syzbot


witness: thread exiting with locks held (3)

Status: fixed on 2025/06/07 10:16
Reported-by: syzbot+054f43016b494604339c@syzkaller.appspotmail.com
Fix commit: d8a43137eb27 Add forgotten NET_UNLOCK_SHARED() in FILLINPTABLE().
First crash: 19d, last: 18d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: thread exiting with locks held syz 679 2129d 2339d 0/3 closed as dup on 2019/02/21 21:47
openbsd witness: thread exiting with locks held (2) 2 1088d 1089d 0/3 closed as dup on 2022/07/02 06:37

Sample crash report:
witness: thread 0xffff80002efce7e8 exiting with the following locks held:
shared rwlock netlock r = 0 (0xffffffff837f6530)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x36e sys/kern/kern_rwlock.c:397
#2  sysctl_file+0xb13 sys/kern/kern_sysctl.c:1767
#3  kern_sysctl+0x167 sys/kern/kern_sysctl.c:526
#4  sys_sysctl+0x3f2 sys/kern/kern_sysctl.c:-1
#5  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#6  Xsyscall+0x128
panic: thread 0xffff80002efce7e8 cannot exit while holding sleeplocks
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 353764   4794      0           0  0x4000000    0K syz-executor
* 66923  48027      0     0x14000      0x200    1  reaper
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8335036a) at panic+0x1e5 sys/kern/subr_prf.c:198
witness_thread_exit(ffff80002efce7e8) at witness_thread_exit+0x426 sys/kern/subr_witness.c:1408
reaper(ffff8000ffffd1f8) at reaper+0x1ba sys/kern/kern_exit.c:492
end trace frame: 0x0, count: 11
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: thread 0xffff80002efce7e8 cannot exit while holding sleeplocks
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8335036a) at panic+0x1e5 sys/kern/subr_prf.c:198
witness_thread_exit(ffff80002efce7e8) at witness_thread_exit+0x426 sys/kern/subr_witness.c:1408
reaper(ffff8000ffffd1f8) at reaper+0x1ba sys/kern/kern_exit.c:492
end trace frame: 0x0, count: -4
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a2403d0
rbx               0xffff8000299dedd7
rdx                                0
rcx               0xffff8000ffffd1f8
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x694d3b0ecb898d5b
r11               0x1808db8d50252a2e
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff810e70e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a2403c0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (reaper) tid=66923 pid=48027 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=4, usrpri=52, slppri=4, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffd488,0xffff8000ffffcce8
    process=0xffff8000ffff7550 user=0xffff80002a23b000, vmspace=0xffffffff839706a0
    estcpu=2, cpticks=5, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
  4783  320228  85398      0  2           0                syz-executor
  4794  461416  10782      0  2           0                syz-executor
  4794  353764  10782      0  7   0x4000000                syz-executor
 82913  433806  56444      0  3      0x3000  suspend       syz-executor
 82913  124508  56444      0  2   0x4081000                syz-executor
 48358   13523    298      0  3      0x3010  suspend       syz-executor
 48358  157253    298      0  2   0x4081010                syz-executor
 48358   36006    298      0  2   0x4081010                syz-executor
 36559  188567  68128      0  2           0                syz-executor
 36559  163596  68128      0  3   0x4000080  fsleep        syz-executor
 36559   30042  68128      0  3   0x4000080  fsleep        syz-executor
 36559  209162  68128      0  3   0x4000080  fsleep        syz-executor
 36559  481923  68128      0  3   0x4000080  fsleep        syz-executor
 59886  507656      0      0  3     0x14200  acct          acct
  7358  338090      1      0  3    0x100083  ttyopn        getty
 53333  516456      0      0  3     0x14280  nfsidl        nfsio
 85344  202268      0      0  3     0x14280  nfsidl        nfsio
 46278  188935      0      0  3     0x14280  nfsidl        nfsio
 61124  408572      0      0  3     0x14280  nfsidl        nfsio
 33461  403408      0      0  3     0x14280  nfsidl        nfsio
 61791  507033      0      0  3     0x14280  nfsidl        nfsio
 95892  165570      0      0  3     0x14280  nfsidl        nfsio
  9101  175542      0      0  3     0x14280  nfsidl        nfsio
 58051  462181      0      0  3     0x14280  nfsidl        nfsio
 99856   87749      0      0  3     0x14280  nfsidl        nfsio
 58221   32194      0      0  3     0x14280  nfsidl        nfsio
 74912  112635      0      0  3     0x14280  nfsidl        nfsio
 16338  119993      0      0  3     0x14280  nfsidl        nfsio
 21783  281188      0      0  3     0x14280  nfsidl        nfsio
