syzbot


panic: mtx ADDR: locking against myself (2)

Status: upstream: reported on 2025/03/11 07:35
Reported-by: syzbot+69f651609f3f00ee7e78@syzkaller.appspotmail.com
First crash: 2d12h, last: 3h19m
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: mtx ADDR: locking against myself C 3 2153d 2154d 3/3 fixed on 2019/04/22 08:46

Sample crash report:
panic: mtx 0xffffffff8389d328: locking against myself
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*118642  93729  32767        0x10          0    0  syz-executor
 517770  26603  32767        0x10          0    1  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833cb375) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff8389d328) at mtx_enter_try+0x1bf sys/kern/kern_lock.c:271
mtx_enter(ffffffff8389d328) at mtx_enter+0x60 sys/kern/kern_lock.c:239
uvm_pageclean(fffffd8008508640) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008508640) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b9f6308,0,ffff80003c51a2a8,ffff80003c51a284,0,2,4a6ea6ec5ad48148,ffff80003c51a500) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a330,ffff80003c51a338) at uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
uvm_fault_lower(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a440) at uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
uvm_fault(fffffd8069579ae0,400000000000,0,2) at uvm_fault+0x272
upageflttrap(ffff80003c51a650,400000000100) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c51a650) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c7a3443fe30, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: mtx 0xffffffff8389d328: locking against myself
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833cb375) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff8389d328) at mtx_enter_try+0x1bf sys/kern/kern_lock.c:271
mtx_enter(ffffffff8389d328) at mtx_enter+0x60 sys/kern/kern_lock.c:239
uvm_pageclean(fffffd8008508640) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008508640) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b9f6308,0,ffff80003c51a2a8,ffff80003c51a284,0,2,4a6ea6ec5ad48148,ffff80003c51a500) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a330,ffff80003c51a338) at uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
uvm_fault_lower(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a440) at uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
uvm_fault(fffffd8069579ae0,400000000000,0,2) at uvm_fault+0x272
upageflttrap(ffff80003c51a650,400000000100) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c51a650) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c7a3443fe30, count: -13
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c519ff0
rbx               0xffffffff837e2dc7    cpu_info_full_primary+0x2dc7
rdx                                0
rcx               0xffff8000ffff87d0
rax               0xffffffff837e1ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x9fcf1147e9d040d9
r11               0xc05c0ed39a74f94c
r12               0xffffffff837e2bc8    cpu_info_full_primary+0x2bc8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82bd5905    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c519fe0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=118642 pid=93729 tcnt=4 stat=onproc
    flags process=10<SUGID> proc=0
    runpri=50, usrpri=50, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff9210,0xffff8000ffff99d0
    process=0xffff8000ffff0020 user=0xffff80003c515000, vmspace=0xfffffd8069579ae0
    estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*93729  118642  64047  32767  7        0x10                syz-executor
 93729   72816  64047  32767  3   0x4000090  fsleep        syz-executor
 93729  139398  64047  32767  3   0x4000010  biowait       syz-executor
 93729  487852  64047  32767  3   0x4000090  fsleep        syz-executor
 56849    9483  59155  32767  3        0x90  nanoslp       syz-executor
 56849  468786  59155  32767  3   0x4000090  kqsel         syz-executor
 56849  165188  59155  32767  3   0x4000090  fsleep        syz-executor
 56849   91041  59155  32767  3   0x4000090  fsleep        syz-executor
 51966  473061  85955  32767  3        0x90  nanoslp       syz-executor
 51966  517771  85955  32767  3   0x4000090  sbwait        syz-executor
 51966  169531  85955  32767  3   0x4000090  fsleep        syz-executor
 85225  259068  71186  32767  3    0x400090  nanoslp       syz-executor
 85225   22545  71186  32767  3   0x4400090  ttyout        syz-executor
 85225  326978  71186  32767  3   0x4400090  fsleep        syz-executor
