syzbot


panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s

Status: closed as invalid on 2022/03/22 11:46
Reported-by: syzbot+96e051313bb6dc88aa71@syzkaller.appspotmail.com
First crash: 763d, last: 763d

Sample crash report:
panic: acquiringp abnlioc:c k ab  l e   sl  e e p   lo  c k   w it  h  s p i n l  oc k    o  rk er  n e l   d i  agn o s  ti c  a  s s e r  t i on   " !  _k e r ne  l_  l o c k _ h e ld ( )  "  f a i l  ed  :  f  i le    " / sy z k  al  l er /  ma  na  g e rs  / mu  l t i c or e /k e r n el  / s  ys / u  v m  /u  v m _m a  p.  c" ,  l  i n e   2 7 3 4 
  Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*332442  65397      0     0x14000      0x200    1  reaper
 217452  85701      0     0x14000      0x200    0  softnet
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff8258f849) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff826021d1,ffffffff826102ef,aae,ffffffff825c283e) at __assert+0x25 sys/kern/subr_prf.c:161
uvm_map_teardown(fffffd80679b3300) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2736
uvmspace_free(fffffd80679b3300) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685
reaper(ffff8000210f9a40) at reaper+0x18b sys/kern/kern_exit.c:457
end trace frame: 0x0, count: 9
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_map.c", line 2734
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff8258f849) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff826021d1,ffffffff826102ef,aae,ffffffff825c283e) at __assert+0x25 sys/kern/subr_prf.c:161
uvm_map_teardown(fffffd80679b3300) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2736
uvmspace_free(fffffd80679b3300) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685
reaper(ffff8000210f9a40) at reaper+0x18b sys/kern/kern_exit.c:457
end trace frame: 0x0, count: -6
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000211354c0
rbx               0xffff800020ce9bff
rdx                                0
rcx                                0
rax               0xffff8000210f9a40
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x8953828654c78334
r11               0x9f77bbaea2fec56c
r12               0xffff800020ce9a00
r13                                0
r14               0xffffffff8294ea00    cpu_info_full_primary+0x2a00
r15                              0x1
rip               0xffffffff81f18858    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff8000211354b0
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (reaper) pid=332442 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    pri=4, usrpri=64, nice=20
    forw=0xffffffffffffffff, list=0xffff8000210f97a0,0xffff8000210f9cf0
    process=0xffff8000ffffc428 user=0xffff800021130000, vmspace=0xffffffff829d33f8
    estcpu=14, cpticks=15, pctcpu=1.85
    user=0, sys=4, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 39383  467910  88187      0  2           0                syz-executor.1
 39383  155302  88187      0  2   0x4000000                syz-executor.1
 19136  293515  80623      0  3         0x2  biowait       syz-executor.4
 20090  388064      1      0  3    0x100083  ttyin         getty
 85470  299690  80623      0  3        0x82  nanoslp       syz-executor.0
 73801  321834      0      0  3     0x14280  nfsidl        nfsio
 95297  503932      0      0  3     0x14280  nfsidl        nfsio
 14351  460054      0      0  3     0x14280  nfsidl        nfsio
 86137  464602      0      0  3     0x14280  nfsidl        nfsio
 67141  357979      0      0  3     0x14280  nfsidl        nfsio
 44051  414168      0      0  3     0x14280  nfsidl        nfsio
 76542  130589      0      0  3     0x14280  nfsidl        nfsio
 81722  403902      0      0  3     0x14280  nfsidl        nfsio
 57394  206707      0      0  3     0x14280  nfsidl        nfsio
 44757  335428      0      0  3     0x14280  nfsidl        nfsio
 71036  174916      0      0  3     0x14280  nfsidl        nfsio
 91420  435478      0      0  3     0x14280  nfsidl        nfsio
 36838  264433      0      0  3     0x14280  nfsidl        nfsio
 12228  261275      0      0  3     0x14280  nfsidl        nfsio
