syzbot


uvm_fault: putc

Status: auto-closed as invalid on 2022/06/21 12:42
Reported-by: syzbot+045eb52b2edb32be8930@syzkaller.appspotmail.com
First crash: 768d, last: 764d

Sample crash report:
uvm_fault(0xfffffd8062860cf8, 0x0, 0, 2) -> e
kernel: page fault trap, code=0
Stopped at      putc+0x8e:      movb    %r12b,0(%rbx)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*175398   4288      0           0  0x4000000    1K syz-executor.2
 143750   1419      0           0  0x4000000    0  syz-executor.7
putc(66,ffff800000b99080) at putc+0x8e sys/kern/tty_subr.c:248
ttyoutput(66,ffff800000b99000) at ttyoutput+0x8c sys/kern/tty.c:612
tputchar(66,ffff800000b99000) at tputchar+0xde ttstart sys/kern/tty.c:1403 [inline]
tputchar(66,ffff800000b99000) at tputchar+0xde sys/kern/tty.c:2334
kputchar(66,5,0) at kputchar+0xd4 sys/kern/subr_prf.c:364
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
printf(ffffffff825715e1) at printf+0x75 sys/kern/subr_prf.c:533
vm_create(ffff800000e19800,ffff80002c947a40) at vm_create+0x217 sys/arch/amd64/amd64/vmm.c:1529
vmmioctl(a00,c5005601,ffff800000e19800,1,ffff80002c947a40) at vmmioctl+0x1f2
VOP_IOCTL(fffffd806e4f2c90,c5005601,ffff800000e19800,1,fffffd807f7d89c0,ffff80002c947a40) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806318aa30,c5005601,ffff800000e19800,ffff80002c947a40) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002c947a40,ffff8000258cff98,ffff8000258cfff0) at sys_ioctl+0x4a2
syscall(ffff8000258d0060) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258d0060) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa9ffc2f2660, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd8062860cf8, 0x0, 0, 2) -> e
ddb{1}> trace
putc(66,ffff800000b99080) at putc+0x8e sys/kern/tty_subr.c:248
ttyoutput(66,ffff800000b99000) at ttyoutput+0x8c sys/kern/tty.c:612
tputchar(66,ffff800000b99000) at tputchar+0xde ttstart sys/kern/tty.c:1403 [inline]
tputchar(66,ffff800000b99000) at tputchar+0xde sys/kern/tty.c:2334
kputchar(66,5,0) at kputchar+0xd4 sys/kern/subr_prf.c:364
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
printf(ffffffff825715e1) at printf+0x75 sys/kern/subr_prf.c:533
vm_create(ffff800000e19800,ffff80002c947a40) at vm_create+0x217 sys/arch/amd64/amd64/vmm.c:1529
vmmioctl(a00,c5005601,ffff800000e19800,1,ffff80002c947a40) at vmmioctl+0x1f2
VOP_IOCTL(fffffd806e4f2c90,c5005601,ffff800000e19800,1,fffffd807f7d89c0,ffff80002c947a40) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806318aa30,c5005601,ffff800000e19800,ffff80002c947a40) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002c947a40,ffff8000258cff98,ffff8000258cfff0) at sys_ioctl+0x4a2
syscall(ffff8000258d0060) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258d0060) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa9ffc2f2660, count: -13
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000258cf940
rbx                                0
rdx                                0
rcx               0xffff8000258cfa8b
rax               0xffff80002c947a40
r8                0xffff8000258cfbb0
r9                0x8080808080808080
r10               0xaab39812ac26b883
r11               0xd0506a69b6b8fa06
r12                             0x66
r13                              0x1
r14                              0xd
r15               0xffff800000b99080
rip               0xffffffff8164d1ae    putc+0x8e
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff8000258cf900
ss                              0x10
putc+0x8e:      movb    %r12b,0(%rbx)
ddb{1}> show proc
PROC (syz-executor.2) pid=175398 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=86, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff80002c947500,0xffff80002c946d30
    process=0xffff8000211a14d8 user=0xffff8000258cb000, vmspace=0xfffffd8062860cf8
    estcpu=36, cpticks=14, pctcpu=0.0
    user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 62618  313317  31104      0  2           0                syz-executor.3
 62618  497555  31104      0  3   0x4000080  fsleep        syz-executor.3
  4288  154524  83398      0  3        0x80  nanoslp       syz-executor.2
* 4288  175398  83398      0  7   0x4000000                syz-executor.2
  4288  174696  83398      0  3   0x4000080  fsleep        syz-executor.2
 71356  431065  56155      0  2           0                syz-executor.0
