panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte ADDR (3)

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: ddd5e87dd012 use correct type with sizeof ok miod@ kettenis@
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=13c633b2880000
kernel config: https://syzkaller.appspot.com/x/.config?x=7058272de1526588
dashboard link: https://syzkaller.appspot.com/bug?extid=7d383f5708f6fcc9e8d8

Unfortunately, I don't have any reproducer for this issue yet.

Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/2c2c8a2da871/disk-ddd5e87d.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/90df9a94328c/bsd-ddd5e87d.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/3ec889ce8666/kernel-ddd5e87d.xz

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7d383f...@syzkaller.appspotmail.com

panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x7f7fffe16000, opte 0xffffffffffffffff
Stopped at db_enter+0x18: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*404919 70273 0 0x14000 0x200 0 reaper
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825bacbd) at panic+0x177 sys/kern/subr_prf.c:198
pmap_remove_ptes(fffffd806e467100,fffffd8006aef480,7fbfbffff000,7f7fffe00000,7f7fffefc000,0,cf94007c0ce339db) at pmap_remove_ptes+0x33e
pmap_do_remove(fffffd806e467100,7f7fff7fc000,7f7fffefc000,0) at pmap_do_remove+0x416 sys/arch/amd64/amd64/pmap.c:1864
uvm_unmap_kill_entry_withlock(fffffd807d5ca5e0,fffffd8066dd9d88,0) at uvm_unmap_kill_entry_withlock+0x1af sys/uvm/uvm_map.c:1900
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline]
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2546
uvmspace_free(fffffd807d5ca5e0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3464
reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x7f7fffe16000, opte 0xffffffffffffffff
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825bacbd) at panic+0x177 sys/kern/subr_prf.c:198
pmap_remove_ptes(fffffd806e467100,fffffd8006aef480,7fbfbffff000,7f7fffe00000,7f7fffefc000,0,cf94007c0ce339db) at pmap_remove_ptes+0x33e
pmap_do_remove(fffffd806e467100,7f7fff7fc000,7f7fffefc000,0) at pmap_do_remove+0x416 sys/arch/amd64/amd64/pmap.c:1864
uvm_unmap_kill_entry_withlock(fffffd807d5ca5e0,fffffd8066dd9d88,0) at uvm_unmap_kill_entry_withlock+0x1af sys/uvm/uvm_map.c:1900
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline]
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2546
uvmspace_free(fffffd807d5ca5e0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3464
reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: -8
ddb{0}> show registers
rdi 0
rsi 0x1
rbp 0xffff800021239120
rbx 0xffffffff82953b8f cpu_info_full_primary+0x2b8f
rdx 0
rcx 0
rax 0xffff800021233a48
r8 0x101010101010101
r9 0x8080808080808080
