syzbot


uvm_fault: x86_ipi_db (8)

Status: upstream: reported on 2022/02/19 02:28
Reported-by: syzbot+8b6d073735f11e92c455@syzkaller.appspotmail.com
First crash: 797d, last: 22h02m
Similar bugs (7)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: x86_ipi_db (3) 4 1157d 1174d 0/3 auto-closed as invalid on 2021/05/25 04:20
openbsd uvm_fault: x86_ipi_db (6) 1 974d 974d 0/3 closed as invalid on 2021/08/26 17:38
openbsd uvm_fault: x86_ipi_db (2) 1 1207d 1207d 0/3 closed as invalid on 2021/01/29 06:54
openbsd uvm_fault: x86_ipi_db (5) 1 978d 978d 0/3 closed as invalid on 2021/08/23 05:23
openbsd uvm_fault: x86_ipi_db (7) 4 848d 848d 3/3 fixed on 2021/12/30 22:14
openbsd uvm_fault: x86_ipi_db 1 1211d 1211d 0/3 closed as invalid on 2021/01/03 08:45
openbsd uvm_fault: x86_ipi_db (4) 1 992d 992d 0/3 closed as invalid on 2021/08/08 05:33

Sample crash report:
*cpu0: uvm_fault(0xfffffd8070712530, 0x8, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7302357ef730, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002bc8ade0
rbx                                0
rdx                                0
rcx               0xffff8000ffff7208
rax                             0x2a
r8                0xffff80002bc8ad10
r9                                 0
r10               0x69852dd3b171284f
r11               0x4e374bc128625fe9
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff815574c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff80002bc8ad60
ss                                 0
proc_trampoline+0xc7:   movl    $0,%gs:0x680
ddb{1}> show proc
PROC (syz-executor.2) tid=386261 pid=12375 tcnt=1 stat=onproc
    flags process=8000010<SUGID> proc=0
    runpri=17, usrpri=76, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff80002a1fe540,0xffff80002d6c5278
    process=0xffff80002a2491e8 user=0xffff80002bc85000, vmspace=0xfffffd806a4e36e0
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 14225  147115  12375  32767  2   0x8000010                syz-executor.2
 39292  482371  82723  32767  2   0x8000010                syz-executor.0
 19654  271392   3084  32767  2   0x8000010                syz-executor.6
 19654  209326   3084  32767  7   0xc000010                syz-executor.6
 69524   33980  35857  32767  2   0x8000010                syz-executor.1
 69524   85152  35857  32767  3   0xc000090  netcon        syz-executor.1
*12375  386261  11898  32767  7   0x8000010                syz-executor.2
 11898  431029  32377      0  3   0x8000082  wait          syz-executor.2
  3084  351716  34830  32767  3   0x8000090  nanoslp       syz-executor.6
 34830  395031  32377      0  3   0x8000082  wait          syz-executor.6
 75378  279956  86987  32767  2   0x8000010                syz-executor.5
 86987  283686  32377      0  3   0x8000082  wait          syz-executor.5
 35857  221794    155  32767  2   0x8000490                syz-executor.1
   155   98322  32377      0  3   0x8000082  wait          syz-executor.1
 85997   34573  55477  32767  2   0x8000010                syz-executor.4
 55477  487394  32377      0  3   0x8000082  wait          syz-executor.4
 82294  461804  35136  32767  2   0x8000010                syz-executor.3
 35136  142366  32377      0  3   0x8000082  wait          syz-executor.3
 82723  504195      1  32767  3   0x8000090  nanoslp       syz-executor.0
 13993  140492      1  32767  2   0x8000490                syz-executor.7
   614  320387      0      0  3     0x14200  bored         sosplice
 32377   42948   8080      0  3  0x1a000082  wait          syz-fuzzer
 32377  235556   8080      0  2  0x1e000482                syz-fuzzer
 32377  271168   8080      0  3  0x1e000082  wait          syz-fuzzer
 32377  522359   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  450477   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  520893   8080      0  3  0x1e000082  wait          syz-fuzzer
 32377  201798   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  165181   8080      0  3  0x1e000082  wait          syz-fuzzer
 32377  489081   8080      0  3  0x1e000082  wait          syz-fuzzer
 32377    3543   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  126467   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  100538   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377  320378   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
 32377   26042   8080      0  3  0x1e000082  wait          syz-fuzzer
 32377  306241   8080      0  2  0x1e000082                syz-fuzzer
 32377  435232   8080      0  3  0x1e000082  thrsleep      syz-fuzzer
  8080  237722   8628      0  3   0x810008a  sigsusp       ksh
  8628  131666  92872      0  3  0x1800009a  kqread        sshd
 80901  124746      1      0  3  0x18100083  ttyin         getty
 92872  454570      1      0  3  0x18000088  kqread        sshd
