uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 553d, last: 2h15m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline -1 6 686d 858d 0/4 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
*cpu1: uvm_fault(0xfffff3806cf407b8, 0x98, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x769f29f246e0, count: -1
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff800038bb1d30
rbx                                0
rdx                                0
rcx               0xffff800045fee018
rax                             0x2a
r8                0xffff800038bb1c60
r9                     0x3ac8abe3001
r10               0x2d8eb92ce051752d
r11               0x333d08687d43c9c8
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff81c074c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff800038bb1cb0
ss                                 0
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{0}> show proc
PROC (syz-executor) tid=225956 pid=62140 tcnt=1 stat=onproc
    flags process=0 proc=0
    runpri=50, usrpri=50, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800045fee2b0,0xffffffff83a33f20
    process=0xffff80003c3cce90 user=0xffff800038bac000, vmspace=0xfffff3806cf403e8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
*62140  225956  30256     0  7           0          0           syz-executor
 77438  146732  37094     0  2           0          0           syz-executor
 77438  408898  37094     0  7           0  0x4000000           syz-executor
 23804  292992  55880 60929  2        0x10          0           syz-executor
 23804  433263  55880 60929  3        0x10  0x4000080 fsleep    syz-executor
 31648  374614  21687     0  2           0          0           syz-executor
 31648  360067  21687     0  2           0  0x4000000           syz-executor
 48823  151440  15420     0  3           0       0x80 nanoslp   syz-executor
 48823  299595  15420     0  3           0  0x4000080 bpf       syz-executor
 48823  406632  15420     0  3           0  0x4000000 smrbar    syz-executor
 63062  155362  37248     0  3         0x2       0x80 nanoslp   syz-executor
 44610   80341  37248     0  3         0x2          0 getblk    syz-executor
 21687  450131  37248     0  3         0x2       0x80 nanoslp   syz-executor
 29615   53249  37248     0  3         0x2          0 biowait   syz-executor
 55880  352290  37248     0  3         0x2       0x80 nanoslp   syz-executor
 30256  469571  37248     0  3         0x2       0x80 nanoslp   syz-executor
 37094  317611  37248     0  3         0x2       0x80 nanoslp   syz-executor
 15420  441119  37248     0  3         0x2       0x80 nanoslp   syz-executor
 37248  281500  79582     0  3         0x2       0x80 kqread    syz-executor
 79582  340582  28902     0  3    0x100002       0x88 sigsusp   ksh
 28902  107150  34016     0  3        0x10       0x88 kqread    sshd-session
 34016  466809  93809     0  3        0x12       0x80 kqread    sshd-session
 14230   36035      1     0  3    0x100003       0x80 ttyin     getty
 93809  503262      1     0  3           0       0x88 kqread    sshd
 30362   10896  45988    74  3   0x1100012       0x80 bpf       pflogd
 45988   93299      1     0  3           0       0x80 sbwait    pflogd
 21584  424499  16244    73  3   0x1100010       0x80 kqread    syslogd
 16244  117127      1     0  3    0x100002       0x80 sbwait    syslogd
 57377  115091      1     0  3    0x100000       0x80 kqread    resolvd
 31977  337827  89803    77  3    0x100012       0x80 kqread    dhcpleased
 21981  504299  89803    77  3    0x100012       0x80 kqread    dhcpleased
 89803  220834      1     0  3           0       0x80 kqread    dhcpleased
 46932  190264      0     0  3     0x14000      0x200 bored     smr
 51113   47434      0     0  2     0x14000      0x200           zerothread
 49422   13226      0     0  3     0x14000      0x200 aiodoned  aiodoned
 13915  316237      0     0  3     0x14000      0x200 syncer    update
  8499  184082      0     0  3     0x14000      0x200 cleaner   cleaner
 55425  302464      0     0  3     0x14000      0x200 reaper    reaper
 73665    1635      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 20877  135957      0     0  3     0x14000      0x200 bored     viomb
 83428  295423      0     0  3     0x14000 0x40000200 acpi0     acpi0
 18328  151864      0     0  3     0x14000 0x40000200           idle1
 38903  121789      0     0  3     0x14000      0x200 bored     softnet1
 11726  437344      0     0  3     0x14000      0x200 bored     softnet0
 34555    8087      0     0  3     0x14000      0x200 smrbar    systqmp
 42121  124593      0     0  3     0x14000      0x200 bored     systq
 78885  520644      0     0  3     0x14000      0x200 tmoslp    softclockmp
 29449  465422      0     0  3     0x14000 0x40000200 tmoslp    softclock
  3360  215514      0     0  3     0x14000 0x40000200           idle0
     1   44492      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffff3806cd0fb10)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:441 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2777
#3  uvm_fault_upper_lookup+0x30d sys/uvm/uvm_fault.c:-1
#4  uvm_fault+0x159 sys/uvm/uvm_fault.c:632
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
Process 62140 (syz-executor) thread 0xffff800045fee018 (225956)
shared rwlock amaplk r = 0 (0xfffff3806de68698)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvm_fault_check+0x8a9 sys/uvm/uvm_fault.c:834
#3  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#4  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#5  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#6  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffff3806cf404e8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#3  uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffff3806cd0fb10)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:441 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2777
#3  uvm_fault_upper_lookup+0x30d sys/uvm/uvm_fault.c:-1
#4  uvm_fault+0x159 sys/uvm/uvm_fault.c:632
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
Process 77438 (syz-executor) thread 0xffff800045fee2b0 (408898)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a02300)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
#1  syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783
#2  Xsyscall+0x128
Process 48823 (syz-executor) thread 0xffff800039bb8d18 (406632)
exclusive rwlock clonelk r = 0 (0xffffffff839d1fb8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  if_clone_destroy+0x93 sys/net/if.c:-1
#3  ifioctl+0x59d sys/net/if.c:2160
#4  sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#5  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
#6  Xsyscall+0x128
Process 44610 (syz-executor) thread 0xffff800045feefa8 (80341)
exclusive rrwlock inode r = 0 (0xfffff3806cd3f318)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vn_closefile+0x111 vn_close sys/kern/vfs_vnops.c:298 [inline]
