syzbot


KASAN: invalid memory access in sysctl_sysvipc

Status: upstream: reported on 2026/07/15 09:15
Reported-by: syzbot+70f040b6548de270e4ef@syzkaller.appspotmail.com
First crash: 5d21h, last: 2d08h
Duplicate bugs (1)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
KASAN: invalid memory access in uvm_map_lookup_entry -1 1 6d17h 6d17h 0/4 closed as dup on 2026/07/15 09:38

Sample crash report:
panic: Caught invalid memory access at ffff8000018cdd10 size 24 op 1
Stopped at      db_enter+0x17:  popq    %rbp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 64365  67381      0           0  0x4000000    0  syz-executor
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cdd10,ffffffff846635c0,18) at kasan_memcpy+0x1ec
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sysvipc_infoout sys/kern/kern_sysctl.c:2713 [inline]
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sys/kern/kern_sysctl.c:2776
kern_sysctl_dirs(33,ffff8000382dfdc8,1,200000000180,ffff8000382dfda0,0,1,1ffff0000705bf30) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff8000382dfdc4,2,200000000180,ffff8000382dfda0,0,fffa,ffff8000382e0020) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800045ff5780,ffff8000382e0020,ffff8000382dff80) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff8000382e0020) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000382e0020) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2dd0bd6ae80, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: Caught invalid memory access at ffff8000018cdd10 size 24 op 1
ddb{0}> show kasan
KASAN: invalid write of 24 bytes at 0xffff8000018cdd10 from pc 0xffffffff83477569
KASAN: first bad byte at 0xffff8000018cdd17 (+7); shadow 0x07: partial granule (out-of-bounds)
KASAN: 0xffff8000018cdd17 is 7 bytes inside the 16-byte malloc slot [0xffff8000018cdd10..0xffff8000018cdd20)
KASAN: allocated at:
#0  malloc+0xda0 sys/kern/kern_malloc.c:446
#1  sysctl_sysvipc+0x3d7 sysvipc_infoout sys/kern/kern_sysctl.c:-1 [inline]
#1  sysctl_sysvipc+0x3d7 sys/kern/kern_sysctl.c:2776
#2  kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
#3  kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
#4  sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#5  syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
#6  Xsyscall+0x128
KASAN: pc: sysctl_sysvipc+0x3f9
KASAN: call trace:
#0  kasan_memcpy+0x1ca kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
#0  kasan_memcpy+0x1ca sys/kern/subr_kasan.c:1025
#1  sysctl_sysvipc+0x3f9 sysvipc_infoout sys/kern/kern_sysctl.c:2713 [inline]
#1  sysctl_sysvipc+0x3f9 sys/kern/kern_sysctl.c:2776
#2  kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
#3  kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
#4  sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#5  syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
#6  Xsyscall+0x128
KASAN: shadow of 0xffff8000018cdc00..0xffff8000018cde80 (1 cell = 8 bytes):
 0xffff8000018cdc00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
 0xffff8000018cdc80: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 04 fb 08 fb
>0xffff8000018cdd00: fc 08[07]fb fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
 0xffff8000018cdd80: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
 0xffff8000018cde00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope
ddb{0}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cdd10,ffffffff846635c0,18) at kasan_memcpy+0x1ec
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sysvipc_infoout sys/kern/kern_sysctl.c:2713 [inline]
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sys/kern/kern_sysctl.c:2776
kern_sysctl_dirs(33,ffff8000382dfdc8,1,200000000180,ffff8000382dfda0,0,1,1ffff0000705bf30) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff8000382dfdc4,2,200000000180,ffff8000382dfda0,0,fffa,ffff8000382e0020) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800045ff5780,ffff8000382e0020,ffff8000382dff80) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff8000382e0020) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000382e0020) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2dd0bd6ae80, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000382df530
rbx               0xffff8000382df5a0
rdx                                0
rcx               0xffffffff850aeff0    cpu_info_full_primary+0x1ff0
rax               0xffff80000016f280
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xffff8000382df318
r11               0xffffffff8263c7e0    x86_bus_space_io_read_1
r12               0xffffffff84634053    .str.5+0x9c553
r13               0xffffffff850afc08    cpu_info_full_primary+0x2c08
r14               0xffffffff850afe07    cpu_info_full_primary+0x2e07
r15                              0x1
rip               0xffffffff81fd2ec7    db_enter+0x17
cs                               0x8
rflags                         0x246
rsp               0xffff8000382df530
ss                              0x10
db_enter+0x17:  popq    %rbp
ddb{0}> show proc
PROC (syz-executor) tid=64365 pid=67381 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045ff6a80,0xffff800045ff5cc0
    process=0xffff800045ffa698 user=0xffff8000382d5000, vmspace=0xffff800001c7b3f0
    estcpu=36, cpticks=18, pctcpu=0.0, user=0, sys=18, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 30986  453164  78727     0  2           0          0           syz-executor
 30986   66703  78727     0  3           0  0x4000080 fsleep    syz-executor
 58874  317591  79863     0  2         0x1          0           syz-executor
 58874  155031  79863     0  3         0x1  0x4000080 fsleep    syz-executor
 67381  122984  81227     0  2           0          0           syz-executor
*67381   64365  81227     0  7           0  0x4000000           syz-executor
 61052   93052  18496     0  2           0          0           syz-executor
 61052   66542  18496     0  3           0  0x4000080 fifow     syz-executor
 61052  420798  18496     0  3           0  0x4000080 fsleep    syz-executor
 61052   16031  18496     0  3           0  0x4000080 fsleep    syz-executor
