syzbot


uvm_fault: x86_ipi_db (9)

Status: upstream: reported on 2025/02/14 23:55
Reported-by: syzbot+a157c6e0d81b4f6b71a4@syzkaller.appspotmail.com
First crash: 339d, last: 39m
Similar bugs (8)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: x86_ipi_db (3) -1 4 1791d 1808d 0/3 auto-closed as invalid on 2021/05/25 04:20
openbsd uvm_fault: x86_ipi_db (6) -1 1 1607d 1607d 0/3 closed as invalid on 2021/08/26 17:38
openbsd uvm_fault: x86_ipi_db (2) -1 1 1841d 1841d 0/3 closed as invalid on 2021/01/29 06:54
openbsd uvm_fault: x86_ipi_db (8) -1 330 446d 1431d 0/3 auto-obsoleted due to no activity on 2024/12/19 15:21
openbsd uvm_fault: x86_ipi_db (5) -1 1 1612d 1612d 0/3 closed as invalid on 2021/08/23 05:23
openbsd uvm_fault: x86_ipi_db (7) -1 4 1482d 1482d 3/3 fixed on 2021/12/30 22:14
openbsd uvm_fault: x86_ipi_db -1 1 1845d 1845d 0/3 closed as invalid on 2021/01/03 08:45
openbsd uvm_fault: x86_ipi_db (4) -1 1 1626d 1626d 0/3 closed as invalid on 2021/08/08 05:33

Sample crash report:
*cpu1: uvm_fault(0xfffffd800b063b70, 0x0, 0, 1) -> e
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7277f69f6ad0, count: -1
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a348870
rbx                                0
rdx                                0
rcx               0xffff80003c440aa0
rax                             0x2a
r8                0xffff80002a3487a0
r9                               0x1
r10               0x8e7e8be68b9f2cbc
r11               0xfd5702e9fc68dcf5
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff81fe54c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff80002a3487f0
ss                                 0
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{0}> show proc
PROC (syz-executor) tid=225016 pid=3658 tcnt=2 stat=onproc
    flags process=0 proc=0
    runpri=50, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c441a30,0xffff80002a260d20
    process=0xffff8000fffed828 user=0xffff80002a343000, vmspace=0xfffffd800b0631e8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 69001  447474  79222      0  2           0                syz-executor
* 3658  225016  19725      0  7           0                syz-executor
  3658  319465  19725      0  3   0x4000080  fsleep        syz-executor
   783  101139   2136      0  2           0                syz-executor
   783  279703   2136      0  2   0x4000000                syz-executor
   783  265734   2136      0  3   0x4000080  fsleep        syz-executor
   783  196061   2136      0  3   0x4000080  fsleep        syz-executor
 53175  206816  31298      0  2           0                syz-executor
 53175  386757  31298      0  3   0x4000080  fsleep        syz-executor
 53175  162886  31298      0  3   0x4000080  fsleep        syz-executor
 81591  257813  23640      0  2           0                syz-executor
 81591   14606  23640      0  3   0x4000080  netacc        syz-executor
 81591  285623  23640      0  3   0x4000080  fsleep        syz-executor
 81591  399621  23640      0  2   0x4000000                syz-executor
 36130  259389  80693      0  2         0x1                syz-executor
 36130  421390  80693      0  3   0x4000080  fsleep        syz-executor
 36130  413972  80693      0  7   0x4000000                syz-executor
 36130  339150  80693      0  3   0x4000080  fsleep        syz-executor
 24879  358163  41546      0  2         0x1                syz-executor
 24879  397652  41546      0  2   0x4000000                syz-executor
 24879   44782  41546      0  3   0x4000000  inode         syz-executor
 24879   99895  41546      0  3   0x4000000  fltagain2     syz-executor
 24879  309012  41546      0  3   0x4000000  pipecl        syz-executor
 24879   70071  41546      0  3   0x4000080  fsleep        syz-executor
 51503  428997      0      0  3     0x14200  acct          acct
 47087  184266      0      0  3     0x14280  nfsidl        nfsio
  5925   14560      0      0  3     0x14280  nfsidl        nfsio
 49944   74373      0      0  3     0x14280  nfsidl        nfsio
 49465   91563      0      0  3     0x14280  nfsidl        nfsio
 23640  327040  20961      0  3        0x82  nanoslp       syz-executor
 80831   80020  20961      0  2  0x10000003                syz-executor
 43053  485944      1      0  3    0x100083  ttyin         getty
 19725  166712  20961      0  3        0x82  nanoslp       syz-executor
  2136  373889  20961      0  2         0x3                syz-executor
 80693  510170  20961      0  3        0x82  nanoslp       syz-executor
 31298  120916  20961      0  3        0x82  nanoslp       syz-executor
 79222  229060  20961      0  3        0x82  nanoslp       syz-executor
 41546  139567  20961      0  2         0x2                syz-executor
 20961  292560  39468      0  3        0x82  kqread        syz-executor
 39468  347962  88294      0  3    0x10008a  sigsusp       ksh
 88294   64331  59396      0  3        0x98  kqread        sshd-session
 59396  219289  83723      0  3        0x92  kqread        sshd-session
 83723  176795      1      0  3        0x88  kqread        sshd
 60988  320009  40618     74  3   0x1100092  bpf           pflogd
 40618  442426      1      0  3        0x80  sbwait        pflogd