 22633  386406  87476  32767  3        0x90  nanoslp       syz-executor
 22633   30227  87476  32767  3   0x4000090  lockf         syz-executor
 22633  353726  87476  32767  3   0x4000090  fsleep        syz-executor
 85955  206289  30722  32767  3        0x90  nanoslp       syz-executor
 59155    3451  91144  32767  3        0x90  nanoslp       syz-executor
 87476  420087   4827  32767  3        0x90  nanoslp       syz-executor
 26034  256238  86251  32767  3        0x90  nanoslp       syz-executor
 26603  517770  93406  32767  7        0x10                syz-executor
 64047  445253  80183  32767  3        0x90  nanoslp       syz-executor
 71186  102276  15700  32767  3        0x90  nanoslp       syz-executor
 86251  104669  94022      0  3        0x82  wait          syz-executor
  4827  480525  94022      0  3        0x82  wait          syz-executor
 93406   84395  94022      0  3        0x82  wait          syz-executor
 80183  166533  94022      0  3        0x82  wait          syz-executor
 15013    1653  94022      0  3        0x82  wait          syz-executor
 30722  310394  94022      0  3        0x82  wait          syz-executor
 91144  279388  94022      0  3        0x82  wait          syz-executor
 15700   73590  94022      0  3        0x82  wait          syz-executor
 94022  317804  77246      0  3        0x82  kqread        syz-executor
 77246  466132  78674      0  3    0x10008a  sigsusp       ksh
 78674  359269  35180      0  3        0x98  kqread        sshd-session
 35180  222685  20601      0  3        0x92  kqread        sshd-session
 70643   12106      1      0  3    0x100083  ttyin         getty
 20601  443936      1      0  3        0x88  kqread        sshd
 55234  263021  30224     73  3   0x1100090  kqread        syslogd
 30224  194017      1      0  3    0x100082  sbwait        syslogd
 91012  327632      1      0  3    0x100080  kqread        resolvd
 65215  367992  34650     77  3    0x100092  kqread        dhcpleased
  2598   67820  34650     77  3    0x100092  kqread        dhcpleased
 34650  427201      1      0  3        0x80  kqread        dhcpleased
 32015  171119      0      0  3     0x14200  bored         smr
  5568  330823      0      0  3     0x14200  pgzero        zerothread
 53643   32991      0      0  3     0x14200  aiodoned      aiodoned
 96544  136899      0      0  3     0x14200  syncer        update
 57482  271126      0      0  3     0x14200  cleaner       cleaner
  6519  116816      0      0  3     0x14200  reaper        reaper
 36921  397231      0      0  3     0x14200  pgdaemon      pagedaemon
 82126   17246      0      0  3     0x14200  bored         viomb
 19443  250827      0      0  3  0x40014200  acpi0         acpi0
 75183  421166      0      0  3  0x40014200                idle1
 98302  183085      0      0  3     0x14200  bored         softnet3
 99086  363993      0      0  3     0x14200  bored         softnet2
  8169  333326      0      0  3     0x14200  bored         softnet1
 46394   72833      0      0  3     0x14200  bored         softnet0
  8230   95216      0      0  3     0x14200  bored         systqmp
 64564  360838      0      0  3     0x14200  bored         systq
 34742  498734      0      0  3     0x14200  tmoslp        softclockmp
 80436  469040      0      0  3  0x40014200  tmoslp        softclock
 13223  387722      0      0  3  0x40014200                idle0
     1  182328      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff8389d338)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  uvn_get+0x679 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
#5  uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
#6  uvm_fault+0x272
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
Process 93729 (syz-executor) thread 0xffff8000ffff87d0 (118642)
exclusive rwlock uobjlk r = 0 (0xfffffd806954fb20)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  uvn_io+0x667 sys/uvm/uvm_vnode.c:1297
#3  uvn_get+0x31d sys/uvm/uvm_vnode.c:1102
#4  uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
#5  uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
#6  uvm_fault+0x272
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff8389d338)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  mtx_enter_try+0x178
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  uvn_get+0x679 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
#5  uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
#6  uvm_fault+0x272
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
