syzbot


panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (8)

Status: closed as invalid on 2020/08/04 06:37
Reported-by: syzbot+b6d9f26bc0d1a9c99ef4@syzkaller.appspotmail.com
First crash: 1472d, last: 1401d
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (2) 1 1635d 1635d 0/3 closed as invalid on 2019/11/02 08:04
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (6) 1 1538d 1538d 0/3 closed as invalid on 2020/02/09 09:06
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (7) 1 1514d 1514d 0/3 closed as invalid on 2020/03/03 08:16
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (3) 1 1607d 1607d 0/3 closed as invalid on 2019/12/02 08:42
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (4) 2 1552d 1552d 0/3 closed as invalid on 2020/01/26 09:58
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR 1 1657d 1657d 0/3 closed as invalid on 2019/10/26 08:48
openbsd panic.go:LINE +0x72 fp=ADDR sp=ADDR pc=ADDR (5) 1 1545d 1545d 0/3 closed as invalid on 2020/02/01 08:31

Sample crash report:
	/usr/local/go/src/runtime/panic.go:774 +0x72 fp=0xc0029a35f8 sp=0xc0029a35c8 pc=0x42e9d2
runtime.sigpanic()
	/usr/local/go/src/runtime/signal_unix.go:378 +0x47c fp=0xc0029a3628 sp=0xc0029a35f8 pc=0x443f5c
runtime.memclrNoHeapPointers(0xc001f6c000, 0x6000)
	/usr/local/go/src/runtime/memclr_amd64.s:76 +0x113 fp=0xc0029a3630 sp=0xc0029a3628 pc=0x45e493
runtime.(*mheap).alloc(0xd62020, 0x3, 0x25b01005d, 0x2e4a78f20)
	/usr/local/go/src/runtime/mheap.go:1098 +0xda fp=0xc0029a3680 sp=0xc0029a3630 pc=0x42566a
runtime.(*mcentral).grow(0xd63b18, 0x0)
	/usr/local/go/src/runtime/mcentral.go:255 +0x7b fp=0xc0029a36c0 sp=0xc0029a3680 pc=0x4178ab
runtime.(*mcentral).cacheSpan(0xd63b18, 0x203000)
	/usr/local/go/src/runtime/mcentral.go:106 +0x2fe fp=0xc0029a3720 sp=0xc0029a36c0 pc=0x4173ce
runtime.(*mcache).refill(0x2ab6b1008, 0x5d)
	/usr/local/go/src/runtime/mcache.go:138 +0x85 fp=0xc0029a3740 sp=0xc0029a3720 pc=0x416e75
runtime.(*mcache).nextFree(0x2ab6b1008, 0x87a75d, 0xc001ec8000, 0xc0029a3830, 0x40)
	/usr/local/go/src/runtime/malloc.go:854 +0x87 fp=0xc0029a3778 sp=0xc0029a3740 pc=0x40b967
runtime.mallocgc(0x1800, 0x8a8720, 0x1, 0x8)
	/usr/local/go/src/runtime/malloc.go:1022 +0x793 fp=0xc0029a3818 sp=0xc0029a3778 pc=0x40c2a3
runtime.newarray(0x8a8720, 0x4c, 0xc002bf19e0)
	/usr/local/go/src/runtime/malloc.go:1173 +0x63 fp=0xc0029a3848 sp=0xc0029a3818 pc=0x40c7e3
