syzbot


uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 363d, last: 1d03h
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline -1 6 496d 668d 0/3 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
uvm_fault(0xfffffd806c96db88, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff82efe448 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c47f810
gsbase 0xffffffff8384aff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff82efe448
Starting stack trace...
panic(ffffffff833e610a) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff80003c47f760) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff8000016f0000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(251e5f,81,2000,ffff80003c41bcb0) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(251e5f,81,2000,ffff80003c41bcb0) at dtclose+0x109 sys/dev/dt/dt_dev.c:239
spec_close(ffff80003c47f910) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd805edb96e8,81,fffffd80097fd548,ffff80003c41bcb0) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806c86fb90,ffff80003c41bcb0) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806c86fb90,ffff80003c41bcb0) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806c86fb90,ffff80003c41bcb0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
sys_ioctl(ffff80003c41bcb0,ffff80003c47fc20,ffff80003c47fb70) at sys_ioctl+0x30b sys/kern/sys_generic.c:516
syscall(ffff80003c47fc20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c47fc20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb42c543f5b0, count: 245
End of stack trace.
W
ARdINu:mp toNOTv O,ERED ONossAP ble
3 0
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*446661  41399      0           0          0    1  syz-executor
 424566  43300      0      0x2000  0x4080000    0K syz-executor
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7cdbab8a1540, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: uvm_fault(0xfffffd806c96db88, 0x0, 0, 1) -> e
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7cdbab8a1540, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003c3fa6d0
rbx                                0
rdx                                0
rcx               0xffff8000fffe8550
rax                             0x2a
r8                0xffff80003c3fa600
r9                               0x1
r10               0xabd9e99bd0d124c4
r11               0xf139549473f3ae8e
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff81db54c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff80003c3fa650
ss                                 0
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=446661 pid=41399 tcnt=1 stat=onproc
    flags process=0 proc=0
    runpri=75, usrpri=75, slppri=17, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000fffe8020,0xffffffff8394b178
    process=0xffff8000357d9360 user=0xffff80003c3f5000, vmspace=0xfffffd806c96d200
    estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
*41399  446661  69848      0  7           0                syz-executor
  3025  328498  63000      0  2           0                syz-executor
  3025   32671  63000      0  2   0x4000000                syz-executor
  3025  379013  63000      0  3   0x4000080  fsleep        syz-executor
 81926  263110  89307      0  2           0                syz-executor
 81926  224617  89307      0  2   0x4000000                syz-executor
 86002  492122  96305      0  2   0x4000000                syz-executor
 86002   65213  96305      0  2   0x4000000                syz-executor
 55968  497860  15086      0  2           0                syz-executor
 55968  198888  15086      0  2   0x4000000                syz-executor
 55968  362378  15086      0  3   0x4000080  fsleep        syz-executor
 55968  282228  15086      0  2   0x4000000                syz-executor
 43300  433723  61767      0  4     0x82000                syz-executor
 43300  424566  61767      0  7   0x4082000                syz-executor
 43300  228437  61767      0  2   0x4082000                syz-executor
 43300  379762  61767      0  3   0x4002000  suspend       syz-executor
  2985  206773  99682      0  3      0x3000  suspend       syz-executor
  2985  465454  99682      0  2   0x4081000                syz-executor
  2985  106266  99682      0  3   0x4081000  inode         syz-executor
  2985  366192  99682      0  3   0x4081000  inode         syz-executor
  1753   40203      1      0  3        0x80  nanoslp       init
 73532  504756      0      0  3     0x14200  acct          acct
 15086  446338  40282      0  2         0x3                syz-executor
 96305  297002  40282      0  2         0x3                syz-executor
 99682  259507  40282      0  3        0x82  wait          syz-executor
 69848  359923  40282      0  2       0xc82                syz-executor
 61767  376374  40282      0  2         0x3                syz-executor
 17961  518781  40282      0  2         0x2                syz-executor
