syzbot


uvm_fault: db_read_bytes

Status: upstream: reported on 2024/02/20 12:48
Reported-by: syzbot+623eeb194558cd7e5e96@syzkaller.appspotmail.com
First crash: 275d, last: 41d

Sample crash report:
kernel: page fault trap, code=10
Stopped at      acpi_pdirpa+0xd55ea:    uvm_fault(0xfffffd806c3f7c20, 0xe9779, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      db_read_bytes+0x110:    movzbl  0xffffffffffffffff(%r15),%eax
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 267653  94163      0           0          0    0  syz-executor
* 76377  73755      0           0  0x4000000    1K syz-executor
db_read_bytes(e9779,1,ffff8000371d8364) at db_read_bytes+0x110 sys/arch/amd64/amd64/db_memrw.c:85
db_get_value(e9779,1,0) at db_get_value+0x59
db_disasm(e9779,0) at db_disasm+0x94
db_trap(6,10) at db_trap+0x181 sys/ddb/db_trap.c:71
db_ktrap(6,10,ffff8000371d8600) at db_ktrap+0x303 sys/arch/amd64/amd64/db_interface.c:151
kerntrap(ffff8000371d8600) at kerntrap+0x1dc sys/arch/amd64/amd64/trap.c:323
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
acpi_pdirpa() at acpi_pdirpa+0xd55ea
rt_clone(ffff8000371d88d8,ffff8000371d89d8,0) at rt_clone+0x98 sys/net/route.c:383
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rt_match sys/net/route.c:360 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rtalloc_mpath sys/net/route.c:476 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 sys/net/route.c:255
in_ouraddr(fffffd806fe6d000,ffff8000012a4000,ffff8000371d89c0,0) at in_ouraddr+0xc2
ip_input_if(ffff8000371d8ab8,ffff8000371d8ac4,ffff800031b8c000,0,ffff8000012a4000) at ip_input_if+0x422 sys/netinet/ip_input.c:508
ipv4_input(ffff8000012a4000,fffffd806fe6d000) at ipv4_input+0x50 sys/netinet/ip_input.c:337
ether_input(ffff8000012a4000,fffffd806fe6d000) at ether_input+0x6e4
end trace frame: 0xffff8000371d8be0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd806c3f7c20, 0xe9779, 0, 1) -> e
ddb{1}> trace
db_read_bytes(e9779,1,ffff8000371d8364) at db_read_bytes+0x110 sys/arch/amd64/amd64/db_memrw.c:85
db_get_value(e9779,1,0) at db_get_value+0x59
db_disasm(e9779,0) at db_disasm+0x94
db_trap(6,10) at db_trap+0x181 sys/ddb/db_trap.c:71
db_ktrap(6,10,ffff8000371d8600) at db_ktrap+0x303 sys/arch/amd64/amd64/db_interface.c:151
kerntrap(ffff8000371d8600) at kerntrap+0x1dc sys/arch/amd64/amd64/trap.c:323
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
acpi_pdirpa() at acpi_pdirpa+0xd55ea
rt_clone(ffff8000371d88d8,ffff8000371d89d8,0) at rt_clone+0x98 sys/net/route.c:383
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rt_match sys/net/route.c:360 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rtalloc_mpath sys/net/route.c:476 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 sys/net/route.c:255
in_ouraddr(fffffd806fe6d000,ffff8000012a4000,ffff8000371d89c0,0) at in_ouraddr+0xc2
ip_input_if(ffff8000371d8ab8,ffff8000371d8ac4,ffff800031b8c000,0,ffff8000012a4000) at ip_input_if+0x422 sys/netinet/ip_input.c:508
ipv4_input(ffff8000012a4000,fffffd806fe6d000) at ipv4_input+0x50 sys/netinet/ip_input.c:337
ether_input(ffff8000012a4000,fffffd806fe6d000) at ether_input+0x6e4
tun_dev_write(5d04,ffff8000371d8e38,ffff800031b8c000,2) at tun_dev_write+0x301 sys/net/if_tun.c:914
spec_write(ffff8000371d8c90) at spec_write+0x120 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd806d2e17c0,ffff8000371d8e38,11,fffffd807f7d35b0) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
vn_write(fffffd806bf74be8,ffff8000371d8e38,0) at vn_write+0x1d1 sys/kern/vfs_vnops.c:408
dofilewritev(ffff8000ffff6cc8,c8,ffff8000371d8e38,0,ffff8000371d8ef0) at dofilewritev+0x23c sys/kern/sys_generic.c:380
sys_write(ffff8000ffff6cc8,ffff8000371d8fa0,ffff8000371d8ef0) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff8000371d8fa0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff8000371d8fa0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x45e6eec0b30, count: -22
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000371d8350
rbx                              0x1
rdx               0xffff8000012a1fc0
rcx               0xffff8000ffff6cc8
rax               0xffff800029b7bff0
r8                0xffff8000371d8480
r9                0x8080808080808080
r10               0x83b81bb9c3f699be
r11               0x63ec1db27c0fc2c7
r12                              0x1
