syzbot


panic: ffs_alloccg: map corrupted

Status: auto-closed as invalid on 2020/12/14 11:08
Reported-by: syzbot+fa46e450dc4dba553bfb@syzkaller.appspotmail.com
First crash: 1528d, last: 1528d

Sample crash report:
panic: ffs_alloccg: map corrupted
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 473174  20979      0           0          0    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8246efd2) at panic+0x15e sys/kern/subr_prf.c:218
ffs_mapsearch(ffff8000006aa800,ffff80000a3cf000,b65,8) at ffs_mapsearch+0x3f1 sys/ufs/ffs/ffs_alloc.c:1461
ffs_alloccgblk(fffffd8073190008,fffffd806f1d2018,59f45) at ffs_alloccgblk+0x2a6 sys/ufs/ffs/ffs_alloc.c:1060
ffs_alloccg(fffffd8073190008,0,59f45,4000) at ffs_alloccg+0x22a sys/ufs/ffs/ffs_alloc.c:966
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 sys/ufs/ffs/ffs_alloc.c:289
ffs2_balloc(fffffd8073190008,ff0,30,fffffd807f7bfa80,1,ffff800023f43718) at ffs2_balloc+0x3be sys/ufs/ffs/ffs_balloc.c:547
ffs_write(ffff800023f437a0) at ffs_write+0x3cc sys/ufs/ffs/ffs_vnops.c:349
VOP_WRITE(fffffd8064e2e5b0,ffff800023f43838,23,fffffd807f7bfa80) at VOP_WRITE+0xc6 sys/kern/vfs_vops.c:268
vn_rdwr(1,fffffd8064e2e5b0,ffff800023f43928,30,0,1) at vn_rdwr+0xef sys/kern/vfs_vnops.c:330
acct_process(ffff8000226fa518) at acct_process+0x5f6 sys/kern/kern_acct.c:242
exit1(ffff8000226fa518,0,0,1) at exit1+0x350 sys/kern/kern_exit.c:209
sys_exit(ffff8000226fa518,ffff800023f43a90,ffff800023f43ae0) at sys_exit+0x16 sys/kern/kern_exit.c:95
syscall(ffff800023f43b60) at syscall+0x4a1 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f43b60) at syscall+0x4a1 sys/arch/amd64/amd64/trap.c:568
end trace frame: 0xffff800023f43be0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
ffs_alloccg: map corrupted
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8246efd2) at panic+0x15e sys/kern/subr_prf.c:218
ffs_mapsearch(ffff8000006aa800,ffff80000a3cf000,b65,8) at ffs_mapsearch+0x3f1 sys/ufs/ffs/ffs_alloc.c:1461
ffs_alloccgblk(fffffd8073190008,fffffd806f1d2018,59f45) at ffs_alloccgblk+0x2a6 sys/ufs/ffs/ffs_alloc.c:1060
ffs_alloccg(fffffd8073190008,0,59f45,4000) at ffs_alloccg+0x22a sys/ufs/ffs/ffs_alloc.c:966
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 sys/ufs/ffs/ffs_alloc.c:289
ffs2_balloc(fffffd8073190008,ff0,30,fffffd807f7bfa80,1,ffff800023f43718) at ffs2_balloc+0x3be sys/ufs/ffs/ffs_balloc.c:547
ffs_write(ffff800023f437a0) at ffs_write+0x3cc sys/ufs/ffs/ffs_vnops.c:349
VOP_WRITE(fffffd8064e2e5b0,ffff800023f43838,23,fffffd807f7bfa80) at VOP_WRITE+0xc6 sys/kern/vfs_vops.c:268
vn_rdwr(1,fffffd8064e2e5b0,ffff800023f43928,30,0,1) at vn_rdwr+0xef sys/kern/vfs_vnops.c:330
acct_process(ffff8000226fa518) at acct_process+0x5f6 sys/kern/kern_acct.c:242
exit1(ffff8000226fa518,0,0,1) at exit1+0x350 sys/kern/kern_exit.c:209
sys_exit(ffff8000226fa518,ffff800023f43a90,ffff800023f43ae0) at sys_exit+0x16 sys/kern/kern_exit.c:95
syscall(ffff800023f43b60) at syscall+0x4a1 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f43b60) at syscall+0x4a1 sys/arch/amd64/amd64/trap.c:568
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb000, count: -15
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800023f43190
rbx               0xffff800023f431a0
rdx                             0x8b
rcx                              0x2
rax                              0x1
r8                0xffff800023f43150
r9                0xffffffff81a4d0e6    kprintf+0x146
r10                              0x1
r11               0x46504ba12109fefb
r12                     0x3000000008
r13               0xffff800023f43240
r14                            0x100
r15                              0x1
rip               0xffffffff81cc10e8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800023f43180
ss                                 0
db_enter+0x18:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor.1) pid=449706 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    pri=32, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff8000226faef8,0xffff8000226fb180
    process=0xffff800022f323f0 user=0xffff800023f3e000, vmspace=0xfffffd807effe000
    estcpu=36, cpticks=2, pctcpu=0.0
    user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 20979  473174   8472      0  7           0                syz-executor.0
 20979   50129   8472      0  2   0x4000000                syz-executor.0
 44537  417689      0      0  3     0x14200  acct          acct
