syzbot


assert "dupe == NULL" failed in uvm_page.c (2)

Status: auto-closed as invalid on 2020/10/22 03:53
Reported-by: syzbot+fd5066e4149467047c9e@syzkaller.appspotmail.com
First crash: 1581d, last: 1581d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "dupe == NULL" failed in uvm_page.c (4) 209 81d 377d 0/3 auto-obsoleted due to no activity on 2024/10/21 16:21
openbsd assert "dupe == NULL" failed in uvm_page.c 4 1746d 1859d 0/3 auto-closed as invalid on 2020/05/10 22:18
openbsd assert "dupe == NULL" failed in uvm_page.c (3) 25 702d 1072d 0/3 auto-obsoleted due to no activity on 2023/03/20 05:40

Sample crash report:
panic: kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 140
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*309332  43129      0           0  0x4000000    0K syz-executor.1
 112199  43129      0           0  0x4000000    1  syz-executor.1
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8240ad4a) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff824744f5,ffffffff823f9a79,8c,ffffffff823e5235) at __assert+0x2b sys/kern/subr_prf.c:154
uvm_pagealloc(fffffd807effd958,0,0,3) at uvm_pagealloc+0x476 sys/uvm/uvm_page.c:140
pmap_get_ptp(fffffd807effd910,20000000) at pmap_get_ptp+0xe8 sys/arch/amd64/amd64/pmap.c:1175
pmap_enter(fffffd807effd910,20000000,64aa0000,5,21) at pmap_enter+0x2a8
uvm_fault(fffffd806e8f8458,20000000,0,1) at uvm_fault+0x1373 sys/uvm/uvm_fault.c:939
pageflttrap(ffff800020ed4570,0) at pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
kerntrap(ffff800020ed4570) at kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyin() at copyin+0x4b
sys_bind(ffff800020e0a128,ffff800020ed4718,ffff800020ed4760) at sys_bind+0xfe sys/kern/uipc_syscalls.c:171
syscall(ffff800020ed47e0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020ed47e0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x91d52d440f0, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
kernel diagnostic assertion "dupe == NULL" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 140
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8240ad4a) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff824744f5,ffffffff823f9a79,8c,ffffffff823e5235) at __assert+0x2b sys/kern/subr_prf.c:154
uvm_pagealloc(fffffd807effd958,0,0,3) at uvm_pagealloc+0x476 sys/uvm/uvm_page.c:140
pmap_get_ptp(fffffd807effd910,20000000) at pmap_get_ptp+0xe8 sys/arch/amd64/amd64/pmap.c:1175
pmap_enter(fffffd807effd910,20000000,64aa0000,5,21) at pmap_enter+0x2a8
uvm_fault(fffffd806e8f8458,20000000,0,1) at uvm_fault+0x1373 sys/uvm/uvm_fault.c:939
pageflttrap(ffff800020ed4570,0) at pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
kerntrap(ffff800020ed4570) at kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyin() at copyin+0x4b
sys_bind(ffff800020e0a128,ffff800020ed4718,ffff800020ed4760) at sys_bind+0xfe sys/kern/uipc_syscalls.c:171
syscall(ffff800020ed47e0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020ed47e0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x91d52d440f0, count: -14
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff800020ed3f60
rbx               0xffff800020ed4010
rdx                             0x8b
rcx                              0x2
rax                              0x1
r8                0xffffffff8202f34f    kprintf+0x16f
r9                               0x1
r10                              0x2
r11               0x78dd93e6aba801cb
r12                     0x3000000008
r13               0xffff800020ed3f70
r14                            0x100
r15                              0x1
rip               0xffffffff81106bf8    db_enter+0x18
cs                               0x8
rflags                         0x246
rsp               0xffff800020ed3f50
ss                              0x10
db_enter+0x18:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.1) pid=309332 stat=onproc
    flags process=0 proc=4000000<THREAD>
    pri=32, usrpri=72, nice=20
    forw=0xffffffffffffffff, list=0xffff800020e0a878,0xffff800020e09298
    process=0xffff8000230f7390 user=0xffff800020ecf000, vmspace=0xfffffd806e8f8458
    estcpu=36, cpticks=1, pctcpu=0.0
    user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 80513  183098  35646      0  3        0x80  nanosleep     syz-executor.0
 80513  225889  35646      0  3   0x4000080  msgwait       syz-executor.0
 80513  448949  35646      0  3   0x4000080  fsleep        syz-executor.0
 43129  127025  39132      0  2           0                syz-executor.1
*43129  309332  39132      0  7   0x4000000                syz-executor.1
 43129  112199  39132      0  7   0x4000000                syz-executor.1
 43129  505790  39132      0  3   0x4000080  fsleep        syz-executor.1
 81184  448939      0      0  3     0x14200  bored         sosplice
 39132  363958  12069      0  3        0x82  nanosleep     syz-executor.1
 35646  253165  12069      0  3        0x82  nanosleep     syz-executor.0
 12069  398811  55153      0  3        0x82  thrsleep      syz-fuzzer
 12069  340854  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069  463174  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069   38836  55153      0  3   0x4000082  kqread        syz-fuzzer
 12069  395486  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069   79817  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069  376799  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069  437170  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069   57859  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 12069  281310  55153      0  3   0x4000082  thrsleep      syz-fuzzer