r13                              0x1
r14               0xffff8000371d8365
r15                          0xe977a    acpi_pdirpa+0xd55eb
rip               0xffffffff82215f50    db_read_bytes+0x110
cs                               0x8
rflags                       0x10286    __ALIGN_SIZE+0xf286
rsp               0xffff8000371d82f0
ss                              0x10
db_read_bytes+0x110:    movzbl  0xffffffffffffffff(%r15),%eax
ddb{1}> show proc
PROC (syz-executor) tid=76377 pid=73755 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff7970,0xffff8000335991f0
    process=0xffff800029fead58 user=0xffff8000371d4000, vmspace=0xfffffd806c3f7c20
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 58862    6021  65686      0  2           0                syz-executor
 94163  267653    341      0  7           0                syz-executor
 94163  367168    341      0  3   0x4000000  biowait       syz-executor
 73755  491132  19731      0  2           0                syz-executor
*73755   76377  19731      0  7   0x4000000                syz-executor
 72996  401266  48324      0  2           0                syz-executor
 72996  162850  48324      0  3   0x4000080  fsleep        syz-executor
 35536  452721  50519      0  2    0x100002                sh
 71784  101371  33285      0  2           0                syz-executor
 71784  290683  33285      0  3   0x4000080  rest          syz-executor
 71784  425588  33285      0  3   0x4000080  bell          syz-executor
 65686  163717  88575      0  3        0x82  nanoslp       syz-executor
 48324  508751  88575      0  2         0x2                syz-executor
 50519  512804  88575      0  3        0x82  wait          syz-executor
 19731  488752  88575      0  3        0x82  nanoslp       syz-executor
   341  433571  88575      0  2         0x2                syz-executor
 33285  465986  88575      0  3        0x82  nanoslp       syz-executor
  5479  393752  88575      0  3         0x2  biowait       syz-executor
  8701  134010  88575      0  3        0x82  nanoslp       syz-executor
 52462  466227      0      0  3     0x14200  bored         sosplice
  2752  356296      0      0  3     0x14280  nfsidl        nfsio
 21119   93092      0      0  3     0x14280  nfsidl        nfsio
 64808  522843      0      0  3     0x14280  nfsidl        nfsio
 76072  214016      0      0  3     0x14280  nfsidl        nfsio
 16761  395588      0      0  3     0x14280  nfsidl        nfsio
 94515  191242      0      0  3     0x14280  nfsidl        nfsio
 13474   90959      0      0  3     0x14280  nfsidl        nfsio
 73048  242869      0      0  3     0x14280  nfsidl        nfsio
 40238  167291      0      0  3     0x14280  nfsidl        nfsio
 10324   79693      0      0  3     0x14280  nfsidl        nfsio
 51043   57890      0      0  3     0x14280  nfsidl        nfsio
 72414  446010      0      0  3     0x14280  nfsidl        nfsio
  9695  346577      0      0  3     0x14280  nfsidl        nfsio
 27159  477770      0      0  3     0x14280  nfsidl        nfsio
 57560  399711      0      0  3     0x14280  nfsidl        nfsio
 93751  107270      0      0  3     0x14280  nfsidl        nfsio
 46810  229705      0      0  3     0x14280  nfsidl        nfsio
 77224  106296      0      0  3     0x14280  nfsidl        nfsio
  7162  121229      0      0  3     0x14280  nfsidl        nfsio
 24753  245784      0      0  3     0x14280  nfsidl        nfsio
 88575  213673  29279      0  3        0x82  kqread        syz-executor
 29279  286959  92735      0  3    0x10008a  sigsusp       ksh
 92735  419456  55689      0  3        0x98  kqread        sshd-session
 55689  114958  35067      0  3        0x92  kqread        sshd-session
 34827  225692      1      0  3    0x100083  ttyin         getty
 35067  210138      1      0  3        0x88  kqread        sshd
 96221  366515  47213     74  3   0x1100092  bpf           pflogd
 47213  192878      1      0  3        0x80  sbwait        pflogd
 28679  428218  68776     73  3   0x1100010  biowait       syslogd
 68776  230817      1      0  3    0x100082  sbwait        syslogd
 22236  353206      1      0  3    0x100080  kqread        resolvd
 25491  191590   6338     77  3    0x100092  kqread        dhcpleased
 18498  193617   6338     77  3    0x100092  kqread        dhcpleased
  6338  325954      1      0  3        0x80  kqread        dhcpleased