 71356  309912  56155      0  3   0x4000000  biowait       syz-executor.0
 71356  120764  56155      0  3   0x4000080  fsleep        syz-executor.0
 72761   27139  92170      0  2           0                syz-executor.1
 72761  483020  92170      0  3   0x4000080  fsleep        syz-executor.1
 96170  446338  66644      0  2           0                syz-executor.4
 96170  453838  66644      0  3   0x4000080  fsleep        syz-executor.4
 96170  187368  66644      0  3   0x4000080  fsleep        syz-executor.4
  1419   57359  18893      0  2           0                syz-executor.7
  1419  298185  18893      0  3   0x4000080  ttyretype     syz-executor.7
  1419  143750  18893      0  7   0x4000000                syz-executor.7
 56155  226881  99705      0  3        0x82  nanoslp       syz-executor.0
 83398  408911  99705      0  3        0x82  nanoslp       syz-executor.2
 66644  242941  99705      0  3        0x82  nanoslp       syz-executor.4
  2642   72168  99705      0  2         0x2                syz-executor.6
 18893  201013  99705      0  3        0x82  nanoslp       syz-executor.7
 92170  425085  99705      0  3        0x82  nanoslp       syz-executor.1
 62342  323503  99705      0  3         0x2  biowait       syz-executor.5
 31104  471938  99705      0  3        0x82  nanoslp       syz-executor.3
 27821  426296      0      0  3     0x14200  acct          acct
 83926  499595      0      0  3     0x14200  bored         sosplice
 99705  360901  72372      0  3        0x82  thrsleep      syz-fuzzer
 99705  348953  72372      0  3   0x4000082  nanoslp       syz-fuzzer
 99705  414892  72372      0  3   0x4000082  thrsleep      syz-fuzzer
 99705  380662  72372      0  3   0x4000082  thrsleep      syz-fuzzer
 99705  235189  72372      0  3   0x4000082  kqread        syz-fuzzer
 99705  307893  72372      0  3   0x4000082  nanoslp       syz-fuzzer
 99705  209040  72372      0  3   0x4000082  thrsleep      syz-fuzzer
 99705  324959  72372      0  3   0x4000082  thrsleep      syz-fuzzer
 99705  211035  72372      0  3   0x4000082  thrsleep      syz-fuzzer
 72372  376350  44246      0  3    0x10008a  sigsusp       ksh
 44246  264832  74041      0  3        0x9a  kqread        sshd
 94454  259863      1      0  3    0x100083  ttyin         getty
 74041  337600      1      0  3        0x88  kqread        sshd
 15463  216631  23220     74  3   0x1100092  bpf           pflogd
 23220   54048      1      0  3        0x80  netio         pflogd
 99727  182924  16884     73  2   0x1100010                syslogd
 16884  410131      1      0  3    0x100082  netio         syslogd
 68553  444864      1      0  3    0x100080  kqread        resolvd
 83175  418064  58018     77  3    0x100092  kqread        dhcpleased
 97633  249034  58018     77  3    0x100092  kqread        dhcpleased
 58018  250215      1      0  3        0x80  kqread        dhcpleased
 49850  299015      0      0  3     0x14200  bored         smr
 62711  267580      0      0  2     0x14200                zerothread
 63366  314030      0      0  3     0x14200  aiodoned      aiodoned
  7219  392741      0      0  3     0x14200  syncer        update
 46417  209746      0      0  3     0x14200  cleaner       cleaner
 50751   91475      0      0  3     0x14200  reaper        reaper
  5762   77380      0      0  3     0x14200  pgdaemon      pagedaemon
 15070  160004      0      0  3     0x14200  bored         viomb
 34429  393729      0      0  3  0x40014200  acpi0         acpi0
 18935  270985      0      0  3  0x40014200                idle1
 60803   11193      0      0  3     0x14200  bored         softnet
  1312  363864      0      0  3     0x14200  bored         systqmp
 18251  493233      0      0  3     0x14200  bored         systq
 76592  459933      0      0  3  0x40014200  bored         softclock
 35527  195360      0      0  3  0x40014200                idle0
     1   98596      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &newfdp->fd_fd.fd_fplock r = 0 (0xfffffd806f048850)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  fd_getfile_mode+0x66 fd_getfile sys/kern/kern_descrip.c:241 [inline]
#3  fd_getfile_mode+0x66 sys/kern/kern_descrip.c:256
#4  sys_ioctl+0x4a sys/kern/sys_generic.c:432
#5  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#5  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#6  Xsyscall+0x128
