syzbot


assert "nlevel >= IPL_NONE" failed in intr.c (2)

Status: fixed on 2024/11/18 06:43
Reported-by: syzbot+b3927f8ad162452a2f39@syzkaller.appspotmail.com
Fix commit: a921796a245d make sure bpfsdetach is holding a bpf_d ref when invalidating stuff.
First crash: 295d, last: 38d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "nlevel >= IPL_NONE" failed in intr.c C 259 469d 478d 3/3 fixed on 2023/09/13 21:39

Sample crash report:
panic: kernel diagnostic assertion "nlevel >= IPL_NONE" failed: file "/syzkaller/managers/multicore/kernel/sys/arch/amd64/amd64/intr.c", line 775
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 357434  75797      0           0  0x4000000    0  syz-executor
*134199  54887      0      0x1000  0x4080000    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f5419) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a98ec,ffffffff83007025,307,ffffffff8305f8d2) at __assert+0x29
splraise(deafbead) at splraise+0xbd sys/arch/amd64/amd64/intr.c:775
mtx_enter_try(ffff800001321608) at mtx_enter_try+0x97 sys/kern/kern_lock.c:266
mtx_enter(ffff800001321608) at mtx_enter+0x60 sys/kern/kern_lock.c:239
klist_mutex_lock(ffff800001321608) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000012b9b80) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff8000012b1800) at bpfdetach+0xa6
if_detach(ffff8000012b1800) at if_detach+0x14f sys/net/if.c:1193
tun_clone_destroy(ffff8000012b1800) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:346
if_clone_destroy(ffff800037271c70) at if_clone_destroy+0x1d7 sys/net/if.c:1382
ifioctl(ffff8000012947d8,80206979,ffff800037271c70,ffff8000371d82c8) at ifioctl+0x5c5
end trace frame: 0xffff800037271d70, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "nlevel >= IPL_NONE" failed: file "/syzkaller/managers/multicore/kernel/sys/arch/amd64/amd64/intr.c", line 775
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f5419) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a98ec,ffffffff83007025,307,ffffffff8305f8d2) at __assert+0x29
splraise(deafbead) at splraise+0xbd sys/arch/amd64/amd64/intr.c:775
mtx_enter_try(ffff800001321608) at mtx_enter_try+0x97 sys/kern/kern_lock.c:266
mtx_enter(ffff800001321608) at mtx_enter+0x60 sys/kern/kern_lock.c:239
klist_mutex_lock(ffff800001321608) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000012b9b80) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff8000012b1800) at bpfdetach+0xa6
if_detach(ffff8000012b1800) at if_detach+0x14f sys/net/if.c:1193
tun_clone_destroy(ffff8000012b1800) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:346
if_clone_destroy(ffff800037271c70) at if_clone_destroy+0x1d7 sys/net/if.c:1382
ifioctl(ffff8000012947d8,80206979,ffff800037271c70,ffff8000371d82c8) at ifioctl+0x5c5
sys_ioctl(ffff8000371d82c8,ffff800037271e50,ffff800037271da0) at sys_ioctl+0x67c
syscall(ffff800037271e50) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
syscall(ffff800037271e50) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x282839d9b30, count: -17
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000372717d0
rbx               0xffff800029b7cdbf
rdx                                0
rcx               0xffff8000371d82c8
rax               0xffff800029b7bff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x721afc52f3c668ba
r11               0x4639f2874c73d858
r12               0xffff800029b7cbc0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff817a0ea5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000372717c0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=134199 pid=54887 tcnt=2 stat=onproc
    flags process=1000<SINGLEEXIT> proc=4080000<SUSPSINGLE,THREAD>
    runpri=32, usrpri=78, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff8000371d8550 scnt=1 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000371d8550,0xffff8000371d8cf8
    process=0xffff8000371d5220 user=0xffff80003726c000, vmspace=0xfffffd806be51568
    estcpu=28, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 10351  453878  89828      0  2           0                syz-executor
 10351  185455  89828      0  2   0x4000000                syz-executor
 56550   17023   7387      0  2           0                syz-executor
 56550  271831   7387      0  3   0x4000080  fsleep        syz-executor
 51765   55937  46565      0  3        0x80  nanoslp       syz-executor
 51765  230335  46565      0  3   0x4000080  ttyin         syz-executor
 51765  486290  46565      0  3   0x4000080  fsleep        syz-executor
