syzbot


uvm_fault: softclock (2)

Status: auto-obsoleted due to no activity on 2023/06/06 21:13
Reported-by: syzbot+c702f141959c00799da5@syzkaller.appspotmail.com
First crash: 421d, last: 408d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: softclock (3) 1 239d 239d 0/3 auto-obsoleted due to no activity on 2023/11/22 14:27
openbsd uvm_fault: softclock 1 549d 549d 0/3 auto-obsoleted due to no activity on 2023/01/17 03:44
openbsd uvm_fault: softclock (4) 9 14d 45d 0/3 upstream: reported on 2024/03/05 22:35

Sample crash report:
kernel: page fault trap, code=0
Stopped at      softclock+0xc7: movq    %rcx,0x8(%rax)
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
the kernel did not panic
ddb> trace
softclock(0) at softclock+0xc7 sys/kern/kern_timeout.c:713
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
buf_get(0,0,1c3c000) at buf_get+0x750 sys/kern/vfs_bio.c:1186
geteblk(1c3c000) at geteblk+0x2c sys/kern/vfs_bio.c:1061
readdisklabel(2902,ffffffff81a39c40,ffff800000d18000,0) at readdisklabel+0x145 sys/arch/amd64/amd64/disksubr.c:96
vndopen(2902,1,2000,ffff8000216f0b10) at vndopen+0x17a sys/dev/vnd.c:203
spec_open(ffff8000265bbfa8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd806ef7cb50,1,fffffd807f7d78f0,ffff8000216f0b10) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff8000265bc1f8,1,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff8000216f0b10,ffffff9c,20000240,0,0,ffff8000265bc3d0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff8000265bc450) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe9d49b07b40, count: -13
ddb> show registers
rdi                            0x101
rsi                              0x1
rbp               0xffff8000265bbb80
rbx                              0x1
rdx                                0
rcx               0xffffffff82c10a70    timeout_todo
rax                                0
r8                              0x2b
r9                              0x2b
r10               0x18d83a6f61498f63
r11               0xc7054e0f16b0524a
r12                       0xffffffff
r13               0xffffffff82c75da0    rdrand_tmo
r14                              0x1
r15               0xffff8000216f03a8
rip               0xffffffff81ad72f7    softclock+0xc7
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff8000265bbb40
ss                              0x10
softclock+0xc7: movq    %rcx,0x8(%rax)
ddb> show proc
PROC (kernel: page fault trap, code=0
Faulted in DDB; continuing...
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 94199  347876   2042      0  2           0                syz-executor.0
 15731  481559  69661      0  3        0x80  nanoslp       syz-executor.1
  5328  430140      0      0  3     0x14280  nfsidl        nfsio
 43166  344202      0      0  3     0x14280  nfsidl        nfsio
 90172   42983      0      0  3     0x14280  nfsidl        nfsio
  4409  418621      0      0  3     0x14280  nfsidl        nfsio
 64738  399609      0      0  3     0x14280  nfsidl        nfsio
 20352   42749      0      0  3     0x14280  nfsidl        nfsio
 55120  318215      0      0  3     0x14280  nfsidl        nfsio
 73539  322275      0      0  3     0x14280  nfsidl        nfsio
  1606  244443      0      0  3     0x14280  nfsidl        nfsio
 71510  385181      0      0  3     0x14280  nfsidl        nfsio
 22488   44030      0      0  3     0x14280  nfsidl        nfsio
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10205   6553K    7591K  78643K     20769        0
            pcb    16     14K      16K  78643K       687        0
         rtable   247     16K      17K  78643K      1293        0
         ifaddr    82     22K      23K  78643K       261        0
         sysctl     2      0K       1K  78643K         9        0
       counters    28     17K      17K  78643K       137        0
       ioctlops     0      0K       2K  78643K      1114        0
            iov     0      0K      28K  78643K       266        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1447     90K      91K  78643K      5214        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       5K  78643K        23        0
         VM map     2      1K       1K  78643K         2        0
            sem    31      3K       5K  78643K       405        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    16     57K      73K  78643K      2593        0
          sigio     1      0K       0K  78643K        76        0
           proc    58     59K      75K  78643K       915        0
        subproc   104      6K       7K  78643K       286        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       270        0
       in_multi    99      6K       6K  78643K       353        0
    ether_multi     1      0K       0K  78643K        36        0
            mrt     1      0K       0K  78643K         9        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys    79    360K     360K  78643K        79        0
           exec     0      0K       1K  78643K       861        0
     pfkey data     0      0K       0K  78643K         3        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      64K  78643K        10        0
       UVM amap   291     85K      92K  78643K     19295        0
       UVM aobj    86      3K       3K  78643K        89        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     1      0K       0K  78643K        67        0
            NDP    13      0K       1K  78643K        98        0
           temp   132   5770K    5966K  78643K     63480        0
