syzbot


panic: tcp_ouptanpuict

Status: closed as dup on 2022/08/29 03:58
Reported-by: syzbot+017f6df0ee8e8a045438@syzkaller.appspotmail.com
First crash: 606d, last: 606d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: tcp_output C 762 605d 607d

Sample crash report:
login: panic: tcp_ouptanpuict
: kStopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*450917  80795  32767        0x10  0x4000000    0  syz-executor.5
  39610  32066      0     0x14000      0x200    1  reaper
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000cc00c0) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd8067d99b88,fffffd8069815400,0,fffffd8069814200) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002a63ad20,3,ffff80002e495140,400,ffff80002e495230) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002a63ad20,ffff80002e4951e8,ffff80002e495230) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002e4952b0) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e4952b0) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd69fb071670, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: tcp_output
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_map.c", line 2486
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000cc00c0) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd8067d99b88,fffffd8069815400,0,fffffd8069814200) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002a63ad20,3,ffff80002e495140,400,ffff80002e495230) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002a63ad20,ffff80002e4951e8,ffff80002e495230) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002e4952b0) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e4952b0) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd69fb071670, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002e494c20
rbx               0xffffffff829a1b8f    cpu_info_full_primary+0x2b8f
rdx               0xffff800000be2ac0
rcx                                0
rax               0xffff80002a63ad20
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x9f35191f7463eba3
r11               0xe928b79218e50ea9
r12               0xffffffff829a1990    cpu_info_full_primary+0x2990
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81a16d08    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80002e494c10
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.5) pid=450917 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    pri=32, usrpri=63, nice=20
    forw=0xffffffffffffffff, list=0xffff80002a63b260,0xffff80002a63bcf0
    process=0xffff80002a646158 user=0xffff80002e490000, vmspace=0xfffffd807181ba28
    estcpu=27, cpticks=0, pctcpu=0.0
    user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 64617  203066  94739  32767  2        0x10                syz-executor.4
 64617  437374  94739  32767  3   0x4000090  fsleep        syz-executor.4
 80795  138814  44308  32767  2        0x10                syz-executor.5
*80795  450917  44308  32767  7   0x4000010                syz-executor.5
 73102  301299  85203  32767  2        0x10                syz-executor.1
 73102  162094  85203  32767  3   0x4000090  fsleep        syz-executor.1
 80118  130634  51435  32767  3        0x90  nanoslp       syz-executor.2
 80118   76883  51435  32767  3   0x4000090  fsleep        syz-executor.2
 80118   19907  51435  32767  3   0x4000090  fsleep        syz-executor.2
 80118  395942  51435  32767  3   0x4000090  fsleep        syz-executor.2
 65078  494000  64516  32767  2        0x10                syz-executor.7
 64516   61934  73340      0  3        0x82  wait          syz-executor.7
 74993  514370      0      0  3     0x14200  bored         sosplice
 89123  375642  11084  32767  3        0x90  nanoslp       syz-executor.6
 72455   53225  62025  32767  3        0x90  nanoslp       syz-executor.3
 94739  279805  93224  32767  3        0x90  nanoslp       syz-executor.4
 44308  351250  18408  32767  3        0x90  nanoslp       syz-executor.5
 11084  200639  73340      0  3        0x82  wait          syz-executor.6
 62025  262230  73340      0  3        0x82  wait          syz-executor.3
 18408  422398  73340      0  3        0x82  wait          syz-executor.5
 93224   32504  73340      0  3        0x82  wait          syz-executor.4
 85203  412277  92899  32767  3        0x90  nanoslp       syz-executor.1
 51435  226447  56058  32767  3        0x90  nanoslp       syz-executor.2
 56058  232450  73340      0  3        0x82  wait          syz-executor.2
 56274  392571  40387  32767  2        0x10                syz-executor.0
 92899  309776  73340      0  3        0x82  wait          syz-executor.1
 40387  105350  73340      0  3        0x82  wait          syz-executor.0
 73340  349685  62415      0  3        0x82  wait          syz-fuzzer
 73340   12818  62415      0  3   0x4000082  nanoslp       syz-fuzzer
 73340  460053  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 73340   36077  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 73340  461638  62415      0  3   0x4000082  wait          syz-fuzzer
 73340   64829  62415      0  3   0x4000082  wait          syz-fuzzer
 73340  305803  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 73340    2911  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 73340  270411  62415      0  3   0x4000082  wait          syz-fuzzer
