panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (8)

Status: auto-obsoleted due to no activity on 2024/08/09 07:23
Reported-by: syzbot+fd5475642a67affbc6ea@syzkaller.appspotmail.com
First crash: 843d, last: 830d
▶ ▼ Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (5) 2 syz, C 104 1616d never 3/4 fixed on 2022/03/22 22:28
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (9) 2 9 3d07h 59d 0/4 upstream: reported on 2026/06/27 04:34
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (3) 2 syz, C 2 1814d 1818d 3/4 fixed on 2021/09/07 20:47
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (4) 2 syz, C 249 1616d 1617d 3/4 fixed on 2022/03/22 10:24
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock 2 33 2555d 2559d 3/4 fixed on 2019/08/27 19:45
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (2) 2 syz, C 152 1819d 2539d 3/4 fixed on 2021/09/01 16:54
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (6) 2 syz, C 80 1615d 1616d 3/4 fixed on 2022/03/24 08:53
openbsd panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock (7) 2 syz 9 1332d 1348d 3/4 fixed on 2023/01/12 22:01
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2024/08/09 06:51 15m retest repro openbsd no crash log
2024/08/09 06:51 15m retest repro openbsd no crash log
2024/08/09 05:29 14m retest repro openbsd no crash log
2024/08/09 05:29 15m retest repro openbsd no crash log
2024/08/09 05:29 15m retest repro openbsd no crash log
2024/08/09 05:29 16m retest repro openbsd no crash log
2024/08/09 05:29 15m retest repro openbsd no crash log
2024/08/09 03:55 17m retest repro openbsd no crash log
2024/08/09 03:55 17m retest repro openbsd no crash log
2024/08/09 03:55 17m retest repro openbsd no crash log

Sample crash report:
panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 171324  31413      0   0x8000000          0    1  syz-executor678612132
*366167  31413      0   0x8000000  0x4000000    0  syz-executor678612132
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828e8ed0) at panic+0x17b sys/kern/subr_prf.c:198
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 witness_debugger sys/kern/subr_witness.c:2524 [inline]
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 sys/kern/subr_witness.c:786
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 read_rflags machine/cpufunc.h:195 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 intr_disable machine/cpufunc.h:216 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 sys/kern/kern_lock.c:142
intr_handler(ffff80002a269ea0,ffff80000006bc00) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:539
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
mtx_enter_try(ffffffff82e760e0) at mtx_enter_try+0x103
mtx_enter(ffffffff82e760e0) at mtx_enter+0x4e sys/kern/kern_lock.c:266
pool_get(ffffffff82e760e0,9) at pool_get+0xc4 sys/kern/subr_pool.c:579
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279
vm_impl_init(ffff8000ffff15c0,ffff80002a1bf208) at vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1245
vm_create(ffff800000da8000,ffff80002a1bf208) at vm_create+0x13e sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff800000da8000,1,ffff80002a1bf208) at vmmioctl+0x2de
end trace frame: 0xffff80002a26a360, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828e8ed0) at panic+0x17b sys/kern/subr_prf.c:198
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 witness_debugger sys/kern/subr_witness.c:2524 [inline]
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 sys/kern/subr_witness.c:786
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 read_rflags machine/cpufunc.h:195 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 intr_disable machine/cpufunc.h:216 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 sys/kern/kern_lock.c:142
intr_handler(ffff80002a269ea0,ffff80000006bc00) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:539
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
mtx_enter_try(ffffffff82e760e0) at mtx_enter_try+0x103
mtx_enter(ffffffff82e760e0) at mtx_enter+0x4e sys/kern/kern_lock.c:266
pool_get(ffffffff82e760e0,9) at pool_get+0xc4 sys/kern/subr_pool.c:579
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279
vm_impl_init(ffff8000ffff15c0,ffff80002a1bf208) at vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1245
vm_create(ffff800000da8000,ffff80002a1bf208) at vm_create+0x13e sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff800000da8000,1,ffff80002a1bf208) at vmmioctl+0x2de
VOP_IOCTL(fffffd806e3c9440,c2585601,ffff800000da8000,1,fffffd807f7d3958,ffff80002a1bf208) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806e3d5600,c2585601,ffff800000da8000,ffff80002a1bf208) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff80002a1bf208,ffff80002a26a660,ffff80002a26a5b0) at sys_ioctl+0x4a9
syscall(ffff80002a26a660) at syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002a26a660) at syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6a47bac2180, count: -19
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a269c90
rbx               0xffffffff82c77d77    cpu_info_full_primary+0x2d77
