syzbot


uvm_fault: db_read_bytes

Status: upstream: reported on 2024/02/20 12:48
Reported-by: syzbot+623eeb194558cd7e5e96@syzkaller.appspotmail.com
First crash: 67d, last: 3h18m

Sample crash report:
kernel: page fault trap, code=10
Stopped at      acpi_pdirpa+0x2859a:    uvm_fault(0xfffffd806eff71c0, 0x3c729, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      db_read_bytes+0xd0:     movzbl  0xffffffffffffffff(%r15),%eax
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*214880   8685      0   0x8000000  0x4000000    0K syz-executor.3
db_read_bytes(3c729,1,ffff80002a217174) at db_read_bytes+0xd0 sys/arch/amd64/amd64/db_memrw.c:85
db_get_value(3c729,1,0) at db_get_value+0x50 sys/ddb/db_access.c:61
db_disasm(3c729,0) at db_disasm+0x82
db_trap(6,10) at db_trap+0x115 sys/ddb/db_trap.c:71
db_ktrap(6,10,ffff80002a217410) at db_ktrap+0x208 sys/arch/amd64/amd64/db_interface.c:151
kerntrap(ffff80002a217410) at kerntrap+0x142 sys/arch/amd64/amd64/trap.c:323
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
acpi_pdirpa() at acpi_pdirpa+0x2859a
rt_clone(ffff80002a2176e8,ffff80002a2177e0,0) at rt_clone+0x7d sys/net/route.c:383
route_mpath(ffff80002a2177c8,fffffd806474dee8,fffffd806474dee4,0) at route_mpath+0x112 rt_match sys/net/route.c:360 [inline]
route_mpath(ffff80002a2177c8,fffffd806474dee8,fffffd806474dee4,0) at route_mpath+0x112 rtalloc_mpath sys/net/route.c:476 [inline]
route_mpath(ffff80002a2177c8,fffffd806474dee8,fffffd806474dee4,0) at route_mpath+0x112 sys/net/route.c:255
in_ouraddr(fffffd806474de00,ffff800010fdd800,ffff80002a2177c8) at in_ouraddr+0x98 sys/netinet/ip_input.c:830
ip_input_if(ffff80002a2178b8,ffff80002a2178c4,ffff80002f111000,0,ffff800010fdd800) at ip_input_if+0x28e sys/netinet/ip_input.c:486
ipv4_input(ffff800010fdd800,fffffd806474de00) at ipv4_input+0x47 sys/netinet/ip_input.c:327
ether_input(ffff800010fdd800,fffffd806474de00) at ether_input+0x525
end trace frame: 0xffff80002a2179e0, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/27 14:39 openbsd 22bab8566a4f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/04/26 05:16 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/25 21:36 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/25 01:57 openbsd 799d9b3d961e a604cf37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/24 01:03 openbsd e6c7c102cf5d 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/22 04:03 openbsd e1cb65bb8aa8 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/22 03:34 openbsd e1cb65bb8aa8 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/04/21 21:22 openbsd 8a9424f8c5c9 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
2024/04/21 11:02 openbsd 8a9424f8c5c9 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/08 05:23 openbsd c112ccd4e935 ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/06 03:26 openbsd 3f7c134ffe9c ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/04/05 17:32 openbsd 2ee472d028ec ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: db_read_bytes
2024/02/20 12:47 openbsd d8131725ee7c 3af7dd65 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_read_bytes
* Struck through repros no longer work on HEAD.