 40725  434034  67604     73  3   0x1100090  kqread        syslogd
 67604  322502      1      0  3    0x100082  sbwait        syslogd
  7736   14863      1      0  3    0x100080  kqread        resolvd
 38229  128588  45178     77  3    0x100092  kqread        dhcpleased
 88646  352324  45178     77  3    0x100092  kqread        dhcpleased
 45178  307023      1      0  3        0x80  kqread        dhcpleased
 16230  302264      0      0  3     0x14200  bored         smr
 33859  430064      0      0  2     0x14200                zerothread
 42356  353571      0      0  3     0x14200  aiodoned      aiodoned
 30389  195334      0      0  3     0x14200  syncer        update
 40121  421195      0      0  3     0x14200  cleaner       cleaner
 79387  341408      0      0  3     0x14200  reaper        reaper
 46341  332598      0      0  3     0x14200  pgdaemon      pagedaemon
 39574  247240      0      0  3     0x14200  bored         viomb
 48622  142661      0      0  3  0x40014200  acpi0         acpi0
 53271  352339      0      0  3  0x40014200                idle1
 12706  420655      0      0  3     0x14200  bored         softnet1
  7093  286276      0      0  3     0x14200  bored         softnet0
 67798  471143      0      0  3     0x14200  bored         systqmp
  6677  142038      0      0  3     0x14200  bored         systq
 40978   95173      0      0  3     0x14200  tmoslp        softclockmp
 96569  508102      0      0  3  0x40014200  tmoslp        softclock
 67551   65612      0      0  3  0x40014200                idle0
     1  224525      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806a061010)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:437 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2767
#3  uvm_fault_lower_lookup+0x369 sys/uvm/uvm_fault.c:-1
#4  uvm_fault_lower+0x89 sys/uvm/uvm_fault.c:1334
#5  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#6  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#7  usertrap+0x42f sys/arch/amd64/amd64/trap.c:632
#8  recall_trap+0x8
Process 3658 (syz-executor) thread 0xffff80003c440aa0 (225016)
shared rwlock uobjlk r = 0 (0xfffffd807bdd8b78)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvm_fault_lower_lookup+0x53 sys/uvm/uvm_fault.c:1204
#3  uvm_fault_lower+0x89 sys/uvm/uvm_fault.c:1334
#4  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x42f sys/arch/amd64/amd64/trap.c:632
#7  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffffd800b0632e8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#3  uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x42f sys/arch/amd64/amd64/trap.c:632
#7  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806a061010)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:437 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2767
#3  uvm_fault_lower_lookup+0x369 sys/uvm/uvm_fault.c:-1
#4  uvm_fault_lower+0x89 sys/uvm/uvm_fault.c:1334
#5  uvm_fault+0x274 sys/uvm/uvm_fault.c:-1
#6  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#7  usertrap+0x42f sys/arch/amd64/amd64/trap.c:632
#8  recall_trap+0x8
Process 36130 (syz-executor) thread 0xffff80003c4402d8 (413972)
exclusive rwlock dtlk r = 0 (0xffffffff837d06a8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  dt_ioctl_record_stop+0x2e sys/dev/dt/dt_dev.c:572
#3  dtioctl+0x536 sys/dev/dt/dt_dev.c:325
#4  VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
#5  vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
#6  sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#7  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#7  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#8  Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838d1540)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  vn_ioctl+0x4d sys/kern/vfs_vnops.c:514
#2  sys_ioctl+0x674 sys/kern/sys_generic.c:-1
#3  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#4  Xsyscall+0x128
Process 24879 (syz-executor) thread 0xffff80002a261ca0 (397652)
exclusive rrwlock inode r = 0 (0xfffffd806f0c8c98)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#9  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11120  12222K   14132K 166960K     17984        0
            pcb    18     20K      40K 166960K      1571        0
         rtable   244     15K      15K 166960K      1205        0
             pf    37     18K      81K 166960K       554        0
         ifaddr    38      8K      10K 166960K       376        0
        ifgroup    58      2K       3K 166960K       744        0
         sysctl     4      1K       9K 166960K        72        0
       counters    70     37K      39K 166960K       760        0
       ioctlops     0      0K       4K 166960K      2820        0
            iov     0      0K      32K 166960K       495        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1450     91K      92K 166960K      4888        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K        22        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       287        0
        dirhash    12      2K       3K 166960K       120        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     110K 166960K      4714        0
          sigio     0      0K       0K 166960K       150        0