 75797  414512  49342      0  2           0                syz-executor
 75797  357434  49342      0  7   0x4000000                syz-executor
 24585  434533  26014      0  3        0x80  nanoslp       syz-executor
 24585  239192  26014      0  3   0x4000080  fsleep        syz-executor
 24585  291349  26014      0  3   0x4000080  fsleep        syz-executor
 26380  169192  14846      0  2           0                syz-executor
 26380   58763  14846      0  2   0x4000000                syz-executor
 26380  430640  14846      0  3   0x4000080  fsleep        syz-executor
 54887  134302  42012      0  3      0x3000  suspend       syz-executor
*54887  134199  42012      0  7   0x4081000                syz-executor
 90394   74387      0      0  3     0x14200  bored         sosplice
 53314   53156      1      0  3    0x100083  ttyin         getty
 85622  117323      0      0  3     0x14280  nfsidl        nfsio
 47333  119218      0      0  3     0x14280  nfsidl        nfsio
 19255  512056      0      0  3     0x14280  nfsidl        nfsio
 96886  320501      0      0  3     0x14280  nfsidl        nfsio
 26044  117217      0      0  3     0x14280  nfsidl        nfsio
 44007  219345      0      0  3     0x14280  nfsidl        nfsio
  4119  501086      0      0  3     0x14280  nfsidl        nfsio
 67495  409573      0      0  3     0x14280  nfsidl        nfsio
  9166  399083      0      0  3     0x14280  nfsidl        nfsio
 90182  262120      0      0  3     0x14280  nfsidl        nfsio
 55571  215951      0      0  3     0x14280  nfsidl        nfsio
 43996    2255      0      0  3     0x14280  nfsidl        nfsio
 35663  180063      0      0  3     0x14280  nfsidl        nfsio
 14349  518072      0      0  3     0x14280  nfsidl        nfsio
 57706   31651      0      0  3     0x14280  nfsidl        nfsio
 83876  354272      0      0  3     0x14280  nfsidl        nfsio
 22314  382780      0      0  3     0x14280  nfsidl        nfsio
 16410  362399      0      0  3     0x14280  nfsidl        nfsio
 55600  403565      0      0  3     0x14280  nfsidl        nfsio
 91169   17039      0      0  3     0x14280  nfsidl        nfsio
  7387  251902  95891      0  3        0x82  nanoslp       syz-executor
 42012  113434  95891      0  3        0x82  nanoslp       syz-executor
 78490  262979  95891      0  3        0x82  wait          syz-executor
 26014   98126  95891      0  3        0x82  nanoslp       syz-executor
 89828  498514  95891      0  3        0x82  nanoslp       syz-executor
 46565  399192  95891      0  3        0x82  nanoslp       syz-executor
 14846  505758  95891      0  3        0x82  nanoslp       syz-executor
 49342   10514  95891      0  3        0x82  nanoslp       syz-executor
 95891  278054  52050      0  3        0x82  kqread        syz-executor
 52050  224537  13241      0  3    0x10008a  sigsusp       ksh
 13241  232357  10470      0  3        0x98  kqread        sshd-session
 10470  116802  82933      0  3        0x92  kqread        sshd-session
 82933   78080      1      0  3        0x88  kqread        sshd
 35652  187260  13200     74  3   0x1100092  bpf           pflogd
 13200  485997      1      0  3        0x80  sbwait        pflogd
 22543   57887  26988     73  3   0x1100090  kqread        syslogd
 26988  384635      1      0  3    0x100082  sbwait        syslogd
 58144   51275      1      0  3    0x100080  kqread        resolvd
 45406  418090  49170     77  3    0x100092  kqread        dhcpleased
 68991  221742  49170     77  3    0x100092  kqread        dhcpleased
 49170  519644      1      0  3        0x80  kqread        dhcpleased
 82748  318920      0      0  3     0x14200  bored         smr
 83627  125870      0      0  2     0x14200                zerothread
 54787  298146      0      0  3     0x14200  aiodoned      aiodoned
 73405  123974      0      0  3     0x14200  syncer        update
 39289  445713      0      0  3     0x14200  cleaner       cleaner
 51761   18214      0      0  3     0x14200  reaper        reaper
 44772  477438      0      0  3     0x14200  pgdaemon      pagedaemon
 60107   89908      0      0  3     0x14200  bored         viomb
 38094  172940      0      0  3  0x40014200  acpi0         acpi0
 78316   47266      0      0  3  0x40014200                idle1
 97547  410734      0      0  3     0x14200  bored         softnet3
 24629  420489      0      0  3     0x14200  bored         softnet2
 96659  204501      0      0  3     0x14200  bored         softnet1
 12418  366224      0      0  3     0x14200  bored         softnet0