 89307  145025  40282      0  2         0x3                syz-executor
 63000  350636  40282      0  2         0x3                syz-executor
 40282   81243  49602      0  3        0x82  kqread        syz-executor
 49602  463789  54196      0  3    0x10008a  sigsusp       ksh
 54196  354566  70042      0  3        0x98  kqread        sshd-session
 70042   90551  12294      0  3        0x92  kqread        sshd-session
 12294   57064      1      0  3        0x88  kqread        sshd
 59383  437325  15805     74  3   0x1100092  bpf           pflogd
 15805  252440      1      0  3        0x80  sbwait        pflogd
 52096   26216   4344     73  2   0x1100090                syslogd
  4344  219819      1      0  3    0x100082  sbwait        syslogd
 11614  328610      1      0  3    0x100080  kqread        resolvd
 60568  342037  72653     77  3    0x100092  kqread        dhcpleased
 23239  458963  72653     77  3    0x100092  kqread        dhcpleased
 72653  517632      1      0  3        0x80  kqread        dhcpleased
 59468  273895      0      0  3     0x14200  bored         smr
 78420  328463      0      0  3     0x14200  pgzero        zerothread
 13234   99682      0      0  3     0x14200  aiodoned      aiodoned
  1159   19873      0      0  3     0x14200  syncer        update
 25630   65127      0      0  3     0x14200  cleaner       cleaner
 97280   39080      0      0  3     0x14200  reaper        reaper
 97481  247707      0      0  3     0x14200  pgdaemon      pagedaemon
 85037  474744      0      0  3     0x14200  bored         viomb
 80591   75597      0      0  3  0x40014200  acpi0         acpi0
 97925  459020      0      0  3  0x40014200                idle1
  3688  295721      0      0  3     0x14200  bored         softnet1
  8873  172822      0      0  2     0x14200                softnet0
 52068   76513      0      0  3     0x14200  bored         systqmp
 56826   33109      0      0  3     0x14200  bored         systq
 48407  157506      0      0  3     0x14200  tmoslp        softclockmp
 68044  317130      0      0  3  0x40014200  tmoslp        softclock
 24630   70173      0      0  3  0x40014200                idle0
     1   13295      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 1:
exclusive mutex &sched_lock r = 0 (0xffffffff839c1760)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  preempt+0x35 sys/kern/sched_bsd.c:338
#3  ast+0x15a mi_ast sys/sys/syscall_mi.h:252 [inline]
#3  ast+0x15a sys/arch/amd64/amd64/trap.c:739
#4  intr_user_exit+0x3c
Process 55968 (syz-executor) thread 0xffff8000fffe9ca8 (282228)
exclusive rwlock fdlock r = 0 (0xffff8000fffeacd0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  doopenat+0x18e sys/kern/vfs_syscalls.c:1105
#3  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#4  Xsyscall+0x128
Process 43300 (syz-executor) thread 0xffff80003c41bcb0 (424566)
exclusive rwlock dtlk r = 0 (0xffffffff83892248)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  dt_ioctl_record_stop+0x2e sys/dev/dt/dt_dev.c:572
#3  dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
#3  dtclose+0x109 sys/dev/dt/dt_dev.c:239
#4  spec_close+0x466 sys/kern/spec_vnops.c:-1
#5  VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
#6  vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
#6  vn_closefile+0x12b sys/kern/vfs_vnops.c:615
#7  fdrop+0x121 sys/kern/kern_descrip.c:1280
#8  sys_ioctl+0x30b sys/kern/sys_generic.c:516
#9  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#9  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#10 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83948c00)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  vn_closefile+0x41 sys/kern/vfs_vnops.c:608
#2  fdrop+0x121 sys/kern/kern_descrip.c:1280
#3  sys_ioctl+0x30b sys/kern/sys_generic.c:516
#4  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#5  Xsyscall+0x128
Process 2985 (syz-executor) thread 0xffff80002a261240 (465454)
exclusive rrwlock inode r = 0 (0xfffffd806f12aa58)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#9  Xsyscall+0x128
Process 2985 (syz-executor) thread 0xffff8000ffffc7d0 (106266)
exclusive rrwlock inode r = 0 (0xfffffd80672df338)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  dorenameat+0x91 sys/kern/vfs_syscalls.c:2990
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:775
#9  Xsyscall+0x128
Process 17961 (syz-executor) thread 0xffff8000ffffca68 (518781)
exclusive rrwlock inode r = 0 (0xfffffd806f12aca8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline]
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:159
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232
#6  ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112
#8  VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394
#9  domkdirat+0x179 sys/kern/vfs_syscalls.c:3113
#10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:775
#11 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806cda2448)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3098
