syzbot


uvm_fault: putc (2)

Status: upstream: reported on 2025/07/21 11:57
Reported-by: syzbot+94fdeeef209e9a394d07@syzkaller.appspotmail.com
First crash: 41d, last: 41d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: putc -1 2 1257d 1260d 0/3 auto-closed as invalid on 2022/06/21 12:42

Sample crash report:
�nuvm_fault(0xfffffd806b9855b8, 0x0, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at      putc+0xd1:      movb    %r12b,0(%r13)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 43675  22185      0           0  0x4000000    1  syz-executor
 284386  77288      0     0x14000 0x40000200    0  softclock
putc(64,ffff800000afc280) at putc+0xd1 sys/kern/tty_subr.c:247
ttyoutput(64,ffff800000afc200) at ttyoutput+0x76a sys/kern/tty.c:689
tputchar(64,ffff800000afc200) at tputchar+0x14d ttstart sys/kern/tty.c:-1 [inline]
tputchar(64,ffff800000afc200) at tputchar+0x14d sys/kern/tty.c:2300
kputchar(64,5,0) at kputchar+0x10f sys/kern/subr_prf.c:360
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
printf(ffffffff8346e5bf) at printf+0x8b sys/kern/subr_prf.c:529
nd6_resolve(ffff800000039058,fffffd806aeaa178,fffffd805ec58900,fffffd806f4a2d58,ffff80003c41d6e8) at nd6_resolve+0x372 sys/netinet6/nd6.c:1277
ether_resolve(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178,ffff80003c41d6e8) at ether_resolve+0x2fa sys/net/if_ethersubr.c:265
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 ether_encap sys/net/if_ethersubr.c:342 [inline]
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 sys/net/if_ethersubr.c:371
if_output_tso(ffff800000039058,ffff80003c41d8e0,fffffd806f4a2d58,fffffd806aeaa178,5dc) at if_output_tso+0x216 sys/net/if.c:-1
ip6_output(fffffd805ec58900,0,fffffd806f4a2d40,0,0,fffffd806f4a2dd8) at ip6_output+0x23a8 sys/netinet6/ip6_output.c:703
tcp_output(ffff80000145a2e0) at tcp_output+0x361a sys/netinet/tcp_output.c:1114
tcp_connect(ffff800010fdb9b0,fffffd805ec3d500) at tcp_connect+0x57d sys/netinet/tcp_usrreq.c:692
sys_connect(ffff80003c448cf8,ffff80003c41dcf0,ffff80003c41dc40) at sys_connect+0x345 sys/kern/uipc_syscalls.c:415
end trace frame: 0xffff80003c41dce0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd806b9855b8, 0x0, 0, 2) -> e
ddb{1}> trace
putc(64,ffff800000afc280) at putc+0xd1 sys/kern/tty_subr.c:247
ttyoutput(64,ffff800000afc200) at ttyoutput+0x76a sys/kern/tty.c:689
tputchar(64,ffff800000afc200) at tputchar+0x14d ttstart sys/kern/tty.c:-1 [inline]
tputchar(64,ffff800000afc200) at tputchar+0x14d sys/kern/tty.c:2300
kputchar(64,5,0) at kputchar+0x10f sys/kern/subr_prf.c:360
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
printf(ffffffff8346e5bf) at printf+0x8b sys/kern/subr_prf.c:529
nd6_resolve(ffff800000039058,fffffd806aeaa178,fffffd805ec58900,fffffd806f4a2d58,ffff80003c41d6e8) at nd6_resolve+0x372 sys/netinet6/nd6.c:1277
ether_resolve(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178,ffff80003c41d6e8) at ether_resolve+0x2fa sys/net/if_ethersubr.c:265
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 ether_encap sys/net/if_ethersubr.c:342 [inline]
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 sys/net/if_ethersubr.c:371
if_output_tso(ffff800000039058,ffff80003c41d8e0,fffffd806f4a2d58,fffffd806aeaa178,5dc) at if_output_tso+0x216 sys/net/if.c:-1
ip6_output(fffffd805ec58900,0,fffffd806f4a2d40,0,0,fffffd806f4a2dd8) at ip6_output+0x23a8 sys/netinet6/ip6_output.c:703
tcp_output(ffff80000145a2e0) at tcp_output+0x361a sys/netinet/tcp_output.c:1114
tcp_connect(ffff800010fdb9b0,fffffd805ec3d500) at tcp_connect+0x57d sys/netinet/tcp_usrreq.c:692
sys_connect(ffff80003c448cf8,ffff80003c41dcf0,ffff80003c41dc40) at sys_connect+0x345 sys/kern/uipc_syscalls.c:415
syscall(ffff80003c41dcf0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c41dcf0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7c6d123b190, count: -16
ddb{1}> show registers
rdi               0xffff8000383fc000
rsi                            0xd21
rbp               0xffff80003c41d2c0
rbx                           0x2000    __ALIGN_SIZE+0x1000
rdx               0xffff8000383fc000
rcx                            0xd20
rax               0xffffffff811d4a1f    putc+0x9f
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x5a5303bc8fa53c4e
r11               0xf0af1336516148b8
