syzbot


panic: pool_do_get: sosppl: page empty

Status: upstream: reported on 2025/11/25 03:38
Reported-by: syzbot+2a533468bed92f1f0586@syzkaller.appspotmail.com
First crash: 7d05h, last: 7d05h

Sample crash report:
panic: pool_do_get: sosppl: page empty
Stopped at  db_enter+0x25: addq  $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 370851  73165      0           0          0    1  syz-executor
*417814   7760      0           0  0x4000000    0  syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8334a205) at panic+0x1e5 sys/kern/subr_prf.c:198
pool_do_get(ffffffff839debd0,9,ffff8000347e1898) at pool_do_get+0x55a sys/kern/subr_pool.c:728
pool_get(ffffffff839debd0,9) at pool_get+0x162 sys/kern/subr_pool.c:-1
sosplice(ffff80000149d1b8,0,0,0) at sosplice+0x553 sys/kern/uipc_socket.c:1356
sys_setsockopt(ffff8000fffeea78,ffff8000347e1aa0,ffff8000347e19f0) at sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
syscall(ffff8000347e1aa0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000347e1aa0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9edb55f0f90, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: pool_do_get: sosppl: page empty
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8334a205) at panic+0x1e5 sys/kern/subr_prf.c:198
pool_do_get(ffffffff839debd0,9,ffff8000347e1898) at pool_do_get+0x55a sys/kern/subr_pool.c:728
pool_get(ffffffff839debd0,9) at pool_get+0x162 sys/kern/subr_pool.c:-1
sosplice(ffff80000149d1b8,0,0,0) at sosplice+0x553 sys/kern/uipc_socket.c:1356
sys_setsockopt(ffff8000fffeea78,ffff8000347e1aa0,ffff8000347e19f0) at sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
syscall(ffff8000347e1aa0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000347e1aa0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9edb55f0f90, count: -8
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff8000347e16d0
rbx               0xffffffff83810e07   cpu_info_full_primary+0x2e07
rdx               0xffff800001480580
rcx               0xffff8000fffeea78
rax               0xffffffff8380fff0   cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0xbaf6d0bd1c7255db
r11               0xc585bcf4433a0a93
r12               0xffffffff83810c08   cpu_info_full_primary+0x2c08
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff8321ae95   db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff8000347e16c0
ss                              0x10
db_enter+0x25: addq  $0x8,%rsp
ddb{0}> show proc
PROC (syz-executor) tid=417814 pid=7760 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffeefa8,0xffff8000fffef4e8
    process=0xffff80002a3cf508 user=0xffff8000347dc000, vmspace=0xfffffd806ca957c0
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 73165  370851  67546      0  7           0                syz-executor
 73165  180854  67546      0  2   0x4000080                syz-executor
  7760  223812  26623      0  2           0                syz-executor
* 7760  417814  26623      0  7   0x4000000                syz-executor
 84369  493179  38911      0  2           0                syz-executor
 84369  407206  38911      0  3   0x4000080  fsleep        syz-executor
 34698  239069  68982      0  2           0                syz-executor
 34698  389974  68982      0  3   0x4000080  fsleep        syz-executor
 87311  124976  78263      0  2           0                syz-executor
 87311   70311  78263      0  3   0x4000080  fsleep        syz-executor
 38911  469918  26091      0  3        0x82  nanoslp       syz-executor
 89788  443094  26091      0  2         0x2                syz-executor
 34866  326028      0      0  3     0x14200  acct          acct
 67546  322737  26091      0  3        0x82  nanoslp       syz-executor
 78568  118819  26091      0  3        0x82  nanoslp       syz-executor
 26623  125938  26091      0  3        0x82  nanoslp       syz-executor
 38280  399953  26091      0  3        0x82  wait          syz-executor
 68982  386712  26091      0  3        0x82  nanoslp       syz-executor
 78263  211747  26091      0  3        0x82  nanoslp       syz-executor
 26091   71803  32888      0  3        0x82  kqread        syz-executor
 32888  406340  87195      0  3    0x10008a  sigsusp       ksh
 87195  246830  66648      0  3        0x98  kqread        sshd-session
 66648  393691  55865      0  3        0x92  kqread        sshd-session
 10874  102888      1      0  3    0x100083  ttyopn        getty
 55865   84936      1      0  3        0x88  kqread        sshd
 71833  282082  29103     74  3   0x1100092  bpf           pflogd
 29103  419910      1      0  3        0x80  sbwait        pflogd
 63365  122934  98602     73  3   0x1100090  kqread        syslogd
 98602  165567      1      0  3    0x100082  sbwait        syslogd
 40887  512892      1      0  3    0x100080  kqread        resolvd
 79697  381829  93764     77  3    0x100092  kqread        dhcpleased
