syzbot


panic: vop_generic_badop (2)

Status: upstream: reported on 2022/09/04 02:31
Reported-by: syzbot+58bdde9f7a1a407514a7@syzkaller.appspotmail.com
First crash: 452d, last: 31d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: vop_generic_badop 1 787d 787d 0/3 closed as invalid on 2021/12/23 06:09

Sample crash report:
panic: vop_genericp_abnaidoc:p 
 kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 685
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 12962  69446  32767        0x10          0    1  syz-executor.1
  11313   4130  32767        0x10          0    0  syz-executor.4
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff827ad7da) at panic+0x17b sys/kern/subr_prf.c:198
__assert(ffffffff828285c5,ffffffff827ea631,2ad,ffffffff827e16c2) at __assert+0x29 sys/kern/subr_prf.c:157
proc_trampoline_mi() at proc_trampoline_mi+0x221
end trace frame: 0x0, count: 11
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: vop_generic_badop
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 685
ddb{1}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff827ad7da) at panic+0x17b sys/kern/subr_prf.c:198
__assert(ffffffff828285c5,ffffffff827ea631,2ad,ffffffff827e16c2) at __assert+0x29 sys/kern/subr_prf.c:157
proc_trampoline_mi() at proc_trampoline_mi+0x221
end trace frame: 0x0, count: -4
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002128b3f0
rbx               0xffff800020d59ba7
rdx                                0
rcx               0xffff80002126b010
rax               0xffff800020d58ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x53df6b184336e01b
r11               0xfadc944553cded4d
r12               0xffff800020d599a8
r13                                0
r14               0xffffffff82bfb9a8    cpu_info_full_primary+0x29a8
r15                              0x1
rip               0xffffffff824bb20c    db_enter+0x1c
cs                               0x8
rflags                         0x246
rsp               0xffff80002128b3e0
ss                              0x10
db_enter+0x1c:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.1) tid=12962 pid=69446 tcnt=1 stat=onproc
    flags process=10<SUGID> proc=0
    runpri=86, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff8000246fa7f8,0xffffffff82c76ad0
    process=0xffff8000ffff8868 user=0xffff800021286000, vmspace=0xfffffd806bd1b3b8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*69446   12962  30746  32767  7        0x10                syz-executor.1
 54077   77278  26952  32767  2        0x10                syz-executor.7
 54077   90744  26952  32767  3   0x4000090  fsleep        syz-executor.7
 64719  130382  95809  32767  3        0x90  nanoslp       syz-executor.5
 64719  417504  95809  32767  2   0x4000010                syz-executor.5
 98361  196852  79456  32767  3        0x90  nanoslp       syz-executor.3
 98361  521018  79456  32767  3   0x4000090  netio         syz-executor.3
 98361  169457  79456  32767  3   0x4000090  fsleep        syz-executor.3
 79456  141704   2713  32767  3        0x90  nanoslp       syz-executor.3
  2713  250157  18750      0  3        0x82  wait          syz-executor.3
  4130   11313  99494  32767  7        0x10                syz-executor.4
 99494  227210  18750      0  3        0x82  wait          syz-executor.4
 62322  101240  37104  32767  2        0x10                syz-executor.2
 37104  172298  18750      0  3        0x82  wait          syz-executor.2
 30746  192141  48659  32767  3        0x90  nanoslp       syz-executor.1
 53285  272599  92162  32767  2        0x10                syz-executor.0
 92162  313648  18750      0  3        0x82  wait          syz-executor.0
 48659  178284  18750      0  3        0x82  wait          syz-executor.1
 61681  484196  76183  32767  3        0x90  nanoslp       syz-executor.6
 76183  140640  18750      0  3        0x82  wait          syz-executor.6
 95809  175417  31499  32767  3        0x90  nanoslp       syz-executor.5
 31499  344939  18750      0  3        0x82  wait          syz-executor.5
 26952  453396   8664  32767  3        0x90  nanoslp       syz-executor.7
  8664  328726  18750      0  3        0x82  wait          syz-executor.7
 75942  148973      0      0  3     0x14200  bored         sosplice
 18750  434715  54712      0  3   0x2000082  wait          syz-fuzzer
 18750  294192  54712      0  3   0x6000082  nanoslp       syz-fuzzer
 18750  257131  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750  429666  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750   97846  54712      0  3   0x6000082  wait          syz-fuzzer
 18750  155519  54712      0  3   0x6000082  wait          syz-fuzzer
 18750   93291  54712      0  3   0x6000082  kqread        syz-fuzzer
 18750  371198  54712      0  3   0x6000082  wait          syz-fuzzer
