syzbot


panic: vwakeup: neg numoutput

Status: auto-obsoleted due to no activity on 2024/11/05 14:45
Reported-by: syzbot+07e16b0571560b6f6b38@syzkaller.appspotmail.com
First crash: 216d, last: 135d

Sample crash report:
panic: vwakeup: neg numoutput
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 76941  35881      0   0x8000000  0x4000000    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8309b517) at panic+0x1cf sys/kern/subr_prf.c:198
vwakeup(fffffd807d1ba560) at vwakeup+0x17c sys/kern/vfs_subr.c:1941
biodone(fffffd806c70d9e0) at biodone+0x121 sys/kern/vfs_bio.c:1302
sd_buf_done(fffffd807d23d018) at sd_buf_done+0x2da sys/scsi/sd.c:772
vioscsi_vq_done(ffff8000000a2228) at vioscsi_vq_done+0xe1
intr_handler(ffff800035c06d10,ffff80000006a080) at intr_handler+0xcf
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x34 sys/dev/kcov.c:164
arc4random_buf(fffffd806a7df990,8) at arc4random_buf+0x35 sys/dev/rnd.c:541
pool_p_alloc(ffffffff835d8f28,1,ffff800035c06fdc) at pool_p_alloc+0x1c6 sys/kern/subr_pool.c:946
pool_do_get(ffffffff835d8f28,1,ffff800035c06fdc) at pool_do_get+0x174 sys/kern/subr_pool.c:707
pool_get(ffffffff835d8f28,1) at pool_get+0xf0
pmap_create() at pmap_create+0x18c sys/arch/amd64/amd64/pmap.c:1384
end trace frame: 0xffff800035c070d0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: vwakeup: neg numoutput
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8309b517) at panic+0x1cf sys/kern/subr_prf.c:198
vwakeup(fffffd807d1ba560) at vwakeup+0x17c sys/kern/vfs_subr.c:1941
biodone(fffffd806c70d9e0) at biodone+0x121 sys/kern/vfs_bio.c:1302
sd_buf_done(fffffd807d23d018) at sd_buf_done+0x2da sys/scsi/sd.c:772
vioscsi_vq_done(ffff8000000a2228) at vioscsi_vq_done+0xe1
intr_handler(ffff800035c06d10,ffff80000006a080) at intr_handler+0xcf
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x34 sys/dev/kcov.c:164
arc4random_buf(fffffd806a7df990,8) at arc4random_buf+0x35 sys/dev/rnd.c:541
pool_p_alloc(ffffffff835d8f28,1,ffff800035c06fdc) at pool_p_alloc+0x1c6 sys/kern/subr_pool.c:946
pool_do_get(ffffffff835d8f28,1,ffff800035c06fdc) at pool_do_get+0x174 sys/kern/subr_pool.c:707
pool_get(ffffffff835d8f28,1) at pool_get+0xf0
pmap_create() at pmap_create+0x18c sys/arch/amd64/amd64/pmap.c:1384
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b uvmspace_init sys/uvm/uvm_map.c:3261 [inline]
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b sys/uvm/uvm_map.c:3242
vm_impl_init(ffff800032dfbc88,ffff80003600cf60) at vm_impl_init+0xb3 sys/arch/amd64/amd64/vmm_machdep.c:1246
vm_create(ffff8000011f1400,ffff80003600cf60) at vm_create+0x1bb sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff8000011f1400,1,ffff80003600cf60) at vmmioctl+0x420
VOP_IOCTL(fffffd807365e0d8,c2585601,ffff8000011f1400,1,fffffd807f7d7680,ffff80003600cf60) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd807cc43878,c2585601,ffff8000011f1400,ffff80003600cf60) at vn_ioctl+0xe8 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff80003600cf60,ffff800035c075c0,ffff800035c07510) at sys_ioctl+0x678
syscall(ffff800035c075c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x84d62b2e9d0, count: -23
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800035c06b00
rbx                                0
rdx                                0
rcx                                0
rax               0xffff80003600cf60
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x3d82529a3e16886e
r11               0xcce8a0fab2cfdee5
r12                                0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81c86095    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff800035c06af0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb> show proc
PROC (syz-executor) tid=76941 pid=35881 tcnt=3 stat=onproc
    flags process=8000000<PIN> proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003600c7c8,0xffff80003600cce8
    process=0xffff8000376a2460 user=0xffff800035c02000, vmspace=0xfffffd806c25bc28
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=1
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 35881  305680  95152      0  2   0x8000000                syz-executor
*35881   76941  95152      0  7   0xc000000                syz-executor
 35881  242362  95152      0  3   0xc000080  fsleep        syz-executor
 93344  224394  25477      0  3   0x8000080  nanoslp       syz-executor
 93344  198734  25477      0  3   0xc000080  msgwait       syz-executor
