syzbot


uvm_fault: ffs_nodealloccg

Status: auto-closed as invalid on 2022/04/24 17:10
Reported-by: syzbot+f82401c260fbc475e51c@syzkaller.appspotmail.com
First crash: 1035d, last: 1035d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: ffs_nodealloccg (2) 2 71d 72d 0/3 upstream: reported on 2024/09/13 08:10

Sample crash report:
uvm_fault(0xffffffff82b29970, 0xffff80000a6cf004, 0, 1) -> d
kernel: page fault trap, code=0
Stopped at      ffs_nodealloccg+0xf0:   movl    0x4(%r14),%ebx
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
* 70946  86908      0           0  0x4000000    0K syz-executor.1
 149132   9485      0           0  0x4000000    1  syz-executor.2
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 ffs_cgread sys/ufs/ffs/ffs_alloc.c:857 [inline]
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 sys/ufs/ffs/ffs_alloc.c:1114
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a sys/ufs/ffs/ffs_alloc.c:391
ufs_makeinode(2000,fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0) at ufs_makeinode+0xae sys/ufs/ufs/ufs_vnops.c:1830
ufs_mknod(ffff80002465e460) at ufs_mknod+0x4e sys/ufs/ufs/ufs_vnops.c:172
VOP_MKNOD(fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0,ffff80002465e4f0) at VOP_MKNOD+0xbf sys/kern/vfs_vops.c:121
domknodat(ffff800021142a88,ffffff9c,20000080,80002000,1604) at domknodat+0x326 sys/kern/vfs_syscalls.c:1629
syscall(ffff80002465e790) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff80002465e790) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x134f6b07b60, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffffffff82b29970, 0xffff80000a6cf004, 0, 1) -> d
ddb{0}> trace
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 ffs_cgread sys/ufs/ffs/ffs_alloc.c:857 [inline]
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 sys/ufs/ffs/ffs_alloc.c:1114
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a sys/ufs/ffs/ffs_alloc.c:391
ufs_makeinode(2000,fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0) at ufs_makeinode+0xae sys/ufs/ufs/ufs_vnops.c:1830
ufs_mknod(ffff80002465e460) at ufs_mknod+0x4e sys/ufs/ufs/ufs_vnops.c:172
VOP_MKNOD(fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0,ffff80002465e4f0) at VOP_MKNOD+0xbf sys/kern/vfs_vops.c:121
domknodat(ffff800021142a88,ffffff9c,20000080,80002000,1604) at domknodat+0x326 sys/kern/vfs_syscalls.c:1629
syscall(ffff80002465e790) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff80002465e790) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x134f6b07b60, count: -8
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002465e1d0
rbx                                0
rdx                                0
rcx               0xfffffd8074ffeee8
rax               0xffff800021142a88
r8                0xffffffffffffffff
r9                0xfffffd807f7d8540
r10               0x3a47cf4778952bee
r11               0xa7267d2a9075a464
r12               0xfffffd80563b89a0
r13                              0x2
r14               0xffff80000a6cf000
r15               0xfffffd806efc2a50
rip               0xffffffff81d75270    ffs_nodealloccg+0xf0
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002465e120
ss                              0x10
ffs_nodealloccg+0xf0:   movl    0x4(%r14),%ebx
ddb{0}> show proc
PROC (syz-executor.1) pid=70946 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=82, usrpri=82, nice=20
    forw=0xffffffffffffffff, list=0xffff8000211577a8,0xffff8000ffff4010
    process=0xffff80002e3f3200 user=0xffff800024659000, vmspace=0xfffffd8077862cf8
    estcpu=32, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 86427   93841  89300      0  2           0                syz-executor.7
 34470  405002  94796      0  2           0                syz-executor.3
 34470  404776  94796      0  2   0x4000000                syz-executor.3
 58481  375209  90337      0  2           0                syz-executor.0
 58481  258753  90337      0  3   0x4000080  fsleep        syz-executor.0
  3780  506231  55343      0  2           0                syz-executor.5
  3780     280  55343      0  2   0x4000000                syz-executor.5
 86908  471242  50023      0  2           0                syz-executor.1
*86908   70946  50023      0  7   0x4000000                syz-executor.1
 32242  346157   6214      0  2           0                syz-executor.6
 32242  486284   6214      0  2   0x4000000                syz-executor.6
 86251  390662  88596      0  2           0                syz-executor.4
  9485  302604  51858      0  2           0                syz-executor.2
  9485  149132  51858      0  7   0x4000000                syz-executor.2
 51858    2214  13675      0  2       0x482                syz-executor.2
