syzbot


kernel: page fault trap, code=NUM (3)

Status: upstream: reported C repro on 2023/08/03 20:12
Reported-by: syzbot+850b8cb78ee09d031793@syzkaller.appspotmail.com
First crash: 268d, last: 1d21h
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd kernel: page fault trap, code=NUM (2) 1 358d 358d 0/3 auto-obsoleted due to no activity on 2023/08/03 11:48
openbsd kernel: page fault trap, code=NUM syz 1 616d 616d 0/3 closed as invalid on 2022/08/21 06:55
openbsd kernel: page fault trap, code=0 (4) 2 979d 1008d 0/3 auto-closed as invalid on 2021/11/20 18:10

Sample crash report:
kernel: page fault trap, code=0
Faulted in DDB; continuing...
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10138   6382K    6413K 166960K     11216        0
            pcb    15     10K      10K 166960K        15        0
         rtable    58      1K       2K 166960K       110        0
             pf    12      6K       6K 166960K        12        0
         ifaddr    11      5K       5K 166960K        11        0
        ifgroup    17      1K       1K 166960K        17        0
       counters    22     16K      16K 166960K        22        0
       ioctlops     0      0K       2K 166960K        21        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1259     79K      79K 166960K      1276        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc     1      0K       0K 166960K         1        0
           proc    55     58K      59K 166960K       246        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
       in_multi    11      0K       0K 166960K        11        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    25    122K     122K 166960K        25        0
           exec     0      0K       1K 166960K       243        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap    93      4K       5K 166960K      2327        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    22     44K      48K 166960K       841        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP     3      0K       0K 166960K         3        0
           temp     1   6788K    6852K 166960K      2773        0
         kqueue    11     16K      18K 166960K        24        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120       20    0       17     1     0     1     1     0     8    0
rtentry    112       23    0        1     1     0     1     1     0     8    0
unpcb      144       33    0       20     1     0     1     1     0     8    0
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpqe       32       76    0       76     1     0     1     1     0     8    1
tcpcb      808        8    0        5     1     0     1     1     0     8    0
arp         88        2    0        0     1     0     1     1     0     8    0
inpcb      360       26    0       20     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256       96    0        0     6     0     6     6     0     8    0
art_table   32       97    0        0     1     0     1     1     0     8    0
art_node    16       22    0        2     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dirhash: pool(0xffffffff82e0c2d8:dirhash): free list modified: page 0xffff80002a614000; item ordinal 0; addr 0xffff80002a615000 (p 0xfffffd806e7ae000); offset 0x0=0x0
pool(dirhash): free list modified: page 0xffff80002a614000; item ordinal 0; addr 0xffff80002a615000 (p 0xfffffd806e7ae000); offset 0x0=0x0
dirhash: pool(0xffffffff82e0c2d8:dirhash): page inconsistency: page 0xffff80002a614000; item ordinal 1; addr 0xf3f29009b3a163e5
dino2pl    256     1503    0       40    92     0    92    92     0     8    0
ffsino     240     1503    0       40    87     0    87    87     0     8    0
nchpl      144     1687    0       47    61     0    61    61     0     8    0
uvmvnodes   80     1513    0        0    31     0    31    31     0     8    0
vnodes     216     1513    0        0    85     0    85    85     0     8    0
namei      1024    4346    0     4346     1     0     1     1     0     8    1
namei: pool(0xffffffff82e4c118:namei): free list modified: page 0xffff80002a5f6000; item ordinal 0; addr 0xffff80002a5f7400 (p 0xfffffd807f7e4000); offset 0x0=0x0
pool(namei): free list modified: page 0xffff80002a5f6000; item ordinal 0; addr 0xffff80002a5f7400 (p 0xfffffd807f7e4000); offset 0x0=0x0
namei: pool(0xffffffff82e4c118:namei): page inconsistency: page 0xffff80002a5f6000; item ordinal 1; addr 0x3e4833399bf58809
kstatmem   264        6    0        0     1     0     1     1     0     8    0
scxspl     216     5449    0     5448     8     0     8     8     1     8    7
plimitpl   152       16    0       10     1     0     1     1     0     8    0
sigapl     424      310    0      280     4     0     4     4     0     8    0
knotepl    120     3625    0     3596     2     0     2     2     0     8    1
kqueuepl   184       20    0       13     1     0     1     1     0     8    0
pipepl     288       87    0       84     1     0     1     1     0     8    0
fdescpl    432      294    0      280     2     0     2     2     0     8    0
filepl     120     1134    0     1079     2     0     2     2     0     8    0
lockfpl    104        9    0        6     1     0     1     1     0     8    0
lockfspl    48        6    0        3     1     0     1     1     0     8    0
sessionpl  144       17    0        9     1     0     1     1     0     8    0
pgrppl      48       17    0        9     1     0     1     1     0     8    0
ucredpl    104       67    0       56     1     0     1     1     0     8    0
zombiepl   144      280    0      280     1     0     1     1     0     8    1
processpl  1072     310    0      280     3     0     3     3     0     8    0
procpl     680      310    0      280     3     0     3     3     0     8    0
procpl: pool(0xffffffff82e14688:procpl): free list modified: page 0xffff80002a5d6000; item ordinal 0; addr 0xffff80002a5d72a0 (p 0xfffffd807f7e4000); offset 0x0=0x0
pool(procpl): free list modified: page 0xffff80002a5d6000; item ordinal 0; addr 0xffff80002a5d72a0 (p 0xfffffd807f7e4000); offset 0x0=0x0
procpl: pool(0xffffffff82e14688:procpl): page inconsistency: page 0xffff80002a5d6000; item ordinal 1; addr 0xaf15f960f21cff50
procpl: pool(0xffffffff82e14688:procpl): free list modified: page 0xffff80002a62c000; item ordinal 0; addr 0xffff80002a62c2b8 (p 0xfffffd806f24c000); offset 0x0=0x0
pool(procpl): free list modified: page 0xffff80002a62c000; item ordinal 0; addr 0xffff80002a62c2b8 (p 0xfffffd806f24c000); offset 0x0=0x0
procpl: pool(0xffffffff82e14688:procpl): page inconsistency: page 0xffff80002a62c000; item ordinal 1; addr 0x6ca112b099faaafd
sockpl     488       79    0       57     3     0     3     3     0     8    0
mcl8k      8192       4    0        4     1     0     1     1     0     8    1
mcl4k      4096      10    0       10     1     0     1     1     0     8    1
mcl2k      2048   12096    0    12053    35    21    14    35     0     8    8
mtagpl      96        4    0        4     1     0     1     1     0     8    1
mbufpl     256    19412    0    19365    19     7    12    19     0     8    7
bufpl      280     2479    0       89   171     0   171   171     0     8    0
anonpl      24   215250    0   213456    24     0    24    24     0   188   13
amapchunkpl 152    9373    0     9241     7     0     7     7     0   158    1
amappl16   200     6490    0     6489     5     0     5     5     0     8    4
amappl15   192       10    0       10     1     0     1     1     0     8    1
amappl14   184      104    0       94     1     0     1     1     0     8    0
amappl13   176       16    0       16     1     0     1     1     0     8    1
amappl12   168      793    0      781     1     0     1     1     0     8    0
amappl11   160       55    0       45     1     0     1     1     0     8    0
amappl10   152       21    0       21     1     0     1     1     0     8    1
amappl9    144      123    0      123     1     0     1     1     0     8    1
amappl8    136       31    0       30     1     0     1     1     0     8    0
amappl7    128       17    0       16     1     0     1     1     0     8    0
amappl6    120      167    0      155     1     0     1     1     0     8    0
amappl5    112      145    0      133     1     0     1     1     0     8    0
amappl4    104      412    0      384     1     0     1     1     0     8    0
amappl3     96     2379    0     2353     1     0     1     1     0     8    0
amappl2     88      571    0      520     2     0     2     2     0     8    0
amappl1     80     8773    0     8371    11     0    11    11     0     8    1
amappl      88     2029    0     1981     2     0     2     2     0    92    0
dma4096    4096       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     0     1     1     0     8    1
dma128     128      253    0      253     1     0     1     1     0     8    1
dma64       64        6    0        6     1     0     1     1     0     8    1
dma32       32        7    0        7     1     0     1     1     0     8    1
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      294    0      280     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      294    0      280     1     0     1     1     0     8    0
vmmpekpl   168     5602    0     5586     1     0     1     1     0     8    0
vmmpepl    168    35896    0    34986    46     0    46    46     0   357    3
vmsppl     352      293    0      280     2     0     2     2     0     8    0
rwobjpl     24    20309    0    18197    14     0    14    14     0     8    0
pdppl      4096     594    0      560    48    14    34    40     0     8    0
pvpl        32   307258    0   303184    51     0    51    51     0   265   17
pmappl     216      293    0      280     1     0     1     1     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      303    0       42     9     0     9     9     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
end trace frame: 0x0, count: -1
ddb> machine ddbcpu 1
No such command
ddb> trace
end trace frame: 0x0, count: -1