rdx                            0x3fd
rcx                                0
rax                             0x68
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x78a1a00fb21fedff
r11               0xc86a955244e5a823
r12               0xffffffff82c77b78    cpu_info_full_primary+0x2b78
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81479b6c    db_enter+0x1c
cs                               0x8
rflags                         0x246
rsp               0xffff80002a269c80
ss                              0x10
db_enter+0x1c:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor678612132) tid=366167 pid=31413 tcnt=2 stat=onproc
    flags process=8000000 proc=4000000<THREAD>
    runpri=32, usrpri=73, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff80002a1bf728,0xffff80002a1bef88
    process=0xffff8000ffff4018 user=0xffff80002a265000, vmspace=0xfffffd806cd8f540
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=1
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 76965  251933  79698      0  2   0x8000000                syz-executor678612132
 24619   50152  39621      0  2   0x8000000                syz-executor678612132
 24619  151385  39621      0  2   0xc000000                syz-executor678612132
 31413  171324   7832      0  7   0x8000000                syz-executor678612132
*31413  366167   7832      0  7   0xc000000                syz-executor678612132
 67902  472785  79028      0  2   0x8000000                syz-executor678612132
 67902  120698  79028      0  2   0xc000000                syz-executor678612132
 28776  134653  66208      0  2   0x8000000                syz-executor678612132
 28776  472274  66208      0  3   0xc000080  fsleep        syz-executor678612132
 83398  210095  36008      0  2   0x8000000                syz-executor678612132
 83398  453149  36008      0  3   0xc000080  fsleep        syz-executor678612132
 65836  412354  57667      0  2   0x8000000                syz-executor678612132
 65836   51312  57667      0  3   0xc000080  fsleep        syz-executor678612132
 31509  104141  21128      0  3   0x8000080  nanoslp       syz-executor678612132
 31509  409678  21128      0  2   0xc000000                syz-executor678612132
 36008  489935  14313      0  2   0x8000000                syz-executor678612132
 79698  374895  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 39621   36611  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 21128  161587  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 57667   62983  14313      0  3   0x8000080  nanoslp       syz-executor678612132
  7832  347439  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 79028    1641  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 66208   17986  14313      0  3   0x8000080  nanoslp       syz-executor678612132
 14313   38857  57462      0  3   0x8000082  nanoslp       syz-executor678612132
 57462   86947  25996      0  3   0x810008a  sigsusp       ksh
 25996  314380  47587      0  3  0x1800009a  kqread        sshd
 28218  505973      1      0  3  0x18100083  ttyin         getty
 47587  441971      1      0  3  0x18000088  kqread        sshd
 98846   28643  62125     73  3  0x19100010  biowait       syslogd
 62125  412081      1      0  3  0x18100082  sbwait        syslogd
 13038  195782      1      0  3  0x18100080  kqread        resolvd
  8314  483528  65981     77  3  0x18100092  kqread        dhcpleased
 88783  310397  65981     77  3  0x18100092  kqread        dhcpleased
 65981  440587      1      0  3  0x18000080  kqread        dhcpleased
 54709  219492      0      0  3     0x14200  bored         smr
 28138   94900      0      0  2     0x14200                zerothread
 35928  507206      0      0  3     0x14200  aiodoned      aiodoned
 17583   80492      0      0  3     0x14200  syncer        update
 42340  510055      0      0  3     0x14200  cleaner       cleaner
  1142  479444      0      0  3     0x14200  reaper        reaper
 23558  206363      0      0  3     0x14200  pgdaemon      pagedaemon
 16115  340917      0      0  3     0x14200  bored         viomb
 99646  488729      0      0  3  0x40014200  acpi0         acpi0
 39215  282822      0      0  3  0x40014200                idle1
 15468  227635      0      0  3     0x14200  bored         softnet3
 62268  202443      0      0  3     0x14200  bored         softnet2
 12007  194729      0      0  3     0x14200  bored         softnet1
 32568  145775      0      0  3     0x14200  bored         softnet0
 12828  357039      0      0  3     0x14200  bored         systqmp
 39539  405416      0      0  3     0x14200  bored         systq
 66663  338164      0      0  3     0x14200  tmoslp        softclockmp
  7238  363821      0      0  3  0x40014200  tmoslp        softclock
   886  474012      0      0  3  0x40014200                idle0
     1  242861      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex vmsppl r = 0 (0xffffffff82e760f0)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1157
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pool_get+0xc4 sys/kern/subr_pool.c:579
#4  uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279
