syzbot


uvm_fault: ffs_alloccg

Status: upstream: reported on 2024/09/14 05:49
Reported-by: syzbot+730398af828b81798b8f@syzkaller.appspotmail.com
First crash: 68d, last: 68d

Sample crash report:
uvm_fault(0xffffffff83504770, 0xffff800016172004, 0, 1) -> d
kernel: page fault trap, code=0
Stopped at      ffs_alloccg+0x187:      movl    0x4(%r12),%r15d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*144350  31811      0         0x2        0x1    0K syz-executor
 249134  55104      0     0x14000      0x200    1  reaper
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 ffs_cgread sys/ufs/ffs/ffs_alloc.c:856 [inline]
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 sys/ufs/ffs/ffs_alloc.c:948
ffs_alloc(fffffd8060adabb0,7,78a78,800,fffffd807f7d3208,ffff80002a1065a8) at ffs_alloc+0x31a sys/ufs/ffs/ffs_alloc.c:140
ffs2_balloc(fffffd8060adabb0,1c000,63,fffffd807f7d3208,1,ffff80002a1066b8) at ffs2_balloc+0x7cd sys/ufs/ffs/ffs_balloc.c:533
ffs_write(ffff80002a106740) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345
VOP_WRITE(fffffd8069d2c960,ffff80002a1067f8,3,fffffd807f7d3208) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
ktrwriteraw(ffff8000ffff5978,fffffd8069d2c960,fffffd807f7d3208,ffff80002a1068c0,ffff80002a1068a0) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682
ktrsyscall(ffff8000ffff5978,b,20,ffff80002a106a50) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182
syscall(ffff80002a106a50) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline]
syscall(ffff80002a106a50) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x74f5b3e6e1d0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffffffff83504770, 0xffff800016172004, 0, 1) -> d
ddb{0}> trace
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 ffs_cgread sys/ufs/ffs/ffs_alloc.c:856 [inline]
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 sys/ufs/ffs/ffs_alloc.c:948
ffs_alloc(fffffd8060adabb0,7,78a78,800,fffffd807f7d3208,ffff80002a1065a8) at ffs_alloc+0x31a sys/ufs/ffs/ffs_alloc.c:140
ffs2_balloc(fffffd8060adabb0,1c000,63,fffffd807f7d3208,1,ffff80002a1066b8) at ffs2_balloc+0x7cd sys/ufs/ffs/ffs_balloc.c:533
ffs_write(ffff80002a106740) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345
VOP_WRITE(fffffd8069d2c960,ffff80002a1067f8,3,fffffd807f7d3208) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
ktrwriteraw(ffff8000ffff5978,fffffd8069d2c960,fffffd807f7d3208,ffff80002a1068c0,ffff80002a1068a0) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682
ktrsyscall(ffff8000ffff5978,b,20,ffff80002a106a50) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182
syscall(ffff80002a106a50) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline]
syscall(ffff80002a106a50) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x74f5b3e6e1d0, count: -9
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a106430
rbx               0xfffffd8072a57150
rdx                                0
rcx               0xffff8000ffff5978
rax               0xffffffff83466ff0    cpu_info_full_primary+0x1ff0
r8                0xffffffffffffffff
r9                0xffff80002a1065a8
r10               0x88a57d886b3aa0e1
r11               0x8a1f2bf1d7c349ff
r12               0xffff800016172000
r13                            0x800
r14               0xffff800000a5f000
r15                                0
rip               0xffffffff81787217    ffs_alloccg+0x187
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002a106380
ss                              0x10
ffs_alloccg+0x187:      movl    0x4(%r12),%r15d
ddb{0}> show proc
PROC (syz-executor) tid=144350 pid=31811 tcnt=1 stat=onproc
    flags process=2<EXEC> proc=1<INKTR>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff42b0,0xffff8000ffff4548
    process=0xffff8000371c5fb8 user=0xffff80002a101000, vmspace=0xfffffd806c3296f8
    estcpu=36, cpticks=2, pctcpu=0.2, user=0, sys=5, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 10472   67110  31811      0  2           0                syz-executor
 45272  413777  92355      0  2           0                syz-executor
 45272  297529  92355      0  3   0x4000080  fsleep        syz-executor
  6141  327665  42439      0  2           0                syz-executor
  6141   51739  42439      0  3   0x4000080  kqsel         syz-executor
 54581  373665  39971      0  2           0                syz-executor
