syzbot


uvm_fault: lf_advlock

Status: upstream: reported on 2024/10/07 22:40
Reported-by: syzbot+0bbaf40c3d57af8375e6@syzkaller.appspotmail.com
First crash: 44d, last: 44d

Sample crash report:
uvm_fault(0xfffffd807125b018, 0x20, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      lf_advlock+0x233:       movq    0(%r14),%r12
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 77282  37802  32767        0x10  0x4000000    0  syz-executor
  40265  48956  32767        0x10          0    1  syz-executor
lf_advlock(20,0,fffffd8079583d90,7,ffff80002bee9300,40) at lf_advlock+0x233 sys/kern/vfs_lockf.c:261
VOP_ADVLOCK(fffffd805d1dc000,fffffd8079583d90,7,ffff80002bee9300,40) at VOP_ADVLOCK+0x87 sys/kern/vfs_vops.c:618
sys_fcntl(ffff80003339d1d8,ffff80002bee9460,ffff80002bee93b0) at sys_fcntl+0x1140 sys/kern/kern_descrip.c:622
syscall(ffff80002bee9460) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002bee9460) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x729530c3bf0, count: 10
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffffd807125b018, 0x20, 0, 1) -> e
ddb{0}> trace
lf_advlock(20,0,fffffd8079583d90,7,ffff80002bee9300,40) at lf_advlock+0x233 sys/kern/vfs_lockf.c:261
VOP_ADVLOCK(fffffd805d1dc000,fffffd8079583d90,7,ffff80002bee9300,40) at VOP_ADVLOCK+0x87 sys/kern/vfs_vops.c:618
sys_fcntl(ffff80003339d1d8,ffff80002bee9460,ffff80002bee93b0) at sys_fcntl+0x1140 sys/kern/kern_descrip.c:622
syscall(ffff80002bee9460) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002bee9460) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x729530c3bf0, count: -5
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002bee9210
rbx                                0
rdx                                0
rcx               0xffff80003339d1d8
rax                              0xd
r8                0xffff80002bee9300
r9                              0x40
r10               0x6890a1466a848ec0
r11               0x15725eb70eb97835
r12                                0
r13                              0x7
r14                             0x20
r15               0xffffffffffffffff
rip               0xffffffff8109c7d3    lf_advlock+0x233
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002bee9180
ss                              0x10
lf_advlock+0x233:       movq    0(%r14),%r12
ddb{0}> show proc
PROC (syz-executor) tid=77282 pid=37802 tcnt=3 stat=onproc
    flags process=10<SUGID> proc=4000000<THREAD>
    runpri=32, usrpri=80, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a0b6810,0xffff80002a0b6310
    process=0xffff80002a0a56b8 user=0xffff80002bee4000, vmspace=0xfffffd807125b018
    estcpu=30, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 47645  126428  84457  32767  2        0x10                syz-executor
 47645  151255  84457  32767  3   0x4000090  sbwait        syz-executor
 81620  302872  40682  32767  2        0x10                syz-executor
 81620  407253  40682  32767  3   0x4000090  fsleep        syz-executor
  7416  452731  55072  32767  2        0x10                syz-executor
  7416   70665  55072  32767  3   0x4000090  ttyin         syz-executor
  7416  512891  55072  32767  2   0x4000010                syz-executor
 37802  214072  55427  32767  2        0x10                syz-executor
 37802  158285  55427  32767  2   0x4000010                syz-executor
*37802   77282  55427  32767  7   0x4000010                syz-executor
 55072  205240  14739  32767  3        0x90  nanoslp       syz-executor
 14739   74492  15848      0  3        0x82  wait          syz-executor
 55427   58043  37452  32767  2       0x490                syz-executor
 37452  349761  15848      0  3        0x82  wait          syz-executor
 40682  330017  45198  32767  3        0x90  nanoslp       syz-executor
 45198  140640  15848      0  3        0x82  wait          syz-executor
 48956   40265  88421  32767  7        0x10                syz-executor
 88421  201854  15848      0  3        0x82  wait          syz-executor
 48768  507416  14893  32767  2       0x490                syz-executor
 14893  175831  15848      0  3        0x82  wait          syz-executor
 84457   25424  98116  32767  2       0x490                syz-executor
 98116  105570  15848      0  3        0x82  wait          syz-executor
 46694  214667  44201  32767  2       0x490                syz-executor
 44201  227205  15848      0  3        0x82  wait          syz-executor
 89954  225672  56738  32767  2       0x490                syz-executor
 56738  154604  15848      0  3        0x82  wait          syz-executor
 52101  188314  85909      0  3        0x82  netio         sshd-session
 76243  189751   8529      0  3    0x100082  sbwait        ndp
  8529   58712  88270      0  3    0x10008a  sigsusp       sh
 88270   51778      1      0  3        0x80  wait          syz-executor
 17140  308069      0      0  3     0x14200  bored         sosplice
 15848  471304  46277      0  3        0x82  kqread        syz-executor
 46277  134614  11557      0  3    0x10008a  sigsusp       ksh
 11557   43312  93547      0  3        0x98  kqread        sshd-session