 32070  433832      0      0  3     0x14280  nfsidl        nfsio
 70906  110599      0      0  3     0x14280  nfsidl        nfsio
 37478  236499      0      0  3     0x14280  nfsidl        nfsio
 67970  164692      0      0  3     0x14280  nfsidl        nfsio
 18741  117567      0      0  3     0x14280  nfsidl        nfsio
 13288   46992      0      0  3     0x14280  nfsidl        nfsio
 58246  209629      0      0  3     0x14200  bored         sosplice
 38815  254021  80623      0  3        0x82  piperd        syz-executor.7
 85721   36800  80623      0  3         0x2  biowait       syz-executor.6
 81864  516549  80623      0  3        0x82  nanoslp       syz-executor.5
 15812  259620  80623      0  2       0x482                syz-executor.3
 14281  519749  80623      0  3        0x82  nanoslp       syz-executor.2
 88187  341237  80623      0  3        0x82  nanoslp       syz-executor.1
 80623  431168  17807      0  3        0x82  thrsleep      syz-fuzzer
 80623  503274  17807      0  3   0x4000082  nanoslp       syz-fuzzer
 80623  515342  17807      0  3   0x4000082  kqread        syz-fuzzer
 80623  354125  17807      0  3   0x4000082  thrsleep      syz-fuzzer
 80623  249579  17807      0  3   0x4000082  thrsleep      syz-fuzzer
 80623   87747  17807      0  3   0x4000082  thrsleep      syz-fuzzer
 80623  259953  17807      0  3   0x4000082  thrsleep      syz-fuzzer
 80623    4628  17807      0  3   0x4000082  nanoslp       syz-fuzzer
 80623  213676  17807      0  3   0x4000082  thrsleep      syz-fuzzer
 17807  200653  15314      0  3    0x10008a  sigsusp       ksh
 15314  253230  44305      0  3        0x9a  kqread        sshd
 44305  474850      1      0  3        0x88  kqread        sshd
 26410  227466  80613     74  3   0x1100092  bpf           pflogd
 80613  301637      1      0  3        0x80  netio         pflogd
 11590   18168  54428     73  3   0x1100090  kqread        syslogd
 54428  390334      1      0  3    0x100082  netio         syslogd
 55710  488520      1      0  3    0x100080  kqread        resolvd
  5434  316426  32356     77  3    0x100092  kqread        dhcpleased
 82189  101642  32356     77  3    0x100092  kqread        dhcpleased
 32356   41519      1      0  3        0x80  kqread        dhcpleased
 72868  325222      0      0  3     0x14200  bored         smr
 11374  166256      0      0  2     0x14200                zerothread
 91070  368580      0      0  3     0x14200  aiodoned      aiodoned
 11812  229976      0      0  3     0x14200  syncer        update
  1262    1010      0      0  3     0x14200  cleaner       cleaner
*65397  332442      0      0  7     0x14200                reaper
 40331  511340      0      0  3     0x14200  pgdaemon      pagedaemon
 23052  472765      0      0  3     0x14200  bored         viomb
 48840  103392      0      0  3  0x40014200  acpi0         acpi0
 77544  232077      0      0  3  0x40014200                idle1
 85701  217452      0      0  7     0x14200                softnet
 89410   47166      0      0  3     0x14200  bored         systqmp
 95084  362224      0      0  3     0x14200  bored         systq
 96142  501523      0      0  3  0x40014200  bored         softclock
 84644   21355      0      0  3  0x40014200                idle0
     1  171276      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &table->inpt_mtx r = 0 (0xffffffff82a900b0)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  rip6_input+0x1cf
#4  icmp6_input+0x8e8 sys/netinet6/icmp6.c:762
#5  ip_deliver+0x322 sys/netinet/ip_input.c:657
#6  ip6_input_if+0xe95
#7  ipv6_input+0x48 sys/netinet6/ip6_input.c:169
#8  if_input_local+0x136 sys/net/if.c:778
#9  loinput+0x4c sys/net/if_loop.c:238
#10 if_input_process+0xd2 sys/net/if.c:843
#11 ifiq_process+0x80 sys/net/ifq.c:773
#12 taskq_thread+0xe5 sys/kern/kern_task.c:449
#13 proc_trampoline+0x1c
CPU 1:
exclusive mutex vmmpepl r = 0 (0xffffffff82b4b730)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pool_put+0x8a sys/kern/subr_pool.c:799
#4  uvm_unmap_detach+0xee sys/uvm/uvm_map.c:1596
#5  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789
#6  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685
