syzbot


uvm_fault: wsmuxclose

Status: closed as dup on 2019/01/27 11:19
Reported-by: syzbot+654b00696fbc8da8cfcb@syzkaller.appspotmail.com
First crash: 1936d, last: 1886d
Duplicate of
Title Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: wsmux_mux_close 1 1909d 1909d

Sample crash report:
login: uvm_fault(0xfffffd807efff708, 0x8f, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      wsmuxclose+0x75:        cmpq    %r12,0x90(%r15)
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
kernel page fault
uvm_fault(0xfffffd807efff708, 0x8f, 0, 1) -> e
wsmuxclose(4500,1,2000,ffff800020b43c38) at wsmuxclose+117
end trace frame: 0xffff800020c47490, count: 0
ddb{1}> trace
wsmuxclose(4500,1,2000,ffff800020b43c38) at wsmuxclose+117
spec_close(ffff800020c474a0) at spec_close+928
VOP_CLOSE(fffffd806e6baa38,1,fffffd807f7c7d80,ffff800020b43c38) at VOP_CLOSE+112
vn_closefile(fffffd8074222010,ffff800020b43c38) at vn_closefile+352
fdrop(fffffd8074222010,ffff800020b43c38) at fdrop+225
closef(fffffd8074222010,ffff800020b43c38) at closef+297
fdrelease(ffff800020b43c38,3) at fdrelease+217
sys_close(ffff800020b43c38,ffff800020c47758,ffff800020c47740) at sys_close+174
syscall(ffff800020c477f0) at syscall+1452
Xsyscall(6,0,ffffffffffffff0b,0,1,59d8b1c90d8) at Xsyscall+296
end of kernel
end trace frame: 0x59fa6def860, count: -10
ddb{1}> show registers
rdi                                0
rsi                                0
rbp             18446603336770941984
rbx                                0
rdx             18446744071594843605    substchar+94256
rcx             18446741324976795872
rax                                0
r8              18446744071585836581    setrunnable+149
r9                                 5
r10             16199311595794374609
r11               649327871048614550
r12             18446603336221355264
r13                                0
r14             18446603336221355344
r15             18446744073709551615
rip             18446744071593530949    wsmuxclose+117
cs                                 8
rflags                         66118    __ALIGN_SIZE+62022
rsp             18446603336770941920
ss                                16
wsmuxclose+117: cmpq    %r12,144(%r15)
ddb{1}> show proc
PROC (syz-executor.1) pid=177586 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=0, usrpri=86, nice=20
    forw=0xffffffffffffffff, list=0xffff800020b24260,0xffffffff8230d660
    process=0xffff800020b44010 user=0xffff800020c42000, vmspace=0xfffffd807efff708
    estcpu=36, cpticks=0, pctcpu=0.0
    user=0, sys=0, intr=0
ddb{1}> 

Crashes (25):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/02/15 19:30 openbsd 64a70754a42c f6f233c0 .config console log report syz ci-openbsd-multicore
2019/02/05 19:47 openbsd 6e31582a5a78 d672172c .config console log report syz ci-openbsd-multicore
2019/02/05 15:42 openbsd 6e31582a5a78 d672172c .config console log report syz ci-openbsd-multicore
2019/02/05 08:33 openbsd 6e31582a5a78 d672172c .config console log report syz ci-openbsd-multicore
2019/02/18 21:32 openbsd 9c4fc15973cf 59f36113 .config console log report ci-openbsd-multicore
2019/02/17 08:19 openbsd 395e1e447075 f42dee6d .config console log report ci-openbsd-multicore
2019/02/17 07:30 openbsd 395e1e447075 f42dee6d .config console log report ci-openbsd-multicore
2019/02/16 21:36 openbsd f4f0873d2d98 f42dee6d .config console log report ci-openbsd-multicore
2019/02/16 11:59 openbsd f4f0873d2d98 f42dee6d .config console log report ci-openbsd-multicore
2019/02/16 09:27 openbsd 9a029001a5d5 f42dee6d .config console log report ci-openbsd-multicore
2019/02/15 17:33 openbsd 64a70754a42c f6f233c0 .config console log report ci-openbsd-multicore
2019/02/15 01:28 openbsd 12d12f751fcc 76dd003f .config console log report ci-openbsd-multicore
2019/02/12 02:31 openbsd 2a8cd46f780e 65a0d619 .config console log report ci-openbsd-multicore
2019/02/11 23:45 openbsd 2a8cd46f780e 65a0d619 .config console log report ci-openbsd-multicore
2019/02/10 20:36 openbsd d1b04a408aa9 b4f792e4 .config console log report ci-openbsd-multicore
2019/02/10 20:23 openbsd d1b04a408aa9 b4f792e4 .config console log report ci-openbsd-multicore
2019/02/10 08:48 openbsd 515cae5bd095 b4f792e4 .config console log report ci-openbsd-multicore
2019/02/10 06:12 openbsd 515cae5bd095 b4f792e4 .config console log report ci-openbsd-multicore
2019/02/09 20:03 openbsd 4071f8002cf2 d75f7686 .config console log report ci-openbsd-multicore
2019/02/07 15:27 openbsd 6e31582a5a78 aa4feb03 .config console log report ci-openbsd-multicore
2019/02/06 23:49 openbsd 6e31582a5a78 d25487bc .config console log report ci-openbsd-multicore
2019/02/05 13:39 openbsd 6e31582a5a78 d672172c .config console log report ci-openbsd-multicore
2019/01/30 11:34 openbsd 906b732f9d92 aa432daf .config console log report ci-openbsd-multicore
2019/01/28 09:49 openbsd c41c16f02568 1602ad52 .config console log report ci-openbsd-multicore
2018/12/30 19:35 openbsd ef327be8754b 2b42fdc8 .config console log report ci-openbsd-multicore
* Struck through repros no longer work on HEAD.