syzbot


uvm_fault: pvclock_get (2)

Status: upstream: reported on 2026/03/28 02:43
Reported-by: syzbot+3177d0e000d22a077fe0@syzkaller.appspotmail.com
First crash: 58d, last: 16h15m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: pvclock_get -1 1 167d 167d 0/3 auto-obsoleted due to no activity on 2026/03/09 12:52

Sample crash report:
uvm_fault(0xffffffff839d8080, 0xffuvm_fault(0xffffffff839d8080, 0xffff800029ee5000, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      pvclock_get+0x53:       movl    0(%r15),%r12d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*372076  10035      0           0  0x4000000    0  syz-executor
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline]
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333
nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline]
nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline]
nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257
clockintr_dispatch(ffff800036cce710) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180
lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,66) at comcnputc+0xd0 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,66) at comcnputc+0xd0 sys/dev/ic/com.c:1264
cnputc(66) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(66) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff83425c67) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff834e0820) at fault+0xa3 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800036ccebc0,ffff800029ee6000) at kpageflttrap+0x353 sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800036ccebc0) at kerntrap+0x18a sys/arch/amd64/amd64/trap.c:528
end trace frame: 0xffff800036ccec40, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xffffffff839d8080, 0xffff800029ee5000, 0, 1) -> e
ddb> trace
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline]
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333
nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline]
nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline]
nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257
clockintr_dispatch(ffff800036cce710) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180
lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,66) at comcnputc+0xd0 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,66) at comcnputc+0xd0 sys/dev/ic/com.c:1264
cnputc(66) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(66) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff83425c67) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff834e0820) at fault+0xa3 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800036ccebc0,ffff800029ee6000) at kpageflttrap+0x353 sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800036ccebc0) at kerntrap+0x18a sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
kcov_remote_enter(0,ffff80002a79c010) at kcov_remote_enter+0x122 sys/dev/kcov.c:670
timeout_run(ffffffff838be2a0,ffff80002a7360a0) at timeout_run+0xdf sys/kern/kern_timeout.c:696
softclock_process_tick_timeout(ffff80002a7360a0,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756
softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788
softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87
dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
writedisklabel(d02,ffffffff810a2fd0,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158
sdioctl(d01,84946467,ffff8000015c1000,3,ffff80003c8f8028) at sdioctl+0x959 sys/scsi/sd.c:919
VOP_IOCTL(fffffd80654d01e8,84946467,ffff8000015c1000,3,fffffd8007ffd750,ffff80003c8f8028) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806a87e168,84946467,ffff8000015c1000,ffff80003c8f8028) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537
sys_ioctl(ffff80003c8f8028,ffff800036ccf320,ffff800036ccf270) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff800036ccf320) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff800036ccf320) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa8a4b95d030, count: -29
ddb> show registers
rdi                       0xffffffff
rsi                              0xd
rbp               0xffff800036cce600
rbx                              0x9
rdx               0xffff8000015baf00
rcx                                0
rax                              0xc
r8                                 0
r9                                 0
r10                                0
r11               0x5bcb25bf4e5ccb51
r12                           0x14f1    __ALIGN_SIZE+0x4f1
r13               0xffffffff838b8b90    th0
r14               0xffffffff838b1bd0    pvclock_timecounter
r15               0xffff800029ee5000
rip               0xffffffff81488223    pvclock_get+0x53
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff800036cce5b0
ss                              0x10
pvclock_get+0x53:       movl    0(%r15),%r12d
ddb> show proc
PROC (syz-executor) tid=372076 pid=10035 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff80003c8f94e8,0xffffffff8399cbe0
    process=0xffff80002cca7aa0 user=0xffff800036cca000, vmspace=0xfffffd800c1afb98
    estcpu=36, cpticks=291, pctcpu=0.0, user=0, sys=291, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 10035  123707  69815      0  2           0                syz-executor
*10035  372076  69815      0  7   0x4000000                syz-executor
 99591  505241  91078      0  2           0                syz-executor
 99591  333417  91078      0  3   0x4000080  ttyretype     syz-executor
 99591  287918  91078      0  3   0x4000080  ttyretype     syz-executor
  5557   83074  68175      0  2           0                syz-executor
  5557     940  68175      0  3   0x4000080  fsleep        syz-executor
 92450  473154  37331      0  3   0x1000080  nanoslp       syz-executor
