syzbot


uvm_fault: db_enter (6)

Status: upstream: reported on 2025/02/04 07:12
Reported-by: syzbot+823760782418600844b6@syzkaller.appspotmail.com
First crash: 1d12h, last: 3h13m
Similar bugs (5)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: db_enter (5) 368 77d 513d 0/3 auto-obsoleted due to no activity on 2025/01/09 05:55
openbsd uvm_fault: db_enter (2) 1 1001d 1001d 0/3 closed as invalid on 2022/05/11 17:28
openbsd uvm_fault: db_enter 43 1659d 1713d 0/3 closed as dup on 2020/05/30 07:36
openbsd uvm_fault: db_enter (4) 30 615d 957d 0/3 auto-obsoleted due to no activity on 2023/08/30 12:34
openbsd uvm_fault: db_enter (3) 1 970d 970d 0/3 closed as invalid on 2022/06/11 05:12

Sample crash report:
uvm_fault(fffffd807eb8d720,e7000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:668
kpageflttrap(ffff80002a4d68c0,e7a40) at kpageflttrap+0x2d0 sys/arch/amd64/amd64/trap.c:279
kerntrap(ffff80002a4d68c0) at kerntrap+0x14a sys/arch/amd64/amd64/trap.c:332
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyout() at copyout+0x57
syscall(ffff80002a4d6d10) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a4d6d10) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x83f6deb10b0, count: -16
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437
witness_checkorder(fffffd806911e1b8,9,0) at witness_checkorder+0x1047
rw_do_enter_write(fffffd806911e1a0,1) at rw_do_enter_write+0xb7 sys/kern/kern_rwlock.c:233
rrw_enter(fffffd806911e1a0,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:616
VOP_LOCK(fffffd806bf14a80,2001) at VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
vn_lock(fffffd806bf14a80,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:570
vfs_lookup(ffff80003c590208) at vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
namei(ffff80003c590208) at namei+0x7aa sys/kern/vfs_lookup.c:250
unp_connect(ffff8000013f72e8,fffffd8074da7d00,ffff80003c681708) at unp_connect+0x27d sys/kern/uipc_usrreq.c:868
uipc_dgram_send(ffff8000013f72e8,fffffd807eb95e00,fffffd8074da7d00,0) at uipc_dgram_send+0x131 sys/kern/uipc_usrreq.c:607
sosend(ffff8000013f72e8,fffffd8074da7d00,ffff80003c590488,0,0,0) at sosend+0x804
sendit(ffff80003c681708,a,ffff80003c590600,0,ffff80003c5906c0) at sendit+0x721 sys/kern/uipc_syscalls.c:779
sys_sendmsg(ffff80003c681708,ffff80003c590770,ffff80003c5906c0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:597
syscall(ffff80003c590770) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c590770) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xca8593e3d10, count: -15

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/05 15:59 openbsd 9d84dc8a699e 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2025/02/05 15:50 openbsd 9d84dc8a699e 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2025/02/05 04:53 openbsd 9d84dc8a699e 5896748e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2025/02/04 08:21 openbsd 1eab3ea7ad62 8f267cef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
2025/02/04 07:11 openbsd 1eab3ea7ad62 8f267cef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: db_enter
* Struck through repros no longer work on HEAD.