 93547  386929  85909      0  3        0x92  kqread        sshd-session
 44999  382913      1      0  3    0x100083  ttyin         getty
 85909  297758      1      0  3        0x88  kqread        sshd
 46551  111130  55462     73  3   0x1100090  kqread        syslogd
 55462  330917      1      0  3    0x100082  sbwait        syslogd
 74520  185956      1      0  3    0x100080  kqread        resolvd
 46158  400166  63994     77  3    0x100092  kqread        dhcpleased
 38734  485495  63994     77  3    0x100092  kqread        dhcpleased
 63994   51743      1      0  3        0x80  kqread        dhcpleased
 75197  118776      0      0  3     0x14200  bored         smr
  7992  234718      0      0  2     0x14200                zerothread
 45746  220294      0      0  3     0x14200  aiodoned      aiodoned
 23420   98204      0      0  2     0x14600                update
 69805  435557      0      0  3     0x14200  cleaner       cleaner
 42131  504593      0      0  3     0x14200  reaper        reaper
 32771   21767      0      0  3     0x14200  pgdaemon      pagedaemon
 98201  429349      0      0  3     0x14200  bored         viomb
 41488  358083      0      0  3  0x40014200  acpi0         acpi0
 24111  150883      0      0  3  0x40014200                idle1
 43130  485522      0      0  3     0x14200  bored         softnet3
 58704  195482      0      0  3     0x14200  bored         softnet2
 73090  506891      0      0  3     0x14200  bored         softnet1
 97357  349521      0      0  3     0x14200  bored         softnet0
 50307  384542      0      0  3     0x14200  bored         systqmp
 45073  509609      0      0  3     0x14200  bored         systq
 93904   92371      0      0  2     0x14200                softclockmp
 49877  143678      0      0  2  0x40014200                softclock
 50819  123773      0      0  3  0x40014200                idle0
     1  422857      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 37802 (syz-executor) thread 0xffff80002a0b6810 (158285)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8353cd50)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  vn_closefile+0x41 sys/kern/vfs_vnops.c:602
#2  fdrop+0x126 sys/kern/kern_descrip.c:1274
#3  closef+0x192 sys/kern/kern_descrip.c:1258
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
Process 37802 (syz-executor) thread 0xffff80003339d1d8 (77282)
exclusive rwlock lockflk r = 0 (0xffffffff83406380)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  lf_advlock+0x22a sys/kern/vfs_lockf.c:261
#2  VOP_ADVLOCK+0x87 sys/kern/vfs_vops.c:618
#3  sys_fcntl+0x1140 sys/kern/kern_descrip.c:622
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
Process 48956 (syz-executor) thread 0xffff80002a0b6588 (40265)
exclusive rrwlock inode r = 0 (0xfffffd807a8f3b38)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vget+0x2bd sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x192 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1201
#8  ufs_lookup+0x19f8 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#11 namei+0x7aa sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852
#13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd805ad054e8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1852
#8  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#8  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10218  11052K   11059K 166960K     12621        0
            pcb    17     18K      20K 166960K        23        0
         rtable   240      6K       7K 166960K     14275        0
             pf    31     16K      16K 166960K       927        0
         ifaddr    42     11K      11K 166960K      1814        0
        ifgroup    50      2K       2K 166960K      1828        0
         sysctl     4      1K       3K 166960K        41        0
       counters    64     36K      36K 166960K       946        0
       ioctlops     0      0K       2K 166960K       652        0
            iov     0      0K      28K 166960K       829        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1470     92K      92K 166960K      9348        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K       151        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       441        0
        dirhash    18      3K       4K 166960K       189        0
           ACPI  1690    195K     286K 166960K     12418        0
      file desc    28    105K     177K 166960K     13957        0
          sigio     0      0K       0K 166960K       249        0
           proc    58     79K     176K 166960K     13623        0
        subproc   117      7K      13K 166960K      6929        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K      2082        0
       in_multi    99      7K       7K 166960K      5281        0
    ether_multi     1      0K       0K 166960K        46        0
            mrt     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   247   1102K    1102K 166960K       247        0
           exec     0      0K       1K 166960K      7631        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   294     84K     159K 166960K    102695        0