runtime.makeBucketArray(0x862680, 0x6, 0x0, 0xc0016abb80, 0x4)
	/usr/local/go/src/runtime/map.go:362 +0x183 fp=0xc0029a3880 sp=0xc0029a3848 pc=0x40d6b3
runtime.hashGrow(0x862680, 0xc001644e10)
	/usr/local/go/src/runtime/map.go:1033 +0x89 fp=0xc0029a38d0 sp=0xc0029a3880 pc=0x40f1a9
runtime.mapassign_fast64(0x862680, 0xc001644e10, 0xd0, 0xd79620)
	/usr/local/go/src/runtime/map_fast64.go:156 +0x12c fp=0xc0029a3910 sp=0xc0029a38d0 pc=0x41137c
github.com/google/syzkaller/prog.(*vmaAlloc).noteAlloc(0xc001644e40, 0x0, 0x800)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/alloc.go:131 +0x9f fp=0xc0029a3968 sp=0xc0029a3910 pc=0x76b9ff
github.com/google/syzkaller/prog.(*state).analyzeImpl.func1(0x9b2d60, 0xc001644300, 0xc0016abb40)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:64 +0x3e1 fp=0xc0029a39f0 sp=0xc0029a3968 pc=0x7a18d1
github.com/google/syzkaller/prog.foreachArgImpl(0x9b2d60, 0xc001644300, 0xc0016abb40, 0xc0029a3c10)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x113 fp=0xc0029a3bb0 sp=0xc0029a39f0 pc=0x76c513
github.com/google/syzkaller/prog.ForeachArg(0xc001630ac0, 0xc0029a3c10)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd fp=0xc0029a3c00 sp=0xc0029a3bb0 pc=0x76c36d
github.com/google/syzkaller/prog.(*state).analyzeImpl(0xc001578730, 0xc001630ac0, 0xc00275e001)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:58 +0x61 fp=0xc0029a3c38 sp=0xc0029a3c00 pc=0x76c271
github.com/google/syzkaller/prog.analyze(0xc002094480, 0xc00275e000, 0x2665, 0x3000, 0xc001630880, 0xc001631f80, 0x10)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:34 +0xa5 fp=0xc0029a3ca0 sp=0xc0029a3c38 pc=0x76bfa5
github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc0029a3ec0, 0xa)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:180 +0x1a3 fp=0xc0029a3e30 sp=0xc0029a3ca0 pc=0x784713
github.com/google/syzkaller/prog.(*Prog).Mutate(0xc001630880, 0x9ac3a0, 0xc0023e4180, 0x14, 0xc002094480, 0xc00275e000, 0x2665, 0x3000)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:47 +0x32c fp=0xc0029a3f08 sp=0xc0029a3e30 pc=0x78367c
main.(*Proc).loop(0xc002094600)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 fp=0xc0029a3fd8 sp=0xc0029a3f08 pc=0x7f1884
runtime.goexit()
	/usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc0029a3fe0 sp=0xc0029a3fd8 pc=0x45d461
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188