Process 4288 (syz-executor.2) thread 0xffff80002c947a40 (175398)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff829d6548)
#0  witness_lock+0x44d
#1  kpageflttrap+0x23d sys/arch/amd64/amd64/trap.c:274
#2  kerntrap+0xef sys/arch/amd64/amd64/trap.c:318
#3  alltraps_kern_meltdown+0x7b
#4  putc+0x8e sys/kern/tty_subr.c:248
#5  ttyoutput+0x8c sys/kern/tty.c:612
#6  tputchar+0xde ttstart sys/kern/tty.c:1403 [inline]
#6  tputchar+0xde sys/kern/tty.c:2334
#7  kputchar+0xd4 sys/kern/subr_prf.c:364
#8  kprintf+0x20ec sys/kern/subr_prf.c:1068
#9  printf+0x75 sys/kern/subr_prf.c:533
#10 vm_create+0x217 sys/arch/amd64/amd64/vmm.c:1529
#11 vmmioctl+0x1f2
#12 VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
#13 vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
#14 sys_ioctl+0x4a2
#15 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#15 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#16 Xsyscall+0x128
exclusive rwlock vm_list r = 0 (0xffff800000679c88)
#0  witness_lock+0x44d
#1  vm_create+0xa4 sys/arch/amd64/amd64/vmm.c:1508
#2  vmmioctl+0x1f2
#3  VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
#4  vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
#5  sys_ioctl+0x4a2
#6  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#6  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#7  Xsyscall+0x128
Process 71356 (syz-executor.0) thread 0xffff80002587a2a8 (309912)
exclusive rrwlock inode r = 0 (0xfffffd806e221a28)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3101
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806ffccd60)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3086
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 2642 (syz-executor.6) thread 0xffff80002c946540 (72168)
exclusive rrwlock inode r = 0 (0xfffffd8067c0ef88)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3101
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807667eb38)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3086
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 62342 (syz-executor.5) thread 0xffff80002587ba48 (323503)
exclusive rrwlock inode r = 0 (0xfffffd807ce975f8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  ufs_ihashins+0x42 sys/ufs/ufs/ufs_ihash.c:140
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1347
#6  ffs_inode_alloc+0x1be sys/ufs/ffs/ffs_alloc.c:394
#7  ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#8  VOP_MKDIR+0xbf sys/kern/vfs_vops.c:404
#9  domkdirat+0x121 sys/kern/vfs_syscalls.c:3101
#10 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806e1ea2c8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domkdirat+0x75 sys/kern/vfs_syscalls.c:3086
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 99727 (syslogd) thread 0xffff8000ffff6fd0 (182924)
exclusive rrwlock inode r = 0 (0xfffffd806e73c0a0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  sys_fsync+0xf5 sys/kern/vfs_syscalls.c:2924
#6  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#6  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10202   6498K    7095K  78643K     39323        0
            pcb    13     16K      18K  78643K       955        0
         rtable   208      8K      16K  78643K      2053        0
         ifaddr    88     19K      24K  78643K       805        0
         sysctl     2      0K       0K  78643K         2        0
       counters    54     35K      36K  78643K       248        0
       ioctlops     1      2K       8K  78643K      6353        0
            iov     0      0K      16K  78643K       873        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1433     90K      90K  78643K     10210        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        85        0
         VM map     2      1K       1K  78643K         2        0
            sem    21      5K      10K  78643K       709        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    16     57K      89K  78643K     13096        0
          sigio     0      0K       0K  78643K        37        0
           proc    72     87K     124K  78643K      1564        0
        subproc   104      6K       6K  78643K       474        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       310        0
       in_multi    85      5K       6K  78643K       519        0
