uvm_fault: NUM TID PID UID PRFLAGS PFLAGS CPU COMMAND*ADDR NUM NUM NUM ADDR NUM
1 view
Skip to first unread message
syzbot
Feb 25, 2023, 8:57:37 PM2/25/23
to syzkaller-o...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 1e5b016c5082 sync for __syscall removal
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=127c3274c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=6cab829f371550e14e76
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/452af0b271ef/disk-1e5b016c.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/5145fa4f4c7c/bsd-1e5b016c.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/992507fc6105/kernel-1e5b016c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6cab82...@syzkaller.appspotmail.com
kernel: page fault trap, code=0
Stopped at 0 TID PID UID PRFLAGS PFLAGS CPU COMMAND
*102551 44534 0 0 0x4000000 0 syz-executor.6
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
end trace frame: 0xffff800027f9c680, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: attempt to execute user address 0x0 in supervisor mode
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
ddb> show registers
rdi 0
rsi 0
rbp 0xffff800027f9bdd0
rbx 0
rdx 0xffff80000002a0c0
rcx 0xffffffff82c10a70 timeout_todo
rax 0x9
r8 0
r9 0
r10 0x80a554f75ce6608a
r11 0
r12 0
r13 0xffffffff82b9dff0 cpu_info_full_primary+0x1ff0
r14 0
r15 0
rip 0
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff800027f9bd98
ss 0x10
0
ddb> show proc
PROC (syz-executor.6) pid=102551 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=32, usrpri=86, nice=20
forw=0xffffffffffffffff, list=0xffff80002ce54b18,0xffff80002ce54300
process=0xffff80002e926bd0 user=0xffff800027f97000, vmspace=0xfffffd806ed00c20
estcpu=36, cpticks=101, pctcpu=0.0
user=0, sys=100, intr=1
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
13715 323276 95513 0 2 0 syz-executor.5
13715 344376 95513 0 2 0x4000000 syz-executor.5
13715 423818 95513 0 3 0x4000080 fsleep syz-executor.5
5492 119428 45864 0 2 0 syz-executor.0
5492 153743 45864 0 3 0x4000080 fsleep syz-executor.0
5492 162894 45864 0 3 0x4000080 fsleep syz-executor.0
44534 87134 69407 0 2 0 syz-executor.6
*44534 102551 69407 0 7 0x4000000 syz-executor.6
85821 75446 3764 0 2 0 syz-executor.4
85821 83151 3764 0 3 0x4000080 fsleep syz-executor.4
41297 47603 59099 0 2 0 syz-executor.1
41297 307691 59099 0 3 0x4000080 fsleep syz-executor.1
92518 272324 36386 0 2 0x10 syz-executor.2
92518 194983 36386 0 3 0x4000090 fsleep syz-executor.2
89945 401307 36965 0 2 0x480 syz-executor.7
89945 510277 36965 0 3 0x4000080 fsleep syz-executor.7
97718 223152 80929 0 2 0x480 syz-executor.3
97718 217224 80929 0 3 0x4000080 fsleep syz-executor.3
97718 184252 80929 0 3 0x4000080 fsleep syz-executor.3
59099 413400 25729 0 2 0x482 syz-executor.1
3764 99466 25729 0 2 0x482 syz-executor.4
36386 295751 25729 0 2 0x482 syz-executor.2