 55153  496471  40799      0  3    0x10008a  pause         ksh
 40799  393104  74180      0  3        0x92  select        sshd
 14435  150962      1      0  3    0x100083  ttyin         getty
 74180  247230      1      0  3        0x80  select        sshd
 94134  194518  60315     74  3    0x100092  bpf           pflogd
 60315  325102      1      0  3        0x80  netio         pflogd
 41289   65523  34550     73  3    0x100090  kqread        syslogd
 34550  290671      1      0  3    0x100082  netio         syslogd
  3780  388291      1     77  3    0x100090  poll          dhclient
 57818  331690      1      0  3        0x80  poll          dhclient
 72130  344885      0      0  3     0x14200  bored         smr
 59629   41945      0      0  3     0x14200  pgzero        zerothread
 24319  297819      0      0  3     0x14200  aiodoned      aiodoned
 85090  450268      0      0  3     0x14200  syncer        update
 68831  277877      0      0  3     0x14200  cleaner       cleaner
 36454  166967      0      0  3     0x14200  reaper        reaper
 31067  357695      0      0  3     0x14200  pgdaemon      pagedaemon
 65729  308437      0      0  3     0x14200  bored         crynlk
 56084  190994      0      0  3     0x14200  bored         crypto
 12237  495095      0      0  3  0x40014200  acpi0         acpi0
 51097   46154      0      0  3  0x40014200                idle1
 73946  319188      0      0  3     0x14200  bored         softnet
 49512  495105      0      0  3     0x14200  bored         systqmp
 49291  111643      0      0  3     0x14200  bored         systq
 15922  107117      0      0  3  0x40014200  bored         softclock
 39933  406351      0      0  3  0x40014200                idle0
     1  492191      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd807effd920)
#0  witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0  witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1  mtx_enter_try+0x102
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pmap_enter+0x1bc rcr3 machine/cpufunc.h:141 [inline]
#3  pmap_enter+0x1bc pmap_map_ptes sys/arch/amd64/amd64/pmap.c:414 [inline]
#3  pmap_enter+0x1bc sys/arch/amd64/amd64/pmap.c:2678
#4  uvm_fault+0x1373 sys/uvm/uvm_fault.c:939
#5  pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
#6  kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
#7  alltraps_kern_meltdown+0x7b
#8  copyin+0x4b
#9  sys_bind+0xfe sys/kern/uipc_syscalls.c:171
#10 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#11 Xsyscall+0x128
Process 43129 (syz-executor.1) thread 0xffff800020e0a128 (309332)
shared rwlock vmmaplk r = 0 (0xfffffd806e8f8470)
#0  witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0  witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1  uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1448
#2  uvm_fault+0x7f sys/uvm/uvm_fault.c:524
#3  pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
#4  kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
#5  alltraps_kern_meltdown+0x7b
#6  copyin+0x4b
#7  sys_bind+0xfe sys/kern/uipc_syscalls.c:171
#8  syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8  syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff828dfa20)
#0  witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0  witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1  syscall+0x400 mi_syscall sys/sys/syscall_mi.h:93 [inline]
#1  syscall+0x400 sys/arch/amd64/amd64/trap.c:570
#2  Xsyscall+0x128
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd807effd920)
#0  witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0  witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1  mtx_enter_try+0x102
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  pmap_enter+0x1bc rcr3 machine/cpufunc.h:141 [inline]
#3  pmap_enter+0x1bc pmap_map_ptes sys/arch/amd64/amd64/pmap.c:414 [inline]
#3  pmap_enter+0x1bc sys/arch/amd64/amd64/pmap.c:2678
#4  uvm_fault+0x1373 sys/uvm/uvm_fault.c:939
#5  pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
#6  kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
#7  alltraps_kern_meltdown+0x7b
#8  copyin+0x4b
#9  sys_bind+0xfe sys/kern/uipc_syscalls.c:171
#10 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#10 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#11 Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf  9505   6481K    7307K  78643K     11429        0
            pcb    13      8K       8K  78643K        55        0
         rtable   118      6K       7K  78643K       319        0
         ifaddr    66     14K      14K  78643K       112        0
       counters    43     33K      34K  78643K        55        0
       ioctlops     0      0K       4K  78643K      1502        0
            iov     0      0K      16K  78643K       127        0
          mount     1      1K       1K  78643K         1        0
         vnodes  1223     77K      77K  78643K      1426        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K         5        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      1K       1K  78643K        29        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1824    197K     290K  78643K     13058        0
      file desc     6     17K      25K  78643K       235        0
          sigio     0      0K       0K  78643K         2        0
           proc    61     63K      83K  78643K       456        0