 88596  122320  13675      0  2         0x2                syz-executor.4
  6214  220807  13675      0  3        0x82  nanoslp       syz-executor.6
 50023  169156  13675      0  2       0x482                syz-executor.1
 55343  296237  13675      0  2         0x2                syz-executor.5
 94796  238152  13675      0  3        0x82  nanoslp       syz-executor.3
 90337  412233  13675      0  2       0x482                syz-executor.0
 89300   82175  13675      0  2       0x482                syz-executor.7
 81818  440339      0      0  3     0x14280  nfsidl        nfsio
 42687  133173      0      0  3     0x14280  nfsidl        nfsio
 69584  287615      0      0  3     0x14280  nfsidl        nfsio
 43157   11892      0      0  3     0x14280  nfsidl        nfsio
 47246   93524      0      0  3     0x14280  nfsidl        nfsio
  8526  503779      0      0  3     0x14280  nfsidl        nfsio
 13087  239546      0      0  3     0x14280  nfsidl        nfsio
 13541  103518      0      0  3     0x14280  nfsidl        nfsio
 52877  450311      0      0  3     0x14280  nfsidl        nfsio
 65113  479541      0      0  3     0x14280  nfsidl        nfsio
 75668  339831      0      0  3     0x14280  nfsidl        nfsio
 32197  271104      0      0  3     0x14280  nfsidl        nfsio
 42882  445182      0      0  3     0x14280  nfsidl        nfsio
 97059  190442      0      0  3     0x14280  nfsidl        nfsio
 53162  517276      0      0  3     0x14280  nfsidl        nfsio
 53805   87838      0      0  3     0x14280  nfsidl        nfsio
 63484  379943      0      0  3     0x14280  nfsidl        nfsio
 79202  332260      0      0  3     0x14280  nfsidl        nfsio
 86011  370126      0      0  3     0x14280  nfsidl        nfsio
 59751  171221      0      0  3     0x14280  nfsidl        nfsio
 31009  294219      1      0  3    0x100083  ttyin         getty
 47703  521757      0      0  3     0x14200  bored         sosplice
 96356  312709      0      0  3     0x14200  acct          acct
 13675  268998  29880      0  3        0x82  thrsleep      syz-fuzzer
 13675  106555  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 13675  440400  29880      0  3   0x4000082  kqread        syz-fuzzer
 13675   46827  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 13675  479275  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 13675  365013  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 13675  364639  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 13675  151304  29880      0  3   0x4000082  thrsleep      syz-fuzzer
 29880  455653  78788      0  3    0x10008a  sigsusp       ksh
 78788  187057  33309      0  3        0x9a  poll          sshd
 33309  434223      1      0  3        0x88  poll          sshd
  7282  243254   8296     74  3    0x100092  bpf           pflogd
  8296  512791      1      0  3        0x80  netio         pflogd
 30439  363592  85746     73  3    0x100090  kqread        syslogd
 85746  227025      1      0  3    0x100082  netio         syslogd
 85341  282142      1      0  3    0x100080  kqread        resolvd
 56850  300273  36606     77  3    0x100092  kqread        dhcpleased
 14338  377526  36606     77  3    0x100092  kqread        dhcpleased
 36606   75669      1      0  3        0x80  kqread        dhcpleased
 21331  469915      0      0  3     0x14200  bored         smr
  4303  319930      0      0  2     0x14200                zerothread
 96648  445558      0      0  3     0x14200  aiodoned      aiodoned
 86911  152337      0      0  3     0x14200  syncer        update
 47005  255322      0      0  3     0x14200  cleaner       cleaner
 84739  156170      0      0  3     0x14200  reaper        reaper
 28391  299587      0      0  3     0x14200  pgdaemon      pagedaemon
 96980  427678      0      0  3     0x14200  bored         viomb
 97736   49192      0      0  3  0x40014200  acpi0         acpi0
 28928  135117      0      0  3  0x40014200                idle1
  9940   54155      0      0  3     0x14200  bored         softnet
 44978  207596      0      0  3     0x14200  bored         systqmp
 88716  514212      0      0  3     0x14200  bored         systq
 11671  261619      0      0  2  0x40014200                softclock
 59674  452549      0      0  3  0x40014200                idle0
     1   98404      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
Process 86908 (syz-executor.1) thread 0xffff800021142a88 (70946)
exclusive rrwlock inode r = 0 (0xfffffd80563b8a38)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:461
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:534
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:579