#5  vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1245
#6  vm_create+0x13e sys/dev/vmm/vmm.c:388
#7  vmmioctl+0x2de
#8  VOP_IOCTL+0x9a sys/kern/vfs_vops.c:264
#9  vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525
#10 sys_ioctl+0x4a9
#11 syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
#11 syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
#12 Xsyscall+0x128
Process 98846 (syslogd) thread 0xffff8000ffffd720 (28643)
exclusive rrwlock inode r = 0 (0xfffffd806e7590a0)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1157
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0xf1 sys/kern/vfs_syscalls.c:2904
#6  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#6  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10143   6388K    6419K 166960K     11221        0
            pcb    17     12K      12K 166960K        17        0
         rtable    58      1K       2K 166960K       107        0
             pf    12      6K      10K 166960K        23        0
         ifaddr    12      9K       9K 166960K        12        0
        ifgroup    17      1K       1K 166960K        17        0
       counters    48     34K      34K 166960K        48        0
       ioctlops     1      1K       4K 166960K      1675        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1260     79K      79K 166960K      1279        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc     1      0K       0K 166960K         1        0
           proc    55     78K      79K 166960K       256        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
       in_multi    11      0K       0K 166960K        11        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    25    122K     122K 166960K        25        0
           exec     0      0K       1K 166960K       249        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   156      7K       7K 166960K      4261        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    37     74K      74K 166960K      1065        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP     3      0K       0K 166960K         3        0
           temp     1   6804K    6868K 166960K      2928        0
         kqueue    11     16K      18K 166960K        24        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       17    0       14     1     0     1     1     0     8    0
rtentry    112       23    0        1     1     0     1     1     0     8    0
unpcb      144       33    0       20     1     0     1     1     0     8    0
syncache   336        5    0        5     2     1     1     1     0     8    1
tcpqe       32       46    0       46     1     1     0     1     0     8    0
tcpcb      808        8    0        5     1     0     1     1     0     8    0
arp        120        2    0        0     1     0     1     1     0     8    0
inpcb      384      232    0      221     2     0     2     2     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24        9    0        7     2     1     1     1     0     8    0
pfstkey    128        9    0        7     2     1     1     1     0     8    0
pfstate    376        9    0        7     2     1     1     1     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256       97    0        0     7     0     7     7     0     8    0
art_table   32       98    0        0     1     0     1     1     0     8    0
art_node    16       22    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1507    0       40    92     0    92    92     0     8    0
ffsino     272     1507    0       40    98     0    98    98     0     8    0
nchpl      144     1695    0       47    63     1    62    62     0     8    0
uvmvnodes   80     1520    0        0    32     0    32    32     0     8    0
vnodes     216     1520    0        0    85     0    85    85     0     8    0
namei      1024    4849    0     4849     2     1     1     1     0     8    1
percpumem   16       38    0        0     1     0     1     1     0     8    0
vmpool     696      202    0      201     1     0     1     1     0     8    0
kstatmem   264        6    0        0     1     0     1     1     0     8    0
scxspl     216     6446    0     6445    10     9     1     8     1     8    0
plimitpl   152       16    0       10     1     0     1     1     0     8    0
sigapl     424      529    0      482     6     0     6     6     0     8    0
futexpl     64     1308    0     1305     1     0     1     1     0     8    0
knotepl    120       43    0        0     2     0     2     2     0     8    0
kqueuepl   216       20    0       13     1     0     1     1     0     8    0
pipepl     320       90    0       87     2     1     1     1     0     8    0
fdescpl    496      511    0      482     5     1     4     4     0     8    0
filepl     152     1808    0     1745     3     0     3     3     0     8    0
lockfpl    104        6    0        4     1     0     1     1     0     8    0
lockfspl    48        4    0        2     1     0     1     1     0     8    0
sessionpl  144       17    0        9     1     0     1     1     0     8    0
