syzbot


uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 441d, last: 3h22m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline -1 6 574d 746d 0/3 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
uvm_fault(0xfffffd8060846d80, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff81f340d8 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff800037bbd2d0
gsbase 0xffff8000299bdff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff81f340d8
Starting stack trace...
panic(ffffffff83485042) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff800037bbd220) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff8000fffee7e0,fffffd806c542a40,ffff800037bbd400) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2771
sys_futimes(ffff8000fffee7e0,ffff800037bbd550,ffff800037bbd4a0) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2813
syscall(ffff800037bbd550) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800037bbd550) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x25efac7b760, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*495369   5718      0           0          0    1  syz-executor
  51602  44601      0           0          0    0  syz-executor
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x759652390ac0, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd8060846d80, 0x98, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x759652390ac0, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff8000383c3d30
rbx                                0
rdx                                0
rcx               0xffff8000fffeed10
rax                             0x2a
r8                0xffff8000383c3c60
r9                               0x1
r10               0x6f77f5660d7b662d
r11               0xc94e3645ae249e9b
r12                                0
r13               0xffffffff82fa0898    Xdoreti+0x18
r14                                0
r15                                0
rip               0xffffffff8260f4c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff8000383c3cb0
ss                              0x10
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=495369 pid=5718 tcnt=2 stat=onproc
    flags process=0 proc=0
    runpri=50, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffee7e0,0xffff8000fffeea88
    process=0xffff80003c3f79e0 user=0xffff8000383be000, vmspace=0xfffffd80608463f8
    estcpu=36, cpticks=2, pctcpu=0.0, user=1, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 59988  259166   5713      0  2           0                syz-executor
 82910  226418  87354      0  2           0                syz-executor
 82910  216822  87354      0  3   0x4000000  smrbar        syz-executor
* 5718  495369  25810      0  7           0                syz-executor
  5718  268928  25810      0  2   0x4000000                syz-executor
 44601   51602  92067      0  7           0                syz-executor
 44601  493819  92067      0  3   0x4000000  sbar          syz-executor
 63977  171256  27759      0  3        0x80  nanoslp       syz-executor
 63977   99628  27759      0  3   0x4000000  smrbar        syz-executor
 63977  519219  27759      0  3   0x4000080  fsleep        syz-executor
 23954  398137  27008      0  3        0x80  nanoslp       syz-executor
 23954  118505  27008      0  3   0x4000080  fsleep        syz-executor
 23954  487377  27008      0  3   0x4000080  kqread        syz-executor
 23954   78023  27008      0  3   0x4000080  fsleep        syz-executor
 90724  137726  35061      0  3        0x80  nanoslp       syz-executor
 90724  121947  35061      0  3   0x4000080  ttyin         syz-executor
 90724  387927  35061      0  3   0x4000000  inode         syz-executor
 90724  342268  35061      0  3   0x4000000  inode         syz-executor
 90724  416771  35061      0  3   0x4000080  fsleep        syz-executor
 89335   44839  30076      0  3        0x81  nanoslp       syz-executor
 89335  192159  30076      0  3   0x4000081  ttyin         syz-executor
 89335   85606  30076      0  3   0x4000081  fsleep        syz-executor
 89335  340323  30076      0  3   0x4000081  fsleep        syz-executor
 27759  278727  71595      0  3        0x82  nanoslp       syz-executor
 27008   66513  71595      0  2         0x2                syz-executor
 30076  354908  71595      0  3        0x82  nanoslp       syz-executor
  5713  316001  71595      0  3        0x82  nanoslp       syz-executor
 87354   71209  71595      0  3        0x82  nanoslp       syz-executor
 92067    2644  71595      0  3        0x82  nanoslp       syz-executor
 35061  266444  71595      0  2         0x2                syz-executor
 25810   75806  71595      0  3        0x82  nanoslp       syz-executor
 71595  135882  55076      0  3        0x82  kqread        syz-executor
 55076   64043  40287      0  3    0x10008a  sigsusp       ksh
 40287  509595   6391      0  3        0x98  kqread        sshd-session
  6391   32811  23116      0  3        0x92  kqread        sshd-session
 76931   92083      1      0  3    0x100083  ttyin         getty
 23116  400842      1      0  3        0x88  kqread        sshd
 70377   54493  19981     74  3   0x1100092  bpf           pflogd
 19981  507383      1      0  3        0x80  sbwait        pflogd
 55841   24975  37116     73  3   0x1100090  kqread        syslogd
 37116  289136      1      0  3    0x100082  sbwait        syslogd
 23435  227663      1      0  3    0x100080  kqread        resolvd
 81108  495039  46745     77  3    0x100092  kqread        dhcpleased
 46586  303614  46745     77  3    0x100092  kqread        dhcpleased
