kernel: protection fauplatnic : u n h an dl e d a f NUM

Status: upstream: reported on 2026/08/27 13:29
Reported-by: syzbot+001243658cbe44d30e8f@syzkaller.appspotmail.com
First crash: 1d20h, last: 1d20h

Sample crash report:
kernel: protection fauplatnic :  u n h  an dl e d a f   0    
 tStopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 200828  41826  32767        0x10  0x4000000    1  syz-executor
* 55575  57839      0     0x14000      0x200    0  softnet0
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834e4e0b) at panic+0x1e5 sys/kern/subr_prf.c:198
unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1
if_output_tso(ffff80000004e858,ffff80002a1d03d0,ffff800000c43ed0,ffffef806fad09a0,5dc) at if_output_tso+0x22b
ip_output(ffffef8065741b00,0,0,0,0,0,e50e141374429efc) at ip_output+0x107f sys/netinet/ip_output.c:437
ip_send_do_dispatch(ffffffff839e4bb8,0) at ip_send_do_dispatch+0x128 sys/netinet/ip_input.c:1960
taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446
end trace frame: 0x0, count: 8
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: unhandled af 0
ddb{0}> show kasan
No such command
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834e4e0b) at panic+0x1e5 sys/kern/subr_prf.c:198
unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1
if_output_tso(ffff80000004e858,ffff80002a1d03d0,ffff800000c43ed0,ffffef806fad09a0,5dc) at if_output_tso+0x22b
ip_output(ffffef8065741b00,0,0,0,0,0,e50e141374429efc) at ip_output+0x107f sys/netinet/ip_output.c:437
ip_send_do_dispatch(ffffffff839e4bb8,0) at ip_send_do_dispatch+0x128 sys/netinet/ip_input.c:1960
taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446
end trace frame: 0x0, count: -7
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a1d01b0
rbx               0xffffffff839a4e07    cpu_info_full_primary+0x2e07
rdx                                0
rcx               0xffff800045ffe530
rax               0xffffffff839a3ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x8737f6ae3c251417
r11               0x82607b819056f2ed
r12               0xffffffff839a4c08    cpu_info_full_primary+0x2c08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff81498955    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a1d01a0
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (softnet0) tid=55575 pid=57839 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045ffe000,0xffff800045ffe7d8
    process=0xffff800045ff8e70 user=0xffff80002a1cb000, vmspace=0xffffffff83a6ead8
    estcpu=0, cpticks=10, pctcpu=0.1, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 41826  412731  82544 32767  2        0x10          0           syz-executor
 41826  200828  82544 32767  7        0x10  0x4000000           syz-executor
 77842  230953  47449 32767  2        0x10          0           syz-executor
 77842  505826  47449 32767  2        0x10  0x4000000           syz-executor
 21487   44187  92400 32767  3        0x10       0x80 nanoslp   syz-executor
 21487   87905  92400 32767  3        0x10  0x4000080 kqsel     syz-executor
 21487  377167  92400 32767  3        0x10  0x4000080 fsleep    syz-executor
 24705  322467  98637 32767  2        0x10          0           syz-executor
 24705  297010  98637 32767  2        0x10  0x4000000           syz-executor
 76280  502460  82959 32767  2        0x10          0           syz-executor
 76280    1271  82959 32767  3        0x10  0x4000080 fsleep    syz-executor
 42023  224582  41131 32767  2        0x10          0           syz-executor
 42023  190565  41131 32767  3        0x10  0x4000080 fsleep    syz-executor
   791  175647  61568 32767  2        0x10          0           syz-executor
   791  134925  61568 32767  2        0x10  0x4000000           syz-executor
 98637  289599  58562 32767  3        0x10       0x80 nanoslp   syz-executor
 61568  342680  47838 32767  3        0x10       0x80 nanoslp   syz-executor
 82959  489280  63386 32767  2        0x10          0           syz-executor
 47449  426193  41156 32767  2        0x10          0           syz-executor
 92400  391725  27120 32767  3        0x10       0x80 nanoslp   syz-executor
 82544  124184  56488 32767  3        0x10       0x80 nanoslp   syz-executor
 41131  388341  48758 32767  2        0x10          0           syz-executor
 41156  516616  41527     0  3         0x2       0x80 wait      syz-executor
 27120   83820  41527     0  3         0x2       0x80 wait      syz-executor
 58562  512490  41527     0  3         0x2       0x80 wait      syz-executor
 56488  109411  41527     0  3         0x2       0x80 wait      syz-executor
 63386   78107  41527     0  3         0x2       0x80 wait      syz-executor
 48758  206726  41527     0  3         0x2       0x80 wait      syz-executor
 47838  487385  41527     0  3         0x2       0x80 wait      syz-executor
 41527  479108  19756     0  2  0x10000002          0           syz-executor
 19756   93835  20895     0  3    0x100002       0x88 sigsusp   ksh
