uvm_fault: knote_processfork

Status: upstream: reported on 2026/08/11 08:52
Reported-by: syzbot+6fcb9f25ae485dbdce47@syzkaller.appspotmail.com
First crash: 59d, last: 23d

Sample crash report:
uvm_fault(0xffff800001be8208, 0x8, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      knote_processfork+0x287:        movq    0x8(%r15),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 267232  80020      0     0x14000      0x200    0  swapper
* 66752  32575      0           0  0x4000000    1  syz-executor
knote_processfork(ffffffff85450480,13894) at knote_processfork+0x287 sys/kern/kern_event.c:2246
fork1(ffffffff85450120,f0,ffffffff837d8160,0,0,ffff80003bb6d880) at fork1+0x1225 sys/kern/kern_fork.c:511
kthread_create(ffffffff837d8160,0,0,ffffffff84c180c0) at kthread_create+0xa8 sys/kern/kern_kthread.c:61
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702
nfs_sysctl(ffff80003bb6da88,1,0,ffff80003bb6da60,200000000200,0,ffff80003bb6dcd0) at nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894
sys_sysctl(ffff80003bb6f4e8,ffff80003bb6dcd0,ffff80003bb6dc40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80003bb6dcd0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003bb6dcd0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1f39828eda0, count: 7
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xffff800001be8208, 0x8, 0, 1) -> e
ddb{1}> show kasan
kasan: no report recorded this boot
ddb{1}> trace
knote_processfork(ffffffff85450480,13894) at knote_processfork+0x287 sys/kern/kern_event.c:2246
fork1(ffffffff85450120,f0,ffffffff837d8160,0,0,ffff80003bb6d880) at fork1+0x1225 sys/kern/kern_fork.c:511
kthread_create(ffffffff837d8160,0,0,ffffffff84c180c0) at kthread_create+0xa8 sys/kern/kern_kthread.c:61
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702
nfs_sysctl(ffff80003bb6da88,1,0,ffff80003bb6da60,200000000200,0,ffff80003bb6dcd0) at nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894
sys_sysctl(ffff80003bb6f4e8,ffff80003bb6dcd0,ffff80003bb6dc40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80003bb6dcd0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003bb6dcd0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1f39828eda0, count: -8
ddb{1}> show registers
rdi                              0x8
rsi                              0x1
rbp               0xffff80003bb6d750
rbx               0xffff800001b110b2
rdx                                0
rcx               0xffff800028fe3ff0
rax                              0x1
r8                               0x8
r9                               0x1
r10                                0
r11               0xffffffff8173c330    filt_proc
r12               0xffff80003bb6d600
r13               0xffff80003bb6d600
r14               0xffffffff854505c0    process0+0x140
r15                                0
rip               0xffffffff8174a747    knote_processfork+0x287
cs                               0x8
rflags                       0x10286    __ALIGN_SIZE+0xf286
rsp               0xffff80003bb6d5a0
ss                              0x10
knote_processfork+0x287:        movq    0x8(%r15),%r14
ddb{1}> show proc
PROC (syz-executor) tid=66752 pid=32575 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=76, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003bb6fcb0,0xffff80003bb6e800
    process=0xffff80003bb73040 user=0xffff80003bb62000, vmspace=0xffff800001be8208
    estcpu=26, cpticks=1, pctcpu=0.1, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 80020  267232      0     0  7     0x14000      0x200           swapper
 71803  388787  61213     0  2    0x100002          0           sh
 16123  151187  46895     0  2           0          0           syz-executor
   649  263942   3161     0  2         0x1          0           syz-executor
   649  310930   3161     0  2         0x1  0x4000000           syz-executor
   649  277175   3161     0  3         0x1  0x4000080 fsleep    syz-executor
 94110  228475  14213     0  2           0          0           syz-executor
 68684  148022   8318     0  2           0          0           syz-executor
   132  143031  13913     0  2           0          0           syz-executor
   132   55070  13913     0  3           0  0x4000080 fsleep    syz-executor
   132   37024  13913     0  3           0  0x4000080 fsleep    syz-executor
   132  104683  13913     0  3           0  0x4000080 fsleep    syz-executor
   132  416837  13913     0  2           0  0x4000000           syz-executor
   132  271983  13913     0  2           0  0x4000000           syz-executor
   132    2889  13913     0  2           0  0x4000000           syz-executor
   132  230996  13913     0  2           0  0x4000000           syz-executor
   132  477067  13913     0  2           0  0x4000000           syz-executor
 32575  192006  10769     0  2           0          0           syz-executor
*32575   66752  10769     0  7           0  0x4000000           syz-executor
 32575  316919  10769     0  3           0  0x4000080 fsleep    syz-executor
 32575   86260  10769     0  3           0  0x4000080 fsleep    syz-executor