           proc    72    115K     196K 166960K      1273        0
        subproc    72      4K       4K 166960K       164        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       690        0
       in_multi    70      5K       7K 166960K       427        0
    ether_multi     1      0K       0K 166960K        59        0
            mrt     1      0K       0K 166960K        35        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   253   1129K    1129K 166960K       253        0
           exec     0      0K       1K 166960K      1321        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K        41        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   269    169K     195K 166960K     43684        0
       UVM aobj    77     38K      38K 166960K        98        0
     pinsyscall    42     84K     108K 166960K      6216        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       1K 166960K       387        0
            NDP    12      0K       2K 166960K       286        0
           temp    87   8688K    8816K 166960K    232169        0
         kqueue    14     22K      30K 166960K       962        0
      SYN cache     2      8K      16K 166960K         3        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      327    0      324     1     0     1     1     0     8    0
rtentry    176      333    0      246     6     1     5     6     0     8    0
unpcb      144     3039    0     3021    27    23     4     6     0     8    3
syncache   336       35    0       35     9     8     1     1     0     8    1
tcpqe       32       47    0       47     5     4     1     1     0     8    1
tcpcb      736     1512    0     1496    28    26     2     7     0     8    0
arp        136       48    0       28     1     0     1     1     0     8    0
inpcb      328     5972    0     5952    62    56     6    15     0     8    3
nd6        152       64    0       44     2     1     1     2     0     8    0
pkpcb       40      147    0      147    11    10     1     1     0     8    1
kcovpl      48       18    0       10     1     0     1     1     0     8    0
mppekey    1024       6    0        6     5     5     0     1     0     8    0
ppxss      1192     257    0      257     5     4     1     1     0     8    1
pppxif     1504      42    0       42    10     9     1     1     0     8    1
pffrag     232       39    0       26     2     1     1     1     0   482    0
pffrnode    88       35    0       22     2     1     1     1     0     8    0
pffrent     40      101    0       88     2     1     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        1     1     1     0     1     0     8    0
pfstitem    24        1    0        0     1     0     1     1     0     8    0
pfstkey    128        1    0        0     1     0     1     1     0     8    0
pfstate    448        1    0        0     1     0     1     1     0     8    0
pfrule     1360       1    0        1     1     1     0     1     0     8    0
rttmr      136        7    0        7     6     6     0     1     0     8    0
art_heap8  4096       6    0        1     6     0     6     6     0     8    1
art_heap4  256     1577    0     1220    42    17    25    31     0     8    0
art_table   40     1583    0     1221     5     0     5     5     0     8    0
art_node    32      333    0      258     1     0     1     1     0     8    0
sysvmsgpl   40       22    0       20     1     0     1     1     0     8    0
semapl     112      281    0      271     1     0     1     1     0     8    0
shmpl      112       66    0        9     2     0     2     2     0     8    0
dirhash    1024      89    0       72     3     0     3     3     0     8    0
dino2pl    256    10863    0     9329    97     0    97    97     0     8    0
ffsino     296    10863    0     9329   120     1   119   119     0     8    0
nchpl      144    17273    0    15548    65     0    65    65     0     8    0
rtmask      32       47    0       47     8     7     1     1     0     8    1
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   62559    0    62559     5     4     1     2     0     8    1
percpumem   16      395    0      345     1     0     1     1     0     8    0
vcpupl     3968      22    0        5     3     0     3     3     0     8    0
vmpool     848       28    0       11     2     0     2     2     0     8    0
kstatmem   264      492    0      464     8     5     3     3     0     8    0
acpiwqpl    32        5    0        5     1     0     1     1     1     8    1
scsiplug    72       24    0       24    11    11     0     1     0     8    0
scxspl     216   172011    0   172011    17    16     1     8     1     8    1
plimitpl   152     1631    0     1612     1     0     1     1     0     8    0
sigapl     424     5046    0     4993     9     2     7     8     0     8    0
knotepl    120      908    0        0    24     0    24    24     0     8    0
kqueuepl   224     1795    0     1785    16    14     2     5     0     8    1
pipepl     344      972    0      942    13    10     3     9     0     8    0
fdescpl    528     4988    0     4957     3     0     3     3     0     8    0