goroutine 1 [select]:
main.(*Fuzzer).pollLoop(0xc0000a5080)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:321 +0x127
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:263 +0x12f9

goroutine 21 [IO wait]:
internal/poll.runtime_pollWait(0x25dca5df8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0000c1698, 0x72, 0x1000, 0x1000, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0000c1680, 0xc000242000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
net.(*netFD).Read(0xc0000c1680, 0xc000242000, 0x1000, 0x1000, 0xc000161a60, 0xc000161b40, 0x7c84dd)
	/usr/local/go/src/net/fd_unix.go:202 +0x4f
net.(*conn).Read(0xc00000f378, 0xc000242000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/usr/local/go/src/net/net.go:184 +0x68
bufio.(*Reader).fill(0xc000055c80)
	/usr/local/go/src/bufio/bufio.go:100 +0x103
bufio.(*Reader).ReadByte(0xc000055c80, 0xc000161c00, 0xc0000c1700, 0xc00000df20)
	/usr/local/go/src/bufio/bufio.go:252 +0x39
compress/flate.(*decompressor).moreBits(0xc00023c000, 0x926088, 0xc000161b88)
	/usr/local/go/src/compress/flate/inflate.go:696 +0x37
compress/flate.(*decompressor).nextBlock(0xc00023c000)
	/usr/local/go/src/compress/flate/inflate.go:303 +0x36
compress/flate.(*decompressor).Read(0xc00023c000, 0xc000250000, 0x1000, 0x1000, 0x8988c0, 0xc000bcc450, 0x199)
	/usr/local/go/src/compress/flate/inflate.go:347 +0x77
github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0000f4b40, 0xc000250000, 0x1000, 0x1000, 0x10, 0xc000161b88, 0x7c833d)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51
bufio.(*Reader).Read(0xc000055ce0, 0xc000020c00, 0x1, 0x9, 0x0, 0x0, 0xc000161d70)
	/usr/local/go/src/bufio/bufio.go:226 +0x26a
io.ReadAtLeast(0x9a8160, 0xc000055ce0, 0xc000020c00, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0)
	/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
encoding/gob.decodeUintReader(0x9a8160, 0xc000055ce0, 0xc000020c00, 0x9, 0x9, 0x4050d5, 0x4307fc, 0xc000161d48, 0x45a310)
	/usr/local/go/src/encoding/gob/decode.go:120 +0x6f
encoding/gob.(*Decoder).recvMessage(0xc0000c1700, 0x404fbc)
	/usr/local/go/src/encoding/gob/decoder.go:81 +0x57
encoding/gob.(*Decoder).decodeTypeSequence(0xc0000c1700, 0xc000000100, 0xc000161e10)
	/usr/local/go/src/encoding/gob/decoder.go:143 +0x10c
encoding/gob.(*Decoder).DecodeValue(0xc0000c1700, 0x832ec0, 0xc0000f5020, 0x16, 0x0, 0x0)
	/usr/local/go/src/encoding/gob/decoder.go:211 +0x10b
encoding/gob.(*Decoder).Decode(0xc0000c1700, 0x832ec0, 0xc0000f5020, 0x0, 0x0)
	/usr/local/go/src/encoding/gob/decoder.go:188 +0x16d
net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0000f4c30, 0xc0000f5020, 0xc000bcc420, 0x0)
	/usr/local/go/src/net/rpc/client.go:228 +0x45
net/rpc.(*Client).input(0xc000055da0)
	/usr/local/go/src/net/rpc/client.go:109 +0xa5
created by net/rpc.NewClientWithCodec
	/usr/local/go/src/net/rpc/client.go:206 +0x89

goroutine 7 [syscall, 1 minutes]:
os/signal.signal_recv(0x0)
	/usr/local/go/src/runtime/sigqueue.go:147 +0x9c
os/signal.loop()
	/usr/local/go/src/os/signal/signal_unix.go:23 +0x22
created by os/signal.init.0
	/usr/local/go/src/os/signal/signal_unix.go:29 +0x41

goroutine 17 [chan receive, 1 minutes]:
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc0000682a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:78 +0xb6
created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:75 +0x3f

goroutine 18 [chan receive, 1 minutes]:
main.main.func1(0xc0000682a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:138 +0x34
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:136 +0x5b0

goroutine 25 [IO wait]:
internal/poll.runtime_pollWait(0x25dca5f98, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc001fa9c98, 0x72, 0x1, 0xc, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc001fa9c80, 0xc0015cc620, 0xc, 0xc, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001b31418, 0xc0015cc620, 0xc, 0xc, 0xc0005199c8, 0x40c698, 0x10)
	/usr/local/go/src/os/file.go:116 +0x71
io.ReadAtLeast(0x9a8900, 0xc001b31418, 0xc0015cc620, 0xc, 0xc, 0xc, 0x0, 0x3fcd38, 0x3fcd38)
	/usr/local/go/src/io/io.go:310 +0x87
io.ReadFull(...)
	/usr/local/go/src/io/io.go:329
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc0029360e0, 0xc000022ca0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000519b68, 0x76c4d8, 0x0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0x282
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc000092750, 0xc000022ca0, 0xc00156f6c0, 0x0, 0x0, 0x0, 0x0, 0xc000076418, 0xc0000c6300, 0xc000519d18)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:281 +0x108
main.(*Proc).executeRaw(0xc0020944c0, 0xc000022ca0, 0xc00156f6c0, 0x1, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:294 +0x25c
main.(*Proc).execute(0xc0020944c0, 0xc000022ca0, 0xc00156f6c0, 0x0, 0x1, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:251 +0x6a
main.(*Proc).loop(0xc0020944c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:97 +0x4de
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188