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:775
#9  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11206  13045K   13137K 166960K     12548        0
            pcb    17     12K      12K 166960K        69        0
         rtable   212      7K       7K 166960K       412        0
             pf    37     18K      20K 166960K        73        0
         ifaddr    41      7K       7K 166960K        66        0
        ifgroup    59      2K       3K 166960K       104        0
         sysctl     1      1K       9K 166960K        73        0
       counters    72     37K      38K 166960K       108        0
       ioctlops     0      0K       4K 166960K      1504        0
            iov     0      0K      26K 166960K        13        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1376     87K      87K 166960K      1569        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     8      0K       0K 166960K        15        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K      97K 166960K       358        0
          sigio     0      0K       0K 166960K         3        0
           proc    63     99K     180K 166960K       574        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        16        0
       in_multi    88      6K       7K 166960K       114        0
    ether_multi     1      0K       0K 166960K         3        0
            mrt     0      0K       0K 166960K         3        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    85    387K     387K 166960K        85        0
           exec     0      0K       1K 166960K       404        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   236    147K     161K 166960K      5470        0
       UVM aobj     6      2K       2K 166960K         7        0
     pinsyscall    41     82K     104K 166960K      1520        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        20        0
            NDP    13      0K       2K 166960K        40        0
           temp    44   8680K    8786K 166960K     13049        0
         kqueue    13     20K      28K 166960K        72        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       50    0       47     1     0     1     1     0     8    0
rtentry    176      123    0       33     6     0     6     6     0     8    0
unpcb      144      187    0      170     2     0     2     2     0     8    1
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      736       80    0       74     1     0     1     1     0     8    0
arp        136       19    0        3     1     0     1     1     0     8    0
inpcb      328      270    0      261     2     0     2     2     0     8    1
nd6        152       25    0        3     1     0     1     1     0     8    0
pkpcb       40        1    0        1     1     1     0     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
ppxss      1192       9    0        9     1     0     1     1     0     8    1
pppxif     1504       6    0        6     1     0     1     1     0     8    1
pffrag     232        2    0        0     1     0     1     1     0   482    0
pffrnode    88        2    0        0     1     0     1     1     0     8    0
pffrent     40        2    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pftag       88        1    0        0     1     0     1     1     0     8    0
pfstitem    24        2    0        0     1     0     1     1     0     8    0
pfstkey    128        2    0        0     1     0     1     1     0     8    0
pfstate    448        1    0        0     1     0     1     1     0     8    0
pfrule     1360       3    0        3     1     0     1     1     0     8    1
rttmr      136        1    0        1     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      533    0      130    29     0    29    29     0     8    3
art_table   40      534    0      130     5     0     5     5     0     8    0
art_node    32      123    0       42     1     0     1     1     0     8    0
sysvmsgpl   40        1    0        1     1     0     1     1     0     8    1
semupl     112        1    0        1     1     0     1     1     0     8    1
semapl     112       11    0        5     1     0     1     1     0     8    0
shmpl      112        4    0        1     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2005    0      492    96     0    96    96     0     8    0
ffsino     296     2005    0      492   118     0   118   118     0     8    0
nchpl      144     2526    0      825    64     0    64    64     0     8    0
vnodes     216     2204    0        0   123     0   123   123     0     8    0
namei      1024    8239    0     8235     4     1     3     3     0     8    2
percpumem   16       69    0       18     1     0     1     1     0     8    0
kstatmem   264       52    0       22     3     0     3     3     0     8    1