    ether_multi     1      0K       0K  78643K        40        0
            mrt     0      0K       0K  78643K        21        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   163    731K     731K  78643K       163        0
           exec     0      0K       2K  78643K      2869        0
     pfkey data     0      0K       0K  78643K        99        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   526    768K     768K  78643K    169704        0
       UVM aobj   104      8K       8K  78643K       110        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       210        0
            NDP    13      0K       2K  78643K       184        0
           temp   599   5641K    5707K  78643K    151738        0
         kqueue    14     20K      26K  78643K       857        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      803    0      800     7     6     1     4     0     8    0
rtentry    112      531    0      440     4     1     3     4     0     8    0
unpcb      136     6737    0     6719    85    82     3     9     0     8    2
syncache   296       31    0       31    10    10     0     1     0     8    0
tcpqe       32        9    0        9     4     4     0     1     0     8    0
tcpcb      736     4137    0     4128   184   180     4    14     0     8    3
arp        120       93    0       77     1     0     1     1     0     8    0
inpcb      312    11980    0    11973   219   213     6    16     0     8    5
rttmr       72        7    0        7     3     2     1     1     0     8    1
nd6         48      118    0       94     1     0     1     1     0     8    0
pkpcb       40        6    0        6     2     2     0     1     0     8    0
kcovpl      48       36    0       28     1     0     1     1     0     8    0
ppxss      1248      24    0       24     6     6     0     1     0     8    0
pfstscr     40       16    0       16     3     3     0     1     0     8    0
pffrag     232       93    0       93     7     7     0     1     0   482    0
pffrnode    88       93    0       93     7     7     0     1     0     8    0
pffrent     40      195    0      195     7     7     0     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrke_plain 168       2    0        2     1     1     0     1     0     8    0
pfrktable  1344      54    0       54     5     5     0     2     0     8    0
pftag       88       33    0       15     1     0     1     1     0     8    0
pfstitem    24       29    0       27     1     0     1     1     0     8    0
pfstkey    112       51    0       49     1     0     1     1     0     8    0
pfstate    320       39    0       37     2     1     1     2     0     8    0
pfrule     1360     890    0      889    26    25     1    25     0     8    0
art_heap8  4096       2    0        1     2     1     1     2     0     8    0
art_heap4  256     1949    0     1558    45    18    27    29     0     8    0
art_table   32     1951    0     1559     4     0     4     4     0     8    0
art_node    16      526    0      448     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     1     0     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112      703    0      684     1     0     1     1     0     8    0
shmpl      112      107    0        6     3     0     3     3     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    16544    0    15066    93     0    93    93     0     8    0
ffsino     272    16544    0    15066    99     0    99    99     0     8    0
nchpl      144    32713    0    31089    63     0    63    63     0     8    0
rtmask      32        4    0        4     1     1     0     1     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     224     5926    0        0   349     0   349   349     0     8    0
namei      1024  125734    0   125731     3     2     1     2     0     8    0
percpumem   16      136    0       97     1     0     1     1     0     8    0
vcpupl     2048     202    0        0    26     0    26    26     0     8    0
vmpool     560      251    0       48    16     1    15    15     0     8    0
pfiaddrpl  120       61    0       61     4     4     0     2     0     8    0
scsiplug    72        2    0        2     1     1     0     1     0     8    0
scxspl     216    92310    0    92308    19    18     1     7     0     8    0
