syzbot


protection_fault: __x86_indirect_thunk_r11 (4)

Status: upstream: reported on 2025/04/29 08:10
Reported-by: syzbot+71e4456711474b9a7fdf@syzkaller.appspotmail.com
First crash: 9d06h, last: 9d06h
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: __x86_indirect_thunk_r11 (2) 15 345d 428d 0/3 auto-obsoleted due to no activity on 2024/08/17 10:13
openbsd protection_fault: __x86_indirect_thunk_r11 (3) 9 210d 263d 0/3 auto-obsoleted due to no activity on 2025/01/07 17:39
openbsd protection_fault: __x86_indirect_thunk_r11 1 556d 556d 0/3 auto-obsoleted due to no activity on 2024/01/28 10:43

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      __x86_indirect_thunk_r11+0x14:  ret
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
__x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14
spec_write(ffff80003c43f520) at spec_write+0x120 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd806a7e76e8,ffff80003c43f6c8,1,fffffd807f7d3270) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
vn_write(fffffd806be527c0,ffff80003c43f6c8,0) at vn_write+0x1d4 sys/kern/vfs_vnops.c:408
dofilewritev(ffff8000ffff22a0,5,ffff80003c43f6c8,0,ffff80003c43f780) at dofilewritev+0x23c sys/kern/sys_generic.c:380
sys_write(ffff8000ffff22a0,ffff80003c43f830,ffff80003c43f780) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c43f830) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c43f830) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf8a3e39fc50, count: -8
ddb{1}> show registers
rdi               0xffff800001494000
rsi               0xfffffd80693bcc00
rbp               0xffff80003c43f470
rbx                                0
rdx               0xffff80003c43f310
rcx                                0
rax                                0
r8                                 0
r9                               0x1
r10               0x2e318705847d066c
r11                  0xd8c3900000000
r12                                0
r13               0xffff800001494000
r14               0xffff8000014fd000
r15               0xffff8000014fd0c8
rip               0xffffffff816ed304    __x86_indirect_thunk_r11+0x14
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80003c43f300
ss                              0x10
__x86_indirect_thunk_r11+0x14:  ret
ddb{1}> show proc
PROC (syz-executor) tid=358092 pid=8875 tcnt=2 stat=onproc
    flags process=1000<SINGLEEXIT> proc=4080000<SUSPSINGLE,THREAD>
    runpri=32, usrpri=54, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff8000ffff2a50 scnt=1 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff2a50,0xffff80002a2f6800
    process=0xffff80003c4edc18 user=0xffff80003c43a000, vmspace=0xfffffd806bd6f3e0
    estcpu=4, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 40856   58116  78032      0  2           0                syz-executor
 40856    4515  78032      0  2   0x4000000                syz-executor
 72831   30102  48986      0  3         0x2  kmmaplk       syz-executor
  7246  273108   4855      0  3         0x2  smrbar        ifconfig
 32417  111984  59644      0  2           0                syz-executor
 32417  502922  59644      0  3   0x4000080  fsleep        syz-executor
 32417    9786  59644      0  3   0x4000080  kqread        syz-executor
 32417  366910  59644      0  3   0x4000080  fsleep        syz-executor
  4855   76257  18158      0  3    0x10008a  sigsusp       sh
 18158  301550  48986      0  3        0x82  wait          syz-executor
 76419   36056  48986      0  3        0x82  piperd        syz-executor
 78032   69785  48986      0  2         0x3                syz-executor
 10396  235786  48986      0  2         0x3                syz-executor
 59644  428428  48986      0  2         0x2                syz-executor
  8875  263844      1      0  3      0x3000  suspend       syz-executor
* 8875  358092      1      0  7   0x4081000                syz-executor
 55577   67266      1      0  3    0x100083  ttyin         getty
 55522  144422  48986      0  3        0x82  wait          syz-executor
 92013   33220      0      0  3     0x14200  bored         sosplice
 48986  498151    610      0  3        0x82  nanoslp       syz-executor
   610  251731  17894      0  3    0x10008a  sigsusp       ksh
 17894  400644  48854      0  3        0x98  kqread        sshd-session
 48854  473027  60268      0  3        0x92  kqread        sshd-session
 60268  341942      1      0  3        0x88  kqread        sshd
 49470   30286  22039     74  3   0x1100092  bpf           pflogd
 22039  305241      1      0  3        0x80  sbwait        pflogd
 22814  289578  49202     73  3   0x1100090  kqread        syslogd
 49202  310304      1      0  3    0x100082  sbwait        syslogd
 16598  354418      1      0  3    0x100080  kqread        resolvd
 57160  212452  16846     77  2    0x100012                dhcpleased
   761  297182  16846     77  3    0x100092  kqread        dhcpleased
 16846  192140      1      0  3        0x80  kqread        dhcpleased
 38748  170734      0      0  3     0x14200  bored         smr
 87197  199264      0      0  2     0x14200                zerothread
  6824   52204      0      0  3     0x14200  aiodoned      aiodoned
 18932  355923      0      0  3     0x14200  syncer        update