 32774   93838      0      0  3     0x14280  nfsidl        nfsio
 13355   17668      0      0  3     0x14280  nfsidl        nfsio
 91581   52581      0      0  3     0x14280  nfsidl        nfsio
 66022  306090      0      0  3     0x14280  nfsidl        nfsio
 39989   68773      0      0  3     0x14280  nfsidl        nfsio
  4404  448102      0      0  3     0x14280  nfsidl        nfsio
 72270  299195      0      0  3     0x14200  bored         sosplice
 68128  130628  62166      0  2       0xc82                syz-executor
 98510  247285  62166      0  2       0xc82                syz-executor
 85398  172676  62166      0  2       0xc82                syz-executor
   298  494971  62166      0  2       0xc82                syz-executor
 56444  249964  62166      0  2       0xc82                syz-executor
 29153  135403  62166      0  2         0x2                syz-executor
 10782  449681  62166      0  2       0xc82                syz-executor
 55195  388514  62166      0  2       0xc82                syz-executor
 62166   58033  76616      0  2         0x2                syz-executor
 76616   38025  38964      0  3    0x10008a  sigsusp       ksh
 38964  519282  56016      0  3        0x98  kqread        sshd-session
 56016  156870  83067      0  3        0x92  kqread        sshd-session
 83067  467218      1      0  3        0x88  kqread        sshd
 33701  372970  34350     74  3   0x1100092  bpf           pflogd
 34350   42383      1      0  3        0x80  sbwait        pflogd
 56458  501362   6424     73  2   0x1100090                syslogd
  6424  318990      1      0  3    0x100082  sbwait        syslogd
 88902  439387      1      0  3    0x100080  kqread        resolvd
 40057  511061  31241     77  3    0x100092  kqread        dhcpleased
  5540   95158  31241     77  3    0x100092  kqread        dhcpleased
 31241  453250      1      0  3        0x80  kqread        dhcpleased
 74235  275865      0      0  3     0x14200  bored         smr
 37621   90006      0      0  3     0x14200  pgzero        zerothread
 49519  429239      0      0  3     0x14200  aiodoned      aiodoned
 73925  396110      0      0  3     0x14200  syncer        update
 22388  463484      0      0  3     0x14200  cleaner       cleaner
*48027   66923      0      0  7     0x14200                reaper
 24972  279841      0      0  3     0x14200  pgdaemon      pagedaemon
 51095  226637      0      0  3     0x14200  bored         viomb
 64079    6784      0      0  3  0x40014200  acpi0         acpi0
 26518  363027      0      0  3  0x40014200                idle1
  5409  406748      0      0  3     0x14200  bored         softnet3
  6288  141383      0      0  3     0x14200  bored         softnet2
 98783  219673      0      0  3     0x14200  bored         softnet1
 36255  203834      0      0  2     0x14200                softnet0
 40611  301328      0      0  3     0x14200  bored         systqmp
 63683  103814      0      0  3     0x14200  bored         systq
 20952  215039      0      0  2     0x14200                softclockmp
 31345  286369      0      0  3  0x40014200  netlock       softclock
  7560  120319      0      0  3  0x40014200                idle0
     1  142363      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 4794 (syz-executor) thread 0xffff80002efd79d0 (353764)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839201a8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  doopenat+0x314 sys/kern/vfs_syscalls.c:1137
#2  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#2  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#3  Xsyscall+0x128
Process 29153 (syz-executor) thread 0xffff80002a2739c0 (135403)
exclusive rrwlock inode r = 0 (0xfffffd806ab1ebe0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vget+0x2bd sys/kern/vfs_subr.c:693
#6  ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1201
#8  ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#11 namei+0x7aa sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#13 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806ab1e2e0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vget+0x2bd sys/kern/vfs_subr.c:693
#6  cache_lookup+0x36e sys/kern/vfs_cache.c:222
#7  ufs_lookup+0x21b sys/ufs/ufs/ufs_lookup.c:160
#8  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#10 namei+0x7aa sys/kern/vfs_lookup.c:250
#11 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#12 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
#13 Xsyscall+0x128
Process 36255 (softnet0) thread 0xffff8000ffffecd0 (203834)
shared rwlock softnet0 r = 0 (0xffff80000002c078)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
Process 20952 (softclockmp) thread 0xffff8000ffffe520 (215039)
