syzbot


uvm_fault: unveil_add_vnode

Status: upstream: reported on 2024/02/18 15:44
Reported-by: syzbot+2dc91447bed11760d7e1@syzkaller.appspotmail.com
First crash: 68d, last: 68d

Sample crash report:
uvm_fault(0xffffffff82db9a98, 0xffff800000e7d008, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at      unveil_add_vnode+0xbb:  movq    %rax,0x8(%r13,%rbx,1)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 270001  97202      0    0x502000  0x4080000    1  syz-executor.3
*111102  59784      0    0x502000  0x4080000    0K syz-executor.1
unveil_add_vnode(ffff80002a20a540,fffffd80663940f0) at unveil_add_vnode+0xbb sys/kern/kern_unveil.c:391
unveil_add(ffff80002a20a540,ffff80002f938c88,ffff80002f938d43) at unveil_add+0x2ef sys/kern/kern_unveil.c:494
sys_unveil(ffff80002a20a540,ffff80002f938e70,ffff80002f938dc0) at sys_unveil+0x41c sys/kern/vfs_syscalls.c:1023
syscall(ffff80002f938e70) at syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
syscall(ffff80002f938e70) at syscall+0x533 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0d6661000, count: 10
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffffffff82db9a98, 0xffff800000e7d008, 0, 2) -> e
ddb{0}> trace
unveil_add_vnode(ffff80002a20a540,fffffd80663940f0) at unveil_add_vnode+0xbb sys/kern/kern_unveil.c:391
unveil_add(ffff80002a20a540,ffff80002f938c88,ffff80002f938d43) at unveil_add+0x2ef sys/kern/kern_unveil.c:494
sys_unveil(ffff80002a20a540,ffff80002f938e70,ffff80002f938dc0) at sys_unveil+0x41c sys/kern/vfs_syscalls.c:1023
syscall(ffff80002f938e70) at syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
syscall(ffff80002f938e70) at syscall+0x533 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0d6661000, count: -5
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002f938bb0
rbx                                0
rdx                                0
rcx               0xffff80002a20a540
rax               0xffffffffffffffff
r8                              0x30
r9                0xfffffd807f7d7410
r10               0xaa6899314bd1b0fe
r11               0x329f41ce542be6ca
r12               0xfffffd80663940f0
r13               0xffff800000e7d000
r14               0xffff8000ffff4d60
r15                                0
rip               0xffffffff8237ae6b    unveil_add_vnode+0xbb
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002f938b30
ss                                 0
unveil_add_vnode+0xbb:  movq    %rax,0x8(%r13,%rbx,1)
ddb{0}> show proc
PROC (syz-executor.1) tid=111102 pid=59784 tcnt=3 stat=onproc
    flags process=502000<SINGLEUNWIND,PLEDGE,EXECPLEDGE> proc=4080000<SUSPSINGLE,THREAD>
    runpri=32, usrpri=84, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80002a2432b0
    forw=0xffffffffffffffff, list=0xffff80002a209ff0,0xffff80002a2432c0
    process=0xffff8000ffff4d60 user=0xffff80002f933000, vmspace=0xfffffd806b890718
    estcpu=34, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 66131  357980  35597      0  2           0                syz-executor.5
 66131  398438  35597      0  2   0x4000480                syz-executor.5
 66131  314568  35597      0  2   0x4000480                syz-executor.5
  6459  396594   5776      0  2       0x480                syz-executor.0
  6459  283372   5776      0  3   0x4000080  fsleep        syz-executor.0
 97202  429529  39734      0  4    0x582000                syz-executor.3
 97202  270001  39734      0  7   0x4582000                syz-executor.3
 97202  230251  39734      0  3   0x4502000  suspend       syz-executor.3
  9000  176113  77195      0  3        0x80  nanoslp       syz-executor.6
  9000  488564  77195      0  2   0x4000480                syz-executor.6
  9000  316717  77195      0  3   0x4000080  fsleep        syz-executor.6
  9000  501248  77195      0  3   0x4000080  fsleep        syz-executor.6
 59784  211992  11468      0  4    0x582000                syz-executor.1
*59784  111102  11468      0  7   0x4582000                syz-executor.1
 59784   12301  11468      0  3   0x4502000  suspend       syz-executor.1
 79976  179163  48305      0  2       0x480                syz-executor.2
 79976   22979  48305      0  3   0x4000080  netio         syz-executor.2
 79976  222254  48305      0  3   0x4000080  fsleep        syz-executor.2
 79955   55442  45856      0  2       0x480                syz-executor.7
 79955  189899  45856      0  3   0x4000080  kqsel         syz-executor.7
 79955  385037  45856      0  3   0x4000080  fsleep        syz-executor.7
