last executing test programs: kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. 692587002 valid accesses KASAN: invalid read of 4 bytes at 0xffff800000ed2ac0 from pc 0xffffffff81f46c02 KASAN: first bad byte at 0xffff800000ed2ac0 (+0); shadow 0x08: valid Starting stack trace... __asan_load4_noabort(ffff800000ed2ac0) at __asan_load4_noabort+0xab amap_chunk_get(ffff800000ed2a70,0,1,2) at amap_chunk_get+0x52 amap_add(ffff8000012fa178,0,ffff800000e91180,1) at amap_add+0xda uvm_fault_upper(ffff80003933e720,ffff80003933e6c8,ffff80003933e780) at uvm_fault_upper+0xcc6 uvm_fault(ffff8000012bd018,5c74022e000,0,2) at uvm_fault+0x28e upageflttrap(ffff80003933ea00,5c74022e028) at upageflttrap+0xe0 usertrap(ffff80003933ea00) at usertrap+0x4f9 OpenBSD/amd64 (ci-openbsd-kasarecall_trap(n-3.us-central1-) at c.c.syzkaller.internal) (tty00)recall_trap login: +0x8 end of kernel end trace frame: 0x7c74b5ab5460, count: 249 End of stack trace. panic: Caught invalid memory access at ffff800000ed2ac0 size 4 op 0 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *237478 5896 0 0x100002 0 0 sh 330398 37624 73 0x1100010 0 1 syslogd db_enter() at db_enter+0x17 panic(ffffffff82a63def) at panic+0x270 __asan_load4_noabort(ffff800000ed2ac0) at __asan_load4_noabort+0xcc amap_chunk_get(ffff800000ed2a70,0,1,2) at amap_chunk_get+0x52 amap_add(ffff8000012fa178,0,ffff800000e91180,1) at amap_add+0xda uvm_fault_upper(ffff80003933e720,ffff80003933e6c8,ffff80003933e780) at uvm_fault_upper+0xcc6 uvm_fault(ffff8000012bd018,5c74022e000,0,2) at uvm_fault+0x28e upageflttrap(ffff80003933ea00,5c74022e028) at upageflttrap+0xe0 usertrap(ffff80003933ea00) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c74b5ab5460, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff800000ed2ac0 size 4 op 0 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff82a63def) at panic+0x270 __asan_load4_noabort(ffff800000ed2ac0) at __asan_load4_noabort+0xcc amap_chunk_get(ffff800000ed2a70,0,1,2) at amap_chunk_get+0x52 amap_add(ffff8000012fa178,0,ffff800000e91180,1) at amap_add+0xda uvm_fault_upper(ffff80003933e720,ffff80003933e6c8,ffff80003933e780) at uvm_fault_upper+0xcc6 uvm_fault(ffff8000012bd018,5c74022e000,0,2) at uvm_fault+0x28e upageflttrap(ffff80003933ea00,5c74022e028) at upageflttrap+0xe0 usertrap(ffff80003933ea00) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c74b5ab5460, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003933e390 rbx 0xffff80003933e400 rdx 0 rcx 0xffffffff82f0bff0 cpu_info_full_primary+0x1ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003933e358 r11 0xffffffff813f8360 x86_bus_space_io_read_1 r12 0xffffffff82a63def .str.5+0x4fcaf r13 0xffffffff82f0cc08 cpu_info_full_primary+0x2c08 r14 0xffffffff82f0ce07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff814dc617 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003933e390 ss 0 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (sh) tid=237478 pid=5896 tcnt=1 stat=onproc flags process=100002 proc=0 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fe7248,0xffff800045feea88 process=0xffff800045fe9358 