General kernel (non-driver) issues

Syscall level
4217 kern the kernel's handling of group permissions is suboptimal
12751 kern utimes(2) not working when user != fileowner
12846 kern brk(2) succeeds on values that should fail.
14721 kern It's possible to panic the system by opening a large number of files
15327 kern getrusage(2) not reporting all statistics
20108 kern KERN_LWP sysctl documentation missing
25118 kern semop() fails with EINVAL even when SEMUME is increased
30115 kern getrusage returns bogus ru_utime values
36328 kern clone(2) with CLONE_FILES can leak POSIX locks
37427 kern document _ksem_* syscalls
38497 kern Out of memory allocating ksiginfo
38670 kern ^Z does not seems to suspend programs that vfork'ed and wait.
38750 kern SCHED_FIFO behaviour does not match POSIX
38965 kern ktrace locking issue
38979 kern Document syscalls of src/sys/kern/sys_sched.c
39000 kern sigpending doesn't modify its set argument
39244 kern ioctl(2) doesn't describe domains of ioctl commands
39327 kern incoherent socket man pages
39935 kern ksymsread can leak contents of kernel memory to userspace
41225 kern sys_mqueue.c mq->mq_notify_proc can disappear
42350 kern frag size in "df -G" output has never been the right value, etc.
42496 kern DIOCGPART must die
42724 kern select(2) and poll(2) can return non-error status on bad file descriptors
43025 kern Non-atomic access to file_t causing corruption
43587 kern stupid error message during boot from sysctl if no COMPAT40 in kernel
44768 kern sched_rr_get_interval(3) should fail with invalid PID
45777 kern two sets of extattr/xattr syscalls
47439 kern open() does not check for invalid flags
48910 kern msync(2) should return ENOMEM on unmapped pages per POSIX; test criteria in t_msync incorrect
48962 kern NetBSD doesn't conform to POSIX with mlock(2) and per-process limits; returns EAGAIN instead of ENOMEM
44378 rump uprintf() get lost in rump kernel
44845 rump RUMP_MEMLIMIT crashes rump_ffs
45099 rump rump rename does not work for syscalls with different args
Processes/LWPs
38719 kern arm, m68k, vax have no cpu_info::ci_curlwp
38720 kern curlwp/curcpu should be functions if _MODULE or _LKM
38751 kern sched_rr_get_interval() doesn't tell the truth
39420 kern stopped processes can hold locks
39913 kern exec, fork, exit hooks need locking
42663 kern lwp_exit() might race with lwp_free()
Time
10102 time pps api clear/assert inverted
15688 time p_stats->p_cru.ru_utime.tv_sec may become negative
16116 time clock_getres(CLOCK_REALTIME) is pessimistic
18170 time caltontp() function in NTP subsystem ignores "seconds" field of input argument
24718 time rtc_offset changes do not fix up process start time
25637 time route expiration shouldn't use time(9)
26354 time negative running time for process in ps(1) and top(1) output
32035 time 3.0 MP machines can't keep time on busy nameservers
37726 time 32-bit overflow in adjtime(2)
38554 time kernel condvar wait functions should take an absolute timeout
38789 time Interval timer should use uptime, not real time.
40511 time negative runtime (maybe only in qemu)
40612 time timer_settime(2)'s ovalue is not relative time when the timer was created CLOCK_REALTIME
42189 time System clock unstable when using PCC as the timecounter when running under SMP
43997 time Kernel timer discrepancies
45090 time missing callout_ack in sleepq code
45145 time SMP cpu time accounting bug
45539 time add support for getrusage(2) memory size statistics
45626 time System time does not advance correctly when noatime is specified for /var
45634 time hardclock_ticks corner cases in vflushnext() et al
46094 time cpu0 timer sometimes far off
47851 time kernel panic: callout_softclock(v=0x0) -> nfs_timer(arg=0x0)
47431 time nanosleep is more like millisleep
UVM
6652 uvm swapping to a sparse file fails unpredictably.
12371 uvm swapctl -U (or -d ...) doesn't update process information
12451 uvm UVM always overcommits
25639 uvm uvm_vslock / uvm_vsunlock problems
28374 uvm vmstat(1) reports more pages freed by page daemon than actually are
33040 uvm kernel resource shortage + paging activity -> freeze
33278 uvm A process repeatetdly sleeps in uvm_fault on "flt_pmfail2"; pagedaemon is repeatedly woken up and does not help it; and nothing else can run.
34024 uvm panic: kernel diagnostic assertion "pg == NULL || pg->uobject == uobj" failed
35741 uvm PDPOLICY_CLOCKPRO has no tuning parameters analogous to vm.filemax, etc.
36019 uvm uvm_readahead.c:ra_startio() assumes (MAXPHYS & (MAXPHYS - 1)) == 0
36475 uvm uvm_fault() in process exit code
38270 uvm spurious OOM due to trylock
38271 uvm uvm_reclaimable is not mp-safe
38362 uvm pmap_growkernel should able to fail
40726 uvm uvm panic when xen guest re-mounts block device as rw
41765 uvm kernel panic while allocating swap space pages
45093 uvm kernel deadlock between TCP and UVM involving callouts
45413 uvm unkillable process, uvmexp_anonget waiting for mtsleep
45504 uvm A user large file write on fast sata drives can cause a kernel panic
45598 uvm expanding uvmexp_sysctl makes top etc fail
45718 uvm processes sometimes get stuck and spin in vm_map (kva fragmentation blocking exec args allocation...)