 18750  290102  54712      0  3   0x6000082  wait          syz-fuzzer
 18750  437291  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750  358110  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750   22409  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750  395893  54712      0  3   0x6000082  thrsleep      syz-fuzzer
 18750  419389  54712      0  3   0x6000082  wait          syz-fuzzer
 18750  114923  54712      0  3   0x6000082  wait          syz-fuzzer
 18750   73937  54712      0  3   0x6000082  wait          syz-fuzzer
 54712  325617   2055      0  3    0x10008a  sigsusp       ksh
  2055  109074  41200      0  3        0x9a  kqread        sshd
 67496  241263      1      0  3    0x100083  ttyin         getty
 41200  179866      1      0  3        0x88  kqread        sshd
 92840  129202  41157     73  3   0x1100090  kqread        syslogd
 41157  167869      1      0  3    0x100082  netio         syslogd
  8395  384818      1      0  3    0x100080  kqread        resolvd
 96504  476223  47768     77  3    0x100092  kqread        dhcpleased
 65103   67758  47768     77  3    0x100092  kqread        dhcpleased
 47768  374798      1      0  3        0x80  kqread        dhcpleased
 10802  275467      0      0  3     0x14200  bored         smr
 63581  129622      0      0  2     0x14200                zerothread
 22826  202710      0      0  3     0x14200  aiodoned      aiodoned
 91934  232232      0      0  3     0x14200  syncer        update
 53651   63433      0      0  3     0x14200  cleaner       cleaner
 99652  318274      0      0  3     0x14200  reaper        reaper
 32852  411056      0      0  3     0x14200  pgdaemon      pagedaemon
 79662  281065      0      0  3     0x14200  bored         viomb
 36823  182185      0      0  3  0x40014200  acpi0         acpi0
 98601  227550      0      0  3  0x40014200                idle1
 69726  390007      0      0  3     0x14200  bored         softnet3
 12150  462124      0      0  3     0x14200  bored         softnet2
 37495  399797      0      0  3     0x14200  bored         softnet1
 81290  359756      0      0  3     0x14200  bored         softnet0
  7571  377411      0      0  3     0x14200  bored         systqmp
 53589   47639      0      0  3     0x14200  bored         systq
 94204  276501      0      0  3     0x14200  tmoslp        softclockmp
 58883  158188      0      0  3  0x40014200  tmoslp        softclock
 33921   22616      0      0  3  0x40014200                idle0
     1   40511      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 64719 (syz-executor.5) thread 0xffff8000211eb2b0 (417504)
shared rwlock vmmaplk r = 0 (0xfffffd806bd1bbf0)
#0  witness_lock+0x447
#1  uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1785
#2  uvm_fault_check+0x3e sys/uvm/uvm_fault.c:672
#3  uvm_fault+0xf2 sys/uvm/uvm_fault.c:600
#4  kpageflttrap+0x252 sys/arch/amd64/amd64/trap.c:279
#5  kerntrap+0xf3 sys/arch/amd64/amd64/trap.c:332
#6  alltraps_kern_meltdown+0x7b
#7  copyout+0x57
#8  syscall+0x606 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#8  syscall+0x606 sys/arch/amd64/amd64/trap.c:623
#9  Xsyscall+0x128
Process 4130 (syz-executor.4) thread 0xffff80002957a558 (11313)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82c76098)
#0  witness_lock+0x447
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x46d sys/kern/sched_bsd.c:470
#3  sleep_finish+0x19b sys/kern/kern_synch.c:414
#4  biowait+0x91 sys/kern/vfs_bio.c:1278
#5  bwrite+0x21c sys/kern/vfs_bio.c:769
#6  ffs_update+0x281 sys/ufs/ffs/ffs_inode.c:113
#7  ufs_mkdir+0x672 sys/ufs/ufs/ufs_vnops.c:1219
#8  VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
#9  domkdirat+0x125 sys/kern/vfs_syscalls.c:3073
#10 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#10 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8066db95f0)
#0  witness_lock+0x447
#1  rw_enter+0x3c8 sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vget+0x200 sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1314
#8  ffs_inode_alloc+0x1c2 sys/ufs/ffs/ffs_alloc.c:394
#9  ufs_mkdir+0xf8 sys/ufs/ufs/ufs_vnops.c:1149
#10 VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
#11 domkdirat+0x125 sys/kern/vfs_syscalls.c:3073
#12 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#12 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
#13 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8066db9b40)
#0  witness_lock+0x447
#1  rw_enter+0x3c8 sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd5 sys/kern/vfs_lookup.c:418
#6  namei+0x55a sys/kern/vfs_lookup.c:250
#7  domkdirat+0x79 sys/kern/vfs_syscalls.c:3058
#8  syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#8  syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
#9  Xsyscall+0x128