user=0xffff800039339000, vmspace=0xffff8000012bd018 estcpu=36, cpticks=15, pctcpu=0.0, user=0, sys=13, intr=1 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 72479 281991 95573 0 3 0x100002 inode sh 3187 200276 98351 0 3 0x2 biowait ifconfig 98351 451140 84885 0 3 0x10008a sigsusp sh 27275 163532 5896 0 2 0x100000 sh 18699 117954 31446 0 2 0x100000 sh 7782 222867 18356 0 2 0x1010008a sh 31446 119410 81126 0 3 0x10008a sigsusp sh 19450 271406 41750 0 2 0x10100002 sh * 5896 237478 78344 0 7 0x100002 sh 73765 10708 34685 0 2 0x1010008a sh 84477 143439 45540 0 2 0x2 sh 41750 192318 98118 0 3 0x82 wait syz-executor 81126 101865 98118 0 3 0x82 wait syz-executor 34685 210842 98118 0 3 0x82 wait syz-executor 18356 430524 98118 0 3 0x82 wait syz-executor 84885 304393 98118 0 3 0x82 wait syz-executor 78344 315834 98118 0 3 0x82 wait syz-executor 45540 51294 98118 0 3 0x82 wait syz-executor 95573 229735 98118 0 3 0x82 wait syz-executor 98118 266023 70657 0 3 0x82 nanoslp syz-executor 70657 355730 62579 0 3 0x10008a sigsusp ksh 62579 134951 83564 0 3 0x98 kqread sshd-session 83564 387567 36776 0 3 0x92 kqread sshd-session 82975 158625 1 0 3 0x100083 ttyin getty 36776 122878 1 0 3 0x88 kqread sshd 24913 363408 42009 74 3 0x1100092 bpf pflogd 42009 116698 1 0 3 0x80 sbwait pflogd 37624 330398 83145 73 7 0x1100010 syslogd 83145 301422 1 0 3 0x100082 sbwait syslogd 89710 288867 1 0 3 0x100080 kqread resolvd 69824 26912 22915 77 3 0x100092 kqread dhcpleased 92938 72826 22915 77 3 0x100092 kqread dhcpleased 22915 265942 1 0 3 0x80 kqread dhcpleased 60008 93962 0 0 3 0x14200 bored smr 80155 127268 0 0 2 0x14200 zerothread 37976 4590 0 0 3 0x14200 aiodoned aiodoned 35887 74474 0 0 3 0x14200 syncer update 43095 458408 0 0 3 0x14200 cleaner cleaner 85024 142245 0 0 3 0x14200 reaper reaper 2722 354238 0 0 3 0x14200 pgdaemon pagedaemon 56135 276426 0 0 3 0x14200 bored viomb 26853 310247 0 0 3 0x40014200 acpi0 acpi0 20846 216664 0 0 3 0x40014200 idle1 7253 293902 0 0 3 0x14200 bored softnet1 81555 128885 0 0 3 0x14200 bored softnet0 31631 91377 0 0 3 0x14200 bored systqmp 10356 91954 0 0 3 0x14200 bored systq 12410 518211 0 0 3 0x14200 tmoslp softclockmp 82946 459166 0 0 3 0x40014200 tmoslp softclock 40308 344361 0 0 3 0x40014200 idle0 1 203607 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 72479 (sh) thread 0xffff800045fe62b8 (281991) exclusive rrwlock inode r = 0 (0xffff800000cb7540) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 vget+0x321 #6 cache_lookup+0x579 #7 ufs_lookup+0x3c0 #8 VOP_LOOKUP+0xda #9 vfs_lookup+0xfbd #10 namei+0xe19 #11 dofstatat+0x14b #12 syscall+0x1089 #13 Xsyscall+0x128 Process 3187 (ifconfig) thread 0xffff800045fe6550 (200276) exclusive rrwlock inode r = 0 (0xffff800000f111f8) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 uvn_io+0x579 #6 uvn_get+0x494 #7 uvm_fault_lower_io+0x5cd #8 uvm_fault_lower+0x34e #9 uvm_fault+0x3ef #10 upageflttrap+0xe0 #11 usertrap+0x4f9 #12 recall_trap+0x8 Process 5896 (sh) thread 0xffff800045fef240 (237478) exclusive rwlock amaplk r = 0 (0xffff8000012c38e0) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 