#5  vn_closefile+0x111 sys/kern/vfs_vnops.c:621
#6  fdrop+0x121 sys/kern/kern_descrip.c:1281
#7  closef+0x192 sys/kern/kern_descrip.c:1265
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
Process 29615 (syz-executor) thread 0xffff800045fefa08 (53249)
exclusive rrwlock inode r = 0 (0xfffff3806cd3fa08)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline]
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:150
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232
#6  ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3063
#10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffff3806d8e6430)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vfs_lookup+0x12b sys/kern/vfs_lookup.c:431
#6  namei+0x7c5 sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3048
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
Process 34555 (systqmp) thread 0xffff800045ffe7c8 (8087)
shared rwlock systqmp r = 0 (0xffffffff8397e318)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11078  12281K   12288K 166960K     12183        0
            pcb    17     12K      12K 166960K        25        0
         rtable   239      7K       7K 166960K       368        0
             pf    40     18K      19K 166960K        53        0
         ifaddr    44      7K       8K 166960K        49        0
        ifgroup    60      2K       2K 166960K        64        0
         sysctl     1      1K       9K 166960K         5        0
       counters    74     37K      37K 166960K        78        0
       ioctlops     0      0K       4K 166960K      1492        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1299     82K      82K 166960K      1386        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     4      0K       0K 166960K         4        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    16     57K      93K 166960K       158        0
           proc    70    115K     164K 166960K       552        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         5        0
       in_multi    99      6K       6K 166960K       101        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         6        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    43    201K     201K 166960K        43        0
           exec     0      0K       1K 166960K       398        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   217    174K     184K 166960K      3331        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    41     82K     106K 166960K      1354        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         2        0
            NDP    17      0K       1K 166960K        30        0
           temp    34   9114K    9122K 166960K      4058        0
         kqueue    13     20K      22K 166960K        29        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       41    0       38     1     0     1     1     0     8    0
rtentry    176      113    0        3     6     0     6     6     0     8    0
unpcb      144       48    0       30     1     0     1     1     0     8    0
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpcb      736       11    0        6     1     0     1     1     0     8    0
arp        136       18    0        0     1     0     1     1     0     8    0
inpcb      328       84    0       74     1     0     1     1     0     8    0
nd6        152       24    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       2    0        1     1     0     1     1     0     8    0
pppxif     1576       2    0        1     1     0     1     1     0     8    0
pfstscr     40        2    0        2     1     0     1     1     0     8    1
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       19    0        0     1     0     1     1     0     8    0
pfstkey    128       21    0        2     1     0     1     1     0     8    0
pfstate    448       20    0        1     3     0     3     3     0     8    0
pfrule     1360      22    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      459    0        0    29     0    29    29     0     8    0
art_table   40      460    0        0     5     0     5     5     0     8    0
art_node    32      113    0       11     1     0     1     1     0     8    0
semapl      72        2    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1609    0      142    92     0    92    92     0     8    0
ffsino     296     1609    0      142   114     0   114   114     0     8    0
nchpl      144     1826    0      122    64     0    64    64     0     8    0
vnodes     216     1713    0        0    96     0    96    96     0     8    0
namei      1024    5640    0     5639     2     0     2     2     0     8    1
percpumem   16       55    0        2     1     0     1     1     0     8    0
kstatmem   264       31    0        2     3     0     3     3     0     8    0
scxspl     216     6268    0     6267     4     3     1     3     1     8    0
plimitpl   152       32    0       15     1     0     1     1     0     8    0
sigapl     424      487    0      441     7     0     7     7     0     8    1
knotepl    120       64    0        0     2     0     2     2     0     8    0
kqueuepl   224       30    0       21     1     0     1     1     0     8    0
pipepl     344      131    0      104     3     0     3     3     0     8    0
fdescpl    528      471    0      441     3     0     3     3     0     8    0
filepl     160     1695    0     1477    10     0    10    10     0     8    0
lockfpl    104       16    0       14     1     0     1     1     0     8    0
lockfspl    48        9    0        7     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       32    0       15     1     0     1     1     0     8    0
ucredpl    104      160    0      146     1     0     1     1     0     8    0
zombiepl   144      442    0      441     1     0     1     1     0     8    0
processpl  1232     487    0      441     5     0     5     5     0     8    0
procpl     664      532    0      481     6     0     6     6     0     8    1
sockpl     752      173    0      142     4     0     4     4     0     8    0
mcl64k     65536      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      28    0        0     4     0     4     4     0     8    0
mextrefs    64       27    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      154    0        0    10     0    10    10     0     8    0
bufpl      272     2313    0      105   148     0   148   148     0     8    0
anonpl      32     3773    0        0    31     0    31    31     0   247    0
amapchunkpl 152    8967    0     8544    20     0    20    20     0   158    0
amappl16   200     1736    0     1714     5     1     4     5     0     8    2
amappl15   192        9    0        9     2     2     0     1     0     8    0
amappl14   184      444    0      443     1     0     1     1     0     8    0
