syzbot


witness: lock_object uninitialized: ADDR (4)

Status: upstream: reported on 2025/09/26 23:24
Reported-by: syzbot+a9fae5148a3cd88f1532@syzkaller.appspotmail.com
First crash: 65d, last: 65d
Similar bugs (3)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd witness: lock_object uninitialized: ADDR (2) -1 1 1138d 1138d 0/3 auto-obsoleted due to no activity on 2023/01/17 13:32
openbsd witness: lock_object uninitialized: ADDR (3) -1 C 6417 291d 974d 0/3 auto-obsoleted due to no activity on 2025/05/07 22:43
openbsd witness: lock_object uninitialized: ADDR -1 71 1294d 1434d 0/3 auto-closed as invalid on 2022/08/14 06:12

Sample crash report:
witness: lock_object uninitialized: 0xffff80003c475950
Starting stack trace...
witness_checkorder(ffff80003c475950,9,0) at witness_checkorder+0x1a7 witness_debugger sys/kern/subr_witness.c:2573 [inline]
witness_checkorder(ffff80003c475950,9,0) at witness_checkorder+0x1a7 sys/kern/subr_witness.c:783
mtx_enter(ffff80003c475940) at mtx_enter+0x4a sys/kern/kern_lock.c:260
filt_procdetach(fffffd805cddb438) at filt_procdetach+0x4d sys/kern/kern_event.c:432
knote_remove(ffff8000fffee7e0,fffffd806eeebd20,fffffd806eeebdc0,35,1) at knote_remove+0x2db sys/kern/kern_event.c:-1
kqueue_purge(ffff8000fffee7e0,fffffd806eeebd20) at kqueue_purge+0x137 sys/kern/kern_event.c:1890
kqueue_close(fffffd8067c7d180,ffff8000fffee7e0) at kqueue_close+0x48 sys/kern/kern_event.c:1934
fdrop(fffffd8067c7d180,ffff8000fffee7e0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8067c7d180,ffff8000fffee7e0) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff8000fffee7e0) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff8000fffee7e0,0,0,3) at exit1+0x576 sys/kern/kern_exit.c:215
proc_suspend_check_locked(ffff8000fffee7e0,0) at proc_suspend_check_locked+0x2fd sys/kern/kern_sig.c:2235
userret(ffff8000fffee7e0) at userret+0x8c proc_suspend_check sys/kern/kern_sig.c:-1 [inline]
userret(ffff8000fffee7e0) at userret+0x8c sys/kern/kern_sig.c:2194
syscall(ffff80003c46f810) at syscall+0x9cd mi_syscall_return sys/sys/syscall_mi.h:203 [inline]
syscall(ffff80003c46f810) at syscall+0x9cd sys/arch/amd64/amd64/trap.c:769
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73f45f9ab7e0, count: 243
End of stack trace.