 66519  155740      0      0  3     0x14200  cleaner       cleaner
 85636  298382      0      0  2     0x14200                reaper
  7458  424901      0      0  3     0x14200  pgdaemon      pagedaemon
 25676  298574      0      0  3     0x14200  bored         viomb
 86473  161705      0      0  3  0x40014200  acpi0         acpi0
 60784  340773      0      0  3  0x40014200                idle1
 82055  460017      0      0  3     0x14200  bored         softnet3
 29922  105186      0      0  3     0x14200  bored         softnet2
 60136  151745      0      0  3     0x14200  bored         softnet1
 17979  188752      0      0  3     0x14200  bored         softnet0
 20983  295194      0      0  2     0x14200                systqmp
 70384  158139      0      0  3     0x14200  bored         systq
 60418  405317      0      0  3     0x14200  tmoslp        softclockmp
 40908  427362      0      0  7  0x40014200                softclock
 24382  498386      0      0  3  0x40014200                idle0
     1   82597      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 40856 (syz-executor) thread 0xffff8000ffff2f70 (4515)
exclusive rrwlock inode r = 0 (0xfffffd8073856e30)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:616
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  sys_utimensat+0x168 doutimensat sys/kern/vfs_syscalls.c:2695 [inline]
#7  sys_utimensat+0x168 sys/kern/vfs_syscalls.c:2676
#8  syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb08 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 7246 (ifconfig) thread 0xffff80003b40d4b8 (273108)
exclusive rwlock clonelk r = 0 (0xffffffff8382b838)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  if_clone_destroy+0x67 sys/net/if.c:-1
#3  ifioctl+0x5c5 sys/net/if.c:-1
#4  sys_ioctl+0x5c3 sys/kern/sys_generic.c:-1
#5  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#5  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#6  Xsyscall+0x128
Process 8875 (syz-executor) thread 0xffff8000ffff22a0 (358092)
exclusive rwlock netlock r = 0 (0xffffffff8382b920)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  bpfwrite+0x313 sys/net/bpf.c:681
#3  spec_write+0x120 sys/kern/spec_vnops.c:302
#4  VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
#5  vn_write+0x1d4 sys/kern/vfs_vnops.c:408
#6  dofilewritev+0x23c sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83947408)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
#2  mi_switch+0x4b7 sys/kern/sched_bsd.c:441
#3  sleep_finish+0x24f sys/kern/kern_synch.c:412
#4  rw_do_enter_write+0x1de sys/kern/kern_rwlock.c:292
#5  bpfwrite+0x313 sys/net/bpf.c:681
#6  spec_write+0x120 sys/kern/spec_vnops.c:302
#7  VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
#8  vn_write+0x1d4 sys/kern/vfs_vnops.c:408
#9  dofilewritev+0x23c sys/kern/sys_generic.c:380
#10 sys_write+0xa2 sys/kern/sys_generic.c:300
#11 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#11 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
#12 Xsyscall+0x128
Process 85636 (reaper) thread 0xffff8000ffffcf68 (298382)
exclusive rwlock kmmaplk r = 0 (0xffffffff83a0c5a8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5250
#3  uvm_unmap+0x81 sys/uvm/uvm_map.c:1792
#4  km_free+0x87 sys/uvm/uvm_km.c:831
#5  uvm_uarea_free+0x4f sys/uvm/uvm_glue.c:285
#6  reaper+0x1fe sys/kern/kern_exit.c:467
#7  proc_trampoline+0x10
Process 40908 (softclock) thread 0xffff8000ffffecd0 (427362)
shared rwlock timeout r = 0 (0xffffffff8387e5a8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  timeout_run+0xf1 sys/kern/kern_timeout.c:658
#2  softclock_thread+0x163 sys/kern/kern_timeout.c:810
#3  proc_trampoline+0x10
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10231  11103K   11433K 166960K     13533        0
            pcb    17     17K      19K 166960K       350        0
         rtable   152      6K       9K 166960K       657        0
             pf    34     17K      82K 166960K       149        0
         ifaddr    32      5K       7K 166960K       107        0
        ifgroup    51      2K       2K 166960K       183        0
         sysctl     4      1K       3K 166960K         8        0
       counters    62     36K      37K 166960K       162        0
       ioctlops     0      0K       4K 166960K      1696        0
            iov     0      0K      16K 166960K       171        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1433     90K      90K 166960K      3242        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     3      5K       9K 166960K        33        0
         VM map     2      1K       1K 166960K         2        0
            sem    24      5K       5K 166960K        30        0
        dirhash    12      2K       2K 166960K        48        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    19     69K     240K 166960K      1670        0
          sigio     0      0K       0K 166960K        89        0
           proc    82    115K     128K 166960K       843        0
        subproc    85      5K       6K 166960K       419        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       262        0
       in_multi    52      3K       7K 166960K       200        0
    ether_multi     1      0K       0K 166960K        18        0