69407 472101 25729 0 2 0x482 syz-executor.6
36965 431454 25729 0 2 0x482 syz-executor.7
80929 83974 25729 0 2 0x482 syz-executor.3
95513 231111 25729 0 2 0x482 syz-executor.5
45864 188684 25729 0 2 0x482 syz-executor.0
84589 105893 0 0 3 0x14200 bored sosplice
25729 440475 78352 0 3 0x82 thrsleep syz-fuzzer
25729 18160 78352 0 2 0x4000482 syz-fuzzer
25729 425372 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 140930 78352 0 3 0x4000082 wait syz-fuzzer
25729 286611 78352 0 3 0x4000082 wait syz-fuzzer
25729 497639 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 108396 78352 0 2 0x4000482 syz-fuzzer
25729 253794 78352 0 3 0x4000082 wait syz-fuzzer
25729 116791 78352 0 3 0x4000082 wait syz-fuzzer
25729 72101 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 290769 78352 0 3 0x4000082 wait syz-fuzzer
25729 224713 78352 0 3 0x4000082 wait syz-fuzzer
25729 117664 78352 0 3 0x4000082 wait syz-fuzzer
25729 22854 78352 0 3 0x4000082 wait syz-fuzzer
78352 67009 41628 0 3 0x10008a sigsusp ksh
41628 110575 74535 0 3 0x9a kqread sshd
72670 360903 1 0 3 0x100083 ttyopn getty
74535 183548 1 0 3 0x88 kqread sshd
78987 443208 16607 73 3 0x1100090 kqread syslogd
16607 289607 1 0 3 0x100082 netio syslogd
53109 230525 1 0 3 0x100080 kqread resolvd
93971 480814 56227 77 3 0x100092 kqread dhcpleased
22370 77409 56227 77 3 0x100092 kqread dhcpleased
56227 33964 1 0 3 0x80 kqread dhcpleased
76806 462324 0 0 3 0x14200 bored smr
22421 433814 0 0 2 0x14200 zerothread
44117 431883 0 0 3 0x14200 aiodoned aiodoned
85151 242064 0 0 2 0x14600 update
26240 516699 0 0 3 0x14200 cleaner cleaner
93102 71202 0 0 3 0x14200 reaper reaper
41012 123056 0 0 3 0x14200 pgdaemon pagedaemon
97058 348828 0 0 3 0x14200 bored viomb
83650 125886 0 0 3 0x40014200 acpi0 acpi0
38275 158691 0 0 3 0x14200 bored softnet
2871 75588 0 0 3 0x14200 bored softnet
14455 368543 0 0 3 0x14200 bored softnet
93782 493523 0 0 3 0x14200 bored softnet
90614 389817 0 0 2 0x14200 systqmp
30669 238716 0 0 3 0x14200 bored systq
28464 28793 0 0 2 0x40014200 softclock
13596 322824 0 0 3 0x40014200 idle0
1 44974 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10190 6430K 7042K 78643K 32013 0
pcb 13 24K 32K 78643K 3889 0
rtable 177 15K 17K 78643K 5841 0
ifaddr 64 22K 27K 78643K 1763 0
sysctl 2 0K 0K 78643K 2 0
counters 25 17K 17K 78643K 665 0
ioctlops 0 0K 4K 78643K 6248 0
iov 0 0K 40K 78643K 3014 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1579 99K 100K 78643K 16055 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 147 0
VM map 2 1K 1K 78643K 2 0
sem 12 5K 10K 78643K 16 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 18 65K 69K 78643K 15949 0
sigio 0 0K 0K 78643K 426 0
proc 60 59K 75K 78643K 3211 0
subproc 104 6K 6K 78643K 1150 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 2 0K 0K 78643K 847 0
in_multi 61 4K 6K 78643K 1624 0
ether_multi 1 0K 0K 78643K 95 0