scxspl     216     9895    0     9894     3     2     1     2     1     8    0
plimitpl   152       96    0       78     1     0     1     1     0     8    0
sigapl     424      679    0      631     7     1     6     7     0     8    0
knotepl    120      316    0        0    10     0    10    10     0     8    0
kqueuepl   224      104    0       95     2     0     2     2     0     8    1
pipepl     344      143    0      116     3     0     3     3     0     8    0
fdescpl    528      662    0      631     3     0     3     3     0     8    0
filepl     160     2980    0     2731    11     0    11    11     0     8    0
lockfpl    104       93    0       91     1     0     1     1     0     8    0
lockfspl    48       39    0       37     1     0     1     1     0     8    0
sessionpl  144       23    0       15     1     0     1     1     0     8    0
pgrppl      48       31    0       15     1     0     1     1     0     8    0
ucredpl    104      350    0      336     1     0     1     1     0     8    0
zombiepl   144      813    0      812     1     0     1     1     0     8    0
processpl  1232     679    0      631     5     0     5     5     0     8    0
procpl     664     1135    0     1074     6     0     6     6     0     8    0
sosppl     176        1    0        1     1     0     1     1     0     8    1
sockpl     752      516    0      487     5     0     5     5     0     8    1
mcl64k     65536      4    0        0     1     0     1     1     0     8    0
mcl16k     16384      2    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       1    0        0     1     0     1     1     0     8    0
mcl4k      4096     112    0        0    14     0    14    14     0     8    0
mcl2k      2048      18    0        0     3     0     3     3     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      182    0        0    12     0    12    12     0     8    0
bufpl      280     3849    0      131   266     0   266   266     0     8    0
anonpl      32     6823    0        0    55     0    55    55     0   246    0
amapchunkpl 152   16149    0    15666    26     0    26    26     0   158    4
amappl16   200     2749    0     2499    18     4    14    14     0     8    0
amappl15   192        5    0        5     1     1     0     1     0     8    0
amappl14   184        4    0        4     1     1     0     1     0     8    0
amappl13   176      436    0      435     1     0     1     1     0     8    0
amappl12   168     1034    0      994     3     0     3     3     0     8    0
amappl11   160        4    0        4     1     1     0     1     0     8    0
amappl10   152       46    0       32     1     0     1     1     0     8    0
amappl9    144      243    0      243     1     1     0     1     0     8    0
amappl8    136       28    0       26     1     0     1     1     0     8    0
amappl7    128       98    0       97     1     0     1     1     0     8    0
amappl6    120      285    0      272     1     0     1     1     0     8    0
amappl5    112       91    0       81     1     0     1     1     0     8    0
amappl4    104      433    0      405     1     0     1     1     0     8    0
amappl3     96     2718    0     2629     3     0     3     3     0     8    0
amappl2     88      790    0      718     2     0     2     2     0     8    0
amappl1     80    10054    0     9491    14     0    14    14     0     8    1
amappl      88     4672    0     4507     5     0     5     5     0    92    0
uvmvnodes   80      108    0        0     3     0     3     3     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        6    0        1     1     0     1     1     0     8    0
uaddrrnd    24      662    0      631     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      662    0      631     1     0     1     1     0     8    0
vmmpekpl   168     7248    0     7215     2     0     2     2     0     8    0
vmmpepl    168    50087    0    48010    97     3    94    94     0   357    0
vmsppl     488      661    0      631     5     0     5     5     0     8    1
rwobjpl     80    17044    0    15837    25     0    25    25     0     8    0
pdppl      4096    1331    0     1262   111    40    71    87     0     8    2
pvpl        32    15359    0        0   124     0   124   124     0   265    0
pmappl     256      661    0      631     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      286    0       44     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff8384aff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:682
acpitimer_delay(3e8) at acpitimer_delay+0x1d7 acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x1d7 sys/dev/acpi/acpitimer.c:125
vioscsi_scsi_cmd(fffffd806cf16298) at vioscsi_scsi_cmd+0x559 sys/dev/pv/vioscsi.c:-1
scsi_xs_sync(fffffd806cf16298) at scsi_xs_sync+0x116 scsi_xs_exec sys/scsi/scsi_base.c:1457 [inline]
scsi_xs_sync(fffffd806cf16298) at scsi_xs_sync+0x116 sys/scsi/scsi_base.c:1526