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(ffff80003c475950,9,0) at witness_checkorder+0x1ac sys/kern/subr_witness.c:-1
mtx_enter(ffff80003c475940) at mtx_enter+0x4a sys/kern/kern_lock.c:260
filt_procdetach(fffffd805cddb438) at filt_procdetach+0x4d sys/kern/kern_event.c:432
knote_remove(ffff8000fffee7e0,fffffd806eeebd20,fffffd806eeebdc0,35,1) at knote_remove+0x2db sys/kern/kern_event.c:-1
kqueue_purge(ffff8000fffee7e0,fffffd806eeebd20) at kqueue_purge+0x137 sys/kern/kern_event.c:1890
kqueue_close(fffffd8067c7d180,ffff8000fffee7e0) at kqueue_close+0x48 sys/kern/kern_event.c:1934
fdrop(fffffd8067c7d180,ffff8000fffee7e0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8067c7d180,ffff8000fffee7e0) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff8000fffee7e0) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff8000fffee7e0,0,0,3) at exit1+0x576 sys/kern/kern_exit.c:215
proc_suspend_check_locked(ffff8000fffee7e0,0) at proc_suspend_check_locked+0x2fd sys/kern/kern_sig.c:2235
userret(ffff8000fffee7e0) at userret+0x8c proc_suspend_check sys/kern/kern_sig.c:-1 [inline]
userret(ffff8000fffee7e0) at userret+0x8c sys/kern/kern_sig.c:2194
syscall(ffff80003c46f810) at syscall+0x9cd mi_syscall_return sys/sys/syscall_mi.h:203 [inline]
syscall(ffff80003c46f810) at syscall+0x9cd sys/arch/amd64/amd64/trap.c:769
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73f45f9ab7e0, count: -15
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003c46f270
rbx                                0
rdx                                0
rcx               0xffff8000fffee7e0
rax               0xffff8000299edff0
r8                0xffff80003c46f210
r9                0x8080808080808080
r10               0x9f90e06d9d0ae000
r11               0x25a7fb9c7b600ca7
r12               0xffffffff834730fe    user_filtops+0x6
r13                              0x9
r14               0xffff80003c475950
r15                              0x3
rip               0xffffffff823471f5    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c46f260
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=325267 pid=79579 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=82000<WEXIT,SUSPSINGLE>
    runpri=32, usrpri=81, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff8000fffeefa8 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80003c450038,0xffff8000fffee558
    process=0xffff80002a3d1358 user=0xffff80003c46a000, vmspace=0xfffffd8072f4d9a8
    estcpu=31, cpticks=20, pctcpu=0.2, user=0, sys=16, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 40543  387741  43344      0  3        0x80  fsleep        syz-executor
 40543  163694  43344      0  3   0x4000080  ttyopn        syz-executor
 82097  225734  36147      0  3        0x80  fsleep        syz-executor
 82097  245392  36147      0  3   0x4000080  bell          syz-executor
 82272  419087  86167      0  3        0x80  fsleep        syz-executor
 82272  239918  86167      0  3   0x4000080  ttyin         syz-executor
 50640  493973  83324      0  3        0x80  fsleep        syz-executor
 50640  300533  83324      0  3   0x4000080  semwait       syz-executor
 42341  368450  46117      0  3        0x80  fsleep        syz-executor
 42341  454078  46117      0  3   0x4000080  kqsel         syz-executor
 31984  209624  93650      0  3        0x80  fsleep        syz-executor
 31984  126852  93650      0  3   0x4000080  ttyin         syz-executor
 53197  217080  45009      0  3        0x82  nanoslp       syz-executor
 49043  392542      1      0  3    0x100083  ttyin         getty
 61044   16360      0      0  3     0x14200  bored         sosplice
 36147  317089  45009      0  3        0x82  nanoslp       syz-executor
 86167  127311  45009      0  3        0x82  nanoslp       syz-executor
 65530  359356  45009      0  2         0x2                syz-executor
 83324  366458  45009      0  3        0x82  nanoslp       syz-executor
 46117   60454  45009      0  3        0x82  nanoslp       syz-executor
 93650  227627  45009      0  3        0x82  nanoslp       syz-executor
 43344  120749  45009      0  3        0x82  nanoslp       syz-executor
 45009  417329  74960      0  3        0x82  kqread        syz-executor
 74960  512064  13134      0  3    0x10008a  sigsusp       ksh
 13134   11958  15096      0  3        0x98  kqread        sshd-session
 15096  249751  10347      0  3        0x92  kqread        sshd-session
 10347  341851      1      0  3        0x88  kqread        sshd
 34344  343336  82583     74  3   0x1100092  bpf           pflogd
 82583  358106      1      0  3        0x80  sbwait        pflogd
 23315  112004  68192     73  3   0x1100090  kqread        syslogd
 68192  164481      1      0  3    0x100082  sbwait        syslogd