pgrppl      48       17    0        9     1     0     1     1     0     8    0
ucredpl    104       66    0       56     1     0     1     1     0     8    0
zombiepl   144      482    0      482     2     1     1     1     0     8    1
processpl  1136     529    0      482     4     0     4     4     0     8    0
procpl     656      742    0      688     5     0     5     5     0     8    0
sockpl     664      282    0      255     3     0     3     3     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096       3    0        0     1     0     1     1     0     8    0
mcl2k      2048     341    0        0    43     0    43    43     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      358    0        0    23     0    23    23     0     8    0
bufpl      280     2666    0       96   184     0   184   184     0     8    0
anonpl      24   212678    0   210556    27    13    14    23     0   186    0
amapchunkpl 152   14036    0    13734    15     1    14    14     0   158    2
amappl16   200     6140    0     6135     6     5     1     5     0     8    0
amappl15   192       21    0       20     1     0     1     1     0     8    0
amappl14   184      105    0       96     1     0     1     1     0     8    0
amappl13   176       35    0       35     1     1     0     1     0     8    0
amappl12   168     1033    0     1012     1     0     1     1     0     8    0
amappl11   160       55    0       45     1     0     1     1     0     8    0
amappl10   152       24    0       24     2     2     0     1     0     8    0
amappl9    144      210    0      210     2     2     0     1     0     8    0
amappl8    136       33    0       31     1     0     1     1     0     8    0
amappl7    128      240    0      222     1     0     1     1     0     8    0
amappl6    120      162    0      152     1     0     1     1     0     8    0
amappl5    112      126    0      114     1     0     1     1     0     8    0
amappl4    104      428    0      402     1     0     1     1     0     8    0
amappl3     96     3378    0     3317     2     0     2     2     0     8    0
amappl2     88      786    0      726     2     0     2     2     0     8    0
amappl1     80     9619    0     9184    15     4    11    11     0     8    0
amappl      88     3758    0     3652     3     0     3     3     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      712    0      683     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      712    0      683     1     0     1     1     0     8    0
vmmpekpl   168     6665    0     6646     2     0     2     2     0     8    0
vmmpepl    168    44183    0    42810    68     7    61    61     0   357    1
vmsppl     440      711    0      683     4     0     4     4     0     8    0
rwobjpl     56    21734    0    19549    33     1    32    32     0     8    0
pdppl      4096    1431    0     1366    87    18    69    69     0     8    4
pvpl        32     6364    0        0    52     0    52    52     0   265    0
pmappl     248      711    0      683     3     1     2     2     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      364    0       22    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828e8ed0) at panic+0x17b sys/kern/subr_prf.c:198
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 witness_debugger sys/kern/subr_witness.c:2524 [inline]
witness_checkorder(ffffffff82e1cfd8,9,0) at witness_checkorder+0xd03 sys/kern/subr_witness.c:786
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 read_rflags machine/cpufunc.h:195 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 intr_disable machine/cpufunc.h:216 [inline]
__mp_lock(ffffffff82e1cdd0) at __mp_lock+0xa2 sys/kern/kern_lock.c:142
intr_handler(ffff80002a269ea0,ffff80000006bc00) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:539
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
mtx_enter_try(ffffffff82e760e0) at mtx_enter_try+0x103
mtx_enter(ffffffff82e760e0) at mtx_enter+0x4e sys/kern/kern_lock.c:266
pool_get(ffffffff82e760e0,9) at pool_get+0xc4 sys/kern/subr_pool.c:579
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x41 sys/uvm/uvm_map.c:3279
vm_impl_init(ffff8000ffff15c0,ffff80002a1bf208) at vm_impl_init+0x92 sys/arch/amd64/amd64/vmm_machdep.c:1245
vm_create(ffff800000da8000,ffff80002a1bf208) at vm_create+0x13e sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff800000da8000,1,ffff80002a1bf208) at vmmioctl+0x2de
VOP_IOCTL(fffffd806e3c9440,c2585601,ffff800000da8000,1,fffffd807f7d3958,ffff80002a1bf208) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806e3d5600,c2585601,ffff800000da8000,ffff80002a1bf208) at vn_ioctl+0xc0 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff80002a1bf208,ffff80002a26a660,ffff80002a26a5b0) at sys_ioctl+0x4a9
syscall(ffff80002a26a660) at syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002a26a660) at syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6a47bac2180, count: -19
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7aa82487c3c0, count: 12
ddb{1}> trace
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7aa82487c3c0, count: -3