r12                             0x64
r13                                0
r14                              0xd
r15               0xffff800000afc280
rip               0xffffffff811d4a51    putc+0xd1
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c41d280
ss                              0x10
putc+0xd1:      movb    %r12b,0(%r13)
ddb{1}> show proc
PROC (syz-executor) tid=43675 pid=22185 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c4499c8,0xffff80003c448a78
    process=0xffff80003c4aba50 user=0xffff80003c418000, vmspace=0xfffffd806b9855b8
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 18395   27800  42144      0  2           0                syz-executor
 22185  487213  64494      0  2           0                syz-executor
*22185   43675  64494      0  7   0x4000000                syz-executor
 85958  422784  49945      0  2           0                syz-executor
 85958  113448  49945      0  2   0x4000000                syz-executor
 85958  461810  49945      0  3   0x4000080  fsleep        syz-executor
 85958  275341  49945      0  2   0x4000000                syz-executor
 21674  516184   5927      0  2           0                syz-executor
 21674   46316   5927      0  3   0x4000080  fsleep        syz-executor
 38679  302787   3682      0  2           0                syz-executor
 38679   33426   3682      0  2   0x4000c80                syz-executor
 40040  492850  80761      0  2           0                syz-executor
 40040  143802  80761      0  3   0x4000080  fsleep        syz-executor
 71337  294247  75342      0  2           0                syz-executor
 71337  484015  75342      0  3   0x4000080  fsleep        syz-executor
 64494   15466  66611      0  3        0x82  nanoslp       syz-executor
  5927  413078  66611      0  2       0xc82                syz-executor
 45754  387836  39325      0  3        0x82  sbwait        sshd-session
 29745  227968      0      0  3     0x14200  bored         sosplice
 49945  456880  66611      0  3        0x82  nanoslp       syz-executor
 56174  516993  66611      0  2         0x2                syz-executor
 75342  441727  66611      0  3        0x82  nanoslp       syz-executor
 42144  114029  66611      0  2         0x2                syz-executor
  3682  391250  66611      0  2       0xc82                syz-executor
 80761  353972  66611      0  3        0x82  nanoslp       syz-executor
 66611  286487  31708      0  3        0x82  kqread        syz-executor
 31708  130396  61481      0  3    0x10008a  sigsusp       ksh
 61481  386749  22478      0  3        0x98  kqread        sshd-session
 22478   90631  39325      0  3        0x92  kqread        sshd-session
 68447   44940      1      0  3    0x100083  ttyin         getty
 39325   30527      1      0  3        0x88  kqread        sshd
  4069  397383  87920     74  3   0x1100092  bpf           pflogd
 87920  119938      1      0  3        0x80  sbwait        pflogd
 77120  309949  15812     73  3   0x1100090  kqread        syslogd
 15812  451030      1      0  3    0x100082  sbwait        syslogd
 21384  500034      1      0  3    0x100080  kqread        resolvd
 33846  508097  98095     77  3    0x100092  kqread        dhcpleased
 14600  211365  98095     77  3    0x100092  kqread        dhcpleased
 98095  358928      1      0  3        0x80  kqread        dhcpleased
 18728  168734      0      0  3     0x14200  bored         smr
 95938  519159      0      0  2     0x14200                zerothread
 59127  374028      0      0  3     0x14200  aiodoned      aiodoned
 19780  419475      0      0  3     0x14200  syncer        update
   993   44706      0      0  3     0x14200  cleaner       cleaner
 57133  128651      0      0  3     0x14200  reaper        reaper
 77703   27089      0      0  3     0x14200  pgdaemon      pagedaemon
  3052  217217      0      0  3     0x14200  bored         viomb
 97978  204759      0      0  3  0x40014200  acpi0         acpi0
 22454   92285      0      0  3  0x40014200                idle1
  3244  313664      0      0  3     0x14200  bored         softnet7
 44772  131012      0      0  3     0x14200  bored         softnet6
 90687  342240      0      0  3     0x14200  bored         softnet5
