syzbot


panic:p a n ticcp:_keournteplut

Status: closed as dup on 2022/08/29 03:58
Reported-by: syzbot+3b94fee9f00ee03213fc@syzkaller.appspotmail.com
First crash: 578d, last: 578d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
panic: tcp_output C 762 577d 579d

Sample crash report:
panic:p a n ticcp:_keournteplut 
diStopped at     db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*417352  81463  32767        0x10  0x4000000    0  syz-executor.1
 364692  50648      0     0x14000      0x200    1  reaper
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000bb9800) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd805b1e0d58,fffffd806a9da800,0,fffffd806a1ebf00) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002ca75260,3,ffff80002ae83690,0,ffff80002ae83780) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002ca75260,ffff80002ae83738,ffff80002ae83780) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002ae83800) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002ae83800) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3dbb754f240, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: tcp_output
 cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_map.c", line 2486
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000bb9800) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd805b1e0d58,fffffd806a9da800,0,fffffd806a1ebf00) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002ca75260,3,ffff80002ae83690,0,ffff80002ae83780) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002ca75260,ffff80002ae83738,ffff80002ae83780) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002ae83800) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002ae83800) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3dbb754f240, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002ae83170
rbx               0xffffffff829a1b8f    cpu_info_full_primary+0x2b8f
rdx                                0
rcx                                0
rax               0xffff80002ca75260
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xae3d6d9363db7748
r11               0x194a21cef79128a0
r12               0xffffffff829a1990    cpu_info_full_primary+0x2990
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81a16d08    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff80002ae83160
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.1) pid=417352 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    pri=32, usrpri=82, nice=20
    forw=0xffffffffffffffff, list=0xffff80002ca75ce0,0xffff80002ca742b0
    process=0xffff8000ffff9d20 user=0xffff80002ae7e000, vmspace=0xfffffd807345c740
    estcpu=32, cpticks=1, pctcpu=0.0
    user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 28141  492975  62367  32767  2        0x10                syz-executor.3
 21025  309747  30791  32767  2        0x10                syz-executor.7
 21025  193899  30791  32767  3   0x4000090  netio         syz-executor.7
 21025  502396  30791  32767  3   0x4000090  fsleep        syz-executor.7
 71382   23174  36590  32767  3        0x90  nanoslp       syz-executor.6
 71382  174853  36590  32767  3   0x4000090  fsleep        syz-executor.6
 71382  325091  36590  32767  3   0x4000090  fsleep        syz-executor.6
 71382  391409  36590  32767  3   0x4000090  fsleep        syz-executor.6
 81790  362688   1819  32767  2        0x10                syz-executor.5
 81790  469086   1819  32767  3   0x4000090  fsleep        syz-executor.5
 81790  194268   1819  32767  3   0x4000090  fsleep        syz-executor.5
 73960  284765  82231  32767  2        0x10                syz-executor.4
 73960  252495  82231  32767  3   0x4000090  fsleep        syz-executor.4
 81463   79032  25074  32767  2        0x10                syz-executor.1
*81463  417352  25074  32767  7   0x4000010                syz-executor.1
 81463  410466  25074  32767  3   0x4000090  fsleep        syz-executor.1
 81463  208397  25074  32767  3   0x4000090  fsleep        syz-executor.1
  5827  482041  58085  32767  3        0x90  nanoslp       syz-executor.0
 58085  223481  37194      0  3        0x82  wait          syz-executor.0
 25074  462703  21511  32767  3        0x90  nanoslp       syz-executor.1
 21511  198809  37194      0  3        0x82  wait          syz-executor.1
  1819  128191  60484  32767  3        0x90  nanoslp       syz-executor.5
 60484   59891  37194      0  3        0x82  wait          syz-executor.5
 32966  451619      0      0  3     0x14200  bored         sosplice
 82231  393491  77438  32767  3        0x90  nanoslp       syz-executor.4
 77438  319076  37194      0  3        0x82  wait          syz-executor.4