  8792  223410      0      0  3     0x14200  bored         systqmp
 26267  335653      0      0  3     0x14200  bored         systq
 62843  174943      0      0  3     0x14200  tmoslp        softclockmp
 83576  519137      0      0  3  0x40014200  tmoslp        softclock
 49649  428456      0      0  3  0x40014200                idle0
     1  472414      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 24585 (syz-executor) thread 0xffff80003359ca48 (239192)
exclusive rwlock futex r = 0 (0xffffffff834a16d0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  sys_futex+0x69 sys/kern/sys_futex.c:98
#2  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
#2  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#3  Xsyscall+0x128
Process 54887 (syz-executor) thread 0xffff8000371d82c8 (134199)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8363b0f8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  __mp_acquire_count+0x58
#2  mi_switch+0x4b7 sys/kern/sched_bsd.c:441
#3  sleep_finish+0x2f2 sys/kern/kern_synch.c:425
#4  rw_enter+0x348 sys/kern/kern_rwlock.c:285
#5  lf_purgelocks+0x2f sys/kern/vfs_lockf.c:731
#6  vgonel+0x497 sys/kern/vfs_subr.c:1208
#7  vop_generic_revoke+0x3e6 sys/kern/vfs_default.c:128
#8  VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#9  vdevgone+0x17b
#10 bpfsdetach+0x117 sys/net/bpf.c:1802
#11 bpfdetach+0xa6
#12 if_detach+0x14f sys/net/if.c:1193
#13 tun_clone_destroy+0x2d6 sys/net/if_tun.c:346
#14 if_clone_destroy+0x1d7 sys/net/if.c:1382
#15 ifioctl+0x5c5
#16 sys_ioctl+0x67c
#17 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
#17 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#18 Xsyscall+0x128
exclusive rwlock clonelk r = 0 (0xffffffff83437af0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  if_clone_destroy+0x67
#2  ifioctl+0x5c5
#3  sys_ioctl+0x67c
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10193  11131K   11445K 166960K     11535        0
            pcb    17     12K      12K 166960K        57        0
         rtable   241      7K       7K 166960K       377        0
             pf    35     17K      19K 166960K        57        0
         ifaddr    44      7K       7K 166960K        48        0
        ifgroup    55      2K       2K 166960K        59        0
         sysctl     2      0K       0K 166960K         2        0
       counters    64     36K      36K 166960K        68        0
       ioctlops     0      0K       4K 166960K      1498        0
            iov     0      0K      12K 166960K        10        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1430     90K      91K 166960K      1586        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem     6      0K       0K 166960K         7        0
        dirhash    12      2K       3K 166960K        18        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    18     65K      97K 166960K       313        0
          sigio     0      0K       0K 166960K         3        0
           proc    72     91K     128K 166960K       570        0
        subproc   104      6K       6K 166960K       104        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        26        0
       in_multi   103      7K       7K 166960K       112        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    61    281K     281K 166960K        61        0
           exec     0      0K       1K 166960K       414        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241     73K      74K 166960K      4560        0
       UVM aobj     8      2K       2K 166960K         9        0
     pinsyscall    43     86K     104K 166960K      1391        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K        13        0
            NDP    12      0K       2K 166960K        30        0
           temp    38   6814K    6886K 166960K      7089        0
         kqueue    13     20K      26K 166960K        51        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       43    0       39     1     0     1     1     0     8    0
rtentry    112      117    0        5     4     0     4     4     0     8    0
unpcb      144      153    0      132     2     0     2     2     0     8    1
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpqe       32        1    0        1     1     1     0     1     0     8    0
tcpcb      808       51    0       46     2     0     2     2     0     8    1
arp        120       19    0        1     1     0     1     1     0     8    0
