syzbot


uvm_fault: x86_ipi_db (9)

Status: upstream: reported on 2025/02/14 23:55
Reported-by: syzbot+a157c6e0d81b4f6b71a4@syzkaller.appspotmail.com
First crash: 114d, last: 20h29m
Similar bugs (8)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: x86_ipi_db (3) 4 1566d 1583d 0/3 auto-closed as invalid on 2021/05/25 04:20
openbsd uvm_fault: x86_ipi_db (6) 1 1382d 1382d 0/3 closed as invalid on 2021/08/26 17:38
openbsd uvm_fault: x86_ipi_db (2) 1 1616d 1616d 0/3 closed as invalid on 2021/01/29 06:54
openbsd uvm_fault: x86_ipi_db (8) 330 221d 1206d 0/3 auto-obsoleted due to no activity on 2024/12/19 15:21
openbsd uvm_fault: x86_ipi_db (5) 1 1387d 1387d 0/3 closed as invalid on 2021/08/23 05:23
openbsd uvm_fault: x86_ipi_db (7) 4 1257d 1257d 3/3 fixed on 2021/12/30 22:14
openbsd uvm_fault: x86_ipi_db 1 1619d 1619d 0/3 closed as invalid on 2021/01/03 08:45
openbsd uvm_fault: x86_ipi_db (4) 1 1401d 1401d 0/3 closed as invalid on 2021/08/08 05:33

Sample crash report:
uvm_fault(fffffd8067dcd210,200000000000,0,2) at uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003c42bc60,200000000080) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c42bc60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c0a107616b0, count: 2
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: mtx 0xffffffff83943e50: locking against myself
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833f3da0) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff83943e50) at mtx_enter_try+0x1da sys/kern/kern_lock.c:285
mtx_enter(ffffffff83943e50) at mtx_enter+0x62 sys/kern/kern_lock.c:253
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd80082757f8) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd8067db8710,0,ffff80003c42b8b8,ffff80003c42b89c,0,2,af20da2b105f7905,2) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42b950,ffff80003c42b938) at uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42ba50) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd8067dcd210,200000000000,0,2) at uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003c42bc60,200000000080) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c42bc60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c0a107616b0, count: -13
ddb{1}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80003c42b5f0
rbx               0xffff8000299dedd7
rdx                                0
rcx               0xffff80003c444028
rax               0xffff8000299ddff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xf5560303d88dc510
r11               0xc4c56ba18ba08c66
r12               0xffff8000299debd8
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81ba9385    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80003c42b5e0
ss                                 0
db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=52146 pid=94869 tcnt=4 stat=onproc
    flags process=10<SUGID> proc=0
    runpri=50, usrpri=50, slppri=36, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c445c58,0xffff80003c444558
    process=0xffff8000fffec9c8 user=0xffff80003c426000, vmspace=0xfffffd8067dcd210
    estcpu=4, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 86894  299679  93601      0  2        0x40                syz-executor
 18840  158883  39262  32767  2        0x10                syz-executor
 18840  236192  39262  32767  3   0x4000090  fsleep        syz-executor
 19701  227641  14071      0  2    0x100002                sh
*94869   52146  65330  32767  7        0x10                syz-executor
 94869  165182  65330  32767  7   0x4000010                syz-executor
 94869  267656  65330  32767  3   0x4000010  biowait       syz-executor
 94869  507919  65330  32767  3   0x4000090  fsleep        syz-executor
 50454  433513  13857  32767  2        0x10                syz-executor
 50454  116791  13857  32767  3   0x4000090  fsleep        syz-executor
 50454   40958  13857  32767  2   0x4000010                syz-executor
  6547  289406  94886  32767  2        0x10                syz-executor
  6547  330494  94886  32767  3   0x4000090  fsleep        syz-executor
  6547  338692  94886  32767  3   0x4000090  fsleep        syz-executor
 50574  145821  15430  32767  2        0x10                syz-executor
 50574  472032  15430  32767  3   0x4000090  kqread        syz-executor
 60455  432122  84999  32767  2        0x10                syz-executor
 60455  484163  84999  32767  3   0x4000090  fsleep        syz-executor
 13857  516805  66886  32767  3        0x90  nanoslp       syz-executor
 65330  397503  15157  32767  3        0x90  nanoslp       syz-executor
 93601    8291   5781      0  3        0x80  ppwait        syz-executor
 14071  376686  68257      0  3        0x80  wait          syz-executor
 94886  455150  67542  32767  3        0x90  nanoslp       syz-executor
 84999  133738  39802  32767  3        0x90  nanoslp       syz-executor
 15430  346023  58272  32767  3        0x90  nanoslp       syz-executor
 39262  326923  86995  32767  3        0x90  nanoslp       syz-executor