 92450  309678  37331      0  3   0x5000080  ttyout        syz-executor
 92450  462801  37331      0  3   0x5000080  ttyout        syz-executor
 92450  322335  37331      0  3   0x5000080  fsleep        syz-executor
 85206  191076  71103      0  3        0x81  nanoslp       syz-executor
 85206  183379  71103      0  3   0x4000081  kqread        syz-executor
 85206   95637  71103      0  3   0x4000081  fsleep        syz-executor
 87491  391680  57197      0  2       0xc90                syz-executor
 87491  328966  57197      0  3   0x4000090  ttyin         syz-executor
 90060   95505      1      0  3    0x100083  ttyin         getty
  4276  389297      0      0  3     0x14200  acct          acct
 76121  280527      0      0  3     0x14280  nfsidl        nfsio
 61773  471137      0      0  3     0x14280  nfsidl        nfsio
 99410   48795      0      0  3     0x14280  nfsidl        nfsio
 36790  149449      0      0  3     0x14280  nfsidl        nfsio
 31015   65679      0      0  3     0x14280  nfsidl        nfsio
   908   79962      0      0  3     0x14280  nfsidl        nfsio
 98997  515461      0      0  3     0x14280  nfsidl        nfsio
   998  102296      0      0  3     0x14280  nfsidl        nfsio
 25950  223073      0      0  3     0x14280  nfsidl        nfsio
  3613  453209      0      0  3     0x14280  nfsidl        nfsio
 92334  161041      0      0  3     0x14280  nfsidl        nfsio
 65213  101351      0      0  3     0x14280  nfsidl        nfsio
 81549  171251      0      0  3     0x14280  nfsidl        nfsio
 55783   29599      0      0  3     0x14280  nfsidl        nfsio
  8922  458626      0      0  3     0x14280  nfsidl        nfsio
 89306   10656      0      0  3     0x14280  nfsidl        nfsio
 49266  276771      0      0  3     0x14280  nfsidl        nfsio
 93500  460904      0      0  3     0x14280  nfsidl        nfsio
 50574  150550      0      0  3     0x14280  nfsidl        nfsio
 24315  275324      0      0  3     0x14280  nfsidl        nfsio
 71103   43109    311      0  3        0x82  nanoslp       syz-executor
 57197  344101    311      0  3        0x82  nanoslp       syz-executor
 68175  193075    311      0  3        0x82  nanoslp       syz-executor
 43485  418016    311      0  3        0x82  wait          syz-executor
 91078  143887    311      0  3        0x82  nanoslp       syz-executor
 37331  437378    311      0  3        0x82  nanoslp       syz-executor
 18890   48370    311      0  2         0x2                syz-executor
 69815   49494    311      0  3        0x82  nanoslp       syz-executor
   311  392875  90861      0  3        0x82  kqread        syz-executor
 90861  104507  27140      0  3    0x10008a  sigsusp       ksh
 27140  107281  79126      0  3        0x98  kqread        sshd-session
 79126  467021  16305      0  3        0x92  kqread        sshd-session
 16305   21316      1      0  3        0x88  kqread        sshd
 29036  498683  60139     73  3   0x1100090  kqread        syslogd
 60139  263367      1      0  3    0x100082  sbwait        syslogd
 36040  227006      1      0  3    0x100080  kqread        resolvd
 36136  482109  81729     77  3    0x100092  kqread        dhcpleased
 66172  503779  81729     77  3    0x100092  kqread        dhcpleased
 81729  453144      1      0  3        0x80  kqread        dhcpleased
 92246  275179      0      0  3     0x14200  bored         smr
 47315  241889      0      0  2     0x14200                zerothread
 47664  413382      0      0  3     0x14200  aiodoned      aiodoned
 94317   54180      0      0  3     0x14200  syncer        update
 71497   43823      0      0  3     0x14200  cleaner       cleaner
 31013  417190      0      0  3     0x14200  reaper        reaper
 78382  336140      0      0  3     0x14200  pgdaemon      pagedaemon
 50762   68225      0      0  3     0x14200  bored         viomb
 59254  315799      0      0  3  0x40014200  acpi0         acpi0
 19507  250846      0      0  3     0x14200  bored         softnet0
 44871  410388      0      0  3     0x14200  bored         systqmp
  4590   86711      0      0  3     0x14200  bored         systq
 97649  438472      0      0  3  0x40014200  tmoslp        softclock
  5477  231824      0      0  3  0x40014200                idle0
     1  204480      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11069  12280K   13886K 166960K     14049        0
            pcb    18     16K      17K 166960K       251        0
         rtable   210     10K      14K 166960K       500        0
             pf    32     14K      21K 166960K       160        0
         ifaddr    29      5K       7K 166960K        72        0
        ifgroup    38      1K       2K 166960K       113        0
         sysctl     4      1K       9K 166960K         8        0
       counters    30     17K      18K 166960K        61        0
       ioctlops     1      2K       4K 166960K       183        0
            iov     0      0K      16K 166960K        33        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1482     93K      94K 166960K      2501        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        15        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K       164        0
        dirhash    12      2K       3K 166960K        36        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     240K 166960K      1023        0
          sigio     0      0K       0K 166960K        19        0
           proc    61     67K      91K 166960K       616        0
        subproc    72      4K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     2      0K       0K 166960K       129        0
       in_multi    62      4K       7K 166960K       140        0
