syzbot


panic: softclock: invalid to_clock: ADDR

Status: upstream: reported on 2024/02/28 07:34
Reported-by: syzbot+973881c4ee3014ab8188@syzkaller.appspotmail.com
First crash: 87d, last: 5d07h

Sample crash report:
panic: softclock: invalid to_clock: 1815118
Stopped at      db_enter+0x1c:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*107256  41710      0   0x8000002          0    0  syz-executor.0
 517446  33911      0     0x14000      0x200    1K update
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8285e523) at panic+0x17b sys/kern/subr_prf.c:198
softclock(0) at softclock+0x22d sys/kern/kern_timeout.c:759
softintr_dispatch(0) at softintr_dispatch+0xcd sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 sys/kern/kern_lock.c:147
syscall(ffff80002bd25830) at syscall+0x83b mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002bd25830) at syscall+0x83b sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6fc8f511ae90, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: softclock: invalid to_clock: 1815118
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8285e523) at panic+0x17b sys/kern/subr_prf.c:198
softclock(0) at softclock+0x22d sys/kern/kern_timeout.c:759
softintr_dispatch(0) at softintr_dispatch+0xcd sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 sys/kern/kern_lock.c:147
syscall(ffff80002bd25830) at syscall+0x83b mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002bd25830) at syscall+0x83b sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6fc8f511ae90, count: -8
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002bd25510
rbx               0xffffffff82d48d77    cpu_info_full_primary+0x2d77
rdx                                0
rcx               0xffff80002bd1a7f0
rax               0xffffffff82d47ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xc61fa218eb1035b1
r11               0x2274f8e49c247f95
r12               0xffffffff82d48b78    cpu_info_full_primary+0x2b78
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff82653b5c    db_enter+0x1c
cs                               0x8
rflags                         0x246
rsp               0xffff80002bd25500
ss                              0x10
db_enter+0x1c:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor.0) tid=107256 pid=41710 tcnt=1 stat=onproc
    flags process=8000002<EXEC> proc=0
    runpri=84, usrpri=84, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0
    forw=0xffffffffffffffff, list=0xffff80002a204540,0xffff80002bd1a2e0
    process=0xffff80002ef6c498 user=0xffff80002bd20000, vmspace=0xfffffd8063c49c08
    estcpu=34, cpticks=0, pctcpu=5.17, user=0, sys=0, intr=363
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
  2441  204164  64465      0  2   0x8000480                syz-executor.3
  2441  484280  64465      0  3   0xc000080  sbwait        syz-executor.3
  2441  361547  64465      0  3   0xc000080  fsleep        syz-executor.3
  4767  152190  48880      0  2   0x8000480                syz-executor.5
  4767  191080  48880      0  3   0xc000080  fsleep        syz-executor.5
  4767  310584  48880      0  3   0xc000080  fsleep        syz-executor.5
 88376  425992  48590      0  2   0x8000480                syz-executor.6
 88376  259971  48590      0  3   0xc000080  ttyout        syz-executor.6
 88376  448978  48590      0  3   0xc000080  fsleep        syz-executor.6
 64465   36464  47381      0  3   0x8000082  nanoslp       syz-executor.3
 48880  447071  47381      0  2   0x8000482                syz-executor.5
*41710  107256  47381      0  7   0x8000002                syz-executor.0
 25709  154997  47381      0  2   0x8000482                syz-executor.7
 92468  137180  47381      0  2   0x8000002                syz-executor.2
 48590  455137  47381      0  2   0x8000482                syz-executor.6
 75461  115220  47381      0  2   0x8000002                syz-executor.1
 43587  197014  47381      0  3   0x8000082  nanoslp       syz-executor.4
 69343  398012      0      0  3     0x14200  bored         sosplice
 47381  151452  83913      0  3  0x1a000082  wait          syz-fuzzer
 47381  219488  83913      0  3  0x1e000082  nanoslp       syz-fuzzer
 47381  119812  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  136738  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381   82398  83913      0  3  0x1e000082  thrsleep      syz-fuzzer
 47381  155969  83913      0  2  0x1e000082                syz-fuzzer
 47381  336725  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  401538  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  125552  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  459476  83913      0  3  0x1e000082  thrsleep      syz-fuzzer
 47381  153725  83913      0  3  0x1e000082  thrsleep      syz-fuzzer
 47381   80623  83913      0  3  0x1e000082  thrsleep      syz-fuzzer
 47381  326236  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  363203  83913      0  3  0x1e000082  wait          syz-fuzzer
 47381  299860  83913      0  3  0x1e000082  thrsleep      syz-fuzzer
 47381   96011  83913      0  3  0x1e000082  kqread        syz-fuzzer
 83913  505805  16053      0  3   0x810008a  sigsusp       ksh
 16053  344747   1084      0  3  0x1800009a  kqread        sshd