shared rwlock timeout r = 0 (0xffffffff837df708)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  timeout_run+0x115 sys/kern/kern_timeout.c:690
#2  softclock_thread_run+0xec sys/kern/kern_timeout.c:838
#3  softclock_thread_mp+0x8f sys/kern/kern_timeout.c:873
#4  proc_trampoline+0x10
Process 31345 (softclock) thread 0xffff8000ffffe7b0 (286369)
shared rwlock timeout r = 0 (0xffffffff837df708)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  timeout_run+0x115 sys/kern/kern_timeout.c:690
#2  softclock_thread_run+0xec sys/kern/kern_timeout.c:838
#3  softclock_thread+0x10a sys/kern/kern_timeout.c:854
#4  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10233  11050K   12022K 166960K     14175        0
            pcb    18     16K      18K 166960K       330        0
         rtable   261     10K      11K 166960K       521        0
             pf    38     18K      20K 166960K       142        0
         ifaddr    47      8K       9K 166960K       102        0
        ifgroup    60      2K       3K 166960K       184        0
         sysctl     3      1K       9K 166960K         9        0
       counters    70     37K      37K 166960K       184        0
       ioctlops     0      0K       4K 166960K      1769        0
            iov     0      0K      16K 166960K        49        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1591    100K     100K 166960K      3097        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        17        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K        48        0
        dirhash    12      2K       2K 166960K        30        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      85K 166960K      1301        0
          sigio     0      0K       0K 166960K        23        0
           proc    73     91K     115K 166960K       665        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       219        0
       in_multi   105      7K       7K 166960K       161        0
    ether_multi     1      0K       0K 166960K        10        0
            mrt     2      0K       0K 166960K         6        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   247   1102K    1102K 166960K       247        0
           exec     0      0K       1K 166960K       515        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   255    152K     174K 166960K     13788        0
       UVM aobj    23      2K       2K 166960K        25        0
     pinsyscall    42     84K     101K 166960K      2415        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        54        0
            NDP    13      0K       1K 166960K        66        0
           temp    81   8696K    8810K 166960K     37796        0
         kqueue    13     20K      28K 166960K       227        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      140    0      137     2     1     1     2     0     8    0
rtentry    176      160    0       44     6     0     6     6     0     8    0
unpcb      144     1717    0     1691     7     6     1     4     0     8    0
syncache   336        6    0        6     2     2     0     1     0     8    0
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      808      523    0      515    16    11     5     8     0     8    3
arp        128       23    0        3     1     0     1     1     0     8    0
inpcb      328     1563    0     1552    18    13     5     7     0     8    3
nd6        144       42    0        7     2     0     2     2     0     8    0
pkpcb       40        7    0        7     2     2     0     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192      38    0       38     1     1     0     1     0     8    0
pppxif     1504      10    0       10     2     2     0     1     0     8    0
pffrag     232       10    0        3     1     0     1     1     0   482    0
pffrnode    88       10    0        3     1     0     1     1     0     8    0
pffrent     40       22    0       14     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       98    0       31     1     0     1     1     0     8    0
pfstkey    128       98    0       31     3     0     3     3     0     8    0
pfstate    384       98    0       31     7     0     7     7     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      747    0      187    36     1    35    35     0     8    0
art_table   32      750    0      187     5     0     5     5     0     8    0
art_node    16      155    0       52     1     0     1     1     0     8    0
sysvmsgpl   40       18    0       10     1     0     1     1     0     8    0
semupl     112        2    0        2     2     2     0     1     0     8    0