         kqueue    13     18K      24K  78643K       230        0
      SYN cache     2     16K      16K  78643K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      354    0      351     7     4     3     3     0     8    2
rtentry    112      433    0      323     4     0     4     4     0     8    0
unpcb      144     2141    0     2120    31    28     3     6     0     8    2
syncache   296       29    0       29     6     6     0     1     0     8    0
tcpqe       32       28    0       28     4     4     0     1     0     8    0
tcpcb      776     1337    0     1331    60    55     5    11     0     8    4
arp         88       46    0       28     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        3    0        3     1     1     0     1     0     8    0
inpcb      336     3290    0     3270    59    54     5    12     0     8    3
nd6         48       73    0       49     1     0     1     1     0     8    0
pkpcb       40       14    0       14     5     5     0     1     0     8    0
kcovpl      48       22    0       14     1     0     1     1     0     8    0
ppxss      1160      84    0       84     5     5     0     1     0     8    0
pppxif     1360       7    0        7     3     3     0     1     0     8    0
pfstscr     40        5    0        5     2     2     0     1     0     8    0
pfosfp      40        3    0        2     1     0     1     1     0     8    0
pfosfpen   112        3    0        2     1     0     1     1     0     8    0
pfanchor   1280     734    7      222    43     0    43    43     0     8    0
pfstkey    128       10    0       10     2     2     0     1     0     8    0
pfstate    352        5    0        5     2     2     0     1     0     8    0
art_heap8  4096       3    0        2     3     2     1     2     0     8    0
art_heap4  256     1386    0      927    44    15    29    30     0     8    0
art_table   32     1389    0      929     4     0     4     4     0     8    0
art_node    16      298    0      198     1     0     1     1     0     8    0
sysvmsgpl   40       36    0        5     1     0     1     1     0     8    0
semapl     112      397    0      368     1     0     1     1     0     8    0
shmpl      112       86    0        3     3     0     3     3     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dirhash: pool(0xffffffff82bd74a8:dirhash): free list modified: page 0xffff8000216b1000; item ordinal 0; addr 0xffff8000216b2400 (p 0xfffffd806e3aa000); offset 0x0=0x0
pool(dirhash): free list modified: page 0xffff8000216b1000; item ordinal 0; addr 0xffff8000216b2400 (p 0xfffffd806e3aa000); offset 0x0=0x0
dirhash: pool(0xffffffff82bd74a8:dirhash): page inconsistency: page 0xffff8000216b1000; item ordinal 1; addr 0x29ae4a72ef052d64
dino2pl    256     5141    0     3702    91     0    91    91     0     8    0
ffsino     240     5141    0     3702    86     0    86    86     0     8    0
nchpl      144     8683    0     7044    63     0    63    63     0     8    0
rtmask      32        3    0        3     1     1     0     1     0     8    0
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   35150    0    35150     3     2     1     3     0     8    1
namei: pool(0xffffffff82c74a18:namei): free list modified: page 0xffff8000216b3000; item ordinal 0; addr 0xffff8000216b4c00 (p 0xfffffd8069e74000); offset 0x0=0x0
pool(namei): free list modified: page 0xffff8000216b3000; item ordinal 0; addr 0xffff8000216b4c00 (p 0xfffffd8069e74000); offset 0x0=0x0
namei: pool(0xffffffff82c74a18:namei): page inconsistency: page 0xffff8000216b3000; item ordinal 1; addr 0xfc1f76e0236350b9
vmpool     664       40    0       40     2     2     0     1     0     8    0
kstatmem   264       96    0       70     2     0     2     2     0     8    0
scsiplug    72        6    0        6     2     2     0     1     0     8    0
scxspl     216    24845    0    24845    13    12     1     8     0     8    1
plimitpl   152      320    0      305     1     0     1     1     0     8    0
sigapl     424     2905    0     2839     9     1     8     8     0     8    0
futexpl     64    27992    0    27990     1     0     1     1     0     8    0
knotepl    120    57850    0    57769    15     8     7     7     0     8    3
kqueuepl   184      953    0      942    19    15     4     4     0     8    3
pipepl     288      886    0      857    17    14     3     7     0     8    0
fdescpl    432     2846    0     2819     4     0     4     4     0     8    0
filepl     120    25547    0    25287    61    49    12    16     0     8    3
lockfpl    104      501    0      499     1     0     1     1     0     8    0
lockfspl    48      129    0      127     1     0     1     1     0     8    0
sessionpl  144       38    0       22     1     0     1     1     0     8    0
pgrppl      48      285    0      269     1     0     1     1     0     8    0
ucredpl    104     3461    0     3450     1     0     1     1     0     8    0
zombiepl   144     2840    0     2839     1     0     1     1     0     8    0
processpl  1008    2905    0     2839    12     3     9     9     0     8    0
processpl: pool(0xffffffff82cf3698:processpl): page inconsistency: page 0x0; at page head addr 0xffff8000216dff90 (p 0xffff8000216de000)
procpl     696     7619    0     7532    13     4     9    10     0     8    1
procpl: pool(0xffffffff82cf34f0:procpl): page inconsistency: page 0x0; at page head addr 0xffff8000216f1f90 (p 0xffff8000216f0000)