45746 uvm UVM_KMF_COLORMATCH/UVM_FLAG_COLORMATCH problems
46013 uvm uvm fault in printf_nolog() on MP Xen instance
46050 uvm Reader/writer lock error: rw_vector_enter: locking against myself (in uvm during fork)
46053 uvm Diagnostic assertion "oldsize != VSIZENOTSET || pgend > oldsize" failed in uvm/uvm_vnode.c
46136 uvm processes get stuck in D under high I/O load (likely related to kmem changes)
46235 uvm beating on ftruncate kills the system
46369 uvm Change type of variable rv.
47437 uvm sometimes boot fails with KASSERT(pmap_tlb_pendcount < ncpu)
DDB
4761 ddb/i386 setting any watchpoint results in a fatal page fault
7513 ddb/mac68k ddb doesn't work on Macintosh LCII
10016 ddb ddb can get stuck in infinite page-faults
11038 ddb (dM) ddb.onpanic=0 but still drops into ddb
11295 ddb change curproc marker in DDB's ps listing
14618 ddb/arm26 DDB breakpoints on arm26 behave badly
19774 ddb ddb can be entered twice and then you can't get out
20473 ddb kernel often panics in ddb
37851 ddb ddb x/{b,h,l,L} command not working and x/m prints bigendian
38873 ddb ddb(4) 'next' command is noisy and slow
38969 ddb/amd64 ddb backtrace on amd64 doesn't show function arguments
39388 ddb/mac68k NetBSD/mac68k DDB uselessness
40299 ddb/alpha "machine reboot" doesn't exist on alpha
40680 ddb Panic when using whatis <address> from DDB on non-modular port
40702 ddb ddb freezes when stepping over lock prefix
41705 ddb after continuing from a breakpoint in DDB the system receives a fatal supervisor mode trap
44242 ddb Minor but useful improvement to text output from NetBSD debugger
45647 ddb kill from ddb broken
45770 ddb there should be a ddb command to wake up a lwp
46240 ddb options(4) and/or ddb(4) should mention ddb_vgapost
48256 ddb ddb manual missing description for DDB_FROMCONSOLE
48446 ddb 'boot -d' doesn't enter ddb
16407 kgdb remote kgdb `next' command doesn't work in some situation.
42992 kgdb KGDB does not work once interrupts are enabled
Miscellaneous
2512 kern fuword() definition problem
3840 kern Race condition in the kernel log() and printf() functions
6434 kern compress/nocompress minor number bit for tapes
9449 kern rasops code is rather endianness-dependant
16001 kern Kernel dump files are not compressed on the fly when written to swap
22616 kern bootable CD's don't fully identify devices
31966 kern problem with scheduler statistics formulation on MP machines
38241 kern boot -a ... kernel_lock spinout
38330 kern running a -current kernel with lockdebug causes a panic
38501 kern NetBSD 4.99.60 (GENERIC) kernel does not handle shutdown -r properly on my hardware
38564 kern comcnpollc() is unnecessary
38565 kern console outputs CRLF in the "wrong" order
38583 kern Kernel objects that are too large to be in wired memory
38599 kern panic crashes in early bootstrap
38608 kern kernel crash, uvm_fault_internal
38619 kern Possible context switch / benchmark improvements
38779 kern NetBSD 4 KP : uvm_fault / proc_trampoline
38801 kern most drivers assume seralized d_open/d_close
38888 kern cnputc() has no locking
38937 kern aprint_debug calls make no sense during shutdown
39008 kern not all disks support DIOCGSTRATEGY/DIOCSSTRATEGY
39037 kern driver(9) does not describe about CFATTACH_DECL_NEW
39106 kern patch submissions for http://www.netbsd.org/contrib/projects.html#aprint
40505 kern delay(9) is a MD non-interface
40552 kern Early kernel panic with POOL_DIAGNOSTIC option
41243 kern kernel core dump produces unusable core
45393 kern core dumps are unilaterally prevented by unmounted cwd or MNT_NOCOREDUMP even if corename will be valid
42685 kqueue waiting a kqueue concurrently may cause kernel panic
45057 kqueue kqueue_scan race
46248 kqueue kevent won't return when kqueue is being closed
46523 kqueue kqueue descriptors can not be passed via SCM_RIGHTS anx. messages
15837 modules Kernel should log loading of all loadable modules
39462 modules Can't load modules through the bootloader
41195 modules NetBSD 5 RC3 can't load kernel modules
41215 modules cannot load miniroot as kmod, kernel heap full
42640 modules Kernel multiboot implementation lacks support for modules
43002 modules required>0 module autounload timestamp race
45125 modules Kernel object loader can't detect duplication of global symbol
45250 modules Builtin modules cannot be unloaded
46041 modules Kernel modules don't work (missing symbol uvmexp_pagesize)
46734 modules pool crash on module unload
46820 modules Wrong include paths for modules.
46971 modules I cannot load uatp module
48536 modules Modules need a ref-count mechanism external to the module
27315 pacct acct file should be explicitly aligned
37992 PaX There's no way to save PaX flags on non-native binaries
41875 PaX pax_aslr_elf() use wrong lsb number
41877 PaX PaX ASLR reduces available stack size
46476 PaX on i386, gdb silently fails to set a breakpoint on PaX-MPROTECTed binary
32038 pipes kernel panic in pipe code
44402 pipes page fault in supervisor mode in netbsd:filt_piperead
46275 pipes Kernel panics on heavy use, kevent / pipes related?
15174 ptrace gdb "kill" command does not free sockets
25529 ptrace With a MP kernel, ptrace() behaves inconsistently
44432 ptrace cannot single-step over a call to sigprocmask()
40576 veriexec veriexecgen sets no explicit access mode for some files and the default behaviour of veriexec in face of this cause errors
41251 veriexec veriexec locking seems broken

Last updated Sun Feb 08 18:21:43 UTC 2015