syzbot


uvm_fault: mtx_enter

Status: upstream: reported on 2025/04/11 00:12
Reported-by: syzbot+012f107f543805943a64@syzkaller.appspotmail.com
First crash: 56d, last: 2d17h

Sample crash report:
uvm_fault(0xfffffd807e192e28, 0x18, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      mtx_enter+0x59: movq    0(%r14),%rax
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*448936  36522      0           0  0x4000000    0  syz-executor
mtx_enter(18) at mtx_enter+0x59 sys/kern/kern_lock.c:320
clockintr_unbind(ffff80000153f330,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001495600) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:576
dtclose(11e5f,81,2000,ffff80002a7c3498) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80002a7c3498) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003c95d270) at spec_close+0x45f sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8067240438,81,fffffd8007bfb958,ffff80002a7c3498) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156
vn_closefile(fffffd8067345e18,ffff80002a7c3498) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd8067345e18,ffff80002a7c3498) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd8067345e18,ffff80002a7c3498) at fdrop+0x126 sys/kern/kern_descrip.c:1267
closef(fffffd8067345e18,ffff80002a7c3498) at closef+0x18d sys/kern/kern_descrip.c:1251
syscall(ffff80003c95d4d0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c95d4d0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x96e37cee2e0, count: 4
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (13):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/06/04 03:56 openbsd 51e28e2b9751 a30356b7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/05/22 13:09 openbsd 90a7f92b51d8 0919b50b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/05/17 09:20 openbsd 78b89de1503e f41472b0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/05/14 13:37 openbsd b0ff9b09a8b9 a4fa04ef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/05/05 10:49 openbsd 0258cd44472b 6ca47dd8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/23 13:17 openbsd 1b07127f5555 57d54c08 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/22 07:31 openbsd e8eeea37c7e6 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/21 14:24 openbsd 73df8e5b9b65 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/18 13:42 openbsd 8f9f394da4af 552876f8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/14 15:30 openbsd c5a62f9c39e8 0bd6db41 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/11 12:32 openbsd 5990a1963d9d 12ba9c21 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/11 01:08 openbsd 5990a1963d9d 94486846 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
2025/04/11 00:12 openbsd 5990a1963d9d 94486846 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: mtx_enter
* Struck through repros no longer work on HEAD.