Process 62322 (syz-executor.2) thread 0xffff8000211eb800 (101240)
exclusive rrwlock inode r = 0 (0xfffffd8066db92c0)
#0  witness_lock+0x447
#1  rw_enter+0x3c8 sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vn_closefile+0xca vn_close sys/kern/vfs_vnops.c:292 [inline]
#5  vn_closefile+0xca sys/kern/vfs_vnops.c:609
#6  fdrop+0xcb sys/kern/kern_descrip.c:1274
#7  closef+0x120 sys/kern/kern_descrip.c:1258
#8  syscall+0x606 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#8  syscall+0x606 sys/arch/amd64/amd64/trap.c:623
#9  Xsyscall+0x128
Process 53285 (syz-executor.0) thread 0xffff80002957b2a0 (272599)
exclusive rrwlock inode r = 0 (0xfffffd8065ab9f80)
#0  witness_lock+0x447
#1  rw_enter+0x3c8 sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  ufs_ihashins+0x46 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1343
#6  ffs_inode_alloc+0x1c2 sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf8 sys/ufs/ufs/ufs_vnops.c:1149
#8  VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
#9  domkdirat+0x125 sys/kern/vfs_syscalls.c:3073
#10 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#10 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8065ab95f0)
#0  witness_lock+0x447
#1  rw_enter+0x3c8 sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd5 sys/kern/vfs_lookup.c:418
#6  namei+0x55a sys/kern/vfs_lookup.c:250
#7  domkdirat+0x79 sys/kern/vfs_syscalls.c:3058
#8  syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
#8  syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10191   6409K    6420K  78643K     11413        0
            pcb    13     16K      20K  78643K        19        0
         rtable   244      6K       7K  78643K      2705        0
             pf    29      8K       8K  78643K       125        0
         ifaddr    44     15K      16K  78643K       242        0
        ifgroup    50      2K       2K  78643K       242        0
         sysctl     4      1K       1K  78643K         4        0
       counters    60     35K      35K  78643K       156        0
       ioctlops     0      0K       2K  78643K       267        0
            iov     0      0K      24K  78643K      1944        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1279     80K      80K  78643K      3895        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K       251        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      0K       1K  78643K      1308        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    22     81K     121K  78643K     18260        0
          sigio     0      0K       0K  78643K       547        0
           proc    56     78K     115K  78643K      2531        0
        subproc   104      6K       6K  78643K       728        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K      1112        0
       in_multi    99      7K       7K  78643K       766        0
    ether_multi     1      0K       0K  78643K        28        0
            mrt     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    85    387K     387K  78643K        85        0
           exec     0      0K       1K  78643K      2458        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      64K  78643K        10        0
       UVM amap   438     94K     109K  78643K    179887        0
       UVM aobj   131      6K       6K  78643K       148        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       607        0
            NDP    11      0K       2K  78643K       171        0
           temp    74   5920K    6048K  78643K     48892        0
         kqueue    13     20K      30K  78643K      1645        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120     1098    0     1095    13    12     1     3     0     8    0
rtentry    112      680    0      565     4     0     4     4     0     8    0
unpcb      144    13300    0    13285   130   124     6     8     0     8    5
syncache   304      265    0      265    33    32     1     1     0     8    1
tcpqe       32      312    0      312    27    27     0     1     0     8    0
tcpcb      808    28035    0    27999   263   249    14    20     0     8    6
arp        120      119    0      100     1     0     1     1     0     8    0
ipq         40      125    0      125    12    12     0     1     0     8    0
ipqe        40      479    0      479    12    12     0     1     0     8    0
inpcb      368    35729    0    35687   238   225    13    19     0     8    5
nd6        136      204    0      176     5     3     2     2     0     8    0
kcovpl      48       56    0       48     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2692    0     2226    36     6    30    31     0     8    0
art_table   32     2693    0     2226     4     0     4     4     0     8    0