 35843  315031      0      0  3     0x14200  bored         smr
 87454  216817      0      0  2     0x14200                zerothread
 59230   61151      0      0  3     0x14200  aiodoned      aiodoned
 87627   93328      0      0  3     0x14200  syncer        update
  6736  471543      0      0  3     0x14200  cleaner       cleaner
 52290  257472      0      0  3     0x14200  reaper        reaper
 26388   81092      0      0  3     0x14200  pgdaemon      pagedaemon
 62314  209625      0      0  3     0x14200  bored         viomb
 59874  300983      0      0  3  0x40014200  acpi0         acpi0
 68161  455195      0      0  3  0x40014200                idle1
 12826  462609      0      0  3     0x14200  bored         softnet3
  6808  226114      0      0  3     0x14200  bored         softnet2
 30867   80894      0      0  3     0x14200  bored         softnet1
 49547  250453      0      0  3     0x14200  bored         softnet0
 77638  227459      0      0  3     0x14200  bored         systqmp
  2490  466290      0      0  3     0x14200  bored         systq
 89156   93271      0      0  3     0x14200  tmoslp        softclockmp
 46368  258915      0      0  3  0x40014200  tmoslp        softclock
 60453  458117      0      0  3  0x40014200                idle0
     1  233491      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 94163 (syz-executor) thread 0xffff8000335991e0 (367168)
exclusive rrwlock inode r = 0 (0xfffffd80798953d8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:169
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_makeinode+0xcb sys/ufs/ufs/ufs_vnops.c:1733
#8  ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147
#9  VOP_CREATE+0xff sys/kern/vfs_vops.c:103
#10 uipc_bind+0x418 sys/kern/uipc_usrreq.c:391
#11 sys_bind+0x28a sys/kern/uipc_syscalls.c:189
#12 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#12 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#13 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80798952c8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  uipc_bind+0x2f4 sys/kern/uipc_usrreq.c:369
#8  sys_bind+0x28a sys/kern/uipc_syscalls.c:189
#9  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#9  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#10 Xsyscall+0x128
Process 73755 (syz-executor) thread 0xffff8000ffff6cc8 (76377)
exclusive rwlock netlock r = 0 (0xffffffff834a5c90)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  tun_dev_write+0x2ed sys/net/if_tun.c:913
#2  spec_write+0x120 sys/kern/spec_vnops.c:302
#3  VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
#4  vn_write+0x1d1 sys/kern/vfs_vnops.c:408
#5  dofilewritev+0x23c sys/kern/sys_generic.c:380
#6  sys_write+0xa2 sys/kern/sys_generic.c:300
#7  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#7  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#8  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff835c3948)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  vn_write+0x4e sys/kern/vfs_vnops.c:393
#2  dofilewritev+0x23c sys/kern/sys_generic.c:380
#3  sys_write+0xa2 sys/kern/sys_generic.c:300
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
Process 5479 (syz-executor) thread 0xffff80003359e2c0 (393752)
exclusive rrwlock inode r = 0 (0xfffffd80798954e8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:169
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0x113 sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3099
#10 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#10 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806bd73c50)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3084
#8  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#8  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 28679 (syslogd) thread 0xffff8000ffffd960 (428218)
exclusive rrwlock inode r = 0 (0xfffffd806e40c2c0)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1155
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2926
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10198  11177K   11448K 166960K     11502        0
            pcb    17     12K      12K 166960K        56        0
         rtable   234      8K       8K 166960K       607        0
             pf    38     18K      21K 166960K        76        0
         ifaddr    42      7K       7K 166960K        81        0