 54581   70581  39971      0  3   0x4000080  ttyin         syz-executor
 54581  117797  39971      0  2   0x4000000                syz-executor
  3678  390012  61051      0  2           0                syz-executor
  3678  371407  61051      0  3   0x4000080  fsleep        syz-executor
  7220  273879  14828      0  2           0                syz-executor
  7220  461009  14828      0  2   0x4000080                syz-executor
  7220  251517  14828      0  2   0x4000000                syz-executor
 81654  364246  41548      0  2           0                syz-executor
 81654  204205  41548      0  3   0x4000080  fsleep        syz-executor
 41548  400059  83821      0  3        0x82  nanoslp       syz-executor
 48613   51420  83821      0  3        0x82  nanoslp       syz-executor
 39971  329820  83821      0  3        0x82  nanoslp       syz-executor
 92355  464511  83821      0  3        0x82  nanoslp       syz-executor
*31811  144350  83821      0  7         0x3                syz-executor
 14828  286988  83821      0  2       0x482                syz-executor
 61051  332072  83821      0  2       0x482                syz-executor
 42439  240740  83821      0  2       0x482                syz-executor
 85735  129801      1      0  3    0x100083  ttyin         getty
 32774  319171      0      0  3     0x14200  acct          acct
 20382  194695      0      0  3     0x14200  bored         sosplice
 89063  440194      0      0  3     0x14280  nfsidl        nfsio
  2735  100976      0      0  3     0x14280  nfsidl        nfsio
 23302   39032      0      0  3     0x14280  nfsidl        nfsio
 12039   64560      0      0  3     0x14280  nfsidl        nfsio
 40323  354585      0      0  3     0x14280  nfsidl        nfsio
  3855  183116      0      0  3     0x14280  nfsidl        nfsio
 74344  172563      0      0  3     0x14280  nfsidl        nfsio
 76952  137069      0      0  3     0x14280  nfsidl        nfsio
 66043  424913      0      0  3     0x14280  nfsidl        nfsio
 49304  344125      0      0  3     0x14280  nfsidl        nfsio
 72594  212920      0      0  3     0x14280  nfsidl        nfsio
 25969  517179      0      0  3     0x14280  nfsidl        nfsio
 25041  248345      0      0  3     0x14280  nfsidl        nfsio
 13619  284963      0      0  3     0x14280  nfsidl        nfsio
 29297  162365      0      0  3     0x14280  nfsidl        nfsio
 85854  304679      0      0  3     0x14280  nfsidl        nfsio
 10981  143761      0      0  3     0x14280  nfsidl        nfsio
 47985  387423      0      0  3     0x14280  nfsidl        nfsio
 54290  461920      0      0  3     0x14280  nfsidl        nfsio
 96671  241571      0      0  3     0x14280  nfsidl        nfsio
 83821  179659   6440      0  3        0x82  kqread        syz-executor
  6440  165864  95383      0  3    0x10008a  sigsusp       ksh
 95383  158770  50458      0  3        0x98  kqread        sshd-session
 50458  202594  41875      0  3        0x92  kqread        sshd-session
 41875  366387      1      0  3        0x88  kqread        sshd
 34570   92539  72390     74  3   0x1100092  bpf           pflogd
 72390  433122      1      0  3        0x80  sbwait        pflogd
  4898   90676  90528     73  2   0x1100010                syslogd
 90528  345231      1      0  3    0x100082  sbwait        syslogd
 64329  172910      1      0  3    0x100080  kqread        resolvd
 97414   55808  55332     77  3    0x100092  kqread        dhcpleased
 40641  484663  55332     77  3    0x100092  kqread        dhcpleased
 55332  522033      1      0  3        0x80  kqread        dhcpleased
 71144  291703      0      0  2     0x14200                smr
 52463  453556      0      0  2     0x14200                zerothread
 80173   71333      0      0  3     0x14200  aiodoned      aiodoned
 45406  108583      0      0  3     0x14200  syncer        update
 24329  516868      0      0  3     0x14200  cleaner       cleaner
 55104  249134      0      0  7     0x14200                reaper
 79149  330344      0      0  3     0x14200  pgdaemon      pagedaemon
 24074    8025      0      0  3     0x14200  bored         viomb
 82136  519522      0      0  3  0x40014200  acpi0         acpi0
 72320   84732      0      0  3  0x40014200                idle1