art_node    16      679    0      574     1     0     1     1     0     8    0
sysvmsgpl   40       43    0        3     1     0     1     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112     1304    0     1294     1     0     1     1     0     8    0
shmpl      112      145    0       17     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    23516    0    22064    92     0    92    92     0     8    0
ffsino     272    23516    0    22064    98     0    98    98     0     8    0
nchpl      144    47627    0    45986    63     0    63    63     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024  148228    0   148226     3     2     1     2     0     8    0
percpumem   16       91    0       48     1     0     1     1     0     8    0
kstatmem   264      118    0       96     2     0     2     2     0     8    0
scxspl     216   156444    0   156444    67    64     3     8     1     8    3
plimitpl   152     3190    0     3166    23    22     1     2     0     8    0
sigapl     424    18462    0    18409     7     0     7     7     0     8    0
futexpl     64   181352    0   181350     2     1     1     1     0     8    0
knotepl    120     1135    0        0    18     0    18    18     0     8    0
kqueuepl   216     4300    0     4291    67    64     3     5     0     8    2
pipepl     320     4013    0     3985   102    96     6     9     0     8    3
fdescpl    496    18443    0    18410     7     2     5     6     0     8    0
filepl     152   131693    0   131451   211   196    15    20     0     8    2
lockfpl    104     2760    0     2758     3     2     1     2     0     8    0
lockfspl    48      776    0      774     1     0     1     1     0     8    0
sessionpl  144       71    0       55     1     0     1     1     0     8    0
pgrppl      48      357    0      341     1     0     1     1     0     8    0
ucredpl    104    12504    0    12486     1     0     1     1     0     8    0
zombiepl   144    18410    0    18409     1     0     1     1     0     8    0
processpl  1072   18462    0    18409     5     1     4     5     0     8    0
procpl     680    50884    0    50812    32    24     8     9     0     8    1
sosppl     168      334    0      331    17    16     1     1     0     8    0
sockpl     488    50896    0    50839   698   674    24    38     0     8   12
mcl64k     65536     42    0        0     4     1     3     3     0     8    0
mcl16k     16384     19    0        0     3     0     3     3     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216      17    0        0     2     0     2     2     0     8    0
mcl8k      8192      25    0        0     3     0     3     3     0     8    0
mcl4k      4096     133    0        0     8     4     4     8     0     8    0
mcl2k2     2112      17    0        0     2     0     2     2     0     8    0
mcl2k      2048     470    0        0    32    17    15    32     0     8    0
mtagpl      96       15    0        0     1     0     1     1     0     8    0
mbufpl     256     3654    0        0   208     0   208   208     0     8    0
bufpl      288    35442    0    29120   452     0   452   452     0     8    0
anonpl      24  1809848    0  1798815   232   143    89   100     0   186    0
amapchunkpl 152  568337    0   567529   157   113    44    48     0   158    7
amappl16   200    37595    0    37263   201   182    19    34     0     8    0
amappl15   192       33    0       31     1     0     1     1     0     8    0
amappl14   184      288    0      277     2     1     1     2     0     8    0
amappl13   176       23    0       22     2     1     1     1     0     8    0
amappl12   168    19901    0    19861     3     1     2     3     0     8    0
amappl11   160       54    0       44     1     0     1     1     0     8    0
amappl10   152       82    0       70     1     0     1     1     0     8    0
amappl9    144      306    0      306    30    29     1     1     0     8    1
amappl8    136     1006    0      814     7     0     7     7     0     8    0
amappl7    128      359    0      333     2     0     2     2     0     8    0
amappl6    120     1132    0     1111     1     0     1     1     0     8    0
amappl5    112      482    0      474     1     0     1     1     0     8    0
amappl4    104     1050    0     1021     2     1     1     2     0     8    0
amappl3     96   111306    0   111219    16    12     4     4     0     8    1
amappl2     88    19736    0    19654     3     1     2     3     0     8    0
amappl1     80    75137    0    74616    22    10    12    22     0     8    0
amappl      88   178443    0   178205     8     1     7     7     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      147    0       17     3     0     3     3     0     8    0
