syzbot


uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 220d, last: 6h13m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline -1 6 354d 526d 0/3 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
login: uvm_fault(0xfffffd8059bdf028, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff829a69a8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c5abab0
gsbase 0xffff8000299fdff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff829a69a8
Starting stack trace...
panic(ffffffff8339fadc) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff80003c5aba00) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff800001623000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:586
dtclose(11e5f,81,2000,ffff80003841aa88) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80003841aa88) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003c5abbb0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806a796038,81,fffffd80097fb138,ffff80003841aa88) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806b9d7850,ffff80003841aa88) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806b9d7850,ffff80003841aa88) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806b9d7850,ffff80003841aa88) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806b9d7850,ffff80003841aa88) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003841aa88) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003841aa88,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003841aa88,ffff80003c5abf20,ffff80003c5abe70) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c5abf20) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c5abf20) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x794220b6ef10, count: 242
End of stack trace.
WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 434512  74151      0           0  0x4000000    0  syz-executor
*338648  66548      0           0          0    1  syz-executor
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7804d5bf2370, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd8059bdf028, 0x0, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7804d5bf2370, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003a427ec0
rbx                                0
rdx                                0
rcx               0xffff80003841ad20
rax                             0x2a
r8                0xffff80003a427df0
r9                               0x1
r10               0x4c341f55a209b441
r11               0x3cd2d5ca2668303f
r12                                0
r13               0xffffffff82413898    Xdoreti+0x18
r14                                0
r15                                0
rip               0xffffffff8257e4c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff80003a427e40
ss                              0x10
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=338648 pid=66548 tcnt=4 stat=onproc
    flags process=0 proc=0
    runpri=86, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffcf98,0xffff80003841bcc0
    process=0xffff80003c5e7050 user=0xffff80003a422000, vmspace=0xfffffd8059bdf5e0
    estcpu=36, cpticks=7, pctcpu=0.0, user=6, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 74151  288718  92264      0  2           0                syz-executor
 74151  434512  92264      0  7   0x4000000                syz-executor
*66548  338648  94718      0  7           0                syz-executor
 66548  192349  94718      0  3   0x4000080  sbwait        syz-executor
 66548  408342  94718      0  3   0x4000080  fsleep        syz-executor
 66548  242114  94718      0  3   0x4000080  fsleep        syz-executor
 14823  149659  68777      0  3      0x3000  suspend       syz-executor
 14823  474804  68777      0  3   0x4081000  biowait       syz-executor
 14823  296380  68777      0  3   0x4081000  inode         syz-executor
 14823  340896  68777      0  3   0x4081000  inode         syz-executor
 14823  444249  68777      0  3   0x4081000  inode         syz-executor
 14823   50785  68777      0  3   0x4081000  inode         syz-executor
 14823  113454  68777      0  3   0x4081000  inode         syz-executor
 12961  441910  84653      0  3      0x3000  suspend       syz-executor
 12961  293392  84653      0  3   0x4081000  biowait       syz-executor
 12961  243262  84653      0  3   0x4081000  fltagain2     syz-executor
 67286  513749      1      0  3    0x100083  ttyin         getty
 48723   29850      0      0  3     0x14280  nfsidl        nfsio
 50831  265342      0      0  3     0x14280  nfsidl        nfsio
 44476  477646      0      0  3     0x14280  nfsidl        nfsio
 43924  165539      0      0  3     0x14280  nfsidl        nfsio
 80927  384360      0      0  3     0x14280  nfsidl        nfsio
 54948  177421      0      0  3     0x14280  nfsidl        nfsio
 53324   81264      0      0  3     0x14280  nfsidl        nfsio
 91195  159869      0      0  3     0x14280  nfsidl        nfsio
 96977  116293      0      0  3     0x14280  nfsidl        nfsio
 10291  168725      0      0  3     0x14280  nfsidl        nfsio
 29755  262671      0      0  3     0x14280  nfsidl        nfsio