        ifgroup    55      2K       2K 166960K        96        0
         sysctl     3      0K       0K 166960K         3        0
       counters    64     36K      36K 166960K        86        0
       ioctlops     0      0K       4K 166960K      1508        0
            iov     0      0K       1K 166960K        10        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1370     86K      86K 166960K      1607        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    10      0K       0K 166960K        11        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1690    195K     286K 166960K     12468        0
      file desc    17     61K      89K 166960K       448        0
          sigio     0      0K       0K 166960K         6        0
           proc    72     91K     128K 166960K       760        0
        subproc   104      6K       6K 166960K       208        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        32        0
       in_multi    90      6K       7K 166960K       186        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    67    307K     307K 166960K        67        0
           exec     0      0K       1K 166960K       519        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   219     72K      91K 166960K      5311        0
       UVM aobj    11      2K       2K 166960K        13        0
     pinsyscall    42     84K     100K 166960K      1738        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        11        0
            NDP    20      1K       1K 166960K        54        0
           temp    42   6811K    6891K 166960K     20446        0
         kqueue    13     20K      26K 166960K        58        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120       61    0       58     1     0     1     1     0     8    0
rtentry    112      201    0       95     4     0     4     4     0     8    0
unpcb      144      238    0      219     3     2     1     3     0     8    0
syncache   336        8    0        8     1     1     0     1     0     8    0
tcpcb      808       68    0       63     1     0     1     1     0     8    0
arp        120       33    0       16     1     0     1     1     0     8    0
inpcb      336      384    0      375     7     3     4     7     0     8    3
nd6        136       46    0       25     1     0     1     1     0     8    0
pkpcb       40        2    0        2     1     1     0     1     0     8    0
kcovpl      48       16    0        8     1     0     1     1     0     8    0
ppxss      1168       2    0        2     1     1     0     1     0     8    0
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40        2    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        1     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24       47    0       13     1     0     1     1     0     8    0
pfstkey    128       47    0       13     2     0     2     2     0     8    0
pfstate    376       46    0       13     4     0     4     4     0     8    0
pfrule     1344      22    0       15     2     0     2     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      812    0      388    31     1    30    31     0     8    3
art_table   32      813    0      388     4     0     4     4     0     8    0
art_node    16      199    0      103     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        1     1     0     1     1     0     8    0
semapl     112        9    0        1     1     0     1     1     0     8    0
shmpl      112       10    0        2     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     1907    0      386    96     0    96    96     0     8    0
ffsino     272     1907    0      386   102     0   102   102     0     8    0
nchpl      144     2385    0      688    64     0    64    64     0     8    1
uvmvnodes   80     2196    0        0    45     0    45    45     0     8    0
vnodes     216     2196    0        0   122     0   122   122     0     8    0
namei      1024    8247    0     8245     3     2     1     2     0     8    0
percpumem   16       57    0       11     1     0     1     1     0     8    0
pfiaddrpl  120        1    0        0     1     0     1     1     0     8    0
kstatmem   264       46    0       22     2     0     2     2     0     8    0