    ether_multi     1      0K       0K 166960K         7        0
            mrt     1      0K       0K 166960K        28        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   133    599K     599K 166960K       133        0
           exec     0      0K       1K 166960K       765        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   219    158K     178K 166960K     10344        0
       UVM aobj    12      2K       2K 166960K        13        0
     pinsyscall    38     76K      92K 166960K      2124        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        33        0
            NDP     8      0K       2K 166960K        51        0
           temp    65   9113K   13212K 166960K     58976        0
         kqueue    17     26K      33K 166960K       165        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      152    0      149     3     2     1     3     0     8    0
rtentry    136      132    0       52     4     0     4     4     0     8    0
unpcb      144      670    0      655    10     4     6     6     0     8    5
syncache   336        8    0        8     2     1     1     1     0     8    1
tcpcb      736      372    0      365     7     6     1     7     0     8    0
arp         96       22    0        7     1     0     1     1     0     8    0
ipq         40        3    0        0     1     0     1     1     0     8    0
ipqe        40        3    0        0     1     0     1     1     0     8    0
inpcb      328     1073    0     1061    18    11     7    13     0     8    5
ip6q        72        1    0        0     1     0     1     1     0     8    0
ip6af       40        1    0        0     1     0     1     1     0     8    0
nd6        112       28    0       14     1     0     1     1     0     8    0
pkpcb       40        9    0        9     2     1     1     1     0     8    1
kcovpl      48        8    0        0     1     0     1     1     0     8    0
mppekey    1024       1    0        1     1     1     0     1     0     8    0
ppxss      1072      22    0       22     2     1     1     1     0     8    1
pfstscr     40       13    0       10     1     0     1     1     0     8    0
pffrag     232        7    0        3     1     0     1     1     0   482    0
pffrnode    88        6    0        3     1     0     1     1     0     8    0
pffrent     40       13    0        7     1     0     1     1     0     8    0
pfrktable  1344      13    0       11     1     0     1     1     0     8    0
pfsrclim   320        2    0        2     2     1     1     1     0     8    1
pfanchor   1288       4    0        1     1     0     1     1     0     8    0
pftag       88        4    0        2     2     1     1     1     0     8    0
pfqueue    320        2    0        0     1     0     1     1     0     8    0
pfstitem    24        3    0        0     1     0     1     1     0     8    0
pfstkey    128       14    0       11     1     0     1     1     0     8    0
pfstate    384        8    0        6     1     0     1     1     0     8    0
pfrule     1360      18    0       16     1     0     1     1     0     8    0
rttmr      136        3    0        3     2     1     1     1     0     8    1
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      525    0      205    30     3    27    30     0     8    5
art_table   40      527    0      205     5     0     5     5     0     8    0
art_node    32      130    0       57     1     0     1     1     0     8    0
sysvmsgpl   40       23    0       12     1     0     1     1     0     8    0
semapl      72      148    0      138     1     0     1     1     0     8    0
shmpl      112       10    0        1     1     0     1     1     0     8    0
dirhash    1024      33    0       16     3     0     3     3     0     8    0
dino2pl    256     3385    0     1929    92     0    92    92     0     8    0
ffsino     256     3385    0     1929    92     0    92    92     0     8    0
nchpl      144     4837    0     3136    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     1     0     1     0     8    0
vnodes     216     3230    0        0   180     0   180   180     0     8    0
namei      1024   17091    0    17090     1     0     1     1     0     8    0
pfiaddrpl  120        5    0        4     1     0     1     1     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
kstatmem   264       69    0       52     2     0     2     2     0     8    0
scsiplug    72        3    0        3     2     1     1     1     0     8    1
scxspl     216    15956    0    15956     9     7     2     8     1     8    2
plimitpl   152      302    0      284     1     0     1     1     0     8    0
sigapl     424     1330    0     1267     8     0     8     8     0     8    0
knotepl    120    41101    0    41046    29    19    10    16     0     8    6
kqueuepl   184      278    0      265     3     0     3     3     0     8    2
pipepl     304      282    0      255     5     2     3     5     0     8    0
fdescpl    448     1296    0     1267     5     1     4     5     0     8    0
filepl     120     8525    0     8293    19     6    13    14     0     8    5
lockfpl    104      418    0      415     1     0     1     1     0     8    0
lockfspl    48      187    0      184     1     0     1     1     0     8    0
sessionpl  144      123    0      114     1     0     1     1     0     8    0
pgrppl      48      137    0      120     1     0     1     1     0     8    0
ucredpl    104     1750    0     1738     1     0     1     1     0     8    0
zombiepl   144     1268    0     1267     2     1     1     1     0     8    0
processpl  1152    1330    0     1267     5     0     5     5     0     8    0
procpl     664     2597    0     2524     7     0     7     7     0     8    0