 64409  121028  94599     0  2           0          0           syz-executor
 61213  266613  51922     0  3         0x2       0x80 wait      syz-executor
 13913  260307  51922     0  2         0x2      0xc80           syz-executor
 94599  291346  51922     0  2         0x2          0           syz-executor
  8318  107562  51922     0  2         0x2          0           syz-executor
 14213  510217  51922     0  3         0x2       0x80 nanoslp   syz-executor
  3161  268626  51922     0  3         0x2       0x80 nanoslp   syz-executor
 10769  216596  51922     0  2         0x2      0xc80           syz-executor
 46895  512096  51922     0  2         0x2          0           syz-executor
 51922   50018  55810     0  3         0x2       0x80 kqread    syz-executor
 55810  319299  97903     0  3    0x100002       0x88 sigsusp   ksh
 97903  152473  38121     0  3        0x10       0x88 kqread    sshd-session
 38121  484028  56001     0  3        0x12       0x80 kqread    sshd-session
 30500  202002      1     0  3    0x100003       0x80 ttyin     getty
 56001  478088      1     0  3           0       0x88 kqread    sshd
 60493  126923   1519    74  3   0x1100012       0x80 bpf       pflogd
  1519  358367      1     0  3           0       0x80 sbwait    pflogd
 16998  337260  50290    73  3   0x1100010       0x80 kqread    syslogd
 50290   99591      1     0  3    0x100002       0x80 sbwait    syslogd
 89406   63573      1     0  3    0x100000       0x80 kqread    resolvd
 51748  117670  48566    77  3    0x100012       0x80 kqread    dhcpleased
 64616  122324  48566    77  3    0x100012       0x80 kqread    dhcpleased
 48566   16807      1     0  3           0       0x80 kqread    dhcpleased
 61765  148540      0     0  3     0x14000      0x200 bored     smr
 69837  513938      0     0  2     0x14000      0x200           zerothread
 95437   11029      0     0  3     0x14000      0x200 aiodoned  aiodoned
 87767  394021      0     0  3     0x14000      0x200 syncer    update
   348   23316      0     0  3     0x14000      0x200 cleaner   cleaner
 10110   60763      0     0  3     0x14000      0x200 reaper    reaper
 77307   61693      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 40674  446921      0     0  3     0x14000      0x200 bored     viomb
 74946  464493      0     0  3     0x14000 0x40000200 acpi0     acpi0
 90613  291594      0     0  3     0x14000 0x40000200           idle1
 11914  490196      0     0  3     0x14000      0x200 bored     softnet1
 23593  429679      0     0  3     0x14000      0x200 bored     softnet0
 77823   65769      0     0  3     0x14000      0x200 bored     systqmp
 45646  442576      0     0  3     0x14000      0x200 bored     systq
 13863  367219      0     0  3     0x14000      0x200 tmoslp    softclockmp
 36914   38479      0     0  2     0x14000 0x40000200           softclock
 98892  447060      0     0  3     0x14000 0x40000200           idle0
     1   82478      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{1}> show all locks
CPU 0:
exclusive mutex &sched_lock r = 0 (0xffffffff85e5cf10)
#0  witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x632 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x683 sys/kern/kern_lock.c:487
#2  sleep_finish+0x2a2 sys/kern/kern_synch.c:357
#3  sys_futex+0x651 futex_wait sys/kern/sys_futex.c:306 [inline]
#3  sys_futex+0x651 sys/kern/sys_futex.c:155
#4  syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#5  Xsyscall+0x128
CPU 1:
exclusive mutex &pr->ps_mtx r = 0 (0xffffffff85450598)
#0  witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x632 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x683 sys/kern/kern_lock.c:487
#2  knote_processfork+0x666 sys/kern/kern_event.c:-1
#3  fork1+0x1225 sys/kern/kern_fork.c:511
#4  kthread_create+0xa8 sys/kern/kern_kthread.c:61
#5  nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702
#6  nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894
#7  sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#8  syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#9  Xsyscall+0x128
Process 32575 (syz-executor) thread 0xffff80003bb6f4e8 (66752)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11074  12271K   12394K 166960K     12310        0
            pcb    20     26K      30K 166960K       128        0
         rtable   248     18K      29K 166960K       971        0
             pf    40     24K      26K 166960K        99        0
         ifaddr    47     14K      15K 166960K       135        0
        ifgroup    63      2K       2K 166960K       145        0
         sysctl     3      1K      13K 166960K        11        0
       counters    74     43K      44K 166960K       116        0
       ioctlops    36      9K     194K 166960K      1598        0
            iov     0      0K      16K 166960K         4        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1334     86K      87K 166960K      1687        0
      UFS quota     1     36K      36K 166960K         1        0
      UFS mount     5     44K      44K 166960K         5        0
            shm     2      2K       6K 166960K         5        0