 93344  344063  25477      0  3   0xc000080  fsleep        syz-executor
 44520   62140  26270      0  3   0x8000080  nanoslp       syz-executor
 44520  251078  26270      0  3   0xc000080  kqread        syz-executor
 79889  294959      0      0  3     0x14200  bored         sosplice
 77535  205832      0      0  3     0x14200  acct          acct
 27873  256951      0      0  3     0x14280  nfsidl        nfsio
 78640   18852      0      0  3     0x14280  nfsidl        nfsio
 81329  205344      0      0  3     0x14280  nfsidl        nfsio
 85291   60521      0      0  3     0x14280  nfsidl        nfsio
 80736  220348      0      0  3     0x14280  nfsidl        nfsio
 72897  458181      0      0  3     0x14280  nfsidl        nfsio
 86921  315450      0      0  3     0x14280  nfsidl        nfsio
 23101  441349      0      0  3     0x14280  nfsidl        nfsio
 80854  514697      0      0  3     0x14280  nfsidl        nfsio
 34434  395694      0      0  3     0x14280  nfsidl        nfsio
 79082  510360      0      0  3     0x14280  nfsidl        nfsio
 27383  201151      0      0  3     0x14280  nfsidl        nfsio
 11686   25095      0      0  3     0x14280  nfsidl        nfsio
  7316  201817      0      0  3     0x14280  nfsidl        nfsio
 14417  418083      0      0  3     0x14280  nfsidl        nfsio
 42412  294558      0      0  3     0x14280  nfsidl        nfsio
 56865  392516      0      0  3     0x14280  nfsidl        nfsio
 91977  144373      0      0  3     0x14280  nfsidl        nfsio
 15632   29828      0      0  3     0x14280  nfsidl        nfsio
 65788  418231      0      0  3     0x14280  nfsidl        nfsio
 97673  256324  97615      0  3   0x8000082  nanoslp       syz-executor
 31780  227513  97615      0  3   0x8000002  biowait       syz-executor
 26270   82747  97615      0  3   0x8000082  nanoslp       syz-executor
 71868  423023  97615      0  3   0x8000082  nanoslp       syz-executor
 25477  176843  97615      0  3   0x8000082  nanoslp       syz-executor
 87687  357711  97615      0  3   0x8000002  biowait       syz-executor
 61316  351109  97615      0  3   0x8000082  nanoslp       syz-executor
 95152  119836  97615      0  3   0x8000082  nanoslp       syz-executor
 97615  396524   7239      0  3   0x8000082  kqread        syz-executor
  7239  458773  93298      0  3   0x810008a  sigsusp       ksh
 93298  347282  34649      0  3  0x18000098  kqread        sshd-session
 34649  299033  36771      0  3  0x18000092  kqread        sshd-session
  3724  329944      1      0  3  0x18100083  ttyin         getty
 36771  248345      1      0  3  0x18000088  kqread        sshd
 32780  341486  55725     73  3  0x19100090  kqread        syslogd
 55725   87448      1      0  3  0x18100082  sbwait        syslogd
 62800  280644      1      0  3  0x18100080  kqread        resolvd
 17950  358808  23136     77  3  0x18100092  kqread        dhcpleased
 73022  205777  23136     77  3  0x18100092  kqread        dhcpleased
 23136  166038      1      0  3  0x18000080  kqread        dhcpleased
 32820  202152      0      0  3     0x14200  bored         smr
 46484  136109      0      0  2     0x14200                zerothread
  2486  438561      0      0  3     0x14200  aiodoned      aiodoned
 25278  119519      0      0  3     0x14200  syncer        update
 18838  351295      0      0  3     0x14200  cleaner       cleaner
   145  356366      0      0  3     0x14200  reaper        reaper
 98757   53437      0      0  3     0x14200  pgdaemon      pagedaemon
 83386   69677      0      0  3     0x14200  bored         viomb
 41444  134208      0      0  3  0x40014200  acpi0         acpi0
 55713  395567      0      0  3     0x14200  bored         softnet3
 99442  160489      0      0  3     0x14200  bored         softnet2
 24271   29469      0      0  3     0x14200  bored         softnet1
 43306  261580      0      0  3     0x14200  bored         softnet0
 78800  461231      0      0  3     0x14200  bored         systqmp
 18067  409462      0      0  3     0x14200  bored         systq
 98214  511675      0      0  3  0x40014200  tmoslp        softclock
  9894   29323      0      0  3  0x40014200                idle0
     1  216331      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10193  10284K   10470K 166960K     11570        0
            pcb    17     16K      17K 166960K       175        0
