syzbot


uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 158d, last: 2d03h
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline 6 291d 463d 0/3 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
uvm_fault(0xfffffd806e39a970, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff82980eb0 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c437400
gsbase 0xffff8000299ddff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff82980eb0
Starting stack trace...
panic(ffffffff8333dd09) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff80003c437350) at kerntrap+0x30b sys/arch/amd64/amd64/trap.c:486
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff800000afb000) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580
dtclose(11e5f,81,2000,ffff80003c416a68) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80003c416a68) at dtclose+0x105 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003c437500) at spec_close+0x45f sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd807a6107c8,81,fffffd80097fb410,ffff80003c416a68) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806d03a020,ffff80003c416a68) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806d03a020,ffff80003c416a68) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806d03a020,ffff80003c416a68) at fdrop+0x126 sys/kern/kern_descrip.c:1267
closef(fffffd806d03a020,ffff80003c416a68) at closef+0x192 sys/kern/kern_descrip.c:1251
fdfree(ffff80003c416a68) at fdfree+0x116 sys/kern/kern_descrip.c:1182
exit1(ffff80003c416a68,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215
sys_exit(ffff80003c416a68,ffff80003c437870,ffff80003c4377c0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c437870) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c437870) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7a5b9bae44e0, count: 242
End of stack trace.
WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*131808  30667      0           0          0    1  syz-executor
 314885   8976      0         0x2        0x1    0  syz-executor
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7d9b36e4d440, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd806e39a970, 0x0, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7d9b36e4d440, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a35e000
rbx                                0
rdx                                0
rcx               0xffff80002a3b87e8
rax                             0x2a
r8                0xffff80002a35df30
r9                               0x1
r10                0x70251b331a4d0a0
r11               0x2b8ff2e99d4ec1d0
r12                                0
r13               0xffffffff8307eb38    Xdoreti+0x18
r14                                0
r15                                0
rip               0xffffffff829ec4c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff80002a35df80
ss                              0x10
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=131808 pid=30667 tcnt=2 stat=onproc
    flags process=0 proc=0
    runpri=86, usrpri=86, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80002a2bace8,0xffff80002a3b9758
    process=0xffff80002a39a200 user=0xffff80002a359000, vmspace=0xfffffd800b027000
    estcpu=36, cpticks=2, pctcpu=0.0, user=2, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*30667  131808  83323      0  7           0                syz-executor
 30667  392331  83323      0  2   0x4000000                syz-executor
 86247  467544   8976      0  2       0xc80                syz-executor
 86247  146580   8976      0  3   0x4000080  fsleep        syz-executor
 86247  246199   8976      0  3   0x4000080  sbwait        syz-executor
 52821  167635  71322      0  2           0                syz-executor
 52821  499729  71322      0  3   0x4000080  fsleep        syz-executor
 93455  459162  57220      0  3        0x80  nanoslp       syz-executor
 93455  130788  57220      0  3   0x4000080  sbwait        syz-executor
 57220  121510  59895      0  3        0x82  nanoslp       syz-executor
 80322  381547      0      0  3     0x14200  acct          acct
 71322  385555  59895      0  2       0xc82                syz-executor
 90027  495008  59895      0  3        0x82  nanoslp       syz-executor
  8976  314885  59895      0  7         0x3                syz-executor
 68795  297744      0      0  3     0x14280  nfsidl        nfsio
 59747  196267      0      0  3     0x14280  nfsidl        nfsio
 57275  253809      0      0  3     0x14280  nfsidl        nfsio
  7189  433704      0      0  3     0x14280  nfsidl        nfsio
 59449  514575      0      0  3     0x14280  nfsidl        nfsio
 18790   36702      0      0  3     0x14280  nfsidl        nfsio
 79835  446870      0      0  3     0x14280  nfsidl        nfsio
 74196  232936      0      0  3     0x14280  nfsidl        nfsio
 73610   77016      0      0  3     0x14280  nfsidl        nfsio
 79912  413910      0      0  3     0x14280  nfsidl        nfsio
 96576   66106      0      0  3     0x14280  nfsidl        nfsio
 30423  282411      0      0  3     0x14280  nfsidl        nfsio
