syzbot


panic: mutex ADDR not held in mtx_leave

Status: upstream: reported on 2024/10/21 03:44
Reported-by: syzbot+121dab8faf86b47e5bce@syzkaller.appspotmail.com
First crash: 1d16h, last: 1d09h

Sample crash report:
panic: mutex 0xfffffd806c15f9f0 not held in mtx_leave
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 522856  60400  32767        0x10          0    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff83078e14) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_leave(fffffd806c15f9f0) at mtx_leave+0x17c sys/kern/kern_lock.c:335
msleep(fffffd806c15f908,fffffd806c15f9f0,4,ffffffff832a21d0,0) at msleep+0x125 sys/kern/kern_synch.c:249
vm_map_lock_ln(fffffd806c15f8d8,eecbf89d000,0) at vm_map_lock_ln+0xd4 sys/uvm/uvm_map.c:5250
uvm_map_protect(fffffd806c15f8d8,eecbf69e000,eecbf89d000,1,0,0,42a6187d16ee729d) at uvm_map_protect+0xe1 sys/uvm/uvm_map.c:3059
sys_mprotect(ffff80002a04f6f8,ffff80002a0b1fb0,ffff80002a0b1f00) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585
syscall(ffff80002a0b1fb0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0b1fb0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7e88893cd0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: mutex 0xfffffd806c15f9f0 not held in mtx_leave
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff83078e14) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_leave(fffffd806c15f9f0) at mtx_leave+0x17c sys/kern/kern_lock.c:335
msleep(fffffd806c15f908,fffffd806c15f9f0,4,ffffffff832a21d0,0) at msleep+0x125 sys/kern/kern_synch.c:249
vm_map_lock_ln(fffffd806c15f8d8,eecbf89d000,0) at vm_map_lock_ln+0xd4 sys/uvm/uvm_map.c:5250
uvm_map_protect(fffffd806c15f8d8,eecbf69e000,eecbf89d000,1,0,0,42a6187d16ee729d) at uvm_map_protect+0xe1 sys/uvm/uvm_map.c:3059
sys_mprotect(ffff80002a04f6f8,ffff80002a0b1fb0,ffff80002a0b1f00) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585
syscall(ffff80002a0b1fb0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0b1fb0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7e88893cd0, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a0b1bb0
rbx               0xffffffff834aedbf    cpu_info_full_primary+0x2dbf
rdx                                0
rcx               0xffff80002a04f6f8
rax               0xffffffff834adff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xc8b97c0c6d71e27a
r11               0x6760bb86d06818ee
r12               0xffffffff834aebc0    cpu_info_full_primary+0x2bc0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff816a99e5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a0b1ba0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=291538 pid=67508 tcnt=3 stat=sleep
    flags process=10<SUGID> proc=20<WSLEEP>
    runpri=32, usrpri=50, slppri=4, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffd6d8,0xffff80002a04ef70
    process=0xffff80002a391b30 user=0xffff80002a0ad000, vmspace=0xfffffd806c15f8d8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 57923   81279  14696      0  2        0x40                syz-executor
*67508  291538  74662  32767  3        0x30                syz-executor
 67508  128188  74662  32767  3   0x4000090  fsleep        syz-executor
 67508  284190  74662  32767  3   0x4000090  fsleep        syz-executor
 60400  522856  81391  32767  7        0x10                syz-executor
 60400  484609  81391  32767  3   0x4000090  netacc        syz-executor
 14696  375511  71780      0  3        0x80  ppwait        syz-executor
 71780  496230  21140      0  3        0x82  wait          syz-executor
  8200  448929  64672  32767  3        0x90  nanoslp       syz-executor
  8200  366191  64672  32767  3   0x4000090  sbwait        syz-executor
  8200   70675  64672  32767  3   0x4000090  fsleep        syz-executor
 63058  368581  67017  32767  3        0x90  nanoslp       syz-executor
 63058  108982  67017  32767  3   0x4000090  pipewr        syz-executor
 63058  506725  67017  32767  3   0x4000090  fsleep        syz-executor
  9968  369259  10473  32767  3        0x90  nanoslp       syz-executor
  9968   23668  10473  32767  3   0x4000090  nanoslp       syz-executor
  9968  249359  10473  32767  3   0x4000090  fsleep        syz-executor
 23507  425228  86891  32767  3        0x90  nanoslp       syz-executor
 23507  507117  86891  32767  3   0x4000090  kqread        syz-executor
 23507  479950  86891  32767  3   0x4000090  fsleep        syz-executor
 64672  453775  85336  32767  3        0x90  nanoslp       syz-executor
 74662   11310  20385  32767  3        0x90  nanoslp       syz-executor
 49162  457952  79003  32767  3        0x90  nanoslp       syz-executor
 67017  172841  92549  32767  3        0x90  nanoslp       syz-executor
 86891  242363  37961  32767  3        0x90  nanoslp       syz-executor
 81391   38733  78058  32767  3        0x90  nanoslp       syz-executor
 10473   11777  93012  32767  3        0x90  nanoslp       syz-executor
 78058   79826  21140      0  3        0x82  wait          syz-executor
 79003  132341  21140      0  3        0x82  wait          syz-executor
 37961  522905  21140      0  3        0x82  wait          syz-executor
 20385  432455  21140      0  3        0x82  wait          syz-executor
 92549  216432  21140      0  3        0x82  wait          syz-executor
