uvm_fault: proc_trampoline (2)

Status: upstream: reported on 2025/02/06 12:48
Reported-by: syzbot+6d88abc44e13bdeba3d5@syzkaller.appspotmail.com
First crash: 550d, last: 33m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: proc_trampoline -1 6 683d 855d 0/4 auto-obsoleted due to no activity on 2024/12/25 08:30

Sample crash report:
*cpu1: uvm_fault(0xfffff0006cce37c0, 0x98, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x72369d7316d0, count: -1
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff800036fa72b0
rbx                                0
rdx                                0
rcx               0xffff800045fee2b0
rax                             0x2a
r8                0xffff800036fa71e0
r9                               0x3
r10               0x5dc4b62bcfb0beb8
r11               0x88db08e46d376d11
r12                                0
r13                                0
r14                                0
r15                                0
rip               0xffffffff8299e4c7    proc_trampoline+0xc7
cs                               0x8
rflags                         0x246
rsp               0xffff800036fa7230
ss                                 0
proc_trampoline+0xc7:   movl    $0,%gs:0x688
ddb{0}> show proc
PROC (sh) tid=213021 pid=63947 tcnt=1 stat=onproc
    flags process=100002<EXEC,PLEDGE> proc=0
    runpri=50, usrpri=50, slppri=40, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff800039fbc7e8,0xffff800045fef250
    process=0xffff80002a380e88 user=0xffff800036fa2000, vmspace=0xfffff0006cee33e8
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID   UID  S      PRLAGS     PFLAGS WAIT      COMMAND
 74892  334833  16673     0  2           0          0           syz-executor
 74892   85372  16673     0  7           0  0x4000000           syz-executor
 98119  372654  56398     0  2         0x2          0           arp
  8514  431377  57566     0  2           0          0           syz-executor
  8514   25351  57566     0  3           0  0x4000080 fsleep    syz-executor
  8514  404157  57566     0  3           0  0x4000080 fsleep    syz-executor
 79005  351285  70385     0  2           0          0           syz-executor
 79005  395670  70385     0  3           0  0x4000080 fsleep    syz-executor
 79005  101462  70385     0  3           0  0x4000080 fsleep    syz-executor
 61304  362353  79072 60929  2        0x10          0           syz-executor
 61304  422235  79072 60929  3        0x10  0x4000080 fsleep    syz-executor
*63947  213021  11558     0  7    0x100002          0           sh
 56398  482232  21258     0  3    0x100002       0x88 sigsusp   sh
 64581  198295  95111     0  3    0x100002       0x80 sbwait    arp
 95111  503824  21971     0  3    0x100002       0x88 sigsusp   sh
 16673  494565  83900     0  3         0x2       0x80 nanoslp   syz-executor
 57566  258470  83900     0  3         0x2       0x80 nanoslp   syz-executor
 21258    1590  83900     0  3         0x2       0x80 wait      syz-executor
 21971  211463  83900     0  3         0x2       0x80 wait      syz-executor
 11558  499901  83900     0  3         0x2       0x80 wait      syz-executor
 79072  319366  83900     0  3         0x2       0x80 nanoslp   syz-executor
 84105  103520  83900     0  3         0x2          0 biowait   syz-executor
 70385  348976  83900     0  3         0x2       0x80 nanoslp   syz-executor
 83900  382895  16982     0  3         0x2       0x80 kqread    syz-executor
 16982  281078  41824     0  3    0x100002       0x88 sigsusp   ksh
 41824    1609   4185     0  3        0x10       0x88 kqread    sshd-session
  4185   87236  76928     0  3        0x12       0x80 kqread    sshd-session
 40448  261709      1     0  3    0x100003       0x80 ttyin     getty
 76928  144781      1     0  3           0       0x88 kqread    sshd
 96953  119596  65056    74  3   0x1100012       0x80 bpf       pflogd
 65056  240546      1     0  3           0       0x80 sbwait    pflogd
 82895  461134  30045    73  3   0x1100010       0x80 kqread    syslogd
 30045  227431      1     0  3    0x100002       0x80 sbwait    syslogd
   160  262135      1     0  3    0x100000       0x80 kqread    resolvd
 47407  230113  22937    77  3    0x100012       0x80 kqread    dhcpleased
 81105  521191  22937    77  3    0x100012       0x80 kqread    dhcpleased
 22937  290019      1     0  3           0       0x80 kqread    dhcpleased
 20791  394586      0     0  3     0x14000      0x200 bored     smr
 82151  150225      0     0  2     0x14000      0x200           zerothread
 93015  186117      0     0  3     0x14000      0x200 aiodoned  aiodoned
 64672   49480      0     0  3     0x14000      0x200 syncer    update
 62724   63154      0     0  3     0x14000      0x200 cleaner   cleaner
 20675  199001      0     0  3     0x14000      0x200 reaper    reaper
 40628  494144      0     0  3     0x14000      0x200 pgdaemon  pagedaemon
 90626  274390      0     0  3     0x14000      0x200 bored     viomb
 44508  499585      0     0  3     0x14000 0x40000200 acpi0     acpi0
 56493  485634      0     0  3     0x14000 0x40000200           idle1
 57920  493930      0     0  3     0x14000      0x200 bored     softnet1
 90907  505141      0     0  3     0x14000      0x200 bored     softnet0
 37720   16617      0     0  3     0x14000      0x200 smrbar    systqmp
 21570  170422      0     0  3     0x14000      0x200 bored     systq
 33490  127616      0     0  3     0x14000      0x200 tmoslp    softclockmp
 13490   35649      0     0  3     0x14000 0x40000200 tmoslp    softclock
 62263   68056      0     0  3     0x14000 0x40000200           idle0