        subproc    32      2K       2K  78643K        34        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K        26        0
       in_multi    39      2K       2K  78643K        86        0
    ether_multi     1      0K       0K  78643K         7        0
            mrt     0      0K       0K  78643K         1        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    43    201K     201K  78643K        43        0
           exec     0      0K       1K  78643K       221        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     7     26K      26K  78643K         7        0
       UVM amap   132     39K      43K  78643K      1721        0
       UVM aobj    13      2K       2K  78643K        13        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K        48        0
            NDP    10      0K       0K  78643K        24        0
           temp    94   3856K    3920K  78643K      3326        0
         kqueue     3      4K       8K  78643K         6        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp         64        9    0        1     1     0     1     1     0     8    0
plcache    128       20    0        0     1     0     1     1     0     8    0
rtpcb       80       28    0       25     1     0     1     1     0     8    0
rtentry    112       63    0       19     2     0     2     2     0     8    0
unpcb      120      241    0      231     1     0     1     1     0     8    0
syncache   264        6    0        6     2     2     0     1     0     8    0
tcpqe       32      344    0      344     1     1     0     1     0     8    0
tcpcb      544       93    0       86     1     0     1     1     0     8    0
inpcb      296      292    0      280     2     0     2     2     0     8    1
nd6         48       12    0        8     1     0     1     1     0     8    0
ppxss      1136       1    0        1     1     0     1     1     0     8    1
pffrag     232        1    0        1     1     1     0     1     0   482    0
pffrnode    88        1    0        1     1     1     0     1     0     8    0
pffrent     40        2    0        2     1     1     0     1     0     8    0
pfosfp      40      846    0      423     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344      13    0        8     1     0     1     1     0     8    0
pftag       88        2    0        0     1     0     1     1     0     8    0
pfstitem    24       23    0        3     1     0     1     1     0     8    0
pfstkey    112       23    0        3     1     0     1     1     0     8    0
pfstate    328       22    0        3     2     0     2     2     0     8    0
pfrule     1360      27    0       22     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      243    0       58    13     0    13    13     0     8    0
art_table   32      245    0       58     2     0     2     2     0     8    0
art_node    16       62    0       21     1     0     1     1     0     8    0
sysvmsgpl   40       12    0       12     1     0     1     1     0     8    1
semupl     112        8    0        8     1     1     0     1     0     8    0
semapl     112       14    0        4     1     0     1     1     0     8    0
shmpl      112       10    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1700    0      294    89     0    89    89     0     8    0
ffsino     272     1700    0      294    95     1    94    94     0     8    0
nchpl      144     2299    0      685    61     0    61    61     0     8    0
uvmvnodes   72     1926    0        0    36     0    36    36     0     8    0
vnodes     208     1926    0        0   102     0   102   102     0     8    0
namei      1024    6278    0     6278     2     1     1     1     0     8    1
percpumem   16       38    0        6     1     0     1     1     0     8    0
vcpupl     1984       2    0        0     1     0     1     1     0     8    0
vmpool     560        2    0        0     1     0     1     1     0     8    0
pfiaddrpl  120        6    0        2     1     0     1     1     0     8    0
scsiplug    64        1    0        1     1     0     1     1     0     8    1
scxspl     192     6447    0     6447     6     5     1     5     0     8    1
plimitpl   152       25    0       17     1     0     1     1     0     8    0
sigapl     424      451    0      418     4     0     4     4     0     8    0
futexpl     56     3806    0     3804     1     0     1     1     0     8    0
knotepl    112       65    0       46     1     0     1     1     0     8    0
kqueuepl   144       23    0       20     1     0     1     1     0     8    0
pipepl     304       99    0       89     3     1     2     2     0     8    1
fdescpl    496      435    0      418     3     0     3     3     0     8    0
filepl     152     2669    0     2563     7     2     5     5     0     8    0
lockfpl    104       44    0       43     1     0     1     1     0     8    0
lockfspl    48       17    0       16     1     0     1     1     0     8    0
sessionpl  112       18    0        7     1     0     1     1     0     8    0
pgrppl      48       18    0        7     1     0     1     1     0     8    0
ucredpl     96      250    0      240     1     0     1     1     0     8    0
zombiepl   144      418    0      418     2     1     1     1     0     8    1
processpl  992      451    0      418     7     2     5     5     0     8    0
procpl     624      937    0      890     4     0     4     4     0     8    0