Process 93729 (syz-executor) thread 0xffff8000ffff82b0 (139398)
exclusive rrwlock inode r = 0 (0xfffffd806c93d538)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:616
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  sys_ftruncate+0x1c4 sys/kern/vfs_syscalls.c:2920
#6  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
Process 93729 (syz-executor) thread 0xffff8000ffff8020 (487852)
shared rwlock vmmaplk r = 0 (0xfffffd8069579be0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_read+0x3af sys/kern/kern_rwlock.c:405
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1864
#3  uvm_fault_check+0x4b sys/uvm/uvm_fault.c:730
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:666
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#6  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#7  recall_trap+0x8
Process 26603 (syz-executor) thread 0xffff8000ffffa2a8 (517770)
exclusive rrwlock inode r = 0 (0xfffffd806c93dbc8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:616
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:159
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0x113 sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3117
#10 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806c7a5f08)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:616
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3102
#8  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10185  10954K   10965K 166960K     11264        0
            pcb    17     12K      12K 166960K        17        0
         rtable   236      6K       6K 166960K       346        0
             pf    31     16K      16K 166960K        31        0
         ifaddr    42      7K       7K 166960K        44        0
        ifgroup    50      2K       2K 166960K        50        0
         sysctl     1      1K       1K 166960K         1        0
       counters    64     36K      36K 166960K        64        0
       ioctlops     0      0K       2K 166960K        29        0
            iov     0      0K      12K 166960K         6        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1332     84K      84K 166960K      1353        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         3        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         4        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    24     89K     129K 166960K       186        0
          sigio     0      0K       0K 166960K         2        0
           proc    59     91K     115K 166960K       478        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         9        0
       in_multi    99      7K       7K 166960K       100        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       343        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   247     74K      77K 166960K      2983        0
       UVM aobj     5      2K       2K 166960K         5        0
     pinsyscall    45     90K     114K 166960K      1183        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         5        0
            NDP    21      1K       2K 166960K        27        0
           temp    37   8682K    8746K 166960K      3788        0
         kqueue    13     20K      24K 166960K        27        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       37    0       34     1     0     1     1     0     8    0
rtentry    160      112    0        1     5     0     5     5     0     8    0
unpcb      144       73    0       52     2     0     2     2     0     8    1
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      808       33    0       26     1     0     1     1     0     8    0
arp        120       18    0        0     1     0     1     1     0     8    0
inpcb      376      109    0       95     2     0     2     2     0     8    0
nd6        136       25    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      458    0        0    29     0    29    29     0     8    0
art_table   32      459    0        0     4     0     4     4     0     8    0
art_node    16      111    0       10     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        0     1     0     1     1     0     8    0
semapl     112        2    0        0     1     0     1     1     0     8    0
shmpl      112        2    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1620    0      115    95     0    95    95     0     8    0
ffsino     280     1620    0      115   108     0   108   108     0     8    0