 66886  195174  17736      0  3        0x82  wait          syz-executor
 15157   38308  17736      0  3        0x82  wait          syz-executor
  5781  338424  17736      0  3        0x82  wait          syz-executor
 68257  122712  17736      0  3        0x82  wait          syz-executor
 39802  190528  17736      0  3        0x82  wait          syz-executor
 67542  510609  17736      0  3        0x82  wait          syz-executor
 86995  186011  17736      0  3        0x82  wait          syz-executor
 58272   88903  17736      0  3        0x82  wait          syz-executor
 17736  429861  64990      0  3        0x82  kqread        syz-executor
 64990  473659  31657      0  3    0x10008a  sigsusp       ksh
 31657  239798  26459      0  3        0x98  kqread        sshd-session
 26459   42139  80654      0  3        0x92  kqread        sshd-session
 63441  319933      1      0  3    0x100083  ttyin         getty
 80654  487180      1      0  3        0x88  kqread        sshd
 25626  436396  77201     73  3   0x1100090  kqread        syslogd
 77201    3200      1      0  3    0x100082  sbwait        syslogd
 26615  295250      1      0  3    0x100080  kqread        resolvd
 16517   78970  86768     77  3    0x100092  kqread        dhcpleased
 73346  478900  86768     77  3    0x100092  kqread        dhcpleased
 86768  192897      1      0  3        0x80  kqread        dhcpleased
 31588  455794      0      0  3     0x14200  bored         smr
 19736  297429      0      0  2     0x14200                zerothread
 12634   70888      0      0  3     0x14200  aiodoned      aiodoned
 90178  479479      0      0  3     0x14200  syncer        update
   819   29462      0      0  3     0x14200  cleaner       cleaner
 36847    1288      0      0  3     0x14200  reaper        reaper
 54386  306739      0      0  3     0x14200  pgdaemon      pagedaemon
 80473  200851      0      0  3     0x14200  bored         viomb
 99910  422620      0      0  3  0x40014200  acpi0         acpi0
 68491  493468      0      0  3  0x40014200                idle1
 40960  115151      0      0  3     0x14200  bored         softnet3
 56712  339477      0      0  3     0x14200  bored         softnet2
 26034   12103      0      0  3     0x14200  bored         softnet1
 48830  360169      0      0  3     0x14200  bored         softnet0
 98321  127948      0      0  3     0x14200  bored         systqmp
 50776  323577      0      0  3     0x14200  bored         systq
 90763  501858      0      0  3     0x14200  tmoslp        softclockmp
 71005  424270      0      0  3  0x40014200  tmoslp        softclock
 34118  426513      0      0  3  0x40014200                idle0
     1  399189      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &sched_lock r = 0 (0xffffffff83974948)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:296
#2  mtx_enter+0x62 sys/kern/kern_lock.c:253
#3  sleep_setup+0xc6 sys/kern/kern_synch.c:302
#4  sys_futex+0xa04 futex_wait sys/kern/sys_futex.c:301 [inline]
#4  sys_futex+0xa04 sys/kern/sys_futex.c:151
#5  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:579
#6  Xsyscall+0x128
CPU 1:
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff83943e60)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:296
#2  mtx_enter+0x62 sys/kern/kern_lock.c:253
#3  uvn_get+0x679 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
Process 94869 (syz-executor) thread 0xffff80003c444028 (52146)
exclusive rwlock uobjlk r = 0 (0xfffffd80647a0a00)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  uvn_io+0x667 sys/uvm/uvm_vnode.c:1297
#3  uvn_get+0x31d sys/uvm/uvm_vnode.c:1102
#4  uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff83943e60)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:296
#2  mtx_enter+0x62 sys/kern/kern_lock.c:253
#3  uvn_get+0x679 sys/uvm/uvm_vnode.c:1117
#4  uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
#5  uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
#6  uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
#7  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#8  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#9  recall_trap+0x8
Process 94869 (syz-executor) thread 0xffff80003c444f88 (267656)
exclusive rrwlock inode r = 0 (0xfffffd806be7d560)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:605
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  sys_ftruncate+0x1c4 sys/kern/vfs_syscalls.c:2912
#6  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10182  10954K   10966K 166960K     11259        0
            pcb    17     12K      12K 166960K        17        0
         rtable   210      6K       6K 166960K       317        0
             pf    31     16K      16K 166960K        31        0
         ifaddr    39      6K       6K 166960K        41        0
        ifgroup    50      2K       2K 166960K        50        0
         sysctl     1      1K       9K 166960K         5        0
       counters    68     36K      36K 166960K        68        0