 74973   47608  66447     73  2  0x19100010                syslogd
 66447  465146      1      0  3  0x18100082  sbwait        syslogd
  3416  362889      1      0  3  0x18100080  kqread        resolvd
 22911  238325  98717     77  3  0x18100092  kqread        dhcpleased
 13608  243818  98717     77  3  0x18100092  kqread        dhcpleased
 98717  496661      1      0  3  0x18000080  kqread        dhcpleased
  8241  133117      0      0  3     0x14200  bored         smr
 99570  143964      0      0  2     0x14200                zerothread
 37616  338715      0      0  3     0x14200  aiodoned      aiodoned
 85486  261743      0      0  3     0x14200  syncer        update
 72897   96608      0      0  3     0x14200  cleaner       cleaner
 63055  436851      0      0  3     0x14200  reaper        reaper
  2229  395380      0      0  3     0x14200  pgdaemon      pagedaemon
 54152   38660      0      0  3     0x14200  bored         viomb
 57078  156874      0      0  3  0x40014200  acpi0         acpi0
 99955  490576      0      0  3  0x40014200                idle1
 62953  130096      0      0  3     0x14200  bored         softnet3
 65440   77651      0      0  3     0x14200  bored         softnet2
 35142  108246      0      0  3     0x14200  bored         softnet1
 62547   47648      0      0  3     0x14200  bored         softnet0
 17492  365812      0      0  3     0x14200  bored         systqmp
  2928  388165      0      0  3     0x14200  bored         systq
 78878  205001      0      0  3     0x14200  tmoslp        softclockmp
 88990  325751      0      0  2  0x40014200                softclock
 69398  294728      0      0  3  0x40014200                idle0
     1  373567      0      0  3   0x8000082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd8069cb5ab8)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pmap_enter+0x1c6 rcr3 machine/cpufunc.h:141 [inline]
#3  pmap_enter+0x1c6 pmap_map_ptes sys/arch/amd64/amd64/pmap.c:425 [inline]
#3  pmap_enter+0x1c6 sys/arch/amd64/amd64/pmap.c:2716
#4  uvm_fault_upper+0x2b5 sys/uvm/uvm_fault.c:1056
#5  uvm_fault+0x157 sys/uvm/uvm_fault.c:608
#6  upageflttrap+0x8e sys/arch/amd64/amd64/trap.c:188
#7  usertrap+0x22a sys/arch/amd64/amd64/trap.c:436
#8  recall_trap+0x8
Process 19654 (syz-executor.6) thread 0xffff80002d6cc7d8 (209326)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82df8e98)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x491 sys/kern/sched_bsd.c:470
#3  sleep_finish+0x19a sys/kern/kern_synch.c:417
#4  biowait+0x91 sys/kern/vfs_bio.c:1254
#5  bwrite+0x1fe sys/kern/vfs_bio.c:766
#6  VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640
#7  ufs_direnter+0x60e sys/ufs/ufs/ufs_lookup.c:833
#8  ufs_makeinode+0x3c2 sys/ufs/ufs/ufs_vnops.c:1769
#9  ufs_symlink+0x4b sys/ufs/ufs/ufs_vnops.c:1298
#10 VOP_SYMLINK+0xd7 sys/kern/vfs_vops.c:426
#11 dosymlinkat+0x158 sys/kern/vfs_syscalls.c:1809
#12 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#12 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#13 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807d24d708)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vget+0x1fd sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
#8  ffs_inode_alloc+0x1e4 sys/ufs/ffs/ffs_alloc.c:393
#9  ufs_makeinode+0xb0 sys/ufs/ufs/ufs_vnops.c:1733
#10 ufs_symlink+0x4b sys/ufs/ufs/ufs_vnops.c:1298
#11 VOP_SYMLINK+0xd7 sys/kern/vfs_vops.c:426
#12 dosymlinkat+0x158 sys/kern/vfs_syscalls.c:1809
#13 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#13 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
Process 12375 (syz-executor.2) thread 0xffff8000ffff7208 (386261)
exclusive rwlock amaplk r = 0 (0xfffffd806ba7f5c8)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  uvm_fault_check+0x401 sys/uvm/uvm_fault.c:782
#2  uvm_fault+0xf2 sys/uvm/uvm_fault.c:600
#3  upageflttrap+0x8e sys/arch/amd64/amd64/trap.c:188
#4  usertrap+0x22a sys/arch/amd64/amd64/trap.c:436
#5  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd806a4e37d0)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1785
#2  uvm_fault_check+0x3e sys/uvm/uvm_fault.c:672
#3  uvm_fault+0xf2 sys/uvm/uvm_fault.c:600
#4  upageflttrap+0x8e sys/arch/amd64/amd64/trap.c:188
#5  usertrap+0x22a sys/arch/amd64/amd64/trap.c:436
#6  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd8069cb5ab8)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pmap_enter+0x1c6 rcr3 machine/cpufunc.h:141 [inline]
#3  pmap_enter+0x1c6 pmap_map_ptes sys/arch/amd64/amd64/pmap.c:425 [inline]
#3  pmap_enter+0x1c6 sys/arch/amd64/amd64/pmap.c:2716
#4  uvm_fault_upper+0x2b5 sys/uvm/uvm_fault.c:1056
#5  uvm_fault+0x157 sys/uvm/uvm_fault.c:608
#6  upageflttrap+0x8e sys/arch/amd64/amd64/trap.c:188
#7  usertrap+0x22a sys/arch/amd64/amd64/trap.c:436
#8  recall_trap+0x8
Process 75378 (syz-executor.5) thread 0xffff80002d6c4d48 (279956)