scsiplug    72        3    0        3     1     1     0     1     0     8    0
scxspl     216     8352    0     8349     3     2     1     2     1     8    0
plimitpl   152      160    0      143     1     0     1     1     0     8    0
sigapl     424      757    0      687    11     2     9     9     0     8    0
futexpl     64     3209    0     3208     2     1     1     1     0     8    0
knotepl    120      476    0        0    15     0    15    15     0     8    0
kqueuepl   216       71    0       62     1     0     1     1     0     8    0
pipepl     320      218    0      191     8     4     4     8     0     8    1
fdescpl    496      718    0      687     6     1     5     5     0     8    0
filepl     152     3422    0     3173    17     4    13    17     0     8    3
lockfpl    104       73    0       70     1     0     1     1     0     8    0
lockfspl    48       33    0       30     1     0     1     1     0     8    0
sessionpl  144       33    0       24     1     0     1     1     0     8    0
pgrppl      48       57    0       40     1     0     1     1     0     8    0
ucredpl    104      255    0      241     1     0     1     1     0     8    0
zombiepl   144      688    0      687     1     0     1     1     0     8    0
processpl  1160     757    0      687     6     0     6     6     0     8    0
procpl     648     1105    0     1030     9     1     8     8     0     8    1
sosppl     168        1    0        1     1     1     0     1     0     8    0
sockpl     664      689    0      658     8     3     5     8     0     8    2
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     158    0        0    20     0    20    20     0     8    0
mcl2k      2048      27    0        0     4     0     4     4     0     8    0
mtagpl      96        8    0        0     1     0     1     1     0     8    0
mbufpl     256      177    0        0    11     0    11    11     0     8    0
bufpl      280     5259    0      106   369     0   369   369     0     8    0
anonpl      24   176642    0   173364    52     2    50    50     0   185   24
amapchunkpl 152   17516    0    17074    31     0    31    31     0   158   11
amappl16   200     4282    0     4268     5     3     2     5     0     8    1
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184      137    0      125     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1492    0     1460     4     1     3     3     0     8    1
amappl11   160       72    0       58     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      168    0      167     1     0     1     1     0     8    0
amappl8    136       24    0       22     1     0     1     1     0     8    0
amappl7    128      124    0      112     1     0     1     1     0     8    0
amappl6    120      239    0      236     1     0     1     1     0     8    0
amappl5    112      166    0      155     1     0     1     1     0     8    0
amappl4    104      341    0      324     1     0     1     1     0     8    0
amappl3     96     3177    0     3076     4     0     4     4     0     8    1
amappl2     88      806    0      737     2     0     2     2     0     8    0
amappl1     80     9578    0     9009    14     0    14    14     0     8    0
amappl      88     4852    0     4695     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72       12    0        2     1     0     1     1     0     8    0
uaddrrnd    24      718    0      687     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      718    0      687     1     0     1     1     0     8    0
vmmpekpl   168     7712    0     7666     3     0     3     3     0     8    0
vmmpepl    168    52792    0    51002    90     3    87    90     0   357    7
vmsppl     440      717    0      687     6     2     4     5     0     8    0
rwobjpl     56    21171    0    18058    46     0    46    46     0     8    0
pdppl      4096    1443    0     1374   109    32    77    83     0     8    8
pvpl        32    28128    0        0   229     2   227   228     0   265    0
pmappl     248      717    0      687     3     0     3     3     0     8    0
extentpl    40       55    0       38     1     0     1     1     0     8    0