 73340  280824  62415      0  3   0x4000082  wait          syz-fuzzer
 73340   17491  62415      0  3   0x4000082  wait          syz-fuzzer
 73340   78838  62415      0  3   0x4000082  wait          syz-fuzzer
 73340  456120  62415      0  3   0x4000082  wait          syz-fuzzer
 73340  497909  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 73340  449882  62415      0  3   0x4000082  nanoslp       syz-fuzzer
 73340  110689  62415      0  3   0x4000082  thrsleep      syz-fuzzer
 62415  189139  78798      0  3    0x10008a  sigsusp       ksh
 78798  219176  11532      0  3        0x9a  kqread        sshd
  7822  396832      1      0  3    0x100083  ttyin         getty
 11532  338983      1      0  3        0x88  kqread        sshd
 39959  109418  49882     73  3   0x1100090  kqread        syslogd
 49882   14801      1      0  3    0x100082  netio         syslogd
  4491   97201      1      0  3    0x100080  kqread        resolvd
 73096  378675  36397     77  3    0x100092  kqread        dhcpleased
 81483  466993  36397     77  3    0x100092  kqread        dhcpleased
 36397  149453      1      0  3        0x80  kqread        dhcpleased
 39567  136549      0      0  3     0x14200  bored         smr
  1092  225211      0      0  2     0x14200                zerothread
 63831  516225      0      0  3     0x14200  aiodoned      aiodoned
 89689  387707      0      0  3     0x14200  syncer        update
  6730  209010      0      0  3     0x14200  cleaner       cleaner
 32066   39610      0      0  7     0x14200                reaper
 75051  227544      0      0  3     0x14200  pgdaemon      pagedaemon
 18038  265667      0      0  3     0x14200  bored         viomb
 85746  129823      0      0  3  0x40014200  acpi0         acpi0
 59782  462459      0      0  3  0x40014200                idle1
 35028  259349      0      0  3     0x14200  bored         softnet
 13566  179742      0      0  3     0x14200  bored         softnet
 91278  153621      0      0  3     0x14200  bored         softnet
  6597   95620      0      0  3     0x14200  bored         softnet
 33436  518941      0      0  3     0x14200  bored         systqmp
 57465  354807      0      0  3     0x14200  bored         systq
  3091  284951      0      0  3  0x40014200  bored         softclock
 29806  419002      0      0  3  0x40014200                idle0
     1  453082      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 1:
exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd80074ace58)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pmap_page_remove+0x44 sys/arch/amd64/amd64/pmap.c:1911
#4  uvm_anfree_list+0x98
#5  amap_wipeout+0x1b1 sys/uvm/uvm_amap.c:504
#6  uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
#7  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
#8  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
#9  reaper+0x19a sys/kern/kern_exit.c:448
#10 proc_trampoline+0x1c
Process 80795 (syz-executor.5) thread 0xffff80002a63ad20 (450917)
exclusive rwlock netlock r = 0 (0xffffffff8291ebe0)
#0  witness_lock+0x44d
#1  sosend+0x500 sys/kern/uipc_socket.c:632
#2  sendit+0x65d sys/kern/uipc_syscalls.c:694
#3  sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
#4  syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#4  syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
#5  Xsyscall+0x128
Process 65078 (syz-executor.7) thread 0xffff80002781efd0 (494000)
exclusive rrwlock inode r = 0 (0xfffffd8063a313c8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vget+0x1fc sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1324
#8  ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487
#9  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:560
#11 namei+0x36a sys/kern/vfs_lookup.c:244
#12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1848
#13 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#13 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8063a314d8)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:412
#6  namei+0x36a sys/kern/vfs_lookup.c:244
#7  dounlinkat+0x99 sys/kern/vfs_syscalls.c:1848
#8  syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8  syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 56274 (syz-executor.0) thread 0xffff8000212a07e0 (392571)
exclusive rrwlock inode r = 0 (0xfffffd8063a31808)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vget+0x1fc sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1324
#8  ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487
#9  VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:560
#11 namei+0x36a sys/kern/vfs_lookup.c:244
#12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1848
#13 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#13 syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806ae80a38)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:412
#6  namei+0x36a sys/kern/vfs_lookup.c:244
#7  dounlinkat+0x99 sys/kern/vfs_syscalls.c:1848
#8  syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#8  syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
Process 32066 (reaper) thread 0xffff800021233508 (39610)
exclusive kernel: protection fault trap, code=0
Faulted in DDB; continuing...