plimitpl   152      850    0      834     1     0     1     1     0     8    0
sigapl     424    13353    0    13308     6     0     6     6     0     8    0
futexpl     64   123108    0   123102     2     1     1     1     0     8    0
knotepl    120      598    0        0     8     1     7     7     0     8    0
kqueuepl   216     3403    0     3394    64    63     1     6     0     8    0
pipepl     336     2917    0     2888    55    47     8     8     0     8    5
fdescpl    496    13337    0    13308     7     3     4     5     0     8    0
filepl     152    92865    0    92574   179   161    18    23     0     8    6
lockfpl    104     3488    0     3486     8     7     1     2     0     8    0
lockfspl    48     1222    0     1220     1     0     1     1     0     8    0
sessionpl  144       52    0       35     1     0     1     1     0     8    0
pgrppl      48      577    0      560     1     0     1     1     0     8    0
ucredpl     96     7318    0     7303     1     0     1     1     0     8    0
zombiepl   144    13308    0    13308     2     1     1     1     0     8    1
processpl  1064   13353    0    13308     4     0     4     4     0     8    0
procpl     672    39198    0    39135    41    34     7     8     0     8    1
srpgc       96       30    0       30     9     9     0     1     0     8    0
sosppl     168       49    0       49     9     9     0     1     0     8    0
sockpl     480    19628    0    19600   496   483    13    33     0     8    9
mcl64k     65536     23    0        0     3     0     3     3     0     8    0
mcl16k     16384     33    0        0     5     2     3     3     0     8    0
mcl12k     12288     42    0        0     2     0     2     2     0     8    0
mcl9k      9216      19    0        0     2     0     2     2     0     8    0
mcl8k      8192      41    0        0     5     2     3     3     0     8    0
mcl4k      4096      33    0        0     4     1     3     3     0     8    0
mcl2k2     2112      11    0        0     1     0     1     1     0     8    0
mcl2k      2048     380    0        0    20     2    18    20     0     8    0
mtagpl      96      756    0        0    13     1    12    13     0     8    0
mbufpl     256     1270    0        0    63     1    62    62     0     8    0
bufpl      288    20661    0    14324   453     0   453   453     0     8    0
anonpl      24  4616181    0  4595692   248    99   149   156     0   186    0
amapchunkpl 152  408695    0   407691    75    34    41    44     0   158    0
amappl16   200    85238    0    84660   208   171    37    54     0     8    0
amappl15   192     2015    0     2005     1     0     1     1     0     8    0
amappl14   184      387    0      382     1     0     1     1     0     8    0
amappl13   176      854    0      851     1     0     1     1     0     8    0
amappl12   168     2012    0     2011     2     1     1     1     0     8    0
amappl11   160      416    0      399     1     0     1     1     0     8    0
amappl10   152     3231    0     3222     1     0     1     1     0     8    0
amappl9    144      671    0      666     1     0     1     1     0     8    0
amappl8    136     5831    0     5726     4     0     4     4     0     8    0
amappl7    128     4726    0     4712     1     0     1     1     0     8    0
amappl6    120      527    0      495     5     4     1     2     0     8    0
amappl5    112    14848    0    14826     1     0     1     1     0     8    0
amappl4    104     2421    0     2390     1     0     1     1     0     8    0
amappl3     96     3174    0     3163     1     0     1     1     0     8    0
amappl2     88     2910    0     2859     3     1     2     3     0     8    0
amappl1     80   245285    0   244682    21     7    14    19     0     8    0
amappl      88   168524    0   168195    10     2     8     8     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      109    0        6     2     0     2     2     0     8    0
uaddrrnd    24    13588    0    13357     2     0     2     2     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    13588    0    13357     2     0     2     2     0     8    0
vmmpekpl   168   103933    0   103854     4     0     4     4     0     8    0
vmmpepl    168  1259639    0  1256659   336   199   137   160     0   357    0
vmsppl     368    13587    0    13357    23     1    22    22     0     8    0
