
 39452  218971  87899  32767  3   0x4000090  fsleep        syz-executor.7
 49009  345306  31012  32767  3        0x90  nanoslp       syz-executor.0
 49009  240705  31012  32767  3   0x4000090  netio         syz-executor.0
 19358  252589      0      0  3     0x14200  bored         sosplice
 87899   80351  34433  32767  3        0x90  nanoslp       syz-executor.7
 65134  389722  16446  32767  3        0x90  nanoslp       syz-executor.3
 94209   70698  33078  32767  7        0x10                syz-executor.6
 58044  380478  17167  32767  2        0x10                syz-executor.4
 33078   22773  64267      0  3        0x82  wait          syz-executor.6
 34433  372901  64267      0  3        0x82  wait          syz-executor.7
 93778  147894  64604  32767  3        0x90  nanoslp       syz-executor.5
 64604  166257  64267      0  3        0x82  wait          syz-executor.5
 17167  271835  64267      0  3        0x82  wait          syz-executor.4
 16446  486639  64267      0  3        0x82  wait          syz-executor.3
 85574   38523  86331  32767  2        0x10                syz-executor.2
 86331  175289  64267      0  3        0x82  wait          syz-executor.2
 48541   46347  39665  32767  3        0x90  nanoslp       syz-executor.1
 39665  281840  64267      0  3        0x82  wait          syz-executor.1
 31012  391900  97715  32767  3        0x90  nanoslp       syz-executor.0
 97715  322913  64267      0  3        0x82  wait          syz-executor.0
 64267  331188  71043      0  3        0x82  thrsleep      syz-fuzzer
 64267  449518  71043      0  3   0x4000082  nanoslp       syz-fuzzer
 64267  229271  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  524126  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  481886  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  214116  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  502999  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  517191  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  154750  71043      0  3   0x4000082  thrsleep      syz-fuzzer
 64267  481197  71043      0  2   0x4000082                syz-fuzzer
 71043  363278  30525      0  3    0x10008a  sigsusp       ksh
 30525   12028  13709      0  2        0x9a                sshd
 26878   14161      1      0  3    0x100083  ttyin         getty
 13709  274408      1      0  3        0x88  kqread        sshd
 27480   48501  84757     73  3   0x1100090  kqread        syslogd
 84757  298002      1      0  3    0x100082  netio         syslogd
 61840  188763      1      0  3    0x100080  kqread        resolvd
 90558  475775  42713     77  3    0x100092  kqread        dhcpleased
 68603  472888  42713     77  3    0x100092  kqread        dhcpleased
 42713  248551      1      0  3        0x80  kqread        dhcpleased
 98291   40669      0      0  3     0x14200  bored         smr
 74146  451292      0      0  3     0x14200  pgzero        zerothread
 14963   18270      0      0  3     0x14200  aiodoned      aiodoned
 80484  424734      0      0  3     0x14200  syncer        update
 39879  345774      0      0  3     0x14200  cleaner       cleaner
  3981  480144      0      0  3     0x14200  reaper        reaper
 48119   85807      0      0  3     0x14200  pgdaemon      pagedaemon
 95668  391651      0      0  3     0x14200  bored         viomb
  9797  242529      0      0  3  0x40014200  acpi0         acpi0
 74173   48435      0      0  3  0x40014200                idle1
 67115  235077      0      0  3     0x14200  bored         softnet
 15451  252510      0      0  3     0x14200  bored         softnet
 74329  333673      0      0  3     0x14200  bored         softnet
 70079  247128      0      0  3     0x14200  bored         softnet
 16472  219459      0      0  3     0x14200  bored         systqmp
  3256  161115      0      0  3     0x14200  bored         systq
 20294   71389      0      0  3  0x40014200  bored         softclock
 85631   95495      0      0  3  0x40014200                idle0
     1  343029      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 94209 (syz-executor.6) thread 0xffff8000fffefce0 (70698)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82a338a0)
#0  witness_lock+0x44d
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x3d3 sys/kern/sched_bsd.c:416
#3  sleep_finish+0x180 sys/kern/kern_synch.c:420
#4  tsleep+0x12c sys/kern/kern_synch.c:158
#5  biowait+0x91 sys/kern/vfs_bio.c:1271
#6  bwrite+0x21b sys/kern/vfs_bio.c:772
#7  ffs_update+0x27d sys/ufs/ffs/ffs_inode.c:113
#8  ufs_mkdir+0x662 sys/ufs/ufs/ufs_vnops.c:1220
#9  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
#10 domkdirat+0x121 sys/kern/vfs_syscalls.c:3116
#11 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#11 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807326d4e8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5  vget+0x1d3 sys/kern/vfs_subr.c:678
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1318
#8  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#9  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1150
#10 VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
#11 domkdirat+0x121 sys/kern/vfs_syscalls.c:3116
#12 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#12 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#13 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80674582c0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3101
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 58044 (syz-executor.4) thread 0xffff8000fffedce8 (380478)
exclusive rrwlock inode r = 0 (0xfffffd806e51f700)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1150
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3116
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80674580a0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3101
