syzbot


panic: mtx ADDR: locking against myself (2)

Status: fixed on 2025/08/15 13:58
Reported-by: syzbot+69f651609f3f00ee7e78@syzkaller.appspotmail.com
Fix commit: 5e82fd317c62 Prevent lock recursion in error path.
First crash: 171d, last: 15d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: mtx ADDR: locking against myself 2 C 3 2323d 2323d 3/3 fixed on 2019/04/22 08:46

Sample crash report:
panic: mtx 0xffffffff838f38b0: locking against myself
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*153696  52575  32767        0x10          0    0  syz-executor
   8820  32470  32767    0x400010          0    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83339cd2) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff838f38b0) at mtx_enter_try+0x1da
mtx_enter(ffffffff838f38b0) at mtx_enter+0x62 sys/kern/kern_lock.c:261
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008566170) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b1f96d0,0,ffff80003a849868,ffff80003a84984c,0,2,b9ead65f5d5bd83e,2) at uvn_get+0x686 sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003a849a80,ffff80003a849ab8,ffff80003a849900,ffff80003a8498e8) at uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003a849a80,ffff80003a849ab8,ffff80003a849a00) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd806b9099b8,200000000000,0,2) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003a849c10,2000000000c0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff80003a849c10) at usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x73f27a72add0, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: mtx 0xffffffff838f38b0: locking against myself
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83339cd2) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff838f38b0) at mtx_enter_try+0x1da
mtx_enter(ffffffff838f38b0) at mtx_enter+0x62 sys/kern/kern_lock.c:261
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008566170) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b1f96d0,0,ffff80003a849868,ffff80003a84984c,0,2,b9ead65f5d5bd83e,2) at uvn_get+0x686 sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003a849a80,ffff80003a849ab8,ffff80003a849900,ffff80003a8498e8) at uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003a849a80,ffff80003a849ab8,ffff80003a849a00) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd806b9099b8,200000000000,0,2) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003a849c10,2000000000c0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff80003a849c10) at usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x73f27a72add0, count: -13
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003a8495a0
rbx               0xffffffff83864ddf    cpu_info_full_primary+0x2ddf
rdx                                0
rcx               0xffff80003c47afc0
rax               0xffffffff83863ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x6991844e2df72515
r11               0x93ffed077bb21875
r12               0xffffffff83864be0    cpu_info_full_primary+0x2be0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff83195555    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003a849590
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=153696 pid=52575 tcnt=4 stat=onproc
    flags process=10<SUGID> proc=0
    runpri=36, usrpri=50, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c47b4f0,0xffff80003c47a570
    process=0xffff80003c47c510 user=0xffff80003a844000, vmspace=0xfffffd806b9099b8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*52575  153696  79592  32767  7        0x10                syz-executor
 52575   28508  79592  32767  3   0x4000090  fsleep        syz-executor
 52575  361689  79592  32767  3   0x4000010  getblk        syz-executor
 52575  504941  79592  32767  3   0x4000090  fsleep        syz-executor
 22725  105726  29603  32767  2        0x10                syz-executor
 22725  412753  29603  32767  3   0x4000090  fsleep        syz-executor
 22725  341472  29603  32767  3   0x4000090  fsleep        syz-executor
 54672  300277  55940  32767  2        0x10                syz-executor
 54672  460973  55940  32767  3   0x4000090  fsleep        syz-executor
 38593   54564  43583  32767  3   0x4000090  nanoslp       syz-executor
 38593  415064  43583  32767  2   0x4000010                syz-executor
 38593  169273  43583  32767  3   0x4000090  fsleep        syz-executor
 38593   60515  43583  32767  2   0x4000010                syz-executor
  6621  503949  73459  32767  2        0x10                syz-executor
 23978  281598  69178  32767  2        0x10                syz-executor
 23978   41360  69178  32767  3   0x4000090  fsleep        syz-executor
 23978  247310  69178  32767  3   0x4000090  fsleep        syz-executor
 32470    8820   5743  32767  7    0x400010                syz-executor
 32470  289773   5743  32767  3   0x4400090  ttyout        syz-executor