r10 0x4825e622a31a7791
r11 0xf79a61a531f54653
r12 0xffffffff82953990 cpu_info_full_primary+0x2990
r13 0
r14 0
r15 0x1
rip 0xffffffff8164d448 db_enter+0x18
cs 0x8
rflags 0x246
rsp 0xffff800021239110
ss 0x10
db_enter+0x18: addq $0x8,%rsp
ddb{0}> show proc
PROC (reaper) pid=404919 stat=onproc
flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
pri=4, usrpri=51, nice=20
forw=0xffffffffffffffff, list=0xffff800021233ce8,0xffff8000212337b8
process=0xffff8000ffffedb8 user=0xffff800021234000, vmspace=0xffffffff82a62448
estcpu=1, cpticks=5, pctcpu=0.39
user=0, sys=1, intr=0
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
63942 517349 29406 0 2 0 syz-executor.0
26460 332697 85381 0 3 0x80 nanoslp syz-executor.1
26460 24252 85381 0 3 0x4000080 fsleep syz-executor.1
26460 186412 85381 0 3 0x4000080 kqpoll syz-executor.1
85381 303769 35368 0 3 0x82 nanoslp syz-executor.1
7939 10552 35368 0 2 0x2 syz-executor.2
65507 345754 35368 0 3 0x2 biowait syz-executor.4
29406 33961 35368 0 3 0x82 nanoslp syz-executor.0
61188 325700 35368 0 3 0x82 nanoslp syz-executor.7
99067 242962 35368 0 3 0x2 biowait syz-executor.3
86030 514280 35368 0 2 0x2 syz-executor.6
4318 225747 35368 0 3 0x82 nanoslp syz-executor.5
13066 413265 1 0 3 0x100083 ttyin getty
50180 474999 0 0 3 0x14200 acct acct
56498 382253 0 0 3 0x14280 nfsidl nfsio
84632 21517 0 0 3 0x14280 nfsidl nfsio
9257 108963 0 0 3 0x14280 nfsidl nfsio
62604 295139 0 0 3 0x14280 nfsidl nfsio
75501 497420 0 0 3 0x14280 nfsidl nfsio
61684 267375 0 0 3 0x14280 nfsidl nfsio
12537 390022 0 0 3 0x14280 nfsidl nfsio
50259 20093 0 0 3 0x14280 nfsidl nfsio
96419 168355 0 0 3 0x14280 nfsidl nfsio
71910 444459 0 0 3 0x14280 nfsidl nfsio
11246 446260 0 0 3 0x14280 nfsidl nfsio
91904 202588 0 0 3 0x14280 nfsidl nfsio
86241 252174 0 0 3 0x14280 nfsidl nfsio
77768 448900 0 0 3 0x14280 nfsidl nfsio
35274 136838 0 0 3 0x14280 nfsidl nfsio
35556 113529 0 0 3 0x14280 nfsidl nfsio
40606 91134 0 0 3 0x14280 nfsidl nfsio
25005 70586 0 0 3 0x14280 nfsidl nfsio
32602 481209 0 0 3 0x14280 nfsidl nfsio
98031 515641 0 0 3 0x14280 nfsidl nfsio
42074 349706 0 0 3 0x14200 bored sosplice
35368 523841 63170 0 3 0x82 wait syz-fuzzer
35368 336809 63170 0 3 0x4000082 nanoslp syz-fuzzer
35368 59490 63170 0 2 0x4000002 syz-fuzzer
35368 371461 63170 0 3 0x4000082 wait syz-fuzzer
35368 478260 63170 0 3 0x4000082 wait syz-fuzzer
35368 408663 63170 0 3 0x4000082 thrsleep syz-fuzzer
35368 174165 63170 0 3 0x4000082 thrsleep syz-fuzzer
35368 476153 63170 0 2 0x4000002 syz-fuzzer
35368 163517 63170 0 3 0x4000082 thrsleep syz-fuzzer
35368 375256 63170 0 3 0x4000082 wait syz-fuzzer
35368 388318 63170 0 3 0x4000082 thrsleep syz-fuzzer
35368 469200 63170 0 3 0x4000082 wait syz-fuzzer