       ioctlops     0      0K       2K 166960K        28        0
            iov     0      0K       1K 166960K         1        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1334     84K      84K 166960K      1350        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    26     97K     129K 166960K       140        0
           proc    58     79K     115K 166960K       459        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         1        0
       in_multi    88      6K       6K 166960K        88        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    25    122K     122K 166960K        25        0
           exec     0      0K       1K 166960K       340        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   253    169K     178K 166960K      2725        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    47     94K     112K 166960K      1158        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP    25      1K       1K 166960K        25        0
           temp    35   8678K    8742K 166960K      3756        0
         kqueue    14     22K      22K 166960K        23        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       36    0       32     1     0     1     1     0     8    0
rtentry    176       99    0        1     5     0     5     5     0     8    0
unpcb      144       31    0       16     1     0     1     1     0     8    0
syncache   336        3    0        3     1     0     1     1     0     8    1
tcpcb      808       11    0        4     1     0     1     1     0     8    0
arp        128       16    0        0     1     0     1     1     0     8    0
ipq         40        1    0        0     1     0     1     1     0     8    0
ipqe        40        1    0        0     1     0     1     1     0     8    0
inpcb      328       64    0       53     1     0     1     1     0     8    0
nd6        144       20    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      407    0        0    26     0    26    26     0     8    0
art_table   32      408    0        0     4     0     4     4     0     8    0
art_node    16       98    0        9     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1546    0       45    94     0    94    94     0     8    0
ffsino     288     1546    0       45   108     0   108   108     0     8    0
nchpl      144     1732    0       56    63     0    63    63     0     8    0
uvmvnodes   80     1627    0        0    34     0    34    34     0     8    0
vnodes     216     1627    0        0    91     0    91    91     0     8    0
namei      1024    5033    0     5033     2     0     2     2     0     8    2
percpumem   16       49    0        0     1     0     1     1     0     8    0
kstatmem   264       24    0        0     2     0     2     2     0     8    0
scxspl     216     5758    0     5756     4     1     3     3     1     8    2
plimitpl   152       34    0       10     1     0     1     1     0     8    0
sigapl     424      424    0      368     8     0     8     8     0     8    1
knotepl    120       86    0        0     3     0     3     3     0     8    0
kqueuepl   224       19    0        9     1     0     1     1     0     8    0
pipepl     336      100    0       73     3     0     3     3     0     8    0
fdescpl    520      406    0      368     4     0     4     4     0     8    0
filepl     160     1308    0     1098     9     0     9     9     0     8    0
lockfpl    104        7    0        4     1     0     1     1     0     8    0
lockfspl    48        5    0        2     1     0     1     1     0     8    0
sessionpl  144       21    0        5     1     0     1     1     0     8    0
pgrppl      48       29    0        5     1     0     1     1     0     8    0
ucredpl    104       81    0       64     1     0     1     1     0     8    0
zombiepl   144      368    0      368     1     0     1     1     0     8    1
processpl  1240     424    0      368     5     0     5     5     0     8    0
procpl     656      442    0      376     6     0     6     6     0     8    0
sockpl     728      131    0       99     3     0     3     3     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     109    0        0    14     0    14    14     0     8    0
mcl2k      2048      16    0        0     2     0     2     2     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      209    0        0    14     0    14    14     0     8    0
bufpl      280     2225    0      116   151     0   151   151     0     8    0
anonpl      32     3831    0        0    31     0    31    31     0   246    0
amapchunkpl 152    7870    0     7322    22     0    22    22     0   158    0
amappl16   200     2140    0     2125     5     0     5     5     0     8    4
amappl15   192        4    0        4     1     0     1     1     0     8    1
amappl14   184      155    0      145     1     0     1     1     0     8    0