 32470  378454   5743  32767  3   0x4400090  ttyout        syz-executor
 32470  128848   5743  32767  3   0x4400090  ttyretype     syz-executor
 32470  431527   5743  32767  2   0x4400010                syz-executor
 31254  393070  67327      0  3        0x82  sbwait        sshd-session
 36177    8339      0      0  3     0x14200  bored         sosplice
 96602  284623  95943  32767  3        0x10  biowait       syz-executor
  5743  348932  21232  32767  3        0x90  nanoslp       syz-executor
 69178  466243  32817  32767  3        0x90  nanoslp       syz-executor
 55940  499729   9895  32767  3        0x90  nanoslp       syz-executor
 73459  194315  64748  32767  2        0x10                syz-executor
 79592  494475   2687  32767  3        0x90  nanoslp       syz-executor
 43583  269730  42770  32767  3        0x90  nanoslp       syz-executor
 29603   33774  57837  32767  3        0x90  nanoslp       syz-executor
 64748  503661  40686      0  3        0x82  wait          syz-executor
  9895   42087  40686      0  3        0x82  wait          syz-executor
  2687  120569  40686      0  3        0x82  wait          syz-executor
 42770   26010  40686      0  3        0x82  wait          syz-executor
 21232  100474  40686      0  3        0x82  wait          syz-executor
 95943   76283  40686      0  3        0x82  wait          syz-executor
 57837  266576  40686      0  3        0x82  wait          syz-executor
 32817   58325  40686      0  3        0x82  wait          syz-executor
 40686  344248  28341      0  3        0x82  kqread        syz-executor
 28341  255021  10448      0  3    0x10008a  sigsusp       ksh
 10448  382744  48260      0  3        0x98  kqread        sshd-session
 48260  500209  67327      0  3        0x92  kqread        sshd-session
 29067  366322      1      0  3    0x100083  ttyin         getty
 67327  247380      1      0  3        0x88  kqread        sshd
 63319  316819  53075     73  3   0x1100090  kqread        syslogd
 53075   27545      1      0  3    0x100082  sbwait        syslogd
 20025  415216      1      0  3    0x100080  kqread        resolvd
 68951  234051  10496     77  3    0x100092  kqread        dhcpleased
 17828  131055  10496     77  3    0x100092  kqread        dhcpleased
 10496   71549      1      0  3        0x80  kqread        dhcpleased
 66574  420155      0      0  3     0x14200  bored         smr
 67281   36230      0      0  2     0x14200                zerothread
 42322  174459      0      0  3     0x14200  aiodoned      aiodoned
 97533    2700      0      0  3     0x14200  syncer        update
 99561  150199      0      0  3     0x14200  cleaner       cleaner
  9852  434544      0      0  3     0x14200  reaper        reaper
 27055  400377      0      0  3     0x14200  pgdaemon      pagedaemon
 90699  494673      0      0  3     0x14200  bored         viomb
  4210  178598      0      0  3  0x40014200  acpi0         acpi0
   507  293359      0      0  3  0x40014200                idle1
 57146  298938      0      0  3     0x14200  bored         softnet7
 65075  377515      0      0  3     0x14200  bored         softnet6
 90323  158578      0      0  3     0x14200  bored         softnet5
 20121  468184      0      0  3     0x14200  bored         softnet4
 23739   14736      0      0  3     0x14200  bored         softnet3
 27867  199399      0      0  3     0x14200  bored         softnet2
 93002  349586      0      0  3     0x14200  bored         softnet1
 45304  113080      0      0  3     0x14200  bored         softnet0
 85071    7156      0      0  3     0x14200  bored         systqmp
 21482  302677      0      0  3     0x14200  bored         systq
 14978  162008      0      0  3     0x14200  tmoslp        softclockmp
 69961   87133      0      0  3  0x40014200  tmoslp        softclock
 25121  491287      0      0  3  0x40014200                idle0
     1  300471      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff838f38c0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2  mtx_enter+0x62 sys/kern/kern_lock.c:261
#3  uvn_get+0x674 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#8  usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
#9  recall_trap+0x8
Process 52575 (syz-executor) thread 0xffff80003c47afc0 (153696)
exclusive rwlock uobjlk r = 0 (0xfffffd80686cd2a8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  uvn_io+0x667 sys/uvm/uvm_vnode.c:1298
#3  uvn_get+0x31d sys/uvm/uvm_vnode.c:1102
#4  uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#8  usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
#9  recall_trap+0x8
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff838f38c0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2  mtx_enter+0x62 sys/kern/kern_lock.c:261
#3  uvn_get+0x674 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#8  usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
#9  recall_trap+0x8