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10199   6410K    6419K  78643K     11302        0
            pcb    13     12K      14K  78643K        17        0
         rtable   244      6K       7K  78643K       664        0
         ifaddr    82     16K      16K  78643K       112        0
         sysctl     3      1K       3K  78643K         7        0
       counters    56     35K      35K  78643K        64        0
       ioctlops     0      0K       2K  78643K        51        0
            iov     0      0K      20K  78643K       595        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1271     79K      79K  78643K      1635        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        57        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      0K       0K  78643K      1167        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    22     81K     117K  78643K      4062        0
          sigio     0      0K       0K  78643K        21        0
           proc    56     78K     115K  78643K       815        0
        subproc   104      6K       6K  78643K       156        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     1      0K       0K  78643K       816        0
       in_multi    99      6K       6K  78643K       189        0
    ether_multi     1      0K       0K  78643K        15        0
            mrt     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   175    784K     784K  78643K       175        0
           exec     0      0K       2K  78643K      1229        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      62K  78643K         8        0
       UVM amap   302     87K     102K  78643K     26156        0
       UVM aobj   131      8K       8K  78643K       139        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       182        0
            NDP    11      0K       2K  78643K        39        0
           temp   124   4726K    4854K  78643K     13165        0
         kqueue    12     18K      30K  78643K       348        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      250    0      239     2     0     2     2     0     8    1
rtentry    112      165    0       50     4     0     4     4     0     8    0
unpcb      144     3216    0     3203    28    27     1     6     0     8    0
syncache   296       36    0       36     6     6     0     1     0     8    0
sackhl      24        1    0        1     1     1     0     1     0     8    0
tcpqe       32       13    0       13     7     7     0     1     0     8    0
tcpcb      768     2328    0     2317    57    54     3    22     0     8    0
arp        120       27    0        8     1     0     1     1     0     8    0
ipq         40        3    0        3     2     2     0     1     0     8    0
ipqe        40       76    0       76     2     2     0     1     0     8    0
inpcb      368     8125    0     8113    53    50     3    14     0     8    0
nd6         48       45    0       17     1     0     1     1     0     8    0
kcovpl      48       12    0        4     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      696    0      208    32     1    31    31     0     8    0
art_table   32      697    0      208     4     0     4     4     0     8    0
art_node    16      164    0       59     1     0     1     1     0     8    0
sysvmsgpl   40       23    0        6     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112     1164    0     1154     1     0     1     1     0     8    0
shmpl      112      136    0        8     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     6778    0     5340    91     0    91    91     0     8    0
ffsino     272     6778    0     5340    97     0    97    97     0     8    0
nchpl      144    13065    0    11426    63     0    63    63     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   41591    0    41591     2     1     1     2     0     8    1
percpumem   16       44    0        4     1     0     1     1     0     8    0
kstatmem   264       30    0        8     2     0     2     2     0     8    0
scxspl     216    34884    0    34884    11    10     1     8     0     8    1
plimitpl   152      867    0      844     2     1     1     2     0     8    0
sigapl     424     4330    0     4277     7     0     7     7     0     8    0
futexpl     64    40733    0    40728     1     0     1     1     0     8    0
knotepl    120      403    0        0    10     0    10    10     0     8    0
kqueuepl   216     1272    0     1264    21    20     1     8     0     8    0
pipepl     320      905    0      875    23    20     3     8     0     8    0
fdescpl    496     4312    0     4279     6     1     5     6     0     8    0
filepl     152    29531    0    29282    34    22    12    17     0     8    2
lockfpl    104      483    0      481     1     0     1     1     0     8    0
lockfspl    48      169    0      167     1     0     1     1     0     8    0
sessionpl  144       27    0       11     1     0     1     1     0     8    0
pgrppl      48      145    0      129     1     0     1     1     0     8    0
ucredpl    104     2923    0     2905     1     0     1     1     0     8    0
zombiepl   144     4279    0     4277     1     0     1     1     0     8    0
processpl  1064    4330    0     4277     5     1     4     5     0     8    0
procpl     672    12022    0    11947    13     5     8     9     0     8    1
sosppl     168       66    0       66     3     3     0     1     0     8    0
sockpl     488    11673    0    11638   157   148     9    29     0     8    3
