Re: panic: state is LOADED, usecount NUM, expected ACTIVE at genfs_lock:NUM

[syzbot <syzbot+84d85eb8ef20fe77a881%syzkaller.appspotmail.com@localhost>]

syzbot has found a reproducer for the following issue on:

HEAD commit:    6b3eeaf32cd3 systat(1): try to give this page a quick face..
git tree:       netbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=149c3e01c80000
kernel config:  https://syzkaller.appspot.com/x/.config?x=fab579639ba4bf0a
dashboard link: https://syzkaller.appspot.com/bug?extid=84d85eb8ef20fe77a881
compiler:       g++ (Debian 10.2.1-6) 10.2.1 20210110
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=15da09cdc80000

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/8fdc724c3ffb/disk-6b3eeaf3.raw.xz
netbsd.gdb: https://storage.googleapis.com/syzbot-assets/c553bb3604c6/netbsd-6b3eeaf3.gdb.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+84d85eb8ef20fe77a881%syzkaller.appspotmail.com@localhost

[  52.9465496] 	mode 020000, owner 0, group 0, size 0panic: state is LOADED, usecount 0, expected ACTIVE at genfs_lock:400

[  52.9465496] cpu1: Begin traceback...
[  52.9640657] vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
[  53.0140667] vnpanic() at netbsd:vnpanic+0xa9 sys/kern/vfs_vnode.c:298
[  53.0640638] _vstate_assert() at netbsd:_vstate_assert+0x3f6 sys/kern/vfs_vnode.c:779
[  53.1040658] genfs_lock() at netbsd:genfs_lock+0xbf sys/miscfs/genfs/genfs_vnops.c:401
[  53.1340640] VOP_LOCK() at netbsd:VOP_LOCK+0x1e0 sys/kern/vnode_if.c:1633
[  53.1640627] vn_lock() at netbsd:vn_lock+0x1cb sys/kern/vfs_vnops.c:1228
[  53.1940649] spec_open() at netbsd:spec_open+0x643 sys/miscfs/specfs/spec_vnops.c:935
[  53.2240637] layer_bypass() at netbsd:layer_bypass+0x376 sys/miscfs/genfs/layer_vnops.c:294
[  53.2640671] layer_open() at netbsd:layer_open+0xaf sys/miscfs/genfs/layer_vnops.c:517
[  53.2940636] VOP_OPEN() at netbsd:VOP_OPEN+0xf8 sys/kern/vnode_if.c:569
[  53.3240627] vn_open() at netbsd:vn_open+0x7ab sys/kern/vfs_vnops.c:325
[  53.3540646] do_open() at netbsd:do_open+0x235 sys/kern/vfs_syscalls.c:1752
[  53.3840642] do_sys_openat() at netbsd:do_sys_openat+0x160 sys/kern/vfs_syscalls.c:1835
[  53.4140633] sys_open() at netbsd:sys_open+0x9a sys/kern/vfs_syscalls.c:1856
[  53.4440645] sys___syscall() at netbsd:sys___syscall+0x10e sy_call sys/sys/syscallvar.h:65 [inline]
[  53.4440645] sys___syscall() at netbsd:sys___syscall+0x10e sys/kern/sys_syscall.c:90
[  53.4840633] syscall() at netbsd:syscall+0x25a sy_call sys/sys/syscallvar.h:65 [inline]
[  53.4840633] syscall() at netbsd:syscall+0x25a sy_invoke sys/sys/syscallvar.h:94 [inline]
[  53.4840633] syscall() at netbsd:syscall+0x25a sys/arch/x86/x86/syscall.c:138
[  53.4940626] --- syscall (number 5 via SYS_syscall) ---
[  53.5040616] netbsd:syscall+0x25a:
[  53.5040616] cpu1: End traceback...
[  53.5140628] fatal breakpoint trap in supervisor mode
[  53.5140628] trap type 1 code 0 rip 0xffffffff8023230d cs 0x8 rflags 0x286 cr2 0xc000002e70 ilevel 0 rsp 0xffffd2824872d230
[  53.5240593] curlwp 0xffffd28012a71040 pid 2280.2093 lowest kstack 0xffffd282487262c0
Stopped in pid 2280.2093 (syz-executor.4) at    netbsd:breakpoint+0x5:  leave
?
breakpoint() at netbsd:breakpoint+0x5
db_panic() at netbsd:db_panic+0x105 sys/ddb/db_panic.c:69
vpanic() at netbsd:vpanic+0x282 sys/kern/subr_prf.c:291
vnpanic() at netbsd:vnpanic+0xa9 sys/kern/vfs_vnode.c:298
_vstate_assert() at netbsd:_vstate_assert+0x3f6 sys/kern/vfs_vnode.c:779
genfs_lock() at netbsd:genfs_lock+0xbf sys/miscfs/genfs/genfs_vnops.c:401
VOP_LOCK() at netbsd:VOP_LOCK+0x1e0 sys/kern/vnode_if.c:1633
vn_lock() at netbsd:vn_lock+0x1cb sys/kern/vfs_vnops.c:1228
spec_open() at netbsd:spec_open+0x643 sys/miscfs/specfs/spec_vnops.c:935
layer_bypass() at netbsd:layer_bypass+0x376 sys/miscfs/genfs/layer_vnops.c:294
la

-- 
You received this message because you are subscribed to the Google Groups "syzkaller-netbsd-bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to syzkaller-netbsd-bugs+unsubscribe%googlegroups.com@localhost.
To view this discussion on the web visit https://groups.google.com/d/msgid/syzkaller-netbsd-bugs/0000000000005a99e805f81972bd%40google.com.