#5  vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413
#6  namei+0x36a sys/kern/vfs_lookup.c:245
#7  domknodat+0x92 sys/kern/vfs_syscalls.c:1581
#8  syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x489 sys/arch/amd64/amd64/trap.c:585
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff82aa6758)
#0  witness_lock+0x44d
#1  syscall+0x3ef mi_syscall sys/sys/syscall_mi.h:93 [inline]
#1  syscall+0x3ef sys/arch/amd64/amd64/trap.c:585
#2  Xsyscall+0x128
Process 9485 (syz-executor.2) thread 0xffff8000211577a8 (149132)
shared rwlock vmmaplk r = 0 (0xfffffd8070317328)
#0  witness_lock+0x44d
#1  uvmfault_lookup+0xe9 sys/uvm/uvm_fault.c:1744
#2  uvm_fault_check+0x3a sys/uvm/uvm_fault.c:674
#3  uvm_fault+0x102 sys/uvm/uvm_fault.c:602
#4  upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
#5  usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403
#6  recall_trap+0x8
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10241   6531K    7114K  78643K     75720        0
            pcb    13     26K      29K  78643K      8026        0
         rtable   276     25K      25K  78643K     11275        0
         ifaddr   117     30K      34K  78643K      3705        0
         sysctl     3      1K       5K  78643K        14        0
       counters    58     35K      36K  78643K       944        0
       ioctlops     0      0K       8K  78643K     10751        0
            iov     0      0K      32K  78643K      3935        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         5        0
         vnodes  1680    105K     105K  78643K     25218        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K      13K  78643K       437        0
         VM map     2      1K       1K  78643K         2        0
            sem    23     21K      41K  78643K      2146        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12598        0
      file desc    18     65K      81K  78643K     43922        0
          sigio     0      0K       0K  78643K       646        0
           proc    77     87K     124K  78643K      6343        0
        subproc   104      6K      10K  78643K      2055        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K      2988        0
       in_multi    92      6K       7K  78643K      2818        0
    ether_multi     1      0K       0K  78643K       430        0
            mrt     1      0K       0K  78643K       186        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   325   1447K    1447K  78643K       325        0
           exec     0      0K       2K  78643K      8610        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap  1005   2958K    2961K  78643K    557519        0
       UVM aobj   131      8K       8K  78643K       149        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K      2474        0
            NDP    16      0K       1K  78643K       812        0
           temp   160   4720K    8816K  78643K    409231        0
         kqueue    10     14K      24K  78643K      2427        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120     5388    0     5385    66    65     1     5     0     8    0
rtentry    112     2516    0     2413     5     1     4     4     0     8    0
unpcb      136    24063    0    24046   258   253     5    12     0     8    4
syncache   296      122    0      122    35    35     0     1     0     8    0
tcpqe       32      816    0      816    21    21     0     1     0     8    0
tcpcb      736    15179    0    15174   526   519     7    20     0     8    6
arp        120      504    0      486     1     0     1     1     0     8    0
inpcb      304    74157    0    74031   695   679    16    24     0     8    5
rttmr       72       49    0       49    19    19     0     1     0     8    0
ip6q        72       11    0       11     3     3     0     1     0     8    0
ip6af       40       33    0       33     3     3     0     1     0     8    0
nd6         48      549    0      525     1     0     1     1     0     8    0
pkpcb       40      315    0      315    17    17     0     1     0     8    0
kcovpl      48      149    0      141     1     0     1     1     0     8    0
ppxss      1248      80    0       80    24    24     0     1     0     8    0
pfstscr     40       39    0       39     8     8     0     1     0     8    0
pffrag     232      259    0      258    14    13     1     1     0   482    0
pffrnode    88      258    0      257    14    13     1     1     0     8    0
pffrent     40     2571    0     2570    17    16     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrke_plain 168      39    0       33     4     3     1     1     0     8    0