filepl     160    36147    0    35911    41    28    13    18     0     8    0
lockfpl    104     1984    0     1980     5     4     1     2     0     8    0
lockfspl    48      631    0      627     1     0     1     1     0     8    0
sessionpl  144       62    0       53     1     0     1     1     0     8    0
pgrppl      48      240    0      223     1     0     1     1     0     8    0
ucredpl    104     6608    0     6593     1     0     1     1     0     8    0
zombiepl   144     5116    0     5115     1     0     1     1     0     8    0
processpl  1232    5046    0     4993     6     0     6     6     0     8    0
procpl     664    12757    0    12687     9     2     7     8     0     8    0
sosppl     176       35    0       35     9     8     1     1     0     8    1
sockpl     752     9772    0     9729    94    83    11    20     0     8    5
mcl64k     65536     11    0        0     2     0     2     2     0     8    0
mcl16k     16384      8    0        0     1     0     1     1     0     8    0
mcl12k     12288      4    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192       5    0        0     1     0     1     1     0     8    0
mcl4k      4096     135    0        0    16     0    16    16     0     8    0
mcl2k2     2112       3    0        0     1     0     1     1     0     8    0
mcl2k      2048     142    0        0     8     0     8     8     0     8    1
mtagpl      96       25    0        0     1     0     1     1     0     8    0
mbufpl     256     1191    0        0    73     0    73    73     0     8    0
bufpl      280    75044    0    68907   439     0   439   439     0     8    0
anonpl      32    23741    0        0   191     0   191   191     0   246    0
amapchunkpl 152  157981    0   157330    87    51    36    37     0   158    8
amappl16   200    22651    0    22347   183   149    34    50     0     8    8
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184        1    0        1     1     1     0     1     0     8    0
amappl13   176      545    0      544     1     0     1     1     0     8    0
amappl12   168     5523    0     5481     3     0     3     3     0     8    0
amappl11   160       11    0       11     2     2     0     1     0     8    0
amappl10   152       50    0       34     1     0     1     1     0     8    0
amappl9    144      251    0      251     1     1     0     1     0     8    0
amappl8    136       25    0       22     1     0     1     1     0     8    0
amappl7    128      128    0      124     1     0     1     1     0     8    0
amappl6    120      431    0      417     1     0     1     1     0     8    0
amappl5    112      152    0      141     1     0     1     1     0     8    0
amappl4    104      629    0      598     1     0     1     1     0     8    0
amappl3     96    27695    0    27590     4     1     3     3     0     8    0
amappl2     88     5304    0     5227     3     1     2     3     0     8    0
amappl1     80    35995    0    35400    19     4    15    17     0     8    0
amappl      88    41884    0    41696     5     0     5     5     0    92    0
uvmvnodes   80      255    0        0     6     0     6     6     0     8    0
dma65536   65536      1    0        1     1     1     0     1     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       4    0        4     4     4     0     1     0     8    0
dma2048    2048       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512       21    0       21     4     4     0     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      259    0      259     4     4     0     1     0     8    0
dma64       64        9    0        9     2     2     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       97    0       21     2     0     2     2     0     8    0
uaddrrnd    24     4988    0     4957     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4988    0     4957     1     0     1     1     0     8    0
vmmpekpl   168    40248    0    40185     4     0     4     4     0     8    0
vmmpepl    168   330386    0   328124   202    73   129   129     0   357   16
vmsppl     488     4987    0     4957     6     1     5     5     0     8    0
rwobjpl     80    89953    0    88369    62    16    46    46     0     8    4
pdppl      4096   10039    0     9953   166    78    88    92     0     8    2
pvpl        32    30960    0        0   248     0   248   248     0   265    0
pmappl     256     5015    0     4968     4     0     4     4     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      482    0      152    10     0    10    10     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7277f69f6ad0, count: -1
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,3e) at comcnputc+0x250 comcn_read_reg sys/dev/ic/com.c:1655 [inline]
comcnputc(800,3e) at comcnputc+0x250 sys/dev/ic/com.c:1269
cnputc(3e) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(3e) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff8334df1b) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff8340c159) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff80002a32a010,0) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff80002a32a010) at kerntrap+0x19c sys/arch/amd64/amd64/trap.c:520