sosppl     128        3    0        3     1     0     1     1     0     8    1
sockpl     400      561    0      538     6     2     4     4     0     8    1
mcl64k     65536      8    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      7    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096       7    0        0     1     0     1     1     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     199    0        0    24     0    24    24     0     8    0
mtagpl      96      116    0        0     3     0     3     3     0     8    0
mbufpl     256      404    0        0    25     0    25    25     0     8    0
bufpl      280     3610    0      133   249     0   249   249     0     8    0
anonpl      16    57453    0    40302    78     1    77    77     0   124    8
amapchunkpl 152    2382    0     2217    13     1    12    12     0   158    3
amappl16   192     1672    0      764    46     0    46    46     0     8    0
amappl15   184       98    0       95     1     0     1     1     0     8    0
amappl14   176      130    0      122     1     0     1     1     0     8    0
amappl13   168       29    0       26     1     0     1     1     0     8    0
amappl12   160        3    0        2     2     1     1     1     0     8    0
amappl11   152      169    0      151     1     0     1     1     0     8    0
amappl10   144      119    0      111     1     0     1     1     0     8    0
amappl9    136      347    0      346     1     0     1     1     0     8    0
amappl8    128      360    0      322     2     0     2     2     0     8    0
amappl7    120      121    0      108     1     0     1     1     0     8    0
amappl6    112       28    0       23     1     0     1     1     0     8    0
amappl5    104      315    0      298     1     0     1     1     0     8    0
amappl4     96      597    0      563     1     0     1     1     0     8    0
amappl3     88      225    0      215     1     0     1     1     0     8    0
amappl2     80     2627    0     2545     2     0     2     2     0     8    0
amappl1     72    21663    0    21176    22    11    11    18     0     8    0
amappl      80     1196    0     1145     2     0     2     2     0    84    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      64       12    0        0     1     0     1     1     0     8    0
uaddrrnd    24      437    0      418     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      437    0      418     1     0     1     1     0     8    0
vmmpekpl   168     7492    0     7456     2     0     2     2     0     8    0
vmmpepl    168    62194    0    59958   125    17   108   120     0   357   10
vmsppl     368      436    0      418     2     0     2     2     0     8    0
pdppl      4096     881    0      838     6     0     6     6     0     8    0
pvpl        32   192122    0   171610   185     0   185   185     0   265   19
pmappl     232      436    0      418     2     0     2     2     0     8    0
extentpl    40       53    0       36     1     0     1     1     0     8    0
phpool     112      280    0        7     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic(ffffffff8240ad4a) at panic+0x15c sys/kern/subr_prf.c:207
__assert(ffffffff824744f5,ffffffff823f9a79,8c,ffffffff823e5235) at __assert+0x2b sys/kern/subr_prf.c:154
uvm_pagealloc(fffffd807effd958,0,0,3) at uvm_pagealloc+0x476 sys/uvm/uvm_page.c:140
pmap_get_ptp(fffffd807effd910,20000000) at pmap_get_ptp+0xe8 sys/arch/amd64/amd64/pmap.c:1175
pmap_enter(fffffd807effd910,20000000,64aa0000,5,21) at pmap_enter+0x2a8
uvm_fault(fffffd806e8f8458,20000000,0,1) at uvm_fault+0x1373 sys/uvm/uvm_fault.c:939
pageflttrap(ffff800020ed4570,0) at pageflttrap+0x1b8 sys/arch/amd64/amd64/trap.c:221
kerntrap(ffff800020ed4570) at kerntrap+0xec sys/arch/amd64/amd64/trap.c:302
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
copyin() at copyin+0x4b
sys_bind(ffff800020e0a128,ffff800020ed4718,ffff800020ed4760) at sys_bind+0xfe sys/kern/uipc_syscalls.c:171
syscall(ffff800020ed47e0) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800020ed47e0) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x91d52d440f0, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
x86_ipi_db(ffff800020d70ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352
x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff828df818) at __mp_lock+0x127 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff828df818) at __mp_lock+0x127 sys/kern/kern_lock.c:147
sys_futex(ffff800020e09eb8,ffff800023f3b2b0,ffff800023f3b300) at sys_futex+0xf6 sys/kern/sys_futex.c:109
syscall(ffff800023f3b380) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f3b380) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x91ded5462f0, count: 8
ddb{1}> trace
x86_ipi_db(ffff800020d70ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352
x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__mp_lock(ffffffff828df818) at __mp_lock+0x127 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff828df818) at __mp_lock+0x127 sys/kern/kern_lock.c:147
sys_futex(ffff800020e09eb8,ffff800023f3b2b0,ffff800023f3b300) at sys_futex+0xf6 sys/kern/sys_futex.c:109
syscall(ffff800023f3b380) at syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
syscall(ffff800023f3b380) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x91ded5462f0, count: -7

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/24 03:52 openbsd d8b0789b8b82 70c104a1 .config console log report ci-openbsd-multicore
* Struck through repros no longer work on HEAD.