#7  reaper+0x18b sys/kern/kern_exit.c:457
#8  proc_trampoline+0x1c
Process 19136 (syz-executor.4) thread 0xffff8000ffff62b0 (293515)
exclusive rrwlock inode r = 0 (0xfffffd80776bc0a8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3101
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806f6c73d0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3086
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 85721 (syz-executor.6) thread 0xffff8000260c6548 (36800)
exclusive rrwlock inode r = 0 (0xfffffd80776bc708)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  uvm_vnp_uncache+0x112 sys/uvm/uvm_vnode.c:1384
#6  dounlinkat+0xf2 sys/kern/vfs_syscalls.c:1886
#7  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#7  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#8  Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80776bc3d8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vget+0x1d3 sys/kern/vfs_subr.c:677
#6  cache_lookup+0x2b4 sys/kern/vfs_cache.c:224
#7  ufs_lookup+0x1ac sys/ufs/ufs/ufs_lookup.c:162
#8  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561
#10 namei+0x36a sys/kern/vfs_lookup.c:245
#11 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1850
#12 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#12 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#13 Xsyscall+0x128
Process 85701 (softnet) thread 0xffff8000210f87e0 (217452)
exclusive rwlock netlock r = 0 (0xffffffff828f7720)
#0  witness_lock+0x44d
#1  if_input_process+0xa1 sys/net/if.c:843
#2  ifiq_process+0x80 sys/net/ifq.c:773
#3  taskq_thread+0xe5 sys/kern/kern_task.c:449
#4  proc_trampoline+0x1c
shared rwlock softnet r = 0 (0xffff80000002c070)
#0  witness_lock+0x44d
#1  taskq_thread+0xca sys/kern/kern_task.c:445
#2  proc_trampoline+0x1c
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10199   6558K    6877K  78643K     14250        0
            pcb    15     15K      16K  78643K       295        0
         rtable   244     11K      12K  78643K       779        0
         ifaddr    98     20K      21K  78643K       724        0
         sysctl     2      0K       0K  78643K         5        0
       counters    56     35K      35K  78643K        96        0
       ioctlops     0      0K       4K  78643K      2667        0
            iov     0      0K      16K  78643K       255        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         5        0
         vnodes  1299     81K      82K  78643K      2187        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        19        0
         VM map     2      1K       1K  78643K         2        0
            sem    29      3K       5K  78643K       285        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    11     37K      81K  78643K      3614        0
          sigio     0      0K       0K  78643K        10        0
           proc    70     87K     111K  78643K       687        0
        subproc   104      6K       6K  78643K       143        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        51        0
       in_multi    96      6K       6K  78643K       195        0
    ether_multi     1      0K       0K  78643K        22        0
            mrt     2      0K       0K  78643K        16        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   157    705K     705K  78643K       157        0
           exec     0      0K       2K  78643K       882        0
     pfkey data     0      0K       0K  78643K         5        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   347    218K     220K  78643K     48012        0
       UVM aobj    62      6K       6K  78643K        65        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       161        0
            NDP    13      0K       1K  78643K        59        0
           temp   138   4719K    4843K  78643K     24313        0
         kqueue    12     18K      26K  78643K       175        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      129    0      126     2     1     1     2     0     8    0
rtentry    112      210    0      105     4     0     4     4     0     8    0