rwobjpl     56   352987    0   345255   120     9   111   113     0     8    0
pdppl      4096   27183    0    26916   946   673   273   273     0     8    6
pvpl        32  7348409    0  7324961   452   232   220   250     0   265    0
pmappl     248    13587    0    13357    15     0    15    15     0     8    0
extentpl    40       58    0       38     1     0     1     1     0     8    0
phpool     112     2280    0     1170    32     0    32    32     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffffffff82919ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff829d6340) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff829d6340) at __mp_lock+0x122 sys/kern/kern_lock.c:147
vn_ioctl(fffffd806318a1e0,802c7414,ffff8000258ca4f0,ffff80002119e2a0) at vn_ioctl+0x41 sys/kern/vfs_vnops.c:514
sys_ioctl(ffff80002119e2a0,ffff8000258ca608,ffff8000258ca660) at sys_ioctl+0x4a2
syscall(ffff8000258ca6d0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258ca6d0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2819c73d130, count: 7
ddb{0}> trace
x86_ipi_db(ffffffff82919ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff829d6340) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff829d6340) at __mp_lock+0x122 sys/kern/kern_lock.c:147
vn_ioctl(fffffd806318a1e0,802c7414,ffff8000258ca4f0,ffff80002119e2a0) at vn_ioctl+0x41 sys/kern/vfs_vnops.c:514
sys_ioctl(ffff80002119e2a0,ffff8000258ca608,ffff8000258ca660) at sys_ioctl+0x4a2
syscall(ffff8000258ca6d0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258ca6d0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2819c73d130, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      putc+0x8e:      movb    %r12b,0(%rbx)
putc(66,ffff800000b99080) at putc+0x8e sys/kern/tty_subr.c:248
ttyoutput(66,ffff800000b99000) at ttyoutput+0x8c sys/kern/tty.c:612
tputchar(66,ffff800000b99000) at tputchar+0xde ttstart sys/kern/tty.c:1403 [inline]
tputchar(66,ffff800000b99000) at tputchar+0xde sys/kern/tty.c:2334
kputchar(66,5,0) at kputchar+0xd4 sys/kern/subr_prf.c:364
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
printf(ffffffff825715e1) at printf+0x75 sys/kern/subr_prf.c:533
vm_create(ffff800000e19800,ffff80002c947a40) at vm_create+0x217 sys/arch/amd64/amd64/vmm.c:1529
vmmioctl(a00,c5005601,ffff800000e19800,1,ffff80002c947a40) at vmmioctl+0x1f2
VOP_IOCTL(fffffd806e4f2c90,c5005601,ffff800000e19800,1,fffffd807f7d89c0,ffff80002c947a40) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806318aa30,c5005601,ffff800000e19800,ffff80002c947a40) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002c947a40,ffff8000258cff98,ffff8000258cfff0) at sys_ioctl+0x4a2
syscall(ffff8000258d0060) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258d0060) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa9ffc2f2660, count: 2
ddb{1}> trace
putc(66,ffff800000b99080) at putc+0x8e sys/kern/tty_subr.c:248
ttyoutput(66,ffff800000b99000) at ttyoutput+0x8c sys/kern/tty.c:612
tputchar(66,ffff800000b99000) at tputchar+0xde ttstart sys/kern/tty.c:1403 [inline]
tputchar(66,ffff800000b99000) at tputchar+0xde sys/kern/tty.c:2334
kputchar(66,5,0) at kputchar+0xd4 sys/kern/subr_prf.c:364
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1068
printf(ffffffff825715e1) at printf+0x75 sys/kern/subr_prf.c:533
vm_create(ffff800000e19800,ffff80002c947a40) at vm_create+0x217 sys/arch/amd64/amd64/vmm.c:1529
vmmioctl(a00,c5005601,ffff800000e19800,1,ffff80002c947a40) at vmmioctl+0x1f2
VOP_IOCTL(fffffd806e4f2c90,c5005601,ffff800000e19800,1,fffffd807f7d89c0,ffff80002c947a40) at VOP_IOCTL+0x96 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806318aa30,c5005601,ffff800000e19800,ffff80002c947a40) at vn_ioctl+0xbc sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80002c947a40,ffff8000258cff98,ffff8000258cfff0) at sys_ioctl+0x4a2
syscall(ffff8000258d0060) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff8000258d0060) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa9ffc2f2660, count: -13

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/03/23 12:41 openbsd 2426d74d418a 5ff41e94 .config console log report ci-openbsd-multicore uvm_fault: putc
2022/03/20 07:01 openbsd cb5f613c45fb e2d91b1d .config console log report ci-openbsd-multicore uvm_fault: putc
* Struck through repros no longer work on HEAD.