35368 169311 63170 0 3 0x4000082 wait syz-fuzzer
35368 256919 63170 0 3 0x4000082 wait syz-fuzzer
35368 399591 63170 0 3 0x4000082 wait syz-fuzzer
35368 186444 63170 0 3 0x4000082 thrsleep syz-fuzzer
63170 445393 85037 0 3 0x10008a sigsusp ksh
85037 87523 98222 0 2 0x12 sshd
98222 257180 1 0 3 0x88 kqread sshd
30659 460035 98317 74 3 0x1100092 bpf pflogd
98317 78076 1 0 3 0x80 netio pflogd
79236 142750 15706 73 3 0x1100090 kqread syslogd
15706 317838 1 0 3 0x100082 netio syslogd
47113 366169 1 0 3 0x100080 kqread resolvd
40613 466206 48931 77 3 0x100092 kqread dhcpleased
80775 451460 48931 77 3 0x100092 kqread dhcpleased
48931 77739 1 0 3 0x80 kqread dhcpleased
49687 360888 0 0 3 0x14200 bored smr
27292 200085 0 0 2 0x14200 zerothread
59264 199174 0 0 3 0x14200 aiodoned aiodoned
26950 257127 0 0 3 0x14200 syncer update
43331 502667 0 0 3 0x14200 cleaner cleaner
*70273 404919 0 0 7 0x14200 reaper
17340 367269 0 0 3 0x14200 pgdaemon pagedaemon
7523 432378 0 0 3 0x14200 bored viomb
38401 437028 0 0 3 0x40014200 acpi0 acpi0
51933 118832 0 0 7 0x40014200 idle1
42669 57671 0 0 3 0x14200 bored softnet
21643 401541 0 0 3 0x14200 bored softnet
58259 300041 0 0 2 0x14200 softnet
18997 484982 0 0 3 0x14200 bored softnet
16687 10931 0 0 3 0x14200 bored systqmp
51904 249649 0 0 3 0x14200 bored systq
84754 519341 0 0 3 0x40014200 bored softclock
23631 447338 0 0 3 0x40014200 idle0
1 123206 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10246 6502K 7615K 78643K 150212 0
pcb 13 18K 22K 78643K 4868 0
rtable 281 25K 26K 78643K 6264 0
ifaddr 221 56K 57K 78643K 2001 0
sysctl 3 1K 5K 78643K 7 0
counters 58 35K 36K 78643K 1186 0
ioctlops 0 0K 4K 78643K 9246 0
iov 0 0K 32K 78643K 3772 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1560 97K 98K 78643K 40582 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 297 0
VM map 2 1K 1K 78643K 2 0
sem 10 10K 20K 78643K 30 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 12 41K 85K 78643K 33581 0
sigio 0 0K 0K 78643K 950 0
proc 72 91K 128K 78643K 4599 0
subproc 104 6K 6K 78643K 1551 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 0 0K 0K 78643K 1518 0
in_multi 99 6K 7K 78643K 1985 0
ether_multi 1 0K 0K 78643K 164 0
mrt 1 0K 0K 78643K 379 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 271 1208K 1208K 78643K 271 0
exec 0 0K 2K 78643K 7554 0
pfkey data 0 0K 0K 78643K 4 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
UVM amap 650 1385K 1386K 78643K 193497 0
UVM aobj 131 4K 4K 78643K 140 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 750 0
NDP 16 0K 1K 78643K 579 0
temp 145 4734K 70270K 78643K 254070 0
kqueue 12 18K 28K 78643K 2787 0
SYN cache 2 16K 16K 78643K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 22 0 0 1 0 1 1 0 8 0
rtpcb 120 2336 0 2333 26 25 1 3 0 8 0