mrt 1 0K 0K 78643K 73 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 61 281K 281K 78643K 61 0
exec 0 0K 1K 78643K 3725 0
pfkey data 0 0K 0K 78643K 11 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
UVM amap 351 89K 103K 78643K 103439 0
UVM aobj 131 4K 4K 78643K 134 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 632 0
NDP 10 0K 1K 78643K 573 0
temp 120 5770K 6798K 78643K 257010 0
kqueue 12 18K 28K 78643K 1973 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 2082 0 2079 31 30 1 3 0 8 0
rtentry 112 1659 0 1588 5 1 4 4 0 8 0
unpcb 144 39332 0 39313 220 212 8 13 0 8 7
syncache 296 119 0 119 30 30 0 1 0 8 0
tcpqe 32 319 0 319 17 17 0 2 0 8 0
tcpcb 776 4842 0 4837 192 191 1 14 0 8 0
arp 88 275 0 260 1 0 1 1 0 8 0
ipq 40 25 0 25 10 10 0 1 0 8 0
ipqe 40 92 0 92 10 10 0 1 0 8 0
inpcb 336 20181 0 20169 289 282 7 17 0 8 6
nd6 48 321 0 306 1 0 1 1 0 8 0
pkpcb 40 109 0 109 11 10 1 1 0 8 1
kcovpl 48 88 0 80 1 0 1 1 0 8 0
mppekey 1024 9 0 9 4 4 0 1 0 8 0
ppxss 1160 404 0 404 36 36 0 1 0 8 0
pppxif 1360 210 0 210 30 30 0 1 0 8 0
pfstscr 40 8 0 7 2 1 1 1 0 8 0
pfanchor 1280 706 70 194 46 3 43 43 0 8 0
pfqueue 264 2 0 2 1 1 0 1 0 8 0
pfstitem 24 2 0 0 1 0 1 1 0 8 0
pfstkey 128 16 0 14 2 1 1 1 0 8 0
pfstate 352 8 0 7 2 1 1 1 0 8 0
rttmr 136 22 0 22 6 6 0 1 0 8 0
art_heap8 4096 15 0 14 9 7 2 3 0 8 1
art_heap4 256 7497 0 7187 75 52 23 31 0 8 1
art_table 32 7512 0 7201 5 1 4 4 0 8 0
art_node 16 1628 0 1566 1 0 1 1 0 8 0
sysvmsgpl 40 64 0 46 1 0 1 1 0 8 0
semupl 112 5 0 5 1 1 0 1 0 8 0
semapl 112 10 0 0 1 0 1 1 0 8 0
shmpl 112 131 0 3 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 22725 0 21196 97 0 97 97 0 8 0
ffsino 240 22725 0 21196 91 0 91 91 0 8 0
nchpl 144 43855 0 42213 63 1 62 63 0 8 0
rtmask 32 11 0 11 5 5 0 1 0 8 0
uvmvnodes 80 6923 0 0 142 0 142 142 0 8 0
vnodes 216 6923 0 0 385 0 385 385 0 8 0
namei 1024 179913 0 179912 13 12 1 3 0 8 0
vmpool 664 64 0 64 13 13 0 1 0 8 0
kstatmem 264 726 0 706 4 1 3 3 0 8 0
scsiplug 72 13 0 13 4 4 0 1 0 8 0
scxspl 216 131699 0 131699 48 47 1 8 0 8 1
plimitpl 152 2224 0 2209 1 0 1 1 0 8 0
sigapl 424 16408 0 16362 8 2 6 8 0 8 0
futexpl 64 183915 0 183906 4 3 1 1 0 8 0
knotepl 120 458017 0 457936 144 138 6 17 0 8 0
kqueuepl 184 4029 0 4021 45 44 1 4 0 8 0
pipepl 288 4297 0 4266 90 85 5 7 0 8 2
fdescpl 432 16058 0 16029 6 2 4 4 0 8 0
filepl 120 159828 0 159580 227 212 15 21 0 8 7
lockfpl 104 4800 0 4798 10 9 1 2 0 8 0
lockfspl 48 1377 0 1375 1 0 1 1 0 8 0
sessionpl 144 103 0 87 1 0 1 1 0 8 0
pgrppl 48 221 0 205 1 0 1 1 0 8 0
ucredpl 104 18549 0 18535 1 0 1 1 0 8 0
zombiepl 144 16362 0 16362 3 2 1 1 0 8 1
processpl 1008 16408 0 16362 11 5 6 9 0 8 0
procpl 696 40516 0 40446 25 18 7 10 0 8 0
sosppl 168 202 0 202 35 35 0 1 0 8 0
sockpl 456 61861 0 61830 1582 1556 26 46 0 8 22
mcl64k 65536 866 0 866 41 40 1 1 0 8 1
mcl16k 16384 380 0 380 40 39 1 1 0 8 1
mcl12k 12288 518 0 518 44 43 1 1 0 8 1