 20895  124321   8871     0  3        0x10       0x88 kqread    sshd-session
  8871   26876  12459     0  3        0x12       0x80 kqread    sshd-session
 31451  367502      1     0  3    0x100003       0x80 ttyin     getty
 12459  239310      1     0  3           0       0x88 kqread    sshd
 64164  339234  94655    73  3   0x1100010       0x80 kqread    syslogd
 94655  453589      1     0  3    0x100002       0x80 sbwait    syslogd
 40195   30706      1     0  3    0x100000       0x80 kqread    resolvd
 99924  431940  61354    77  3    0x100012       0x80 kqread    dhcpleased
 41187  378984  61354    77  3    0x100012       0x80 kqread    dhcpleased
 61354  171534      1     0  3           0       0x80 kqread    dhcpleased
 37595  503067      0     0  3     0x14000      0x200 bored     smr
 71840  497372      0     0  2     0x14000      0x200           zerothread
 63163  354010      0     0  3     0x14000      0x200 aiodoned  aiodoned
 76059  182941      0     0  3     0x14000      0x200 syncer    update
 85821  115207      0     0  3     0x14000      0x200 cleaner   cleaner
 65037   69023      0     0  3     0x14000      0x200 reaper    reaper
 82634  178549      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 48345  197625      0     0  3     0x14000      0x200 bored     viomb
 70999  228848      0     0  3     0x14000 0x40000200 acpi0     acpi0
 69993  305239      0     0  3     0x14000 0x40000200           idle1
 39238  312695      0     0  3     0x14000      0x200 bored     softnet1
*57839   55575      0     0  7     0x14000      0x200           softnet0
 27504  197363      0     0  3     0x14000      0x200 bored     systqmp
 94622  213627      0     0  3     0x14000      0x200 bored     systq
 70502  378471      0     0  3     0x14000      0x200 tmoslp    softclockmp
 84548  225676      0     0  3     0x14000 0x40000200 tmoslp    softclock
 43753  344735      0     0  3     0x14000 0x40000200           idle0
     1  218647      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{0}> show all locks
CPU 1:
exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff83966f88)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  malloc+0x2ef sys/kern/kern_malloc.c:200
#3  amap_alloc1+0x291 sys/uvm/uvm_amap.c:356
#4  amap_alloc+0xad sys/uvm/uvm_amap.c:-1
#5  amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
#6  uvm_fault_check+0x473 sys/uvm/uvm_fault.c:747
#7  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#8  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
#9  usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
#10 recall_trap+0x8
Process 41826 (syz-executor) thread 0xffff800038baefb8 (200828)
exclusive rwlock vmmaplk r = 0 (0xffffef800cd138c8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#3  uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
#7  recall_trap+0x8
Process 57839 (softnet0) thread 0xffff800045ffe530 (55575)
shared rwlock netlock r = 0 (0xffffffff838ecdf0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  ip_send_do_dispatch+0x79 sys/netinet/ip_input.c:1959
#3  taskq_thread+0x157 sys/kern/kern_task.c:446
#4  proc_trampoline+0x10
shared rwlock softnet0 r = 0 (0xffff80000002c078)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11079  12020K   12034K 166960K     12175        0
            pcb    17     12K      12K 166960K        17        0
         rtable   225      6K       7K 166960K       392        0
             pf    29     16K      16K 166960K        31        0
         ifaddr    38      6K       7K 166960K        44        0
        ifgroup    46      2K       2K 166960K        50        0
         sysctl     1      1K       9K 166960K         9        0
       counters    68     36K      37K 166960K        70        0
       ioctlops     0      0K       2K 166960K        40        0
            iov     0      0K      16K 166960K        20        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1288     81K      81K 166960K      1502        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       9K 166960K        17        0
         VM map     2      1K       1K 166960K         2        0
            sem    27      2K       2K 166960K        33        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    23     85K     121K 166960K       506        0
          sigio     0      0K       0K 166960K         7        0
           proc    58     99K     147K 166960K       569        0
        subproc    63      3K       4K 166960K       126        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     1      0K       0K 166960K       119        0
       in_multi    88      5K       7K 166960K       114        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     1      0K       0K 166960K        13        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   253   1129K    1129K 166960K       253        0
           exec     0      0K       1K 166960K       548        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241    160K     189K 166960K      6259        0