Process 52575 (syz-executor) thread 0xffff80003c47a7f8 (361689)
exclusive rrwlock inode r = 0 (0xfffffd80789d2b40)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  sys_ftruncate+0x1c1 sys/kern/vfs_syscalls.c:2916
#6  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
#7  Xsyscall+0x128
Process 52575 (syz-executor) thread 0xffff80003c47ba20 (504941)
exclusive rwlock vmmaplk r = 0 (0xfffffd806b909ab8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168
#3  uvmfault_lookup+0xe8 sys/uvm/uvm_fault.c:1918
#4  uvm_fault_check+0x895 uvmfault_amapcopy sys/uvm/uvm_fault.c:235 [inline]
#4  uvm_fault_check+0x895 sys/uvm/uvm_fault.c:784
#5  uvm_fault+0x106 sys/uvm/uvm_fault.c:677
#6  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#7  usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
#8  recall_trap+0x8
Process 96602 (syz-executor) thread 0xffff80002a373a18 (284623)
exclusive rrwlock inode r = 0 (0xfffffd80789d2eb8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vget+0x2a2 sys/kern/vfs_subr.c:693
#6  ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203
#8  ufs_lookup+0x1a36 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x93a sys/kern/vfs_lookup.c:566
#11 namei+0x7ca sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1868
#13 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c4ca440)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1868
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10196  10957K   10968K 166960K     11274        0
            pcb    17     12K      12K 166960K        17        0
         rtable   209      6K       6K 166960K       295        0
             pf    31     16K      16K 166960K        31        0
         ifaddr    42      7K       7K 166960K        44        0
        ifgroup    50      2K       2K 166960K        50        0
         sysctl     4      1K       9K 166960K         8        0
       counters    68     36K      36K 166960K        68        0
       ioctlops     0      0K       2K 166960K        29        0
            iov     0      0K      12K 166960K         4        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1335     84K      84K 166960K      1354        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         5        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    25     93K     125K 166960K       226        0
          sigio     0      0K       0K 166960K         3        0
           proc    58     99K     163K 166960K       482        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        13        0
       in_multi    99      7K       7K 166960K       102        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       361        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   258    176K     186K 166960K      3546        0
       UVM aobj     7      2K       2K 166960K         7        0
     pinsyscall    48     96K     111K 166960K      1258        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         9        0
            NDP    11      0K       2K 166960K        27        0
           temp    37   8638K    8702K 166960K      4082        0
         kqueue    14     22K      26K 166960K        31        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       41    0       38     1     0     1     1     0     8    0
rtentry    176       97    0        1     5     0     5     5     0     8    0
unpcb      144       75    0       56     1     0     1     1     0     8    0
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpcb      736       49    0       43     1     0     1     1     0     8    0
arp        128       10    0        0     1     0     1     1     0     8    0
inpcb      328      240    0      231    10     0    10    10     0     8    8
nd6        144       18    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      441    0        0    28     0    28    28     0     8    0
art_table   40      442    0        0     5     0     5     5     0     8    0
art_node    32       97    0       11     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        2     1     0     1     1     0     8    1
semapl     112        3    0        1     1     0     1     1     0     8    0
shmpl      112        4    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1670    0      163    95     0    95    95     0     8    0
ffsino     296     1670    0      163   117     0   117   117     0     8    0
nchpl      144     1978    0      298    63     0    63    63     0     8    0
uvmvnodes   80     1751    0        0    36     0    36    36     0     8    0
vnodes     216     1751    0        0    98     0    98    98     0     8    0
namei      1024    6102    0     6102     2     0     2     2     0     8    2
percpumem   16       49    0        0     1     0     1     1     0     8    0
kstatmem   264       24    0        0     2     0     2     2     0     8    0