 30791   19649  61433  32767  3        0x90  nanoslp       syz-executor.7
 61433  339662  37194      0  3        0x82  wait          syz-executor.7
 62367  237742  42987  32767  3        0x90  nanoslp       syz-executor.3
 36590  261887  65218  32767  3        0x90  nanoslp       syz-executor.6
 42987  354893  37194      0  3        0x82  wait          syz-executor.3
 65218  365286  37194      0  3        0x82  wait          syz-executor.6
 44278  464631  28874  32767  3        0x90  nanoslp       syz-executor.2
 28874   27380  37194      0  3        0x82  wait          syz-executor.2
 37194  347635  94539      0  3        0x82  wait          syz-fuzzer
 37194   70342  94539      0  3   0x4000082  nanoslp       syz-fuzzer
 37194  130343  94539      0  3   0x4000082  thrsleep      syz-fuzzer
 37194  416573  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  364626  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  431207  94539      0  3   0x4000082  thrsleep      syz-fuzzer
 37194  397992  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  428878  94539      0  3   0x4000082  thrsleep      syz-fuzzer
 37194  440916  94539      0  3   0x4000082  thrsleep      syz-fuzzer
 37194   51541  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  329833  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  472178  94539      0  3   0x4000082  wait          syz-fuzzer
 37194  332625  94539      0  3   0x4000082  nanoslp       syz-fuzzer
 37194  143554  94539      0  3   0x4000082  kqread        syz-fuzzer
 37194   72021  94539      0  3   0x4000082  thrsleep      syz-fuzzer
 37194   83793  94539      0  3   0x4000082  wait          syz-fuzzer
 94539   23760  47930      0  3    0x10008a  sigsusp       ksh
 47930  387895  87937      0  3        0x9a  kqread        sshd
  4168   90704      1      0  3    0x100083  ttyin         getty
 87937  349492      1      0  3        0x88  kqread        sshd
 40910   80536  58253     73  3   0x1100090  kqread        syslogd
 58253  447221      1      0  3    0x100082  netio         syslogd
 42679   94853      1      0  3    0x100080  kqread        resolvd
 50864  291025  23579     77  3    0x100092  kqread        dhcpleased
 83142   44491  23579     77  3    0x100092  kqread        dhcpleased
 23579  191886      1      0  3        0x80  kqread        dhcpleased
 71501  433188      0      0  3     0x14200  bored         smr
 12233  148812      0      0  2     0x14200                zerothread
 30754  221293      0      0  3     0x14200  aiodoned      aiodoned
 68149  430872      0      0  3     0x14200  syncer        update
 67549  323575      0      0  3     0x14200  cleaner       cleaner
 50648  364692      0      0  7     0x14200                reaper
 60268  372234      0      0  3     0x14200  pgdaemon      pagedaemon
 97603  464768      0      0  3     0x14200  bored         viomb
 96831  522952      0      0  3  0x40014200  acpi0         acpi0
 38383  176952      0      0  3  0x40014200                idle1
 88252  124422      0      0  3     0x14200  bored         softnet
 60623  286412      0      0  3     0x14200  bored         softnet
 19012  443716      0      0  3     0x14200  bored         softnet
 20301     692      0      0  3     0x14200  bored         softnet
  7863  220449      0      0  3     0x14200  bored         systqmp
 95042   41490      0      0  3     0x14200  bored         systq
  4689  158665      0      0  3  0x40014200  bored         softclock
 90126  314736      0      0  3  0x40014200                idle0
     1  323025      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 1:
exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff82add780)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  uvm_pmr_freepageq+0xcc sys/uvm/uvm_pmemrange.c:1333
#4  amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523
#5  uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
#6  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
#7  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
#8  reaper+0x19a sys/kern/kern_exit.c:448
#9  proc_trampoline+0x1c
Process 81463 (syz-executor.1) thread 0xffff80002ca75260 (417352)
exclusive rwlock netlock r = 0 (0xffffffff8291ebe0)
#0  witness_lock+0x44d
#1  sosend+0x500 sys/kern/uipc_socket.c:632
#2  sendit+0x65d sys/kern/uipc_syscalls.c:694
#3  sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
#4  syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#4  syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
#5  Xsyscall+0x128
Process 50648 (reaper) thread 0xffff800021233a48 (364692)
exclusive kernel: protection fault trap, code=0
Faulted in DDB; continuing...