   674  486583      0      0  3     0x14280  nfsidl        nfsio
 70758  353480      0      0  3     0x14280  nfsidl        nfsio
 97985  470919      0      0  3     0x14280  nfsidl        nfsio
 77253  372136      0      0  3     0x14280  nfsidl        nfsio
 54993  138745      0      0  3     0x14280  nfsidl        nfsio
 55155  193348      0      0  3     0x14280  nfsidl        nfsio
 24740  403534      0      0  3     0x14280  nfsidl        nfsio
 77116  418072      0      0  3     0x14280  nfsidl        nfsio
 83323   76028  59895      0  3        0x82  nanoslp       syz-executor
 97258   70217  59895      0  3         0x2  biowait       syz-executor
 48762   47075  59895      0  2       0xc82                syz-executor
 19548  232239      0      0  3     0x14200  bored         sosplice
 33186   36445      1      0  3    0x100083  ttyopn        getty
 54483   95465  59895      0  2       0xc82                syz-executor
 59895  126069  92304      0  3        0x82  kqread        syz-executor
 92304  417663  27930      0  3    0x10008a  sigsusp       ksh
 27930  405413  94738      0  3        0x98  kqread        sshd-session
 94738  473268  69800      0  3        0x92  kqread        sshd-session
 69800  182061      1      0  3        0x88  kqread        sshd
  5933  517191  28826     74  3   0x1100092  bpf           pflogd
 28826  219052      1      0  3        0x80  sbwait        pflogd
 51804  289620  28321     73  3   0x1100090  kqread        syslogd
 28321   40325      1      0  3    0x100082  sbwait        syslogd
  8603  491779      1      0  3    0x100080  kqread        resolvd
 89245   98952  49578     77  3    0x100092  kqread        dhcpleased
  3387  517978  49578     77  3    0x100092  kqread        dhcpleased
 49578  222571      1      0  3        0x80  kqread        dhcpleased
 64368  202363      0      0  3     0x14200  bored         smr
   385  237661      0      0  2     0x14200                zerothread
 74718  405176      0      0  3     0x14200  aiodoned      aiodoned
 91463  183169      0      0  3     0x14200  syncer        update
 61510  413684      0      0  3     0x14200  cleaner       cleaner
 63876  435860      0      0  3     0x14200  reaper        reaper
 30818  333785      0      0  3     0x14200  pgdaemon      pagedaemon
 96339    3961      0      0  3     0x14200  bored         viomb
 49809   47683      0      0  3  0x40014200  acpi0         acpi0
 67148   62927      0      0  3  0x40014200                idle1
  9790  283419      0      0  3     0x14200  bored         softnet3
 42338  127312      0      0  3     0x14200  bored         softnet2
 31514  406822      0      0  3     0x14200  bored         softnet1
 22178   40890      0      0  3     0x14200  netlock       softnet0
 88983  249042      0      0  3     0x14200  smrbar        systqmp
 55537   80507      0      0  3     0x14200  bored         systq
 35685  457005      0      0  3     0x14200  tmoslp        softclockmp
 39751  146239      0      0  3  0x40014200  tmoslp        softclock
 97628  271169      0      0  3  0x40014200                idle0
     1  432726      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 97258 (syz-executor) thread 0xffff80003c416f88 (70217)
Process 88983 (systqmp) thread 0xffff8000ffffe520 (249042)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10231  11070K   11384K 166960K     14666        0
            pcb    18     20K      36K 166960K      1028        0
         rtable   296     15K      15K 166960K      1127        0
             pf    44     19K      21K 166960K       304        0
         ifaddr    46      8K       9K 166960K       212        0
        ifgroup    64      2K       3K 166960K       369        0
         sysctl     4      1K       9K 166960K        27        0
       counters    72     37K      38K 166960K       542        0
       ioctlops     0      0K       4K 166960K      2150        0
            iov     0      0K      32K 166960K       288        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1557     98K      98K 166960K      4226        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        35        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       256        0
        dirhash    12      2K       3K 166960K        84        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     232K 166960K      3061        0
          sigio     0      0K       0K 166960K       178        0
           proc    73    103K     140K 166960K      1091        0
        subproc    72      4K       4K 166960K       155        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       686        0
       in_multi    96      7K       7K 166960K       281        0
    ether_multi     1      0K       0K 166960K         9        0
            mrt     1      0K       0K 166960K        23        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   133    599K     599K 166960K       133        0
           exec     0      0K       1K 166960K      1125        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K        40        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   241    161K     178K 166960K     29059        0
