Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. 2024/11/02 06:03:33 ignoring optional flag "sandboxArg"="0" 2024/11/02 06:03:33 ignoring optional flag "type"="gce" 2024/11/02 06:03:33 parsed 1 programs 2024/11/02 06:03:34 executed programs: 0 uvm_fault(0xfffffd8068ca8c70, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *460303 30583 0 0 0x4000000 0K syz-executor.2 59528 29503 0 0x14000 0x200 1 reaper ktrops(ffff8000ffff47c8,ffffffffffffffff,0,80000206,fffffd8068232380,fffffd807f7d32d8) at ktrops+0x58 doktrace(fffffd8068232380,4,206,0,ffff8000ffff47c8) at doktrace+0x6dd sys_ktrace(ffff8000ffff47c8,ffff80002a1a6620,ffff80002a1a6570) at sys_ktrace+0x11c syscall(ffff80002a1a6620) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x29e9cb82490, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd8068ca8c70, 0xf, 0, 1) -> e ddb{0}> trace ktrops(ffff8000ffff47c8,ffffffffffffffff,0,80000206,fffffd8068232380,fffffd807f7d32d8) at ktrops+0x58 doktrace(fffffd8068232380,4,206,0,ffff8000ffff47c8) at doktrace+0x6dd sys_ktrace(ffff8000ffff47c8,ffff80002a1a6620,ffff80002a1a6570) at sys_ktrace+0x11c syscall(ffff80002a1a6620) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x29e9cb82490, count: -5 ddb{0}> show registers rdi 0xffff8000ffff47c8 rsi 0xffffffffffffffff rbp 0xffff80002a1a6340 rbx 0xfffffd807f7d32d8 rdx 0 rcx 0x80000206 __kernel_virt_to_phys+0x206 rax 0x1 r8 0xfffffd8068232380 r9 0xfffffd807f7d32d8 r10 0x31525878275af2d r11 0x24962d6caab5b826 r12 0xffff8000ffff47c8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0x80000206 __kernel_virt_to_phys+0x206 rip 0xffffffff8107f5f8 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a1a62c0 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb{0}> show proc PROC (syz-executor.2) tid=460303 pid=30583 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=52, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff4cd8,0xffff8000ffff42c8 process=0xffff8000ffff0db8 user=0xffff80002a1a1000, vmspace=0xfffffd8068ca8c70 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 88539 50948 82573 0 2 0 syz-executor.0 88539 500615 82573 0 2 0x4000000 syz-executor.0 30583 396322 45086 0 2 0 syz-executor.2 *30583 460303 45086 0 7 0x4000000 syz-executor.2 45086 93572 30793 0 3 0x82 nanoslp syz-executor.2 82573 359311 30793 0 3 0x82 nanoslp syz-executor.0 24259 352626 30793 0 2 0x2 syz-executor.7 66408 203500 30793 0 2 0x2 syz-executor.5 57858 175359 30793 0 2 0x2 syz-executor.1 81112 87259 30793 0 3 0x82 nanoslp syz-executor.6 29407 127833 30793 0 2 0x2 syz-executor.3 30600 226161 30793 0 2 0x2 syz-executor.4 30793 326110 3883 0 3 0x82 wait syz-execprog 30793 314453 3883 0 3 0x4000082 nanoslp syz-execprog 30793 235167 3883 0 3 0x4000082 wait syz-execprog 30793 307879 3883 0 3 0x4000082 thrsleep syz-execprog 30793 244923 3883 0 3 0x4000082 wait syz-execprog 30793 496194 3883 0 3 0x4000082 wait syz-execprog 30793 451558 3883 0 3 0x4000082 wait syz-execprog 30793 299970 3883 0 3 0x4000082 thrsleep syz-execprog 30793 245293 3883 0 3 0x4000082 wait syz-execprog 30793 266322 3883 0 3 0x4000082 wait syz-execprog 30793 182553 3883 0 3 0x4000082 wait syz-execprog 30793 109871 3883 0 3 0x4000082 thrsleep syz-execprog 30793 312862 3883 0 3 0x4000082 kqread syz-execprog 30793 3650 3883 0 3 0x4000082 thrsleep syz-execprog 30793 419812 3883 0 3 0x4000082 thrsleep syz-execprog 3883 46203 50861 0 3 0x10008a sigsusp ksh 50861 278822 80524 0 3 0x98 kqread sshd-session 80524 176707 9449 0 3 0x92 kqread sshd-session 43089 192118 1 0 3 0x100083 ttyin getty 9449 456857 1 0 3 0x88 kqread sshd 49739 165775 13551 74 3 0x1100092 bpf pflogd 13551 426228 1 0 3 0x80 sbwait pflogd 93275 51938 5801 73 3 0x1100090 kqread syslogd 5801 364597 1 0 3 0x100082 sbwait syslogd 75672 273666 1 0 3 0x100080 kqread resolvd 38500 439679 98629 77 3 