       UVM aobj   131      7K       7K 166960K       139        0
     pinsyscall    52    104K     140K 166960K     26827        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       694        0
            NDP    11      0K       2K 166960K      1346        0
           temp    79   6824K    6906K 166960K    105604        0
         kqueue    13     20K      36K 166960K      1407        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120     1823    0     1818     7     6     1     3     0     8    0
rtentry    112     5061    0     4948    16    12     4     4     0     8    0
unpcb      144     6901    0     6884    38    36     2     6     0     8    1
syncache   336      183    0      183    40    39     1     1     0     8    1
tcpqe       32       65    0       65    19    18     1     1     0     8    1
tcpcb      808     5548    0     5513   121   110    11    15     0     8    7
arp        120      902    0      884     1     0     1     1     0     8    0
ipq         40       50    0       45     4     3     1     1     0     8    0
ipqe        40      828    0      823     4     3     1     1     0     8    0
inpcb      336    14183    0    14146   157   143    14    18     0     8    8
nd6        136     1451    0     1424     2     0     2     2     0     8    0
kcovpl      48      533    0      524     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256    20560    0    20082   237   205    32    32     0     8    0
art_table   32    20561    0    20082     8     3     5     5     0     8    0
art_node    16     5060    0     4957     1     0     1     1     0     8    0
sysvmsgpl   40       13    0        6     1     0     1     1     0     8    0
semapl     112      438    0      428     1     0     1     1     0     8    0
shmpl      112      136    0        8     4     0     4     4     0     8    0
dirhash    1024     142    0      117    11     7     4     4     0     8    0
dino2pl    256    12831    0    10104   173     1   172   172     0     8    0
ffsino     272    12831    0    10104   184     1   183   183     0     8    0
nchpl      144    22386    0    19809    96     0    96    96     0     8    0
uvmvnodes   80     9902    0        0   203     0   203   203     0     8    0
vnodes     216     9902    0        0   551     0   551   551     0     8    0
namei      1024  123460    0   123460    59    58     1     3     0     8    1
percpumem   16      487    0      441     1     0     1     1     0     8    0
kstatmem   264      904    0      882     2     0     2     2     0     8    0
scxspl     216   243883    0   243883    58    55     3     8     1     8    3
plimitpl   152     3065    0     3039     2     0     2     2     0     8    0
sigapl     424    13269    0    13209    21    13     8     9     0     8    0
futexpl     64   100697    0   100696    35    34     1     1     0     8    0
knotepl    120     1677    0        0    26     1    25    25     0     8    0
kqueuepl   216     2676    0     2667    23    21     2     5     0     8    1
pipepl     320     3120    0     3089    28    19     9     9     0     8    4
fdescpl    496    13250    0    13209    20    13     7     8     0     8    0
filepl     152    72557    0    72283    73    56    17    20     0     8    4
lockfpl    104     2356    0     2354     2     1     1     2     0     8    0
lockfspl    48      706    0      704     1     0     1     1     0     8    0
sessionpl  144      551    0      533     1     0     1     1     0     8    0
pgrppl      48     1239    0     1213     1     0     1     1     0     8    0
ucredpl    104    12114    0    12095     1     0     1     1     0     8    0
zombiepl   144    13212    0    13209     1     0     1     1     0     8    0
processpl  1160   13269    0    13209     8     2     6     6     0     8    0
procpl     648    24616    0    24550    16     9     7     7     0     8    0
srpgc       96       24    0       24    12    12     0     1     0     8    0
sosppl     168       83    0       83    23    22     1     1     0     8    1
sockpl     664    23179    0    23119   181   166    15    21     0     8    8
mcl64k     65536     20    0        0     3     0     3     3     0     8    0
mcl16k     16384      5    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192      23    0        0     3     1     2     3     0     8    0
mcl4k      4096     292    0        0    19     7    12    19     0     8    0
mcl2k2     2112       3    0        0     1     0     1     1     0     8    0
mcl2k      2048     291    0        0     9     3     6     6     0     8    0
mtagpl      96        6    0        0     1     0     1     1     0     8    0
mbufpl     256     2131    0        0    80     0    80    80     0     8    0
bufpl      280    24415    0    14478   711     0   711   711     0     8    0
anonpl      24  1750371    0  1743381   314   222    92   120     0   185   19
amapchunkpl 152  325656    0   324873   154   119    35    51     0   158    0