sdactivate(ffff8000002a2c00,6) at sdactivate+0x297 sd_flush sys/scsi/sd.c:-1 [inline]
sdactivate(ffff8000002a2c00,6) at sdactivate+0x297 sys/scsi/sd.c:271
config_suspend(ffff8000002a2c00,6) at config_suspend+0x62 sys/kern/subr_autoconf.c:834
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab scsi_activate_link sys/scsi/scsiconf.c:410 [inline]
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab scsi_activate_bus sys/scsi/scsiconf.c:360 [inline]
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab sys/scsi/scsiconf.c:259
config_activate_children(ffff8000000a4000,6) at config_activate_children+0x1a1 config_suspend sys/kern/subr_autoconf.c:834 [inline]
config_activate_children(ffff8000000a4000,6) at config_activate_children+0x1a1 sys/kern/subr_autoconf.c:896
config_activate_children(ffff800000025a00,6) at config_activate_children+0x1c5 config_suspend sys/kern/subr_autoconf.c:-1 [inline]
config_activate_children(ffff800000025a00,6) at config_activate_children+0x1c5 sys/kern/subr_autoconf.c:896
config_activate_children(ffff80000002ce00,6) at config_activate_children+0x1c5 config_suspend sys/kern/subr_autoconf.c:-1 [inline]
config_activate_children(ffff80000002ce00,6) at config_activate_children+0x1c5 sys/kern/subr_autoconf.c:896
pciactivate(ffff80000002ce00,6) at pciactivate+0xd8 sys/dev/pci/pci.c:230
end trace frame: 0xffff80003c47f5a0, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff8384aff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 sys/arch/amd64/amd64/bus_space.c:682
acpitimer_delay(3e8) at acpitimer_delay+0x1d7 acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline]
acpitimer_delay(3e8) at acpitimer_delay+0x1d7 sys/dev/acpi/acpitimer.c:125
vioscsi_scsi_cmd(fffffd806cf16298) at vioscsi_scsi_cmd+0x559 sys/dev/pv/vioscsi.c:-1
scsi_xs_sync(fffffd806cf16298) at scsi_xs_sync+0x116 scsi_xs_exec sys/scsi/scsi_base.c:1457 [inline]
scsi_xs_sync(fffffd806cf16298) at scsi_xs_sync+0x116 sys/scsi/scsi_base.c:1526
sdactivate(ffff8000002a2c00,6) at sdactivate+0x297 sd_flush sys/scsi/sd.c:-1 [inline]
sdactivate(ffff8000002a2c00,6) at sdactivate+0x297 sys/scsi/sd.c:271
config_suspend(ffff8000002a2c00,6) at config_suspend+0x62 sys/kern/subr_autoconf.c:834
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab scsi_activate_link sys/scsi/scsiconf.c:410 [inline]
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab scsi_activate_bus sys/scsi/scsiconf.c:360 [inline]
scsibusactivate(ffff8000002a3500,6) at scsibusactivate+0xab sys/scsi/scsiconf.c:259
config_activate_children(ffff8000000a4000,6) at config_activate_children+0x1a1 config_suspend sys/kern/subr_autoconf.c:834 [inline]
config_activate_children(ffff8000000a4000,6) at config_activate_children+0x1a1 sys/kern/subr_autoconf.c:896
config_activate_children(ffff800000025a00,6) at config_activate_children+0x1c5 config_suspend sys/kern/subr_autoconf.c:-1 [inline]
config_activate_children(ffff800000025a00,6) at config_activate_children+0x1c5 sys/kern/subr_autoconf.c:896
config_activate_children(ffff80000002ce00,6) at config_activate_children+0x1c5 config_suspend sys/kern/subr_autoconf.c:-1 [inline]
config_activate_children(ffff80000002ce00,6) at config_activate_children+0x1c5 sys/kern/subr_autoconf.c:896
pciactivate(ffff80000002ce00,6) at pciactivate+0xd8 sys/dev/pci/pci.c:230
config_activate_children(ffff80000002f080,6) at config_activate_children+0x1a1 config_suspend sys/kern/subr_autoconf.c:834 [inline]
config_activate_children(ffff80000002f080,6) at config_activate_children+0x1a1 sys/kern/subr_autoconf.c:896
config_suspend_all(6) at config_suspend_all+0x49a config_suspend sys/kern/subr_autoconf.c:-1 [inline]
config_suspend_all(6) at config_suspend_all+0x49a sys/kern/subr_autoconf.c:858
boot(104) at boot+0x253 sys/arch/amd64/amd64/machdep.c:946
reboot(104) at reboot+0xb1
panic(ffffffff833e610a) at panic+0x1f9
kerntrap(ffff80003c47f760) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dt_ioctl_record_stop(ffff8000016f0000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(251e5f,81,2000,ffff80003c41bcb0) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(251e5f,81,2000,ffff80003c41bcb0) at dtclose+0x109 sys/dev/dt/dt_dev.c:239
spec_close(ffff80003c47f910) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd805edb96e8,81,fffffd80097fd548,ffff80003c41bcb0) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806c86fb90,ffff80003c41bcb0) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806c86fb90,ffff80003c41bcb0) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806c86fb90,ffff80003c41bcb0) at fdrop+0x121 sys/kern/kern_descrip.c:1280
sys_ioctl(ffff80003c41bcb0,ffff80003c47fc20,ffff80003c47fb70) at sys_ioctl+0x30b sys/kern/sys_generic.c:516
syscall(ffff80003c47fc20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c47fc20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xb42c543f5b0, count: -30
ddb{0}> machine ddbcpu 1
Stopped at      proc_trampoline+0xc7:   movl    $0,%gs:0x688