 10054   22111      0      0  3     0x14200  bored         softnet4
 97554  365627      0      0  3     0x14200  bored         softnet3
 17155  117928      0      0  3     0x14200  bored         softnet2
 18832  494071      0      0  3     0x14200  bored         softnet1
 34603  357378      0      0  3     0x14200  bored         softnet0
 83421  350042      0      0  3     0x14200  smrbar        systqmp
 47264  219782      0      0  3     0x14200  bored         systq
 52537  274615      0      0  3     0x14200  tmoslp        softclockmp
 77288  284386      0      0  7  0x40014200                softclock
 14385  125681      0      0  3  0x40014200                idle0
     1  492271      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 22185 (syz-executor) thread 0xffff80003c448cf8 (43675)
exclusive rwlock inet46 r = 0 (0xffff800010fdb9d0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  sys_connect+0x27f isdnssocket sys/kern/uipc_syscalls.c:-1 [inline]
#2  sys_connect+0x27f sys/kern/uipc_syscalls.c:406
#3  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:748
#4  Xsyscall+0x128
shared rwlock netlock r = 0 (0xffffffff83804f90)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x36e sys/kern/kern_rwlock.c:397
#2  solock_shared+0x6e sys/kern/uipc_socket2.c:343
#3  sys_connect+0x27f isdnssocket sys/kern/uipc_syscalls.c:-1 [inline]
#3  sys_connect+0x27f sys/kern/uipc_syscalls.c:406
#4  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:748
#5  Xsyscall+0x128
Process 56174 (syz-executor) thread 0xffff8000ffff3200 (516993)
exclusive rrwlock inode r = 0 (0xfffffd806e0b3f50)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vget+0x2bd sys/kern/vfs_subr.c:693
#6  ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203
#8  ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#11 namei+0x7aa sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#13 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0xb08 sys/arch/amd64/amd64/trap.c:748
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80795fbf80)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1864
#8  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb08 sys/arch/amd64/amd64/trap.c:748
#9  Xsyscall+0x128
Process 83421 (systqmp) thread 0xffff8000ffffe520 (350042)
shared rwlock systqmp r = 0 (0xffffffff8381f4e8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10226  11112K   11696K 166960K     12714        0
            pcb    17     15K      17K 166960K       323        0
         rtable   184      9K      10K 166960K       451        0
             pf    34     17K      21K 166960K       110        0
         ifaddr    39      7K       8K 166960K        89        0
        ifgroup    52      2K       2K 166960K       127        0
         sysctl     4      1K       9K 166960K        11        0
       counters    66     36K      37K 166960K       144        0
       ioctlops     0      0K       4K 166960K      1653        0
            iov     0      0K      16K 166960K        48        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1403     88K      89K 166960K      2530        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         9        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        23        0
        dirhash    12      2K       2K 166960K        30        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     240K 166960K      1110        0
          sigio     0      0K       0K 166960K        23        0
           proc    72     91K     152K 166960K       694        0
        subproc    72      4K       4K 166960K        99        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       115        0
       in_multi    84      6K       7K 166960K       184        0
    ether_multi     1      0K       0K 166960K        11        0
            mrt     1      0K       0K 166960K        12        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   205    917K     917K 166960K       205        0
           exec     0      0K       1K 166960K       513        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   225    175K     191K 166960K     11764        0
       UVM aobj    89      5K       5K 166960K        89        0
     pinsyscall    44     88K     106K 166960K      2321        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        47        0