mcl9k 9216 219 0 219 41 40 1 1 0 8 1
mcl8k 8192 1355 0 1355 37 36 1 1 0 8 1
mcl4k 4096 2147 0 2147 22 21 1 1 0 8 1
mcl2k2 2112 126 0 126 43 42 1 1 0 8 1
mcl2k 2048 115498 0 115425 95 83 12 34 0 8 0
mtagpl 96 2057 0 1788 27 19 8 8 0 8 0
mbufpl 256 474876 0 474373 3303 3262 41 1922 0 8 0
bufpl 288 32757 0 25832 495 0 495 495 0 8 0
anonpl 24 3226942 0 3207716 277 149 128 142 0 188 0
amapchunkpl 152 322917 0 322127 188 156 32 43 0 158 0
amappl16 200 31943 0 31273 196 159 37 48 0 8 0
amappl15 192 17 0 15 1 0 1 1 0 8 0
amappl14 184 441 0 430 2 1 1 2 0 8 0
amappl13 176 21 0 21 6 6 0 1 0 8 0
amappl12 168 1382 0 1377 1 0 1 1 0 8 0
amappl11 160 57 0 47 1 0 1 1 0 8 0
amappl10 152 179 0 169 1 0 1 1 0 8 0
amappl9 144 1120 0 1120 17 17 0 1 0 8 0
amappl8 136 622 0 539 4 1 3 3 0 8 0
amappl7 128 341 0 317 2 0 2 2 0 8 0
amappl6 120 619 0 604 2 1 1 2 0 8 0
amappl5 112 657 0 650 1 0 1 1 0 8 0
amappl4 104 1438 0 1409 2 1 1 2 0 8 0
amappl3 96 45409 0 45344 2 0 2 2 0 8 0
amappl2 88 17486 0 17407 3 0 3 3 0 8 0
amappl1 80 359252 0 358474 37 21 16 26 0 8 0
amappl 88 101861 0 101661 5 0 5 5 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 133 0 3 3 0 3 3 0 8 0
uaddrrnd 24 16122 0 16093 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 16122 0 16093 1 0 1 1 0 8 0
vmmpekpl 168 122053 0 122002 4 0 4 4 0 8 0
vmmpepl 168 1488919 0 1485883 454 310 144 157 0 357 6
vmsppl 344 16121 0 16093 3 0 3 3 0 8 0
rwobjpl 24 381952 0 373033 55 1 54 55 0 8 0
pdppl 4096 32250 0 32186 991 927 64 66 0 8 0
pvpl 32 6209976 0 6185056 573 366 207 334 0 265 1
pmappl 216 16121 0 16093 2 0 2 2 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 5728 0 4882 81 53 28 77 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
ddb> machine ddbcpu 1
No such command
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot found the following issue on:
HEAD commit: 1e5b016c5082 sync for __syscall removal
git tree: openbsd
console output: https://syzkaller.appspot.com/x/log.txt?x=127c3274c80000
kernel config: https://syzkaller.appspot.com/x/.config?x=1bc15e68cd2a49e5
dashboard link: https://syzkaller.appspot.com/bug?extid=6cab829f371550e14e76
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/452af0b271ef/disk-1e5b016c.raw.xz
bsd.gdb: https://storage.googleapis.com/syzbot-assets/5145fa4f4c7c/bsd-1e5b016c.gdb.xz
kernel image: https://storage.googleapis.com/syzbot-assets/992507fc6105/kernel-1e5b016c.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+6cab82...@syzkaller.appspotmail.com
kernel: page fault trap, code=0
Stopped at 0 TID PID UID PRFLAGS PFLAGS CPU COMMAND
*102551 44534 0 0 0x4000000 0 syz-executor.6
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
end trace frame: 0xffff800027f9c680, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: attempt to execute user address 0x0 in supervisor mode
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
ddb> show registers