exclusive rrwlock inode r = 0 (0xfffffd807d24d928)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  ufs_ihashins+0x46
#5  ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x1e4 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0xe6 sys/ufs/ufs/ufs_vnops.c:1117
#8  VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388
#9  domkdirat+0x125 sys/kern/vfs_syscalls.c:3077
#10 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#10 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806fd97c50)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd3 sys/kern/vfs_lookup.c:418
#6  namei+0x56a sys/kern/vfs_lookup.c:250
#7  domkdirat+0x79 sys/kern/vfs_syscalls.c:3062
#8  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#8  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 85997 (syz-executor.4) thread 0xffff80002a1ff210 (34573)
exclusive rrwlock inode r = 0 (0xfffffd807d24dc58)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vget+0x1fd sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
#8  ufs_lookup+0x1373 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x5c sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6f8 sys/kern/vfs_lookup.c:566
#11 namei+0x56a sys/kern/vfs_lookup.c:250
#12 dounlinkat+0x9d sys/kern/vfs_syscalls.c:1855
#13 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#13 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd807d2add60)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd3 sys/kern/vfs_lookup.c:418
#6  namei+0x56a sys/kern/vfs_lookup.c:250
#7  dounlinkat+0x9d sys/kern/vfs_syscalls.c:1855
#8  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#8  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 82294 (syz-executor.3) thread 0xffff80002d6c4308 (461804)
exclusive rrwlock inode r = 0 (0xfffffd807d24da38)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vget+0x1fd sys/kern/vfs_subr.c:676
#6  ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119
#7  ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1201
#8  ufs_lookup+0x1373 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x5c sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x6f8 sys/kern/vfs_lookup.c:566
#11 namei+0x56a sys/kern/vfs_lookup.c:250
#12 dounlinkat+0x9d sys/kern/vfs_syscalls.c:1855
#13 syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#13 syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806b83ff78)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0xd3 sys/kern/vfs_lookup.c:418
#6  namei+0x56a sys/kern/vfs_lookup.c:250
#7  dounlinkat+0x9d sys/kern/vfs_syscalls.c:1855
#8  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#8  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 74973 (syslogd) thread 0xffff8000ffffdc40 (47608)
exclusive rrwlock inode r = 0 (0xfffffd806e65a920)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1187
#1  rw_enter+0x32d sys/kern/kern_rwlock.c:309
#2  rrw_enter+0x91 sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0x8b sys/kern/vfs_vops.c:518
#4  vn_lock+0x85 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0xf1 sys/kern/vfs_syscalls.c:2904
#6  syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
#6  syscall+0x854 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10186   6409K    6419K 166960K     11397        0
            pcb    17     12K      12K 166960K        17        0
         rtable   240      6K       7K 166960K      2206        0
             pf    29      8K       8K 166960K       117        0
         ifaddr    44     15K      15K 166960K       226        0
        ifgroup    50      2K       2K 166960K       226        0
         sysctl     4      1K       1K 166960K         4        0
       counters    64     36K      36K 166960K       152        0
       ioctlops     0      0K       2K 166960K       184        0
            iov     0      0K      30K 166960K       598        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1377     87K      87K 166960K      2932        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K       220        0
         VM map     2      1K       1K 166960K         2        0
            sem    10      1K       1K 166960K        11        0
        dirhash    12      2K       3K 166960K       402        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    20     73K     117K 166960K      7694        0
          sigio     0      0K       0K 166960K       183        0
           proc    56     78K     127K 166960K      2386        0
        subproc   104      6K       7K 166960K       910        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K      1670        0
       in_multi    99      7K       7K 166960K       950        0
    ether_multi     1      0K       0K 166960K        53        0