            mrt     1      0K       0K 166960K        13        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   223    996K     996K 166960K       223        0
           exec     0      0K       1K 166960K       650        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         6        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   281    194K     203K 166960K     15989        0
       UVM aobj    79      5K       5K 166960K        80        0
     pinsyscall    44     88K     104K 166960K      2877        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        79        0
            NDP    13      0K       2K 166960K        76        0
           temp    88   8692K    8948K 166960K     72072        0
         kqueue    14     22K      30K 166960K       239        0
      SYN cache     2     10K      18K 166960K         3        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      297    0      294     3     2     1     3     0     8    0
rtentry    176      195    0      132     6     0     6     6     0     8    2
unpcb      144      901    0      882     3     1     2     2     0     8    0
syncache   336        5    0        5     2     2     0     1     0     8    0
tcpcb      808      537    0      532    18    17     1    11     0     8    0
arp        128       33    0       20     1     0     1     1     0     8    0
inpcb      384     1771    0     1761    14    12     2    11     0     8    0
nd6        144       47    0       34     1     0     1     1     0     8    0
pkpcb       40        7    0        7     2     2     0     1     0     8    0
kcovpl      48       46    0       37     1     0     1     1     0     8    0
mppekey    1024       3    0        3     1     1     0     1     0     8    0
ppxss      1192      29    0       29     2     1     1     1     0     8    1
pppxif     1504       3    0        3     3     3     0     1     0     8    0
pfstscr     40        1    0        1     1     1     0     1     0     8    0
pffrag     232        6    0        2     1     0     1     1     0   482    0
pffrnode    88        6    0        2     1     0     1     1     0     8    0
pffrent     40       10    0        6     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pfstitem    24      107    0       32     1     0     1     1     0     8    0
pfstkey    128      109    0       34     3     0     3     3     0     8    0
pfstate    384      107    0       33     8     0     8     8     0     8    0
pfrule     1344      24    0       18     2     1     1     2     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      754    0      516    30    10    20    29     0     8    3
art_table   32      757    0      516     4     0     4     4     0     8    0
art_node    16      192    0      138     1     0     1     1     0     8    0
sysvmsgpl   40       11    0        6     1     0     1     1     0     8    0
semupl     112        1    0        1     1     1     0     1     0     8    0
semapl     112       25    0        3     1     0     1     1     0     8    0
shmpl      112       77    0        1     3     0     3     3     0     8    0
dirhash    1024      42    0       25     3     0     3     3     0     8    0
dino2pl    256     4372    0     2823    98     0    98    98     0     8    0
ffsino     288     4372    0     2823   111     0   111   111     0     8    0
nchpl      144     6467    0     4724    65     0    65    65     0     8    0
rtmask      32        1    0        1     1     1     0     1     0     8    0
uvmvnodes   80     5634    0        0   115     0   115   115     0     8    0
vnodes     216     5635    0        0   314     0   314   314     0     8    0
namei      1024   22160    0    22159     3     2     1     2     0     8    0
percpumem   16       96    0       50     1     0     1     1     0     8    0
kstatmem   264       98    0       76     3     1     2     3     0     8    0
scsiplug    72        6    0        6     4     3     1     1     0     8    1
scxspl     216    19429    0    19429    12    11     1     8     1     8    1
plimitpl   152      285    0      265     1     0     1     1     0     8    0
sigapl     424     1902    0     1850     9     1     8     9     0     8    0
futexpl     64    20822    0    20820     1     0     1     1     0     8    0
knotepl    120      547    0        0    17     0    17    17     0     8    0
kqueuepl   224      576    0      566     7     6     1     5     0     8    0
pipepl     336      449    0      421     3     0     3     3     0     8    0
fdescpl    520     1860    0     1827     3     0     3     3     0     8    0
filepl     160    12246    0    12011    18     4    14    16     0     8    2
lockfpl    104      610    0      607     2     0     2     2     0     8    1
lockfspl    48      265    0      262     1     0     1     1     0     8    0
sessionpl  144       58    0       49     1     0     1     1     0     8    0
pgrppl      48      122    0      102     1     0     1     1     0     8    0
ucredpl    104     1986    0     1972     1     0     1     1     0     8    0
zombiepl   144     1901    0     1895     1     0     1     1     0     8    0
processpl  1192    1902    0     1850     6     0     6     6     0     8    1
