syzbot


panic: pool_do_get: sigapl: page empty

Status: upstream: reported on 2024/04/21 19:28
Reported-by: syzbot+02e022d22887ea945fc1@syzkaller.appspotmail.com
First crash: 59d, last: 59d

Sample crash report:
@&qpanic: pool_do_get: sigapl: page empty
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*416077  94834      0   0x8000002          0    0K syz-executor.2
 170502  81081      0  0x1a000002  0x4000001    1  syz-fuzzer
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82946720) at panic+0x17b sys/kern/subr_prf.c:198
pool_do_get(ffffffff82d74728,1,ffff80002f0def68) at pool_do_get+0x40f sys/kern/subr_pool.c:726
pool_get(ffffffff82d74728,1) at pool_get+0xf0 sys/kern/subr_pool.c:582
sigactsinit(ffff8000ffff2808) at sigactsinit+0x26 sys/kern/kern_sig.c:236
process_new(ffff800032184808,ffff8000ffff2808,1) at process_new+0x3af sys/kern/kern_fork.c:274
fork1(ffff80002a156d10,1,ffffffff814a22f0,0,ffff80002f0df160,0) at fork1+0x2ef sys/kern/kern_fork.c:399
syscall(ffff80002f0df210) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002f0df210) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77010e36f840, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: pool_do_get: sigapl: page empty
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82946720) at panic+0x17b sys/kern/subr_prf.c:198
pool_do_get(ffffffff82d74728,1,ffff80002f0def68) at pool_do_get+0x40f sys/kern/subr_pool.c:726
pool_get(ffffffff82d74728,1) at pool_get+0xf0 sys/kern/subr_pool.c:582
sigactsinit(ffff8000ffff2808) at sigactsinit+0x26 sys/kern/kern_sig.c:236
process_new(ffff800032184808,ffff8000ffff2808,1) at process_new+0x3af sys/kern/kern_fork.c:274
fork1(ffff80002a156d10,1,ffffffff814a22f0,0,ffff80002f0df160,0) at fork1+0x2ef sys/kern/kern_fork.c:399
syscall(ffff80002f0df210) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002f0df210) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77010e36f840, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002f0dedc0
rbx               0xffffffff82cc0cdf    cpu_info_full_primary+0x2cdf
rdx                                0
rcx               0xffff80002a156d10
rax               0xffffffff82cbfff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x49318bf62d1ce359
r11               0x5d35fec94a1dc2ac
r12               0xffffffff82cc0ae0    cpu_info_full_primary+0x2ae0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81e52b9c    db_enter+0x1c
cs                               0x8
rflags                         0x246
rsp               0xffff80002f0dedb0
ss                              0x10
db_enter+0x1c:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.2) tid=416077 pid=94834 tcnt=1 stat=onproc
    flags process=8000002<EXEC> proc=0
    runpri=17, usrpri=78, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff80002a157750,0xffff8000321854e8
    process=0xffff8000ffff2808 user=0xffff80002f0da000, vmspace=0xfffffd80694c3370
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 51207  379750  26373      0  2   0x8000000                syz-executor.3
 51207  147810  26373      0  2   0xc000000                syz-executor.3
 28898   39712  16537      0  2   0x8000000                syz-executor.6
 28898  445287  16537      0  3   0xc000080  fsleep        syz-executor.6
 38125  444994  77983      0  3   0x8000080  nanoslp       syz-executor.0
 38125  426598  77983      0  3   0xc000080  ttyopn        syz-executor.0
 38125  485834  77983      0  3   0xc000080  fsleep        syz-executor.0
  9745  521371  95321      0  2   0x8000000                syz-executor.1
  9745  161781  95321      0  3   0xc000080  fsleep        syz-executor.1
  9745  290174  95321      0  3   0xc000080  fsleep        syz-executor.1
 48161  140896  16441      0  2   0x8000000                syz-executor.7
 48161  254702  16441      0  3   0xc000080  kqread        syz-executor.7
 48161  401234  16441      0  3   0xc000080  kqread        syz-executor.7
 75947  136756  99009      0  2   0x8000000                syz-executor.5
 75947  303578  99009      0  3   0xc000000  smrbar        syz-executor.5
 75947  436149  99009      0  3   0xc000080  fsleep        syz-executor.5
 26373  428646  81081      0  3   0x8000082  nanoslp       syz-executor.3
 88989   27949      0      0  3     0x14280  nfsidl        nfsio
 17629  263603      0      0  3     0x14280  nfsidl        nfsio
 11063  380010      0      0  3     0x14280  nfsidl        nfsio
 69962  358207      0      0  3     0x14280  nfsidl        nfsio
 72476  448983      0      0  3     0x14280  nfsidl        nfsio
 41837  113205      0      0  3     0x14280  nfsidl        nfsio
 47652  345698      0      0  3     0x14280  nfsidl        nfsio
 31037  102100      0      0  3     0x14280  nfsidl        nfsio
 90327  398180      0      0  3     0x14280  nfsidl        nfsio