uvm_fault_check+0xf69 #3 uvm_fault+0x1e7 #4 upageflttrap+0xe0 #5 usertrap+0x4f9 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffff8000012bd118) #0 witness_lock+0x632 #1 rw_do_enter_read+0x55d #2 uvmfault_lookup+0x1a2 #3 uvm_fault_check+0x43 #4 uvm_fault+0x1e7 #5 upageflttrap+0xe0 #6 usertrap+0x4f9 #7 recall_trap+0x8 Process 37624 (syslogd) thread 0xffff80002a1d3a00 (330398) exclusive rrwlock inode r = 0 (0xffff800000ffa100) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 rrw_enter+0xf0 #3 VOP_LOCK+0x17e #4 vn_lock+0xca #5 sys_fsync+0x200 #6 syscall+0x1089 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12242K 12242K 166960K 12141 0 pcb 17 24K 24K 166960K 17 0 rtable 99 4K 5K 166960K 161 0 pf 34 22K 22K 166960K 45 0 ifaddr 24 4K 4K 166960K 26 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1475 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1289 83K 83K 166960K 1357 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 21 77K 89K 166960K 86 0 proc 76 144K 193K 166960K 467 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 21 1K 1K 166960K 21 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 25 182K 182K 166960K 25 0 exec 0 0K 2K 166960K 336 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 207 281K 283K 166960K 2719 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 46 92K 100K 166960K 1137 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 13 0K 0K 166960K 13 0 temp 33 1814K 1824K 166960K 3415 0 kqueue 13 40K 40K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle kctst 128 64 0 0 3 1 2 3 0 8 0 plcache 128 30 0 0 1 0 1 1 0 8 0 rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 176 42 0 1 2 0 2 2 0 8 0 unpcb 144 39 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 8 0 4 1 0 1 1 0 8 0 arp 136 9 0 0 1 0 1 1 0 8 0 inpcb 328 53 0 45 1 0 1 1 0 8 0 nd6 152 1 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 10 0 0 1 0 1 1 0 8 0 pfstkey 128 10 0 0 1 0 1 1 0 8 0 pfstate 448 10 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 139 0 0 9 0 9 9 0 8 0 art_table 40 140 0 0 2 0 2 2 0 8 0 art_node 32 42 0 3 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1553 0 93 92 0 92 92 0 8 0 ffsino 296 1553 0 93 113 0 113 113 0 8 0 nchpl 144 1738 0 52 63 0 63 63 0 8 0 vnodes 216 1639 0 0 92 0 92 92 0 8 0 namei 1024 5069 0 5068 1 0 1 1 0 8 0 percpumem 16 52 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 2975 0 2974 4 3 1 3 1 8 0 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 403 0 349 7 0 7 7 0 8 0 knotepl 120 50 0 0 2 0 2 2 0 8 0 kqueuepl 224 21 0 12 1 0 1 1 0 8 0 pipepl 344 126 0 99 3 0 3 3 0 8 0 fdescpl 528 387 0 352 3 0 3 3 0 8 0 filepl 160 1480 0 1271 10 1 9 9 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 82 0 69 1 0 1 1 0 8 0 zombiepl 144 352 0 349 1 0 1 1 0 8 0 processpl 1232 403 0 349 5 0 5 5 0 8 0 procpl 664 403 0 349 5 0 5 5 0 8 0 sockpl 752 112 0 84 4 0 4 4 0 8 1 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k 2048 10 0 0 2 0 2 2 0 8 0 mextrefs 64 10 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 116 0 0 8 0 8 8 0 8 0 bufpl 272 2115 