semapl     112       46    0       36     1     0     1     1     0     8    0
shmpl      112       22    0        2     1     0     1     1     0     8    0
dirhash    1024      29    0       12     3     0     3     3     0     8    0
dino2pl    256     3857    0     2348    95     0    95    95     0     8    0
ffsino     288     3857    0     2348   109     0   109   109     0     8    0
nchpl      144     5741    0     4046    65     1    64    64     0     8    0
rtmask      32        6    0        6     2     2     0     1     0     8    0
uvmvnodes   80     5125    0        0   105     0   105   105     0     8    0
vnodes     216     5125    0        0   285     0   285   285     0     8    0
namei      1024   20749    0    20749     2     1     1     1     0     8    1
percpumem   16      107    0       57     1     0     1     1     0     8    0
kstatmem   264       98    0       70     5     3     2     3     0     8    0
scsiplug    72        1    0        1     1     1     0     1     0     8    0
scxspl     216    20861    0    20861    12    11     1     8     1     8    1
plimitpl   152      226    0      208     1     0     1     1     0     8    0
sigapl     424     1631    0     1560    11     2     9     9     0     8    0
knotepl    120      473    0        0    16     1    15    16     0     8    0
kqueuepl   224      456    0      446     4     3     1     3     0     8    0
pipepl     336      281    0      254     8     5     3     8     0     8    0
fdescpl    520     1590    0     1559     3     0     3     3     0     8    0
filepl     160    12635    0    12406    25    12    13    18     0     8    2
lockfpl    104      652    0      650     2     1     1     2     0     8    0
lockfspl    48      192    0      190     1     0     1     1     0     8    0
sessionpl  144       27    0       18     1     0     1     1     0     8    0
pgrppl      48       47    0       30     1     0     1     1     0     8    0
ucredpl    104     2038    0     2023     1     0     1     1     0     8    0
zombiepl   144     1564    0     1560     1     0     1     1     0     8    0
processpl  1240    1631    0     1560     6     0     6     6     0     8    0
procpl     656     3728    0     3648     9     1     8     8     0     8    0
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168        4    0        4     2     2     0     1     0     8    0
sockpl     728     3470    0     3421    27    19     8    16     0     8    3
mcl64k     65536      6    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       6    0        0     1     0     1     1     0     8    0
mcl4k      4096     117    0        0    15     0    15    15     0     8    0
mcl2k      2048      24    0        0     3     0     3     3     0     8    0
mtagpl      96      101    0        0     3     0     3     3     0     8    0
mbufpl     256      309    0        0    19     0    19    19     0     8    0
bufpl      280     6424    0      282   439     0   439   439     0     8    0
anonpl      32    11210    0        0    91     0    91    91     0   246    0
amapchunkpl 152   46224    0    45624    35    10    25    34     0   158    0
amappl16   200     4123    0     3859    43    29    14    23     0     8    0
amappl15   192        5    0        4     1     0     1     1     0     8    0
amappl14   184      121    0      109     1     0     1     1     0     8    0
amappl13   176        5    0        5     1     1     0     1     0     8    0
amappl12   168     2297    0     2267     3     1     2     2     0     8    0
amappl11   160       49    0       35     1     0     1     1     0     8    0
amappl10   152       27    0       26     2     1     1     1     0     8    0
amappl9    144      257    0      257     1     1     0     1     0     8    0
amappl8    136       23    0       20     1     0     1     1     0     8    0
amappl7    128      111    0       99     1     0     1     1     0     8    0
amappl6    120      199    0      194     1     0     1     1     0     8    0
amappl5    112      125    0      115     1     0     1     1     0     8    0
amappl4    104      333    0      313     1     0     1     1     0     8    0
amappl3     96     9278    0     9161     4     0     4     4     0     8    0
amappl2     88      670    0      609     2     0     2     2     0     8    0
amappl1     80    13710    0    13095    16     1    15    15     0     8    0
amappl      88    12881    0    12698     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       24    0        2     1     0     1     1     0     8    0
uaddrrnd    24     1590    0     1559     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1590    0     1559     1     0     1     1     0     8    0