 85336   17821  21140      0  3        0x82  wait          syz-executor
 93012  217593  21140      0  3        0x82  wait          syz-executor
  3909   46823      0      0  3     0x14200  bored         sosplice
 21140  409607  68356      0  3        0x82  kqread        syz-executor
 68356  485696  41060      0  3    0x10008a  sigsusp       ksh
 41060  435095  61474      0  3        0x98  kqread        sshd-session
 61474  160195  38445      0  3        0x92  kqread        sshd-session
 83897  179207      1      0  3    0x100083  ttyin         getty
 38445  168572      1      0  3        0x88  kqread        sshd
 35231  344362  70060     73  3   0x1100010  biowait       syslogd
 70060   62793      1      0  3    0x100082  sbwait        syslogd
  2765  288476      1      0  3    0x100080  kqread        resolvd
 16797   72617   5498     77  3    0x100092  kqread        dhcpleased
 42317  309257   5498     77  3    0x100092  kqread        dhcpleased
  5498  509372      1      0  3        0x80  kqread        dhcpleased
 60921  102918      0      0  3     0x14200  bored         smr
 48353  134088      0      0  2     0x14200                zerothread
 36784  179501      0      0  3     0x14200  aiodoned      aiodoned
 27264  464896      0      0  3     0x14200  syncer        update
 16457  391301      0      0  3     0x14200  cleaner       cleaner
 58693  405227      0      0  3     0x14200  reaper        reaper
 46286  424052      0      0  3     0x14200  pgdaemon      pagedaemon
 69768  488903      0      0  3     0x14200  bored         viomb
 65194  123912      0      0  3  0x40014200  acpi0         acpi0
 80217   69912      0      0  3  0x40014200                idle1
 93711  264344      0      0  3     0x14200  bored         softnet3
 14674  184317      0      0  3     0x14200  bored         softnet2
 36944  487591      0      0  3     0x14200  bored         softnet1
 17810   86772      0      0  3     0x14200  bored         softnet0
 16948  493178      0      0  3     0x14200  bored         systqmp
 85825   88495      0      0  3     0x14200  bored         systq
 37616  123800      0      0  3     0x14200  tmoslp        softclockmp
 51297   66885      0      0  3  0x40014200  tmoslp        softclock
 13077  260605      0      0  3  0x40014200                idle0
     1  439454      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &map->flags_lock r = 0 (0xfffffd806c15fa30)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  vm_map_lock_ln+0x153 sys/uvm/uvm_map.c:5258
#4  uvm_map_protect+0xe1 sys/uvm/uvm_map.c:3059
#5  sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585
#6  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 67508 (syz-executor) thread 0xffff8000ffffccb8 (284190)
exclusive rrwlock inode r = 0 (0xfffffd806c4d11a8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  uvn_io+0x412 sys/uvm/uvm_vnode.c:1265
#6  uvn_put+0x125 sys/uvm/uvm_vnode.c:928
#7  uvm_pager_put+0x18e sys/uvm/uvm_pager.c:525
#8  uvn_flush+0x72a sys/uvm/uvm_vnode.c:727
#9  uvm_map_clean+0x87e sys/uvm/uvm_map.c:4578
#10 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#10 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff835a2200)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#1  syscall+0xad6 sys/arch/amd64/amd64/trap.c:577
#2  Xsyscall+0x128
Process 8200 (syz-executor) thread 0xffff80002a04fc08 (366191)
exclusive rwlock sbufrcv r = 0 (0xffff8000012f8b50)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  sblock+0xb7 sys/kern/uipc_socket2.c:549
#3  soreceive+0x295 sys/kern/uipc_socket.c:947
#4  recvit+0x40a sys/kern/uipc_syscalls.c:1082
#5  sys_recvmmsg+0x3d3 sys/kern/uipc_syscalls.c:973
#6  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 35231 (syslogd) thread 0xffff8000ffffdbe8 (344362)
exclusive rrwlock inode r = 0 (0xfffffd806e6fbd60)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2926
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10184  11047K   11059K 166960K     11289        0
            pcb    17     12K      12K 166960K        17        0
         rtable   232      6K       6K 166960K       613        0
             pf    31     16K      16K 166960K        49        0
         ifaddr    42      7K       7K 166960K        82        0
        ifgroup    50      2K       2K 166960K        86        0
         sysctl     2      0K       0K 166960K         2        0
       counters    64     36K      36K 166960K        82        0
       ioctlops     0      0K       2K 166960K        38        0
            iov     1      4K       4K 166960K         3        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1468     92K      92K 166960K      1501        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    26     97K     157K 166960K       350        0
          sigio     2      0K       0K 166960K         2        0
           proc    65     91K     176K 166960K       740        0
        subproc   104      6K      13K 166960K       221        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     1      0K       0K 166960K        10        0
       in_multi    99      7K       7K 166960K       202        0
    ether_multi     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       484        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   258     74K     130K 166960K      3964        0