 99459  304710      0      0  3     0x14280  nfsidl        nfsio
 57718  127178      0      0  3     0x14280  nfsidl        nfsio
  7258  344710      0      0  3     0x14280  nfsidl        nfsio
 31596  519262      0      0  3     0x14280  nfsidl        nfsio
 17039  303412      0      0  3     0x14280  nfsidl        nfsio
 43840  260905      0      0  3     0x14280  nfsidl        nfsio
 48410  286367      0      0  3     0x14280  nfsidl        nfsio
 79179  303186      0      0  3     0x14280  nfsidl        nfsio
 53910  419166      0      0  3     0x14280  nfsidl        nfsio
 29512   82980      0      0  3     0x14280  nfsidl        nfsio
 34258  397698      0      0  3     0x14280  nfsidl        nfsio
 16537  245754  81081      0  3   0x8000082  nanoslp       syz-executor.6
 77983  382179  81081      0  3   0x8000082  nanoslp       syz-executor.0
 50400  170893      1      0  3  0x18100083  ttyin         getty
 99009  445974  81081      0  3   0x8000082  nanoslp       syz-executor.5
 48686  275307  81081      0  2   0x8000002                syz-executor.4
 95321  463361  81081      0  3   0x8000082  nanoslp       syz-executor.1
 10428  172811      0      0  3     0x14200  acct          acct
*94834  416077  81081      0  7   0x8000002                syz-executor.2
 16441  488866  81081      0  3   0x8000082  nanoslp       syz-executor.7
 71574  503762      0      0  3     0x14200  bored         sosplice
 81081  503138  69247      0  3  0x1a000082  thrsleep      syz-fuzzer
 81081  234463  69247      0  3  0x1e000082  nanoslp       syz-fuzzer
 81081  392741  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  134493  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  170502  69247      0  7  0x1e000003                syz-fuzzer
 81081  468705  69247      0  3  0x1e000082  thrsleep      syz-fuzzer
 81081  441925  69247      0  3  0x1e000082  thrsleep      syz-fuzzer
 81081    9032  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  206004  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  324106  69247      0  3  0x1e000082  thrsleep      syz-fuzzer
 81081  196625  69247      0  3  0x1e000082  thrsleep      syz-fuzzer
 81081  172463  69247      0  2  0x1e000002                syz-fuzzer
 81081  139673  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  300742  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081  344943  69247      0  3  0x1e000082  wait          syz-fuzzer
 81081   68833  69247      0  3  0x1e000082  thrsleep      syz-fuzzer
 81081   73926  69247      0  3  0x1e000082  wait          syz-fuzzer
 69247  111574  38746      0  3   0x810008a  sigsusp       ksh
 38746  216899  11837      0  3  0x1800009a  kqread        sshd
 11837  103091      1      0  3  0x18000088  kqread        sshd
 46412  390606  95190     74  3  0x19100092  bpf           pflogd
 95190  472720      1      0  3  0x18000080  sbwait        pflogd
 29568   40080  89659     73  3  0x19100090  kqread        syslogd
 89659  480762      1      0  3  0x18100082  sbwait        syslogd
 12772  239376      1      0  3  0x18100080  kqread        resolvd
 57211   15645      0      0  3     0x14200  bored         smr
 89338   60269      0      0  2     0x14200                zerothread
   764  243507      0      0  3     0x14200  aiodoned      aiodoned
 81946  371906      0      0  3     0x14200  syncer        update
 80155   39446      0      0  3     0x14200  cleaner       cleaner
 22676  328532      0      0  3     0x14200  reaper        reaper
 27483  247941      0      0  3     0x14200  pgdaemon      pagedaemon
 18670  374534      0      0  3     0x14200  bored         viomb
 88291  130848      0      0  3  0x40014200  acpi0         acpi0
 54059  314671      0      0  3  0x40014200                idle1
 47666  298526      0      0  3     0x14200  bored         softnet3
 42799  387354      0      0  3     0x14200  bored         softnet2
 92311  469331      0      0  3     0x14200  bored         softnet1
  1318  316457      0      0  2     0x14200                softnet0
 59250  278122      0      0  3     0x14200  bored         systqmp
 43273  118620      0      0  3     0x14200  bored         systq
 44638   60356      0      0  3     0x14200  tmoslp        softclockmp
 20673  204791      0      0  3  0x40014200  tmoslp        softclock
 47563   89964      0      0  3  0x40014200                idle0
     1   19290      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex sigapl r = 0 (0xffffffff82d74738)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pool_get+0xc4 sys/kern/subr_pool.c:579
#4  sigactsinit+0x26 sys/kern/kern_sig.c:236
#5  process_new+0x3af sys/kern/kern_fork.c:274
#6  fork1+0x2ef sys/kern/kern_fork.c:399