 62091  148383  51006     0  2      0x2010    0x80000           syz-executor
 62091  380761  51006     0  3      0x2010  0x4000000 suspend   syz-executor
 62091  130450  51006     0  4      0x2010  0x4080000           syz-executor
 74826  288524  33783     0  2        0x10      0xc80           syz-executor
 74826  337395  33783     0  3        0x10  0x4000080 sbwait    syz-executor
 74826  343892  33783     0  3        0x10  0x4000080 fsleep    syz-executor
 74826  268777  33783     0  3        0x10  0x4000080 fsleep    syz-executor
 58023  247418      1     0  3    0x100003       0x80 ttyin     getty
 51006  520234  22983     0  2         0x2      0xc80           syz-executor
 78727  213263  22983     0  2         0x2      0xc80           syz-executor
 33783  512756  22983     0  2         0x2      0xc80           syz-executor
 55659  238873  22983     0  2         0x2          0           syz-executor
 39803  376825  22983     0  2         0x2      0xc80           syz-executor
 18496    4772  22983     0  2         0x2      0xc80           syz-executor
 79863   91668  22983     0  2         0x2      0xc80           syz-executor
 81227  109675  22983     0  2         0x2      0xc80           syz-executor
 22983  326502      1     0  3         0x2       0x80 kqread    syz-executor
 73394  164073  48628     0  3        0x10       0x88 kqread    sshd-session
 48628  299271  75546     0  3        0x12       0x80 kqread    sshd-session
 75546  390031      1     0  3           0       0x88 kqread    sshd
 28678  261241  33795    74  3   0x1100012       0x80 bpf       pflogd
 33795  363606      1     0  3           0       0x80 sbwait    pflogd
 87970   51624  44097    73  2   0x1100010       0x80           syslogd
 44097  394821      1     0  3    0x100002       0x80 sbwait    syslogd
 41214  457056      1     0  3    0x100000       0x80 kqread    resolvd
 70287  343199  98141    77  3    0x100012       0x80 kqread    dhcpleased
 92772  510039  98141    77  3    0x100012       0x80 kqread    dhcpleased
 98141  439899      1     0  3           0       0x80 kqread    dhcpleased
 41553   41658      0     0  3     0x14000      0x200 bored     smr
 21870   41179      0     0  2     0x14000      0x200           zerothread
  7000   88483      0     0  3     0x14000      0x200 aiodoned  aiodoned
 60825  307654      0     0  3     0x14000      0x200 syncer    update
 25614  326090      0     0  3     0x14000      0x200 cleaner   cleaner
 90603  299358      0     0  3     0x14000      0x200 reaper    reaper
 54070  206804      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 11028   16259      0     0  3     0x14000      0x200 bored     viomb
 94048  237860      0     0  3     0x14000 0x40000200 acpi0     acpi0
 12618  505843      0     0  7     0x14000 0x40000200           idle1
 97069  143826      0     0  3     0x14000      0x200 bored     softnet1
 21049  136051      0     0  3     0x14000      0x200 bored     softnet0
 21851  516930      0     0  3     0x14000      0x200 bored     systqmp
  8003  456334      0     0  3     0x14000      0x200 bored     systq
 95732  215411      0     0  2     0x14000      0x200           softclockmp
 63754  148694      0     0  3     0x14000 0x40000200 tmoslp    softclock
 52205   67022      0     0  3     0x14000 0x40000200           idle0
     1  265845      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3  0x10010000      0x200 scheduler swapper
ddb{0}> show all locks
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11061  12254K   12561K 166960K     13068        0
            pcb    17     24K      24K 166960K        69        0
         rtable   247     13K      13K 166960K       361        0
             pf    37     23K      28K 166960K        74        0
         ifaddr    43     12K      13K 166960K        53        0
        ifgroup    55      2K       2K 166960K        79        0
         sysctl     3      1K      13K 166960K        11        0
       counters    70     42K      43K 166960K        82        0
       ioctlops     0      0K       4K 166960K      1685        0
            iov     0      0K      16K 166960K       146        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1405     90K      90K 166960K      2028        0
      UFS quota     1     36K      36K 166960K         1        0
      UFS mount     5     44K      44K 166960K         5        0
            shm     2      2K      10K 166960K        29        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      1K       2K 166960K        33        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     292K 166960K     11964        0
      file desc    17     61K      97K 166960K       614        0
          sigio     1      0K       0K 166960K        12        0
           proc    72    128K     177K 166960K       618        0
        subproc    72      9K       9K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     20K      20K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         7        0
       in_multi    99      7K       7K 166960K        99        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K        17        0
    ISOFS mount     1     36K      36K 166960K         1        0
  MSDOSFS mount     1     20K      20K 166960K         1        0
           ttys    79    546K     546K 166960K        79        0
           exec     0      0K       2K 166960K       401        0
   fusefs mount     1     36K      36K 166960K         1        0
            tdb     3      1K       1K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241    234K     262K 166960K      7392        0
       UVM aobj    46      9K       9K 166960K        48        0
     pinsyscall  1065   1925K    1927K 166960K      1777        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         1        0
            NDP    12      0K       2K 166960K        34        0
           temp    40   9170K    9182K 166960K     12883        0