goroutine 26 [IO wait]:
internal/poll.runtime_pollWait(0x25dca5ec8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc001fa9bd8, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc001fa9bc0, 0xc002e5002a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc001b313f8, 0xc002e5002a, 0x1ffd6, 0x1ffd6, 0x11, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001b313f8, 0xc0029360e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:601 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0x880

goroutine 338 [select]:
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc0029360e0, 0xc002929860, 0xc002929800)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:740 +0xba
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:738 +0x19c

goroutine 315 [IO wait]:
internal/poll.runtime_pollWait(0x25dca55d8, 0x72, 0xffffffffffffffff)
	/usr/local/go/src/runtime/netpoll.go:184 +0x55
internal/poll.(*pollDesc).wait(0xc0023fb038, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45
internal/poll.(*pollDesc).waitRead(...)
	/usr/local/go/src/internal/poll/fd_poll_runtime.go:92
internal/poll.(*FD).Read(0xc0023fb020, 0xc002e7002a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0)
	/usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf
os.(*File).read(...)
	/usr/local/go/src/os/file_unix.go:259
os.(*File).Read(0xc000a784e0, 0xc002e7002a, 0x1ffd6, 0x1ffd6, 0x11, 0x0, 0x0)
	/usr/local/go/src/os/file.go:116 +0x71
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc000a784e0, 0xc0029363f0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:601 +0xaf
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:595 +0x880


OpenBSD/amd64 (ci-openbsd-main-4.c.syzkaller.internal) (tty00)