0x100092 kqread dhcpleased 68980 310419 98629 77 3 0x100092 kqread dhcpleased 98629 494865 1 0 3 0x80 kqread dhcpleased 3404 279 0 0 3 0x14200 bored smr 13532 217899 0 0 3 0x14200 pgzero zerothread 81996 233709 0 0 3 0x14200 aiodoned aiodoned 61150 515179 0 0 3 0x14200 syncer update 15692 325586 0 0 3 0x14200 cleaner cleaner 29503 59528 0 0 7 0x14200 reaper 3438 180886 0 0 3 0x14200 pgdaemon pagedaemon 69150 421480 0 0 3 0x14200 bored viomb 61164 120833 0 0 3 0x40014200 acpi0 acpi0 51356 352010 0 0 3 0x40014200 idle1 66541 478003 0 0 3 0x14200 bored softnet3 70579 265346 0 0 3 0x14200 bored softnet2 11060 421432 0 0 3 0x14200 bored softnet1 38505 303744 0 0 3 0x14200 bored softnet0 30447 308968 0 0 3 0x14200 bored systqmp 92842 449764 0 0 3 0x14200 bored systq 57887 209809 0 0 3 0x14200 tmoslp softclockmp 17870 380149 0 0 3 0x40014200 tmoslp softclock 83787 403061 0 0 3 0x40014200 idle0 1 224996 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 30583 (syz-executor.2) thread 0xffff8000ffff47c8 (460303) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835649c0) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x278 #4 getblk+0x197 #5 bread+0x47 #6 ffs_update+0x198 #7 ufs_inactive+0x2e2 #8 VOP_INACTIVE+0x107 #9 vrele+0x129 #10 ktrsettrace+0xe7 #11 ktrops+0x271 #12 doktrace+0x6dd #13 sys_ktrace+0x11c #14 syscall+0xaf8 #15 Xsyscall+0x128 Process 24259 (syz-executor.7) thread 0xffff8000ffff6028 (352626) exclusive rrwlock inode r = 0 (0xfffffd8068a46928) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xaf8 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8068a46a38) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xaf8 #9 Xsyscall+0x128 Process 66408 (syz-executor.5) thread 0xffff8000ffff71e0 (203500) exclusive rrwlock inode r = 0 (0xfffffd806a5660a0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xaf8 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ce76c50) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xaf8 #9 Xsyscall+0x128 Process 57858 (syz-executor.1) thread 0xffff8000ffff62b0 (175359) exclusive rrwlock inode r = 0 (0xfffffd806a566b40) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xaf8 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806a5664e0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x218 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xaf8 #13 Xsyscall+0x128 Process 29407 (syz-executor.3) thread 0xffff8000ffff6f58 (127833) exclusive rrwlock inode r = 0 (0xfffffd806a5661b0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xaf8 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806a566c50) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x218 #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xaf8 #13 Xsyscall+0x128 Process 30600 (syz-executor.4) thread 0xffff8000ffff7c00 (226161) exclusive rrwlock inode r = 0 (0xfffffd806a5663d0) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x192 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xaf8 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8068e904d8) #0 witness_lock+0x5bb #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xaf8 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10181 11113K 11113K 166960K 11262 0 pcb 17 12K 12K 166960K 17 0 rtable 234 6K 6K 166960K 380 0 pf 34 17K 18K 166960K 48 0 ifaddr 43 7K 7K 166960K 49 0 ifgroup 55 2K 2K 166960K 60 0 counters 64 36K 36K 166960K 66 0 ioctlops 0 0K 4K 166960K 1484 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1262 79K 80K 166960K 1281 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 12 41K 81K 166960K 202 0 proc 69 91K 115K 166960K 556 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 110 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 426 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 74K 75K 166960K 4702 