            NDP    11      0K       2K 166960K        57        0
           temp    78   8684K    8808K 166960K     49500        0
         kqueue    13     20K      30K 166960K       177        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      167    0      163     2     1     1     2     0     8    0
rtentry    176      156    0       82     5     0     5     5     0     8    0
unpcb      144      902    0      883     7     1     6     6     0     8    5
syncache   336       10    0       10     3     2     1     1     0     8    1
tcpcb      736      332    0      324     7     5     2     7     0     8    1
arp        128       17    0        8     1     0     1     1     0     8    0
inpcb      328     1296    0     1285     7     2     5     7     0     8    4
nd6        144       26    0       13     1     0     1     1     0     8    0
pkpcb       40       10    0       10     1     0     1     1     0     8    1
kcovpl      48       11    0        3     1     0     1     1     0     8    0
mppekey    1024       2    0        2     1     0     1     1     0     8    1
ppxss      1192      29    0       29     1     0     1     1     0     8    1
pppxif     1504       3    0        3     1     0     1     1     0     8    1
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232        5    0        2     1     0     1     1     0   482    0
pffrnode    88        4    0        1     1     0     1     1     0     8    0
pffrent     40        9    0        6     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       61    0       10     1     0     1     1     0     8    0
pfstkey    128       62    0       11     2     0     2     2     0     8    0
pfstate    384       62    0       11     6     0     6     6     0     8    0
pfrule     1344      22    0       17     2     1     1     2     0     8    0
rttmr      136        4    0        4     1     0     1     1     0     8    1
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      746    0      376    30     0    30    30     0     8    3
art_table   40      749    0      376     5     0     5     5     0     8    0
art_node    32      156    0       91     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        0     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       21    0       11     1     0     1     1     0     8    0
shmpl      112       86    0        0     3     0     3     3     0     8    0
dirhash    1024      29    0       12     3     0     3     3     0     8    0
dino2pl    256     3618    0     2110    95     0    95    95     0     8    0
ffsino     288     3618    0     2110   109     0   109   109     0     8    0
nchpl      144     5086    0     3400    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     0     1     1     0     8    1
uvmvnodes   80     4277    0        0    88     0    88    88     0     8    0
vnodes     216     4277    0        0   238     0   238   238     0     8    0
namei      1024   17298    0    17298     2     1     1     2     0     8    1
percpumem   16       87    0       39     1     0     1     1     0     8    0
kstatmem   264       72    0       48     3     0     3     3     0     8    1
acpiwqpl    32        3    0        3     1     0     1     1     1     8    1
scsiplug    72        2    0        2     1     1     0     1     0     8    0
scxspl     216    30258    0    30258    10     8     2     8     1     8    2
plimitpl   152      195    0      177     1     0     1     1     0     8    0
sigapl     424     1429    0     1374     9     0     9     9     0     8    1
knotepl    120      570    0        0    18     0    18    18     0     8    0
kqueuepl   224      314    0      305     2     0     2     2     0     8    1
pipepl     336      194    0      167     3     0     3     3     0     8    0
fdescpl    520     1383    0     1351     3     0     3     3     0     8    0
filepl     160     9204    0     8980    20     3    17    18     0     8    5
lockfpl    104      703    0      700     2     1     1     2     0     8    0
lockfspl    48      299    0      296     1     0     1     1     0     8    0
sessionpl  144       32    0       22     1     0     1     1     0     8    0