 92061  234524      1      0  3    0x100080  kqread        resolvd
 33230  394560  25656     77  3    0x100092  kqread        dhcpleased
 93814  235762  25656     77  3    0x100092  kqread        dhcpleased
 25656  219234      1      0  3        0x80  kqread        dhcpleased
 26365  167986      0      0  3     0x14200  bored         smr
 58817   73796      0      0  3     0x14200  pgzero        zerothread
 95005  280954      0      0  3     0x14200  aiodoned      aiodoned
   686  493105      0      0  3     0x14200  syncer        update
  8057  196773      0      0  3     0x14200  cleaner       cleaner
 56902  434730      0      0  3     0x14200  reaper        reaper
 13060  313853      0      0  3     0x14200  pgdaemon      pagedaemon
  6930  257660      0      0  3     0x14200  bored         viomb
 94760  485647      0      0  3  0x40014200  acpi0         acpi0
 41344  490946      0      0  3  0x40014200                idle1
 27387  425229      0      0  3     0x14200  bored         softnet1
 96713  395985      0      0  2     0x14200                softnet0
 32285  487780      0      0  3     0x14200  bored         systqmp
 90358   24878      0      0  3     0x14200  bored         systq
 74383  124754      0      0  3     0x14200  tmoslp        softclockmp
  9318   84990      0      0  3  0x40014200  tmoslp        softclock
 97144  493220      0      0  3  0x40014200                idle0
     1  202339      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 31984 (syz-executor) thread 0xffff8000383fca88 (126852)
exclusive rrwlock inode r = 0 (0xfffffd806e089810)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  spec_open+0x2f2 sys/kern/spec_vnops.c:151
#6  VOP_OPEN+0x8b sys/kern/vfs_vops.c:138
#7  vn_open+0x6a0 sys/kern/vfs_vnops.c:177
#8  vndioctl+0xc42 sys/dev/vnd.c:458
#9  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#10 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#11 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#12 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748
#13 Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10222  11136K   11306K 166960K     11676        0
            pcb    21     13K      14K 166960K       159        0
         rtable   156      8K      11K 166960K       398        0
             pf    38     18K   67485K 166960K       158        0
         ifaddr    35      5K       7K 166960K        85        0
        ifgroup    59      2K       2K 166960K       143        0
         sysctl     4      1K       9K 166960K        24        0
       counters    70     37K      37K 166960K       144        0
       ioctlops     0      0K       4K 166960K      1624        0
            iov     0      0K      28K 166960K        69        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1436     90K      91K 166960K      2050        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        12        0
         VM map     2      1K       1K 166960K         2        0
            sem    18     10K      20K 166960K        37        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      93K 166960K       887        0
          sigio     0      0K       0K 166960K        22        0
           proc    72    115K     164K 166960K       618        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       248        0
       in_multi    66      4K       7K 166960K       143        0
    ether_multi     1      0K       0K 166960K        12        0
            mrt     2      0K       0K 166960K         5        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    97    440K     440K 166960K        97        0
           exec     0      0K       1K 166960K       584        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   229    159K     168K 166960K      9735        0
       UVM aobj    22      2K       2K 166960K        24        0
     pinsyscall    42     84K     102K 166960K      2005        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        32        0
            NDP    13      0K       1K 166960K        56        0
           temp    78   8656K    8728K 166960K     33775        0
         kqueue    17     26K      34K 166960K       188        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      137    0      134     3     2     1     3     0     8    0
rtentry    176      122    0       66     5     0     5     5     0     8    0
unpcb      144      534    0      517     7     6     1     6     0     8    0
syncache   336        6    0        6     2     2     0     1     0     8    0
tcpcb      736      189    0      185     2     1     1     2     0     8    0
arp        136       14    0        6     1     0     1     1     0     8    0
inpcb      328      834    0      821     8     6     2     7     0     8    0