#7  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#7  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#8  Xsyscall+0x128
Process 51207 (syz-executor.3) thread 0xffff800032184d28 (147810)
exclusive rrwlock inode r = 0 (0xfffffd807e117918)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  ufs_ihashins+0x46
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x1e4 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_makeinode+0xb0 sys/ufs/ufs/ufs_vnops.c:1733
#8  ufs_mknod+0x52 sys/ufs/ufs/ufs_vnops.c:167
#9  VOP_MKNOD+0xc3 sys/kern/vfs_vops.c:121
#10 domknodat+0x322 sys/kern/vfs_syscalls.c:1627
#11 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#11 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#12 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807e117808)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd3 sys/kern/vfs_lookup.c:418
#6  namei+0x56a sys/kern/vfs_lookup.c:250
#7  domknodat+0x95 sys/kern/vfs_syscalls.c:1579
#8  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#8  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 75947 (syz-executor.5) thread 0xffff8000fffeea70 (303578)
exclusive rwlock clonelk r = 0 (0xffffffff82c92550)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  if_clone_destroy+0x4d sys/net/if.c:1367
#2  tun_dev_close+0x141 sys/net/if_tun.c:521
#3  spec_close+0x2d4 sys/kern/spec_vnops.c:538
#4  VOP_CLOSE+0xeb sys/kern/vfs_vops.c:156
#5  vn_close+0x76 sys/kern/vfs_vnops.c:292
#6  sys_ktrace+0xf6 sys/kern/kern_ktrace.c:552
#7  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#7  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#8  Xsyscall+0x128
Process 94834 (syz-executor.2) thread 0xffff80002a156d10 (416077)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82d63128)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  syscall+0x83b mi_syscall sys/sys/syscall_mi.h:180 [inline]
#1  syscall+0x83b sys/arch/amd64/amd64/trap.c:577
#2  Xsyscall+0x128
exclusive mutex sigapl r = 0 (0xffffffff82d74738)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pool_get+0xc4 sys/kern/subr_pool.c:579
#4  sigactsinit+0x26 sys/kern/kern_sig.c:236
#5  process_new+0x3af sys/kern/kern_fork.c:274
#6  fork1+0x2ef sys/kern/kern_fork.c:399
#7  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#7  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#8  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10195   6504K    6996K 166960K     13297        0
            pcb    18     16K      18K 166960K       513        0
         rtable   245     15K      16K 166960K      1196        0
             pf    39     10K      10K 166960K       200        0
         ifaddr    48     16K      16K 166960K       180        0
        ifgroup    68      2K       2K 166960K       320        0
         sysctl     4      1K       2K 166960K        10        0
       counters    70     37K      37K 166960K       192        0
       ioctlops     0      0K       4K 166960K      1813        0
            iov     0      0K      18K 166960K       195        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1471     92K      93K 166960K      2938        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        93        0
         VM map     2      1K       1K 166960K         2        0
            sem    19      6K       6K 166960K        74        0
        dirhash    12      2K       2K 166960K        99        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    17     61K      89K 166960K      2761        0
          sigio     0      0K       0K 166960K       134        0
           proc    64     67K     140K 166960K      1272        0
        subproc   104      6K       8K 166960K       377        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       356        0
       in_multi    88      6K       7K 166960K       402        0
    ether_multi     1      0K       0K 166960K        19        0
            mrt     0      0K       0K 166960K         9        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    97    440K     440K 166960K        97        0
           exec     0      0K       1K 166960K       943        0
     pfkey data     0      0K       0K 166960K        12        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   272     79K     105K 166960K     26267        0
       UVM aobj    10      4K       4K 166960K        13        0
     pinsyscall    35     70K     108K 166960K      4460        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       188        0
            NDP    15      0K       1K 166960K       131        0
           temp    77   6820K    7316K 166960K     93114        0
         kqueue     8     14K      28K 166960K       413        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      383    0      381     3     2     1     3     0     8    0