         kqueue    14     44K      53K 166960K       115        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       35    0       32     1     0     1     1     0     8    0
rtentry    176      116    0        1     6     0     6     6     0     8    0
unpcb      144      808    0      781     4     2     2     2     0     8    0
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpcb      736      125    0      120     7     0     7     7     0     8    6
arp        136       19    0        0     1     0     1     1     0     8    0
inpcb      328      584    0      573    13     6     7     7     0     8    6
nd6        152       28    0        0     2     0     2     2     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       1    0        1     1     0     1     1     0     8    1
pffrag     232        4    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        6    0        2     1     0     1     1     0     8    0
pfosfp      40     1428    0     1428     5     5     0     5     0     8    0
pfosfpen   112     1428    0     1428    21    21     0    21     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24       49    0       16     1     0     1     1     0     8    0
pfstkey    128       49    0       16     2     0     2     2     0     8    0
pfstate    448       49    0       16     5     0     5     5     0     8    0
pfrule     1360      23    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      461    0        0    29     0    29    29     0     8    0
art_table   40      462    0        0     5     0     5     5     0     8    0
art_node    32      116    0       11     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        3     2     1     1     1     0     8    1
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl      72       29    0       19     1     0     1     1     0     8    0
shmpl      112       45    0        2     2     0     2     2     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     2492    0     1014    93     0    93    93     0     8    0
ffsino     296     2492    0     1014   115     0   115   115     0     8    0
nchpl      144     3400    0     1691    64     0    64    64     0     8    0
vnodes     216     3002    0        0   167     0   167   167     0     8    0
namei      1024   11805    0    11805     3     2     1     1     0     8    1
percpumem   16       57    0        6     1     0     1     1     0     8    0
kstatmem   264       39    0       12     2     0     2     2     0     8    0
scxspl     216    11202    0    11202     7     5     2     3     1     8    2
plimitpl   152      137    0      121     1     0     1     1     0     8    0
sigapl     424      934    0      888     7     1     6     7     0     8    0
knotepl    120      131    0        0     4     0     4     4     0     8    0
kqueuepl   224      251    0      241     5     0     5     5     0     8    4
pipepl     344      212    0      183     3     0     3     3     0     8    0
fdescpl    528      917    0      887     3     0     3     3     0     8    0
filepl     160     6097    0     5795    20     4    16    16     0     8    3
lockfpl    104      352    0      350     2     1     1     2     0     8    0
lockfspl    48      163    0      161     1     0     1     1     0     8    0
sessionpl  144      157    0      147     1     0     1     1     0     8    0
pgrppl      48      179    0      161     1     0     1     1     0     8    0
ucredpl    104     1079    0     1064     1     0     1     1     0     8    0
zombiepl   144     1022    0     1021     1     0     1     1     0     8    0
processpl  1232     934    0      888     5     1     4     5     0     8    0
procpl     664     1776    0     1719     6     0     6     6     0     8    0
sosppl     176        2    0        2     1     0     1     1     0     8    1
sockpl     752     1433    0     1392    17     6    11    11     0     8    6
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl9k128   9344       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k      2048      18    0        0     3     0     3     3     0     8    0
mextrefs    64       19    0        0     1     0     1     1     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      781    0        0    49     0    49    49     0     8    0
bufpl      272     3353    0      107   217     0   217   217     0     8    0
anonpl      32     7423    0        0    60     0    60    60     0   222    0
amapchunkpl 152   23126    0    22618    31    10    21    27     0   158    0
amappl16   200     2729    0     2695    18    15     3    15     0     8    0
amappl15   192       11    0       11     1     1     0     1     0     8    0
amappl14   184      512    0      512     1     1     0     1     0     8    0
amappl13   176      132    0      120     1     0     1     1     0     8    0
amappl12   168     1170    0     1140     2     0     2     2     0     8    0
amappl11   160       16    0       16     4     3     1     1     0     8    1
amappl10   152       66    0       52     1     0     1     1     0     8    0
amappl9    144      276    0      276     1     1     0     1     0     8    0
amappl8    136      114    0      112     1     0     1     1     0     8    0
amappl7    128      152    0      138     1     0     1     1     0     8    0
amappl6    120      190    0      189     1     0     1     1     0     8    0
amappl5    112      103    0       92     1     0     1     1     0     8    0
amappl4    104      322    0      300     1     0     1     1     0     8    0
amappl3     96     4753    0     4637     4     0     4     4     0     8    0
amappl2     88      543    0      480     2     0     2     2     0     8    0
amappl1     80    12415    0    11817    15     2    13    15     0     8    0
amappl      88     6574    0     6405     5     0     5     5     0    92    0
uvmvnodes   80      111    0        0     3     0     3     3     0     8    0
dma4096    4096       2    0        2     2     2     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       47    0        2     1     0     1     1     0     8    0