 48885  121991      0      0  3     0x14280  nfsidl        nfsio
  3487  279441      0      0  3     0x14280  nfsidl        nfsio
 15755  124972      0      0  3     0x14280  nfsidl        nfsio
 90601  456078      0      0  3     0x14280  nfsidl        nfsio
 57189  244706      0      0  3     0x14280  nfsidl        nfsio
 21758  455365      0      0  3     0x14280  nfsidl        nfsio
 22246  314836      0      0  3     0x14280  nfsidl        nfsio
 18548  146568      0      0  3     0x14280  nfsidl        nfsio
 28417  464321      0      0  3     0x14280  nfsidl        nfsio
  8283  220538      0      0  3     0x14280  nfsidl        nfsio
 74510  388372      0      0  3     0x14280  nfsidl        nfsio
 55880  492188      0      0  3     0x14280  nfsidl        nfsio
 95551  513942      0      0  3     0x14280  nfsidl        nfsio
 26478  391648      0      0  3     0x14280  nfsidl        nfsio
 65139  277446      0      0  3     0x14280  nfsidl        nfsio
 39760  144778      0      0  3     0x14280  nfsidl        nfsio
 22884  168760      0      0  3     0x14280  nfsidl        nfsio
 77111  291602      0      0  3     0x14280  nfsidl        nfsio
 46718  418008      0      0  3     0x14280  nfsidl        nfsio
 43879  497638      0      0  3     0x14280  nfsidl        nfsio
 80970  389381  37245      0  3        0x82  nanosleep     syz-executor.1
  8472  160305  37245      0  3        0x82  nanosleep     syz-executor.0
 60903  466882      0      0  3     0x14200  bored         sosplice
 37245  268889  92896      0  3        0x82  thrsleep      syz-fuzzer
 37245  444836  92896      0  3   0x4000082  nanosleep     syz-fuzzer
 37245  450965  92896      0  3   0x4000082  thrsleep      syz-fuzzer
 37245  501145  92896      0  3   0x4000082  thrsleep      syz-fuzzer
 37245  304904  92896      0  3   0x4000082  kqread        syz-fuzzer
 37245  497234  92896      0  3   0x4000082  thrsleep      syz-fuzzer
 37245  418538  92896      0  3   0x4000082  thrsleep      syz-fuzzer
 37245  258227  92896      0  3   0x4000082  thrsleep      syz-fuzzer
 92896  226368  20531      0  3    0x10008a  pause         ksh
 20531  480187  91000      0  3        0x92  select        sshd
 89627  225112      1      0  3    0x100083  ttyopn        getty
 91000  176452      1      0  3        0x80  select        sshd
 40325  522935   6419     74  3    0x100092  bpf           pflogd
  6419  167516      1      0  3        0x80  netio         pflogd
 88312  141926  34228     73  3    0x100090  kqread        syslogd
 34228   57460      1      0  3    0x100082  netio         syslogd
 56638  220452      1     77  3    0x100090  poll          dhclient
 36841  108816      1      0  3        0x80  poll          dhclient
 76630  175601      0      0  3     0x14200  bored         smr
 24956  286934      0      0  2     0x14200                zerothread
 97244   82996      0      0  3     0x14200  aiodoned      aiodoned
 17348  128161      0      0  3     0x14200  syncer        update
 84849  475261      0      0  3     0x14200  cleaner       cleaner
 93859  498154      0      0  2     0x14200                reaper
 85641  222255      0      0  3     0x14200  pgdaemon      pagedaemon
 62096  273964      0      0  3     0x14200  bored         crynlk
 87285  352656      0      0  3     0x14200  bored         crypto
 39503  266256      0      0  3  0x40014200  acpi0         acpi0
 70627  265471      0      0  3  0x40014200                idle1
 37872   38305      0      0  3     0x14200  bored         softnet
 56163   86057      0      0  3     0x14200  bored         systqmp
 17749  237502      0      0  3     0x14200  bored         systq
 48815  155198      0      0  3  0x40014200  bored         softclock
 76311  304197      0      0  3  0x40014200                idle0
     1  107244      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9558   6569K    7342K  78643K     21506        0
            pcb    13      8K       8K  78643K       499        0
         rtable    95      6K      10K  78643K      1684        0
         ifaddr    87     17K      18K  78643K       602        0
         sysctl     2      0K       1K  78643K         9        0
       counters    43     33K      34K  78643K       209        0
       ioctlops     0      0K       4K  78643K      2203        0