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 85574 (syz-executor.2) thread 0xffff8000fffee2a0 (38523)
exclusive rrwlock inode r = 0 (0xfffffd807326d818)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:567
#5  vn_closefile+0xc6 vn_close sys/kern/vfs_vnops.c:295 [inline]
#5  vn_closefile+0xc6 sys/kern/vfs_vnops.c:612
#6  fdrop+0xc7 sys/kern/kern_descrip.c:1279
#7  closef+0x11c sys/kern/kern_descrip.c:1263
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10204   6412K    6420K  78643K     11296        0
            pcb    13     10K      12K  78643K        15        0
         rtable   234      6K       7K  78643K       381        0
         ifaddr    81     16K      16K  78643K        82        0
         sysctl     2      0K       0K  78643K         2        0
       counters    56     35K      35K  78643K        56        0
       ioctlops     0      0K       2K  78643K        33        0
            iov     0      0K      24K  78643K       218        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1270     79K      79K  78643K      1822        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K         8        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      0K       0K  78643K        64        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    23     85K     117K  78643K      1032        0
          sigio     0      0K       0K  78643K         6        0
           proc    56     78K     103K  78643K       522        0
        subproc   104      6K       6K  78643K       104        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        40        0
       in_multi    99      6K       7K  78643K       116        0
    ether_multi     1      0K       0K  78643K         4        0
            mrt     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   223    996K     996K  78643K       223        0
           exec     0      0K       2K  78643K       736        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   238     79K      80K  78643K      7717        0
       UVM aobj    17      2K       2K  78643K        22        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K        31        0
            NDP    11      0K       2K  78643K        27        0
           temp   123   4722K    4786K  78643K      5662        0
         kqueue    12     18K      24K  78643K        85        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      188    0      185     4     3     1     3     0     8    0
rtentry    112      111    0        1     4     0     4     4     0     8    0
unpcb      136      675    0      662    10     7     3     6     0     8    2
syncache   296       21    0       21     3     2     1     1     0     8    1
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      736     1117    0     1018    34    25     9    16     0     8    0
arp        120       18    0        0     1     0     1     1     0     8    0
inpcb      312     1660    0     1636    31    23     8    11     0     8    6
nd6         48       24    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      452    0        0    29     0    29    29     0     8    0
art_table   32      453    0        0     4     0     4     4     0     8    0
art_node    16      110    0       10     1     0     1     1     0     8    0
sysvmsgpl   40       27    0        3     1     0     1     1     0     8    0
semupl     112        5    0        5     1     1     0     1     0     8    0
semapl     112       62    0       52     1     0     1     1     0     8    0
shmpl      112       19    0        5     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     3095    0     1663    90     0    90    90     0     8    0
ffsino     272     3095    0     1663    96     0    96    96     0     8    0
nchpl      144     4601    0     2929    63     0    63    63     0     8    0
uvmvnodes   80     3208    0        0    66     0    66    66     0     8    0
vnodes     224     3208    0        0   189     0   189   189     0     8    0
namei      1024   15935    0    15933     3     2     1     2     0     8    0
percpumem   16       40    0        0     1     0     1     1     0     8    0
kstatmem   264       22    0        0     2     0     2     2     0     8    0
scxspl     216    17229    0    17229    16    15     1     8     0     8    1
plimitpl   152      117    0       95     2     1     1     2     0     8    0
sigapl     424     1318    0     1266     7     0     7     7     0     8    0
futexpl     64     8920    0     8915     1     0     1     1     0     8    0
knotepl    120      114    0        0     4     0     4     4     0     8    0
kqueuepl   216      344    0      333     9     4     5     5     0     8    4
pipepl     336      343    0      311    10     7     3     6     0     8    0
fdescpl    496     1300    0     1266     7     2     5     6     0     8    0
filepl     152     9835    0     9576    37    21    16    19     0     8    5
lockfpl    104      227    0      225     1     0     1     1     0     8    0
lockfspl    48       56    0       54     1     0     1     1     0     8    0
sessionpl  144       23    0        7     1     0     1     1     0     8    0
pgrppl      48       35    0       19     1     0     1     1     0     8    0
ucredpl     96     2347    0     2329     1     0     1     1     0     8    0
zombiepl   144     1266    0     1266     1     0     1     1     0     8    1
processpl  1064    1318    0     1266     4     0     4     4     0     8    0
procpl     672     3174    0     3105     9     2     7     8     0     8    0
sosppl     168       11    0       11     1     0     1     1     0     8    1
sockpl     480     2549    0     2509    82    68    14    29     0     8    9
mcl64k     65536      8    0        0     1     0     1     1     0     8    0