rtentry    112      387    0      277     4     0     4     4     0     8    0
unpcb      144     2126    0     2117    13    12     1     4     0     8    0
syncache   336        4    0        4     1     1     0     1     0     8    0
tcpqe       32       24    0       24     1     1     0     1     0     8    0
tcpcb      808      655    0      650     9     8     1     2     0     8    0
arp        120       69    0       50     1     0     1     1     0     8    0
inpcb      384     2872    0     2863    38    36     2    15     0     8    0
nd6        136       99    0       75     1     0     1     1     0     8    0
pkpcb       40       30    0       30    10    10     0     1     0     8    0
kcovpl      48       29    0       21     1     0     1     1     0     8    0
ppxss      1168      10    0       10     6     6     0     1     0     8    0
pffrag     232       20    0       16     2     1     1     1     0   482    0
pffrnode    88       19    0       15     2     1     1     1     0     8    0
pffrent     40       30    0       26     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24      231    0      190     1     0     1     1     0     8    0
pfstkey    128      231    0      190     2     0     2     2     0     8    0
pfstate    376      231    0      190     6     1     5     6     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     1449    0     1020    36     9    27    29     0     8    0
art_table   32     1450    0     1020     4     0     4     4     0     8    0
art_node    16      381    0      287     1     0     1     1     0     8    0
sysvmsgpl   40       13    0        7     2     1     1     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112       70    0       53     1     0     1     1     0     8    0
shmpl      112       10    0        3     1     0     1     1     0     8    0
dirhash    1024      75    0       58     3     0     3     3     0     8    0
dino2pl    256     5854    0     4316    98     1    97    97     0     8    0
ffsino     272     5854    0     4316   103     0   103   103     0     8    0
nchpl      144    10019    0     8279    67     0    67    67     0     8    0
uvmvnodes   80     6889    0        0   141     0   141   141     0     8    0
vnodes     216     6889    0        0   383     0   383   383     0     8    0
namei      1024   34733    0    34732     7     6     1     2     0     8    0
percpumem   16      110    0       61     1     0     1     1     0     8    0
vcpupl     3904      10    0        3     2     0     2     2     0     8    0
vmpool     696       27    0       20     3     2     1     2     0     8    0
kstatmem   264      152    0      122     6     3     3     3     0     8    0
scsiplug    72       15    0       15     9     9     0     1     0     8    0
scxspl     216    53341    0    53341    16    15     1     8     1     8    1
plimitpl   152      347    0      332     1     0     1     1     0     8    0
sigapl     424     3083    0     3017    12     3     9     9     0     8    0
sigapl: pool(0xffffffff82d74728:sigapl): page inconsistency: page 0x0; at page head addr 0xfffffd80659cdf90 (p 0xfffffd80659cd000)
futexpl     64    40304    0    40299     4     3     1     1     0     8    0
knotepl    120      740    0        0    18     0    18    18     0     8    0
kqueuepl   216      803    0      796     4     3     1     3     0     8    0
pipepl     320      599    0      571     6     3     3     6     0     8    0
fdescpl    496     3022    0     2995     6     1     5     5     0     8    0
filepl     152    19293    0    19056    31    18    13    15     0     8    0
lockfpl    104      654    0      653     1     0     1     1     0     8    0
lockfspl    48      271    0      270     1     0     1     1     0     8    0
sessionpl  144       45    0       29     1     0     1     1     0     8    0
pgrppl      48      226    0      210     1     0     1     1     0     8    0
ucredpl    104     3032    0     3015     1     0     1     1     0     8    0
zombiepl   144     3017    0     3017     1     0     1     1     0     8    1
processpl  1136    3084    0     3017     6     0     6     6     0     8    0
procpl     656     6212    0     6119    12     3     9     9     0     8    0
srpgc       96       27    0       27     6     6     0     1     0     8    0
sosppl     168       33    0       33    11    10     1     1     0     8    1
sockpl     664     5434    0     5414    38    35     3    14     0     8    0
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       7    0        0     1     0     1     1     0     8    0
mcl4k      4096       6    0        0     1     0     1     1     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     445    0        0    46     1    45    46     0     8    0