scxspl     216     6907    0     6905     4     3     1     3     1     8    0
plimitpl   152       49    0       24     2     0     2     2     0     8    0
sigapl     424      512    0      451     8     0     8     8     0     8    0
knotepl    120       63    0        0     2     0     2     2     0     8    0
kqueuepl   224      101    0       91     5     0     5     5     0     8    4
pipepl     344      107    0       79     3     0     3     3     0     8    0
fdescpl    528      489    0      451     4     0     4     4     0     8    0
filepl     160     1959    0     1737    14     0    14    14     0     8    3
lockfpl    104       16    0       12     1     0     1     1     0     8    0
lockfspl    48        9    0        5     1     0     1     1     0     8    0
sessionpl  144       23    0        6     1     0     1     1     0     8    0
pgrppl      48       31    0        6     1     0     1     1     0     8    0
ucredpl    104      190    0      171     1     0     1     1     0     8    0
zombiepl   144      451    0      451     1     0     1     1     0     8    1
processpl  1248     512    0      451     7     1     6     6     0     8    0
procpl     664      667    0      591     7     0     7     7     0     8    0
sockpl     752      359    0      328    13     1    12    13     0     8    8
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     126    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      42    0        0     6     0     6     6     0     8    0
mtagpl      96        1    0        0     1     0     1     1     0     8    0
mbufpl     256      279    0        0    18     0    18    18     0     8    0
bufpl      280     2931    0      112   202     0   202   202     0     8    0
anonpl      32     5647    0        0    46     0    46    46     0   246    0
amapchunkpl 152   10723    0    10180    31     2    29    29     0   158    5
amappl16   200     1805    0     1783     5     2     3     5     0     8    1
amappl15   192        4    0        4     1     1     0     1     0     8    0
amappl14   184      107    0       96     1     0     1     1     0     8    0
amappl13   176        7    0        7     2     2     0     1     0     8    0
amappl12   168     1098    0     1061     2     0     2     2     0     8    0
amappl11   160       48    0       38     1     0     1     1     0     8    0
amappl10   152        3    0        3     1     1     0     1     0     8    0
amappl9    144      262    0      262     1     1     0     1     0     8    0
amappl8    136       30    0       29     1     0     1     1     0     8    0
amappl7    128      111    0      100     1     0     1     1     0     8    0
amappl6    120      176    0      172     1     0     1     1     0     8    0
amappl5    112      117    0      111     1     0     1     1     0     8    0
amappl4    104      269    0      253     1     0     1     1     0     8    0
amappl3     96     1758    0     1633     4     0     4     4     0     8    0
amappl2     88      619    0      558     2     0     2     2     0     8    0
amappl1     80     8687    0     8024    16     0    16    16     0     8    0
amappl      88     2890    0     2704     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        6    0        0     1     0     1     1     0     8    0
uaddrrnd    24      489    0      451     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      489    0      451     1     0     1     1     0     8    0
vmmpekpl   168     5575    0     5542     2     0     2     2     0     8    0
vmmpepl    168    37748    0    35510   108     1   107   108     0   357    3
vmsppl     488      488    0      451     7     1     6     6     0     8    0
rwobjpl     80    14838    0    12138    57     0    57    57     0     8    0
pdppl      4096     986    0      902   112    26    86    98     0     8    2
pvpl        32    13161    0        0   107     0   107   107     0   265    0
pmappl     256      488    0      451     4     1     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      293    0       29     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83339cd2) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff838f38b0) at mtx_enter_try+0x1da
mtx_enter(ffffffff838f38b0) at mtx_enter+0x62 sys/kern/kern_lock.c:261
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd8008566170) at uvm_pageclean+0x28e sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008566170) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b1f96d0,0,ffff80003a849868,ffff80003a84984c,0,2,b9ead65f5d5bd83e,2) at uvn_get+0x686 sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003a849a80,ffff80003a849ab8,ffff80003a849900,ffff80003a8498e8) at uvm_fault_lower_io+0x2cd sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003a849a80,ffff80003a849ab8,ffff80003a849a00) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd806b9099b8,200000000000,0,2) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003a849c10,2000000000c0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