 46745    9159      1      0  3        0x80  kqread        dhcpleased
 32139  357419      0      0  3     0x14200  bored         smr
 11692  226422      0      0  3     0x14200  pgzero        zerothread
 11885   63062      0      0  3     0x14200  aiodoned      aiodoned
 77762  479570      0      0  3     0x14200  syncer        update
 27538  160956      0      0  3     0x14200  cleaner       cleaner
 87873  378806      0      0  3     0x14200  reaper        reaper
 55326  191174      0      0  3     0x14200  pgdaemon      pagedaemon
  4696  478894      0      0  3     0x14200  bored         viomb
 43834  523014      0      0  3  0x40014200  acpi0         acpi0
  4393  116446      0      0  3  0x40014200                idle1
 44689  481285      0      0  3     0x14200  bored         softnet1
 40543  258667      0      0  2     0x14200                softnet0
 17863  268046      0      0  2  0x40014200                systqmp
 40084  505219      0      0  3     0x14200  bored         systq
 87927  455483      0      0  3     0x14200  tmoslp        softclockmp
 32381  261349      0      0  3  0x40014200  tmoslp        softclock
 61600  395267      0      0  3  0x40014200                idle0
     1  451185      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 44601 (syz-executor) thread 0xffff8000fffee7e0 (493819)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839be540)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
#1  syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783
#2  Xsyscall+0x128
Process 90724 (syz-executor) thread 0xffff80003c41afb8 (121947)
exclusive rrwlock inode r = 0 (0xfffffd806e530120)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  spec_open+0x2f2 sys/kern/spec_vnops.c:151
#6  VOP_OPEN+0x8b sys/kern/vfs_vops.c:138
#7  vn_open+0x7a5 sys/kern/vfs_vnops.c:183
#8  vndioctl+0xc43 sys/dev/vnd.c:458
#9  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#10 vn_ioctl+0xf8 sys/kern/vfs_vnops.c:537
#11 sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#12 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783
#13 Xsyscall+0x128
Process 90724 (syz-executor) thread 0xffff80003c41a028 (387927)
exclusive rrwlock inode r = 0 (0xfffffd8065c4dd80)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  domknodat+0xb4 sys/kern/vfs_syscalls.c:1611
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11085  12361K   12409K 166960K     12645        0
            pcb    19     12K      12K 166960K        73        0
         rtable   256      9K       9K 166960K       462        0
             pf    41     18K      24K 166960K       111        0
         ifaddr    45      7K       7K 166960K        73        0
        ifgroup    59      2K       2K 166960K       116        0
         sysctl     3      1K       9K 166960K        12        0
       counters    78     37K      37K 166960K       124        0
       ioctlops     0      0K       4K 166960K      1586        0
            iov     0      0K      16K 166960K         8        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1418     89K      89K 166960K      1756        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        20        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K      93K 166960K       562        0
          sigio     0      0K       0K 166960K         9        0
           proc    72    115K     164K 166960K       626        0
        subproc    72      4K       4K 166960K        90        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        60        0
       in_multi    99      7K       7K 166960K       140        0
    ether_multi     1      0K       0K 166960K         5        0
            mrt     0      0K       0K 166960K        22        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       499        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         2        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   245    167K     181K 166960K      6772        0
       UVM aobj     9      2K       2K 166960K         9        0
     pinsyscall    43     86K     104K 166960K      1751        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        19        0
            NDP    18      0K       1K 166960K        49        0
           temp    52   9074K    9140K 166960K     27384        0
         kqueue    17     28K      33K 166960K        99        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       51    0       48     1     0     1     1     0     8    0
rtentry    176      144    0       31     7     1     6     6     0     8    0
unpcb      144      222    0      198     2     0     2     2     0     8    1
syncache   336        5    0        5     1     1     0     1     0     8    0
tcpcb      736       96    0       92     2     1     1     2     0     8    0
arp        136       22    0        4     1     0     1     1     0     8    0
ipq         40        3    0        0     1     0     1     1     0     8    0
ipqe        40        3    0        0     1     0     1     1     0     8    0
inpcb      328      330    0      320     2     0     2     2     0     8    1
ip6q        72       18    0       16     1     0     1     1     0     8    0
ip6af       40       34    0       32     1     0     1     1     0     8    0
nd6        152       31    0        6     1     0     1     1     0     8    0
pkpcb       40        3    0        3     2     1     1     1     0     8    1
kcovpl      48       10    0        2     1     0     1     1     0     8    0