 83212  467290      1      0  3  0x18100083  ttyin         getty
  1084   69797      1      0  3  0x18000088  kqread        sshd
  3637  227817  39068     73  2  0x19100010                syslogd
 39068  372166      1      0  3  0x18100082  sbwait        syslogd
 38634  332545      1      0  3  0x18100080  kqread        resolvd
 61487  187854  14672     77  3  0x18100092  kqread        dhcpleased
 38761   65250  14672     77  3  0x18100092  kqread        dhcpleased
 14672  150362      1      0  3  0x18000080  kqread        dhcpleased
 75709  219833      0      0  2     0x14200                smr
 51436    6480      0      0  2     0x14200                zerothread
 43858  331983      0      0  3     0x14200  aiodoned      aiodoned
 33911  517446      0      0  7     0x14200                update
 47971    5938      0      0  3     0x14200  cleaner       cleaner
 88276  360528      0      0  2     0x14200                reaper
 73744  503670      0      0  3     0x14200  pgdaemon      pagedaemon
 28625  226010      0      0  3     0x14200  bored         viomb
 30385  324796      0      0  3  0x40014200  acpi0         acpi0
 75187  384017      0      0  3  0x40014200                idle1
 97466  109446      0      0  3     0x14200  bored         softnet3
 90617   79981      0      0  3     0x14200  bored         softnet2
  8448  444730      0      0  3     0x14200  bored         softnet1
 43125  227700      0      0  2     0x14200                softnet0
 91484  408449      0      0  2     0x14200                systqmp
 59143  471832      0      0  3     0x14200  bored         systq
 85908  454192      0      0  3     0x14200  tmoslp        softclockmp
 62663  335160      0      0  3  0x40014200  tmoslp        softclock
 67650  488182      0      0  3  0x40014200                idle0
     1  384152      0      0  3   0x8080082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex /syzkaller/managers/multicore/kernel/sys/kern/kern_timeout.c:57 r = 0 (0xffffffff82d54510)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1157
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  softclock_process_tick_timeout+0x19d sys/kern/kern_timeout.c:723
#4  softclock+0x139 sys/kern/kern_timeout.c:755
#5  softintr_dispatch+0xcd sys/arch/amd64/amd64/softintr.c:90
#6  Xsoftclock+0x27
#7  __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
#7  __mp_lock+0x122 sys/kern/kern_lock.c:147
#8  syscall+0x83b mi_syscall sys/sys/syscall_mi.h:180 [inline]
#8  syscall+0x83b sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
CPU 1:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd807084d8d8)
#0  witness_lock+0x446 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x446 sys/kern/subr_witness.c:1157
#1  mtx_enter_try+0x103
#2  mtx_enter+0x4e sys/kern/kern_lock.c:266
#3  pmap_do_remove+0x99 rcr3 machine/cpufunc.h:139 [inline]
#3  pmap_do_remove+0x99 pmap_map_ptes sys/arch/amd64/amd64/pmap.c:425 [inline]
#3  pmap_do_remove+0x99 sys/arch/amd64/amd64/pmap.c:1800
#4  uvm_unmap_kill_entry_withlock+0x1b1 sys/uvm/uvm_map.c:1897
#5  uvm_map_teardown+0x1c7 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline]
#5  uvm_map_teardown+0x1c7 sys/uvm/uvm_map.c:2534
#6  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3461
#7  reaper+0x197 sys/kern/kern_exit.c:463
#8  proc_trampoline+0x10
Process 41710 (syz-executor.0) thread 0xffff80002bd1a7f0 (107256)
Process 75461 (syz-executor.1) thread 0xffff80002bd1a560 (115220)
Process 3637 (syslogd) thread 0xffff8000ffffd490 (227817)
Process 88276 (reaper) thread 0xffff80002a149718 (360528)
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10231   6712K    7106K 166960K     18903        0
            pcb    17     14K      17K 166960K       866        0
         rtable   218     15K      16K 166960K      2202        0
             pf    43     11K      11K 166960K       311        0
         ifaddr    46     16K      16K 166960K       330        0
        ifgroup    78      3K       3K 166960K       511        0
         sysctl     4      1K       1K 166960K        13        0
       counters    76     37K      38K 166960K       324        0
       ioctlops     0      0K       4K 166960K      1731        0
            iov     0      0K      32K 166960K       318        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1416     89K      90K 166960K      5658        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2     28K      40K 166960K       105        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       384        0
        dirhash    12      2K       3K 166960K       267        0
           ACPI  1697    195K     286K 166960K     12548        0
      file desc    13     45K      85K 166960K      4967        0
          sigio     0      0K       0K 166960K        87        0
           proc    60     79K     115K 166960K      2185        0
        subproc   104      6K       8K 166960K       758        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       821        0
       in_multi    84      6K       7K 166960K       768        0
    ether_multi     1      0K       0K 166960K        64        0