ipq         40        1    0        1     1     0     1     1     0     8    1
ipqe        40        3    0        3     1     0     1     1     0     8    1
inpcb      336      254    0      245     5     3     2     4     0     8    0
nd6        136       24    0        0     1     0     1     1     0     8    0
pkpcb       40        3    0        3     2     1     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1168       2    0        2     1     0     1     1     0     8    1
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       27    0        0     1     0     1     1     0     8    0
pfstkey    128       27    0        0     1     0     1     1     0     8    0
pfstate    376       27    0        0     3     0     3     3     0     8    0
pfrule     1344      23    0       16     2     0     2     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      482    0        2    30     0    30    30     0     8    0
art_table   32      484    0        2     4     0     4     4     0     8    0
art_node    16      115    0       13     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        1     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112        4    0        0     1     0     1     1     0     8    0
shmpl      112        6    0        1     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     1890    0      383    95     0    95    95     0     8    0
ffsino     272     1890    0      383   102     0   102   102     0     8    0
nchpl      144     2335    0      650    63     0    63    63     0     8    0
uvmvnodes   80     2150    0        0    44     0    44    44     0     8    0
vnodes     216     2150    0        0   120     0   120   120     0     8    0
namei      1024    7762    0     7762     3     2     1     2     0     8    1
percpumem   16       48    0        2     1     0     1     1     0     8    0
kstatmem   264       28    0        4     2     0     2     2     0     8    0
scxspl     216     6944    0     6944    10     9     1     8     1     8    1
plimitpl   152       50    0       32     1     0     1     1     0     8    0
sigapl     424      634    0      563     9     1     8     8     0     8    0
futexpl     64     2934    0     2929     1     0     1     1     0     8    0
knotepl    120      275    0        0     9     0     9     9     0     8    0
kqueuepl   216       66    0       57     1     0     1     1     0     8    0
pipepl     320      125    0       97     3     0     3     3     0     8    0
fdescpl    496      595    0      563     7     2     5     6     0     8    1
filepl     152     2972    0     2708    20     9    11    16     0     8    0
lockfpl    104       77    0       74     1     0     1     1     0     8    0
lockfspl    48       36    0       33     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       67    0       50     1     0     1     1     0     8    0
ucredpl    104      260    0      247     1     0     1     1     0     8    0
zombiepl   144      620    0      618     2     1     1     1     0     8    0
processpl  1160     634    0      563     6     0     6     6     0     8    0
procpl     648      970    0      889     9     1     8     8     0     8    0
srpgc       96        2    0        2     1     0     1     1     0     8    1
sosppl     168        1    0        1     1     0     1     1     0     8    1
sockpl     664      456    0      421     7     3     4     6     0     8    1
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     140    0        0    18     0    18    18     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96        6    0        0     1     0     1     1     0     8    0
mbufpl     256      152    0        0    10     0    10    10     0     8    0
bufpl      280     2478    0      101   170     0   170   170     0     8    0
anonpl      24   164459    0   161010    25     3    22    25     0   185    0
amapchunkpl 152   15054    0    14543    30     8    22    28     0   158    2
amappl16   200     4383    0     4361     5     3     2     5     0     8    0
amappl15   192        9    0        8     1     0     1     1     0     8    0
amappl14   184      117    0      105     1     0     1     1     0     8    0
amappl13   176       12    0       11     1     0     1     1     0     8    0
amappl12   168     1242    0     1210     4     1     3     3     0     8    0
amappl11   160       54    0       40     1     0     1     1     0     8    0
amappl10   152        4    0        4     1     1     0     1     0     8    0