sosppl     168       45    0       44     6     5     1     1     0     8    0
sockpl     456     5811    0     5767   163   151    12    29     0     8    6
mcl64k     65536     93    0       93    11    10     1     1     0     8    1
mcl16k     16384     54    0       54    11    10     1     1     0     8    1
mcl12k     12288    111    0      111     9     8     1     1     0     8    1
mcl9k      9216      32    0       32    11    10     1     1     0     8    1
mcl8k      8192     179    0      179     9     8     1     1     0     8    1
mcl4k      4096     332    0      332     2     1     1     1     0     8    1
mcl2k2     2112      24    0       24    10     9     1     1     0     8    1
mcl2k      2048   81539    0    81460    40    28    12    30     0     8    1
mtagpl      96     2029    0     1364    22     3    19    20     0     8    0
mbufpl     256   165673    0   164792   357   288    69   107     0     8    3
bufpl      288     8461    0     2067   458     0   458   458     0     8    0
anonpl      24   623841    0   606753   136    23   113   130     0   188    0
amapchunkpl 152   65960    0    65271    62    33    29    47     0   158    0
amappl16   200     6968    0     6394    66    35    31    46     0     8    0
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184      203    0      192     2     1     1     2     0     8    0
amappl13   176       16    0       15     1     0     1     1     0     8    0
amappl12   168      572    0      566     1     0     1     1     0     8    0
amappl11   160       47    0       37     1     0     1     1     0     8    0
amappl10   152       46    0       37     1     0     1     1     0     8    0
amappl9    144      981    0      979     1     0     1     1     0     8    0
amappl8    136      267    0      201     3     0     3     3     0     8    0
amappl7    128      174    0      152     2     0     2     2     0     8    0
amappl6    120      225    0      216     2     1     1     2     0     8    0
amappl5    112      211    0      204     1     0     1     1     0     8    0
amappl4    104      633    0      607     2     1     1     2     0     8    0
amappl3     96     8024    0     7971     2     0     2     2     0     8    0
amappl2     88     3374    0     3302     3     0     3     3     0     8    0
amappl1     80    67568    0    66842    30    13    17    26     0     8    0
amappl      88    18593    0    18419     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       88    0        3     2     0     2     2     0     8    0
uaddrrnd    24     2886    0     2859     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2886    0     2859     1     0     1     1     0     8    0
vmmpekpl   168    29751    0    29702     3     0     3     3     0     8    0
vmmpepl    168   275270    0   272542   224    97   127   144     0   357    2
vmsppl     344     2885    0     2859     3     0     3     3     0     8    0
rwobjpl     24    80230    0    72538    49     1    48    49     0     8    0
pdppl      4096    5778    0     5718   396   332    64    68     0     8    4
pvpl        32  1256871    0  1234316   364   172   192   333     0   265    0
pmappl     216     2885    0     2859     2     0     2     2     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1596    0      769    25     0    25    25     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
softclock(0) at softclock+0xc7 sys/kern/kern_timeout.c:713
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
buf_get(0,0,1c3c000) at buf_get+0x750 sys/kern/vfs_bio.c:1186
geteblk(1c3c000) at geteblk+0x2c sys/kern/vfs_bio.c:1061
readdisklabel(2902,ffffffff81a39c40,ffff800000d18000,0) at readdisklabel+0x145 sys/arch/amd64/amd64/disksubr.c:96
vndopen(2902,1,2000,ffff8000216f0b10) at vndopen+0x17a sys/dev/vnd.c:203
spec_open(ffff8000265bbfa8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd806ef7cb50,1,fffffd807f7d78f0,ffff8000216f0b10) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff8000265bc1f8,1,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff8000216f0b10,ffffff9c,20000240,0,0,ffff8000265bc3d0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff8000265bc450) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe9d49b07b40, count: -13
ddb> machine ddbcpu 1
No such command
ddb> trace
softclock(0) at softclock+0xc7 sys/kern/kern_timeout.c:713
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
buf_get(0,0,1c3c000) at buf_get+0x750 sys/kern/vfs_bio.c:1186
geteblk(1c3c000) at geteblk+0x2c sys/kern/vfs_bio.c:1061
readdisklabel(2902,ffffffff81a39c40,ffff800000d18000,0) at readdisklabel+0x145 sys/arch/amd64/amd64/disksubr.c:96
vndopen(2902,1,2000,ffff8000216f0b10) at vndopen+0x17a sys/dev/vnd.c:203
spec_open(ffff8000265bbfa8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd806ef7cb50,1,fffffd807f7d78f0,ffff8000216f0b10) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff8000265bc1f8,1,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff8000216f0b10,ffffff9c,20000240,0,0,ffff8000265bc3d0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff8000265bc450) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xe9d49b07b40, count: -13

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/03/08 21:13 openbsd 1e5b016c5082 4fc6d98d .config console log report ci-openbsd-main uvm_fault: softclock
2023/02/24 03:27 openbsd 1e5b016c5082 4359978e .config console log report ci-openbsd-main uvm_fault: softclock
* Struck through repros no longer work on HEAD.