         VM map     2      1K       1K 166960K         2        0
            sem    18      1K       1K 166960K        22        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     405K 166960K     12470        0
      file desc    24     74K     117K 166960K       623        0
          sigio     1      0K       0K 166960K         5        0
           proc   125    131K     182K 166960K      1179        0
        subproc    99     12K      13K 166960K       270        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     20K      20K 166960K         1        0
    ip_moptions     0      0K      10K 166960K       152        0
       in_multi   105      7K       8K 166960K       332        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K        16        0
    ISOFS mount     1     36K      36K 166960K         1        0
  MSDOSFS mount     1     20K      20K 166960K         1        0
           ttys    55    384K     384K 166960K        55        0
           exec    30      7K      16K 166960K       695        0
   fusefs mount     1     36K      36K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      1K       1K 166960K         3        0
        VM swap    14    124K     124K 166960K        15        0
       UVM amap   495    311K     371K 166960K      6244        0
       UVM aobj     6      4K       4K 166960K         6        0
     pinsyscall   148    261K     367K 166960K      2331        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     5      0K       0K 166960K        11        0
            NDP    20      0K       2K 166960K        93        0
           temp   335   9313K    9449K 166960K      7070        0
         kqueue    20     51K      77K 166960K        59        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       77    0       74     1     0     1     1     0     8    0
rtentry    176      342    0      254     6     1     5     6     0     8    0
unpcb      144      170    0      153     2     1     1     2     0     8    0
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpcb      736       15    0       11     1     0     1     1     0     8    0
arp        136       60    0       46     1     0     1     1     0     8    0
inpcb      328      404    0      397     9     2     7     7     0     8    6
nd6        152       87    0       69     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48       30    0       22     1     0     1     1     0     8    0
ppxss      1192       1    0        1     1     1     0     1     0     8    0
pfstscr     40        2    0        2     1     0     1     1     0     8    1
pffrag     232        1    0        0     1     0     1     1     0   482    0
pffrnode    88        1    0        0     1     0     1     1     0     8    0
pffrent     40        3    0        2     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       49    0       11     1     0     1     1     0     8    0
pfstkey    128       53    0       15     2     0     2     2     0     8    0
pfstate    448       51    0       13     5     0     5     5     0     8    0
pfrule     1360      22    0       17     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256     1389    0     1018    29     1    28    29     0     8    1
art_table   40     1390    0     1018     5     0     5     5     0     8    0
art_node    32      342    0      262     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl      72       20    0        4     1     0     1     1     0     8    0
shmpl      112        3    0        0     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1911    0      391    96     0    96    96     0     8    0
ffsino     296     1911    0      391   118     0   118   118     0     8    0
nchpl      144     2343    0      567    66     0    66    66     0     8    0
vnodes     216     2254    0        0   126     0   126   126     0     8    0
namei      1024   11275    0    11275     3     2     1     2     0     8    1
percpumem   16       74    0       24     1     0     1     1     0     8    0
kstatmem   264       73    0       48     2     0     2     2     0     8    0
scxspl     216     8412    0     8412     9     1     8     8     1     8    8
plimitpl   152       67    0       50     1     0     1     1     0     8    0
sigapl     424      897    0      848     7     1     6     7     0     8    0
knotepl    120      227    0        0     7     0     7     7     0     8    0
kqueuepl   224      113    0      102     3     0     3     3     0     8    2
pipepl     344      255    0      227     6     3     3     6     0     8    0
fdescpl    528      880    0      848     3     0     3     3     0     8    0
filepl     160     3789    0     3575    14     2    12    14     0     8    2
lockfpl    104       30    0       28     1     0     1     1     0     8    0
lockfspl    48       15    0       13     1     0     1     1     0     8    0
sessionpl  144       52    0       41     1     0     1     1     0     8    0
pgrppl      48       84    0       65     1     0     1     1     0     8    0