 72811  404639  93764     77  3    0x100092  kqread        dhcpleased
 93764  109211      1      0  3        0x80  kqread        dhcpleased
 12162   35409      0      0  3     0x14200  bored         smr
 13611  161441      0      0  2     0x14200                zerothread
 85176  322883      0      0  3     0x14200  aiodoned      aiodoned
 55124   45201      0      0  3     0x14200  syncer        update
 36861  164865      0      0  3     0x14200  cleaner       cleaner
 59836  306131      0      0  3     0x14200  reaper        reaper
 26568  457669      0      0  3     0x14200  pgdaemon      pagedaemon
 98147  374333      0      0  3     0x14200  bored         viomb
 52950  418525      0      0  3  0x40014200  acpi0         acpi0
 36554  403527      0      0  3  0x40014200                idle1
 14211  267776      0      0  3     0x14200  bored         softnet1
 83121  208916      0      0  3     0x14200  bored         softnet0
  9125  358755      0      0  3     0x14200  bored         systqmp
 42376  348470      0      0  3     0x14200  bored         systq
 69439  216112      0      0  3     0x14200  tmoslp        softclockmp
 89908  153654      0      0  3  0x40014200  tmoslp        softclock
 37333  363703      0      0  3  0x40014200                idle0
     1   41152      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex sosppl r = 0 (0xffffffff839debe8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2  mtx_enter+0x62 sys/kern/kern_lock.c:261
#3  pool_get+0x124 sys/kern/subr_pool.c:581
#4  sosplice+0x553 sys/kern/uipc_socket.c:1356
#5  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#6  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#7  Xsyscall+0x128
Process 7760 (syz-executor) thread 0xffff8000fffeea78 (417814)
exclusive rwlock inet46 r = 0 (0xffff80000149d1d8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  sosplice+0x35b sys/kern/uipc_socket.c:1341
#3  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#4  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#5  Xsyscall+0x128
exclusive rwlock inet46 r = 0 (0xffff80000149c908)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  solock_pair+0xd0 sys/kern/uipc_socket2.c:-1
#3  sosplice+0x35b sys/kern/uipc_socket.c:1341
#4  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#6  Xsyscall+0x128
shared rwlock netlock r = 0 (0xffffffff838489b0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  solock_pair+0x9d sys/kern/uipc_socket2.c:384
#3  sosplice+0x35b sys/kern/uipc_socket.c:1341
#4  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#6  Xsyscall+0x128
exclusive rwlock sbufsnd r = 0 (0xffff80000149cad0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  sblock+0xb6 sys/kern/uipc_socket2.c:536
#3  sosplice+0x312 sys/kern/uipc_socket.c:1335
#4  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#6  Xsyscall+0x128
exclusive rwlock sbufrcv r = 0 (0xffff80000149d2a8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  sblock+0xb6 sys/kern/uipc_socket2.c:536
#3  sosplice+0x28f sys/kern/uipc_socket.c:1333
#4  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#6  Xsyscall+0x128
exclusive mutex sosppl r = 0 (0xffffffff839debe8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x1ad sys/kern/kern_lock.c:311
#2  mtx_enter+0x62 sys/kern/kern_lock.c:261
#3  pool_get+0x124 sys/kern/subr_pool.c:581
#4  sosplice+0x553 sys/kern/uipc_socket.c:1356
#5  sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
#6  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10218  11070K   11668K 166960K     13106        0
            pcb    18     16K      17K 166960K       374        0
         rtable   239     13K      14K 166960K       742        0
             pf    34     17K      19K 166960K       150        0
         ifaddr    36      6K       7K 166960K       112        0
        ifgroup    55      2K       2K 166960K       184        0
         sysctl     4      1K       9K 166960K        13        0
       counters    68     36K      38K 166960K       258        0
       ioctlops     0      0K       4K 166960K      1779        0
            iov     0      0K      16K 166960K       102        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1465     92K      92K 166960K      2595        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        15        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        53        0
        dirhash    12      2K       2K 166960K        27        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     236K 166960K      1415        0
          sigio     0      0K       0K 166960K        35        0
           proc    72    115K     180K 166960K       718        0
        subproc    72      4K       4K 166960K        99        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       143        0
       in_multi    73      5K       7K 166960K       180        0