rtentry 112 1894 0 1787 8 4 4 4 0 8 0
unpcb 144 33188 0 33173 240 236 4 10 0 8 3
syncache 296 159 0 159 48 47 1 1 0 8 1
tcpqe 32 93 69 93 20 20 0 1 0 8 0
tcpcb 768 11121 0 11106 350 348 2 15 0 8 0
arp 120 282 0 263 1 0 1 1 0 8 0
inpcb 368 38068 0 38059 432 428 4 19 0 8 3
nd6 48 404 0 380 1 0 1 1 0 8 0
pkpcb 40 45 0 45 12 12 0 1 0 8 0
kcovpl 48 119 0 111 1 0 1 1 0 8 0
ppxss 1256 390 0 390 38 38 0 1 0 8 0
pppxif 1704 130 0 130 13 13 0 1 0 8 0
pfstscr 40 18 0 15 1 0 1 1 0 8 0
pffrag 232 97 0 95 14 13 1 1 0 482 0
pffrnode 88 97 0 95 14 13 1 1 0 8 0
pffrent 40 403 0 401 15 14 1 1 0 8 0
pfosfp 40 1497 0 1072 5 0 5 5 0 8 0
pfosfpen 112 1497 0 781 21 0 21 21 0 8 0
pfrktable 1344 303 0 289 4 2 2 2 0 8 0
pfanchor 1280 335 0 91 21 0 21 21 0 8 0
pftag 88 5 0 1 1 0 1 1 0 8 0
pfstitem 24 107 0 93 1 0 1 1 0 8 0
pfstkey 120 142 0 138 2 0 2 2 0 8 0
pfstate 336 121 0 110 5 2 3 5 0 8 0
pfrule 1360 225 0 184 5 1 4 4 0 8 0
rttmr 136 146 0 146 9 9 0 1 0 8 0
art_heap8 4096 18 0 17 15 14 1 3 0 8 0
art_heap4 256 8741 0 8275 70 40 30 30 0 8 0
art_table 32 8759 0 8292 4 0 4 4 0 8 0
art_node 16 1875 0 1782 1 0 1 1 0 8 0
sysvmsgpl 40 68 0 68 1 1 0 1 0 8 0
semapl 112 8 0 0 1 0 1 1 0 8 0
shmpl 112 137 0 9 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 44880 0 43327 98 0 98 98 0 8 0
ffsino 272 44880 0 43327 104 0 104 104 0 8 0
nchpl 144 88392 0 87823 63 39 24 63 0 8 0
rtmask 32 15 0 15 6 6 0 1 0 8 0
uvmvnodes 80 8702 0 0 178 0 178 178 0 8 0
vnodes 216 8702 0 0 484 0 484 484 0 8 0
namei 1024 318420 0 318419 13 12 1 2 0 8 0
percpumem 16 605 0 564 1 0 1 1 0 8 0
vcpupl 2048 159 0 1 20 0 20 20 0 8 0
vmpool 568 244 0 86 14 2 12 12 0 8 0
pfiaddrpl 120 80 0 62 1 0 1 1 0 8 0
kstatmem 264 594 0 562 3 0 3 3 0 8 0
scsiplug 72 264 0 264 7 7 0 1 0 8 0
scxspl 216 269529 0 269527 57 56 1 8 0 8 0
plimitpl 152 3650 0 3634 1 0 1 1 0 8 0
sigapl 424 33707 0 33641 11 3 8 8 0 8 0
futexpl 64 349081 0 349080 8 7 1 1 0 8 0
knotepl 120 2109 0 0 28 3 25 26 0 8 0
kqueuepl 216 5520 0 5511 76 75 1 5 0 8 0
pipepl 320 5294 0 5266 147 139 8 9 0 8 5
fdescpl 496 33646 0 33621 5 0 5 5 0 8 0
filepl 152 234361 0 234122 341 326 15 25 0 8 5
lockfpl 104 11266 0 11264 16 15 1 4 0 8 0
lockfspl 48 4051 0 4049 1 0 1 1 0 8 0
sessionpl 144 140 0 123 1 0 1 1 0 8 0
pgrppl 48 2114 0 2097 1 0 1 1 0 8 0
ucredpl 104 25668 0 25653 1 0 1 1 0 8 0
zombiepl 144 33643 0 33641 4 3 1 1 0 8 0
processpl 1064 33707 0 33641 5 0 5 5 0 8 0
procpl 672 92637 0 92554 56 47 9 10 0 8 0
srpgc 96 162 0 162 45 45 0 1 0 8 0
sosppl 168 1361 0 1360 62 61 1 1 0 8 0
sockpl 488 73672 0 73644 1179 1166 13 38 0 8 8
mcl64k 65536 41 0 0 4 1 3 3 0 8 0
mcl16k 16384 41 0 0 5 2 3 3 0 8 0
mcl12k 12288 47 0 0 2 0 2 2 0 8 0
mcl9k 9216 46 0 0 2 0 2 2 0 8 0
mcl8k 8192 33 0 0 4 1 3 3 0 8 0