 48305   61214  71695      0  2       0x482                syz-executor.2
 45856  456708  71695      0  2       0x482                syz-executor.7
 35597  449431  71695      0  3        0x82  nanoslp       syz-executor.5
  5776  125338  71695      0  3        0x82  nanoslp       syz-executor.0
  4098   72971      0      0  3     0x14200  bored         sosplice
 72896   92715      0      0  3     0x14200  acct          acct
 77195  484604  71695      0  2       0x482                syz-executor.6
 39734   77313  71695      0  2       0x482                syz-executor.3
 11468  132388  71695      0  2       0x482                syz-executor.1
 71695  274421  34820      0  3   0x2000082  thrsleep      syz-fuzzer
 71695   20940  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 71695  251045  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 71695   48531  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  270285  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  244900  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 71695  420165  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  374855  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 71695  444653  34820      0  3   0x6000082  kqread        syz-fuzzer
 71695   79428  34820      0  3   0x6000082  wait          syz-fuzzer
 71695   67884  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 71695   13820  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  195991  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  289874  34820      0  3   0x6000082  wait          syz-fuzzer
 71695  268182  34820      0  2   0x6000002                syz-fuzzer
 71695  178517  34820      0  3   0x6000082  thrsleep      syz-fuzzer
 34820  393144  47092      0  3    0x10008a  sigsusp       ksh
 47092   48906   2263      0  3        0x9a  kqread        sshd
 79406  284159      1      0  3    0x100083  ttyin         getty
  2263  217769      1      0  3        0x88  kqread        sshd
 73136   50570  21060     74  3   0x1100092  bpf           pflogd
 21060  277720      1      0  3        0x80  netio         pflogd
  5105  341847  75076     73  3   0x1100090  kqread        syslogd
 75076  116917      1      0  3    0x100082  netio         syslogd
 81463  325562      1      0  3    0x100080  kqread        resolvd
 23009  219704  29080     77  3    0x100092  kqread        dhcpleased
 28355  521510  29080     77  3    0x100092  kqread        dhcpleased
 29080  495953      1      0  3        0x80  kqread        dhcpleased
 57029  482118      0      0  3     0x14200  bored         smr
 50746  336182      0      0  3     0x14200  pgzero        zerothread
 27336  441501      0      0  3     0x14200  aiodoned      aiodoned
 62047  429953      0      0  3     0x14200  syncer        update
 59444  342745      0      0  3     0x14200  cleaner       cleaner
 91905  488521      0      0  3     0x14200  reaper        reaper
 94470  379511      0      0  3     0x14200  pgdaemon      pagedaemon
 68873  101285      0      0  3     0x14200  bored         viomb
 88966   94929      0      0  3  0x40014200  acpi0         acpi0
  6587  367655      0      0  3  0x40014200                idle1
 24959  435184      0      0  3     0x14200  bored         softnet3
 16727  204392      0      0  3     0x14200  bored         softnet2
 48488  323645      0      0  3     0x14200  bored         softnet1
  5990   60069      0      0  3     0x14200  bored         softnet0
 61864  210641      0      0  3     0x14200  bored         systqmp
 13279  170529      0      0  3     0x14200  bored         systq
 54047  476367      0      0  3     0x14200  tmoslp        softclockmp
 61919  436499      0      0  3  0x40014200  tmoslp        softclock
 30162  241078      0      0  3  0x40014200                idle0
     1   71090      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 59784 (syz-executor.1) thread 0xffff80002a20a540 (111102)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82dbf8d0)
#0  witness_lock+0x447
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x46f sys/kern/sched_bsd.c:470
#3  sleep_finish+0x19b sys/kern/kern_synch.c:414
#4  rw_enter+0x341 sys/kern/kern_rwlock.c:285
#5  rrw_enter+0x8c sys/kern/kern_rwlock.c:464
#6  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#7  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#8  vget+0x200 sys/kern/vfs_subr.c:676
#9  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#10 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