pfrktable  1344    1865    0     1849     4     2     2     2     0     8    0
pftag       88       11    0        3     1     0     1     1     0     8    0
pfqueue    264        2    0        0     1     0     1     1     0     8    0
pfstitem    24       40    0       38     1     0     1     1     0     8    0
pfstkey    112       78    0       76     1     0     1     1     0     8    0
pfstate    320       48    0       46     2     1     1     2     0     8    0
pfsrctr    152       60    0       60     3     3     0     1     0     8    0
pfrule     1360    1090    0      939    17     4    13    13     0     8    0
art_heap8  4096       8    0        7     4     3     1     3     0     8    0
art_heap4  256     9832    0     9407    60    30    30    34     0     8    0
art_table   32     9840    0     9414     5     1     4     5     0     8    0
art_node    16     2515    0     2424     1     0     1     1     0     8    0
sysvmsgpl   40       12    0        5     1     0     1     1     0     8    0
semupl     112        4    0        4     2     2     0     1     0     8    0
semapl     112     2133    0     2112     1     0     1     1     0     8    0
shmpl      112      146    0       18     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256    59831    0    58191   103     0   103   103     0     8    0
ffsino     272    59831    0    58191   110     0   110   110     0     8    0
nchpl      144   116864    0   115238    63     0    63    63     0     8    0
rtmask      32       22    0       20     4     3     1     1     0     8    0
uvmvnodes   80     6169    0        0   126     0   126   126     0     8    0
vnodes     224     6169    0        0   363     0   363   363     0     8    0
namei      1024  417024    0   417023    15    14     1     2     0     8    0
percpumem   16      484    0      443     1     0     1     1     0     8    0
vcpupl     2048     369    0        1    46     0    46    46     0     8    0
vmpool     560      419    0       51    29     2    27    27     0     8    0
pfiaddrpl  120      557    0      522     8     6     2     2     0     8    0
scsiplug    72       17    0       17     8     7     1     1     0     8    1
scxspl     216   346664    0   346664    84    82     2     7     0     8    2
plimitpl   152     4551    0     4536     1     0     1     1     0     8    0
sigapl     424    43984    0    43917     9     1     8     8     0     8    0
futexpl     64   369593    0   369592     5     4     1     1     0     8    0
knotepl    112      413    0        0     5     1     4     4     0     8    0
kqueuepl   216    10179    0    10166   197   192     5     9     0     8    3
pipepl     336    19248    0    19220   349   341     8    13     0     8    5
fdescpl    496    43928    0    43897     5     1     4     5     0     8    0
filepl     152   338348    0   338107   533   515    18    28     0     8    8
lockfpl    104    10194    0    10192    19    18     1     4     0     8    0
lockfspl    48     3078    0     3076     1     0     1     1     0     8    0
sessionpl  144      170    0      153     1     0     1     1     0     8    0
pgrppl      48      304    0      287     1     0     1     1     0     8    0
ucredpl     96    36311    0    36294     1     0     1     1     0     8    0
zombiepl   144    43917    0    43917     7     6     1     1     0     8    1
processpl  1064   43984    0    43917     5     0     5     5     0     8    0
procpl     672   126403    0   126323    58    49     9     9     0     8    1
srpgc       96      182    0      182    41    41     0     1     0     8    0
sosppl     168      290    0      290    56    56     0     1     0     8    0
sockpl     480   104374    0   104228  1970  1943    27    68     0     8    8
mcl64k     65536    131    0        0     5     2     3     3     0     8    0
mcl16k     16384     97    0        0    11     9     2     3     0     8    0
mcl12k     12288    113    0        0     4     2     2     2     0     8    0
mcl9k      9216      65    0        0     2     0     2     2     0     8    0
mcl8k      8192      75    0        0     6     3     3     3     0     8    0
mcl4k      4096      74    0        0     4     1     3     3     0     8    0
mcl2k2     2112      23    0        0     2     0     2     2     0     8    0
mcl2k      2048     847    0        0    28     1    27    27     0     8    0
mtagpl      96     1937    0        0    17     0    17    17     0     8    0
mbufpl     256    10356    0        0   588     0   588   588     0     8    0
bufpl      288    72833    0    66650   453     7   446   453     0     8    0