mcl4k 4096 41 0 0 4 2 2 3 0 8 0
mcl2k2 2112 17 0 0 2 0 2 2 0 8 0
mcl2k 2048 1003 0 0 59 24 35 52 0 8 0
mtagpl 96 2997 0 0 44 0 44 44 0 8 0
mbufpl 256 3834 0 0 143 0 143 143 0 8 0
bufpl 288 53320 0 44679 622 0 622 622 0 8 0
anonpl 24 6486792 0 6468386 444 310 134 189 0 186 0
amapchunkpl 152 576339 0 575612 179 139 40 62 0 158 5
amappl16 200 87903 0 87252 268 230 38 57 0 8 0
amappl15 192 8137 0 8124 2 1 1 2 0 8 0
amappl14 184 5287 0 5283 1 0 1 1 0 8 0
amappl13 176 8301 0 8297 1 0 1 1 0 8 0
amappl12 168 2810 0 2806 5 4 1 1 0 8 0
amappl11 160 3509 0 3494 1 0 1 1 0 8 0
amappl10 152 3828 0 3815 2 1 1 1 0 8 0
amappl9 144 3037 0 3027 2 1 1 1 0 8 0
amappl8 136 6761 0 6568 8 1 7 7 0 8 0
amappl7 128 4110 0 4086 1 0 1 1 0 8 0
amappl6 120 3140 0 3107 4 2 2 2 0 8 0
amappl5 112 24804 0 24786 1 0 1 1 0 8 0
amappl4 104 13396 0 13351 3 1 2 2 0 8 0
amappl3 96 105056 0 105010 2 0 2 2 0 8 0
amappl2 88 44279 0 44203 3 1 2 3 0 8 0
amappl1 80 796731 0 796033 22 4 18 22 0 8 0
amappl 88 190507 0 190209 10 2 8 8 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 139 0 9 4 1 3 3 0 8 0
uaddrrnd 24 33892 0 33709 2 0 2 2 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 33892 0 33709 2 0 2 2 0 8 0
vmmpekpl 168 238418 0 238327 5 0 5 5 0 8 0
vmmpepl 168 3289011 0 3285863 485 318 167 183 0 357 0
vmsppl 368 33891 0 33708 18 0 18 18 0 8 0
rwobjpl 56 793699 0 782820 198 42 156 158 0 8 0
pdppl 4096 67791 0 67574 1718 1492 226 227 0 8 9
pvpl 32 12820647 0 12796640 968 746 222 328 0 265 0
pmappl 248 33891 0 33708 12 0 12 12 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 3383 0 2059 39 0 39 39 0 8 0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff825bacbd) at panic+0x177 sys/kern/subr_prf.c:198
pmap_remove_ptes(fffffd806e467100,fffffd8006aef480,7fbfbffff000,7f7fffe00000,7f7fffefc000,0,cf94007c0ce339db) at pmap_remove_ptes+0x33e
pmap_do_remove(fffffd806e467100,7f7fff7fc000,7f7fffefc000,0) at pmap_do_remove+0x416 sys/arch/amd64/amd64/pmap.c:1864
uvm_unmap_kill_entry_withlock(fffffd807d5ca5e0,fffffd8066dd9d88,0) at uvm_unmap_kill_entry_withlock+0x1af sys/uvm/uvm_map.c:1900
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline]
uvm_map_teardown(fffffd807d5ca5e0) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2546
uvmspace_free(fffffd807d5ca5e0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3464
reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: -8
ddb{0}> machine ddbcpu 1
Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff800020dd8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
acpicpu_idle() at acpicpu_idle+0x312 sys/dev/acpi/acpicpu.c:1206
sched_idle(ffff800020dd8ff0) at sched_idle+0x417 sys/kern/kern_sched.c:175
end trace frame: 0x0, count: -5


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.