mcl64k     65536     17    0        0     3     0     3     3     0     8    0
mcl16k     16384     17    0        0     3     0     3     3     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216       8    0        0     1     0     1     1     0     8    0
mcl8k      8192      17    0        0     3     0     3     3     0     8    0
mcl4k      4096      13    0        0     2     0     2     2     0     8    0
mcl2k2     2112       3    0        0     1     0     1     1     0     8    0
mcl2k      2048     348    0        0    43     0    43    43     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      519    0        0    24     0    24    24     0     8    0
bufpl      288     9217    0     2890   453     0   453   453     0     8    0
anonpl      24   870629    0   854822   150    44   106   106     0   186    3
amapchunkpl 152   76988    0    76320    71    40    31    40     0   158    0
amappl16   200    13547    0    12996    61    31    30    33     0     8    0
amappl15   192      111    0      105     1     0     1     1     0     8    0
amappl14   184      480    0      475     1     0     1     1     0     8    0
amappl13   176      613    0      610     1     0     1     1     0     8    0
amappl12   168       31    0       24     1     0     1     1     0     8    0
amappl11   160       85    0       70     1     0     1     1     0     8    0
amappl10   152     1922    0     1914     2     1     1     1     0     8    0
amappl9    144     1072    0     1067     1     0     1     1     0     8    0
amappl8    136     1229    0     1125     4     0     4     4     0     8    0
amappl7    128      629    0      605     1     0     1     1     0     8    0
amappl6    120      822    0      806     2     1     1     2     0     8    0
amappl5    112     5437    0     5409     1     0     1     1     0     8    0
amappl4    104     1329    0     1300     2     0     2     2     0     8    0
amappl3     96    13196    0    13135     2     0     2     2     0     8    0
amappl2     88     1125    0     1077     2     0     2     2     0     8    0
amappl1     80   107796    0   107077    23     6    17    19     0     8    0
amappl      88    24959    0    24780     6     1     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      138    0        8     3     0     3     3     0     8    0
uaddrrnd    24     4313    0     4279     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4313    0     4279     1     0     1     1     0     8    0
vmmpekpl   168    37537    0    37483     3     0     3     3     0     8    0
vmmpepl    168   428804    0   425919   172    33   139   139     0   357    0
vmsppl     368     4312    0     4279     4     0     4     4     0     8    0
rwobjpl     56   112048    0   104412   111     2   109   109     0     8    0
pdppl      4096    8633    0     8558   198   117    81    93     0     8    6
pvpl        32  1680372    0  1659423   296   111   185   245     0   265    1
pmappl     248     4312    0     4279     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1015    0      171    25     0    25    25     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000cc00c0) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd8067d99b88,fffffd8069815400,0,fffffd8069814200) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd8067d99b88,0,ffff80002e494fc0,0,fffffd8069814200,400) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002a63ad20,3,ffff80002e495140,400,ffff80002e495230) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002a63ad20,ffff80002e4951e8,ffff80002e495230) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002e4952b0) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002e4952b0) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xd69fb071670, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x28 sys/arch/amd64/amd64/bus_space.c:651
comcnputc(800,6b) at comcnputc+0x1a7 sys/dev/ic/com.c:1269
cnputc(6b) at cnputc+0x4b sys/dev/cons.c:218
db_putchar(6b) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1064
db_printf(ffffffff8261b4d8) at db_printf+0x85 sys/kern/subr_prf.c:498
panic(ffffffff825a14be) at panic+0xd7 sys/kern/subr_prf.c:216
__assert(ffffffff82619d34,ffffffff826406ea,9b6,ffffffff825d59fb) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_map_teardown(fffffd807181b188) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2488
uvmspace_free(fffffd807181b188) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
reaper(ffff800021233508) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: 1
ddb{1}> trace
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x28 sys/arch/amd64/amd64/bus_space.c:651
comcnputc(800,6b) at comcnputc+0x1a7 sys/dev/ic/com.c:1269
cnputc(6b) at cnputc+0x4b sys/dev/cons.c:218
db_putchar(6b) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1064
db_printf(ffffffff8261b4d8) at db_printf+0x85 sys/kern/subr_prf.c:498
panic(ffffffff825a14be) at panic+0xd7 sys/kern/subr_prf.c:216
__assert(ffffffff82619d34,ffffffff826406ea,9b6,ffffffff825d59fb) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_map_teardown(fffffd807181b188) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2488
uvmspace_free(fffffd807181b188) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
reaper(ffff800021233508) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: -14

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/28 15:57 openbsd 293c01dc0e68 07177916 .config console log report ci-openbsd-setuid panic: tcp_ouptanpuict
* Struck through repros no longer work on HEAD.