rdi 0
rsi 0
rbp 0xffff800027f9bdd0
rbx 0
rdx 0xffff80000002a0c0
rcx 0xffffffff82c10a70 timeout_todo
rax 0x9
r8 0
r9 0
r10 0x80a554f75ce6608a
r11 0
r12 0
r13 0xffffffff82b9dff0 cpu_info_full_primary+0x1ff0
r14 0
r15 0
rip 0
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff800027f9bd98
ss 0x10
0
ddb> show proc
PROC (syz-executor.6) pid=102551 stat=onproc
flags process=0 proc=4000000<THREAD>
pri=32, usrpri=86, nice=20
forw=0xffffffffffffffff, list=0xffff80002ce54b18,0xffff80002ce54300
process=0xffff80002e926bd0 user=0xffff800027f97000, vmspace=0xfffffd806ed00c20
estcpu=36, cpticks=101, pctcpu=0.0
user=0, sys=100, intr=1
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
13715 323276 95513 0 2 0 syz-executor.5
13715 344376 95513 0 2 0x4000000 syz-executor.5
13715 423818 95513 0 3 0x4000080 fsleep syz-executor.5
5492 119428 45864 0 2 0 syz-executor.0
5492 153743 45864 0 3 0x4000080 fsleep syz-executor.0
5492 162894 45864 0 3 0x4000080 fsleep syz-executor.0
44534 87134 69407 0 2 0 syz-executor.6
*44534 102551 69407 0 7 0x4000000 syz-executor.6
85821 75446 3764 0 2 0 syz-executor.4
85821 83151 3764 0 3 0x4000080 fsleep syz-executor.4
41297 47603 59099 0 2 0 syz-executor.1
41297 307691 59099 0 3 0x4000080 fsleep syz-executor.1
92518 272324 36386 0 2 0x10 syz-executor.2
92518 194983 36386 0 3 0x4000090 fsleep syz-executor.2
89945 401307 36965 0 2 0x480 syz-executor.7
89945 510277 36965 0 3 0x4000080 fsleep syz-executor.7
97718 223152 80929 0 2 0x480 syz-executor.3
97718 217224 80929 0 3 0x4000080 fsleep syz-executor.3
97718 184252 80929 0 3 0x4000080 fsleep syz-executor.3
59099 413400 25729 0 2 0x482 syz-executor.1
3764 99466 25729 0 2 0x482 syz-executor.4
36386 295751 25729 0 2 0x482 syz-executor.2
69407 472101 25729 0 2 0x482 syz-executor.6
36965 431454 25729 0 2 0x482 syz-executor.7
80929 83974 25729 0 2 0x482 syz-executor.3
95513 231111 25729 0 2 0x482 syz-executor.5
45864 188684 25729 0 2 0x482 syz-executor.0
84589 105893 0 0 3 0x14200 bored sosplice
25729 440475 78352 0 3 0x82 thrsleep syz-fuzzer
25729 18160 78352 0 2 0x4000482 syz-fuzzer
25729 425372 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 140930 78352 0 3 0x4000082 wait syz-fuzzer
25729 286611 78352 0 3 0x4000082 wait syz-fuzzer
25729 497639 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 108396 78352 0 2 0x4000482 syz-fuzzer
25729 253794 78352 0 3 0x4000082 wait syz-fuzzer
25729 116791 78352 0 3 0x4000082 wait syz-fuzzer
25729 72101 78352 0 3 0x4000082 thrsleep syz-fuzzer
25729 290769 78352 0 3 0x4000082 wait syz-fuzzer
25729 224713 78352 0 3 0x4000082 wait syz-fuzzer
25729 117664 78352 0 3 0x4000082 wait syz-fuzzer
25729 22854 78352 0 3 0x4000082 wait syz-fuzzer
78352 67009 41628 0 3 0x10008a sigsusp ksh
41628 110575 74535 0 3 0x9a kqread sshd
72670 360903 1 0 3 0x100083 ttyopn getty
74535 183548 1 0 3 0x88 kqread sshd