amappl16   200    29593    0    29521   293   276    17    29     0     8    8
amappl15   192       20    0       20     4     4     0     1     0     8    0
amappl14   184     1179    0     1167     1     0     1     1     0     8    0
amappl13   176       25    0       25     9     9     0     1     0     8    0
amappl12   168    21041    0    20999    16    13     3     3     0     8    0
amappl11   160       47    0       37     1     0     1     1     0     8    0
amappl10   152       26    0       26     1     1     0     1     0     8    0
amappl9    144      157    0      156     2     1     1     1     0     8    0
amappl8    136       40    0       38     1     0     1     1     0     8    0
amappl7    128     1072    0     1059     1     0     1     1     0     8    0
amappl6    120     4564    0     4561     1     0     1     1     0     8    0
amappl5    112     1977    0     1967     1     0     1     1     0     8    0
amappl4    104     1977    0     1959     1     0     1     1     0     8    0
amappl3     96    63040    0    62893     5     0     5     5     0     8    0
amappl2     88     7889    0     7815     7     4     3     3     0     8    0
amappl1     80    97751    0    97107    31    12    19    19     0     8    0
amappl      88    98105    0    97874     9     3     6     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      138    0        8     3     0     3     3     0     8    0
uaddrrnd    24    13250    0    13209     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    13250    0    13209     1     0     1     1     0     8    0
vmmpekpl   168   116898    0   116838     9     5     4     5     0     8    0
vmmpepl    168   843725    0   841412   317   194   123   129     0   357   11
vmsppl     440    13249    0    13209    14     8     6     7     0     8    0
rwobjpl     56   233716    0   222602   190    27   163   164     0     8    1
pdppl      4096   26507    0    26418  1428  1337    91   123     0     8    2
pvpl        32    50993    0        0   402     0   402   402     0   265    0
pmappl     248    13249    0    13209    15    11     4     4     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     2529    0     1914    18     0    18    18     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
lf_advlock(20,0,fffffd8079583d90,7,ffff80002bee9300,40) at lf_advlock+0x233 sys/kern/vfs_lockf.c:261
VOP_ADVLOCK(fffffd805d1dc000,fffffd8079583d90,7,ffff80002bee9300,40) at VOP_ADVLOCK+0x87 sys/kern/vfs_vops.c:618
sys_fcntl(ffff80003339d1d8,ffff80002bee9460,ffff80002bee93b0) at sys_fcntl+0x1140 sys/kern/kern_descrip.c:622
syscall(ffff80002bee9460) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002bee9460) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x729530c3bf0, count: -5
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8353cb48) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8353cb48) at __mp_lock+0x192 sys/kern/kern_lock.c:144
__mp_acquire_count(ffffffff8353cb48,1) at __mp_acquire_count+0x58
mi_switch() at mi_switch+0x658 sys/kern/sched_bsd.c:460
sleep_finish(0,1) at sleep_finish+0x219 sys/kern/kern_synch.c:416
biowait(fffffd806c34e488) at biowait+0xc1 sys/kern/vfs_bio.c:1254
bwrite(fffffd806c34e488) at bwrite+0x2e2 sys/kern/vfs_bio.c:766
ffs_update(fffffd807a8f3aa0,1) at ffs_update+0x34c sys/ufs/ffs/ffs_inode.c:111
ffs_truncate(fffffd807a8f3aa0,0,4,fffffd807f7d31a0) at ffs_truncate+0xcb6
ufs_rmdir(ffff80003338fc48) at ufs_rmdir+0x374 sys/ufs/ufs/ufs_vnops.c:1265
VOP_RMDIR(fffffd80517f7eb0,fffffd8079650cf0,ffff80003338fd28) at VOP_RMDIR+0x19a sys/kern/vfs_vops.c:413
dounlinkat(ffff80002a0b6588,ffffff9c,742f087bc960,8) at dounlinkat+0x2e0 sys/kern/vfs_syscalls.c:1885
end trace frame: 0xffff80003338fe90, count: 0
ddb{1}> trace
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff8353cb48) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff8353cb48) at __mp_lock+0x192 sys/kern/kern_lock.c:144
__mp_acquire_count(ffffffff8353cb48,1) at __mp_acquire_count+0x58
mi_switch() at mi_switch+0x658 sys/kern/sched_bsd.c:460
sleep_finish(0,1) at sleep_finish+0x219 sys/kern/kern_synch.c:416
biowait(fffffd806c34e488) at biowait+0xc1 sys/kern/vfs_bio.c:1254
bwrite(fffffd806c34e488) at bwrite+0x2e2 sys/kern/vfs_bio.c:766
ffs_update(fffffd807a8f3aa0,1) at ffs_update+0x34c sys/ufs/ffs/ffs_inode.c:111
ffs_truncate(fffffd807a8f3aa0,0,4,fffffd807f7d31a0) at ffs_truncate+0xcb6
ufs_rmdir(ffff80003338fc48) at ufs_rmdir+0x374 sys/ufs/ufs/ufs_vnops.c:1265
VOP_RMDIR(fffffd80517f7eb0,fffffd8079650cf0,ffff80003338fd28) at VOP_RMDIR+0x19a sys/kern/vfs_vops.c:413
dounlinkat(ffff80002a0b6588,ffffff9c,742f087bc960,8) at dounlinkat+0x2e0 sys/kern/vfs_syscalls.c:1885
syscall(ffff80003338fea0) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80003338fea0) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x742f087bc950, count: -16

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/07 22:39 openbsd c89f4e122d5e d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: lf_advlock
* Struck through repros no longer work on HEAD.