usertrap(ffff80003a849c10) at usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x73f27a72add0, count: -13
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x72b07392a400, count: 12
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x72b07392a400, count: -3

Crashes (338):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/14 14:09 openbsd 7a15ea66e78c dcc075fb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/12 10:30 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/08/12 01:12 openbsd 3ae9e49f3bd9 c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/08/11 23:07 openbsd 3ae9e49f3bd9 c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/11 20:33 openbsd 3ae9e49f3bd9 c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/11 14:13 openbsd 3e54954732e9 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/11 11:23 openbsd 3e54954732e9 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/10 13:41 openbsd db91578bce12 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/09 07:50 openbsd 86b9fcdd2575 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/08 06:48 openbsd ca647cfa4ec3 6a893178 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/07 01:44 openbsd 01075e58a8ba 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/08/05 04:47 openbsd ba714b803396 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/08/05 03:03 openbsd ba714b803396 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/04 14:59 openbsd 42a7be81bef7 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/03 10:24 openbsd bf6d80a8c313 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/08/02 21:42 openbsd d2170a9a220c 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/02 01:33 openbsd 8693ef6a6ffe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/08/01 18:38 openbsd 8693ef6a6ffe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/31 14:37 openbsd 788294299689 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/30 10:46 openbsd 8eeaa0a347fe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/29 09:23 openbsd fff03f7679b7 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/29 03:57 openbsd fff03f7679b7 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/28 07:53 openbsd 0897303859b5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/27 16:12 openbsd 7b0d12c26b01 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/26 08:50 openbsd d5b024f63250 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/26 07:12 openbsd d5b024f63250 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/25 18:00 openbsd c5645c128364 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/25 01:59 openbsd 24bd93804efe 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/23 02:14 openbsd 7a953c5f736e 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/22 21:20 openbsd 61a25b0294d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/21 15:59 openbsd df9e633562d5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/19 19:48 openbsd 0e7ce4eb8da0 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/18 05:45 openbsd aa829d585f3f 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/15 19:37 openbsd feb5a82c5bff 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/15 02:45 openbsd 427cdd1fb5e1 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/13 23:58 openbsd 79bd20f69ae4 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/12 11:50 openbsd b3bc833acc6a 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/11 05:51 openbsd 0b4ddc31a5ae 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/09 21:38 openbsd e91e1a12e0dd 956bd956 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/09 10:51 openbsd bc55f572b2c5 f4e5e155 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/09 08:19 openbsd bc55f572b2c5 f4e5e155 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/08 11:13 openbsd 148caabbe916 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/08 08:27 openbsd 148caabbe916 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/07/07 16:50 openbsd 37d47b610366 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/07 13:09 openbsd 37d47b610366 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/07 10:17 openbsd 37d47b610366 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/07 08:29 openbsd 37d47b610366 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/07 02:27 openbsd 1a059e88663d 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/06 23:26 openbsd 1a059e88663d 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/07/06 18:42 openbsd 78908cc80aaa 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/03/11 07:35 openbsd 4b6c60d68713 16256247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
* Struck through repros no longer work on HEAD.