 65449   64704      0      0  3     0x14200  bored         softnet3
 22764  371764      0      0  3     0x14200  bored         softnet2
 11563  375706      0      0  3     0x14200  bored         softnet1
 69769  258860      0      0  3     0x14200  bored         softnet0
 91798    3831      0      0  3     0x14200  bored         systqmp
 57169  235554      0      0  3     0x14200  bored         systq
 87313  447651      0      0  2     0x14200                softclockmp
 93458  324285      0      0  2  0x40014200                softclock
 61993  281709      0      0  3  0x40014200                idle0
     1  455041      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 31811 (syz-executor) thread 0xffff8000ffff5978 (144350)
exclusive rrwlock inode r = 0 (0xfffffd8060adac48)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vget+0x2bd sys/kern/vfs_subr.c:676
#6  ktrwriteraw+0x172 sys/kern/kern_ktrace.c:679
#7  ktrsyscall+0x31d sys/kern/kern_ktrace.c:182
#8  syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline]
#8  syscall+0x2eb sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83553178)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  syscall+0x2cc mi_syscall sys/sys/syscall_mi.h:156 [inline]
#1  syscall+0x2cc sys/arch/amd64/amd64/trap.c:577
#2  Xsyscall+0x128
Process 4898 (syslogd) thread 0xffff8000ffffdbe8 (90676)
exclusive rrwlock inode r = 0 (0xfffffd806e4c41b0)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2926
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10217  10233K   10419K 166960K     12638        0
            pcb    17     12K      12K 166960K       165        0
         rtable   219      6K       7K 166960K      1618        0
             pf    35     17K      22K 166960K       170        0
         ifaddr    42      7K       8K 166960K       210        0
        ifgroup    55      2K       2K 166960K       240        0
         sysctl     3      0K       0K 166960K         3        0
       counters    64     36K      36K 166960K       158        0
       ioctlops     0      0K       4K 166960K      1590        0
            iov     0      0K      24K 166960K        70        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1451     91K      92K 166960K      2467        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        15        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        27        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1690    195K     286K 166960K     12418        0
      file desc    17     61K      89K 166960K      1374        0
          sigio     0      0K       0K 166960K        11        0
           proc    72     91K     128K 166960K      1648        0
        subproc   104      6K       6K 166960K       599        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       108        0
       in_multi    96      7K       7K 166960K       535        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     1      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   115    519K     519K 166960K       115        0
           exec     0      0K       1K 166960K       955        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   226     72K      93K 166960K     12064        0
       UVM aobj    22      3K       3K 166960K        26        0
     pinsyscall    42     84K     102K 166960K      3445        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        42        0
            NDP    12      0K       2K 166960K       151        0
           temp    62   6816K    6938K 166960K     37840        0
         kqueue    13     20K      28K 166960K       120        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      292    0      289     3     2     1     3     0     8    0
rtentry    112      555    0      455     5     1     4     4     0     8    1
unpcb      144      849    0      832     8     7     1     4     0     8    0
syncache   336        6    0        6     2     2     0     1     0     8    0
tcpqe       32        2    0        2     2     2     0     1     0     8    0
tcpcb      808      259    0      255     7     6     1     4     0     8    0
arp        120      101    0       83     1     0     1     1     0     8    0
inpcb      336     1150    0     1143    17    15     2     7     0     8    1