            mrt     3      0K       0K 166960K         7        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   133    599K     599K 166960K       133        0
           exec     0      0K       1K 166960K      1691        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   268     77K     114K 166960K     68372        0
       UVM aobj   131      4K       8K 166960K       151        0
     pinsyscall    40     80K     104K 166960K      9996        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       589        0
            NDP    11      0K       2K 166960K       159        0
           temp    74   6820K    6948K 166960K     26046        0
         kqueue    12     18K      33K 166960K      1291        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      995    0      992     1     0     1     1     0     8    0
rtentry    112      701    0      588     4     0     4     4     0     8    0
unpcb      144     6795    0     6781    28    27     1     6     0     8    0
syncache   336        4    0        4     1     1     0     1     0     8    0
sackhl      24        6    0        6     6     6     0     1     0     8    0
tcpqe       32       42    0       42     6     6     0     1     0     8    0
tcpcb      808     3360    0     3353    67    66     1     8     0     8    0
arp        120      106    0       88     1     0     1     1     0     8    0
ipq         40       35    0       34     8     7     1     1     0     8    0
ipqe        40      649    0      648     8     7     1     1     0     8    0
inpcb      384     8150    0     8140    97    95     2    15     0     8    0
ip6q        72        1    0        1     1     1     0     1     0     8    0
ip6af       40        1    0        1     1     1     0     1     0     8    0
nd6        136      262    0      235     3     1     2     2     0     8    0
kcovpl      48       70    0       62     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2773    0     2309    45    14    31    33     0     8    0
art_table   32     2774    0     2309     5     0     5     5     0     8    0
art_node    16      700    0      597     1     0     1     1     0     8    0
sysvmsgpl   40       18    0       11     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112        9    0        1     1     0     1     1     0     8    0
shmpl      112      148    0       20     4     0     4     4     0     8    0
dirhash    1024     277    0      260     3     0     3     3     0     8    0
dino2pl    256    12612    0    11058    99     1    98    98     0     8    0
ffsino     272    12612    0    11058   105     0   105   105     0     8    0
nchpl      144    23337    0    21614    66     0    66    66     0     8    0
uvmvnodes   80     9183    0        0   188     0   188   188     0     8    0
vnodes     216     9183    0        0   511     0   511   511     0     8    0
namei      1024   81389    0    81387    38    37     1     2     0     8    0
percpumem   16       90    0       44     1     0     1     1     0     8    0
kstatmem   264      110    0       88     2     0     2     2     0     8    0
scxspl     216   261539    0   261539    58    57     1     8     1     8    1
plimitpl   152     1757    0     1735     9     8     1     2     0     8    0
sigapl     424     7842    0     7791    10     3     7     7     0     8    0
futexpl     64   112682    0   112682    36    35     1     1     0     8    1
knotepl    120     1561    0        0    14     3    11    12     0     8    0
kqueuepl   216     2394    0     2386     8     7     1     3     0     8    0
pipepl     320     1419    0     1391    19    15     4     6     0     8    0
fdescpl    496     7823    0     7792     7     2     5     6     0     8    0
filepl     152    50120    0    49884    40    29    11    16     0     8    0
lockfpl    104     1882    0     1880     1     0     1     1     0     8    0
lockfspl    48      717    0      715     1     0     1     1     0     8    0
sessionpl  144       67    0       51     1     0     1     1     0     8    0
pgrppl      48      217    0      201     1     0     1     1     0     8    0
ucredpl    104    10683    0    10665     1     0     1     1     0     8    0
zombiepl   144     7792    0     7791     1     0     1     1     0     8    0
processpl  1136    7842    0     7791     6     1     5     5     0     8    0
procpl     656    16623    0    16555    16     8     8     8     0     8    0
sosppl     168      190    0      190    57    56     1     1     0     8    1
sockpl     664    16226    0    16199   136   132     4    15     0     8    1
mcl64k     65536     13    0        0     2     0     2     2     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192      10    0        0     2     0     2     2     0     8    0