nchpl      144     1865    0      190    63     0    63    63     0     8    0
uvmvnodes   80     1701    0        0    35     0    35    35     0     8    0
vnodes     216     1701    0        0    95     0    95    95     0     8    0
namei      1024    5559    0     5558     1     0     1     1     0     8    0
percpumem   16       46    0        0     1     0     1     1     0     8    0
kstatmem   264       22    0        0     2     0     2     2     0     8    0
scxspl     216     5961    0     5959     3     1     2     2     1     8    1
plimitpl   152       41    0       15     2     0     2     2     0     8    0
sigapl     424      457    0      403     8     0     8     8     0     8    1
futexpl     64      732    0      725     1     0     1     1     0     8    0
knotepl    120      322    0        0    10     0    10    10     0     8    0
kqueuepl   216       31    0       21     1     0     1     1     0     8    0
pipepl     328      105    0       78     3     0     3     3     0     8    0
fdescpl    504      439    0      403     7     1     6     6     0     8    0
filepl     152     1649    0     1422    10     0    10    10     0     8    1
lockfpl    104       19    0       12     1     0     1     1     0     8    0
lockfspl    48       11    0        5     1     0     1     1     0     8    0
sessionpl  144       22    0        6     1     0     1     1     0     8    0
pgrppl      48       30    0        6     1     0     1     1     0     8    0
ucredpl    104      153    0      134     1     0     1     1     0     8    0
zombiepl   144      405    0      403     1     0     1     1     0     8    0
processpl  1176     457    0      403     5     0     5     5     0     8    0
procpl     656      545    0      479     6     0     6     6     0     8    0
sockpl     688      219    0      181     5     0     5     5     0     8    1
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     120    0        0    15     0    15    15     0     8    0
mcl2k      2048      17    0        0     3     0     3     3     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      166    0        0    11     0    11    11     0     8    0
bufpl      280     2289    0      124   155     0   155   155     0     8    0
anonpl      24    99293    0    96049    34     1    33    33     0   184   10
amapchunkpl 152    9190    0     8623    28     0    28    28     0   158    2
amappl16   200     1838    0     1814     5     0     5     5     0     8    3
amappl15   192       20    0       20     2     2     0     1     0     8    0
amappl14   184      128    0      118     1     0     1     1     0     8    0
amappl13   176        5    0        5     1     1     0     1     0     8    0
amappl12   168     1040    0     1004     2     0     2     2     0     8    0
amappl11   160       52    0       42     1     0     1     1     0     8    0
amappl10   152        8    0        8     2     2     0     1     0     8    0
amappl9    144      247    0      247     1     0     1     1     0     8    1
amappl8    136       25    0       24     1     0     1     1     0     8    0
amappl7    128       93    0       83     1     0     1     1     0     8    0
amappl6    120      174    0      171     1     0     1     1     0     8    0
amappl5    112      118    0      112     1     0     1     1     0     8    0
amappl4    104      274    0      258     1     0     1     1     0     8    0
amappl3     96     1439    0     1309     4     0     4     4     0     8    0
amappl2     88      601    0      547     2     0     2     2     0     8    0
amappl1     80     7818    0     7274    14     0    14    14     0     8    0
amappl      88     2638    0     2441     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        4    0        0     1     0     1     1     0     8    0
uaddrrnd    24      440    0      404     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      440    0      404     1     0     1     1     0     8    0
vmmpekpl   168     5222    0     5194     2     0     2     2     0     8    0
vmmpepl    168    33718    0    31755    93     0    93    93     0   357    3
vmsppl     456      439    0      404     7     1     6     6     0     8    0
rwobjpl     64    14247    0    11695    43     0    43    43     0     8    0
pdppl      4096     888    0      808   112    18    94   100     0     8   14
pvpl        32    12697    0        0   105     2   103   104     0   265    0