    ether_multi     1      0K       0K 166960K        13        0
            mrt     1      0K       0K 166960K         9        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   109    493K     493K 166960K       109        0
           exec     0      0K       1K 166960K       554        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   242    175K     191K 166960K     14350        0
       UVM aobj     6      8K      10K 166960K         7        0
     pinsyscall    42     84K     102K 166960K      2660        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       1K 166960K        91        0
            NDP    12      0K       2K 166960K        79        0
           temp    77   8679K    8787K 166960K     48795        0
         kqueue    13     20K      30K 166960K       257        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      137    0      134     1     0     1     1     0     8    0
rtentry    176      195    0      108     6     0     6     6     0     8    0
unpcb      144      914    0      897     3     1     2     2     0     8    1
syncache   336       11    0       11     2     1     1     1     0     8    1
tcpqe       32        4    0        4     1     0     1     1     0     8    1
tcpcb      736      376    0      368     8     1     7     7     0     8    6
arp        136       33    0       18     1     0     1     1     0     8    0
inpcb      328     1345    0     1331    13     3    10    10     0     8    8
nd6        152       42    0       21     1     0     1     1     0     8    0
pkpcb       40        8    0        8     2     1     1     1     0     8    1
kcovpl      48       11    0        3     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     0     1     1     0     8    1
ppxss      1192      80    0       80     1     0     1     1     0     8    1
pppxif     1504       7    0        7     2     1     1     1     0     8    1
pffrag     232        6    0        1     1     0     1     1     0   482    0
pffrnode    88        4    0        0     1     0     1     1     0     8    0
pffrent     40        9    0        4     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       77    0       13     1     0     1     1     0     8    0
pfstkey    128       77    0       13     3     0     3     3     0     8    0
pfstate    448       77    0       13     8     0     8     8     0     8    0
pfrule     1344      21    0       16     2     1     1     2     0     8    0
rttmr      136        2    0        2     1     1     0     1     0     8    0
art_heap8  4096       5    0        1     5     0     5     5     0     8    1
art_heap4  256      781    0      411    29     4    25    29     0     8    1
art_table   40      786    0      412     5     0     5     5     0     8    0
art_node    32      195    0      116     1     0     1     1     0     8    0
sysvmsgpl   40       12    0        4     2     1     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       50    0       40     1     0     1     1     0     8    0
dirhash    1024      27    0       10     3     0     3     3     0     8    0
dino2pl    256     3936    0     2419    96     0    96    96     0     8    0
ffsino     296     3936    0     2419   118     1   117   118     0     8    0
nchpl      144     5901    0     4184    64     0    64    64     0     8    0
rtmask      32       19    0       19     1     0     1     1     0     8    1
vnodes     216     4724    0        0   263     0   263   263     0     8    0
namei      1024   19400    0    19400     1     0     1     1     0     8    1
percpumem   16      144    0       95     1     0     1     1     0     8    0
vcpupl     3968       4    0        1     1     0     1     1     0     8    0
vmpool     840        4    0        1     1     0     1     1     0     8    0
kstatmem   264      118    0       90     3     0     3     3     0     8    1
scsiplug    72        5    0        5     1     0     1     1     0     8    1
scxspl     216    33101    0    33101     8     5     3     4     1     8    3
plimitpl   152      276    0      258     1     0     1     1     0     8    0
sigapl     424     1713    0     1665     7     1     6     7     0     8    0
knotepl    120      569    0        0    17     0    17    17     0     8    0
kqueuepl   224      487    0      478     5     3     2     5     0     8    1
pipepl     344      250    0      223     3     0     3     3     0     8    0
fdescpl    528     1691    0     1660     3     0     3     3     0     8    0
filepl     160     9923    0     9699    15     0    15    15     0     8    3
lockfpl    104      456    0      453     1     0     1     1     0     8    0
lockfspl    48      202    0      199     1     0     1     1     0     8    0
sessionpl  144       33    0       24     1     0     1     1     0     8    0