       UVM aobj    24      4K       6K 166960K        26        0
     pinsyscall    42     84K     103K 166960K      4425        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       154        0
            NDP    14      0K       1K 166960K       150        0
           temp    83   8684K   10988K 166960K    166300        0
         kqueue    13     20K      32K 166960K       582        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      287    0      284     2     0     2     2     0     8    1
rtentry    176      318    0      203     6     0     6     6     0     8    0
unpcb      144     2622    0     2599    11     9     2     6     0     8    1
syncache   336       16    0       16     4     3     1     1     0     8    1
tcpqe       32        9    0        9     3     2     1     1     0     8    1
tcpcb      736     1003    0      993    23    21     2     7     0     8    0
arp        128       55    0       35     1     0     1     1     0     8    0
inpcb      328     4139    0     4125    30    23     7    12     0     8    5
nd6        144       63    0       31     2     0     2     2     0     8    0
pkpcb       40       33    0       33     4     3     1     1     0     8    1
kcovpl      48       17    0        9     1     0     1     1     0     8    0
mppekey    1024       3    0        3     3     3     0     1     0     8    0
ppxss      1192     195    0      195     3     2     1     1     0     8    1
pppxif     1504      21    0       21     6     5     1     1     0     8    1
pffrag     232       26    0       18     1     0     1     1     0   482    0
pffrnode    88       24    0       16     1     0     1     1     0     8    0
pffrent     40       49    0       41     1     0     1     1     0     8    0
pfosfp      40     1430    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1430    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        0     1     0     1     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pftag       88        3    0        0     1     0     1     1     0     8    0
pfstitem    24      206    0       58     1     0     1     1     0     8    0
pfstkey    128      206    0       58     5     0     5     5     0     8    0
pfstate    384      205    0       58    15     0    15    15     0     8    0
pfrule     1344      32    0       23     2     1     1     2     0     8    0
rttmr      136        5    0        5     4     3     1     1     0     8    1
art_heap8  4096       5    0        1     5     1     4     4     0     8    0
art_heap4  256     1222    0      736    38     7    31    31     0     8    0
art_table   40     1227    0      737     5     0     5     5     0     8    0
art_node    32      315    0      210     1     0     1     1     0     8    0
sysvmsgpl   40       11    0        7     1     0     1     1     0     8    0
semupl     112        4    0        4     2     2     0     1     0     8    0
semapl     112      251    0      241     1     0     1     1     0     8    0
shmpl      112       23    0        2     1     0     1     1     0     8    0
dirhash    1024      67    0       50     3     0     3     3     0     8    0
dino2pl    256     7183    0     5652    96     0    96    96     0     8    0
ffsino     288     7183    0     5652   110     0   110   110     0     8    0
nchpl      144    11346    0    10774    64    33    31    64     0     8    6
rtmask      32       14    0       14     5     4     1     1     0     8    1
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   42350    0    42350     6     4     2     2     0     8    2
percpumem   16      286    0      235     1     0     1     1     0     8    0
kstatmem   264      236    0      204     3     0     3     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        8    0        8     4     3     1     1     0     8    1
scxspl     216    92136    0    92134    12     9     3     8     1     8    2
plimitpl   152      697    0      678     1     0     1     1     0     8    0
sigapl     424     3363    0     3292    10     1     9     9     0     8    0
knotepl    120      973    0        0    29     0    29    29     0     8    0
kqueuepl   224     1370    0     1361    15    10     5     5     0     8    4
pipepl     336      512    0      485    12     4     8     8     0     8    5
fdescpl    520     3313    0     3282     3     0     3     3     0     8    0
filepl     160    25553    0    25319    30    14    16    20     0     8    3
lockfpl    104     1816    0     1813     3     1     2     2     0     8    1
lockfspl    48      626    0      623     1     0     1     1     0     8    0
sessionpl  144       45    0       36     1     0     1     1     0     8    0
pgrppl      48      102    0       85     1     0     1     1     0     8    0
ucredpl    104     4300    0     4287     1     0     1     1     0     8    0
zombiepl   144     3295    0     3292     1     0     1     1     0     8    0
processpl  1240    3363    0     3292     6     0     6     6     0     8    0