       UVM aobj     5      2K       2K 166960K         6        0
     pinsyscall    47     94K     126K 166960K      1567        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K         7        0
            NDP    13      0K       2K 166960K        54        0
           temp    38   6810K    6938K 166960K      5005        0
         kqueue    15     24K      28K 166960K        34        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       55    0       52     1     0     1     1     0     8    0
rtentry    112      210    0      101     4     0     4     4     0     8    0
unpcb      144       73    0       52     1     0     1     1     0     8    0
syncache   336        5    0        5     2     1     1     1     0     8    1
tcpqe       32        2    0        2     1     0     1     1     0     8    1
tcpcb      808       85    0       77     5     0     5     5     0     8    3
arp        120       36    0       18     1     0     1     1     0     8    0
ipq         40        1    0        1     1     0     1     1     0     8    1
ipqe        40       44    0       44     1     0     1     1     0     8    1
inpcb      336      250    0      235     7     0     7     7     0     8    5
nd6        136       51    0       28     1     0     1     1     0     8    0
kcovpl      48       17    0        9     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      862    0      407    31     2    29    29     0     8    0
art_table   32      863    0      407     4     0     4     4     0     8    0
art_node    16      209    0      110     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        2     1     1     0     1     0     8    0
shmpl      112        3    0        1     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1663    0      141    96     0    96    96     0     8    0
ffsino     272     1663    0      141   102     0   102   102     0     8    0
nchpl      144     1932    0      242    63     0    63    63     0     8    0
uvmvnodes   80     1893    0        0    39     0    39    39     0     8    0
vnodes     216     1893    0        0   106     0   106   106     0     8    0
namei      1024    6706    0     6706     3     1     2     2     0     8    2
percpumem   16       55    0        9     1     0     1     1     0     8    0
kstatmem   264       40    0       18     2     0     2     2     0     8    0
scxspl     216     8576    0     8575     5     2     3     3     1     8    2
plimitpl   152      136    0      108     2     0     2     2     0     8    0
sigapl     424      604    0      547    10     1     9     9     0     8    1
futexpl     64     1164    0     1158     2     1     1     1     0     8    0
knotepl    120      305    0        0    10     0    10    10     0     8    0
kqueuepl   216       36    0       25     1     0     1     1     0     8    0
pipepl     320      135    0      106     4     0     4     4     0     8    1
fdescpl    496      585    0      547     8     1     7     7     0     8    0
filepl     152     2081    0     1817    14     0    14    14     0     8    3
lockfpl    104       26    0       23     1     0     1     1     0     8    0
lockfspl    48       14    0       11     1     0     1     1     0     8    0
sessionpl  144       31    0       15     1     0     1     1     0     8    0
pgrppl      48       49    0       25     1     0     1     1     0     8    0
ucredpl    104      189    0      171     1     0     1     1     0     8    0
zombiepl   144      548    0      547     1     0     1     1     0     8    0
processpl  1160     604    0      547     6     0     6     6     0     8    1
procpl     648      720    0      652     7     0     7     7     0     8    1
sosppl     168        2    0        2     2     1     1     1     0     8    1
sockpl     664      378    0      338    10     1     9     9     0     8    5
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     147    0        0    19     0    19    19     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      284    0        0    18     0    18    18     0     8    0
bufpl      280     4973    0       95   349     0   349   349     0     8    0
anonpl      24   159857    0   156418    51     0    51    51     0   185   27
amapchunkpl 152   12792    0    12211    35     0    35    35     0   158   11
amappl16   200     3990    0     3976     5     3     2     5     0     8    0
amappl15   192       11    0       11     2     2     0     1     0     8    0
amappl14   184      121    0      111     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1328    0     1292     3     0     3     3     0     8    0
amappl11   160       53    0       43     1     0     1     1     0     8    0
amappl10   152       10    0       10     1     1     0     1     0     8    0
amappl9    144      138    0      138     1     1     0     1     0     8    0
amappl8    136       18    0       17     1     0     1     1     0     8    0
amappl7    128      113    0      102     1     0     1     1     0     8    0
amappl6    120      250    0      249     1     0     1     1     0     8    0