78987 443208 16607 73 3 0x1100090 kqread syslogd
16607 289607 1 0 3 0x100082 netio syslogd
53109 230525 1 0 3 0x100080 kqread resolvd
93971 480814 56227 77 3 0x100092 kqread dhcpleased
22370 77409 56227 77 3 0x100092 kqread dhcpleased
56227 33964 1 0 3 0x80 kqread dhcpleased
76806 462324 0 0 3 0x14200 bored smr
22421 433814 0 0 2 0x14200 zerothread
44117 431883 0 0 3 0x14200 aiodoned aiodoned
85151 242064 0 0 2 0x14600 update
26240 516699 0 0 3 0x14200 cleaner cleaner
93102 71202 0 0 3 0x14200 reaper reaper
41012 123056 0 0 3 0x14200 pgdaemon pagedaemon
97058 348828 0 0 3 0x14200 bored viomb
83650 125886 0 0 3 0x40014200 acpi0 acpi0
38275 158691 0 0 3 0x14200 bored softnet
2871 75588 0 0 3 0x14200 bored softnet
14455 368543 0 0 3 0x14200 bored softnet
93782 493523 0 0 3 0x14200 bored softnet
90614 389817 0 0 2 0x14200 systqmp
30669 238716 0 0 3 0x14200 bored systq
28464 28793 0 0 2 0x40014200 softclock
13596 322824 0 0 3 0x40014200 idle0
1 44974 0 0 3 0x80082 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10190 6430K 7042K 78643K 32013 0
pcb 13 24K 32K 78643K 3889 0
rtable 177 15K 17K 78643K 5841 0
ifaddr 64 22K 27K 78643K 1763 0
sysctl 2 0K 0K 78643K 2 0
counters 25 17K 17K 78643K 665 0
ioctlops 0 0K 4K 78643K 6248 0
iov 0 0K 40K 78643K 3014 0
mount 1 1K 1K 78643K 1 0
log 0 0K 0K 78643K 4 0
vnodes 1579 99K 100K 78643K 16055 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 9K 78643K 147 0
VM map 2 1K 1K 78643K 2 0
sem 12 5K 10K 78643K 16 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1697 195K 286K 78643K 12548 0
file desc 18 65K 69K 78643K 15949 0
sigio 0 0K 0K 78643K 426 0
proc 60 59K 75K 78643K 3211 0
subproc 104 6K 6K 78643K 1150 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
ip_moptions 2 0K 0K 78643K 847 0
in_multi 61 4K 6K 78643K 1624 0
ether_multi 1 0K 0K 78643K 95 0
mrt 1 0K 0K 78643K 73 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 61 281K 281K 78643K 61 0
exec 0 0K 1K 78643K 3725 0
pfkey data 0 0K 0K 78643K 11 0
tdb 3 0K 0K 78643K 3 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 8 62K 64K 78643K 10 0
UVM amap 351 89K 103K 78643K 103439 0
UVM aobj 131 4K 4K 78643K 134 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
ip6_options 0 0K 0K 78643K 632 0
NDP 10 0K 1K 78643K 573 0
temp 120 5770K 6798K 78643K 257010 0
kqueue 12 18K 28K 78643K 1973 0
SYN cache 2 16K 16K 78643K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 2082 0 2079 31 30 1 3 0 8 0
rtentry 112 1659 0 1588 5 1 4 4 0 8 0
unpcb 144 39332 0 39313 220 212 8 13 0 8 7
syncache 296 119 0 119 30 30 0 1 0 8 0
tcpqe 32 319 0 319 17 17 0 2 0 8 0
tcpcb 776 4842 0 4837 192 191 1 14 0 8 0
arp 88 275 0 260 1 0 1 1 0 8 0
ipq 40 25 0 25 10 10 0 1 0 8 0
ipqe 40 92 0 92 10 10 0 1 0 8 0
inpcb 336 20181 0 20169 289 282 7 17 0 8 6
nd6 48 321 0 306 1 0 1 1 0 8 0
pkpcb 40 109 0 109 11 10 1 1 0 8 1
kcovpl 48 88 0 80 1 0 1 1 0 8 0
mppekey 1024 9 0 9 4 4 0 1 0 8 0