uaddrrnd    24    18443    0    18410     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    18443    0    18410     1     0     1     1     0     8    0
vmmpekpl   168   141423    0   141360     4     0     4     4     0     8    0
vmmpepl    168  1088786    0  1086350   326   193   133   158     0   357   10
vmsppl     464    18442    0    18410     7     2     5     6     0     8    0
rwobjpl     56   269150    0   261631   133    25   108   111     0     8    0
pdppl      4096   36894    0    36820   706   624    82    94     0     8    8
pvpl        32  5313944    0  5296720   535   370   165   340     0   265    0
pmappl     248    18442    0    18410     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     2185    0     1154    30     0    30    30     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffffffff82bfaff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
softintr_dispatch(0) at softintr_dispatch+0x52 sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
cnputc(a) at cnputc+0x4f sys/dev/cons.c:218
db_putchar(a) at db_putchar+0x4bd sys/ddb/db_output.c:168
kprintf() at kprintf+0x6bc sys/kern/subr_prf.c:724
db_printf(ffffffff8282fd50) at db_printf+0x89 sys/kern/subr_prf.c:498
panic(ffffffff8279ceb1) at panic+0xdb sys/kern/subr_prf.c:216
vop_generic_badop(ffff800027b657d8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8066486b20,fffffd80664b3da8) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd80664b3da8) at bwrite+0x1f1 sys/kern/vfs_bio.c:760
end trace frame: 0xffff800027b658c0, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff82bfaff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
softintr_dispatch(0) at softintr_dispatch+0x52 sys/arch/amd64/amd64/softintr.c:88
Xsoftclock() at Xsoftclock+0x27
cnputc(a) at cnputc+0x4f sys/dev/cons.c:218
db_putchar(a) at db_putchar+0x4bd sys/ddb/db_output.c:168
kprintf() at kprintf+0x6bc sys/kern/subr_prf.c:724
db_printf(ffffffff8282fd50) at db_printf+0x89 sys/kern/subr_prf.c:498
panic(ffffffff8279ceb1) at panic+0xdb sys/kern/subr_prf.c:216
vop_generic_badop(ffff800027b657d8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8066486b20,fffffd80664b3da8) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd80664b3da8) at bwrite+0x1f1 sys/kern/vfs_bio.c:760
VOP_BWRITE(fffffd80664b3da8) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
ufs_mkdir(ffff800027b65a70) at ufs_mkdir+0x6c4 sys/ufs/ufs/ufs_vnops.c:1235
VOP_MKDIR(fffffd80674c8058,ffff800027b65bd0,ffff800027b65c00,ffff800027b65b00) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
domkdirat(ffff80002957a558,ffffff9c,7a6a1168aa50,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3073
syscall(ffff800027b65d80) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline]
syscall(ffff800027b65d80) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7a6a1168aac0, count: -20
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff827ad7da) at panic+0x17b sys/kern/subr_prf.c:198
__assert(ffffffff828285c5,ffffffff827ea631,2ad,ffffffff827e16c2) at __assert+0x29 sys/kern/subr_prf.c:157
proc_trampoline_mi() at proc_trampoline_mi+0x221
end trace frame: 0x0, count: 11
ddb{1}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff827ad7da) at panic+0x17b sys/kern/subr_prf.c:198
__assert(ffffffff828285c5,ffffffff827ea631,2ad,ffffffff827e16c2) at __assert+0x29 sys/kern/subr_prf.c:157
proc_trampoline_mi() at proc_trampoline_mi+0x221
end trace frame: 0x0, count: -4

Crashes (62):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/29 11:07 openbsd 045a1e803f20 3c418d72 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/10/29 04:12 openbsd 045a1e803f20 3c418d72 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/10/13 12:58 openbsd 383b68ad89d9 6388bc36 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/10/06 14:22 openbsd 67babe865022 db17ad9f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/09/26 06:50 openbsd 71ab85de86c9 0b6a67ac .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/08/31 10:35 openbsd 5f81913576e1 84803932 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/08/23 10:59 openbsd 5b707e820d80 b81ca3f6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/08/15 16:09 openbsd a3e56974213b 39990d51 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/08/11 04:38 openbsd 73e6a6f7f5e3 da3c3ef8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/08/10 19:52 openbsd 05958c5ea967 da3c3ef8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/07/17 05:43 openbsd bd027751b05c 35d9ecc5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/07/10 21:12 openbsd 33d8540c847c d47e94ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/07/09 05:12 openbsd ea5a4cace30c 668cb1fa .