mcl4k      4096       4    0        0     1     0     1     1     0     8    0
mcl2k2     2112       2    0        0     1     0     1     1     0     8    0
mcl2k      2048    1199    0        0    45    21    24    43     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256     2662    0        0   112     0   112   112     0     8    0
bufpl      280    21743    0    12559   657     0   657   657     0     8    0
anonpl      24  1450163    0  1443998   368   289    79   122     0   186    0
amapchunkpl 152  245624    0   244993   226   184    42    54     0   158    4
amappl16   200    31769    0    31655   313   298    15    32     0     8    0
amappl15   192       96    0       95     1     0     1     1     0     8    0
amappl14   184      321    0      309     2     1     1     2     0     8    0
amappl13   176       65    0       64     1     0     1     1     0     8    0
amappl12   168     9220    0     9183     4     1     3     3     0     8    0
amappl11   160       63    0       52     1     0     1     1     0     8    0
amappl10   152      105    0       96     1     0     1     1     0     8    0
amappl9    144      191    0      191     2     2     0     1     0     8    0
amappl8    136      413    0      366     2     0     2     2     0     8    0
amappl7    128       58    0       43     1     0     1     1     0     8    0
amappl6    120      932    0      920     2     1     1     2     0     8    0
amappl5    112      351    0      337     1     0     1     1     0     8    0
amappl4    104      953    0      917     2     0     2     2     0     8    0
amappl3     96    42254    0    42185     3     0     3     3     0     8    0
amappl2     88     8397    0     8324     4     2     2     4     0     8    0
amappl1     80    35252    0    34739    23    10    13    22     0     8    0
amappl      88    66721    0    66538     6     0     6     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      150    0       20     3     0     3     3     0     8    0
uaddrrnd    24     7823    0     7792     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     7823    0     7792     1     0     1     1     0     8    0
vmmpekpl   168    52288    0    52212     4     0     4     4     0     8    0
vmmpepl    168   484518    0   482593   374   265   109   116     0   357    8
vmsppl     440     7822    0     7792     7     3     4     5     0     8    0
rwobjpl     56   128771    0   118401   196    45   151   153     0     8    0
pdppl      4096   15653    0    15584   494   417    77    91     0     8    8
pvpl        32    45309    0        0   368     2   366   366     0   265    0
pmappl     248     7822    0     7792     4     1     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1019    0      559    14     0    14    14     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffffffff82cfdff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x2e sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(1) at acpitimer_delay+0x4f acpitimer_read sys/dev/acpi/acpitimer.c:141 [inline]
acpitimer_delay(1) at acpitimer_delay+0x4f sys/dev/acpi/acpitimer.c:120
comcnputc(800,29) at comcnputc+0x1d7 sys/dev/ic/com.c:1270
cnputc(29) at cnputc+0x4f sys/dev/cons.c:218
db_putchar(29) at db_putchar+0x3eb sys/ddb/db_output.c:155
kprintf() at kprintf+0x21c1 sys/kern/subr_prf.c:1064
db_printf(ffffffff829059f1) at db_printf+0x89 sys/kern/subr_prf.c:498
fault(ffffffff828b55a2) at fault+0x95 sys/arch/amd64/amd64/trap.c:157
kpageflttrap(ffff800033161750,8) at kpageflttrap+0x2b7 sys/arch/amd64/amd64/trap.c:290
kerntrap(ffff800033161750) at kerntrap+0xf2 sys/arch/amd64/amd64/trap.c:332
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
end trace frame: 0xffff800033161830, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff82cfdff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x2e sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(1) at acpitimer_delay+0x4f acpitimer_read sys/dev/acpi/acpitimer.c:141 [inline]
acpitimer_delay(1) at acpitimer_delay+0x4f sys/dev/acpi/acpitimer.c:120
comcnputc(800,29) at comcnputc+0x1d7 sys/dev/ic/com.c:1270
cnputc(29) at cnputc+0x4f sys/dev/cons.c:218
db_putchar(29) at db_putchar+0x3eb sys/ddb/db_output.c:155
kprintf() at kprintf+0x21c1 sys/kern/subr_prf.c:1064
db_printf(ffffffff829059f1) at db_printf+0x89 sys/kern/subr_prf.c:498
fault(ffffffff828b55a2) at fault+0x95 sys/arch/amd64/amd64/trap.c:157
kpageflttrap(ffff800033161750,8) at kpageflttrap+0x2b7 sys/arch/amd64/amd64/trap.c:290
kerntrap(ffff800033161750) at kerntrap+0xf2 sys/arch/amd64/amd64/trap.c:332
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
fifo_write(ffff800033161840) at fifo_write+0x4f sys/miscfs/fifofs/fifo_vnops.c:273
VOP_WRITE(fffffd807bf27b08,ffff8000331618d8,8,fffffd807f7d7068) at VOP_WRITE+0xc3 sys/kern/vfs_vops.c:245