unpcb      136     6766    0     6748    41    38     3     9     0     8    2
syncache   296       16    0       16     5     5     0     1     0     8    0
tcpqe       32       66    0       66     3     3     0     1     0     8    0
tcpcb      736      885    0      879    50    46     4    19     0     8    3
arp        120       28    0        9     1     0     1     1     0     8    0
inpcb      312     7594    0     7581    62    56     6    12     0     8    5
rttmr       72        2    0        2     1     1     0     1     0     8    0
nd6         48       38    0       14     1     0     1     1     0     8    0
pkpcb       40       15    0       15     2     2     0     1     0     8    0
kcovpl      48       11    0        3     1     0     1     1     0     8    0
ppxss      1248       4    0        4     2     2     0     1     0     8    0
pfstscr     40        3    0        3     1     1     0     1     0     8    0
pffrag     232        8    0        8     1     1     0     1     0   482    0
pffrnode    88        8    0        8     1     1     0     1     0     8    0
pffrent     40       64    0       64     2     2     0     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344      39    0       34     1     0     1     1     0     8    0
pftag       88        5    0        2     1     0     1     1     0     8    0
pfstitem    24       50    0       48     1     0     1     1     0     8    0
pfstkey    112       60    0       58     2     1     1     2     0     8    0
pfstate    320       55    0       53     4     3     1     4     0     8    0
pfrule     1360     247    0      210     8     4     4     4     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      886    0      458    33     4    29    30     0     8    0
art_table   32      887    0      458     4     0     4     4     0     8    0
art_node    16      206    0      114     1     0     1     1     0     8    0
sysvmsgpl   40       39    0       36     1     0     1     1     0     8    0
semapl     112      277    0      250     1     0     1     1     0     8    0
shmpl      112       62    0        3     2     0     2     2     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     5712    0     4270    91     0    91    91     0     8    0
ffsino     272     5712    0     4270    97     0    97    97     0     8    0
nchpl      144    10395    0     8766    63     0    63    63     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     224     5926    0        0   349     0   349   349     0     8    0
namei      1024   32515    0    32514     5     4     1     2     0     8    0
percpumem   16       60    0       20     1     0     1     1     0     8    0
vcpupl     2048      11    0        0     2     0     2     2     0     8    0
vmpool     560       16    0        5     2     1     1     1     0     8    0
pfiaddrpl  120       18    0        8     2     1     1     1     0     8    0
scxspl     216    33746    0    33744    17    14     3     8     0     8    2
plimitpl   152      261    0      245     1     0     1     1     0     8    0
sigapl     424     3931    0     3868     8     0     8     8     0     8    0
futexpl     64    32897    0    32897     6     5     1     1     0     8    1
knotepl    120      488    0        0    12     1    11    11     0     8    0
kqueuepl   216      686    0      678    12    11     1     5     0     8    0
pipepl     336      636    0      608    26    23     3     8     0     8    0
fdescpl    496     3896    0     3872     5     0     5     5     0     8    0
filepl     152    28799    0    28551    81    66    15    25     0     8    5
lockfpl    104      628    0      626     1     0     1     1     0     8    0
lockfspl    48      254    0      252     1     0     1     1     0     8    0
sessionpl  144       28    0       11     1     0     1     1     0     8    0
pgrppl      48      103    0       86     1     0     1     1     0     8    0
ucredpl     96     1997    0     1985     1     0     1     1     0     8    0
zombiepl   144     3872    0     3868     1     0     1     1     0     8    0