         rtable   236      6K       6K 166960K       362        0
             pf    35     13K      13K 166960K        37        0
         ifaddr    44      7K       7K 166960K        46        0
        ifgroup    59      2K       2K 166960K        59        0
         sysctl     2      0K       0K 166960K         2        0
       counters    32     17K      17K 166960K        32        0
       ioctlops     1      1K       4K 166960K       121        0
            iov     0      0K      12K 166960K         8        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1441     91K      91K 166960K      1570        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem    10      0K       0K 166960K        74        0
        dirhash    12      2K       2K 166960K        21        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    16     57K      97K 166960K       265        0
          sigio     0      0K       0K 166960K         6        0
           proc    57     59K     124K 166960K       486        0
        subproc   104      6K       6K 166960K       104        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       144        0
       in_multi    99      7K       7K 166960K       103        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       427        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   218     72K      86K 166960K      3903        0
       UVM aobj     8      2K       2K 166960K         8        0
     pinsyscall    37     74K      98K 166960K      1278        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        50        0
            NDP    13      0K       2K 166960K        29        0
           temp    47   6797K    6861K 166960K      4377        0
         kqueue    17     24K      24K 166960K        43        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       88    0       83     2     0     2     2     0     8    1
rtentry    112      115    0        4     4     0     4     4     0     8    0
unpcb      144      266    0      247     6     0     6     6     0     8    5
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpqe       32        1    0        1     1     0     1     1     0     8    1
tcpcb      808       62    0       58     2     0     2     2     0     8    1
arp         88       19    0        1     1     0     1     1     0     8    0
ipq         40        1    0        0     1     0     1     1     0     8    0
ipqe        40        1    0        0     1     0     1     1     0     8    0
inpcb      336      430    0      423     8     0     8     8     0     8    7
nd6        104       25    0        0     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     0     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
pfosfp      40        1    0        0     1     0     1     1     0     8    0
pfosfpen   112        1    0        0     1     0     1     1     0     8    0
pfrule     1344       1    0        1     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      459    0        2    29     0    29    29     0     8    0
art_table   32      460    0        2     4     0     4     4     0     8    0
art_node    16      114    0       13     1     0     1     1     0     8    0
sysvmsgpl   40        6    0        3     1     0     1     1     0     8    0
semapl     112       72    0       64     1     0     1     1     0     8    0
shmpl      112        5    0        0     1     0     1     1     0     8    0
dirhash    1024      23    0        6     3     0     3     3     0     8    0
dino2pl    256     1810    0      306    95     0    95    95     0     8    0
ffsino     240     1810    0      306    89     0    89    89     0     8    0
nchpl      144     2197    0      516    63     0    63    63     0     8    0
uvmvnodes   80     2068    0        0    43     0    43    43     0     8    0
vnodes     216     2068    0        0   115     0   115   115     0     8    0
vnodes: pool(0xffffffff834b6cd8:vnodes): page inconsistency: page 0x0; at page head addr 0xfffffd807d1baf90 (p 0xfffffd807d1ba000)
namei      1024    7903    0     7903     2     0     2     2     0     8    2
vcpupl     3904      12    0        1     2     0     2     2     0     8    0
vmpool     664       13    0        1     1     0     1     1     0     8    0
kstatmem   264       26    0        0     2     0     2     2     0     8    0