     1   51887      0     0  3         0x2       0x80 wait      init
     0       0     -1     0  3     0x10000      0x200 scheduler swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &pmap->pm_mtx r = 0 (0xfffff0006ccebd10)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:441 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2777
#3  uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
#4  uvm_fault+0x198 sys/uvm/uvm_fault.c:635
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
Process 74892 (syz-executor) thread 0xffff800045feed10 (85372)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b124c0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
#1  syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783
#2  Xsyscall+0x128
Process 63947 (sh) thread 0xffff800045fee2b0 (213021)
exclusive rwlock amaplk r = 0 (0xfffff0006ce2c310)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  uvm_fault_check+0x8a9 sys/uvm/uvm_fault.c:834
#3  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#4  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#5  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#6  recall_trap+0x8
shared rwlock vmmaplk r = 0 (0xfffff0006cee34e8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880
#3  uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693
#4  uvm_fault+0x106 sys/uvm/uvm_fault.c:627
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
exclusive mutex &pmap->pm_mtx r = 0 (0xfffff0006ccebd10)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  mtx_enter+0x4b4 sys/kern/kern_lock.c:487
#2  pmap_enter+0x24b rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline]
#2  pmap_enter+0x24b pmap_map_ptes sys/arch/amd64/amd64/pmap.c:441 [inline]
#2  pmap_enter+0x24b sys/arch/amd64/amd64/pmap.c:2777
#3  uvm_fault_upper+0x338 sys/uvm/uvm_fault.c:1131
#4  uvm_fault+0x198 sys/uvm/uvm_fault.c:635
#5  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192
#6  usertrap+0x430 sys/arch/amd64/amd64/trap.c:640
#7  recall_trap+0x8
Process 84105 (syz-executor) thread 0xffff80002a223238 (103520)
exclusive rrwlock inode r = 0 (0xfffff0006d0c7c50)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vget+0x2a2 sys/kern/vfs_subr.c:692
#6  ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98
#7  ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203
#8  ufs_lookup+0x1a36 sys/ufs/ufs/ufs_lookup.c:478
#9  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#10 vfs_lookup+0x963 sys/kern/vfs_lookup.c:580
#11 namei+0x7c5 sys/kern/vfs_lookup.c:250
#12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807
#13 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffff0006dd8a0b0)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:576
#5  vfs_lookup+0x12b sys/kern/vfs_lookup.c:431
#6  namei+0x7c5 sys/kern/vfs_lookup.c:250
#7  dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
#9  Xsyscall+0x128
Process 37720 (systqmp) thread 0xffff800045ffe298 (16617)
shared rwlock systqmp r = 0 (0xffffffff839008f8)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  taskq_thread+0x12a sys/kern/kern_task.c:442
#2  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11050  12084K   12149K 166960K     12146        0
            pcb    18     12K      12K 166960K        18        0
         rtable   205      5K       6K 166960K       311        0
             pf    34     17K      19K 166960K        46        0
         ifaddr    39      6K       6K 166960K        41        0
        ifgroup    55      2K       2K 166960K        55        0
         sysctl     1      1K       9K 166960K         5        0
       counters    70     37K      37K 166960K        70        0
       ioctlops     0      0K       4K 166960K      1482        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1291     81K      81K 166960K      1362        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       1K 166960K         2        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1734    201K     291K 166960K     11964        0
      file desc    19     69K      97K 166960K       130        0
           proc    70    115K     164K 166960K       541        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
       in_multi    79      5K       5K 166960K        79        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    25    122K     122K 166960K        25        0
           exec     0      0K       1K 166960K       383        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   225    163K     170K 166960K      3099        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    45     90K     104K 166960K      1297        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
            NDP    24      1K       1K 166960K        24        0
           temp    34   9114K    9121K 166960K      3886        0
         kqueue    13     20K      20K 166960K        25        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       28    0        0     1     0     1     1     0     8    0
rtpcb      120       33    0       29     1     0     1     1     0     8    0
rtentry    176       95    0        1     5     0     5     5     0     8    0
unpcb      144       41    0       23     1     0     1     1     0     8    0
syncache   336        4    0        4     1     0     1     1     0     8    1
tcpcb      736       14    0        8     1     0     1     1     0     8    0
arp        136       16    0        0     1     0     1     1     0     8    0
inpcb      328       73    0       61     2     0     2     2     0     8    0
nd6        152       18    0        0     1     0     1     1     0     8    0