ppxss      1192      18    0       14     2     1     1     1     0     8    0
pppxif     1576       4    0        4     2     1     1     1     0     8    1
pfstscr     40        2    0        0     1     0     1     1     0     8    0
pffrag     232        1    0        1     1     1     0     1     0   482    0
pffrnode    88        1    0        1     1     1     0     1     0     8    0
pffrent     40        2    0        2     1     1     0     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       3    0        0     1     0     1     1     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24       27    0       12     1     0     1     1     0     8    0
pfstkey    128       27    0       12     1     0     1     1     0     8    0
pfstate    448       25    0       12     3     0     3     3     0     8    0
pfrule     1360      22    0       17     2     1     1     2     0     8    0
rttmr      136        3    0        3     2     1     1     1     0     8    1
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      570    0      106    31     2    29    29     0     8    0
art_table   40      573    0      106     5     0     5     5     0     8    0
art_node    32      144    0       41     1     0     1     1     0     8    0
sysvmsgpl   40        5    0        1     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       17    0        7     1     0     1     1     0     8    0
shmpl      112        6    0        0     1     0     1     1     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2295    0      830    93     0    93    93     0     8    0
ffsino     296     2295    0      830   114     0   114   114     0     8    0
nchpl      144     3072    0     1361    64     0    64    64     0     8    0
rtmask      32        4    0        2     1     0     1     1     0     8    0
vnodes     216     2653    0        0   148     0   148   148     0     8    0
namei      1024   10347    0    10345     2     1     1     2     0     8    0
percpumem   16       77    0       23     1     0     1     1     0     8    0
kstatmem   264       61    0       30     3     0     3     3     0     8    0
scsiplug    72        1    0        1     1     0     1     1     0     8    1
scxspl     216    11057    0    11057    11     3     8     8     1     8    8
plimitpl   152       70    0       50     1     0     1     1     0     8    0
sigapl     424      872    0      824     7     1     6     7     0     8    0
knotepl    120      498    0        0    15     0    15    15     0     8    0
kqueuepl   224      130    0      114     2     0     2     2     0     8    1
pipepl     344      148    0      121     3     0     3     3     0     8    0
fdescpl    528      854    0      822     3     0     3     3     0     8    0
filepl     160     4192    0     3959    17     2    15    15     0     8    1
lockfpl    104      255    0      253     2     1     1     2     0     8    0
lockfspl    48      122    0      120     1     0     1     1     0     8    0
sessionpl  144       37    0       27     1     0     1     1     0     8    0
pgrppl      48       49    0       31     1     0     1     1     0     8    0
ucredpl    104      521    0      507     1     0     1     1     0     8    0
zombiepl   144      824    0      824     1     0     1     1     0     8    1
processpl  1232     872    0      824     5     0     5     5     0     8    1
procpl     664     1525    0     1462     7     1     6     6     0     8    0
sosppl     176        1    0        1     1     1     0     1     0     8    0
sockpl     752      614    0      577     6     1     5     5     0     8    1
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     129    0        0    17     0    17    17     0     8    0
mcl2k      2048      27    0        0     3     0     3     3     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      171    0        0    11     0    11    11     0     8    0
bufpl      280     3894    0      108   271     0   271   271     0     8    0
anonpl      32     7871    0        0    64     0    64    64     0   246    0
amapchunkpl 152   21825    0    21314    30     2    28    28     0   158    7
amappl16   200     2205    0     2177    18    12     6    15     0     8    4
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      454    0      453     1     0     1     1     0     8    0
amappl13   176      123    0      111     1     0     1     1     0     8    0
amappl12   168     1109    0     1078     2     0     2     2     0     8    0
amappl11   160       15    0       14     3     2     1     1     0     8    0
amappl10   152       65    0       49     1     0     1     1     0     8    0
amappl9    144      270    0      270     1     1     0     1     0     8    0
amappl8    136      112    0      109     1     0     1     1     0     8    0
amappl7    128      157    0      143     1     0     1     1     0     8    0
amappl6    120      175    0      174     1     0     1     1     0     8    0
amappl5    112       89    0       79     1     0     1     1     0     8    0
amappl4    104      287    0      268     1     0     1     1     0     8    0
amappl3     96     4154    0     4034     5     1     4     4     0     8    0
amappl2     88      542    0      479     2     0     2     2     0     8    0
amappl1     80    11193    0    10595    16     3    13    15     0     8    0
amappl      88     5959    0     5786     5     0     5     5     0    92    0
uvmvnodes   80      114    0        0     3     0     3     3     0     8    0