ucredpl    104      343    0      329     1     0     1     1     0     8    0
zombiepl   144      848    0      848     1     0     1     1     0     8    1
processpl  1232     897    0      848     6     1     5     5     0     8    1
procpl     664     1216    0     1154     6     0     6     6     0     8    0
sosppl     176        2    0        2     1     1     0     1     0     8    0
sockpl     752      686    0      659    13     3    10    10     0     8    7
mcl64k     65536      3    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     121    0        0    16     0    16    16     0     8    1
mcl2k      2048      23    0        0     3     0     3     3     0     8    0
mextrefs    64       24    0        0     1     0     1     1     0     8    0
mtagpl      96        7    0        0     1     0     1     1     0     8    0
mbufpl     256      214    0        0    14     0    14    14     0     8    0
bufpl      272     2572    0      108   165     0   165   165     0     8    0
anonpl      32     5574    0        0    47     2    45    46     0   222    0
amapchunkpl 152   17714    0    17275    26     4    22    25     0   158    4
amappl16   200     2104    0     2074     6     3     3     5     0     8    1
amappl15   192        7    0        7     2     2     0     1     0     8    0
amappl14   184      684    0      682     1     0     1     1     0     8    0
amappl13   176      165    0      153     1     0     1     1     0     8    0
amappl12   168     1212    0     1184     2     0     2     2     0     8    0
amappl11   160        7    0        7     3     2     1     1     0     8    1
amappl10   152       78    0       64     1     0     1     1     0     8    0
amappl9    144      271    0      271     2     1     1     1     0     8    1
amappl8    136      199    0      197     1     0     1     1     0     8    0
amappl7    128      214    0      201     1     0     1     1     0     8    0
amappl6    120      371    0      368     1     0     1     1     0     8    0
amappl5    112      103    0       93     1     0     1     1     0     8    0
amappl4    104      349    0      330     1     0     1     1     0     8    0
amappl3     96     3211    0     3122     3     0     3     3     0     8    0
amappl2     88      916    0      841     2     0     2     2     0     8    0
amappl1     80    13963    0    13355    18     3    15    16     0     8    0
amappl      88     5143    0     4994     4     0     4     4     0    92    0
uvmvnodes   80       98    0        0     2     0     2     2     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        5    0        0     1     0     1     1     0     8    0
uaddrrnd    24      880    0      848     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      880    0      848     1     0     1     1     0     8    0
vmmpekpl   168     9330    0     9298     3     0     3     3     0     8    0
vmmpepl    168    65174    0    63253    92     3    89    90     0   357    4
vmsppl     488      879    0      848     5     0     5     5     0     8    0
rwobjpl     80    21128    0    20093    28     4    24    26     0     8    1
pdppl      4096    1769    0     1696   125    50    75    87     0     8    2
pvpl        32    12767    0        0   103     0   103   103     0   265    0
pmappl     256      879    0      848     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     120      473    0       58    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x19:        leave
x86_ipi_db(ffffffff85337ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_release_all(ffffffff8545b340) at __mp_release_all+0x10c sys/kern/kern_lock.c:223
tsleep_nsec(ffffffff85448200,120,ffffffff84c180a0,ffffffffffffffff) at tsleep_nsec+0x236 sys/kern/kern_synch.c:-1
nfssvc_iod(ffff800039f3c2b8) at nfssvc_iod+0x36a sys/nfs/nfs_syscalls.c:636
end trace frame: 0x0, count: 9
ddb{0}> trace
x86_ipi_db(ffffffff85337ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_release_all(ffffffff8545b340) at __mp_release_all+0x10c sys/kern/kern_lock.c:223
tsleep_nsec(ffffffff85448200,120,ffffffff84c180a0,ffffffffffffffff) at tsleep_nsec+0x236 sys/kern/kern_synch.c:-1
nfssvc_iod(ffff800039f3c2b8) at nfssvc_iod+0x36a sys/nfs/nfs_syscalls.c:636
end trace frame: 0x0, count: -6
ddb{0}> machine ddbcpu 1
Stopped at      knote_processfork+0x287:        movq    0x8(%r15),%r14
knote_processfork(ffffffff85450480,13894) at knote_processfork+0x287 sys/kern/kern_event.c:2246
fork1(ffffffff85450120,f0,ffffffff837d8160,0,0,ffff80003bb6d880) at fork1+0x1225 sys/kern/kern_fork.c:511
kthread_create(ffffffff837d8160,0,0,ffffffff84c180c0) at kthread_create+0xa8 sys/kern/kern_kthread.c:61
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702
nfs_sysctl(ffff80003bb6da88,1,0,ffff80003bb6da60,200000000200,0,ffff80003bb6dcd0) at nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894
sys_sysctl(ffff80003bb6f4e8,ffff80003bb6dcd0,ffff80003bb6dc40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80003bb6dcd0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003bb6dcd0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1f39828eda0, count: 7