Crashes (41):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/02 12:39 openbsd 2ee472d028ec 6ee49f2e .config console log report syz C [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/26 05:52 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/25 04:47 openbsd 53a4f4198df9 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/24 02:12 openbsd e6c7c102cf5d 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/22 02:47 openbsd e1cb65bb8aa8 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/21 04:01 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/20 21:20 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/20 15:15 openbsd 55906bae5af5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/20 14:07 openbsd 55906bae5af5 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/10 00:25 openbsd 1e30b36946b4 171ec371 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/05 12:14 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/02 13:40 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/04/01 10:52 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/04/01 07:21 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/30 04:18 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/29 03:08 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/28 12:23 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/03/19 02:13 openbsd a69db6767cfd 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/17 13:15 openbsd d108608d837e 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/14 05:55 openbsd 8f98edf97379 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/14 00:55 openbsd 8f98edf97379 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/03/12 02:28 openbsd b2d77cef2d2b 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/03/10 17:48 openbsd 6e1e34013c14 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/06 22:02 openbsd aa2f298a5965 f39a7eed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/03/05 04:52 openbsd 2a47495d462e 5fc53669 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/02 20:18 openbsd 6a91963006cc 25905f5d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/03/01 23:02 openbsd 609b293af4bd 83acf9e0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/03/01 01:51 openbsd b0ca02faf19d 352ab904 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/02/27 13:23 openbsd 17712d2fc01b 05e69c83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/02/25 07:19 openbsd 5ee39ea80bba 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/02/16 10:26 openbsd ac16f2e6ef35 578f7538 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/01/30 01:23 openbsd 60465fd700e3 991a98f4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2024/01/23 22:00 openbsd c96eac122127 74d5594c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2024/01/10 03:22 openbsd 29ae6bbdbe85 b438bd66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2023/12/31 04:10 openbsd b9886d31b48d fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2023/12/25 16:12 openbsd 0793d0d12742 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2023/11/21 09:34 openbsd 4ca0067f0867 cb976f63 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2023/10/31 04:09 openbsd 4652e3440d80 b5729d82 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
2023/10/21 09:29 openbsd 8a9ff49d785d 361b23dc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2023/08/20 17:33 openbsd 7927db41a2d7 d216d8a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main kernel: page fault trap, code=NUM
2023/08/03 20:12 openbsd 95ed13e137a1 b95100df .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore kernel: page fault trap, code=NUM
* Struck through repros no longer work on HEAD.