procpl     656     8088    0     8012     8     0     8     8     0     8    0
sosppl     168       18    0       18     3     2     1     1     0     8    1
sockpl     728     7246    0     7206    48    38    10    19     0     8    5
mcl64k     65536      6    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       4    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      83    0        0     8     0     8     8     0     8    0
mtagpl      96       69    0        0     2     0     2     2     0     8    0
mbufpl     256     1257    0        0    79     0    79    79     0     8    0
bufpl      280    40402    0    34260   440     0   440   440     0     8    0
anonpl      32    18963    0        0   153     0   153   153     0   246    0
amapchunkpl 152  100000    0    99363    51    17    34    35     0   158    3
amappl16   200    14273    0    13825    99    55    44    44     0     8    8
amappl15   192       13    0       13     2     2     0     1     0     8    0
amappl14   184      158    0      146     1     0     1     1     0     8    0
amappl13   176        5    0        5     1     1     0     1     0     8    0
amappl12   168     4112    0     4081     3     1     2     2     0     8    0
amappl11   160       54    0       40     1     0     1     1     0     8    0
amappl10   152        7    0        7     1     1     0     1     0     8    0
amappl9    144      259    0      259     1     1     0     1     0     8    0
amappl8    136       29    0       26     1     0     1     1     0     8    0
amappl7    128      140    0      127     1     0     1     1     0     8    0
amappl6    120      282    0      278     1     0     1     1     0     8    0
amappl5    112      175    0      165     1     0     1     1     0     8    0
amappl4    104      393    0      374     1     0     1     1     0     8    0
amappl3     96    20479    0    20369     4     0     4     4     0     8    0
amappl2     88      889    0      824     2     0     2     2     0     8    0
amappl1     80    23518    0    22909    17     2    15    15     0     8    0
amappl      88    27594    0    27425     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     3     3     0     1     0     8    0
dma128     128      257    0      257     4     3     1     1     0     8    1
dma64       64        8    0        8     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       83    0       82     1     0     1     1     0     8    0
aobjpl      72       25    0        2     1     0     1     1     0     8    0
uaddrrnd    24     3313    0     3282     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     3313    0     3282     1     0     1     1     0     8    0
vmmpekpl   168    26674    0    26606     4     0     4     4     0     8    0
vmmpepl    168   218094    0   215661   141    14   127   127     0   357    5
vmsppl     480     3312    0     3282     6     1     5     5     0     8    0
rwobjpl     72    64064    0    56759   143     2   141   141     0     8    2
pdppl      4096    6633    0     6564   125    52    73    85     0     8    4
pvpl        32    26504    0        0   217     4   213   213     0   265    0
pmappl     256     3312    0     3282     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      537    0       99    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83825ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(2) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsofttty() at Xsofttty+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x4f sys/dev/kcov.c:159
intr_handler(ffff80003c4eacb0,ffff800000079a80) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(0) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83
end trace frame: 0xffff80003c4eae40, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff83825ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(2) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83
dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsofttty() at Xsofttty+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x4f sys/dev/kcov.c:159
intr_handler(ffff80003c4eacb0,ffff800000079a80) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839d1938) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165
softintr_dispatch(0) at softintr_dispatch+0x12a sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff839d1938) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839d1938) at __mp_lock+0x192 sys/kern/kern_lock.c:165
ktrsyscall(ffff80002a3a7740,b,20,ffff80003c4eb100) at ktrsyscall+0x2b3 ktrwrite sys/kern/kern_ktrace.c:-1 [inline]
ktrsyscall(ffff80002a3a7740,b,20,ffff80003c4eb100) at ktrsyscall+0x2b3 sys/kern/kern_ktrace.c:183
syscall(ffff80003c4eb100) at syscall+0x2e6 mi_syscall sys/sys/syscall_mi.h:154 [inline]
syscall(ffff80003c4eb100) at syscall+0x2e6 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f3f97763150, count: -20
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7d9b36e4d440, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7d9b36e4d440, count: -1