 38124  362523      0      0  3     0x14280  nfsidl        nfsio
 69087  389525      0      0  3     0x14280  nfsidl        nfsio
 59190  514610      0      0  3     0x14280  nfsidl        nfsio
 38164  280765      0      0  3     0x14280  nfsidl        nfsio
 12415  110630      0      0  3     0x14280  nfsidl        nfsio
 84653  458655  98655      0  2         0x2                syz-executor
 64574  463867  98655      0  3        0x82  nanoslp       syz-executor
 68777  288693  98655      0  2         0x2                syz-executor
 94718   31620  98655      0  3        0x82  nanoslp       syz-executor
 19068  421315  98655      0  3        0x82  nanoslp       syz-executor
 76215  400983      0      0  3     0x14280  nfsidl        nfsio
 43539  306303      0      0  3     0x14280  nfsidl        nfsio
 43194  222282      0      0  3     0x14280  nfsidl        nfsio
 61153  486453      0      0  3     0x14280  nfsidl        nfsio
 26563  277647  98655      0  3         0x2  biowait       syz-executor
 40780  325273      0      0  3     0x14200  bored         sosplice
 92264  490877  98655      0  3        0x82  nanoslp       syz-executor
 86367   50322  98655      0  3        0x82  nanoslp       syz-executor
 98655  509363  25695      0  3        0x82  kqread        syz-executor
 25695   45257  76389      0  3    0x10008a  sigsusp       ksh
 76389  258279  28519      0  3        0x98  kqread        sshd-session
 28519  482165  32689      0  3        0x92  kqread        sshd-session
 32689  241286      1      0  3        0x88  kqread        sshd
   702  427447  31589     74  3   0x1100092  bpf           pflogd
 31589  378930      1      0  3        0x80  sbwait        pflogd
 27643   95006  62345     73  3   0x1100090  kqread        syslogd
 62345  430757      1      0  3    0x100082  sbwait        syslogd
  3283  437211      1      0  3    0x100080  kqread        resolvd
 50019  292522  20689     77  3    0x100092  kqread        dhcpleased
 68885  183595  20689     77  3    0x100092  kqread        dhcpleased
 20689   86524      1      0  3        0x80  kqread        dhcpleased
 97119   38331      0      0  3     0x14200  bored         smr
 46421  456958      0      0  3     0x14200  pgzero        zerothread
 14501  124870      0      0  3     0x14200  aiodoned      aiodoned
 92647  471621      0      0  3     0x14200  syncer        update
 81525   47330      0      0  3     0x14200  cleaner       cleaner
 34730   46400      0      0  3     0x14200  reaper        reaper
 90773  180965      0      0  3     0x14200  pgdaemon      pagedaemon
 57208  458804      0      0  3     0x14200  bored         viomb
 36246  346703      0      0  3  0x40014200  acpi0         acpi0
  8890  231509      0      0  3  0x40014200                idle1
 41590  102367      0      0  3     0x14200  bored         softnet1
 72460   99871      0      0  3     0x14200  netlock       softnet0
 77244   76376      0      0  2  0x40014200                systqmp
 81862  406997      0      0  3     0x14200  bored         systq
 14875    1626      0      0  3     0x14200  tmoslp        softclockmp
 26749  460540      0      0  3  0x40014200  tmoslp        softclock
 48738   37905      0      0  3  0x40014200                idle0
     1  230583      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 14823 (syz-executor) thread 0xffff80003841a558 (474804)
exclusive rrwlock inode r = 0 (0xfffffd805a125c78)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
#9  Xsyscall+0x128
Process 14823 (syz-executor) thread 0xffff80003841b4e8 (296380)
exclusive rrwlock inode r = 0 (0xfffffd806e15a930)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  vn_open+0x1f1 sys/kern/vfs_vnops.c:107
#8  doopenat+0x35b sys/kern/vfs_syscalls.c:1138
#9  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#9  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
#10 Xsyscall+0x128
Process 12961 (syz-executor) thread 0xffff80002a32a808 (293392)
exclusive rrwlock inode r = 0 (0xfffffd806f569ea8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
#9  Xsyscall+0x128
Process 26563 (syz-executor) thread 0xffff80003841da10 (277647)
exclusive rrwlock inode r = 0 (0xfffffd80648abc70)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline]
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:159
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232
#6  ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3113
#10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:746
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd80648abb48)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3098
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:746
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10252  11166K   12678K 166960K     15026        0
            pcb    17     15K      17K 166960K       443        0
         rtable   221     12K      12K 166960K       640        0
             pf    44     19K   67486K 166960K       227        0
         ifaddr    42      8K       8K 166960K       148        0
        ifgroup    59      2K       3K 166960K       250        0