amappl5    112      174    0      166     1     0     1     1     0     8    0
amappl4    104      299    0      285     1     0     1     1     0     8    0
amappl3     96     2383    0     2250     4     0     4     4     0     8    0
amappl2     88      762    0      700     2     0     2     2     0     8    0
amappl1     80     8483    0     7944    13     0    13    13     0     8    0
amappl      88     3561    0     3358     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        5    0        1     1     0     1     1     0     8    0
uaddrrnd    24      585    0      547     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      585    0      547     1     0     1     1     0     8    0
vmmpekpl   168     6016    0     5961     5     0     5     5     0     8    0
vmmpepl    168    43972    0    41943    95     0    95    95     0   357    4
vmsppl     448      584    0      547     6     0     6     6     0     8    1
rwobjpl     56    18614    0    15869    41     0    41    41     0     8    1
pdppl      4096    1177    0     1094   141    54    87   113     0     8    4
pvpl        32    28162    0        0   229     1   228   228     0   265    0
pmappl     248      584    0      547     5     1     4     4     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      443    0       60    12     0    12    12     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff83078e14) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_leave(fffffd806c15f9f0) at mtx_leave+0x17c sys/kern/kern_lock.c:335
msleep(fffffd806c15f908,fffffd806c15f9f0,4,ffffffff832a21d0,0) at msleep+0x125 sys/kern/kern_synch.c:249
vm_map_lock_ln(fffffd806c15f8d8,eecbf89d000,0) at vm_map_lock_ln+0xd4 sys/uvm/uvm_map.c:5250
uvm_map_protect(fffffd806c15f8d8,eecbf69e000,eecbf89d000,1,0,0,42a6187d16ee729d) at uvm_map_protect+0xe1 sys/uvm/uvm_map.c:3059
sys_mprotect(ffff80002a04f6f8,ffff80002a0b1fb0,ffff80002a0b1f00) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585
syscall(ffff80002a0b1fb0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a0b1fb0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7e88893cd0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x784b580022f0, count: 12
ddb{1}> trace
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x784b580022f0, count: -3

Crashes (1190):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/21 11:23 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 11:15 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 11:06 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 10:58 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 10:52 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 10:44 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 10:35 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 10:24 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 10:18 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 10:09 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 10:01 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:53 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:46 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:38 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:30 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 09:21 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:13 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 09:06 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 08:59 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 08:51 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 08:44 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 08:36 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 08:28 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 08:17 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 08:08 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 08:01 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 07:54 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 07:48 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 07:41 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 07:32 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 07:24 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 07:17 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 07:08 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 06:59 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 06:51 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 06:43 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 06:36 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 06:26 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 06:21 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: mutex ADDR not held in mtx_leave
2024/10/21 06:14 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 06:06 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 06:00 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 05:50 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mutex ADDR not held in mtx_leave
2024/10/21 05:43 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
2024/10/21 03:43 openbsd e432ca3c48ac cd6fc0a3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mutex ADDR not held in mtx_leave
* Struck through repros no longer work on HEAD.