amappl9    144      144    0      144     1     1     0     1     0     8    0
amappl8    136       23    0       21     1     0     1     1     0     8    0
amappl7    128      107    0       95     1     0     1     1     0     8    0
amappl6    120      163    0      162     1     0     1     1     0     8    0
amappl5    112      140    0      129     1     0     1     1     0     8    0
amappl4    104      311    0      293     1     0     1     1     0     8    0
amappl3     96     2698    0     2599     3     0     3     3     0     8    0
amappl2     88      866    0      782     3     0     3     3     0     8    0
amappl1     80     8304    0     7743    15     1    14    14     0     8    0
amappl      88     4177    0     3998     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       2    0        1     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        8    0        1     1     0     1     1     0     8    0
uaddrrnd    24      595    0      563     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      595    0      563     1     0     1     1     0     8    0
vmmpekpl   168     6549    0     6515     3     0     3     3     0     8    0
vmmpepl    168    45098    0    43207    90     7    83    90     0   357    0
vmsppl     448      594    0      563     6     2     4     5     0     8    0
rwobjpl     56    19202    0    16128    44     0    44    44     0     8    0
pdppl      4096    1197    0     1126   107    36    71    87     0     8    0
pvpl        32    10800    0        0    88     0    88    88     0   265    0
pmappl     248      594    0      563     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      394    0       47    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff834b9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 sys/kern/kern_lock.c:144
softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 sys/kern/kern_lock.c:144
syscall(ffff80002d57cf60) at syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
syscall(ffff80002d57cf60) at syscall+0xad6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2d16ee607c0, count: 6
ddb{0}> trace
x86_ipi_db(ffffffff834b9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 sys/kern/kern_lock.c:144
softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8363aef0) at __mp_lock+0x192 sys/kern/kern_lock.c:144
syscall(ffff80002d57cf60) at syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
syscall(ffff80002d57cf60) at syscall+0xad6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2d16ee607c0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f5419) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a98ec,ffffffff83007025,307,ffffffff8305f8d2) at __assert+0x29
splraise(deafbead) at splraise+0xbd sys/arch/amd64/amd64/intr.c:775
mtx_enter_try(ffff800001321608) at mtx_enter_try+0x97 sys/kern/kern_lock.c:266
mtx_enter(ffff800001321608) at mtx_enter+0x60 sys/kern/kern_lock.c:239
klist_mutex_lock(ffff800001321608) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000012b9b80) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff8000012b1800) at bpfdetach+0xa6
if_detach(ffff8000012b1800) at if_detach+0x14f sys/net/if.c:1193
tun_clone_destroy(ffff8000012b1800) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:346
if_clone_destroy(ffff800037271c70) at if_clone_destroy+0x1d7 sys/net/if.c:1382
ifioctl(ffff8000012947d8,80206979,ffff800037271c70,ffff8000371d82c8) at ifioctl+0x5c5
end trace frame: 0xffff800037271d70, count: 0
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff830f5419) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff830a98ec,ffffffff83007025,307,ffffffff8305f8d2) at __assert+0x29
splraise(deafbead) at splraise+0xbd sys/arch/amd64/amd64/intr.c:775
mtx_enter_try(ffff800001321608) at mtx_enter_try+0x97 sys/kern/kern_lock.c:266
mtx_enter(ffff800001321608) at mtx_enter+0x60 sys/kern/kern_lock.c:239
klist_mutex_lock(ffff800001321608) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000013216c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000012b9b80) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff8000012b1800) at bpfdetach+0xa6
if_detach(ffff8000012b1800) at if_detach+0x14f sys/net/if.c:1193
tun_clone_destroy(ffff8000012b1800) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:346
if_clone_destroy(ffff800037271c70) at if_clone_destroy+0x1d7 sys/net/if.c:1382
ifioctl(ffff8000012947d8,80206979,ffff800037271c70,ffff8000371d82c8) at ifioctl+0x5c5