#11 ufs_lookup+0x10a3 sys/ufs/ufs/ufs_lookup.c:555
#12 VOP_LOOKUP+0x5c sys/kern/vfs_vops.c:85
#13 unveil_find_cover+0x130 sys/kern/kern_unveil.c:277
#14 unveil_add_vnode+0xb7 sys/kern/kern_unveil.c:391
#15 unveil_add+0x2ef sys/kern/kern_unveil.c:494
#16 sys_unveil+0x41c sys/kern/vfs_syscalls.c:1023
#17 syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
#17 syscall+0x533 sys/arch/amd64/amd64/trap.c:577
#18 Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10189   6479K    6945K 166960K     14344        0
            pcb    15     15K      17K 166960K       325        0
         rtable   199     14K      16K 166960K       762        0
             pf    30      9K      10K 166960K        73        0
         ifaddr    38     14K      15K 166960K        89        0
        ifgroup    51      2K       2K 166960K       113        0
         sysctl     3      0K       0K 166960K         3        0
       counters    62     36K      36K 166960K        90        0
       ioctlops     0      0K       4K 166960K      1632        0
            iov     0      0K      18K 166960K       322        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1344     84K      84K 166960K      2656        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        61        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       574        0
        dirhash    12      2K       2K 166960K        24        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    16     57K      89K 166960K      2832        0
          sigio     0      0K       0K 166960K       147        0
           proc    70     91K     115K 166960K      1012        0
        subproc    91      5K       6K 166960K       226        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       215        0
       in_multi    77      5K       7K 166960K       240        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     1      0K       0K 166960K         4        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       702        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   392    226K     235K 166960K     29931        0
       UVM aobj   131      4K       4K 166960K       131        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        80        0
            NDP    11      0K       2K 166960K        59        0
           temp    69   6767K    6890K 166960K     19537        0
         kqueue    13     20K      26K 166960K       262        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      151    0      148     1     0     1     1     0     8    0
rtentry    112      230    0      142     4     0     4     4     0     8    0
unpcb      144     1716    0     1699    22    19     3     6     0     8    2
syncache   320       36    0       36     6     5     1     1     0     8    1
sackhl      24        3    0        3     2     2     0     1     0     8    0
tcpqe       32      113    0      113     4     4     0     1     0     8    0
tcpcb      808      615    0      603    18    15     3     9     0     8    0
arp        120       41    0       27     1     0     1     1     0     8    0
inpcb      376     1979    0     1963    39    33     6    16     0     8    3
nd6        136       52    0       34     1     0     1     1     0     8    0
pkpcb       40       15    0       15     2     2     0     1     0     8    0
kcovpl      48       17    0       10     1     0     1     1     0     8    0
pffrag     232       30    0       28     1     0     1     1     0   482    0
pffrnode    88       30    0       28     1     0     1     1     0     8    0
pffrent     40       66    0       64     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24      127    0      104     1     0     1     1     0     8    0
pfstkey    128      127    0      104     2     0     2     2     0     8    0
pfstate    376      127    0      104     5     2     3     4     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      871    0      503    35     7    28    29     0     8    0
art_table   32      872    0      503     4     0     4     4     0     8    0
art_node    16      223    0      143     1     0     1     1     0     8    0
sysvmsgpl   40        6    0        3     1     0     1     1     0     8    0
semapl     112      572    0      562     1     0     1     1     0     8    0
shmpl      112      128    0        0     4     0     4     4     0     8    0
dirhash    1024      25    0        8     3     0     3     3     0     8    0