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/06/25 07:07 openbsd 9c8757ead552 79782afc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/22 13:02 openbsd abe762909b63 79782afc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/22 03:16 openbsd e46ff49b6d65 79782afc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/21 12:30 openbsd 71d823ace252 79782afc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/20 00:51 openbsd 74fea31cfbad 09ffe269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/15 06:36 openbsd 0bf6b7531085 76decb82 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/13 23:23 openbsd a7d38a062623 2f9d8e43 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/11 15:06 openbsd 013f1076211b 49519f06 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/08 18:27 openbsd 5ce1ee8cb58d 058b3a5a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/06/07 05:00 openbsd 09afe4dcdfb2 a4ae4f42 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/06/05 20:48 openbsd 01f59d7875f2 a4ae4f42 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/05/30 05:29 openbsd 9f395b46183b cf184559 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/05/20 17:28 openbsd 6a9ebb2fe80a 4bce1a3e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/05/19 20:57 openbsd 3e926074bca6 e0257275 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/05/18 18:28 openbsd a0a5c4c7ecb0 3bb7af1d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/05/15 03:21 openbsd 0c8b129cc52e 2b9ba477 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/05/09 03:32 openbsd 003cfddf8c84 33db58a6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/05/07 11:02 openbsd 3feb172447ac 90c93c40 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/04/28 15:01 openbsd dfcebad6cfee 75cd8989 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/04/12 17:47 openbsd 1e5b016c5082 1a1596b6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/04/10 02:12 openbsd 1e5b016c5082 71147e29 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/04/08 06:16 openbsd 1e5b016c5082 71147e29 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/04/04 01:31 openbsd 1e5b016c5082 7db618d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/04/03 15:00 openbsd 1e5b016c5082 41147e3e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/04/02 19:59 openbsd 1e5b016c5082 f325deb0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/03/31 20:43 openbsd 1e5b016c5082 f325deb0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/03/31 17:15 openbsd 1e5b016c5082 f325deb0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/03/25 14:59 openbsd 1e5b016c5082 fbf0499a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/03/22 13:25 openbsd 1e5b016c5082 d846e076 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/03/08 11:57 openbsd 1e5b016c5082 4fc6d98d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/02/28 04:32 openbsd 1e5b016c5082 95aee97a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/02/23 07:58 openbsd 1e5b016c5082 9e2ebb3c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/02/16 20:56 openbsd 1e5b016c5082 7338e3c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/02/06 17:35 openbsd 6c1aad9dfe4c 0a9c11b6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/01/16 20:05 openbsd 89096d950af6 a63719e7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2023/01/12 08:51 openbsd 6155d736d02e 96166539 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2023/01/10 20:35 openbsd 86a45bbd35a5 48bc529a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/12/30 10:12 openbsd 4b28d16fd8eb 44712fbc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/12/27 13:26 openbsd b71341ac0994 44712fbc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/12/19 13:23 openbsd 5e2e1673d03b 05494336 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/12/17 10:41 openbsd 5e544b4ec6c7 05494336 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/10/28 06:10 openbsd 5cc83d08f96f 5c716ff6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: vop_generic_badop
2022/10/20 22:13 openbsd d5241874c244 a0fd4dab .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/10/05 03:46 openbsd 0b11e45035f5 267e3bb1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/10/01 12:14 openbsd 7cc6a6639df7 feb56351 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/09/19 20:42 openbsd 00f5031a633c dd9a85ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/09/16 09:09 openbsd 1627b89b0a3e dd9a85ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: vop_generic_badop
2022/09/07 04:35 openbsd 0d9be21fa6ac 5fc30c37 .config console log report ci-openbsd-multicore panic: vop_generic_badop
2022/09/04 02:30 openbsd ffacad8a9284 28811d0a .config console log report ci-openbsd-setuid panic: vop_generic_badop
* Struck through repros no longer work on HEAD.