syzbot


uvm_fault: db_enter (5)

Status: upstream: reported on 2023/09/11 08:12
Reported-by: syzbot+2420d1ce1c8f5ba1e7ae@syzkaller.appspotmail.com
First crash: 229d, last: 2d00h
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: db_enter (2) 1 717d 717d 0/3 closed as invalid on 2022/05/11 17:28
openbsd uvm_fault: db_enter 43 1375d 1429d 0/3 closed as dup on 2020/05/30 07:36
openbsd uvm_fault: db_enter (4) 30 331d 673d 0/3 auto-obsoleted due to no activity on 2023/08/30 12:34
openbsd uvm_fault: db_enter (3) 1 686d 686d 0/3 closed as invalid on 2022/06/11 05:12

Sample crash report:
uvm_fault(fffffd8073d06a60,4dd65605000,0,4) at uvm_fault+0x255 sys/uvm/uvm_fault.c:637
upageflttrap(ffff80002f0f5010,4dd656057b0) at upageflttrap+0x8e sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002f0f5010) at usertrap+0x22a sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x4e00bd852c0, count: -21
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828926d1) at panic+0x17b sys/kern/subr_prf.c:198
vop_generic_badop(ffff8000373a18b8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8068c726e8,fffffd80745c6258) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd80745c6258) at bwrite+0x1d3 sys/kern/vfs_bio.c:757
VOP_BWRITE(fffffd80745c6258) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
ufs_mkdir(ffff8000373a1b30) at ufs_mkdir+0x445 sys/ufs/ufs/ufs_vnops.c:1165
VOP_MKDIR(fffffd80696807b0,ffff8000373a1c90,ffff8000373a1cc0,ffff8000373a1bc0) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
domkdirat(ffff80002bcb8030,ffffff9c,75f2d93937a0,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3077
syscall(ffff8000373a1e40) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff8000373a1e40) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x75f2d9393810, count: 4
ddb{1}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff828926d1) at panic+0x17b sys/kern/subr_prf.c:198
vop_generic_badop(ffff8000373a18b8) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133
VOP_STRATEGY(fffffd8068c726e8,fffffd80745c6258) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628
bwrite(fffffd80745c6258) at bwrite+0x1d3 sys/kern/vfs_bio.c:757
VOP_BWRITE(fffffd80745c6258) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
ufs_mkdir(ffff8000373a1b30) at ufs_mkdir+0x445 sys/ufs/ufs/ufs_vnops.c:1165
VOP_MKDIR(fffffd80696807b0,ffff8000373a1c90,ffff8000373a1cc0,ffff8000373a1bc0) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
domkdirat(ffff80002bcb8030,ffffff9c,75f2d93937a0,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3077
syscall(ffff8000373a1e40) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff8000373a1e40) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x75f2d9393810, count: -11

Crashes (10):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/25 15:37 openbsd 53a4f4198df9 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
2024/04/18 17:52 openbsd 3ed32226cff5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2024/04/16 18:12 openbsd 25b30cac31a3 2338035c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2024/04/15 10:39 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
2024/04/15 06:50 openbsd 7019ae976ad9 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
2024/04/09 15:11 openbsd b226cd0be9f7 56086b24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2024/02/13 04:13 openbsd 211058dfe174 77b23aa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
2024/01/16 22:50 openbsd 63cdaeb68a44 2a7bcc7f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
2023/10/30 05:16 openbsd c8ef2279606a 3c418d72 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2023/09/11 08:10 openbsd c824b3ec91bf 6654cf89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: db_enter
* Struck through repros no longer work on HEAD.