         sysctl     4      1K       9K 166960K        19        0
       counters    70     37K      38K 166960K       284        0
       ioctlops     0      0K       4K 166960K      1964        0
            iov     0      0K      28K 166960K       217        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1511     95K      95K 166960K      3739        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3    620K     624K 166960K        34        0
         VM map     2      1K       1K 166960K         2        0
            sem    26     29K      48K 166960K       184        0
        dirhash    12      2K       2K 166960K        45        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     236K 166960K      2259        0
          sigio     0      0K       0K 166960K        74        0
           proc    72    115K     164K 166960K       891        0
        subproc    72      4K       4K 166960K       135        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       251        0
       in_multi    88      6K       7K 166960K       253        0
    ether_multi     1      0K       0K 166960K        19        0
            mrt     1      0K       0K 166960K        14        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   235   1049K    1049K 166960K       235        0
           exec     0      0K       1K 166960K       883        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         5        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   266    162K     177K 166960K     22407        0
       UVM aobj    39      2K       2K 166960K        42        0
     pinsyscall    42     84K     100K 166960K      3589        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       125        0
            NDP    13      0K       2K 166960K       107        0
           temp    83   8652K    8908K 166960K     93389        0
         kqueue    13     20K      32K 166960K       404        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      333    0      330     4     3     1     3     0     8    0
rtentry    176      205    0      120     6     1     5     5     0     8    0
unpcb      144     1428    0     1408     9     5     4     4     0     8    3
syncache   336       21    0       21     7     6     1     1     0     8    1
tcpqe       32        7    0        7     4     3     1     1     0     8    1
tcpcb      736      822    0      814    23    16     7     7     0     8    5
arp        136       25    0       14     1     0     1     1     0     8    0
ipq         40        1    0        1     1     1     0     1     0     8    0
ipqe        40        3    0        3     1     1     0     1     0     8    0
inpcb      328     2361    0     2349    46    35    11    13     0     8    8
nd6        152       37    0       19     1     0     1     1     0     8    0
pkpcb       40       21    0       21     5     4     1     1     0     8    1
kcovpl      48       15    0        7     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     0     1     1     0     8    1
ppxss      1192      84    0       84     3     2     1     1     0     8    1
pppxif     1504       7    0        7     3     2     1     1     0     8    1
pfstscr     40        6    0        5     2     1     1     1     0     8    0
pffrag     232       16    0        7     1     0     1     1     0   482    0
pffrnode    88       12    0        4     1     0     1     1     0     8    0
pffrent     40       39    0       28     1     0     1     1     0     8    0
pfosfp      40     1430    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1430    0      714    21     0    21    21     0     8    0
pfrktable  1344       2    0        1     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pftag       88        4    0        0     1     0     1     1     0     8    0
pfstitem    24      134    0       61     1     0     1     1     0     8    0
pfstkey    128      144    0       69     3     0     3     3     0     8    0
pfstate    384      133    0       64     7     0     7     7     0     8    0
pfrule     1344      34    0       28     2     1     1     2     0     8    0
rttmr      136        2    0        2     2     2     0     1     0     8    0
art_heap8  4096       4    0        0     4     0     4     4     0     8    0
art_heap4  256      941    0      533    39    12    27    30     0     8    0
art_table   40      945    0      533     6     1     5     5     0     8    0
art_node    32      204    0      133     1     0     1     1     0     8    0
sysvmsgpl   40        6    0        4     1     0     1     1     0     8    0
semupl     112        2    0        2     2     1     1     1     0     8    1
semapl     112      170    0      146     1     0     1     1     0     8    0
shmpl      112       39    0        3     2     0     2     2     0     8    0
dirhash    1024      39    0       22     3     0     3     3     0     8    0
dino2pl    256     5636    0     4120    96     0    96    96     0     8    0
ffsino     296     5636    0     4120   118     0   118   118     0     8    0