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10198   6410K    6419K  78643K     11304        0
            pcb    13     12K      14K  78643K        17        0
         rtable   240      6K       7K  78643K      1116        0
         ifaddr    82     17K      17K  78643K       121        0
         sysctl     2      0K       1K  78643K         7        0
       counters    56     35K      35K  78643K        66        0
       ioctlops     0      0K       2K  78643K        96        0
            iov     0      0K      32K  78643K      1162        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1271     79K      79K  78643K      2196        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        84        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      0K       0K  78643K      1423        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    24     89K     125K  78643K      5311        0
          sigio     0      0K       0K  78643K        32        0
           proc    56     78K     115K  78643K       984        0
        subproc   104      6K       6K  78643K       169        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       355        0
       in_multi    99      6K       6K  78643K       216        0
    ether_multi     1      0K       0K  78643K        13        0
            mrt     1      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   169    758K     758K  78643K       169        0
           exec     0      0K       2K  78643K      1157        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      62K  78643K         8        0
       UVM amap   338     91K     106K  78643K     33791        0
       UVM aobj   131      4K       4K  78643K       134        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     1      0K       0K  78643K       222        0
            NDP    11      0K       2K  78643K        42        0
           temp   124   4726K    4790K  78643K     15590        0
         kqueue    12     18K      24K  78643K       452        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      534    0      530     7     6     1     3     0     8    0
rtentry    112      175    0       62     4     0     4     4     0     8    0
unpcb      144     4347    0     4330    36    32     4     6     0     8    3
syncache   296       53    0       53     8     7     1     1     0     8    1
tcpqe       32       13    0       13     7     6     1     1     0     8    1
tcpcb      768     2241    0     2236    87    84     3    16     0     8    2
arp        120       28    0       10     1     0     1     1     0     8    0
ipq         40       13    0       11     3     2     1     1     0     8    0
ipqe        40       50    0       48     3     2     1     1     0     8    0
inpcb      368     4649    0     4640    88    86     2    14     0     8    1
nd6         48       48    0       21     1     0     1     1     0     8    0
kcovpl      48       13    0        5     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      702    0      241    31     2    29    30     0     8    0
art_table   32      703    0      241     4     0     4     4     0     8    0
art_node    16      174    0       71     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        1     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112     1421    0     1411     1     0     1     1     0     8    0
shmpl      112      131    0        3     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     9408    0     7969    91     0    91    91     0     8    0
ffsino     272     9408    0     7969    97     0    97    97     0     8    0
nchpl      144    17474    0    15832    63     0    63    63     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   60599    0    60599     4     3     1     2     0     8    1
percpumem   16       45    0        5     1     0     1     1     0     8    0
kstatmem   264       32    0       10     2     0     2     2     0     8    0
scxspl     216    56025    0    56025    14    13     1     5     0     8    1
plimitpl   152     1612    0     1589     8     7     1     2     0     8    0
sigapl     424     5577    0     5522     7     0     7     7     0     8    0
futexpl     64    49102    0    49093     6     5     1     1     0     8    0
knotepl    120      566    0        0    11     0    11    11     0     8    0
kqueuepl   216     1837    0     1829    36    28     8     8     0     8    7
pipepl     320     1566    0     1538    35    32     3    13     0     8    0
fdescpl    496     5559    0     5524     7     2     5     6     0     8    0
filepl     152    41556    0    41316    77    62    15    20     0     8    4
lockfpl    104      775    0      773     3     2     1     2     0     8    0
lockfspl    48      194    0      192     1     0     1     1     0     8    0
sessionpl  144       28    0       12     1     0     1     1     0     8    0
pgrppl      48       50    0       34     1     0     1     1     0     8    0
ucredpl    104     6196    0     6178     1     0     1     1     0     8    0
zombiepl   144     5524    0     5522     1     0     1     1     0     8    0
processpl  1064    5577    0     5522     5     1     4     5     0     8    0
procpl     672    16225    0    16143    13     5     8     9     0     8    0
sosppl     168      100    0      100    10    10     0     1     0     8    0
sockpl     488     9679    0     9649   221   210    11    24     0     8    7
mcl64k     65536     27    0        0     4     1     3     3     0     8    0