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7cdbab8a1540, count: 14
ddb{1}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x7cdbab8a1540, count: -1

Crashes (418):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/02/03 23:21 openbsd 72466e384590 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/02/03 20:28 openbsd 72466e384590 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/02/03 16:19 openbsd 72466e384590 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/02/03 07:44 openbsd 2933a3218787 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/02/02 19:31 openbsd 28dc9acc561e 018ebef2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/02/01 07:54 openbsd 43ad07ab5076 6b8752f2 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/31 22:33 openbsd 3729e22e7105 afc0c4d4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/31 09:16 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/31 07:39 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/31 05:25 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/31 02:09 openbsd ffeb3c477d3b c75a2f6e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/30 23:12 openbsd dfcd5193b8f0 ae7dc18c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/30 16:58 openbsd dfcd5193b8f0 ae7dc18c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/30 00:43 openbsd b822cddf2b35 bfa73b7b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/29 07:23 openbsd 132d3f17556a b78a7341 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/29 06:34 openbsd 132d3f17556a b78a7341 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/28 10:26 openbsd 2cb4d48e2c81 3029c699 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/28 06:22 openbsd 2cb4d48e2c81 3029c699 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/28 01:41 openbsd 2cb4d48e2c81 3029c699 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/25 15:32 openbsd f99cc216b56b 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/25 10:48 openbsd 12762e433761 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/24 21:43 openbsd 652212f689da 40acda8a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/21 16:30 openbsd bf8f984edd8f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/21 09:50 openbsd 5c0c839c3d8f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/21 05:04 openbsd 5c0c839c3d8f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/20 14:05 openbsd 7d7bacacae3d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/19 08:16 openbsd 085960a72a94 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/18 00:35 openbsd f5df22e61f89 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/17 06:52 openbsd 5569d0f08b09 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/17 05:07 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/17 00:22 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/16 22:29 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/16 21:12 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/16 19:20 openbsd 8105fbd98be2 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/16 14:21 openbsd 28304016fe93 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/15 20:00 openbsd c600931321c7 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/15 16:21 openbsd c600931321c7 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/15 13:55 openbsd ac9e191703f1 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/15 11:23 openbsd ac9e191703f1 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/14 21:30 openbsd bf518416d64f 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/13 15:36 openbsd 67ddd48175b9 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/13 11:27 openbsd 67ddd48175b9 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/13 08:54 openbsd a9df5e8d0934 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/13 01:22 openbsd a9df5e8d0934 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/12 21:41 openbsd a9df5e8d0934 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/11 18:58 openbsd 527652508a36 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/11 15:57 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/11 13:00 openbsd 294bdc40ca4d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/09 09:14 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/09 07:12 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/09 02:23 openbsd 0f50c032e950 c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/08 13:08 openbsd b9d9e3fc96bc c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/08 11:04 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/07 23:18 openbsd d77c41cf8f5a c1f5c7d0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/07 14:46 openbsd b6bc6e61f2e3 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/01/07 09:48 openbsd c7117ed52e15 15f6fd08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2025/12/21 11:01 openbsd 668f1f05e71c e14dbeb9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.