nchpl      144     8764    0     7048    64     0    64    64     0     8    0
rtmask      32       18    0       18     6     5     1     1     0     8    1
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   31495    0    31489     6     4     2     2     0     8    1
percpumem   16      157    0      107     1     0     1     1     0     8    0
kstatmem   264      156    0      128     4     1     3     3     0     8    1
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        7    0        7     4     4     0     1     0     8    0
scxspl     216    49883    0    49880    14    11     3     8     1     8    2
plimitpl   152      768    0      747     1     0     1     1     0     8    0
sigapl     424     2587    0     2519     9     1     8     8     0     8    0
knotepl    120      832    0        0    24     0    24    24     0     8    0
kqueuepl   224      968    0      959    13    11     2     9     0     8    1
pipepl     344      517    0      488    16     7     9     9     0     8    6
fdescpl    528     2530    0     2499     3     0     3     3     0     8    0
filepl     160    17897    0    17666    40    24    16    18     0     8    3
lockfpl    104     1098    0     1096     1     0     1     1     0     8    0
lockfspl    48      476    0      474     1     0     1     1     0     8    0
sessionpl  144       44    0       35     1     0     1     1     0     8    0
pgrppl      48       79    0       62     1     0     1     1     0     8    0
ucredpl    104     3237    0     3223     1     0     1     1     0     8    0
zombiepl   144     3091    0     3087     2     1     1     1     0     8    0
processpl  1232    2587    0     2519     7     1     6     6     0     8    0
procpl     664     6268    0     6188     9     1     8     8     0     8    0
sosppl     168       19    0       19     5     5     0     1     0     8    0
sockpl     752     4266    0     4231    66    53    13    20     0     8    8
mcl64k     65536     17    0        0     3     0     3     3     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     121    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      39    0        0     4     0     4     4     0     8    0
mtagpl      96       74    0        0     2     0     2     2     0     8    0
mbufpl     256     1147    0        0    72     0    72    72     0     8    0
bufpl      280    20041    0    13897   440     0   440   440     0     8    0
anonpl      32    14259    0        0   115     0   115   115     0   246    0
amapchunkpl 152   75579    0    74853    66    33    33    33     0   158    4
amappl16   200     6606    0     6150    62    38    24    26     0     8    0
amappl15   192        1    0        1     1     1     0     1     0     8    0
amappl14   184      156    0      143     1     0     1     1     0     8    0
amappl13   176        3    0        3     2     2     0     1     0     8    0
amappl12   168     3305    0     3274     2     0     2     2     0     8    0
amappl11   160       51    0       37     1     0     1     1     0     8    0
amappl10   152       25    0       25     2     2     0     1     0     8    0
amappl9    144      258    0      258     1     1     0     1     0     8    0
amappl8    136       20    0       17     1     0     1     1     0     8    0
amappl7    128      133    0      121     1     0     1     1     0     8    0
amappl6    120      254    0      250     1     0     1     1     0     8    0
amappl5    112      149    0      139     1     0     1     1     0     8    0
amappl4    104      352    0      334     1     0     1     1     0     8    0
amappl3     96    13497    0    13392     4     0     4     4     0     8    0
amappl2     88     2874    0     2794     2     0     2     2     0     8    0
amappl1     80    20367    0    19766    15     0    15    15     0     8    0
amappl      88    21194    0    21006     6     1     5     5     0    92    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma8192    8192       2    0        2     2     2     0     1     0     8    0
dma4096    4096       2    0        2     2     1     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     1     0     1     0     8    0
dma256     256       40    0       40     3     3     0     1     0     8    0
dma128     128      259    0      259     5     5     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       41    0        3     1     0     1     1     0     8    0
uaddrrnd    24     2530    0     2499     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2530    0     2499     1     0     1     1     0     8    0
vmmpekpl   168    21130    0    21062     4     0     4     4     0     8    0
vmmpepl    168   164370    0   161899   119    10   109   110     0   357    0
vmsppl     488     2529    0     2499     6     1     5     5     0     8    0
rwobjpl     80    48945    0    41586   153     2   151   151     0     8    0
pdppl      4096    5068    0     4998   140    68    72    84     0     8    2
pvpl        32    20885    0        0   169     1   168   168     0   265    0