0 105 135 0 135 135 0 8 1 anonpl 32 3874 0 0 32 0 32 32 0 229 0 amapchunkpl 152 7449 0 7105 15 0 15 15 0 158 0 amappl16 200 1963 0 1957 5 0 5 5 0 8 4 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 385 0 377 1 0 1 1 0 8 0 amappl13 176 118 0 106 1 0 1 1 0 8 0 amappl12 168 634 0 604 2 0 2 2 0 8 0 amappl11 160 22 0 22 2 2 0 1 0 8 0 amappl10 152 67 0 52 1 0 1 1 0 8 0 amappl9 144 291 0 291 1 1 0 1 0 8 0 amappl8 136 93 0 90 1 0 1 1 0 8 0 amappl7 128 137 0 124 1 0 1 1 0 8 0 amappl6 120 123 0 113 1 0 1 1 0 8 0 amappl5 112 100 0 90 1 0 1 1 0 8 0 amappl4 104 290 0 272 1 0 1 1 0 8 0 amappl3 96 1246 0 1159 4 1 3 4 0 8 0 amappl2 88 496 0 438 2 0 2 2 0 8 0 amappl1 80 9717 0 9088 14 0 14 14 0 8 0 amappl 88 2080 0 1953 3 0 3 3 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 387 0 352 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 387 0 352 1 0 1 1 0 8 0 vmmpekpl 168 5275 0 5246 2 0 2 2 0 8 0 vmmpepl 168 34488 0 32738 81 0 81 81 0 357 4 vmsppl 488 386 0 352 5 0 5 5 0 8 0 rwobjpl 80 13579 0 12539 22 0 22 22 0 8 0 pdppl 4096 782 0 704 94 10 84 84 0 8 6 pvpl 32 8409 0 0 68 0 68 68 0 265 0 pmappl 256 386 0 352 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 372 0 13 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff82a63def) at panic+0x270 __asan_load4_noabort(ffff800000ed2ac0) at __asan_load4_noabort+0xcc amap_chunk_get(ffff800000ed2a70,0,1,2) at amap_chunk_get+0x52 amap_add(ffff8000012fa178,0,ffff800000e91180,1) at amap_add+0xda uvm_fault_upper(ffff80003933e720,ffff80003933e6c8,ffff80003933e780) at uvm_fault_upper+0xcc6 uvm_fault(ffff8000012bd018,5c74022e000,0,2) at uvm_fault+0x28e upageflttrap(ffff80003933ea00,5c74022e028) at upageflttrap+0xe0 usertrap(ffff80003933ea00) at usertrap+0x4f9 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c74b5ab5460, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff80002994dff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8322cbc0) at __mp_lock+0x272 __mp_acquire_count(ffffffff8322cbc0,1) at __mp_acquire_count+0x48 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 vwaitforio(ffff800000ff5128,0,ffffffff82d36460,ffffffffffffffff) at vwaitforio+0xf3 ffs_fsync(ffff80002a22c100) at ffs_fsync+0x42a VOP_FSYNC(ffff800000ff5128,ffff800000039af8,1,ffff80002a1d3a00) at VOP_FSYNC+0x1bb sys_fsync(ffff80002a1d3a00,ffff80002a22c3a0,ffff80002a22c300) at sys_fsync+0x232 syscall(ffff80002a22c3a0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bdb2bc8da60, count: 3 ddb{1}> trace x86_ipi_db(ffff80002994dff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8322cbc0) at __mp_lock+0x272 __mp_acquire_count(ffffffff8322cbc0,1) at __mp_acquire_count+0x48 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 vwaitforio(ffff800000ff5128,0,ffffffff82d36460,ffffffffffffffff) at vwaitforio+0xf3 ffs_fsync(ffff80002a22c100) at ffs_fsync+0x42a VOP_FSYNC(ffff800000ff5128,ffff800000039af8,1,ffff80002a1d3a00) at VOP_FSYNC+0x1bb sys_fsync(ffff80002a1d3a00,ffff80002a22c3a0,ffff80002a22c300) at sys_fsync+0x232 syscall(ffff80002a22c3a0) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7bdb2bc8da60, count: -12