nd6        136      143    0      118     1     0     1     1     0     8    0
pkpcb       40        2    0        2     2     2     0     1     0     8    0
kcovpl      48       46    0       38     1     0     1     1     0     8    0
ppxss      1168       4    0        4     3     3     0     1     0     8    0
pffrag     232       24    0       19     1     0     1     1     0   482    0
pffrnode    88       24    0       19     1     0     1     1     0     8    0
pffrent     40       85    0       80     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       2    0        2     1     1     0     1     0     8    0
pfanchor   1288       2    0        0     1     0     1     1     0     8    0
pftag       88        2    0        2     1     1     0     1     0     8    0
pfstitem    24      116    0       85     1     0     1     1     0     8    0
pfstkey    128      119    0       87     2     0     2     2     0     8    0
pfstate    376      116    0       86     5     1     4     4     0     8    0
pfrule     1344      30    0       24     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2171    0     1755    33     5    28    30     0     8    2
art_table   32     2172    0     1755     4     0     4     4     0     8    0
art_node    16      553    0      463     1     0     1     1     0     8    0
sysvmsgpl   40        9    0        4     2     1     1     1     0     8    0
semapl     112       25    0       15     1     0     1     1     0     8    0
shmpl      112       23    0        4     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2786    0     1207    99     0    99    99     0     8    0
ffsino     272     2786    0     1207   106     0   106   106     0     8    0
nchpl      144     3981    0     3373    65    39    26    65     0     8    1
uvmvnodes   80     3806    0        0    78     0    78    78     0     8    0
vnodes     216     3806    0        0   212     0   212   212     0     8    0
namei      1024   17188    0    17188     6     4     2     2     0     8    2
percpumem   16       93    0       47     1     0     1     1     0     8    0
kstatmem   264      118    0       94     2     0     2     2     0     8    0
scsiplug    72        2    0        2     2     1     1     1     0     8    1
scxspl     216    28848    0    28848    11    10     1     8     1     8    1
plimitpl   152      156    0      138     1     0     1     1     0     8    0
sigapl     424     1622    0     1550    10     1     9     9     0     8    0
futexpl     64    12314    0    12311     5     4     1     1     0     8    0
knotepl    120      534    0        0    17     0    17    17     0     8    0
kqueuepl   216      308    0      298     7     6     1     5     0     8    0
pipepl     320      324    0      297     5     2     3     5     0     8    0
fdescpl    496     1581    0     1550     8     3     5     5     0     8    0
filepl     152     8729    0     8482    30    18    12    19     0     8    1
lockfpl    104      235    0      233     1     0     1     1     0     8    0
lockfspl    48      104    0      102     1     0     1     1     0     8    0
sessionpl  144       63    0       54     1     0     1     1     0     8    0
pgrppl      48      115    0       98     1     0     1     1     0     8    0
ucredpl    104      828    0      814     1     0     1     1     0     8    0
zombiepl   144     1551    0     1550     1     0     1     1     0     8    0
processpl  1160    1622    0     1550     6     0     6     6     0     8    0
procpl     648     2712    0     2632    11     3     8     8     0     8    0
srpgc       96        2    0        2     1     1     0     1     0     8    0
sosppl     168        4    0        4     2     2     0     1     0     8    0
sockpl     664     2298    0     2271    25    21     4    12     0     8    1
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096       2    0        0     1     0     1     1     0     8    0
mcl2k      2048     252    0        0    31     0    31    31     0     8    0
mtagpl      96       11    0        0     1     0     1     1     0     8    0
mbufpl     256      610    0        0    34     0    34    34     0     8    0
bufpl      280     7978    0     1074   494     0   494   494     0     8    0
anonpl      24   305927    0   302528    78    21    57    76     0   185   29