scxspl     216     6520    0     6518     8     0     8     8     1     8    7
plimitpl   152      117    0      100     1     0     1     1     0     8    0
sigapl     424      564    0      498     8     0     8     8     0     8    0
futexpl     64     3259    0     3257     1     0     1     1     0     8    0
knotepl    120     7304    0     7251     2     0     2     2     0     8    0
kqueuepl   184       63    0       50     1     0     1     1     0     8    0
pipepl     288      120    0       93     3     0     3     3     0     8    1
fdescpl    432      526    0      498     5     0     5     5     0     8    1
filepl     120     3483    0     3220    14     0    14    14     0     8    5
lockfpl    104      194    0      192     2     0     2     2     0     8    1
lockfspl    48       93    0       91     1     0     1     1     0     8    0
sessionpl  144       21    0       13     1     0     1     1     0     8    0
pgrppl      48       33    0       17     1     0     1     1     0     8    0
ucredpl    104      238    0      227     1     0     1     1     0     8    0
zombiepl   144      501    0      498     1     0     1     1     0     8    0
processpl  1088     564    0      498     5     0     5     5     0     8    0
procpl     648      807    0      736     8     0     8     8     0     8    1
sosppl     168        1    0        1     1     0     1     1     0     8    1
sockpl     504      785    0      754    26    14    12    26     0     8    7
mcl64k     65536      1    0        1     1     0     1     1     0     8    1
mcl16k     16384      2    0        2     1     0     1     1     0     8    1
mcl8k      8192      10    0       10     1     0     1     1     0     8    1
mcl4k      4096       4    0        4     1     0     1     1     0     8    1
mcl2k      2048    5303    0     5201    28     8    20    28     0     8    6
mtagpl      96        6    0        4     1     0     1     1     0     8    0
mbufpl     256     8294    0     8090    17     0    17    17     0     8    1
bufpl      280     2391    0       91   165     0   165   165     0     8    0
anonpl      24   159596    0   156429    24     0    24    24     0   187    2
amapchunkpl 152   13051    0    12604    28     0    28    28     0   158    7
amappl16   200     4307    0     4285     5     0     5     5     0     8    2
amappl15   192       21    0       21     1     0     1     1     0     8    1
amappl14   184      109    0       99     1     0     1     1     0     8    0
amappl13   176       10    0       10     1     0     1     1     0     8    1
amappl12   168     1131    0     1103     3     0     3     3     0     8    1
amappl11   160       44    0       33     1     0     1     1     0     8    0
amappl10   152       10    0       10     1     0     1     1     0     8    1
amappl9    144      122    0      122     1     0     1     1     0     8    1
amappl8    136       67    0       66     1     0     1     1     0     8    0
amappl7    128       99    0       89     1     0     1     1     0     8    0
amappl6    120      167    0      166     1     0     1     1     0     8    0
amappl5    112      137    0      129     1     0     1     1     0     8    0
amappl4    104      283    0      269     1     0     1     1     0     8    0
amappl3     96     2646    0     2543     4     0     4     4     0     8    1
amappl2     88      598    0      540     2     0     2     2     0     8    0
amappl1     80     7836    0     7305    14     0    14    14     0     8    2
amappl      88     3553    0     3394     5     0     5     5     0    92    1
dma4096    4096       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     0     1     1     0     8    1
dma128     128      253    0      253     1     0     1     1     0     8    1
dma64       64        6    0        6     1     0     1     1     0     8    1
dma32       32        7    0        7     1     0     1     1     0     8    1
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        7    0        0     1     0     1     1     0     8    0
uaddrrnd    24      538    0      499     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      538    0      499     1     0     1     1     0     8    0
vmmpekpl   168     6102    0     6060     3     0     3     3     0     8    0