kcovpl      48        8    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       17    0        0     1     0     1     1     0     8    0
pfstkey    128       17    0        0     1     0     1     1     0     8    0
pfstate    448       17    0        0     2     0     2     2     0     8    0
pfrule     1360      22    0       17     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      370    0        0    24     0    24    24     0     8    0
art_table   40      371    0        0     4     0     4     4     0     8    0
art_node    32       95    0        8     1     0     1     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1564    0       98    92     0    92    92     0     8    0
ffsino     296     1564    0       98   113     0   113   113     0     8    0
nchpl      144     1766    0       66    64     0    64    64     0     8    0
vnodes     216     1655    0        0    92     0    92    92     0     8    0
namei      1024    5413    0     5413     1     0     1     1     0     8    1
percpumem   16       51    0        0     1     0     1     1     0     8    0
kstatmem   264       27    0        0     2     0     2     2     0     8    0
scxspl     216     6122    0     6121     4     1     3     3     1     8    2
plimitpl   152       29    0       12     1     0     1     1     0     8    0
sigapl     424      456    0      407     7     0     7     7     0     8    0
knotepl    120       51    0        0     2     0     2     2     0     8    0
kqueuepl   224       22    0       12     1     0     1     1     0     8    0
pipepl     344      129    0      102     3     0     3     3     0     8    0
fdescpl    528      440    0      407     3     0     3     3     0     8    0
filepl     160     1583    0     1365    10     0    10    10     0     8    0
lockfpl    104        9    0        6     1     0     1     1     0     8    0
lockfspl    48        6    0        3     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       32    0       15     1     0     1     1     0     8    0
ucredpl    104       84    0       70     1     0     1     1     0     8    0
zombiepl   144      407    0      407     1     0     1     1     0     8    1
processpl  1232     456    0      407     5     0     5     5     0     8    0
procpl     664      469    0      414     5     0     5     5     0     8    0
sosppl     176        1    0        0     1     0     1     1     0     8    0
sockpl     752      147    0      112     4     0     4     4     0     8    0
mcl8k      8192       1    0        0     1     0     1     1     0     8    0
mcl4k      4096     117    0        0    15     0    15    15     0     8    0
mcl2k      2048      21    0        0     3     0     3     3     0     8    0
mextrefs    64       22    0        0     1     0     1     1     0     8    0
mtagpl      96        2    0        0     1     0     1     1     0     8    0
mbufpl     256      178    0        0    12     0    12    12     0     8    0
bufpl      272     2278    0      105   145     0   145   145     0     8    0
anonpl      32     3779    0        0    31     0    31    31     0   247    0
amapchunkpl 152    8412    0     7989    19     0    19    19     0   158    1
amappl16   200     1692    0     1678     5     0     5     5     0     8    4
amappl15   192        7    0        7     1     0     1     1     0     8    1
amappl14   184      438    0      432     1     0     1     1     0     8    0
amappl13   176      122    0      109     1     0     1     1     0     8    0
amappl12   168      703    0      672     2     0     2     2     0     8    0
amappl11   160       12    0       12     1     1     0     1     0     8    0
amappl10   152       65    0       51     1     0     1     1     0     8    0
amappl9    144      276    0      276     1     0     1     1     0     8    1
amappl8    136       98    0       97     1     0     1     1     0     8    0
amappl7    128      145    0      131     1     0     1     1     0     8    0
amappl6    120      184    0      180     1     0     1     1     0     8    0
amappl5    112      120    0      110     1     0     1     1     0     8    0
amappl4    104      291    0      270     1     0     1     1     0     8    0
amappl3     96     1465    0     1377     3     0     3     3     0     8    0
amappl2     88      566    0      491     2     0     2     2     0     8    0
amappl1     80    10536    0     9897    15     0    15    15     0     8    0
amappl      88     2370    0     2224     4     0     4     4     0    92    0
uvmvnodes   80       98    0        0     2     0     2     2     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      440    0      407     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      440    0      407     1     0     1     1     0     8    0
vmmpekpl   168     5690    0     5655     2     0     2     2     0     8    0
vmmpepl    168    38084    0    36205    87     0    87    87     0   357    2
vmsppl     488      439    0      407     5     0     5     5     0     8    0
rwobjpl     80    14473    0    13416    24     0    24    24     0     8    0
pdppl      4096     887    0      814   103    16    87    87     0     8   14
pvpl        32    10446    0        0    85     0    85    85     0   265    0
pmappl     256      439    0      407     3     0     3     3     0     8    0
extentpl    40       46    0       28     1     0     1     1     0     8    0
phpool     112      412    0       19    12     0    12    12     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