ppxss 1160 404 0 404 36 36 0 1 0 8 0
pppxif 1360 210 0 210 30 30 0 1 0 8 0
pfstscr 40 8 0 7 2 1 1 1 0 8 0
pfanchor 1280 706 70 194 46 3 43 43 0 8 0
pfqueue 264 2 0 2 1 1 0 1 0 8 0
pfstitem 24 2 0 0 1 0 1 1 0 8 0
pfstkey 128 16 0 14 2 1 1 1 0 8 0
pfstate 352 8 0 7 2 1 1 1 0 8 0
rttmr 136 22 0 22 6 6 0 1 0 8 0
art_heap8 4096 15 0 14 9 7 2 3 0 8 1
art_heap4 256 7497 0 7187 75 52 23 31 0 8 1
art_table 32 7512 0 7201 5 1 4 4 0 8 0
art_node 16 1628 0 1566 1 0 1 1 0 8 0
sysvmsgpl 40 64 0 46 1 0 1 1 0 8 0
semupl 112 5 0 5 1 1 0 1 0 8 0
semapl 112 10 0 0 1 0 1 1 0 8 0
shmpl 112 131 0 3 4 0 4 4 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 22725 0 21196 97 0 97 97 0 8 0
ffsino 240 22725 0 21196 91 0 91 91 0 8 0
nchpl 144 43855 0 42213 63 1 62 63 0 8 0
rtmask 32 11 0 11 5 5 0 1 0 8 0
uvmvnodes 80 6923 0 0 142 0 142 142 0 8 0
vnodes 216 6923 0 0 385 0 385 385 0 8 0
namei 1024 179913 0 179912 13 12 1 3 0 8 0
vmpool 664 64 0 64 13 13 0 1 0 8 0
kstatmem 264 726 0 706 4 1 3 3 0 8 0
scsiplug 72 13 0 13 4 4 0 1 0 8 0
scxspl 216 131699 0 131699 48 47 1 8 0 8 1
plimitpl 152 2224 0 2209 1 0 1 1 0 8 0
sigapl 424 16408 0 16362 8 2 6 8 0 8 0
futexpl 64 183915 0 183906 4 3 1 1 0 8 0
knotepl 120 458017 0 457936 144 138 6 17 0 8 0
kqueuepl 184 4029 0 4021 45 44 1 4 0 8 0
pipepl 288 4297 0 4266 90 85 5 7 0 8 2
fdescpl 432 16058 0 16029 6 2 4 4 0 8 0
filepl 120 159828 0 159580 227 212 15 21 0 8 7
lockfpl 104 4800 0 4798 10 9 1 2 0 8 0
lockfspl 48 1377 0 1375 1 0 1 1 0 8 0
sessionpl 144 103 0 87 1 0 1 1 0 8 0
pgrppl 48 221 0 205 1 0 1 1 0 8 0
ucredpl 104 18549 0 18535 1 0 1 1 0 8 0
zombiepl 144 16362 0 16362 3 2 1 1 0 8 1
processpl 1008 16408 0 16362 11 5 6 9 0 8 0
procpl 696 40516 0 40446 25 18 7 10 0 8 0
sosppl 168 202 0 202 35 35 0 1 0 8 0
sockpl 456 61861 0 61830 1582 1556 26 46 0 8 22
mcl64k 65536 866 0 866 41 40 1 1 0 8 1
mcl16k 16384 380 0 380 40 39 1 1 0 8 1
mcl12k 12288 518 0 518 44 43 1 1 0 8 1
mcl9k 9216 219 0 219 41 40 1 1 0 8 1
mcl8k 8192 1355 0 1355 37 36 1 1 0 8 1
mcl4k 4096 2147 0 2147 22 21 1 1 0 8 1
mcl2k2 2112 126 0 126 43 42 1 1 0 8 1
mcl2k 2048 115498 0 115425 95 83 12 34 0 8 0
mtagpl 96 2057 0 1788 27 19 8 8 0 8 0
mbufpl 256 474876 0 474373 3303 3262 41 1922 0 8 0
bufpl 288 32757 0 25832 495 0 495 495 0 8 0
anonpl 24 3226942 0 3207716 277 149 128 142 0 188 0
amapchunkpl 152 322917 0 322127 188 156 32 43 0 158 0
amappl16 200 31943 0 31273 196 159 37 48 0 8 0
amappl15 192 17 0 15 1 0 1 1 0 8 0
amappl14 184 441 0 430 2 1 1 2 0 8 0
amappl13 176 21 0 21 6 6 0 1 0 8 0
amappl12 168 1382 0 1377 1 0 1 1 0 8 0
amappl11 160 57 0 47 1 0 1 1 0 8 0
amappl10 152 179 0 169 1 0 1 1 0 8 0
amappl9 144 1120 0 1120 17 17 0 1 0 8 0
amappl8 136 622 0 539 4 1 3 3 0 8 0
amappl7 128 341 0 317 2 0 2 2 0 8 0
amappl6 120 619 0 604 2 1 1 2 0 8 0
amappl5 112 657 0 650 1 0 1 1 0 8 0
amappl4 104 1438 0 1409 2 1 1 2 0 8 0
amappl3 96 45409 0 45344 2 0 2 2 0 8 0