mcl16k     16384     14    0        0     2     0     2     2     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216       5    0        0     1     0     1     1     0     8    0
mcl8k      8192      17    0        0     3     0     3     3     0     8    0
mcl4k      4096      11    0        0     2     0     2     2     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048     199    0        0    24     0    24    24     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      365    0        0    22     0    22    22     0     8    0
bufpl      288     6093    0      136   426     0   426   426     0     8    0
anonpl      24   253784    0   241345   131    27   104   107     0   186    6
amapchunkpl 152   21299    0    20703    40    13    27    37     0   158    0
amappl16   200     3397    0     3028    35     2    33    33     0     8   10
amappl15   192      232    0      230     1     0     1     1     0     8    0
amappl14   184       14    0        6     1     0     1     1     0     8    0
amappl13   176       79    0       78     1     0     1     1     0     8    0
amappl12   168      235    0      229     2     1     1     1     0     8    0
amappl11   160      300    0      283     1     0     1     1     0     8    0
amappl10   152       42    0       36     1     0     1     1     0     8    0
amappl9    144      515    0      510     1     0     1     1     0     8    0
amappl8    136      830    0      771     3     0     3     3     0     8    0
amappl7    128      356    0      338     1     0     1     1     0     8    0
amappl6    120      210    0      194     2     0     2     2     0     8    0
amappl5    112      800    0      782     1     0     1     1     0     8    0
amappl4    104     1238    0     1204     2     0     2     2     0     8    0
amappl3     96     3570    0     3513     2     0     2     2     0     8    0
amappl2     88     1600    0     1534     3     0     3     3     0     8    0
amappl1     80    33067    0    32381    20     4    16    19     0     8    0
amappl      88     7255    0     7094     6     1     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       21    0        5     1     0     1     1     0     8    0
uaddrrnd    24     1300    0     1266     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1300    0     1266     1     0     1     1     0     8    0
vmmpekpl   168    15137    0    15089     3     0     3     3     0     8    0
vmmpepl    168   128598    0   126002   146     8   138   138     0   357    7
vmsppl     368     1299    0     1266     4     0     4     4     0     8    0
rwobjpl     56    36402    0    31834    69     0    69    69     0     8    0
pdppl      4096    2607    0     2532   131    50    81    91     0     8    6
pvpl        32   708863    0   691454   249    65   184   239     0   265    9
pmappl     248     1299    0     1266     4     1     3     3     0     8    0
extentpl    40       58    0       38     1     0     1     1     0     8    0
phpool     112      915    0      109    24     0    24    24     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8297dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82a33698) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82a33698) at __mp_lock+0x122 sys/kern/kern_lock.c:147
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x1f
cnputc(61) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff826143de) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff82591714) at panic+0xd7 sys/kern/subr_prf.c:220
vop_generic_badop(ffff80002c366958) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd805ac79020,fffffd807e97f010) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd807e97f010) at bwrite+0x1f0 sys/kern/vfs_bio.c:763
end trace frame: 0xffff80002c366a40, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff8297dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82a33698) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82a33698) at __mp_lock+0x122 sys/kern/kern_lock.c:147
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x1f
cnputc(61) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff826143de) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff82591714) at panic+0xd7 sys/kern/subr_prf.c:220
vop_generic_badop(ffff80002c366958) at vop_generic_badop+0x1b sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd805ac79020,fffffd807e97f010) at VOP_STRATEGY+0x9b sys/kern/vfs_vops.c:628
bwrite(fffffd807e97f010) at bwrite+0x1f0 sys/kern/vfs_bio.c:763
VOP_BWRITE(fffffd807e97f010) at VOP_BWRITE+0x4a sys/kern/vfs_vops.c:640
ufs_mkdir(ffff80002c366bf0) at ufs_mkdir+0x6b4 sys/ufs/ufs/ufs_vnops.c:1236
VOP_MKDIR(fffffd806c803ea8,ffff80002c366d50,ffff80002c366d80,ffff80002c366c80) at VOP_MKDIR+0xbf sys/kern/vfs_vops.c:388
domkdirat(ffff8000fffefce0,ffffff9c,7f7ffffc0860,1ff) at domkdirat+0x121 sys/kern/vfs_syscalls.c:3116
syscall(ffff80002c366f00) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff80002c366f00) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffc08d0, count: -20
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8259a81b) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff8261357c,ffffffff825d7a31,2a6,ffffffff825cf550) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: 11
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8259a81b) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff8261357c,ffffffff825d7a31,2a6,ffffffff825cf550) at __assert+0x25 sys/kern/subr_prf.c:161
proc_trampoline_mp() at proc_trampoline_mp+0x131
end trace frame: 0x0, count: -4

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/06/28 12:14 openbsd 4050d262c519 ef82eb2c .config console log report ci-openbsd-setuid panic: vpopa_ngiecn:kerericn_elba diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/k
* Struck through repros no longer work on HEAD.