            mrt     1      0K       0K 166960K        10        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   127    572K     572K 166960K       127        0
           exec     0      0K       1K 166960K      1614        0
     pfkey data     0      0K       0K 166960K         6        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   282     90K     106K 166960K     44009        0
       UVM aobj   147      9K       9K 166960K       161        0
     pinsyscall    33     66K     100K 166960K      7387        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     1      0K       1K 166960K       379        0
            NDP    19      0K       1K 166960K       250        0
           temp    78   6820K   14756K 166960K    171974        0
         kqueue    12     18K      30K 166960K       750        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      588    0      585     3     2     1     3     0     8    0
rtentry    112      736    0      644     5     1     4     4     0     8    0
unpcb      144     3657    0     3643    11     9     2     6     0     8    1
syncache   336        7    0        7     4     4     0     1     0     8    0
tcpqe       32       29  112       29     3     3     0     1     0     8    0
tcpcb      808     1310    0     1305    14    13     1     2     0     8    0
arp        120      138    0      121     1     0     1     1     0     8    0
inpcb      384     5045    0     5034    28    26     2     9     0     8    0
nd6        136      198    0      173     2     1     1     2     0     8    0
pkpcb       40       30    0       30    18    17     1     1     0     8    1
kcovpl      48       58    0       50     1     0     1     1     0     8    0
ppxss      1168      40    0       40    21    20     1     1     0     8    1
pffrag     232       50    0       48     2     1     1     1     0   482    0
pffrnode    88       49    0       47     2     1     1     1     0     8    0
pffrent     40      540    0      538     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24      398    0      367     1     0     1     1     0     8    0
pfstkey    128      398    0      367     4     2     2     3     0     8    0
pfstate    376      398    0      367    10     6     4     7     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
rttmr      136        1    0        1     1     1     0     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     2654    0     2273    46    22    24    30     0     8    0
art_table   32     2655    0     2273     4     0     4     4     0     8    0
art_node    16      719    0      637     1     0     1     1     0     8    0
sysvmsgpl   40       22    0       11     2     1     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112      382    0      372     1     0     1     1     0     8    0
shmpl      112      158    0       14     5     0     5     5     0     8    0
dirhash    1024     187    0      170     3     0     3     3     0     8    0
dino2pl    256     9667    0     8128    97     0    97    97     0     8    0
ffsino     272     9667    0     8128   104     0   104   104     0     8    0
nchpl      144    16671    0    16064    66    38    28    66     0     8    0
uvmvnodes   80    10284    0        0   210     0   210   210     0     8    0
vnodes     216    10284    0        0   572     0   572   572     0     8    0
namei      1024   60387    0    60387    11    10     1     2     0     8    1
percpumem   16      176    0      124     1     0     1     1     0     8    0
vcpupl     3904      12    0        4     1     0     1     1     0     8    0
vmpool     696       29    0       21     3     2     1     1     0     8    0
kstatmem   264      282    0      248     6     3     3     3     0     8    0
scsiplug    72       10    0       10    10     9     1     1     0     8    1
scxspl     216   133761    0   133751    37    36     1     8     1     8    0
plimitpl   152      790    0      774     1     0     1     1     0     8    0
sigapl     424     5213    0     5168     8     2     6     8     0     8    0
futexpl     64    80538    0    80534     9     8     1     1     0     8    0
knotepl    120     1034    0        0    19     0    19    19     0     8    0
kqueuepl   216     1898    0     1890    18    17     1    12     0     8    0
pipepl     320      880    0      852     3     0     3     3     0     8    0
fdescpl    496     5167    0     5143     7     3     4     5     0     8    0
filepl     152    34382    0    34136    34    23    11    19     0     8    0
lockfpl    104     1400    0     1398     1     0     1     1     0     8    0
lockfspl    48      616    0      614     1     0     1     1     0     8    0
sessionpl  144       69    0       53     1     0     1     1     0     8    0
pgrppl      48      172    0      156     1     0     1     1     0     8    0
ucredpl    104     5983    0     5971     1     0     1     1     0     8    0
zombiepl   144     5170    0     5168     4     3     1     1     0     8    0
processpl  1136    5213    0     5168     6     1     5     6     0     8    0
procpl     656    10325    0    10258    13     5     8     9     0     8    0