amappl13   176        8    0        7     1     0     1     1     0     8    0
amappl12   168     1016    0      980     3     0     3     3     0     8    1
amappl11   160       42    0       32     1     0     1     1     0     8    0
amappl10   152       39    0       39     1     0     1     1     0     8    1
amappl9    144      260    0      260     1     0     1     1     0     8    1
amappl8    136       43    0       42     1     0     1     1     0     8    0
amappl7    128      113    0      103     1     0     1     1     0     8    0
amappl6    120      171    0      167     1     0     1     1     0     8    0
amappl5    112      131    0      124     1     0     1     1     0     8    0
amappl4    104      291    0      276     1     0     1     1     0     8    0
amappl3     96     1217    0     1088     4     0     4     4     0     8    0
amappl2     88      594    0      542     2     0     2     2     0     8    0
amappl1     80     8015    0     7438    14     0    14    14     0     8    1
amappl      88     2101    0     1914     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      406    0      368     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      406    0      368     1     0     1     1     0     8    0
vmmpekpl   168     4905    0     4878     2     0     2     2     0     8    0
vmmpepl    168    33129    0    31012    95     1    94    94     0   357    0
vmsppl     480      405    0      368     7     1     6     6     0     8    0
rwobjpl     72    13853    0    11370    48     0    48    48     0     8    0
pdppl      4096     820    0      736   114    14   100   100     0     8   16
pvpl        32     9124    0        0    74     0    74    74     0   265    0
pmappl     256      405    0      368     4     1     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      391    0       17    11     0    11    11     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837f0ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68
savectx() at savectx+0xae
end of kernel
end trace frame: 0xdc2ff96f600, count: 10
ddb{0}> trace
x86_ipi_db(ffffffff837f0ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68
savectx() at savectx+0xae
end of kernel
end trace frame: 0xdc2ff96f600, count: -5
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833f3da0) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff83943e50) at mtx_enter_try+0x1da sys/kern/kern_lock.c:285
mtx_enter(ffffffff83943e50) at mtx_enter+0x62 sys/kern/kern_lock.c:253
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd80082757f8) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd8067db8710,0,ffff80003c42b8b8,ffff80003c42b89c,0,2,af20da2b105f7905,2) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42b950,ffff80003c42b938) at uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42ba50) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd8067dcd210,200000000000,0,2) at uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003c42bc60,200000000080) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c42bc60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c0a107616b0, count: 2
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833f3da0) at panic+0x1e5 sys/kern/subr_prf.c:198
mtx_enter_try(ffffffff83943e50) at mtx_enter_try+0x1da sys/kern/kern_lock.c:285
mtx_enter(ffffffff83943e50) at mtx_enter+0x62 sys/kern/kern_lock.c:253
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 uvm_pagedequeue sys/uvm/uvm_page.c:-1 [inline]
uvm_pageclean(fffffd80082757f8) at uvm_pageclean+0x290 sys/uvm/uvm_page.c:980
uvm_pagefree(fffffd80082757f8) at uvm_pagefree+0x26 sys/uvm/uvm_page.c:1020
uvn_get(fffffd8067db8710,0,ffff80003c42b8b8,ffff80003c42b89c,0,2,af20da2b105f7905,2) at uvn_get+0x68b sys/uvm/uvm_vnode.c:1118
uvm_fault_lower_io(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42b950,ffff80003c42b938) at uvm_fault_lower_io+0x2d1 sys/uvm/uvm_fault.c:1652
uvm_fault_lower(ffff80003c42bad0,ffff80003c42bb08,ffff80003c42ba50) at uvm_fault_lower+0x2bb sys/uvm/uvm_fault.c:1419
uvm_fault(fffffd8067dcd210,200000000000,0,2) at uvm_fault+0x278 sys/uvm/uvm_fault.c:-1
upageflttrap(ffff80003c42bc60,200000000080) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80003c42bc60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7c0a107616b0, count: -13