mtagpl      96       18    0        0     1     0     1     1     0     8    0
mbufpl     256     1211    0        0    61     0    61    61     0     8    0
bufpl      280    12204    0     4678   538     0   538   538     0     8    0
anonpl      24   517035    0   511216   115    50    65    78     0   186    0
amapchunkpl 152   86158    0    85467    73    36    37    43     0   158    6
amappl16   200    12590    0    12459    63    50    13    20     0     8    2
amappl15   192       13    0       13     2     2     0     1     0     8    0
amappl14   184      221    0      212     2     1     1     2     0     8    0
amappl13   176       51    0       51     1     1     0     1     0     8    0
amappl12   168     3999    0     3971     3     1     2     2     0     8    0
amappl11   160       62    0       54     1     0     1     1     0     8    0
amappl10   152       64    0       56     1     0     1     1     0     8    0
amappl9    144      303    0      303     3     3     0     1     0     8    0
amappl8    136      246    0      207     2     0     2     2     0     8    0
amappl7    128       60    0       45     1     0     1     1     0     8    0
amappl6    120      653    0      634     2     1     1     2     0     8    0
amappl5    112      249    0      237     1     0     1     1     0     8    0
amappl4    104      767    0      730     3     1     2     3     0     8    0
amappl3     96    15888    0    15804     3     0     3     3     0     8    0
amappl2     88     3461    0     3402     4     2     2     4     0     8    0
amappl1     80    19083    0    18624    25    13    12    23     0     8    0
amappl      88    25392    0    25200     7     1     6     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       12    0        3     1     0     1     1     0     8    0
uaddrrnd    24     3050    0     3017     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3050    0     3017     1     0     1     1     0     8    0
vmmpekpl   168    25281    0    25224     4     0     4     4     0     8    0
vmmpepl    168   200332    0   198554   183    80   103   118     0   357   10
vmsppl     440     3049    0     3017     7     2     5     5     0     8    0
rwobjpl     56    59743    0    51807   121     7   114   116     0     8    0
pdppl      4096    6107    0     6041   263   193    70    85     0     8    4
pvpl        32    45416    0        0   370     3   367   367     0   265    0
pmappl     248     3049    0     3017     5     2     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      640    0      227    13     0    13    13     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff82946720) at panic+0x17b sys/kern/subr_prf.c:198
pool_do_get(ffffffff82d74728,1,ffff80002f0def68) at pool_do_get+0x40f sys/kern/subr_pool.c:726
pool_get(ffffffff82d74728,1) at pool_get+0xf0 sys/kern/subr_pool.c:582
sigactsinit(ffff8000ffff2808) at sigactsinit+0x26 sys/kern/kern_sig.c:236
process_new(ffff800032184808,ffff8000ffff2808,1) at process_new+0x3af sys/kern/kern_fork.c:274
fork1(ffff80002a156d10,1,ffffffff814a22f0,0,ffff80002f0df160,0) at fork1+0x2ef sys/kern/kern_fork.c:399
syscall(ffff80002f0df210) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002f0df210) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x77010e36f840, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff82d62f20) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82d62f20) at __mp_lock+0x122 sys/kern/kern_lock.c:147
ktrstruct(ffff8000ffff7730,ffffffff8287089d,ffff80002a205dc8,10) at ktrstruct+0xd9 sys/kern/kern_ktrace.c:307
sys_kevent(ffff8000ffff7730,ffff80002a205f50,ffff80002a205ea0) at sys_kevent+0x14a sys/kern/kern_event.c:1001
syscall(ffff80002a205f50) at syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002a205f50) at syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2c33a1c30, count: 7
ddb{1}> trace
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff82d62f20) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82d62f20) at __mp_lock+0x122 sys/kern/kern_lock.c:147
ktrstruct(ffff8000ffff7730,ffffffff8287089d,ffff80002a205dc8,10) at ktrstruct+0xd9 sys/kern/kern_ktrace.c:307
sys_kevent(ffff8000ffff7730,ffff80002a205f50,ffff80002a205ea0) at sys_kevent+0x14a sys/kern/kern_event.c:1001
syscall(ffff80002a205f50) at syscall+0x8cf mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002a205f50) at syscall+0x8cf sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2c33a1c30, count: -8

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/21 19:27 openbsd 8a9424f8c5c9 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pool_do_get: sigapl: page empty
* Struck through repros no longer work on HEAD.