procpl     656     4197    0     4138     9     1     8     8     0     8    0
srpgc       96       18    0       17     4     3     1     1     0     8    0
sosppl     168        2    0        2     1     1     0     1     0     8    0
sockpl     728     3033    0     3001    15    10     5    12     0     8    1
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      4    0        0     1     0     1     1     0     8    0
mcl12k     12288      2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     120    1        0    15     0    15    15     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      31  860       20     3     0     3     3     0     8    1
mtagpl      96       39    0        0     1     0     1     1     0     8    0
mbufpl     256     1184    0        0    74     0    74    74     0     8    0
bufpl      280     5486    0      138   382     0   382   382     0     8    0
anonpl      32     7999    0        0    65     0    65    65     0   246    0
amapchunkpl 152   52514    0    51916    34     8    26    28     0   158    0
amappl16   200     4787    0     4748    41    29    12    15     0     8    8
amappl15   192        7    0        7     1     1     0     1     0     8    0
amappl14   184      122    0      110     1     0     1     1     0     8    0
amappl13   176        3    0        3     2     2     0     1     0     8    0
amappl12   168     2621    0     2588     4     1     3     3     0     8    1
amappl11   160       54    0       40     1     0     1     1     0     8    0
amappl10   152       21    0       21     1     1     0     1     0     8    0
amappl9    144      251    0      250     2     1     1     1     0     8    0
amappl8    136       25    0       22     1     0     1     1     0     8    0
amappl7    128      123    0      109     1     0     1     1     0     8    0
amappl6    120      225    0      220     1     0     1     1     0     8    0
amappl5    112      147    0      136     1     0     1     1     0     8    0
amappl4    104      368    0      347     1     0     1     1     0     8    0
amappl3     96    10737    0    10608     4     0     4     4     0     8    0
amappl2     88      714    0      648     2     0     2     2     0     8    0
amappl1     80    15026    0    14410    15     1    14    15     0     8    0
amappl      88    14922    0    14719     6     1     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      257    0      257     4     3     1     1     0     8    1
dma64       64        8    0        8     3     3     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       79    0        1     2     0     2     2     0     8    0
uaddrrnd    24     1860    0     1827     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1860    0     1827     1     0     1     1     0     8    0
vmmpekpl   168    16727    0    16647     4     0     4     4     0     8    0
vmmpepl    168   121184    0   119088   117    15   102   103     0   357    6
vmsppl     480     1859    0     1827     8     3     5     5     0     8    0
rwobjpl     72    36710    0    29942   124     0   124   124     0     8    0
pdppl      4096    3728    0     3654   120    42    78    86     0     8    4
pvpl        32    15886    0        0   129     1   128   128     0   265    0
pmappl     256     1859    0     1827     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      493    0       76    13     0    13    13     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff8388bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83947200) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83947200) at __mp_lock+0x192 sys/kern/kern_lock.c:144
__mp_acquire_count(ffffffff83947200,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
mi_switch() at mi_switch+0x4b7 sys/kern/sched_bsd.c:441
sleep_finish(0,1) at sleep_finish+0x24f sys/kern/kern_synch.c:412
rw_do_enter_write(ffffffff8382b908,0) at rw_do_enter_write+0x1de sys/kern/kern_rwlock.c:292
nd6_timer(0) at nd6_timer+0x51 sys/netinet6/nd6.c:272
timeout_run(ffffffff839699b0) at timeout_run+0x118 sys/kern/kern_timeout.c:-1
softclock_thread(ffff8000ffffecd0) at softclock_thread+0x163 sys/kern/kern_timeout.c:810
end trace frame: 0x0, count: -11
ddb{0}> machine ddbcpu 1
Stopped at      __x86_indirect_thunk_r11+0x14:  ret
ddb{1}> trace
__x86_indirect_thunk_r11() at __x86_indirect_thunk_r11+0x14
spec_write(ffff80003c43f520) at spec_write+0x120 sys/kern/spec_vnops.c:302
VOP_WRITE(fffffd806a7e76e8,ffff80003c43f6c8,1,fffffd807f7d3270) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245
vn_write(fffffd806be527c0,ffff80003c43f6c8,0) at vn_write+0x1d4 sys/kern/vfs_vnops.c:408
dofilewritev(ffff8000ffff22a0,5,ffff80003c43f6c8,0,ffff80003c43f780) at dofilewritev+0x23c sys/kern/sys_generic.c:380
sys_write(ffff8000ffff22a0,ffff80003c43f830,ffff80003c43f780) at sys_write+0xa2 sys/kern/sys_generic.c:300
syscall(ffff80003c43f830) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c43f830) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf8a3e39fc50, count: -8

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/04/29 08:09 openbsd 3f9d9c6488b4 aeb6ec69 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: __x86_indirect_thunk_r11
* Struck through repros no longer work on HEAD.