ddb{1}> trace
knote_processfork(ffffffff85450480,13894) at knote_processfork+0x287 sys/kern/kern_event.c:2246
fork1(ffffffff85450120,f0,ffffffff837d8160,0,0,ffff80003bb6d880) at fork1+0x1225 sys/kern/kern_fork.c:511
kthread_create(ffffffff837d8160,0,0,ffffffff84c180c0) at kthread_create+0xa8 sys/kern/kern_kthread.c:61
nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702
nfs_sysctl(ffff80003bb6da88,1,0,ffff80003bb6da60,200000000200,0,ffff80003bb6dcd0) at nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894
sys_sysctl(ffff80003bb6f4e8,ffff80003bb6dcd0,ffff80003bb6dc40) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80003bb6dcd0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003bb6dcd0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x1f39828eda0, count: -8

Crashes (40):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/16 07:41 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b4b76c1f24bb 12a0a44a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/16 06:14 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b4b76c1f24bb 12a0a44a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/16 03:20 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b4b76c1f24bb 12a0a44a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 20:24 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan c8b69c7726dd f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 17:25 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan c8b69c7726dd f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 16:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan c8b69c7726dd f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 14:43 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 13:54 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 13:35 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 11:25 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 f41e228a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 08:38 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 08:28 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 06:45 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 01:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 00:56 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 00:27 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/15 00:13 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 23:21 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 81a27d1a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 21:15 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 924033e8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 19:00 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 924033e8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 14:46 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 924033e8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 13:37 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 924033e8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 11:19 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 924033e8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 08:50 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 70a60e12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 07:50 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 70a60e12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/14 02:32 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba3d21e4ee62 70a60e12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/13 13:04 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2fac54c86f35 70a60e12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/12 06:22 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 2fac54c86f35 70a60e12 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/08 15:59 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 351387c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/08 14:46 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 351387c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/08 11:30 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 351387c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/08 10:35 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 351387c4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/09/04 16:13 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 06706d23b01e 44dda43b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 16:40 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan f02e55361321 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 14:52 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 14:09 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 11:22 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 10:18 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/14 09:03 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
2026/08/11 08:51 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 513d7cacacc3 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: knote_processfork
* Struck through repros no longer work on HEAD.