login: panic: amap_wipeout: corrupt amap
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*383660  88429      0     0x14000      0x200    0  reaper
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82403f65) at panic+0x15c sys/kern/subr_prf.c:207
amap_wipeout(fffffd805896b4a8) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447
uvm_unmap_detach(ffff80001d696ba0,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586
uvm_map_teardown(fffffd806bc0a000) at uvm_map_teardown+0x22c sys/uvm/uvm_map.c:2759
uvmspace_free(fffffd806bc0a000) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646
uvm_exit(ffff8000ffff83b0) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297
reaper(ffff80001d652110) at reaper+0x15c sys/kern/kern_exit.c:456
end trace frame: 0x0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
amap_wipeout: corrupt amap
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82403f65) at panic+0x15c sys/kern/subr_prf.c:207
amap_wipeout(fffffd805896b4a8) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447
uvm_unmap_detach(ffff80001d696ba0,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586
uvm_map_teardown(fffffd806bc0a000) at uvm_map_teardown+0x22c sys/uvm/uvm_map.c:2759
uvmspace_free(fffffd806bc0a000) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646
uvm_exit(ffff8000ffff83b0) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297
reaper(ffff80001d652110) at reaper+0x15c sys/kern/kern_exit.c:456
end trace frame: 0x0, count: -8
ddb> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80001d696a20
rbx               0xffff80001d696ad0
rdx                              0x2
rcx                                0
rax                              0x1
r8                0xffffffff813801af    kprintf+0x15f
r9                               0x1
r10                              0x2
r11               0xc424477ad8c1730f
r12                     0x3000000008
r13               0xffff80001d696a30
r14                            0x100
r15                              0x1
rip               0xffffffff811a1d68    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80001d696a10
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb> show proc
PROC (reaper) pid=383660 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    pri=4, usrpri=51, nice=20
    forw=0xffffffffffffffff, list=0xffff80001d651ea0,0xffff80001d652ae0
    process=0xffff8000ffffc008 user=0xffff80001d691000, vmspace=0xffffffff82837878
    estcpu=1, cpticks=3, pctcpu=0.0
    user=0, sys=3, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 94396  104147  96156      0  2           0                syz-executor.0
 94396  253419  96156      0  3   0x4000080  piperd        syz-executor.0
 24347  303553      1      0  2        0x82                syz-executor.1
 91441   86717      0      0  3     0x14200  bored         sosplice
 96156    8208      1      0  2       0x482                syz-executor.0
 17787   78324  88706      0  3    0x10008a  pause         ksh
 88706   13436   4690      0  2        0x92                sshd
  1170  125794      1      0  3    0x100083  ttyin         getty
  4690  493412      1      0  2        0x80                sshd
 61951  248572  25334     73  3    0x100090  kqread        syslogd
 25334  416361      1      0  3    0x100082  netio         syslogd
  8223  159447      1     77  2    0x100090                dhclient
 90693  170343      1      0  2        0x80                dhclient
 59980  401407      0      0  3     0x14200  bored         smr
 73337  468108      0      0  2     0x14200                zerothread
 15600  438728      0      0  3     0x14200  aiodoned      aiodoned
 66161  125676      0      0  3     0x14200  syncer        update
 32743  177012      0      0  3     0x14200  cleaner       cleaner
*88429  383660      0      0  7     0x14200                reaper
 92736  125528      0      0  3     0x14200  pgdaemon      pagedaemon
 57016  375693      0      0  3     0x14200  bored         crynlk
 38814  457878      0      0  3     0x14200  bored         crypto
 85508  315240      0      0  3  0x40014200  acpi0         acpi0
 54576   33455      0      0  2     0x14200                softnet
 54866  131978      0      0  3     0x14200  bored         systqmp
 79606  390634      0      0  3     0x14200  bored         systq
 81551    5420      0      0  2  0x40014200                softclock
 94585  355025      0      0  3  0x40014200                idle0
     1  510323      0      0  2        0x82                init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9503   6359K    6852K  78643K     11191        0
            pcb    13      8K       8K  78643K        73        0
         rtable    96      4K       7K  78643K       415        0
         ifaddr    77     16K      16K  78643K       139        0
       counters    21     16K      16K  78643K        28        0
       ioctlops     0      0K       4K  78643K        60        0
            iov     0      0K      16K  78643K       540        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1224     77K      77K  78643K      1423        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K         3        0
         VM map     2      0K       0K  78643K         2        0
            sem    12      0K       0K  78643K       117        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1809    195K     288K  78643K     12938        0