            iov     0      0K      24K  78643K       434        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1220     77K      77K  78643K      4824        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        80        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      0K       1K  78643K       938        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1824    197K     290K  78643K     13058        0
      file desc     5     13K      25K  78643K      9738        0
          sigio     0      0K       0K  78643K        25        0
           proc    64     63K      95K  78643K      1247        0
        subproc    32      2K       2K  78643K       153        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       492        0
       in_multi    29      2K       2K  78643K       449        0
    ether_multi     1      0K       0K  78643K        83        0
            mrt     0      0K       0K  78643K        61        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    79    360K     360K  78643K        79        0
           exec     0      0K       2K  78643K       840        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   281    198K     200K  78643K     24056        0
       UVM aobj   112      9K       9K  78643K       112        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       443        0
            NDP    15      0K       0K  78643K       133        0
           temp   149   3978K    4058K  78643K     48256        0
         kqueue     3      4K      18K  78643K       435        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64       21    0       17     1     0     1     1     0     8    0
plcache    128       20    0        0     1     0     1     1     0     8    0
rtpcb       96      304    0      302     1     0     1     1     0     8    0
rtentry    112      210    0      181     2     0     2     2     0     8    0
unpcb      120     2612    0     2589     5     3     2     2     0     8    1
syncache   272       76    0       76    12    12     0     1     0     8    0
sackhl      24        1    0        1     1     1     0     1     0     8    0
tcpqe       32       38    0       38     8     8     0     1     0     8    0
tcpcb      592     1566    0     1560    27    25     2     5     0     8    0
inpcb      296     4382    0     4351     9     6     3     3     0     8    0
rttmr       72       27    0       27     3     3     0     1     0     8    0
ip6q        72        4    0        4     1     1     0     1     0     8    0
ip6af       40       44    0       44     1     1     0     1     0     8    0
nd6         48       54    0       48     1     0     1     1     0     8    0
pkpcb       40       30    0       30     4     4     0     1     0     8    0
kcovpl      48        9    0        7     1     0     1     1     0     8    0
ppxss      1128      20    0       20     3     3     0     1     0     8    0
pfstscr     40       17    0       17     3     3     0     1     0     8    0
pffrag     232        2    0        2     1     1     0     1     0   482    0
pffrnode    88        2    0        2     1     1     0     1     0     8    0
pffrent     40       95    0       95     2     2     0     1     0     8    0
pfosfp      40      866    0      423     5     0     5     5     0     8    0
pfosfpen   112     1474    0      714    22     0    22    22     0     8    0
pfrktable  1344     133    0      126     4     3     1     2     0     8    0
pftag       88        6    0        6     2     2     0     1     0     8    0
pfstitem    24       78    0       76     1     0     1     1     0     8    0
pfstkey    112      110    0      108     2     1     1     2     0     8    0
pfstate    328      100    0       98     6     5     1     5     0     8    0
pfsrctr    152      168    0      168     1     1     0     1     0     8    0
pfrule     1360     120    0       89     6     2     4     4     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      865    0      711    14     3    11    13     0     8    0
art_table   32      866    0      711     2     0     2     2     0     8    0
art_node    16      209    0      186     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        0     1     0     1     1     0     8    0
semapl     112      934    0      924     1     0     1     1     0     8    0
shmpl      112      109    0        0     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    13864    0    12454    93     4    89    89     0     8    0
ffsino     272    13864    0    12454    95     0    95    95     0     8    0