sosppl     176        5    0        5     1     0     1     1     0     8    1
sockpl     552     1934    0     1903    35    25    10    19     0     8    7
mcl64k     65536    200    0      200     2     1     1     1     0     8    1
mcl16k     16384      1    0        1     1     1     0     1     0     8    0
mcl9k128   9344       1    0        1     1     1     0     1     0     8    0
mcl8k      8192      16    0       16     2     1     1     1     0     8    1
mcl4k      4096    3738    0     3685    14     6     8    13     0     8    0
mcl2k      2048     909    0      904     3     1     2     3     0     8    1
mtagpl      96       87    0       82     1     0     1     1     0     8    0
mbufpl     256    14497    0    14344    30    15    15    29     0     8    1
bufpl      280     7005    0      789   445     0   445   445     0     8    0
anonpl      24   181404    0   178128    50     2    48    48     0   186   23
amapchunkpl 152   35415    0    34950    35     2    33    33     0   158   14
amappl16   200     3490    0     3458    30    20    10    16     0     8    7
amappl15   192        3    0        3     1     1     0     1     0     8    0
amappl14   184      416    0      414     1     0     1     1     0     8    0
amappl13   176      120    0      110     1     0     1     1     0     8    0
amappl12   168     1538    0     1510     2     0     2     2     0     8    0
amappl11   160        9    0        8     1     0     1     1     0     8    0
amappl10   152       59    0       48     1     0     1     1     0     8    0
amappl9    144      279    0      279     1     1     0     1     0     8    0
amappl8    136      117    0      116     1     0     1     1     0     8    0
amappl7    128      147    0      135     1     0     1     1     0     8    0
amappl6    120      224    0      222     1     0     1     1     0     8    0
amappl5    112       91    0       83     1     0     1     1     0     8    0
amappl4    104      279    0      262     1     0     1     1     0     8    0
amappl3     96     7189    0     7080     5     1     4     4     0     8    1
amappl2     88      538    0      482     2     0     2     2     0     8    0
amappl1     80    13959    0    13404    13     1    12    13     0     8    0
amappl      88     9491    0     9335     5     1     4     5     0    92    0
uvmvnodes   80      128    0        0     3     0     3     3     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       2    0        2     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     1     0     1     0     8    0
dma256     256        7    0        7     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       22    0       21     1     0     1     1     0     8    0
aobjpl      72       12    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1296    0     1267     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1296    0     1267     1     0     1     1     0     8    0
vmmpekpl   168    11611    0    11578     2     0     2     2     0     8    0
vmmpepl    168    87133    0    85324   104    11    93    93     0   357   11
vmsppl     368     1295    0     1267     4     1     3     4     0     8    0
rwobjpl     40    24485    0    23494    15     2    13    13     0     8    1
pdppl      4096    2598    0     2534   106    40    66    78     0     8    2
pvpl        32   555892    0   546990   133    10   123   123     0   265   36
pmappl     216     1295    0     1267     2     0     2     2     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      403    0       82    11     1    10    11     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline]
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333
nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline]
nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline]
nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257
clockintr_dispatch(ffff800036cce710) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180
lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,66) at comcnputc+0xd0 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,66) at comcnputc+0xd0 sys/dev/ic/com.c:1264
cnputc(66) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(66) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff83425c67) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff834e0820) at fault+0xa3 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800036ccebc0,ffff800029ee6000) at kpageflttrap+0x353 sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800036ccebc0) at kerntrap+0x18a sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
kcov_remote_enter(0,ffff80002a79c010) at kcov_remote_enter+0x122 sys/dev/kcov.c:670
timeout_run(ffffffff838be2a0,ffff80002a7360a0) at timeout_run+0xdf sys/kern/kern_timeout.c:696
softclock_process_tick_timeout(ffff80002a7360a0,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756
softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788
softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87
dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
writedisklabel(d02,ffffffff810a2fd0,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158
sdioctl(d01,84946467,ffff8000015c1000,3,ffff80003c8f8028) at sdioctl+0x959 sys/scsi/sd.c:919
VOP_IOCTL(fffffd80654d01e8,84946467,ffff8000015c1000,3,fffffd8007ffd750,ffff80003c8f8028) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806a87e168,84946467,ffff8000015c1000,ffff80003c8f8028) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537
sys_ioctl(ffff80003c8f8028,ffff800036ccf320,ffff800036ccf270) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff800036ccf320) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff800036ccf320) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa8a4b95d030, count: -29