processpl  1064    3931    0     3868     5     0     5     5     0     8    0
procpl     672    10855    0    10780    12     3     9     9     0     8    1
srpgc       96        6    0        6     2     2     0     1     0     8    0
sosppl     168       28    0       28     4     4     0     1     0     8    0
sockpl     480    14504    0    14470   359   346    13    35     0     8    7
mcl64k     65536     25    0        0     3     0     3     3     0     8    0
mcl16k     16384     12    0        0     2     0     2     2     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216      17    0        0     2     0     2     2     0     8    0
mcl8k      8192      25    0        0     3     0     3     3     0     8    0
mcl4k      4096      17    0        0     3     0     3     3     0     8    0
mcl2k2     2112       5    0        0     1     0     1     1     0     8    0
mcl2k      2048     258    0        0    19     2    17    19     0     8    0
mtagpl      96      407    0        0     9     0     9     9     0     8    0
mbufpl     256      831    0        0    48     2    46    46     0     8    0
bufpl      288     8614    0     2278   453     0   453   453     0     8    0
anonpl      24  1152360    0  1132549   300   124   176   199     0   186   45
amapchunkpl 152  117654    0   116852    78    38    40    66     0   158    4
amappl16   200    12777    0    12143   122    80    42    60     0     8    8
amappl15   192      530    0      524     1     0     1     1     0     8    0
amappl14   184       46    0       41     1     0     1     1     0     8    0
amappl13   176      544    0      538     1     0     1     1     0     8    0
amappl12   168     1015    0     1009     1     0     1     1     0     8    0
amappl11   160      522    0      507     1     0     1     1     0     8    0
amappl10   152      506    0      500     1     0     1     1     0     8    0
amappl9    144      475    0      473     1     0     1     1     0     8    0
amappl8    136     1346    0     1272     3     0     3     3     0     8    0
amappl7    128      782    0      768     1     0     1     1     0     8    0
amappl6    120      217    0      194     2     1     1     2     0     8    0
amappl5    112     2494    0     2479     1     0     1     1     0     8    0
amappl4    104     1904    0     1870     2     1     1     2     0     8    0
amappl3     96     1814    0     1798     1     0     1     1     0     8    0
amappl2     88     2030    0     1977     3     1     2     3     0     8    0
amappl1     80    73464    0    72924    21     7    14    19     0     8    0
amappl      88    47424    0    47187     7     0     7     7     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       64    0        3     2     0     2     2     0     8    0
uaddrrnd    24     3912    0     3875     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3912    0     3875     1     0     1     1     0     8    0
vmmpekpl   168    34055    0    33999     3     0     3     3     0     8    0
vmmpepl    168   356854    0   354425   191    49   142   143     0   357   21
vmsppl     368     3911    0     3875     5     1     4     4     0     8    0
rwobjpl     56    95601    0    87996   120     4   116   116     0     8    6
pdppl      4096    7831    0     7761   215   135    80    80     0     8   10
pvpl        32  1962703    0  1939729   477   211   266   332     0   265   63
pmappl     248     3911    0     3875     4     1     3     3     0     8    0
extentpl    40       58    0       38     1     0     1     1     0     8    0
phpool     112     1132    0      279    25     0    25    25     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8294dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_write_1(3f8,0,20) at x86_bus_space_io_write_1+0x31 sys/arch/amd64/amd64/bus_space.c:759
comcnputc(800,20) at comcnputc+0x128 bus_space_barrier machine/bus.h:481 [inline]
comcnputc(800,20) at comcnputc+0x128 sys/dev/ic/com.c:1263
cnputc(20) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(63) at db_putchar+0x34a db_force_whitespace sys/ddb/db_output.c:96 [inline]