pgrppl      48       82    0       65     1     0     1     1     0     8    0
ucredpl    104     1672    0     1659     1     0     1     1     0     8    0
zombiepl   144     1667    0     1665     1     0     1     1     0     8    0
processpl  1232    1713    0     1665     5     0     5     5     0     8    1
procpl     664     3760    0     3707     6     0     6     6     0     8    0
sosppl     176        7    0        7     2     1     1     1     0     8    1
sosppl: pool(0xffffffff839debd0:sosppl): page inconsistency: page 0x0; at page head addr 0xfffffd806c453f90 (p 0xfffffd806c453000)
sockpl     752     2476    0     2442    18     6    12    15     0     8    8
mcl64k     65536      7    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     120    0        0    15     0    15    15     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      37    0        0     5     0     5     5     0     8    0
mtagpl      96       32    0        0     1     0     1     1     0     8    0
mbufpl     256     1218    0        0    76     0    76    76     0     8    0
bufpl      280    12838    0     6701   439     0   439   439     0     8    0
anonpl      32    10112    0        0    82     0    82    82     0   246    0
amapchunkpl 152   50644    0    50160    36     3    33    33     0   158    9
amappl16   200     4775    0     4738    23     8    15    21     0     8    5
amappl15   192        4    0        4     1     1     0     1     0     8    0
amappl14   184        6    0        6     1     1     0     1     0     8    0
amappl13   176      470    0      469     1     0     1     1     0     8    0
amappl12   168     2104    0     2061     3     0     3     3     0     8    0
amappl11   160        6    0        6     1     1     0     1     0     8    0
amappl10   152       49    0       35     1     0     1     1     0     8    0
amappl9    144      257    0      257     1     1     0     1     0     8    0
amappl8    136       28    0       25     1     0     1     1     0     8    0
amappl7    128      110    0      109     1     0     1     1     0     8    0
amappl6    120      322    0      307     1     0     1     1     0     8    0
amappl5    112       78    0       67     1     0     1     1     0     8    0
amappl4    104      476    0      445     1     0     1     1     0     8    0
amappl3     96     8420    0     8330     3     0     3     3     0     8    0
amappl2     88     1859    0     1780     2     0     2     2     0     8    0
amappl1     80    16715    0    16109    16     0    16    16     0     8    0
amappl      88    13277    0    13113     5     0     5     5     0    92    0
uvmvnodes   80      147    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        7    0        7     2     1     1     1     0     8    1
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64       10    0       10     2     1     1     1     0     8    1
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        6    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1691    0     1660     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1691    0     1660     1     0     1     1     0     8    0
vmmpekpl   168    15350    0    15312     3     0     3     3     0     8    0
vmmpepl    168   113766    0   111825   103     4    99   103     0   357    4
vmsppl     488     1690    0     1660     5     0     5     5     0     8    0
rwobjpl     80    31567    0    30476    30     2    28    30     0     8    0
pdppl      4096    3397    0     3325   111    35    76    83     0     8    4
pvpl        32    17801    0        0   145     1   144   144     0   265    0
pmappl     256     1694    0     1661     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      370    0       43    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff8334a205) at panic+0x1e5 sys/kern/subr_prf.c:198
pool_do_get(ffffffff839debd0,9,ffff8000347e1898) at pool_do_get+0x55a sys/kern/subr_pool.c:728
pool_get(ffffffff839debd0,9) at pool_get+0x162 sys/kern/subr_pool.c:-1
sosplice(ffff80000149d1b8,0,0,0) at sosplice+0x553 sys/kern/uipc_socket.c:1356
sys_setsockopt(ffff8000fffeea78,ffff8000347e1aa0,ffff8000347e19f0) at sys_setsockopt+0x2ba sys/kern/uipc_syscalls.c:1227
syscall(ffff8000347e1aa0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000347e1aa0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x9edb55f0f90, count: -8
ddb{0}> machine ddbcpu 1
Stopped at  x86_ipi_db+0x27:  addq  $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7f4e39d795b0, count: 12
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
end of kernel
end trace frame: 0x7f4e39d795b0, count: -3

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/25 03:38 openbsd 58395e5de74c 64219f15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pool_do_get: sosppl: page empty
* Struck through repros no longer work on HEAD.