nd6        152       20    0       10     1     0     1     1     0     8    0
pkpcb       40       10    0       10     3     3     0     1     0     8    0
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      24    0       24     3     3     0     1     0     8    0
pppxif     1504       4    0        4     1     1     0     1     0     8    0
pfstscr     40        2    0        2     1     1     0     1     0     8    0
pffrag     232       13    0        4     1     0     1     1     0   482    0
pffrnode    88       11    0        2     1     0     1     1     0     8    0
pffrent     40       29    0       19     1     0     1     1     0     8    0
pfosfp      40     1430    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1430    0      714    21     0    21    21     0     8    0
pfrktable  1344      14    0       14     2     2     0     1     0     8    0
pfanchor   1288       3    0        2     1     0     1     1     0     8    0
pftag       88        2    0        1     1     0     1     1     0     8    0
pfstitem    24       82    0       22     1     0     1     1     0     8    0
pfstkey    128       84    0       24     2     0     2     2     0     8    0
pfstate    384       83    0       23     6     0     6     6     0     8    0
pfrule     1344      28    0       23     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      600    0      297    29     7    22    28     0     8    0
art_table   40      602    0      297     5     0     5     5     0     8    0
art_node    32      122    0       74     1     0     1     1     0     8    0
semupl     112        3    0        3     2     2     0     1     0     8    0
semapl     112       29    0       13     1     0     1     1     0     8    0
shmpl      112       21    0        2     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     3003    0     1495    95     0    95    95     0     8    0
ffsino     296     3003    0     1495   117     0   117   117     0     8    0
nchpl      144     4291    0     2592    64     0    64    64     0     8    0
rtmask      32        4    0        4     3     3     0     1     0     8    0
vnodes     216     3455    0        0   192     0   192   192     0     8    0
namei      1024   14045    0    14045     6     5     1     3     0     8    1
percpumem   16       87    0       37     1     0     1     1     0     8    0
pfiaddrpl  120        3    0        3     1     1     0     1     0     8    0
kstatmem   264       82    0       50     5     2     3     3     0     8    0
scsiplug    72        4    0        4     4     4     0     1     0     8    0
scxspl     216    29563    0    29563    18    17     1     8     1     8    1
plimitpl   152      297    0      278     1     0     1     1     0     8    0
sigapl     424     1211    0     1162     8     1     7     8     0     8    0
knotepl    120      541    0        0    17     0    17    17     0     8    0
kqueuepl   224      330    0      315     4     2     2     3     0     8    0
pipepl     344      184    0      157     3     0     3     3     0     8    0
fdescpl    528     1168    0     1137     3     0     3     3     0     8    0
filepl     160     6792    0     6564    23    13    10    15     0     8    0
lockfpl    104      283    0      281     1     0     1     1     0     8    0
lockfspl    48      117    0      115     1     0     1     1     0     8    0
sessionpl  144       26    0       17     1     0     1     1     0     8    0
pgrppl      48       49    0       32     1     0     1     1     0     8    0
ucredpl    104     1175    0     1161     1     0     1     1     0     8    0
zombiepl   144     1299    0     1297     3     2     1     1     0     8    0
processpl  1232    1211    0     1162     6     2     4     6     0     8    0
procpl     664     2469    0     2414     8     2     6     8     0     8    0
sosppl     168        7    0        7     3     3     0     1     0     8    0
sockpl     752     1537    0     1503    25    21     4    17     0     8    0
mcl64k     65536     17    0        0     3     0     3     3     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     132    0        0    17     0    17    17     0     8    0
mcl2k      2048      29    0        0     4     0     4     4     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      332    0        0    18     0    18    18     0     8    0
bufpl      280    13026    0     6883   440     1   439   440     0     8    0
anonpl      32    11822    0        0    96     0    96    96     0   246    0
amapchunkpl 152   32136    0    31670    41    19    22    26     0   158    0
amappl16   200     5286    0     5224    66    53    13    28     0     8    0