srpgc       96       48    0       48    16    16     0     1     0     8    0
sosppl     168       13    0       13     9     9     0     1     0     8    0
sockpl     664     9374    0     9346    61    56     5    15     0     8    2
mcl64k     65536     10    0        0     2     0     2     2     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       6    0        0     1     0     1     1     0     8    0
mcl4k      4096       7    0        0     1     0     1     1     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048     700    0        0    48    10    38    48     0     8    0
mtagpl      96       38    0        0     1     0     1     1     0     8    0
mbufpl     256     1117    0        0    63     0    63    63     0     8    0
bufpl      280    18955    0     8667   735     0   735   735     0     8    0
anonpl      24   870700    0   859468   194   123    71    91     0   186    0
amapchunkpl 152  148954    0   148050    97    60    37    41     0   158    0
amappl16   200    20709    0    20541   123   101    22    35     0     8    4
amappl15   192       53    0       51     1     0     1     1     0     8    0
amappl14   184      323    0      311     2     1     1     2     0     8    0
amappl13   176       13    0       12     1     0     1     1     0     8    0
amappl12   168     6561    0     6530     2     0     2     2     0     8    0
amappl11   160       72    0       62     1     0     1     1     0     8    0
amappl10   152      139    0      126     1     0     1     1     0     8    0
amappl9    144      345    0      344     1     0     1     1     0     8    0
amappl8    136      409    0      369     2     0     2     2     0     8    0
amappl7    128       64    0       49     1     0     1     1     0     8    0
amappl6    120      992    0      974     2     1     1     2     0     8    0
amappl5    112      364    0      351     1     0     1     1     0     8    0
amappl4    104      974    0      936     2     0     2     2     0     8    0
amappl3     96    26420    0    26336     3     0     3     3     0     8    0
amappl2     88     5654    0     5583     4     2     2     4     0     8    0
amappl1     80    27258    0    26772    22    11    11    22     0     8    0
amappl      88    42736    0    42550     7     2     5     6     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      160    0       14     3     0     3     3     0     8    0
uaddrrnd    24     5196    0     5163     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     5196    0     5163     1     0     1     1     0     8    0
vmmpekpl   168    37820    0    37750     4     0     4     4     0     8    0
vmmpepl    168   334290    0   332431   247   149    98   117     0   357    3
vmsppl     440     5195    0     5162     6     1     5     5     0     8    0
rwobjpl     56    92572    0    81016   188    21   167   167     0     8    1
pdppl      4096   10399    0    10332   289   212    77    77     0     8   10
pvpl        32    49185    0        0   398     1   397   397     0   265    0
pmappl     248     5195    0     5162     5     2     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      708    0      293    13     0    13    13     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437
panic(ffffffff8285e523) at panic+0x17b sys/kern/subr_prf.c:198
softclock(0) at softclock+0x22d sys/kern/kern_timeout.c:759
softintr_dispatch(0) at softintr_dispatch+0xcd sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline]
__mp_lock(ffffffff82e7df10) at __mp_lock+0x122 sys/kern/kern_lock.c:147
syscall(ffff80002bd25830) at syscall+0x83b mi_syscall sys/sys/syscall_mi.h:180 [inline]
syscall(ffff80002bd25830) at syscall+0x83b sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x6fc8f511ae90, count: -8
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x1e:        addq    $0x8,%rsp
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_acquire_count(ffffffff82e7df10,1) at __mp_acquire_count+0x5a sys/kern/kern_lock.c:227
tsleep(fffffd8067a8fa00,11,ffffffff8284e343,0) at tsleep+0x16f
getblk(fffffd807efa6510,1fa500,4000,0,ffffffffffffffff) at getblk+0x137 sys/kern/vfs_bio.c:1025
bread(fffffd807efa6510,1fa500,4000,ffff80002a167108) at bread+0x3e bio_doread sys/kern/vfs_bio.c:430 [inline]
bread(fffffd807efa6510,1fa500,4000,ffff80002a167108) at bread+0x3e sys/kern/vfs_bio.c:475
ffs_update(fffffd806f70f780,0) at ffs_update+0x14c sys/ufs/ffs/ffs_inode.c:91
VOP_FSYNC(fffffd805fcc87d8,fffffd807f7d3f08,3,ffff80002a148f68) at VOP_FSYNC+0xd2 sys/kern/vfs_vops.c:311
syncer_thread(ffff80002a148f68) at syncer_thread+0x221 sys/kern/vfs_sync.c:161
end trace frame: 0x0, count: 4
ddb{1}> trace
x86_ipi_db(ffff800029cebff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158
__mp_acquire_count(ffffffff82e7df10,1) at __mp_acquire_count+0x5a sys/kern/kern_lock.c:227
tsleep(fffffd8067a8fa00,11,ffffffff8284e343,0) at tsleep+0x16f
getblk(fffffd807efa6510,1fa500,4000,0,ffffffffffffffff) at getblk+0x137 sys/kern/vfs_bio.c:1025
bread(fffffd807efa6510,1fa500,4000,ffff80002a167108) at bread+0x3e bio_doread sys/kern/vfs_bio.c:430 [inline]
bread(fffffd807efa6510,1fa500,4000,ffff80002a167108) at bread+0x3e sys/kern/vfs_bio.c:475