      file desc     4     12K      25K  78643K       355        0
           proc    49     38K      63K  78643K       429        0
        subproc    32      2K       2K  78643K        51        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        44        0
       in_multi    66      3K       3K  78643K       132        0
    ether_multi     1      0K       0K  78643K        13        0
            mrt     0      0K       0K  78643K         5        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    67    307K     307K  78643K        67        0
           exec     0      0K       1K  78643K       239        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   106     70K      76K  78643K      1727        0
       UVM aobj    14      2K       2K  78643K        18        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K        40        0
            NDP    11      0K       0K  78643K        27        0
           temp   102   3846K    3910K  78643K      9955        0
         kqueue     2      2K      12K  78643K        37        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        8    0        2     1     0     1     1     0     8    0
rtpcb       80       47    0       45     1     0     1     1     0     8    0
rtentry    112       75    0       41     2     0     2     2     0     8    0
unpcb      120      201    0      193     1     0     1     1     0     8    0
syncache   264        4    0        4     1     1     0     1     0     8    0
tcpqe       32      196    0      196     1     1     0     1     0     8    0
tcpcb      544      159    0      155     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40       45    0       45     1     1     0     1     0     8    0
inpcb      296      405    0      398     4     2     2     2     0     8    1
rttmr       72        2    0        2     1     1     0     1     0     8    0
nd6         48       16    0       11     1     0     1     1     0     8    0
pfstscr     40        1    0        0     1     0     1     1     0     8    0
pfrktable  1344      23    0       21     1     0     1     1     0     8    0
pftag       88        4    0        4     1     0     1     1     0     8    1
pfstitem    24        2    0        0     1     0     1     1     0     8    0
pfstkey    112        2    0        0     1     0     1     1     0     8    0
pfstate    328        1    0        0     1     0     1     1     0     8    0
pfrule     1360      12    0        2     1     0     1     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      343    0      188    13     1    12    13     0     8    2
art_table   32      345    0      188     2     0     2     2     0     8    0
art_node    16       74    0       45     1     0     1     1     0     8    0
sysvmsgpl   40       10    0        5     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112      115    0      105     1     0     1     1     0     8    0
shmpl      112       16    0        4     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1878    0      479    88     0    88    88     0     8    0
ffsino     240     1878    0      479    83     0    83    83     0     8    0
nchpl      144     2774    0     1186    60     0    60    60     0     8    0
uvmvnodes   72     2069    0        0    38     0    38    38     0     8    0
vnodes     208     2069    0        0   109     0   109   109     0     8    0
namei      1024    7493    0     7493     3     2     1     1     0     8    1
vcpupl     1984       6    0        0     1     0     1     1     0     8    0
vmpool     528        6    0        0     1     0     1     1     0     8    0
pfiaddrpl  120        8    0        6     1     0     1     1     0     8    0
scxspl     192     7897    0     7897     1     0     1     1     0     8    1
plimitpl   152       37    0       30     1     0     1     1     0     8    0
sigapl     424      539    0      511     4     0     4     4     0     8    0
futexpl     56     7341    0     7341     3     2     1     1     0     8    1
knotepl    112      113    0      108     1     0     1     1     0     8    0
kqueuepl   144       58    0       57     1     0     1     1     0     8    0
pipelkpl    16      129    0      118     1     0     1     1     0     8    0
pipepl     120      258    0      243     1     0     1     1     0     8    0
fdescpl    432      524    0      511     2     0     2     2     0     8    0
filepl     120     3493    0     3407     4     0     4     4     0     8    1
lockfpl    104       93    0       92     1     0     1     1     0     8    0
lockfspl    48       34    0       33     1     0     1     1     0     8    0
sessionpl  112       18    0        8     1     0     1     1     0     8    0
pgrppl      48       20    0       10     1     0     1     1     0     8    0
ucredpl     96      352    0      345     1     0     1     1     0     8    0
zombiepl   144      511    0      510     1     0     1     1     0     8    0
processpl  920      539    0      510     4     0     4     4     0     8    0
procpl     624      950    0      920     6     2     4     4     0     8    1
sosppl     128        4    0        4     2     1     1     1     0     8    1
sockpl     400      653    0      636     6     3     3     4     0     8    1
mcl64k     65536     31    0       31     3     2     1     1     0     8    1
mcl16k     16384      4    0        4     3     3     0     1     0     8    0