Crashes (87):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/08 14:48 openbsd 394c376d8c51 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/06/07 18:38 openbsd fa628edb87f8 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/06/06 22:08 openbsd 16c80f155e04 4826c28e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/06/06 19:17 openbsd 402b23ce0ef8 3d899f2c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/06/06 15:03 openbsd 402b23ce0ef8 3d899f2c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/06/03 21:27 openbsd e4273848146a a30356b7 .config console log report [disk image] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/05/30 22:05 openbsd 12e4c257ea80 3d2f584d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/25 05:58 openbsd ae496ce11df0 ed351ea7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/22 16:27 openbsd ba45935f401b 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/05/21 09:59 openbsd 1363fb036962 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/21 03:15 openbsd 1363fb036962 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 23:14 openbsd 75dab2ae6040 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 21:02 openbsd 75dab2ae6040 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 18:46 openbsd 75dab2ae6040 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 13:58 openbsd 75dab2ae6040 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 12:22 openbsd 75dab2ae6040 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/20 08:47 openbsd 03d4002980cf b84f0537 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/19 14:06 openbsd 2fc058fc36e6 27f68995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/19 00:23 openbsd 3094a09a1666 f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/17 19:42 openbsd 007267a8c99a f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/17 09:46 openbsd 007267a8c99a f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/17 06:58 openbsd f47d9bee1200 f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/05/16 10:19 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/16 06:40 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/16 05:20 openbsd 84d74105a289 cfde8269 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/15 07:04 openbsd 7f65c2e60666 d6b2ee52 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/15 03:59 openbsd 7f65c2e60666 d6b2ee52 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/15 02:27 openbsd 7f65c2e60666 d6b2ee52 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/14 12:40 openbsd b0ff9b09a8b9 a4fa04ef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/14 04:43 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/12 12:57 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/11 10:03 openbsd 9ae922823a2f 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/10 04:38 openbsd 6096bd70fba2 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/10 00:00 openbsd 6096bd70fba2 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/09 19:03 openbsd 0dc0a232ede0 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/08 06:31 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/08 00:25 openbsd 857ee2693eb3 dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/07 14:06 openbsd b9cb822a9415 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/05/06 12:03 openbsd 7a1ed1390929 ae98e6b9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/05 23:04 openbsd 8046d3831223 ae98e6b9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/05 13:02 openbsd 0258cd44472b 6ca47dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/05 11:32 openbsd 0258cd44472b 6ca47dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/05 06:12 openbsd 9c5af36d7979 b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/03 02:15 openbsd 0e444de8113c b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/05/02 05:50 openbsd 9e51cf64e7c3 51b137cd .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/30 04:24 openbsd 4a6e8021b0d8 85a5a23f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/30 03:35 openbsd 4a6e8021b0d8 85a5a23f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/26 02:43 openbsd d4f884f641f3 c6b4fb39 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/25 13:59 openbsd d13e04c647d7 dea5c7e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/12 05:45 openbsd ade9dbe6546b 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/09 08:35 openbsd d4602f96699d b133e63a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/07 14:42 openbsd ca8ab885e23f 2f0c9720 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/06 05:05 openbsd c16771e8b440 1c65791e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/04/01 00:13 openbsd 6cbbb384a28a e2826670 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/03/09 07:54 openbsd 147d2ad00d69 163f510d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/03/03 18:50 openbsd 1c7441f2bfaf c3901742 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/27 05:59 openbsd d989f921cc32 6a8fcbc4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/20 21:24 openbsd e17cfef6a95f 0808a665 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/20 19:16 openbsd e17cfef6a95f 0808a665 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/19 10:12 openbsd 181c8b93219b 9a14138f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/18 21:55 openbsd 181c8b93219b 9a14138f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/02/16 16:55 openbsd 3411e7e2a484 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/02/14 23:54 openbsd 8d2464095911 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
* Struck through repros no longer work on HEAD.