pmappl     248      439    0      404     4     1     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      284    0       21     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833cb375) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff8389d328) at mtx_enter_try+0x1bf sys/kern/kern_lock.c:271
mtx_enter(ffffffff8389d328) at mtx_enter+0x60 sys/kern/kern_lock.c:239
uvm_pageclean(fffffd8008508640) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd8008508640) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd806b9f6308,0,ffff80003c51a2a8,ffff80003c51a284,0,2,4a6ea6ec5ad48148,ffff80003c51a500) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a330,ffff80003c51a338) at uvm_fault_lower_io+0x319 sys/uvm/uvm_fault.c:1588
uvm_fault_lower(ffff80003c51a4c8,ffff80003c51a500,ffff80003c51a440) at uvm_fault_lower+0x278 sys/uvm/uvm_fault.c:1362
uvm_fault(fffffd8069579ae0,400000000000,0,2) at uvm_fault+0x272
upageflttrap(ffff80003c51a650,400000000100) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c51a650) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c7a3443fe30, count: -13
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x2apic_writereg(380,591769) at x2apic_writereg+0x45 sys/arch/amd64/amd64/lapic.c:156
clockintr_dispatch(ffff8000370a1c70) at clockintr_dispatch+0x631 sys/kern/kern_clockintr.c:240
lapic_clockintr(0,0) at lapic_clockintr+0x51 sys/arch/amd64/amd64/lapic.c:489
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
__mp_lock(ffffffff83981130) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83981130) at __mp_lock+0x192 sys/kern/kern_lock.c:144
__mp_acquire_count(ffffffff83981130,1) at __mp_acquire_count+0x58
mi_switch() at mi_switch+0x4b7 sys/kern/sched_bsd.c:441
sleep_finish(0,1) at sleep_finish+0x24f sys/kern/kern_synch.c:412
biowait(fffffd806bf08350) at biowait+0xc1 sys/kern/vfs_bio.c:1246
bwrite(fffffd806bf08350) at bwrite+0x2e5 sys/kern/vfs_bio.c:758
VOP_BWRITE(fffffd806bf08350) at VOP_BWRITE+0x60 sys/kern/vfs_vops.c:648
end trace frame: 0xffff8000370a20e0, count: 0
ddb{1}> trace
x86_ipi_db(ffff800029a9bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x2apic_writereg(380,591769) at x2apic_writereg+0x45 sys/arch/amd64/amd64/lapic.c:156
clockintr_dispatch(ffff8000370a1c70) at clockintr_dispatch+0x631 sys/kern/kern_clockintr.c:240
lapic_clockintr(0,0) at lapic_clockintr+0x51 sys/arch/amd64/amd64/lapic.c:489
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
__mp_lock(ffffffff83981130) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83981130) at __mp_lock+0x192 sys/kern/kern_lock.c:144
__mp_acquire_count(ffffffff83981130,1) at __mp_acquire_count+0x58
mi_switch() at mi_switch+0x4b7 sys/kern/sched_bsd.c:441
sleep_finish(0,1) at sleep_finish+0x24f sys/kern/kern_synch.c:412
biowait(fffffd806bf08350) at biowait+0xc1 sys/kern/vfs_bio.c:1246
bwrite(fffffd806bf08350) at bwrite+0x2e5 sys/kern/vfs_bio.c:758
VOP_BWRITE(fffffd806bf08350) at VOP_BWRITE+0x60 sys/kern/vfs_vops.c:648
ufs_mkdir(ffff8000370a20f0) at ufs_mkdir+0x581 sys/ufs/ufs/ufs_vnops.c:1160
VOP_MKDIR(fffffd806c46cb30,ffff8000370a2250,ffff8000370a2280,ffff8000370a2180) at VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394
domkdirat(ffff8000ffffa2a8,ffffff9c,7232d15e7ab0,1ff) at domkdirat+0x179 sys/kern/vfs_syscalls.c:3117
syscall(ffff8000370a2400) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000370a2400) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7232d15e7b50, count: -19

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/03/13 17:14 openbsd dd809e4cd4f7 44be8b44 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/03/13 06:30 openbsd f24522bc9568 1a5d9317 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/13 02:24 openbsd f24522bc9568 1a5d9317 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/03/12 21:44 openbsd f24522bc9568 1a5d9317 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
2025/03/12 17:34 openbsd f24522bc9568 ee70e6db .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/12 15:53 openbsd c328ddbe3d16 ee70e6db .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/12 10:37 openbsd c328ddbe3d16 ee70e6db .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/11 14:36 openbsd 4b6c60d68713 16256247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/11 14:36 openbsd 4b6c60d68713 16256247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: mtx ADDR: locking against myself
2025/03/11 07:35 openbsd 4b6c60d68713 16256247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid panic: mtx ADDR: locking against myself
* Struck through repros no longer work on HEAD.