nchpl      144    25553    0    23969    60     0    60    60     0     8    0
uvmvnodes   72     8587    0        0   157     0   157   157     0     8    0
vnodes     208     8587    0        0   452     0   452   452     0     8    0
namei      1024   64578    0    64578     1     0     1     1     0     8    1
percpumem   16      115    0       83     1     0     1     1     0     8    0
vcpupl     1984      16    0        0     2     0     2     2     0     8    0
vmpool     560       77    0       61     4     2     2     2     0     8    0
pfiaddrpl  120       42    0       31     2     1     1     1     0     8    0
scsiplug    72       11    0       11     2     2     0     1     0     8    0
scxspl     200    75164    0    75164    10     9     1     7     0     8    1
plimitpl   152      408    0      400     1     0     1     1     0     8    0
sigapl     424     9954    0     9900     7     0     7     7     0     8    1
futexpl     56    76145    0    76145     1     0     1     1     0     8    1
knotepl    112      595    0      575     1     0     1     1     0     8    0
kqueuepl   152     6198    0     6162     2     0     2     2     0     8    0
pipepl     304      590    0      579    15    13     2     2     0     8    0
fdescpl    496     9917    0     9901     3     0     3     3     0     8    0
filepl     152    36845    0    36743    10     4     6     7     0     8    2
lockfpl    104     1293    0     1292     1     0     1     1     0     8    0
lockfspl    48      539    0      538     1     0     1     1     0     8    0
sessionpl  120       25    0       14     1     0     1     1     0     8    0
pgrppl      48       79    0       68     1     0     1     1     0     8    0
ucredpl     96     4577    0     4568     1     0     1     1     0     8    0
zombiepl   144     9901    0     9900     1     0     1     1     0     8    0
processpl  1008    9954    0     9900     7     0     7     7     0     8    0
procpl     632    22258    0    22195     6     0     6     6     0     8    0
sosppl     144      138    0      137    10     9     1     1     0     8    0
sockpl     400     7340    0     7278    20    11     9     9     0     8    2
mcl64k     65536     37    0        0     3     0     3     3     0     8    0
mcl16k     16384     17    0        0     3     0     3     3     0     8    0
mcl12k     12288     26    0        0     2     0     2     2     0     8    0
mcl9k      9216      17    0        0     2     0     2     2     0     8    0
mcl8k      8192      19    0        0     3     0     3     3     0     8    0
mcl4k      4096      25    0        0     3     0     3     3     0     8    0
mcl2k2     2112       6    0        0     1     0     1     1     0     8    0
mcl2k      2048     374    0        0    17     0    17    17     0     8    0
mtagpl      96      355    0        0     6     0     6     6     0     8    0
mbufpl     256     1299    0        0    64     0    64    64     0     8    0
bufpl      280    18719    0    12444   449     0   449   449     0     8    0
anonpl      16   736896    0   726549    73    16    57    57     0   124   15
amapchunkpl 152   39271    0    39006    47    31    16    22     0   158    5
amappl16   192    30343    0    29953    49    22    27    27     0     8    7
amappl15   184      889    0      889     3     3     0     1     0     8    0
amappl14   176        6    0        2     1     0     1     1     0     8    0
amappl13   168     4649    0     4645     1     0     1     1     0     8    0
amappl12   160     1998    0     1988     1     0     1     1     0     8    0
amappl11   152     2067    0     2050     1     0     1     1     0     8    0
amappl10   144      282    0      276     1     0     1     1     0     8    0
amappl9    136      361    0      361     1     1     0     1     0     8    0
amappl8    128      551    0      393     6     0     6     6     0     8    0
amappl7    120      612    0      603     1     0     1     1     0     8    0
amappl6    112     2143    0     2114     1     0     1     1     0     8    0
amappl5    104     9484    0     9471     1     0     1     1     0     8    0
amappl4     96     6944    0     6904     2     0     2     2     0     8    1
amappl3     88      210    0      205     1     0     1     1     0     8    0
amappl2     80    70321    0    70229     3     1     2     3     0     8    0