mcl12k     12288      9    0        9     2     1     1     1     0     8    1
mcl9k      9216       9    0        9     4     3     1     1     0     8    1
mcl8k      8192       6    0        6     3     2     1     1     0     8    1
mcl4k      4096      42    0       42     4     3     1     1     0     8    1
mcl2k2     2112       2    0        2     1     1     0     1     0     8    0
mcl2k      2048   76171    0    76123    16     9     7    14     0     8    0
mtagpl      96       58    0       48     3     1     2     2     0     8    0
mbufpl     256   127488    0   127331    24    11    13    19     0     8    1
bufpl      280     4270    0      129   296     0   296   296     0     8    0
anonpl      16    65039    0    57659    71     4    67    69     0   107    1
amapchunkpl 152    2408    0     2313    15     8     7    13     0   158    1
amappl16   192     2484    0     2004    48     2    46    47     0     8    2
amappl15   184        1    0        0     1     0     1     1     0     8    0
amappl14   176       25    0       22     1     0     1     1     0     8    0
amappl13   168       33    0       30     1     0     1     1     0     8    0
amappl12   160       20    0       18     1     0     1     1     0     8    0
amappl11   152      211    0      200     1     0     1     1     0     8    0
amappl10   144      152    0      149     1     0     1     1     0     8    0
amappl9    136      366    0      365     1     0     1     1     0     8    0
amappl8    128      358    0      315     2     0     2     2     0     8    0
amappl7    120      120    0      108     1     0     1     1     0     8    0
amappl6    112      185    0      178     1     0     1     1     0     8    0
amappl5    104      471    0      460     1     0     1     1     0     8    0
amappl4     96      446    0      414     1     0     1     1     0     8    0
amappl3     88      115    0      110     1     0     1     1     0     8    0
amappl2     80     3269    0     3204     2     0     2     2     0     8    0
amappl1     72    19033    0    18616    24    15     9    17     0     8    0
amappl      80     1210    0     1170     1     0     1     1     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       17    0        4     1     0     1     1     0     8    0
uaddrrnd    24      530    0      511     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      530    0      511     1     0     1     1     0     8    0
vmmpekpl   168     7461    0     7427     2     0     2     2     0     8    0
vmmpepl    168    68801    0    67254   147    23   124   124     0   357   33
vmsppl     272      529    0      510     3     1     2     2     0     8    0
pdppl      4096    1066    0     1026     8     2     6     6     0     8    0
pvpl        32   200618    0   197587   174    10   164   166     0   265  100
pmappl     200      529    0      510     2     0     2     2     0     8    0
extentpl    40       53    0       36     1     0     1     1     0     8    0
phpool     112      272    0       43     7     0     7     7     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82403f65) at panic+0x15c sys/kern/subr_prf.c:207
amap_wipeout(fffffd805896b4a8) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447
uvm_unmap_detach(ffff80001d696ba0,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586
uvm_map_teardown(fffffd806bc0a000) at uvm_map_teardown+0x22c sys/uvm/uvm_map.c:2759
uvmspace_free(fffffd806bc0a000) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646
uvm_exit(ffff8000ffff83b0) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297
reaper(ffff80001d652110) at reaper+0x15c sys/kern/kern_exit.c:456
end trace frame: 0x0, count: -8
ddb> machine ddbcpu 1
No such command
ddb> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff82403f65) at panic+0x15c sys/kern/subr_prf.c:207
amap_wipeout(fffffd805896b4a8) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447
uvm_unmap_detach(ffff80001d696ba0,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586
uvm_map_teardown(fffffd806bc0a000) at uvm_map_teardown+0x22c sys/uvm/uvm_map.c:2759
uvmspace_free(fffffd806bc0a000) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646
uvm_exit(ffff8000ffff83b0) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297
reaper(ffff80001d652110) at reaper+0x15c sys/kern/kern_exit.c:456
end trace frame: 0x0, count: -8

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/06/24 02:17 openbsd 95d22deeeb03 bbad15ae .config console log report ci-openbsd-main
2020/06/22 04:35 openbsd f5cd887ee666 eabcced4 .config console log report ci-openbsd-multicore
2020/06/20 20:01 openbsd c4b445c6ea7c c655ec77 .config console log report ci-openbsd-multicore
2020/06/16 03:39 openbsd f32c3515e400 baca2611 .config console log report ci-openbsd-multicore
2020/06/08 05:43 openbsd 957dfd9fbe6a 7751efd0 .config console log report ci-openbsd-multicore
2020/06/04 12:45 openbsd 02c5bef54a61 b0d1c0d5 .config console log report ci-openbsd-multicore
2020/05/07 17:57 openbsd 99490db6b06d 98cbd87b .config console log report ci-openbsd-multicore
2020/04/24 12:29 openbsd 93a238137442 03d97a1b .config console log report ci-openbsd-multicore
2020/04/16 20:27 openbsd 7f9a05364bda c743fcb3 .config console log report ci-openbsd-multicore
2020/04/14 00:25 openbsd c1e0bdab59c0 7c54686a .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.