phpool     112      395    0       42    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8343cff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff835c3740) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835c3740) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002a0a0020,ffff800000079f80) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
end of kernel
end trace frame: 0x7f337df67640, count: 9
ddb{0}> trace
x86_ipi_db(ffffffff8343cff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff835c3740) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff835c3740) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002a0a0020,ffff800000079f80) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
end of kernel
end trace frame: 0x7f337df67640, count: -6
ddb{0}> machine ddbcpu 1
Stopped at      db_read_bytes+0x110:    movzbl  0xffffffffffffffff(%r15),%eax
db_read_bytes(e9779,1,ffff8000371d8364) at db_read_bytes+0x110 sys/arch/amd64/amd64/db_memrw.c:85
db_get_value(e9779,1,0) at db_get_value+0x59
db_disasm(e9779,0) at db_disasm+0x94
db_trap(6,10) at db_trap+0x181 sys/ddb/db_trap.c:71
db_ktrap(6,10,ffff8000371d8600) at db_ktrap+0x303 sys/arch/amd64/amd64/db_interface.c:151
kerntrap(ffff8000371d8600) at kerntrap+0x1dc sys/arch/amd64/amd64/trap.c:323
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
acpi_pdirpa() at acpi_pdirpa+0xd55ea
rt_clone(ffff8000371d88d8,ffff8000371d89d8,0) at rt_clone+0x98 sys/net/route.c:383
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rt_match sys/net/route.c:360 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rtalloc_mpath sys/net/route.c:476 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 sys/net/route.c:255
in_ouraddr(fffffd806fe6d000,ffff8000012a4000,ffff8000371d89c0,0) at in_ouraddr+0xc2
ip_input_if(ffff8000371d8ab8,ffff8000371d8ac4,ffff800031b8c000,0,ffff8000012a4000) at ip_input_if+0x422 sys/netinet/ip_input.c:508
ipv4_input(ffff8000012a4000,fffffd806fe6d000) at ipv4_input+0x50 sys/netinet/ip_input.c:337
ether_input(ffff8000012a4000,fffffd806fe6d000) at ether_input+0x6e4
end trace frame: 0xffff8000371d8be0, count: 0
ddb{1}> trace
db_read_bytes(e9779,1,ffff8000371d8364) at db_read_bytes+0x110 sys/arch/amd64/amd64/db_memrw.c:85
db_get_value(e9779,1,0) at db_get_value+0x59
db_disasm(e9779,0) at db_disasm+0x94
db_trap(6,10) at db_trap+0x181 sys/ddb/db_trap.c:71
db_ktrap(6,10,ffff8000371d8600) at db_ktrap+0x303 sys/arch/amd64/amd64/db_interface.c:151
kerntrap(ffff8000371d8600) at kerntrap+0x1dc sys/arch/amd64/amd64/trap.c:323
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
acpi_pdirpa() at acpi_pdirpa+0xd55ea
rt_clone(ffff8000371d88d8,ffff8000371d89d8,0) at rt_clone+0x98 sys/net/route.c:383
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rt_match sys/net/route.c:360 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 rtalloc_mpath sys/net/route.c:476 [inline]
route_mpath(ffff8000371d89c0,fffffd806fe6d0e8,fffffd806fe6d0e4,0) at route_mpath+0x170 sys/net/route.c:255
in_ouraddr(fffffd806fe6d000,ffff8000012a4000,ffff8000371d89c0,0) at in_ouraddr+0xc2
ip_input_if(ffff8000371d8ab8,ffff8000371d8ac4,ffff800031b8c000,0,ffff8000012a4000) at ip_input_if+0x422 sys/netinet/ip_input.c:508
ipv4_input(ffff8000012a4000,fffffd806fe6d000) at ipv4_input+0x50 sys/netinet/ip_input.c:337
ether_input(ffff8000012a4000,fffffd806fe6d000) at ether_input+0x6e4
tun_dev_write(5d04,ffff8000371d8e38,ffff800031b8c000,2) at tun_dev_write+0x301 sys/net/if_tun.c:914
spec_write(ffff8000371d8c90) at spec_write+0x120 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd806d2e17c0,ffff8000371d8e38,11,fffffd807f7d35b0) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
vn_write(fffffd806bf74be8,ffff8000371d8e38,0) at vn_write+0x1d1 sys/kern/vfs_vnops.c:408
dofilewritev(ffff8000ffff6cc8,c8,ffff8000371d8e38,0,ffff8000371d8ef0) at dofilewritev+0x23c sys/kern/sys_generic.c:380
sys_write(ffff8000ffff6cc8,ffff8000371d8fa0,ffff8000371d8ef0) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff8000371d8fa0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff8000371d8fa0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x45e6eec0b30, count: -22