amappl15   192        8    0        8     2     2     0     1     0     8    0
amappl14   184      118    0      106     1     0     1     1     0     8    0
amappl13   176        8    0        8     2     2     0     1     0     8    0
amappl12   168     1825    0     1794     3     1     2     2     0     8    0
amappl11   160       51    0       37     1     0     1     1     0     8    0
amappl10   152        5    0        5     1     1     0     1     0     8    0
amappl9    144      267    0      267     1     1     0     1     0     8    0
amappl8    136       22    0       20     1     0     1     1     0     8    0
amappl7    128      108    0       95     1     0     1     1     0     8    0
amappl6    120      188    0      185     1     0     1     1     0     8    0
amappl5    112      128    0      118     1     0     1     1     0     8    0
amappl4    104      308    0      288     1     0     1     1     0     8    0
amappl3     96     5561    0     5468     3     0     3     3     0     8    0
amappl2     88     1414    0     1332     2     0     2     2     0     8    0
amappl1     80    11743    0    11148    14     0    14    14     0     8    0
amappl      88     8916    0     8759     5     0     5     5     0    92    0
uvmvnodes   80     3455    0        0    71     0    71    71     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       23    0        2     1     0     1     1     0     8    0
uaddrrnd    24     1168    0     1137     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1168    0     1137     1     0     1     1     0     8    0
vmmpekpl   168    10889    0    10843     4     1     3     3     0     8    0
vmmpepl    168    79885    0    77884   143    42   101   110     0   357    0
vmsppl     488     1167    0     1136     6     2     4     5     0     8    0
rwobjpl     80    27511    0    23086   103     7    96    96     0     8    0
pdppl      4096    2343    0     2272    99    28    71    85     0     8    0
pvpl        32    20587    0        0   167     0   167   167     0   265    0
pmappl     256     1167    0     1136     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      289    0       46     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff83876ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83937158) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83937158) at __mp_lock+0x192 sys/kern/kern_lock.c:165
intr_handler(ffff8000333eba00,ffff80000006ac00) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff83937158) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83937158) at __mp_lock+0x192 sys/kern/kern_lock.c:165
softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff83937158) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83937158) at __mp_lock+0x192 sys/kern/kern_lock.c:165
exit1(ffff8000383fd4e8,0,0,1) at exit1+0x701 sys/kern/kern_exit.c:260
sys_exit(ffff8000383fd4e8,ffff8000333ebe10,ffff8000333ebd60) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff8000333ebe10) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000333ebe10) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x716503ce1d10, count: -15
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(ffff80003c475950,9,0) at witness_checkorder+0x1ac sys/kern/subr_witness.c:-1
mtx_enter(ffff80003c475940) at mtx_enter+0x4a sys/kern/kern_lock.c:260
filt_procdetach(fffffd805cddb438) at filt_procdetach+0x4d sys/kern/kern_event.c:432
knote_remove(ffff8000fffee7e0,fffffd806eeebd20,fffffd806eeebdc0,35,1) at knote_remove+0x2db sys/kern/kern_event.c:-1
kqueue_purge(ffff8000fffee7e0,fffffd806eeebd20) at kqueue_purge+0x137 sys/kern/kern_event.c:1890
kqueue_close(fffffd8067c7d180,ffff8000fffee7e0) at kqueue_close+0x48 sys/kern/kern_event.c:1934
fdrop(fffffd8067c7d180,ffff8000fffee7e0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8067c7d180,ffff8000fffee7e0) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff8000fffee7e0) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff8000fffee7e0,0,0,3) at exit1+0x576 sys/kern/kern_exit.c:215
proc_suspend_check_locked(ffff8000fffee7e0,0) at proc_suspend_check_locked+0x2fd sys/kern/kern_sig.c:2235
userret(ffff8000fffee7e0) at userret+0x8c proc_suspend_check sys/kern/kern_sig.c:-1 [inline]
userret(ffff8000fffee7e0) at userret+0x8c sys/kern/kern_sig.c:2194
syscall(ffff80003c46f810) at syscall+0x9cd mi_syscall_return sys/sys/syscall_mi.h:203 [inline]
syscall(ffff80003c46f810) at syscall+0x9cd sys/arch/amd64/amd64/trap.c:769
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73f45f9ab7e0, count: -15

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/26 23:24 openbsd 0383cd21a234 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore witness: lock_object uninitialized: ADDR
* Struck through repros no longer work on HEAD.