uaddrrnd    24      917    0      887     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      917    0      887     1     0     1     1     0     8    0
vmmpekpl   168     9458    0     9423     2     0     2     2     0     8    0
vmmpepl    168    65858    0    63932    92     4    88    92     0   357    1
vmsppl     488      916    0      887     5     1     4     5     0     8    0
rwobjpl     80    20550    0    19455    28     4    24    27     0     8    0
pdppl      4096    1843    0     1774    99    28    71    89     0     8    2
pvpl        32    13315    0        0   108     0   108   108     0   265    0
pmappl     256      916    0      887     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     120      536    0       36    16     0    16    16     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cdd10,ffffffff846635c0,18) at kasan_memcpy+0x1ec
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sysvipc_infoout sys/kern/kern_sysctl.c:2713 [inline]
sysctl_sysvipc(ffff8000382dfdc8,1,200000000180,ffff8000382dfda0) at sysctl_sysvipc+0x3f9 sys/kern/kern_sysctl.c:2776
kern_sysctl_dirs(33,ffff8000382dfdc8,1,200000000180,ffff8000382dfda0,0,1,1ffff0000705bf30) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff8000382dfdc4,2,200000000180,ffff8000382dfda0,0,fffa,ffff8000382e0020) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800045ff5780,ffff8000382e0020,ffff8000382dff80) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff8000382e0020) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000382e0020) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2dd0bd6ae80, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x19:        leave
x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x63c sys/dev/acpi/acpicpu_x86.c:-1
sched_idle(ffff800028fe3ff0) at sched_idle+0x566 sys/kern/kern_sched.c:204
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x63c sys/dev/acpi/acpicpu_x86.c:-1
sched_idle(ffff800028fe3ff0) at sched_idle+0x566 sys/kern/kern_sched.c:204
end trace frame: 0x0, count: -5

Crashes (54):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/18 20:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1a2082c4ae19 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 17:18 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 1a2082c4ae19 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 08:58 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 07:52 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 04:33 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 02:04 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/18 00:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 18:35 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 17:17 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 17:14 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 16:43 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 16:07 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 15:45 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2a13fb6a1f83 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 12:07 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48ffa5ab14da 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 11:46 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48ffa5ab14da 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 05:02 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48ffa5ab14da 6ca2b51a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/17 03:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 48ffa5ab14da 6ca2b51a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 18:22 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b0ea410f6c4b 851bd571 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 16:31 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b0ea410f6c4b 851bd571 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 14:11 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b0ea410f6c4b 851bd571 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 11:22 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b0ea410f6c4b 851bd571 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 07:12 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 06:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 06:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 06:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 04:46 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 04:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 04:26 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 03:36 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 03:23 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 02:49 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 01:19 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/16 00:14 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 22:21 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 21:55 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 21:10 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 20:41 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 18:48 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 18:42 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 17:40 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 17:19 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 16:56 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 16:05 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 13:29 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 11:47 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 11:16 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 11:14 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 105dba7a2dcb a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
2026/07/15 09:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan d540b1bf3d7f a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan KASAN: invalid memory access in sysctl_sysvipc
* Struck through repros no longer work on HEAD.