dino2pl    256     5154    0     3708    92     0    92    92     0     8    0
ffsino     272     5154    0     3708    98     0    98    98     0     8    0
nchpl      144     9020    0     7373    64     0    64    64     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   30371    0    30367     3     2     1     2     0     8    0
percpumem   16       59    0       14     1     0     1     1     0     8    0
vcpupl     2048      10    0        0     2     0     2     2     0     8    0
vmpool     696       14    0        4     1     0     1     1     0     8    0
kstatmem   264       50    0       28     2     0     2     2     0     8    0
scxspl     216    34253    0    34253    16    15     1     8     1     8    1
plimitpl   152      267    0      249     1     0     1     1     0     8    0
sigapl     424     3137    0     3088     8     2     6     7     0     8    0
futexpl     64    21192    0    21187     1     0     1     1     0     8    0
knotepl    120      376    0        0    11     0    11    11     0     8    0
kqueuepl   216      655    0      645    15    14     1     5     0     8    0
pipepl     320      541    0      514    14    11     3     8     0     8    0
fdescpl    496     3117    0     3088    10     6     4     5     0     8    0
filepl     152    16903    0    16671    39    26    13    17     0     8    2
lockfpl    104      759    0      757     2     0     2     2     0     8    1
lockfspl    48      242    0      240     1     0     1     1     0     8    0
sessionpl  144       33    0       17     1     0     1     1     0     8    0
pgrppl      48       46    0       30     1     0     1     1     0     8    0
ucredpl    104     2679    0     2667     1     0     1     1     0     8    0
zombiepl   144     3088    0     3088     1     0     1     1     0     8    1
processpl  1136    3137    0     3088     4     0     4     4     0     8    0
procpl     680     7804    0     7726    10     2     8     8     0     8    1
srpgc       96       17    0       17     6     5     1     1     0     8    1
sosppl     168       59    0       59     5     4     1     1     0     8    1
sockpl     584     3906    0     3870    43    37     6    14     0     8    2
mcl64k     65536     13    0        0     2     0     2     2     0     8    0
mcl16k     16384     11    0        0     2     0     2     2     0     8    0
mcl12k     12288     10    0        0     1     0     1     1     0     8    0
mcl9k      9216       7    0        0     1     0     1     1     0     8    0
mcl8k      8192      17    0        0     3     0     3     3     0     8    0
mcl4k      4096      17    0        0     3     0     3     3     0     8    0
mcl2k2     2112       5    0        0     1     0     1     1     0     8    0
mcl2k      2048     286    0        0    31     2    29    31     0     8    0
mtagpl      96      230    0        0     5     0     5     5     0     8    0
mbufpl     256     1002    0        0    56     0    56    56     0     8    0
bufpl      280     8208    0     1891   452     0   452   452     0     8    0
anonpl      24   428482    0   413751   118    27    91   111     0   186    0
amapchunkpl 152   94289    0    93328    43     2    41    42     0   158    0
amappl16   200     9690    0     9257    40    15    25    35     0     8    0
amappl15   192       29    0       28     1     0     1     1     0     8    0
amappl14   184      192    0      178     2     1     1     2     0     8    0
amappl13   176       13    0       13     2     2     0     1     0     8    0
amappl12   168     3992    0     3956     4     2     2     3     0     8    0
amappl11   160       72    0       58     1     0     1     1     0     8    0
amappl10   152       40    0       32     2     1     1     1     0     8    0
amappl9    144      220    0      219     1     0     1     1     0     8    0
amappl8    136      327    0      248     3     0     3     3     0     8    0
amappl7    128      204    0      177     2     0     2     2     0     8    0
amappl6    120      428    0      418     1     0     1     1     0     8    0
amappl5    112      188    0      177     1     0     1     1     0     8    0
amappl4    104      584    0      554     2     1     1     2     0     8    0
amappl3     96    18797    0    18697     4     1     3     3     0     8    0
amappl2     88     3692    0     3614     3     1     2     3     0     8    0
amappl1     80    20007    0    19451    24    11    13    23     0     8    0