vn_rdwr(1,fffffd807bf27b08,ffff80002a198000,208,0,1,e4894b059276052c,ffff800033161a00,fffffd807bf27b08,78) at vn_rdwr+0xee sys/kern/vfs_vnops.c:324
ufs_symlink(ffff800033161a00) at ufs_symlink+0x175 sys/ufs/ufs/ufs_vnops.c:1314
VOP_SYMLINK(fffffd8069d2dcc0,ffff800033161b80,ffff800033161bb0,ffff800033161ab0,ffff80002a198000) at VOP_SYMLINK+0xd7 sys/kern/vfs_vops.c:426
dosymlinkat(ffff80002d6cc7d8,20000340,ffffff9c,20000580) at dosymlinkat+0x158 sys/kern/vfs_syscalls.c:1809
syscall(ffff800033161d30) at syscall+0x854 mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff800033161d30) at syscall+0x854 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa652b078900, count: -22
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x680
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7302357ef730, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7302357ef730, count: -1

Crashes (181):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/04/25 22:06 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/23 22:11 openbsd 8cc1b8fa16e2 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/04/23 05:26 openbsd 19e99d061340 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/21 03:41 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/19 09:54 openbsd 78aef4a0e2ce af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/15 11:02 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/14 16:51 openbsd 56d65d052d3a c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/13 03:51 openbsd 93536db294f5 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/04/09 22:59 openbsd 1e30b36946b4 171ec371 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/09 03:33 openbsd 7e284d508f03 f3234354 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/08 17:39 openbsd e16d075e3f83 7591ebb5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/07 20:23 openbsd 424974cc1f1f ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/05 20:43 openbsd 3f7c134ffe9c ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/05 18:40 openbsd 3f7c134ffe9c ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/05 12:24 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/05 01:23 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/04/04 17:48 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/03/28 23:55 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/03/22 20:18 openbsd b98784e6f2e2 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/03/20 22:19 openbsd 110c1584e6f0 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/03/18 12:13 openbsd d1ea0a7c7de9 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/03/14 18:10 openbsd 81c0b8be580e 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/03/07 12:53 openbsd e9310faa4406 2b789849 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/29 08:58 openbsd e5d416df88ac 352ab904 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/28 18:49 openbsd 042f4afa40d2 55d6f11d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/25 11:26 openbsd fd5846a35585 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/24 20:25 openbsd 127fa8d558c3 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/23 21:08 openbsd bbad591d07d4 8d446f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/19 15:56 openbsd 50c1ea79ce0c 96e91f57 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/18 11:19 openbsd 12afce1bef21 578f7538 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/02/15 02:45 openbsd 04fce66c3f2b d9b1cdd5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/28 19:26 openbsd 71e7d8aacb4f cc4a4020 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/24 13:44 openbsd 9cf6efbe4e96 1e153dc8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/24 05:58 openbsd 9cf6efbe4e96 1e153dc8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/23 22:58 openbsd c96eac122127 74d5594c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/22 09:28 openbsd c1e59e835f1f 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/01/20 21:55 openbsd e7a417afe28e 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2024/01/20 19:03 openbsd e7a417afe28e 9bd8dcda .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/18 13:09 openbsd d1ecb0c52710 239abf84 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2024/01/10 19:30 openbsd 5b7944c191c0 04815ef1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2023/12/28 15:49 openbsd e1825d0cf879 fb427a07 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2023/12/18 09:44 openbsd 4f27e2eb738c 3222d10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2023/12/18 06:11 openbsd e10a268edd84 3222d10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2022/02/19 02:28 openbsd 7831279e5843 3cd800e4 .config console log report ci-openbsd-setuid uvm_fault: x86_ipi_db
* Struck through repros no longer work on HEAD.