vmmpekpl   168    14673    0    14628     4     1     3     3     0     8    0
vmmpepl    168   104587    0   102316   118    19    99   108     0   357    0
vmsppl     480     1589    0     1559     6     2     4     5     0     8    0
rwobjpl     72    32719    0    26362   116     0   116   116     0     8    0
pdppl      4096    3187    0     3118   105    34    71    81     0     8    2
pvpl        32    19675    0        0   160     1   159   159     0   265    0
pmappl     256     1589    0     1559     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      425    0       56    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff838b9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x175 acpitimer_read sys/dev/acpi/acpitimer.c:141 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x175 sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff800000af2200,0,ffff8000353f5b00) at pckbc_poll_cmd1+0x351 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff800000af2200,0,ffff8000353f5b00) at pckbc_poll_cmd1+0x351 sys/dev/ic/pckbc.c:620
pckbc_poll_cmd(ffff800000af2200,0,ffff8000353f5bbf,1,0,0,a7b974a9b87e691d) at pckbc_poll_cmd+0x12a sys/dev/ic/pckbc.c:692
pckbd_enable(ffff80000006ba00,1) at pckbd_enable+0x107 sys/dev/pckbc/pckbd.c:502
wskbd_do_open(ffff800000afa000,ffff800000afa050) at wskbd_do_open+0xf5 wskbd_enable sys/dev/wscons/wskbd.c:814 [inline]
wskbd_do_open(ffff800000afa000,ffff800000afa050) at wskbd_do_open+0xf5 sys/dev/wscons/wskbd.c:890
wskbdopen(4300,8001,2000,ffff80002efd79d0) at wskbdopen+0x1d2 sys/dev/wscons/wskbd.c:872
spec_open(ffff8000353f5d08) at spec_open+0x2ec sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd806e0a90e8,8001,fffffd80097fb5b0,ffff80002efd79d0) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138
vn_open(ffff8000353f5f58,8001,0) at vn_open+0x708 sys/kern/vfs_vnops.c:177
doopenat(ffff80002efd79d0,ffffff9c,200000000000,8000,0,ffff8000353f6100) at doopenat+0x32e sys/kern/vfs_syscalls.c:1137
end trace frame: 0xffff8000353f61a0, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff838b9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x175 acpitimer_read sys/dev/acpi/acpitimer.c:141 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x175 sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff800000af2200,0,ffff8000353f5b00) at pckbc_poll_cmd1+0x351 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff800000af2200,0,ffff8000353f5b00) at pckbc_poll_cmd1+0x351 sys/dev/ic/pckbc.c:620
pckbc_poll_cmd(ffff800000af2200,0,ffff8000353f5bbf,1,0,0,a7b974a9b87e691d) at pckbc_poll_cmd+0x12a sys/dev/ic/pckbc.c:692
pckbd_enable(ffff80000006ba00,1) at pckbd_enable+0x107 sys/dev/pckbc/pckbd.c:502
wskbd_do_open(ffff800000afa000,ffff800000afa050) at wskbd_do_open+0xf5 wskbd_enable sys/dev/wscons/wskbd.c:814 [inline]
wskbd_do_open(ffff800000afa000,ffff800000afa050) at wskbd_do_open+0xf5 sys/dev/wscons/wskbd.c:890
wskbdopen(4300,8001,2000,ffff80002efd79d0) at wskbdopen+0x1d2 sys/dev/wscons/wskbd.c:872
spec_open(ffff8000353f5d08) at spec_open+0x2ec sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd806e0a90e8,8001,fffffd80097fb5b0,ffff80002efd79d0) at VOP_OPEN+0x8b sys/kern/vfs_vops.c:138
vn_open(ffff8000353f5f58,8001,0) at vn_open+0x708 sys/kern/vfs_vnops.c:177
doopenat(ffff80002efd79d0,ffffff9c,200000000000,8000,0,ffff8000353f6100) at doopenat+0x32e sys/kern/vfs_syscalls.c:1137
syscall(ffff8000353f61b0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000353f61b0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc4959a20d10, count: -16
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8335036a) at panic+0x1e5 sys/kern/subr_prf.c:198
witness_thread_exit(ffff80002efce7e8) at witness_thread_exit+0x426 sys/kern/subr_witness.c:1408
reaper(ffff8000ffffd1f8) at reaper+0x1ba sys/kern/kern_exit.c:492
end trace frame: 0x0, count: 11
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8335036a) at panic+0x1e5 sys/kern/subr_prf.c:198
witness_thread_exit(ffff80002efce7e8) at witness_thread_exit+0x426 sys/kern/subr_witness.c:1408
reaper(ffff8000ffffd1f8) at reaper+0x1ba sys/kern/kern_exit.c:492
end trace frame: 0x0, count: -4

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/07 07:10 openbsd 16c80f155e04 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: thread exiting with locks held
2025/06/06 23:13 openbsd 16c80f155e04 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: thread exiting with locks held
2025/06/06 03:10 openbsd b57dcb7bc7e3 6b6b5f21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: thread exiting with locks held
* Struck through repros no longer work on HEAD.