       UVM aobj    24      4K       4K 166960K        29        0
     pinsyscall    44     88K     108K 166960K      1616        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        28        0
            NDP    10      0K       2K 166960K        27        0
           temp    43   9121K    9128K 166960K      5057        0
         kqueue    14     22K      34K 166960K       105        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       83    0       79     1     0     1     1     0     8    0
rtentry    176      118    0       14     6     0     6     6     0     8    0
unpcb      144      249    0      230     2     0     2     2     0     8    1
syncache   336       43    0       43     1     0     1     1     0     8    1
tcpcb      736      186    0      182     4     0     4     4     0     8    3
arp        136       19    0        2     1     0     1     1     0     8    0
ipq         40        5    0        0     1     0     1     1     0     8    0
ipqe        40        8    0        1     1     0     1     1     0     8    0
inpcb      328      464    0      454     5     0     5     5     0     8    3
nd6        152       30    0        5     2     0     2     2     0     8    0
kcovpl      48       14    0        7     1     0     1     1     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      508    0       59    31     0    31    31     0     8    1
art_table   40      509    0       59     5     0     5     5     0     8    0
art_node    32      118    0       23     1     0     1     1     0     8    0
sysvmsgpl   40        8    0        4     1     0     1     1     0     8    0
semupl     112        4    0        4     1     0     1     1     0     8    1
semapl      72       31    0        6     1     0     1     1     0     8    0
shmpl      112       26    0        5     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2145    0      662    93     0    93    93     0     8    0
ffsino     296     2145    0      662   115     0   115   115     0     8    0
nchpl      144     2844    0     1143    64     0    64    64     0     8    0
vnodes     216     2280    0        0   127     0   127   127     0     8    0
namei      1024    9076    0     9076     2     0     2     2     0     8    2
percpumem   16       51    0        1     1     0     1     1     0     8    0
kstatmem   264       25    0        2     2     0     2     2     0     8    0
scxspl     216     9331    0     9331     4     3     1     3     1     8    1
plimitpl   152      125    0      102     2     0     2     2     0     8    1
sigapl     424      791    0      739     7     0     7     7     0     8    0
knotepl    120      305    0        0    10     0    10    10     0     8    0
kqueuepl   224      147    0      136     3     0     3     3     0     8    2
pipepl     344      161    0      134     3     0     3     3     0     8    0
fdescpl    528      775    0      740     3     0     3     3     0     8    0
filepl     160     3958    0     3752    12     0    12    12     0     8    3
lockfpl    104       77    0       74     1     0     1     1     0     8    0
lockfspl    48       35    0       32     1     0     1     1     0     8    0
sessionpl  144       49    0       34     1     0     1     1     0     8    0
pgrppl      48       64    0       41     1     0     1     1     0     8    0
ucredpl    104      878    0      860     1     0     1     1     0     8    0
zombiepl   144      740    0      739     1     0     1     1     0     8    0
processpl  1232     791    0      739     5     0     5     5     0     8    0
procpl     664     1347    0     1287     7     0     7     7     0     8    1
sockpl     752      805    0      772     8     0     8     8     0     8    4
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     129    0        0    17     0    17    17     0     8    0
mcl2k2     2112       3    0        0     1     0     1     1     0     8    0
mcl2k      2048      21    0        0     3     0     3     3     0     8    0
mextrefs    64       21    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256     1296    0        0    81     0    81    81     0     8    0
bufpl      272     2973    0      102   192     0   192   192     0     8    0
anonpl      32     5733    0        0    47     0    47    47     0   247    0
amapchunkpl 152   18596    0    18049    30     0    30    30     0   158    7
amappl16   200     1909    0     1881     6     2     4     5     0     8    0
amappl15   192       54    0       54     1     1     0     1     0     8    0
amappl14   184      403    0      402     1     0     1     1     0     8    0
amappl13   176      129    0      119     1     0     1     1     0     8    0
amappl12   168     1061    0     1026     2     0     2     2     0     8    0
amappl11   160       15    0       14     1     0     1     1     0     8    0