pmappl     256     2529    0     2499     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      429    0      114    10     0    10    10     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837b5ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff83928e20) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83928e20) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x19e sys/kern/kern_lock.c:165
intr_handler(ffff80003c5c97f0,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff83928e20) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x192 sys/kern/kern_lock.c:165
end trace frame: 0x0, count: 3
ddb{0}> trace
x86_ipi_db(ffffffff837b5ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff83928e20) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsofttty() at Xsofttty+0x27
__mp_lock(ffffffff83928e20) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x19e sys/kern/kern_lock.c:165
intr_handler(ffff80003c5c97f0,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff83928e20) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff83928e20) at __mp_lock+0x192 sys/kern/kern_lock.c:165
end trace frame: 0x0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7804d5bf2370, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7804d5bf2370, count: -1

Crashes (134):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/15 04:18 openbsd eeb3fa463a89 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/14 21:47 openbsd eeb3fa463a89 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/14 19:05 openbsd eeb3fa463a89 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/14 04:43 openbsd a501bb3f7834 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/13 19:07 openbsd a03640071eda e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/13 16:17 openbsd a03640071eda e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/13 05:53 openbsd 597bb1fc1f2a e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/12 06:36 openbsd cdad1c05a2ff e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/11 14:01 openbsd 260368132975 e2beed91 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/11 03:14 openbsd 56696e8786be fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/10 22:31 openbsd 56696e8786be fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/10 15:27 openbsd 98139c2399bf fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/10 13:36 openbsd 98139c2399bf fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/09 22:11 openbsd 3efab2192dd6 fdeaa69b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/05 03:06 openbsd 6ed1cb188af6 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/04 21:35 openbsd 6ed1cb188af6 d291dd2d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/03 19:20 openbsd fd875b79ca1f 19216959 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/03 15:39 openbsd fd875b79ca1f 19216959 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/03 08:18 openbsd c6733e0d0e2e 96a211bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/03 05:34 openbsd c6733e0d0e2e 96a211bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/09/02 00:58 openbsd 813b141997c4 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/31 20:28 openbsd d417098b3164 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/31 13:56 openbsd d417098b3164 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/29 17:07 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/29 12:26 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/28 11:50 openbsd 0f23fd2bd678 bee60a83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/27 01:00 openbsd d9624900b8bd e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/26 15:13 openbsd d9624900b8bd e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/24 16:32 openbsd 9279bdd4d788 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/24 03:36 openbsd e872a63396e1 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/23 08:59 openbsd ccaf50e2ba15 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/20 23:01 openbsd 8dd4d68c0f49 0b9605c8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/17 20:21 openbsd d066b23bbb5a 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/16 23:40 openbsd b1b6accd48af 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/16 01:26 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/15 17:59 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/15 09:15 openbsd bc42849e5050 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/15 04:24 openbsd bc42849e5050 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/13 12:51 openbsd 304c6f61d3c6 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/12 16:10 openbsd ca8bfee27b33 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/12 12:49 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/12 10:36 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/12 08:01 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/12 01:36 openbsd 3ae9e49f3bd9 c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/11 23:46 openbsd 3ae9e49f3bd9 c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/08/11 05:15 openbsd 9abff0b24f7a 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.