anonpl      24 12501908    0 12478395   522   366   156   170     0   186    1
amapchunkpl 152 1398663    0  1397743   299   259    40    58     0   158    0
amappl16   200   113269    0   112315   331   275    56    64     0     8    0
amappl15   192     5833    0     5827     1     0     1     1     0     8    0
amappl14   184     5478    0     5474     2     1     1     1     0     8    0
amappl13   176     7515    0     7513     1     0     1     1     0     8    0
amappl12   168     2002    0     1991     1     0     1     1     0     8    0
amappl11   160     5351    0     5335     2     1     1     2     0     8    0
amappl10   152     8404    0     8395     1     0     1     1     0     8    0
amappl9    144     5686    0     5680     1     0     1     1     0     8    0
amappl8    136    10772    0    10546    11     2     9     9     0     8    0
amappl7    128     7196    0     7184     1     0     1     1     0     8    0
amappl6    120     5871    0     5832     4     2     2     2     0     8    0
amappl5    112    41176    0    41154     1     0     1     1     0     8    0
amappl4    104    15525    0    15477     2     0     2     2     0     8    0
amappl3     96     9303    0     9290     1     0     1     1     0     8    0
amappl2     88    11883    0    11801     3     1     2     3     0     8    0
amappl1     80   794453    0   793871    38    24    14    19     0     8    1
amappl      88   553563    0   553074    13     1    12    12     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      148    0       18     3     0     3     3     0     8    0
uaddrrnd    24    44347    0    43948     3     0     3     3     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24    44347    0    43948     3     0     3     3     0     8    0
vmmpekpl   168   355028    0   354919     7     1     6     6     0     8    0
vmmpepl    168  4036974    0  4033064   770   579   191   239     0   357    6
vmsppl     368    44346    0    43948    37     0    37    37     0     8    0
rwobjpl     56   960871    0   952209   182    56   126   127     0     8    0
pdppl      4096   88701    0    88264  1889  1452   437   439     0     8    0
pvpl        32 21047045    0 21021636   903   672   231   290     0   265    0
pmappl     248    44346    0    43948    25     0    25    25     0     8    0
extentpl    40       57    0       38     1     0     1     1     0     8    0
phpool     112     4257    0     2388    55     1    54    54     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 ffs_cgread sys/ufs/ffs/ffs_alloc.c:857 [inline]
ffs_nodealloccg(fffffd80563b89a0,2,cb37,2000) at ffs_nodealloccg+0xf0 sys/ufs/ffs/ffs_alloc.c:1114
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a ffs_hashalloc sys/ufs/ffs/ffs_alloc.c:815 [inline]
ffs_inode_alloc(fffffd80563b89a0,2000,fffffd807f7d8540,ffff80002465e3a8) at ffs_inode_alloc+0x16a sys/ufs/ffs/ffs_alloc.c:391
ufs_makeinode(2000,fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0) at ufs_makeinode+0xae sys/ufs/ufs/ufs_vnops.c:1830
ufs_mknod(ffff80002465e460) at ufs_mknod+0x4e sys/ufs/ufs/ufs_vnops.c:172
VOP_MKNOD(fffffd80651ee3b0,ffff80002465e5c0,ffff80002465e5f0,ffff80002465e4f0) at VOP_MKNOD+0xbf sys/kern/vfs_vops.c:121
domknodat(ffff800021142a88,ffffff9c,20000080,80002000,1604) at domknodat+0x326 sys/kern/vfs_syscalls.c:1629
syscall(ffff80002465e790) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff80002465e790) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x134f6b07b60, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aa6550) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aa6550) at __mp_lock+0x122 sys/kern/kern_lock.c:147
uvm_fault(fffffd8070317310,d610a211000,0,2) at uvm_fault+0x191 sys/uvm/uvm_fault.c:624
upageflttrap(ffff800024658f00,d610a211000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
usertrap(ffff800024658f00) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0xd612ca19650, count: 7
ddb{1}> trace
x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff82aa6550) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82aa6550) at __mp_lock+0x122 sys/kern/kern_lock.c:147
uvm_fault(fffffd8070317310,d610a211000,0,2) at uvm_fault+0x191 sys/uvm/uvm_fault.c:624
upageflttrap(ffff800024658f00,d610a211000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181
usertrap(ffff800024658f00) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0xd612ca19650, count: -8

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/01/24 17:09 openbsd 7f22cd74b38a 96ff84ef .config console log report ci-openbsd-multicore uvm_fault: ffs_nodealloccg
* Struck through repros no longer work on HEAD.