dma8192    8192       2    0        2     2     1     1     1     0     8    1
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma2048    2048       1    0        1     1     0     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        8    0        0     1     0     1     1     0     8    0
uaddrrnd    24      854    0      822     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      854    0      822     1     0     1     1     0     8    0
vmmpekpl   168     8293    0     8246     3     0     3     3     0     8    0
vmmpepl    168    60548    0    58583    98     4    94    98     0   357    7
vmsppl     488      853    0      822     6     1     5     5     0     8    0
rwobjpl     80    18327    0    17264    28     4    24    28     0     8    0
pdppl      4096    1715    0     1644   105    32    73    85     0     8    2
pvpl        32    14856    0        0   122     2   120   121     0   265    0
pmappl     256      853    0      822     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      288    0       41     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff838dfff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 sys/kern/kern_lock.c:173
softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 sys/kern/kern_lock.c:173
softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x71f7b6894d70, count: 4
ddb{0}> trace
x86_ipi_db(ffffffff838dfff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 sys/kern/kern_lock.c:173
softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff839bdd40) at __mp_lock+0x192 sys/kern/kern_lock.c:173
softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x71f7b6894d70, count: -11
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x759652390ac0, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x759652390ac0, count: -1

Crashes (978):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/23 09:35 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/23 08:19 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/23 06:29 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/23 05:12 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/23 00:58 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 23:54 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 16:45 openbsd 3802f0c790f9 4595e353 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 15:28 openbsd 3802f0c790f9 4595e353 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 14:26 openbsd 3802f0c790f9 4595e353 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 11:31 openbsd 3802f0c790f9 4595e353 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 08:11 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 06:51 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 05:42 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 03:44 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 01:44 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/22 00:23 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 22:18 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 20:08 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 17:40 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 16:21 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 14:46 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 11:25 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 09:52 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 07:16 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 05:52 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 04:47 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 03:07 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/21 00:43 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 22:30 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 20:14 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 18:56 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 14:46 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 13:44 openbsd 84954924bf04 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 10:38 openbsd be10f67bca99 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 10:16 openbsd be10f67bca99 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 09:00 openbsd be10f67bca99 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 06:15 openbsd be10f67bca99 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/20 00:31 openbsd be10f67bca99 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 18:39 openbsd 2fc67ad6b988 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 17:09 openbsd 2fc67ad6b988 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 11:58 openbsd 2fc67ad6b988 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 08:23 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 04:46 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/19 01:53 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 23:01 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 21:30 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 16:17 openbsd a9044055e1bf 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 11:57 openbsd a9044055e1bf 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 09:19 openbsd a9044055e1bf 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 07:09 openbsd b932b7b57eb9 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/18 01:13 openbsd b932b7b57eb9 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/04/17 23:56 openbsd b932b7b57eb9 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/12/21 11:01 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.