amappl13   176      187    0      175     1     0     1     1     0     8    0
amappl12   168      726    0      697     2     0     2     2     0     8    0
amappl11   160        9    0        9     2     2     0     1     0     8    0
amappl10   152       66    0       52     1     0     1     1     0     8    0
amappl9    144      330    0      330     1     1     0     1     0     8    0
amappl8    136      123    0      121     1     0     1     1     0     8    0
amappl7    128      151    0      138     1     0     1     1     0     8    0
amappl6    120      150    0      149     1     0     1     1     0     8    0
amappl5    112      114    0      103     1     0     1     1     0     8    0
amappl4    104      298    0      280     1     0     1     1     0     8    0
amappl3     96     1594    0     1510     3     0     3     3     0     8    0
amappl2     88      610    0      537     2     0     2     2     0     8    0
amappl1     80    10709    0    10114    15     0    15    15     0     8    0
amappl      88     2573    0     2430     4     0     4     4     0    92    0
uvmvnodes   80       98    0        0     2     0     2     2     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      471    0      441     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      471    0      441     1     0     1     1     0     8    0
vmmpekpl   168     5945    0     5912     2     0     2     2     0     8    0
vmmpepl    168    39964    0    38142    87     0    87    87     0   357    1
vmsppl     488      470    0      441     5     0     5     5     0     8    0
rwobjpl     80    14939    0    13954    24     0    24    24     0     8    2
pdppl      4096     949    0      882    99    24    75    85     0     8    8
pvpl        32    10541    0        0    86     0    86    86     0   265    0
pmappl     256      470    0      441     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      418    0       27    12     0    12    12     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x769f29f246e0, count: -1
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:682
acpitimer_delay(1) at acpitimer_delay+0x194 acpitimer_read sys/dev/acpi/acpitimer.c:142 [inline]
acpitimer_delay(1) at acpitimer_delay+0x194 sys/dev/acpi/acpitimer.c:125
comcnputc(800,29) at comcnputc+0x29b sys/dev/ic/com.c:1274
cnputc(29) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(29) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff834626a5) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff8351ee28) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff80003bbc6e20,98) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff80003bbc6e20) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
end trace frame: 0xffff80003bbc6fd0, count: 0
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:682
acpitimer_delay(1) at acpitimer_delay+0x194 acpitimer_read sys/dev/acpi/acpitimer.c:142 [inline]
acpitimer_delay(1) at acpitimer_delay+0x194 sys/dev/acpi/acpitimer.c:125
comcnputc(800,29) at comcnputc+0x29b sys/dev/ic/com.c:1274
cnputc(29) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(29) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff834626a5) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff8351ee28) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff80003bbc6e20,98) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff80003bbc6e20) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff800045fee2b0,fffff3806ae0ce78,ffff80003bbc7000) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimes(ffff800045fee2b0,ffff80003bbc7150,ffff80003bbc70a0) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
syscall(ffff80003bbc7150) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003bbc7150) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xba9c5f85b90, count: -18

Crashes (3425):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/14 00:15 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 23:14 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 19:41 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 19:06 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 16:57 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 15:47 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 14:17 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 12:41 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 09:07 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 05:22 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 04:14 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/13 01:04 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 23:20 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 21:16 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 19:38 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 18:34 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 16:08 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 13:29 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 12:29 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 11:12 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 08:01 openbsd a47f863e5cb3 f8d35649 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 05:48 openbsd a47f863e5cb3 f8d35649 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 04:48 openbsd a47f863e5cb3 f8d35649 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 03:30 openbsd a47f863e5cb3 f8d35649 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/12 01:50 openbsd a47f863e5cb3 f8d35649 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 17:13 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 17:02 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 15:50 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 13:25 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 11:02 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 06:49 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 05:44 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 03:53 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 01:59 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 00:56 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 23:19 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 20:33 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 19:02 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 18:57 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 17:37 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 15:39 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 14:03 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 12:19 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 11:06 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/07/28 16:31 openbsd e63b2cdac76f 5fe7c56f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2026/07/17 06:28 openbsd 5f0b8e1b9eb7 6ca2b51a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.