ffs_update(fffffd806f70f780,0) at ffs_update+0x14c sys/ufs/ffs/ffs_inode.c:91
VOP_FSYNC(fffffd805fcc87d8,fffffd807f7d3f08,3,ffff80002a148f68) at VOP_FSYNC+0xd2 sys/kern/vfs_vops.c:311
syncer_thread(ffff80002a148f68) at syncer_thread+0x221 sys/kern/vfs_sync.c:161
end trace frame: 0x0, count: -11

Crashes (56):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/20 07:54 openbsd 676865473293 c0f1611a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/14 01:09 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/13 16:37 openbsd aa47c49a2e9a fdb4c10c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/11 05:29 openbsd f63e15d85063 9026e142 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/10 17:49 openbsd 898e5d067977 375932ce .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/06 10:50 openbsd 27da0d9a6e0d d884b519 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/04 16:07 openbsd c604ab84837e 610f2a54 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/03 14:34 openbsd 5344938f422c ddfc15a1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/05/01 15:21 openbsd a6ba80fb8d43 3ba885bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/30 12:06 openbsd cbdc8d63ee5f 3ce4924c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/29 03:48 openbsd b205d946bc4d 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/28 04:01 openbsd 4a1a463e112f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/28 02:37 openbsd 4a1a463e112f 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/27 10:07 openbsd 9d895d273374 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/27 07:28 openbsd 9d895d273374 07b455f9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/26 04:04 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/25 23:42 openbsd 8fa0fb927089 8bdc0f22 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/24 16:13 openbsd 799d9b3d961e a604cf37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/24 07:11 openbsd e6c7c102cf5d 21339d7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/21 03:34 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/21 02:00 openbsd a0c63bf7b3c7 af24b050 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/18 01:08 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/17 14:40 openbsd 456e8b6ad58e acc528cb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/15 13:28 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/15 11:43 openbsd 7019ae976ad9 459f4b00 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/14 17:19 openbsd 56d65d052d3a c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/14 02:53 openbsd 3a5505f27483 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/12 12:13 openbsd 474ea8ba1797 c8349e48 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/10 23:38 openbsd d11f3b71804f 33b9e058 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/09 12:27 openbsd b226cd0be9f7 56086b24 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/09 03:35 openbsd 7e284d508f03 f3234354 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/08 12:56 openbsd e16d075e3f83 7591ebb5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/08 10:28 openbsd e16d075e3f83 7591ebb5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/07 17:22 openbsd 424974cc1f1f ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/07 11:39 openbsd 424974cc1f1f ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/06 23:27 openbsd 85fbf21ae5ae ca620dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/05 01:36 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/04 22:11 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/03 11:44 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/02 13:14 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/01 18:37 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/04/01 04:53 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/31 20:24 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/30 20:10 openbsd 2ee472d028ec 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/26 15:55 openbsd 7c54c7664c87 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/26 00:28 openbsd e226f85ad9fb 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/24 05:38 openbsd f7d60097d803 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/21 10:56 openbsd 0e3a08970453 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/13 09:07 openbsd 9d7a05f92003 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/12 21:22 openbsd 3b374a56007a 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/12 20:02 openbsd 3b374a56007a 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/12 00:39 openbsd b2d77cef2d2b 6ee49f2e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/06 03:58 openbsd cf53fb485466 f39a7eed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/05 15:00 openbsd 20110d46fc7f 9ed46f64 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/03/04 23:47 openbsd 2a47495d462e 5fc53669 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: softclock: invalid to_clock: ADDR
2024/02/28 07:33 openbsd f2888ae16d7e d367cbe5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: softclock: invalid to_clock: ADDR
* Struck through repros no longer work on HEAD.