Crashes (94):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/10/10 19:59 openbsd 9f5322440471 d44647df .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/10 12:26 openbsd 9f5322440471 d44647df .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/10 10:59 openbsd 9f5322440471 d44647df .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/09 19:38 openbsd bcc953340d3a 56fb2cb7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/09 16:43 openbsd bcc953340d3a 56fb2cb7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/08 07:08 openbsd c89f4e122d5e 402f1df0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/08 05:53 openbsd c89f4e122d5e 402f1df0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/08 01:29 openbsd c89f4e122d5e 402f1df0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/07 14:41 openbsd 399bfee8b632 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/06 01:32 openbsd 502b52cbdf55 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/05 11:36 openbsd 5d74ee2ca1b8 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/04 22:21 openbsd ecf90ed7d782 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/04 13:35 openbsd ecf90ed7d782 d7906eff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/03 04:00 openbsd 67e4adbbdf0e a4c7fd36 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/02 23:05 openbsd 67e4adbbdf0e a4c7fd36 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/02 20:24 openbsd 9acbf608f1e1 83a2f15f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/01 17:08 openbsd 67526adf6fb7 ea2b66a6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/01 03:55 openbsd 477ac4f17e6a bbd4e0a4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/10/01 02:26 openbsd 477ac4f17e6a bbd4e0a4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/30 13:54 openbsd a1c6091a665e 179f4029 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/30 05:25 openbsd 411db55cb24f ba29ff75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/29 12:32 openbsd b3a69e4eefa8 ba29ff75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/29 07:13 openbsd 7eb67ff9a029 ba29ff75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/28 09:44 openbsd 352e6c5d7c95 440b26ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/27 20:29 openbsd b985d8243801 2b1784d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/27 05:03 openbsd 8c606e712b79 9314348a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/26 18:51 openbsd 9119eb3a9696 9314348a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/26 07:55 openbsd f8f7dc1f1132 0d19f247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/26 04:18 openbsd f8f7dc1f1132 0d19f247 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/25 13:22 openbsd 208893442c38 0b45cac3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/25 10:02 openbsd 208893442c38 349a68c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/25 03:31 openbsd 208893442c38 349a68c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/25 02:31 openbsd 208893442c38 349a68c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/24 12:19 openbsd 208893442c38 5643e0e9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/24 02:16 openbsd 208893442c38 89298aad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/23 19:00 openbsd 208893442c38 89298aad .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/23 03:10 openbsd 3a06db87a139 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/22 17:32 openbsd 3a06db87a139 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/22 10:49 openbsd 4cda312e06fb 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/21 22:50 openbsd e95f2867f8e8 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/21 02:11 openbsd 08948b0a81ee 6f888b75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/18 05:32 openbsd 1aeced5a9232 c673ca06 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/14 14:18 openbsd f4336680ed94 08d8a733 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/09/13 09:55 openbsd 00475b9b7a59 73e8a465 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/13 04:25 openbsd 00475b9b7a59 73e8a465 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/09/11 02:12 openbsd 8e9d9dd5c33e 8ab55d0e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/04/08 05:23 openbsd c112ccd4e935 ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/06 03:26 openbsd 3f7c134ffe9c ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/05 17:32 openbsd 2ee472d028ec ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/02/20 12:47 openbsd d8131725ee7c 3af7dd65 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
* Struck through repros no longer work on HEAD.