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff800001729000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
end trace frame: 0xffff80002a32a180, count: 0
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,3e) at comcnputc+0x250 comcn_read_reg sys/dev/ic/com.c:1655 [inline]
comcnputc(800,3e) at comcnputc+0x250 sys/dev/ic/com.c:1269
cnputc(3e) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(3e) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff8334df1b) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff8340c159) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff80002a32a010,0) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff80002a32a010) at kerntrap+0x19c sys/arch/amd64/amd64/trap.c:520
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff800001729000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtioctl(11e5f,80044403,ffff80002a32a350,81,ffff80003c4402d8) at dtioctl+0x536 sys/dev/dt/dt_dev.c:325
VOP_IOCTL(fffffd8061f14798,80044403,ffff80002a32a350,81,fffffd80097fd750,ffff80003c4402d8) at VOP_IOCTL+0xac sys/kern/vfs_vops.c:264
vn_ioctl(fffffd807bdf98d8,80044403,ffff80002a32a350,ffff80003c4402d8) at vn_ioctl+0xf8 sys/kern/vfs_vnops.c:531
sys_ioctl(ffff80003c4402d8,ffff80002a32a530,ffff80002a32a480) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1
syscall(ffff80002a32a530) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a32a530) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xf21b6d946f0, count: -20

Crashes (442):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/20 13:57 openbsd 7d7bacacae3d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/18 11:39 openbsd 4409e1965d65 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/17 20:47 openbsd f5df22e61f89 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/17 08:49 openbsd 5569d0f08b09 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/17 04:51 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/17 02:09 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/17 00:01 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/16 21:05 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/14 23:42 openbsd bf518416d64f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/12 18:54 openbsd 01b5bc711c3b 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/12 16:53 openbsd 01b5bc711c3b 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/12 11:37 openbsd 01b5bc711c3b 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/11 14:04 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/10 23:48 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/10 22:27 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/10 20:34 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/10 16:38 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/10 04:10 openbsd ee14140d0567 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/09 06:46 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/09 01:36 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/08 17:05 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/08 16:13 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/08 00:51 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/06 18:17 openbsd 4459f914e6b0 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/06 15:58 openbsd 4459f914e6b0 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/06 00:08 openbsd 891a370a6a2c 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/05 18:56 openbsd 97968167a1e0 917fe602 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/05 08:56 openbsd 97968167a1e0 e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/05 06:04 openbsd 97968167a1e0 e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/04 21:43 openbsd 079c76c73fb6 e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/04 00:39 openbsd 80bc9799356e e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/03 17:59 openbsd 80bc9799356e e3fbc05e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/02 16:19 openbsd e29e388b5d06 af6b70b9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2026/01/01 11:34 openbsd 6a1433bd6d39 2733a373 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/31 16:45 openbsd f516ab5f0d05 49aa01cc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/31 15:19 openbsd f516ab5f0d05 49aa01cc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/31 07:28 openbsd 59b265ba3157 d32f762a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/30 22:13 openbsd e93b8ae725cf d32f762a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/29 20:09 openbsd 4420759a09aa 9831da75 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/29 08:55 openbsd 6a98c69fc684 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/28 16:20 openbsd b86add70dd7c 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/27 22:45 openbsd d9ef728109ec 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/27 19:11 openbsd fed22d3a29d8 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
2025/12/25 21:20 openbsd b1d076877106 5dc09de1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: x86_ipi_db
2025/02/14 23:54 openbsd 8d2464095911 40a34ec9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: x86_ipi_db
* Struck through repros no longer work on HEAD.