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 38 76K 112K 166960K 1581 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 28 2K 2K 166960K 31 0 temp 1 6808K 6872K 166960K 5772 0 kqueue 13 20K 20K 166960K 46 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 112 122 0 12 4 0 4 4 0 8 0 unpcb 144 69 0 52 1 0 1 1 0 8 0 syncache 336 9 0 9 2 1 1 1 0 8 1 tcpqe 32 18 0 18 1 1 0 1 0 8 0 tcpcb 808 12 0 9 1 0 1 1 0 8 0 arp 120 20 0 2 1 0 1 1 0 8 0 inpcb 336 73 0 67 1 0 1 1 0 8 0 nd6 136 27 0 3 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 4 1 0 1 1 0 8 0 pfstkey 128 23 0 4 1 0 1 1 0 8 0 pfstate 376 23 0 4 2 0 2 2 0 8 0 pfrule 1344 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 500 0 48 32 3 29 29 0 8 0 art_table 32 501 0 48 5 1 4 4 0 8 0 art_node 16 121 0 21 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1708 0 162 97 0 97 97 0 8 0 ffsino 272 1708 0 162 104 0 104 104 0 8 0 nchpl 144 2086 0 300 68 1 67 67 0 8 0 uvmvnodes 80 1722 0 0 36 0 36 36 0 8 0 vnodes 216 1722 0 0 96 0 96 96 0 8 0 namei 1024 8144 0 8143 3 2 1 2 0 8 0 percpumem 16 47 0 1 1 0 1 1 0 8 0 kstatmem 264 26 0 2 2 0 2 2 0 8 0 scxspl 216 8941 0 8941 10 8 2 8 1 8 2 plimitpl 152 59 0 42 1 0 1 1 0 8 0 sigapl 424 559 0 514 8 1 7 7 0 8 1 futexpl 64 158 0 158 2 1 1 1 0 8 1 knotepl 120 127 0 0 4 0 4 4 0 8 0 kqueuepl 216 42 0 33 1 0 1 1 0 8 0 pipepl 320 188 0 160 5 2 3 3 0 8 0 fdescpl 496 541 0 515 6 1 5 5 0 8 0 filepl 152 2259 0 2120 7 1 6 6 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 35 0 18 1 0 1 1 0 8 0 pgrppl 48 35 0 18 1 0 1 1 0 8 0 ucredpl 104 116 0 103 1 0 1 1 0 8 0 zombiepl 144 515 0 514 2 1 1 1 0 8 0 processpl 1160 559 0 514 5 1 4 4 0 8 0 procpl 648 637 0 576 7 1 6 6 0 8 0 sockpl 664 178 0 152 4 1 3 3 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 198 0 0 22 0 22 22 0 8 0 mcl2k 2048 12 0 0 2 0 2 2 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 205 0 0 12 0 12 12 0 8 0 bufpl 280 4434 0 158 306 0 306 306 0 8 0 anonpl 24 258861 0 254667 66 18 48 56 0 185 20 amapchunkpl 152 16151 0 15629 40 14 26 28 0 158 2 amappl16 200 6560 0 6486 8 3 5 5 0 8 0 amappl15 192 7 0 7 2 2 0 1 0 8 0 amappl14 184 228 0 214 3 1 2 2 0 8 1 amappl13 176 25 0 24 2 1 1 1 0 8 0 amappl12 168 1292 0 1265 4 2 2 2 0 8 0 amappl11 160 60 0 46 1 0 1 1 0 8 0 amappl10 152 98 0 88 2 1 1 1 0 8 0 amappl9 144 538 0 538 3 2 1 1 0 8 1 amappl8 136 199 0 169 2 0 2 2 0 8 0 amappl7 128 222 0 201 3 1 2 2 0 8 0 amappl6 120 331 0 326 3 2 1 2 0 8 0 amappl5 112 199 0 187 1 0 1 1 0 8 0 amappl4 104 524 0 503 3 1 2 2 0 8 1 amappl3 96 3424 0 3355 4 1 3 3 0 8 0 amappl2 88 1283 0 1202 6 2 4 4 0 8 1 amappl1 80 15197 0 14612 35 13 22 24 0 8 8 amappl 88 3936 0 3785 8 3 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 542 0 516 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 542 0 516 1 0 1 1 0 8 0 vmmpekpl 168 11411 0 11363 3 0 3 3 0 8 0 vmmpepl 168 66418 0 64699 134 14 120 126 0 357 37 vmsppl 448 541 0 516 7 3 4 4 0 8 0 rwobjpl 56 28420 0 25694 57 10 47 48 0 8 3 pdppl 4096 1091 0 1032 125 46 79 79 0 8 20 pvpl 32 49607 0 0 402 1 401 401 0 265 0 pmappl 248 541 0 516 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 416 0 57 12 1 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace ktrops(ffff8000ffff47c8,ffffffffffffffff,0,80000206,fffffd8068232380,fffffd807f7d32d8) at ktrops+0x58 doktrace(fffffd8068232380,4,206,0,ffff8000ffff47c8) at doktrace+0x6dd sys_ktrace(ffff8000ffff47c8,ffff80002a1a6620,ffff80002a1a6570) at sys_ktrace+0x11c syscall(ffff80002a1a6620) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x29e9cb82490, count: -5 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835647b8) at __mp_lock+0x192 reaper(ffff800029fd96d0) at reaper+0x24b end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835647b8) at __mp_lock+0x192 reaper(ffff800029fd96d0) at reaper+0x24b end trace frame: 0x0, count: -5