amapchunkpl 152   39882    0    39411    42    12    30    41     0   158    6
amappl16   200     6137    0     6120    21    17     4    14     0     8    1
amappl15   192       11    0       11     1     1     0     1     0     8    0
amappl14   184      197    0      184     1     0     1     1     0     8    0
amappl13   176       18    0       18     2     2     0     1     0     8    0
amappl12   168     2855    0     2824     4     2     2     3     0     8    0
amappl11   160       64    0       50     1     0     1     1     0     8    0
amappl10   152       13    0       13     2     2     0     1     0     8    0
amappl9    144      143    0      143     1     1     0     1     0     8    0
amappl8    136       24    0       22     1     0     1     1     0     8    0
amappl7    128      180    0      168     1     0     1     1     0     8    0
amappl6    120      618    0      616     1     0     1     1     0     8    0
amappl5    112      309    0      298     1     0     1     1     0     8    0
amappl4    104      431    0      413     1     0     1     1     0     8    0
amappl3     96     7451    0     7345     4     0     4     4     0     8    0
amappl2     88     1233    0     1165     2     0     2     2     0     8    0
amappl1     80    14018    0    13444    14     0    14    14     0     8    0
amappl      88    11348    0    11183     6     1     5     5     0    92    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        8    0        8     2     2     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       25    0        4     1     0     1     1     0     8    0
uaddrrnd    24     1581    0     1550     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1581    0     1550     1     0     1     1     0     8    0
vmmpekpl   168    13864    0    13818     3     0     3     3     0     8    0
vmmpepl    168   104288    0   102463   106    20    86    91     0   357    2
vmsppl     440     1580    0     1550     6     2     4     5     0     8    0
rwobjpl     56    35915    0    31180    69     1    68    68     0     8    0
pdppl      4096    3169    0     3100   148    77    71    83     0     8    2
pvpl        32    33017    0        0   266     0   266   266     0   265    0
pmappl     248     1580    0     1550     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      499    0      116    12     0    12    12     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 ffs_cgread sys/ufs/ffs/ffs_alloc.c:856 [inline]
ffs_alloccg(fffffd8060adabb0,4,78a78,800) at ffs_alloccg+0x187 sys/ufs/ffs/ffs_alloc.c:948
ffs_alloc(fffffd8060adabb0,7,78a78,800,fffffd807f7d3208,ffff80002a1065a8) at ffs_alloc+0x31a sys/ufs/ffs/ffs_alloc.c:140
ffs2_balloc(fffffd8060adabb0,1c000,63,fffffd807f7d3208,1,ffff80002a1066b8) at ffs2_balloc+0x7cd sys/ufs/ffs/ffs_balloc.c:533
ffs_write(ffff80002a106740) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345
VOP_WRITE(fffffd8069d2c960,ffff80002a1067f8,3,fffffd807f7d3208) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
ktrwriteraw(ffff8000ffff5978,fffffd8069d2c960,fffffd807f7d3208,ffff80002a1068c0,ffff80002a1068a0) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682
ktrsyscall(ffff8000ffff5978,b,20,ffff80002a106a50) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182
syscall(ffff80002a106a50) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline]
syscall(ffff80002a106a50) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x74f5b3e6e1d0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_lock(ffffffff83552f70) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83552f70) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144
reaper(ffff800029fd8f38) at reaper+0x24b sys/kern/kern_exit.c:481
end trace frame: 0x0, count: 9
ddb{1}> trace
x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_lock(ffffffff83552f70) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83552f70) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144
reaper(ffff800029fd8f38) at reaper+0x24b sys/kern/kern_exit.c:481
end trace frame: 0x0, count: -6

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/14 05:48 openbsd 3800fc3581d8 ff60e2ca .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: ffs_alloccg
* Struck through repros no longer work on HEAD.