amappl2 88 17486 0 17407 3 0 3 3 0 8 0
amappl1 80 359252 0 358474 37 21 16 26 0 8 0
amappl 88 101861 0 101661 5 0 5 5 0 92 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 133 0 3 3 0 3 3 0 8 0
uaddrrnd 24 16122 0 16093 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 16122 0 16093 1 0 1 1 0 8 0
vmmpekpl 168 122053 0 122002 4 0 4 4 0 8 0
vmmpepl 168 1488919 0 1485883 454 310 144 157 0 357 6
vmsppl 344 16121 0 16093 3 0 3 3 0 8 0
rwobjpl 24 381952 0 373033 55 1 54 55 0 8 0
pdppl 4096 32250 0 32186 991 927 64 66 0 8 0
pvpl 32 6209976 0 6185056 573 366 207 334 0 265 1
pmappl 216 16121 0 16093 2 0 2 2 0 8 0
extentpl 40 56 0 38 1 0 1 1 0 8 0
phpool 112 5728 0 4882 81 53 28 77 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
ddb> machine ddbcpu 1
No such command
ddb> trace
0(0,0,ffff80000002a0c0,0,577,fffffd807ce76e98) at 0
timeout_run(fffffd807ce76e98) at timeout_run+0x8b sys/kern/kern_timeout.c:641
softclock_process_kclock_timeout(fffffd807ce76e98,0) at softclock_process_kclock_timeout+0x1c6 sys/kern/kern_timeout.c:666
softclock(0) at softclock+0x11a sys/kern/kern_timeout.c:717
softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90
Xsoftclock() at Xsoftclock+0x1f
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x28 sys/arch/amd64/amd64/bus_space.c:666
acpitimer_delay(3e8) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:125
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 pckbc_poll_data1 sys/dev/ic/pckbc.c:148 [inline]
pckbc_poll_cmd1(ffff80000002ff00,0,ffff800027f9c0e0) at pckbc_poll_cmd1+0x285 sys/dev/ic/pckbc.c:612
pckbc_poll_cmd(ffff80000002ff00,0,ffff800027f9c19f,1,0,0,58df513915c1bd08) at pckbc_poll_cmd+0xf6 sys/dev/ic/pckbc.c:684
pckbd_enable(ffff800000683700,1) at pckbd_enable+0xc0 sys/dev/pckbc/pckbd.c:463
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_enable sys/dev/wscons/wskbd.c:798 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa wskbd_do_open sys/dev/wscons/wskbd.c:874 [inline]
wskbdopen(4300,81,2000,ffff80002ce545a8) at wskbdopen+0x1fa sys/dev/wscons/wskbd.c:856
spec_open(ffff800027f9c2b8) at spec_open+0x3df sys/kern/spec_vnops.c:150
VOP_OPEN(fffffd8076ae12b0,81,fffffd807f7d7340,ffff80002ce545a8) at VOP_OPEN+0x6c sys/kern/vfs_vops.c:138
vn_open(ffff800027f9c508,81,0) at vn_open+0x467 sys/kern/vfs_vnops.c:177
doopenat(ffff80002ce545a8,ffffff9c,20000040,80,0,ffff800027f9c6e0) at doopenat+0x26a sys/kern/vfs_syscalls.c:1127
syscall(ffff800027f9c760) at syscall+0x4a4 sys/arch/amd64/amd64/trap.c:625
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x26a96d982c0, count: -17
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
syzbot
May 26, 2023, 9:57:35 PM5/26/23
to syzkaller-o...@googlegroups.com
Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.
Crashes did not happen for a while, no reproducer and no activity.
Reply all
Reply to author
Forward
0 new messages