proc_trampoline() at proc_trampoline+0xc7
end of kernel
end trace frame: 0x72369d7316d0, count: -1
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,3e) at comcnputc+0x250 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,3e) at comcnputc+0x250 sys/dev/ic/com.c:1274
cnputc(3e) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(3e) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff8346220f) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff83525b88) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800035b9b030,98) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800035b9b030) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff800045feed10,fffff0006ce07ca8,ffff800035b9b1f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
end trace frame: 0xffff800035b9b260, count: 0
ddb{1}> trace
x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,3e) at comcnputc+0x250 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,3e) at comcnputc+0x250 sys/dev/ic/com.c:1274
cnputc(3e) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(3e) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff8346220f) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff83525b88) at fault+0xa7 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800035b9b030,98) at kpageflttrap+0x37d sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800035b9b030) at kerntrap+0x19d sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff800045feed10,fffff0006ce07ca8,ffff800035b9b1f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimens(ffff800045feed10,ffff800035b9b340,ffff800035b9b290) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff800035b9b340) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800035b9b340) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xed603f6d9e0, count: -17

Crashes (3349):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/11 03:53 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 01:59 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/11 00:56 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 23:19 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 20:33 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 19:02 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 18:57 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 17:37 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 15:39 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 14:03 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 12:19 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 11:06 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 09:16 openbsd 422ca638c1d6 558388e4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 07:56 openbsd 422ca638c1d6 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 06:01 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 04:42 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 04:07 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/10 01:17 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 22:44 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 21:17 openbsd fab829404855 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 17:24 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 15:58 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 13:15 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 11:08 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 07:49 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 05:06 openbsd 350de6efe927 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/09 04:02 openbsd 3dc8f332bbde 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 23:33 openbsd 3dc8f332bbde 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 22:24 openbsd 3dc8f332bbde 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 20:31 openbsd 3dc8f332bbde 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 16:55 openbsd 3dc8f332bbde 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 14:31 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 13:26 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 11:11 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 10:11 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 07:42 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 06:02 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 04:14 openbsd d607cd596f17 5d63f80b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/08 01:16 openbsd 03dd4c68d240 e4ef95d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 22:41 openbsd 03dd4c68d240 e4ef95d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 20:19 openbsd 03dd4c68d240 e4ef95d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 18:52 openbsd 03dd4c68d240 e4ef95d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 15:21 openbsd 03dd4c68d240 e4ef95d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 11:14 openbsd ea06ec21fb36 c38879ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 09:56 openbsd ea06ec21fb36 c38879ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 05:42 openbsd ea06ec21fb36 c38879ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/08/07 02:52 openbsd ea06ec21fb36 c38879ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
2026/07/28 16:31 openbsd e63b2cdac76f 5fe7c56f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: proc_trampoline
2026/07/17 06:28 openbsd 5f0b8e1b9eb7 6ca2b51a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: proc_trampoline
2025/02/06 12:47 openbsd 4a7e1005694f 1e1faf27 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: proc_trampoline
* Struck through repros no longer work on HEAD.