ddb> machine ddbcpu 1
No such command
ddb> trace
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline]
pvclock_get(ffffffff838b1bd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333
nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline]
nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline]
nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257
clockintr_dispatch(ffff800036cce710) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180
lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482
Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a
x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 sys/arch/amd64/amd64/bus_space.c:670
comcnputc(800,66) at comcnputc+0xd0 comcn_read_reg sys/dev/ic/com.c:1671 [inline]
comcnputc(800,66) at comcnputc+0xd0 sys/dev/ic/com.c:1264
cnputc(66) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(66) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x29c5 sys/kern/subr_prf.c:-1
db_printf(ffffffff83425c67) at db_printf+0x9b sys/kern/subr_prf.c:-1
fault(ffffffff834e0820) at fault+0xa3 sys/arch/amd64/amd64/trap.c:161
kpageflttrap(ffff800036ccebc0,ffff800029ee6000) at kpageflttrap+0x353 sys/arch/amd64/amd64/trap.c:296
kerntrap(ffff800036ccebc0) at kerntrap+0x18a sys/arch/amd64/amd64/trap.c:528
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
kcov_remote_enter(0,ffff80002a79c010) at kcov_remote_enter+0x122 sys/dev/kcov.c:670
timeout_run(ffffffff838be2a0,ffff80002a7360a0) at timeout_run+0xdf sys/kern/kern_timeout.c:696
softclock_process_tick_timeout(ffff80002a7360a0,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756
softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788
softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87
dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
writedisklabel(d02,ffffffff810a2fd0,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158
sdioctl(d01,84946467,ffff8000015c1000,3,ffff80003c8f8028) at sdioctl+0x959 sys/scsi/sd.c:919
VOP_IOCTL(fffffd80654d01e8,84946467,ffff8000015c1000,3,fffffd8007ffd750,ffff80003c8f8028) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264
vn_ioctl(fffffd806a87e168,84946467,ffff8000015c1000,ffff80003c8f8028) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537
sys_ioctl(ffff80003c8f8028,ffff800036ccf320,ffff800036ccf270) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1
syscall(ffff800036ccf320) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff800036ccf320) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xa8a4b95d030, count: -29

Crashes (37):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/25 00:41 openbsd 6adc68a286a5 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/22 01:46 openbsd ca78e759411d 70ae9b03 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/21 20:04 openbsd 19a7e1efad25 747d777d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/21 17:12 openbsd 19a7e1efad25 747d777d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/20 13:12 openbsd 4cd34baf9f06 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/20 06:28 openbsd 3fe334830a75 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/19 05:34 openbsd 8a5afb5cdcf9 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/15 15:06 openbsd 8e47d2e8b1e5 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/14 21:53 openbsd 9f6962b18ef0 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/11 23:56 openbsd 9c5367037e8c 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/09 02:10 openbsd 34e7bded0e8b 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/08 20:52 openbsd 34e7bded0e8b 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/05/03 13:50 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/30 16:21 openbsd 2117c4c4e299 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/28 15:35 openbsd 6c5b951d135a 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/24 02:45 openbsd 179a5728e367 9cfb3ca7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/23 09:54 openbsd 18dcbfb1f230 b10da5ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/22 09:47 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/22 09:00 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/22 02:56 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/21 23:14 openbsd 9a8e8d261fbe 0b6ab7ec .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/21 15:27 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/21 11:28 openbsd 4470fcda88d1 9765efe0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/21 06:50 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/19 14:17 openbsd 2fc67ad6b988 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/19 10:56 openbsd 2fc67ad6b988 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/19 09:57 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/19 04:55 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/19 00:26 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/18 21:32 openbsd a6d33878ee16 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/15 20:27 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/13 03:28 openbsd 4ec71eeccea4 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/04/05 11:08 openbsd c9c58e023502 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/03/29 20:00 openbsd 7ab78e8bd090 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/03/29 19:55 openbsd 7ab78e8bd090 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/03/29 19:24 openbsd 8c0bc7d7b019 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
2026/03/28 02:43 openbsd f3ad7971a235 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: pvclock_get
* Struck through repros no longer work on HEAD.