vmmpepl    168    41544    0    39826    80     0    80    80     0   357    0
vmsppl     344      538    0      499     4     0     4     4     0     8    0
rwobjpl     24    18222    0    15306    18     0    18    18     0     8    0
pdppl      4096    1083    0     1009   104    30    74    82     0     8    0
pvpl        32   305299    0   296615    80     0    80    80     0   265    2
pmappl     216      538    0      499     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      421    0       52    11     0    11    11     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8309b517) at panic+0x1cf sys/kern/subr_prf.c:198
vwakeup(fffffd807d1ba560) at vwakeup+0x17c sys/kern/vfs_subr.c:1941
biodone(fffffd806c70d9e0) at biodone+0x121 sys/kern/vfs_bio.c:1302
sd_buf_done(fffffd807d23d018) at sd_buf_done+0x2da sys/scsi/sd.c:772
vioscsi_vq_done(ffff8000000a2228) at vioscsi_vq_done+0xe1
intr_handler(ffff800035c06d10,ffff80000006a080) at intr_handler+0xcf
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x34 sys/dev/kcov.c:164
arc4random_buf(fffffd806a7df990,8) at arc4random_buf+0x35 sys/dev/rnd.c:541
pool_p_alloc(ffffffff835d8f28,1,ffff800035c06fdc) at pool_p_alloc+0x1c6 sys/kern/subr_pool.c:946
pool_do_get(ffffffff835d8f28,1,ffff800035c06fdc) at pool_do_get+0x174 sys/kern/subr_pool.c:707
pool_get(ffffffff835d8f28,1) at pool_get+0xf0
pmap_create() at pmap_create+0x18c sys/arch/amd64/amd64/pmap.c:1384
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b uvmspace_init sys/uvm/uvm_map.c:3261 [inline]
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b sys/uvm/uvm_map.c:3242
vm_impl_init(ffff800032dfbc88,ffff80003600cf60) at vm_impl_init+0xb3 sys/arch/amd64/amd64/vmm_machdep.c:1246
vm_create(ffff8000011f1400,ffff80003600cf60) at vm_create+0x1bb sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff8000011f1400,1,ffff80003600cf60) at vmmioctl+0x420
VOP_IOCTL(fffffd807365e0d8,c2585601,ffff8000011f1400,1,fffffd807f7d7680,ffff80003600cf60) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd807cc43878,c2585601,ffff8000011f1400,ffff80003600cf60) at vn_ioctl+0xe8 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff80003600cf60,ffff800035c075c0,ffff800035c07510) at sys_ioctl+0x678
syscall(ffff800035c075c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x84d62b2e9d0, count: -23
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8309b517) at panic+0x1cf sys/kern/subr_prf.c:198
vwakeup(fffffd807d1ba560) at vwakeup+0x17c sys/kern/vfs_subr.c:1941
biodone(fffffd806c70d9e0) at biodone+0x121 sys/kern/vfs_bio.c:1302
sd_buf_done(fffffd807d23d018) at sd_buf_done+0x2da sys/scsi/sd.c:772
vioscsi_vq_done(ffff8000000a2228) at vioscsi_vq_done+0xe1
intr_handler(ffff800035c06d10,ffff80000006a080) at intr_handler+0xcf
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x34 sys/dev/kcov.c:164
arc4random_buf(fffffd806a7df990,8) at arc4random_buf+0x35 sys/dev/rnd.c:541
pool_p_alloc(ffffffff835d8f28,1,ffff800035c06fdc) at pool_p_alloc+0x1c6 sys/kern/subr_pool.c:946
pool_do_get(ffffffff835d8f28,1,ffff800035c06fdc) at pool_do_get+0x174 sys/kern/subr_pool.c:707
pool_get(ffffffff835d8f28,1) at pool_get+0xf0
pmap_create() at pmap_create+0x18c sys/arch/amd64/amd64/pmap.c:1384
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b uvmspace_init sys/uvm/uvm_map.c:3261 [inline]
uvmspace_alloc(0,1000,1,0) at uvmspace_alloc+0x5b sys/uvm/uvm_map.c:3242
vm_impl_init(ffff800032dfbc88,ffff80003600cf60) at vm_impl_init+0xb3 sys/arch/amd64/amd64/vmm_machdep.c:1246
vm_create(ffff8000011f1400,ffff80003600cf60) at vm_create+0x1bb sys/dev/vmm/vmm.c:388
vmmioctl(a00,c2585601,ffff8000011f1400,1,ffff80003600cf60) at vmmioctl+0x420
VOP_IOCTL(fffffd807365e0d8,c2585601,ffff8000011f1400,1,fffffd807f7d7680,ffff80003600cf60) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd807cc43878,c2585601,ffff8000011f1400,ffff80003600cf60) at vn_ioctl+0xe8 sys/kern/vfs_vnops.c:525
sys_ioctl(ffff80003600cf60,ffff800035c075c0,ffff800035c07510) at sys_ioctl+0x678
syscall(ffff800035c075c0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x84d62b2e9d0, count: -23

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/08/07 14:44 openbsd 46cdafa7e1c2 f593e91c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: vwakeup: neg numoutput
2024/05/19 04:16 openbsd 088a2cd995ac c0f1611a .config console log report ci-openbsd-main panic: vwakeup: neg numoutput
* Struck through repros no longer work on HEAD.