pgrppl      48       56    0       38     1     0     1     1     0     8    0
ucredpl    104     1887    0     1872     1     0     1     1     0     8    0
zombiepl   144     1374    0     1374     1     0     1     1     0     8    1
processpl  1240    1429    0     1374     7     0     7     7     0     8    1
procpl     656     3055    0     2992     9     0     9     9     0     8    1
sosppl     168        6    0        6     1     0     1     1     0     8    1
sockpl     728     2395    0     2361    24    13    11    19     0     8    7
mcl64k     65536      6    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     122    0        0    16     0    16    16     0     8    0
mcl2k      2048      33    0        0     5     0     5     5     0     8    1
mtagpl      96       32    0        0     1     0     1     1     0     8    0
mbufpl     256     1222    0        0    77     0    77    77     0     8    0
bufpl      280    14232    0     8090   439     0   439   439     0     8    0
anonpl      32    12906    0        0   105     0   105   105     0   246    0
amapchunkpl 152   42078    0    41651    41     8    33    38     0   158   10
amappl16   200     5682    0     5649    49    34    15    26     0     8    8
amappl15   192        6    0        6     2     1     1     1     0     8    1
amappl14   184      132    0      119     1     0     1     1     0     8    0
amappl13   176        7    0        7     2     1     1     1     0     8    1
amappl12   168     2102    0     2070     4     2     2     3     0     8    0
amappl11   160       52    0       38     1     0     1     1     0     8    0
amappl10   152        6    0        6     1     1     0     1     0     8    0
amappl9    144      252    0      252     1     1     0     1     0     8    0
amappl8    136       21    0       19     1     0     1     1     0     8    0
amappl7    128      127    0      112     1     0     1     1     0     8    0
amappl6    120      218    0      213     1     0     1     1     0     8    0
amappl5    112      143    0      133     1     0     1     1     0     8    0
amappl4    104      335    0      316     1     0     1     1     0     8    0
amappl3     96     7742    0     7642     4     0     4     4     0     8    0
amappl2     88      767    0      695     2     0     2     2     0     8    0
amappl1     80    14069    0    13386    18     2    16    16     0     8    0
amappl      88    10800    0    10654     5     0     5     5     0    92    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        8    0        8     2     2     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       88    0        0     2     0     2     2     0     8    0
uaddrrnd    24     1383    0     1351     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1383    0     1351     1     0     1     1     0     8    0
vmmpekpl   168    12949    0    12905     3     0     3     3     0     8    0
vmmpepl    168    95147    0    93051   117     0   117   117     0   357   15
vmsppl     480     1382    0     1351     5     0     5     5     0     8    0
rwobjpl     72    32537    0    27162   100     0   100   100     0     8    0
pdppl      4096    2773    0     2702   111    38    73    85     0     8    2
pvpl        32    22866    0        0   186     1   185   186     0   265    0
pmappl     256     1382    0     1351     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      475    0       49    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83891ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839261f0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839261f0) at __mp_lock+0x192 sys/kern/kern_lock.c:165
intr_handler(ffff80002a1f8480,ffff800000069c00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff839261f0) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839261f0) at __mp_lock+0x19e sys/kern/kern_lock.c:165
__mp_acquire_count(ffffffff839261f0,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2da sys/kern/kern_synch.c:366
softclock_thread_run(ffffffff83889688) at softclock_thread_run+0x79 sys/kern/kern_timeout.c:845
softclock_thread(ffff8000ffffe7b0) at softclock_thread+0x10a sys/kern/kern_timeout.c:867