amappl1     72   268064    0   267582    24    14    10    19     0     8    0
amappl      80    22800    0    22704     3     0     3     3     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64      111    0        0     2     0     2     2     0     8    0
uaddrrnd    24     9994    0     9961     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     9994    0     9961     1     0     1     1     0     8    0
vmmpekpl   168    47501    0    47455     4     1     3     3     0     8    0
vmmpepl    168  1217096    0  1215185   154    63    91    97     0   357    7
vmsppl     368     9993    0     9961     3     0     3     3     0     8    0
pdppl      4096   19995    0    19938    10     2     8     8     0     8    0
pvpl        32  3487445    0  3473874   279   134   145   145     0   265   35
pmappl     232     9993    0     9961     3     1     2     2     0     8    0
extentpl    40       53    0       36     1     0     1     1     0     8    0
phpool     112      353    0       36    10     0    10    10     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8276dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
end of kernel
end trace frame: 0x7f7fffffadc0, count: 9
ddb{0}> trace
x86_ipi_db(ffffffff8276dff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc
softintr_dispatch(0) at softintr_dispatch+0x4e sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
end of kernel
end trace frame: 0x7f7fffffadc0, count: -6
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8246efd2) at panic+0x15e sys/kern/subr_prf.c:218
ffs_mapsearch(ffff8000006aa800,ffff80000a3cf000,b65,8) at ffs_mapsearch+0x3f1 sys/ufs/ffs/ffs_alloc.c:1461
ffs_alloccgblk(fffffd8073190008,fffffd806f1d2018,59f45) at ffs_alloccgblk+0x2a6 sys/ufs/ffs/ffs_alloc.c:1060
ffs_alloccg(fffffd8073190008,0,59f45,4000) at ffs_alloccg+0x22a sys/ufs/ffs/ffs_alloc.c:966
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 sys/ufs/ffs/ffs_alloc.c:289
ffs2_balloc(fffffd8073190008,ff0,30,fffffd807f7bfa80,1,ffff800023f43718) at ffs2_balloc+0x3be sys/ufs/ffs/ffs_balloc.c:547
ffs_write(ffff800023f437a0) at ffs_write+0x3cc sys/ufs/ffs/ffs_vnops.c:349
VOP_WRITE(fffffd8064e2e5b0,ffff800023f43838,23,fffffd807f7bfa80) at VOP_WRITE+0xc6 sys/kern/vfs_vops.c:268
vn_rdwr(1,fffffd8064e2e5b0,ffff800023f43928,30,0,1) at vn_rdwr+0xef sys/kern/vfs_vnops.c:330
acct_process(ffff8000226fa518) at acct_process+0x5f6 sys/kern/kern_acct.c:242
exit1(ffff8000226fa518,0,0,1) at exit1+0x350 sys/kern/kern_exit.c:209
sys_exit(ffff8000226fa518,ffff800023f43a90,ffff800023f43ae0) at sys_exit+0x16 sys/kern/kern_exit.c:95
syscall(ffff800023f43b60) at syscall+0x4a1 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f43b60) at syscall+0x4a1 sys/arch/amd64/amd64/trap.c:568
end trace frame: 0xffff800023f43be0, count: 0
ddb{1}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8246efd2) at panic+0x15e sys/kern/subr_prf.c:218
ffs_mapsearch(ffff8000006aa800,ffff80000a3cf000,b65,8) at ffs_mapsearch+0x3f1 sys/ufs/ffs/ffs_alloc.c:1461
ffs_alloccgblk(fffffd8073190008,fffffd806f1d2018,59f45) at ffs_alloccgblk+0x2a6 sys/ufs/ffs/ffs_alloc.c:1060
ffs_alloccg(fffffd8073190008,0,59f45,4000) at ffs_alloccg+0x22a sys/ufs/ffs/ffs_alloc.c:966
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_realloccg(fffffd8073190008,0,59f45,1000,1800,fffffd807f7bfa80) at ffs_realloccg+0x6c4 sys/ufs/ffs/ffs_alloc.c:289
ffs2_balloc(fffffd8073190008,ff0,30,fffffd807f7bfa80,1,ffff800023f43718) at ffs2_balloc+0x3be sys/ufs/ffs/ffs_balloc.c:547
ffs_write(ffff800023f437a0) at ffs_write+0x3cc sys/ufs/ffs/ffs_vnops.c:349
VOP_WRITE(fffffd8064e2e5b0,ffff800023f43838,23,fffffd807f7bfa80) at VOP_WRITE+0xc6 sys/kern/vfs_vops.c:268
vn_rdwr(1,fffffd8064e2e5b0,ffff800023f43928,30,0,1) at vn_rdwr+0xef sys/kern/vfs_vnops.c:330
acct_process(ffff8000226fa518) at acct_process+0x5f6 sys/kern/kern_acct.c:242
exit1(ffff8000226fa518,0,0,1) at exit1+0x350 sys/kern/kern_exit.c:209
sys_exit(ffff8000226fa518,ffff800023f43a90,ffff800023f43ae0) at sys_exit+0x16 sys/kern/kern_exit.c:95
syscall(ffff800023f43b60) at syscall+0x4a1 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f43b60) at syscall+0x4a1 sys/arch/amd64/amd64/trap.c:568
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7fffffb000, count: -15

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/09/15 11:07 openbsd 09f377e9a53e 6989d6f6 .config console log report ci-openbsd-multicore
* Struck through repros no longer work on HEAD.