Crashes (175):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/11 04:13 openbsd f63e15d85063 9026e142 .config console log report syz C [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/08 06:29 openbsd 7284c0c62173 4cf3f9b3 .config console log report syz C ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/07 21:39 openbsd debf255c65d9 cb2dcc0e .config console log report syz C [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/05 11:42 openbsd 5ec8126aae72 610f2a54 .config console log report syz C ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/03 22:53 openbsd 22ee75e59c47 610f2a54 .config console log report syz C ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/15 04:24 openbsd b613adb4fae8 fdb4c10c .config console log report syz ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 06:46 openbsd 30293cdc5e30 9026e142 .config console log report syz ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 18:27 openbsd bae657104f70 9026e142 .config console log report syz [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/09 09:18 openbsd 1b9cf3a3fa61 20bf80e1 .config console log report syz ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/06 07:21 openbsd 4580bd6ebd98 610f2a54 .config console log report syz [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/03 20:57 openbsd 22ee75e59c47 610f2a54 .config console log report syz ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/03 19:13 openbsd 22ee75e59c47 610f2a54 .config console log report syz ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/17 03:50 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/17 02:38 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/17 00:52 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 21:58 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 20:50 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 19:16 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 17:01 openbsd b20edd337af0 ad5321c6 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 15:13 openbsd b20edd337af0 ef5d53ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 10:26 openbsd b20edd337af0 ef5d53ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 07:34 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 05:36 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 04:17 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 03:04 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 02:03 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/16 00:29 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/15 22:52 openbsd e298eee01736 ef5d53ed .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/15 11:30 openbsd f413dfa09d56 7e8e0c0f .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/15 05:49 openbsd b613adb4fae8 fdb4c10c .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/15 03:18 openbsd b613adb4fae8 fdb4c10c .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/14 16:41 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/14 14:44 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/14 12:16 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/14 08:43 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/14 08:02 openbsd 5dea098c4cfa fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 23:30 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 20:40 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 19:28 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 15:48 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 12:04 openbsd 30293cdc5e30 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 10:52 openbsd 30293cdc5e30 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 08:18 openbsd 30293cdc5e30 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 03:52 openbsd 30293cdc5e30 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 02:43 openbsd 30293cdc5e30 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/13 01:40 openbsd bae657104f70 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 23:50 openbsd bae657104f70 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 15:19 openbsd bae657104f70 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 06:26 openbsd 73556a19205d 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 05:01 openbsd 73556a19205d 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 03:31 openbsd 73556a19205d 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/12 02:07 openbsd 73556a19205d 9026e142 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 23:37 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 22:25 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 21:04 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 18:54 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 15:38 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/11 14:08 openbsd 1b9599294b30 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
2024/05/03 17:33 openbsd 22ee75e59c47 610f2a54 .config console log report ci-openbsd-multicore panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock
* Struck through repros no longer work on HEAD.