end trace frame: 0x0, count: 4
ddb{0}> trace
x86_ipi_db(ffffffff83891ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839261f0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839261f0) at __mp_lock+0x192 sys/kern/kern_lock.c:165
intr_handler(ffff80002a1f8480,ffff800000069c00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f
__mp_lock(ffffffff839261f0) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839261f0) at __mp_lock+0x19e sys/kern/kern_lock.c:165
__mp_acquire_count(ffffffff839261f0,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2da sys/kern/kern_synch.c:366
softclock_thread_run(ffffffff83889688) at softclock_thread_run+0x79 sys/kern/kern_timeout.c:845
softclock_thread(ffff8000ffffe7b0) at softclock_thread+0x10a sys/kern/kern_timeout.c:867
end trace frame: 0x0, count: -11
ddb{0}> machine ddbcpu 1
Stopped at      putc+0xd1:      movb    %r12b,0(%r13)
putc(64,ffff800000afc280) at putc+0xd1 sys/kern/tty_subr.c:247
ttyoutput(64,ffff800000afc200) at ttyoutput+0x76a sys/kern/tty.c:689
tputchar(64,ffff800000afc200) at tputchar+0x14d ttstart sys/kern/tty.c:-1 [inline]
tputchar(64,ffff800000afc200) at tputchar+0x14d sys/kern/tty.c:2300
kputchar(64,5,0) at kputchar+0x10f sys/kern/subr_prf.c:360
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
printf(ffffffff8346e5bf) at printf+0x8b sys/kern/subr_prf.c:529
nd6_resolve(ffff800000039058,fffffd806aeaa178,fffffd805ec58900,fffffd806f4a2d58,ffff80003c41d6e8) at nd6_resolve+0x372 sys/netinet6/nd6.c:1277
ether_resolve(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178,ffff80003c41d6e8) at ether_resolve+0x2fa sys/net/if_ethersubr.c:265
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 ether_encap sys/net/if_ethersubr.c:342 [inline]
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 sys/net/if_ethersubr.c:371
if_output_tso(ffff800000039058,ffff80003c41d8e0,fffffd806f4a2d58,fffffd806aeaa178,5dc) at if_output_tso+0x216 sys/net/if.c:-1
ip6_output(fffffd805ec58900,0,fffffd806f4a2d40,0,0,fffffd806f4a2dd8) at ip6_output+0x23a8 sys/netinet6/ip6_output.c:703
tcp_output(ffff80000145a2e0) at tcp_output+0x361a sys/netinet/tcp_output.c:1114
tcp_connect(ffff800010fdb9b0,fffffd805ec3d500) at tcp_connect+0x57d sys/netinet/tcp_usrreq.c:692
sys_connect(ffff80003c448cf8,ffff80003c41dcf0,ffff80003c41dc40) at sys_connect+0x345 sys/kern/uipc_syscalls.c:415
end trace frame: 0xffff80003c41dce0, count: 0
ddb{1}> trace
putc(64,ffff800000afc280) at putc+0xd1 sys/kern/tty_subr.c:247
ttyoutput(64,ffff800000afc200) at ttyoutput+0x76a sys/kern/tty.c:689
tputchar(64,ffff800000afc200) at tputchar+0x14d ttstart sys/kern/tty.c:-1 [inline]
tputchar(64,ffff800000afc200) at tputchar+0x14d sys/kern/tty.c:2300
kputchar(64,5,0) at kputchar+0x10f sys/kern/subr_prf.c:360
kprintf() at kprintf+0x2aba sys/kern/subr_prf.c:1065
printf(ffffffff8346e5bf) at printf+0x8b sys/kern/subr_prf.c:529
nd6_resolve(ffff800000039058,fffffd806aeaa178,fffffd805ec58900,fffffd806f4a2d58,ffff80003c41d6e8) at nd6_resolve+0x372 sys/netinet6/nd6.c:1277
ether_resolve(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178,ffff80003c41d6e8) at ether_resolve+0x2fa sys/net/if_ethersubr.c:265
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 ether_encap sys/net/if_ethersubr.c:342 [inline]
ether_output(ffff800000039058,fffffd805ec58900,fffffd806f4a2d58,fffffd806aeaa178) at ether_output+0x54 sys/net/if_ethersubr.c:371
if_output_tso(ffff800000039058,ffff80003c41d8e0,fffffd806f4a2d58,fffffd806aeaa178,5dc) at if_output_tso+0x216 sys/net/if.c:-1
ip6_output(fffffd805ec58900,0,fffffd806f4a2d40,0,0,fffffd806f4a2dd8) at ip6_output+0x23a8 sys/netinet6/ip6_output.c:703
tcp_output(ffff80000145a2e0) at tcp_output+0x361a sys/netinet/tcp_output.c:1114
tcp_connect(ffff800010fdb9b0,fffffd805ec3d500) at tcp_connect+0x57d sys/netinet/tcp_usrreq.c:692
sys_connect(ffff80003c448cf8,ffff80003c41dcf0,ffff80003c41dc40) at sys_connect+0x345 sys/kern/uipc_syscalls.c:415
syscall(ffff80003c41dcf0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c41dcf0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7c6d123b190, count: -16

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/21 11:56 openbsd df9e633562d5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: putc
* Struck through repros no longer work on HEAD.