amappl10   152       60    0       50     1     0     1     1     0     8    0
amappl9    144      268    0      268     1     1     0     1     0     8    0
amappl8    136       92    0       89     1     0     1     1     0     8    0
amappl7    128      172    0      160     1     0     1     1     0     8    0
amappl6    120      176    0      175     1     0     1     1     0     8    0
amappl5    112      105    0       98     1     0     1     1     0     8    0
amappl4    104      281    0      264     1     0     1     1     0     8    0
amappl3     96     3385    0     3280     5     1     4     4     0     8    0
amappl2     88      942    0      865     3     0     3     3     0     8    1
amappl1     80    13407    0    12846    16     0    16    16     0     8    1
amappl      88     5485    0     5305     5     0     5     5     0    92    0
uvmvnodes   80      100    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       28    0        5     1     0     1     1     0     8    0
uaddrrnd    24      775    0      740     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      775    0      740     1     0     1     1     0     8    0
vmmpekpl   168     8678    0     8643     3     0     3     3     0     8    0
vmmpepl    168    59847    0    57852   105     0   105   105     0   357   12
vmsppl     488      774    0      740     7     1     6     6     0     8    1
rwobjpl     80    19626    0    18664    25     0    25    25     0     8    1
pdppl      4096    1557    0     1480   105    24    81    95     0     8    4
pvpl        32    13269    0        0   108     0   108   108     0   265    0
pmappl     256      774    0      740     4     1     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      543    0       27    15     0    15    15     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff834e4e0b) at panic+0x1e5 sys/kern/subr_prf.c:198
unhandled_af(0) at unhandled_af+0x1a sys/net/if.c:-1
if_output_tso(ffff80000004e858,ffff80002a1d03d0,ffff800000c43ed0,ffffef806fad09a0,5dc) at if_output_tso+0x22b
ip_output(ffffef8065741b00,0,0,0,0,0,e50e141374429efc) at ip_output+0x107f sys/netinet/ip_output.c:437
ip_send_do_dispatch(ffffffff839e4bb8,0) at ip_send_do_dispatch+0x128 sys/netinet/ip_input.c:1960
taskq_thread(ffff80000002c000) at taskq_thread+0x157 sys/kern/kern_task.c:446
end trace frame: 0x0, count: -7
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_write_1(3f8,0,74) at x86_bus_space_io_write_1+0x40 sys/arch/amd64/amd64/bus_space.c:797
comcnputc(800,74) at comcnputc+0x1ab bus_space_barrier sys/dev/ic/com.c:-1 [inline]
comcnputc(800,74) at comcnputc+0x1ab sys/dev/ic/com.c:1268
cnputc(74) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(74) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x223 sys/kern/subr_prf.c:723
db_printf(ffffffff834824d5) at db_printf+0x9b sys/kern/subr_prf.c:-1
db_ktrap(4,0,ffff80003c3e0ef0) at db_ktrap+0x1c7 sys/arch/amd64/amd64/db_interface.c:129
kerntrap(ffff80003c3e0ef0) at kerntrap+0x243 sys/arch/amd64/amd64/trap.c:523
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
malloc(10,62,2) at malloc+0x855 sys/kern/kern_malloc.c:294
amap_alloc1(20,2,0) at amap_alloc1+0x291 sys/uvm/uvm_amap.c:356
end trace frame: 0xffff80003c3e1150, count: 0
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_write_1(3f8,0,74) at x86_bus_space_io_write_1+0x40 sys/arch/amd64/amd64/bus_space.c:797
comcnputc(800,74) at comcnputc+0x1ab bus_space_barrier sys/dev/ic/com.c:-1 [inline]
comcnputc(800,74) at comcnputc+0x1ab sys/dev/ic/com.c:1268
cnputc(74) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(74) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x223 sys/kern/subr_prf.c:723
db_printf(ffffffff834824d5) at db_printf+0x9b sys/kern/subr_prf.c:-1
db_ktrap(4,0,ffff80003c3e0ef0) at db_ktrap+0x1c7 sys/arch/amd64/amd64/db_interface.c:129
kerntrap(ffff80003c3e0ef0) at kerntrap+0x243 sys/arch/amd64/amd64/trap.c:523
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
malloc(10,62,2) at malloc+0x855 sys/kern/kern_malloc.c:294
amap_alloc1(20,2,0) at amap_alloc1+0x291 sys/uvm/uvm_amap.c:356
amap_alloc(20000,2,0) at amap_alloc+0xad sys/uvm/uvm_amap.c:-1
amap_copy(ffffef800cd137c8,ffffef806cfe3050,2,0,378272fa000,378272fa001) at amap_copy+0x6a8 sys/uvm/uvm_amap.c:570
uvm_fault_check(ffff80003c3e13c0,ffff80003c3e13f8,ffff80003c3e1430,0) at uvm_fault_check+0x473 sys/uvm/uvm_fault.c:747
uvm_fault(ffffef800cd137c8,378272fa000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
upageflttrap(ffff80003c3e1560,378272fa1d8) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff80003c3e1560) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end trace frame: 0x0, count: -21

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/27 13:28 openbsd eaf6a50527ed c53a1b9c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid kernel: protection fauplatnic : u n h an dl e d a f NUM
* Struck through repros no longer work on HEAD.