db_putchar(63) at db_putchar+0x34a sys/ddb/db_output.c:153
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff82608896) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff825a56b6) at panic+0xd7 sys/kern/subr_prf.c:220
witness_checkorder(ffffffff82b47030,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline]
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline]
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 sys/kern/kern_lock.c:142
selwakeup(fffffd8076b23340) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline]
selwakeup(fffffd8076b23340) at selwakeup+0x16 sys/kern/sys_generic.c:885
sorwakeup(fffffd8076b23228) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699
end trace frame: 0xffff800021117800, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff8294dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_write_1(3f8,0,20) at x86_bus_space_io_write_1+0x31 sys/arch/amd64/amd64/bus_space.c:759
comcnputc(800,20) at comcnputc+0x128 bus_space_barrier machine/bus.h:481 [inline]
comcnputc(800,20) at comcnputc+0x128 sys/dev/ic/com.c:1263
cnputc(20) at cnputc+0x4b sys/dev/cons.c:239
db_putchar(63) at db_putchar+0x34a db_force_whitespace sys/ddb/db_output.c:96 [inline]
db_putchar(63) at db_putchar+0x34a sys/ddb/db_output.c:153
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
db_printf(ffffffff82608896) at db_printf+0x85 sys/kern/subr_prf.c:502
panic(ffffffff825a56b6) at panic+0xd7 sys/kern/subr_prf.c:220
witness_checkorder(ffffffff82b47030,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline]
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline]
__mp_lock(ffffffff82b46e28) at __mp_lock+0xa1 sys/kern/kern_lock.c:142
selwakeup(fffffd8076b23340) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline]
selwakeup(fffffd8076b23340) at selwakeup+0x16 sys/kern/sys_generic.c:885
sorwakeup(fffffd8076b23228) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699
rip6_input(ffff800021117b08,ffff800021117b14,3a,18) at rip6_input+0x692 sys/netinet6/raw_ip6.c:224
icmp6_input(ffff800021117b08,ffff800021117b14,3a,18) at icmp6_input+0x8e8 sys/netinet6/icmp6.c:762
ip_deliver(ffff800021117b08,ffff800021117b14,3a,18) at ip_deliver+0x322 sys/netinet/ip_input.c:657
ip6_input_if(ffff800021117b08,ffff800021117b14,29,0,ffff800000689000) at ip6_input_if+0xe95
ipv6_input(ffff800000689000,fffffd80680c7800) at ipv6_input+0x48 sys/netinet6/ip6_input.c:169
if_input_local(ffff800000689000,fffffd80680c7800,18) at if_input_local+0x136 sys/net/if.c:778
loinput(ffff800000689000,fffffd80680c7800) at loinput+0x4c sys/net/if_loop.c:238
if_input_process(ffff800000689000,ffff800021117c48) at if_input_process+0xd2 sys/net/if.c:843
ifiq_process(ffff800000689450) at ifiq_process+0x80 sys/net/ifq.c:773
taskq_thread(ffff80000002c000) at taskq_thread+0xe5 sys/kern/kern_task.c:449
end trace frame: 0x0, count: -24
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff8258f849) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff826021d1,ffffffff826102ef,aae,ffffffff825c283e) at __assert+0x25 sys/kern/subr_prf.c:161
uvm_map_teardown(fffffd80679b3300) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2736
uvmspace_free(fffffd80679b3300) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685
reaper(ffff8000210f9a40) at reaper+0x18b sys/kern/kern_exit.c:457
end trace frame: 0x0, count: 9
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440
panic(ffffffff8258f849) at panic+0x177 sys/kern/subr_prf.c:202
__assert(ffffffff826021d1,ffffffff826102ef,aae,ffffffff825c283e) at __assert+0x25 sys/kern/subr_prf.c:161
uvm_map_teardown(fffffd80679b3300) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2736
uvmspace_free(fffffd80679b3300) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685
reaper(ffff8000210f9a40) at reaper+0x18b sys/kern/kern_exit.c:457
end trace frame: 0x0, count: -6

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/21 22:13 openbsd 4ff57d1d979c e2d91b1d .config console log report ci-openbsd-multicore panic: acquiringp abnlioc:c k ab l e sl e e p lo c k w it h s p i n l oc k o rk er n e l d i agn o s
* Struck through repros no longer work on HEAD.