Crashes (58):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/12 09:37 openbsd b3bc833acc6a 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/07/07 00:17 openbsd 1a059e88663d 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/07/06 16:43 openbsd 1a059e88663d 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/07/06 07:23 openbsd f2b2329d6987 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/07/04 13:59 openbsd e3bcd07fd6a9 d869b261 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/07/01 18:24 openbsd c56681b2e09c 091a06cd .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/07/01 11:37 openbsd 03190a0c50a7 6e83b42d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/06/28 13:04 openbsd fd1ffb313c1e fc9d8ee5 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/06/26 17:06 openbsd 0f21a7ba35b8 1ae8177e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/06/21 08:30 openbsd f62159b6a996 d6cdfb8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/21 00:21 openbsd 58d1a60550ab e3003213 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/19 15:20 openbsd 29a15cf42729 ed3e87f7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/15 02:37 openbsd 2b4e04f3782d 5f4b362d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/06/12 15:41 openbsd 2de8940ea18f 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/12 10:21 openbsd 2de8940ea18f 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/12 03:12 openbsd c0a88f684a76 98683f8f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/06/03 20:56 openbsd e4273848146a a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/28 04:35 openbsd f55e6d8632c3 874a1386 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/05/25 10:18 openbsd ae496ce11df0 ed351ea7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/05/25 07:35 openbsd ae496ce11df0 ed351ea7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/24 18:36 openbsd 8dcc83238d7a ed351ea7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/05/21 19:47 openbsd b67b1feba291 dc5d3808 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/21 04:49 openbsd 1363fb036962 b47f9e02 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/20 06:08 openbsd 03d4002980cf b84f0537 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/19 17:40 openbsd 2fc058fc36e6 27f68995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/18 10:28 openbsd 6decc3d5f4d6 f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/15 02:42 openbsd 7f65c2e60666 d6b2ee52 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/14 09:41 openbsd b0ff9b09a8b9 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/14 06:54 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/14 06:40 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/14 01:20 openbsd 6405849dc70d 7344edeb .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/13 06:41 openbsd 0de99af22586 f6671af7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/12 08:58 openbsd 1d7d4b26237d 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/05/11 17:38 openbsd 3fa496cf3673 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/05/08 09:24 openbsd 58ed90363f4e dbf35fa1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/07 02:16 openbsd 7a1ed1390929 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/06 13:46 openbsd 7a1ed1390929 ae98e6b9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/04 19:00 openbsd 8ee62dda4596 b0714e37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/05/01 09:12 openbsd 16e894ce34f4 ce7952f4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/04/28 14:13 openbsd ce661aea817d c6b4fb39 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/23 14:52 openbsd 1b07127f5555 57d54c08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/21 18:40 openbsd e8eeea37c7e6 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/21 02:56 openbsd 06d459206c9d 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/20 18:57 openbsd 06d459206c9d 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/20 14:00 openbsd 666a659208ae 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/20 03:27 openbsd 666a659208ae 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/19 10:09 openbsd ebe9080c87a7 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/19 09:04 openbsd ebe9080c87a7 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/18 18:02 openbsd 8f9f394da4af 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/18 11:16 openbsd 8f9f394da4af 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/16 04:17 openbsd 35b2ae8d3cd2 a95239b1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/04/11 21:33 openbsd 5990a1963d9d 12ba9c21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/08 20:09 openbsd f2dcb3709379 a775275d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/04/05 12:31 openbsd f526d97c66b8 1c65791e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/03/07 14:42 openbsd 046fdfd47363 7e3bd60d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/02/12 10:13 openbsd d800967ee04b b27c2402 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/02/07 01:25 openbsd 3dd691bf9970 53657d1b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.