sys_ioctl(ffff8000371d82c8,ffff800037271e50,ffff800037271da0) at sys_ioctl+0x67c
syscall(ffff800037271e50) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline]
syscall(ffff800037271e50) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x282839d9b30, count: -17

Crashes (122):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/11/18 05:23 openbsd 76f8947d47ed cfe3a04a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/18 02:04 openbsd 76f8947d47ed cfe3a04a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/17 14:01 openbsd c152b5bec633 cfe3a04a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/17 00:31 openbsd feb640d47767 cfe3a04a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/16 11:42 openbsd 39788106ad7f cfe3a04a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/15 15:29 openbsd 8b4580606d31 eeafb645 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/15 03:32 openbsd 04337d597320 f6ede3a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/14 17:49 openbsd e7951f0f6b15 77f3eeb7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/14 03:47 openbsd 22062e2afa72 a8c99394 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/13 23:55 openbsd 81e7fdf6c2d5 4dfba277 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/13 11:21 openbsd ecb88bd12f5e 62026c85 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/11 20:09 openbsd beeda68a3ac0 0c4b1325 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/10 23:18 openbsd ba619c7d8844 6b856513 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/10 07:12 openbsd 63b021bfd37d 6b856513 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/08 22:45 openbsd 12cba3bdc197 d40c056e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/08 21:03 openbsd 12cba3bdc197 d40c056e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/07 14:27 openbsd ab22dc52243a 47bec44c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/06 21:41 openbsd 786a9acf48ec 9a660e3a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/06 16:48 openbsd 786a9acf48ec 9a660e3a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/05 18:47 openbsd a3e644a6f1f2 da38b4c9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/05 15:16 openbsd a3e644a6f1f2 da38b4c9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/05 06:02 openbsd 534410f411eb 509da429 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/04 22:13 openbsd 8eda69bd84da 7bfecfb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/04 18:35 openbsd 8eda69bd84da 7bfecfb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/03 22:29 openbsd 05892b44c730 f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/03 12:25 openbsd ed51ee9f9dac f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/02 23:43 openbsd c2bab48d0d27 f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/02 21:17 openbsd c2bab48d0d27 f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/02 01:25 openbsd b6339710e217 f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/01 20:30 openbsd b6339710e217 f00eed24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/01 08:50 openbsd df04220d5c4b 96eb609f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/11/01 03:51 openbsd df04220d5c4b 96eb609f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/30 18:55 openbsd 8ed3f981dfa3 f3a00767 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/30 16:36 openbsd 8ed3f981dfa3 f3a00767 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/29 17:48 openbsd 2cbb9430dbc0 66aeb999 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/29 03:19 openbsd 33a257f813d9 66aeb999 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/28 15:36 openbsd e451d4134a6f 9efb3cc7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/28 07:28 openbsd 2fbfb15d9dc6 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/27 23:29 openbsd fe4601f2bbe4 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/27 21:46 openbsd fe4601f2bbe4 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/27 07:50 openbsd dda6e36997d1 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/27 03:50 openbsd dda6e36997d1 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/26 15:39 openbsd 31d6c6f28534 65e8686b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/10/25 17:19 openbsd 26b00f5955fb 2a61f980 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
2024/03/05 12:25 openbsd 20110d46fc7f 9ed46f64 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main assert "nlevel >= IPL_NONE" failed in intr.c
* Struck through repros no longer work on HEAD.