amappl      88    29230    0    28966     7     0     7     7     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      130    0        0     3     0     3     3     0     8    0
uaddrrnd    24     3131    0     3092     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3131    0     3092     1     0     1     1     0     8    0
vmmpekpl   168    27447    0    27371     4     0     4     4     0     8    0
vmmpepl    168   207433    0   204997   183    70   113   133     0   357    0
vmsppl     448     3130    0     3092     7     2     5     5     0     8    0
rwobjpl     56    61600    0    53974   113     4   109   109     0     8    0
pdppl      4096    6269    0     6194   281   202    79    81     0     8    4
pvpl        32    43661    0        0   354     1   353   353     0   265    0
pmappl     248     3130    0     3092     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      693    0      271    13     0    13    13     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
unveil_add_vnode(ffff80002a20a540,fffffd80663940f0) at unveil_add_vnode+0xbb sys/kern/kern_unveil.c:391
unveil_add(ffff80002a20a540,ffff80002f938c88,ffff80002f938d43) at unveil_add+0x2ef sys/kern/kern_unveil.c:494
sys_unveil(ffff80002a20a540,ffff80002f938e70,ffff80002f938dc0) at sys_unveil+0x41c sys/kern/vfs_syscalls.c:1023
syscall(ffff80002f938e70) at syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
syscall(ffff80002f938e70) at syscall+0x533 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb0d6661000, count: -5
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff82dbf6c8) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82dbf6c8) at __mp_lock+0x133 sys/kern/kern_lock.c:147
__mp_acquire_count(ffffffff82dbf6c8,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
mi_switch() at mi_switch+0x46f sys/kern/sched_bsd.c:470
sleep_finish(0,1) at sleep_finish+0x19b sys/kern/kern_synch.c:414
rw_enter(fffffd806f2775d8,1) at rw_enter+0x341 sys/kern/kern_rwlock.c:285
rrw_enter(fffffd806f2775d8,1) at rrw_enter+0x8c sys/kern/kern_rwlock.c:464
VOP_LOCK(fffffd806f0e5c00,1) at VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
vn_lock(fffffd806f0e5c00,1) at vn_lock+0x84 sys/kern/vfs_vnops.c:564
vget(fffffd806f0e5c00,1) at vget+0x200 sys/kern/vfs_subr.c:676
ufs_ihashget(400,caa0) at ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
ffs_vget(ffff8000006d2400,caa0,ffff80002f31e2e8) at ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
end trace frame: 0xffff80002f31e370, count: 0
ddb{1}> trace
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff82dbf6c8) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82dbf6c8) at __mp_lock+0x133 sys/kern/kern_lock.c:147
__mp_acquire_count(ffffffff82dbf6c8,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
mi_switch() at mi_switch+0x46f sys/kern/sched_bsd.c:470
sleep_finish(0,1) at sleep_finish+0x19b sys/kern/kern_synch.c:414
rw_enter(fffffd806f2775d8,1) at rw_enter+0x341 sys/kern/kern_rwlock.c:285
rrw_enter(fffffd806f2775d8,1) at rrw_enter+0x8c sys/kern/kern_rwlock.c:464
VOP_LOCK(fffffd806f0e5c00,1) at VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
vn_lock(fffffd806f0e5c00,1) at vn_lock+0x84 sys/kern/vfs_vnops.c:564
vget(fffffd806f0e5c00,1) at vget+0x200 sys/kern/vfs_subr.c:676
ufs_ihashget(400,caa0) at ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
ffs_vget(ffff8000006d2400,caa0,ffff80002f31e2e8) at ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
ufs_lookup() at ufs_lookup+0x10a3 sys/ufs/ufs/ufs_lookup.c:555
VOP_LOOKUP(fffffd80679931d0,ffff80002f31e458,ffff80002f31e3f8) at VOP_LOOKUP+0x5c sys/kern/vfs_vops.c:85
unveil_find_cover(fffffd8067ac00e8,ffff80002a243558) at unveil_find_cover+0x130 sys/kern/kern_unveil.c:277
unveil_add_vnode(ffff80002a243558,fffffd8067ac00e8) at unveil_add_vnode+0xb7 sys/kern/kern_unveil.c:391
unveil_add(ffff80002a243558,ffff80002f31e608,ffff80002f31e6c3) at unveil_add+0x2ef sys/kern/kern_unveil.c:494
sys_unveil(ffff80002a243558,ffff80002f31e7f0,ffff80002f31e740) at sys_unveil+0x41c sys/kern/vfs_syscalls.c:1023
syscall(ffff80002f31e7f0) at syscall+0x533 mi_syscall sys/sys/syscall_mi.h:183 [inline]
syscall(ffff80002f31e7f0) at syscall+0x533 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xeb2736d2f80, count: -22

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/02/18 15:44 openbsd 12afce1bef21 578f7538 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: unveil_add_vnode
* Struck through repros no longer work on HEAD.