mcl16k     16384     25    0        0     4     1     3     3     0     8    0
mcl12k     12288     17    0        0     2     0     2     2     0     8    0
mcl9k      9216      16    0        0     2     0     2     2     0     8    0
mcl8k      8192      17    0        0     3     0     3     3     0     8    0
mcl4k      4096      28    0        0     3     1     2     3     0     8    0
mcl2k2     2112       5    0        0     1     0     1     1     0     8    0
mcl2k      2048     340    0        0    38     5    33    38     0     8    0
mtagpl      96        5    0        0     1     0     1     1     0     8    0
mbufpl     256      606    0        0    25     0    25    25     0     8    0
bufpl      288    11572    0     5242   453     0   453   453     0     8    0
anonpl      24  1145026    0  1132223   157    58    99   107     0   186    1
amapchunkpl 152  102452    0   101774    85    45    40    41     0   158   11
amappl16   200    17081    0    16713   111    83    28    33     0     8    8
amappl15   192     1601    0     1592     1     0     1     1     0     8    0
amappl14   184      567    0      558     1     0     1     1     0     8    0
amappl13   176      112    0      111     1     0     1     1     0     8    0
amappl12   168       17    0       14     1     0     1     1     0     8    0
amappl11   160      716    0      698     1     0     1     1     0     8    0
amappl10   152     1326    0     1316     1     0     1     1     0     8    0
amappl9    144     1141    0     1135     1     0     1     1     0     8    0
amappl8    136     1487    0     1370     5     0     5     5     0     8    0
amappl7    128      814    0      791     1     0     1     1     0     8    0
amappl6    120      886    0      866     2     1     1     2     0     8    0
amappl5    112     6522    0     6492     1     0     1     1     0     8    0
amappl4    104     1760    0     1734     2     0     2     2     0     8    0
amappl3     96    16843    0    16783     2     0     2     2     0     8    0
amappl2     88      690    0      657     2     1     1     2     0     8    0
amappl1     80   140845    0   140101    22     5    17    19     0     8    0
amappl      88    32969    0    32779     6     1     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      133    0        3     3     0     3     3     0     8    0
uaddrrnd    24     5559    0     5523     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     5559    0     5523     1     0     1     1     0     8    0
vmmpekpl   168    49674    0    49609     4     0     4     4     0     8    0
vmmpepl    168   554117    0   551254   203    72   131   142     0   357    0
vmsppl     368     5558    0     5523     4     0     4     4     0     8    0
rwobjpl     56   144986    0   137495   114     6   108   110     0     8    0
pdppl      4096   11125    0    11046   236   155    81    95     0     8    2
pvpl        32  2247005    0  2228925   395   226   169   255     0   265    9
pmappl     248     5558    0     5523     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1088    0      256    25     0    25    25     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8257b2ef) at panic+0x177 sys/kern/subr_prf.c:198
tcp_output(ffff800000bb9800) at tcp_output+0x2cd2 sys/netinet/tcp_output.c:727
tcp_send(fffffd805b1e0d58,fffffd806a9da800,0,fffffd806a1ebf00) at tcp_send+0xc4 sys/netinet/tcp_usrreq.c:953
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a pru_send sys/sys/protosw.h:331 [inline]
sosend(fffffd805b1e0d58,0,ffff80002ae83510,0,fffffd806a1ebf00,0) at sosend+0x62a sys/kern/uipc_socket.c:646
sendit(ffff80002ca75260,3,ffff80002ae83690,0,ffff80002ae83780) at sendit+0x65d sys/kern/uipc_syscalls.c:694
sys_sendmsg(ffff80002ca75260,ffff80002ae83738,ffff80002ae83780) at sys_sendmsg+0x198 sys/kern/uipc_syscalls.c:601
syscall(ffff80002ae83800) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002ae83800) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3dbb754f240, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x28 sys/arch/amd64/amd64/bus_space.c:651
comcnputc(800,61) at comcnputc+0x97 sys/dev/ic/com.c:1259
cnputc(61) at cnputc+0x4b sys/dev/cons.c:218
db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1064
db_printf(ffffffff8261b4d8) at db_printf+0x85 sys/kern/subr_prf.c:498
panic(ffffffff825a14be) at panic+0xd7 sys/kern/subr_prf.c:216
__assert(ffffffff82619d34,ffffffff826406ea,9b6,ffffffff825d59fb) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_map_teardown(fffffd807345c8b0) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2488
uvmspace_free(fffffd807345c8b0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: 1
ddb{1}> trace
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x28 sys/arch/amd64/amd64/bus_space.c:651
comcnputc(800,61) at comcnputc+0x97 sys/dev/ic/com.c:1259
cnputc(61) at cnputc+0x4b sys/dev/cons.c:218
db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155
kprintf() at kprintf+0x20ec sys/kern/subr_prf.c:1064
db_printf(ffffffff8261b4d8) at db_printf+0x85 sys/kern/subr_prf.c:498
panic(ffffffff825a14be) at panic+0xd7 sys/kern/subr_prf.c:216
__assert(ffffffff82619d34,ffffffff826406ea,9b6,ffffffff825d59fb) at __assert+0x25 sys/kern/subr_prf.c:157
uvm_map_teardown(fffffd807345c8b0) at uvm_map_teardown+0x2e8 sys/uvm/uvm_map.c:2488
uvmspace_free(fffffd807345c8b0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: -14

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/28 10:22 openbsd 293c01dc0e68 07177916 .config console log report ci-openbsd-setuid panic:p a n ticcp:_keournteplut
* Struck through repros no longer work on HEAD.