panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e

Status: closed as dup on 2026/08/16 00:03
Reported-by: syzbot+45e6a77b3aee56775aae@syzkaller.appspotmail.com
First crash: 107d, last: 46d
Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: dovutimens -1 323266 14d 158d

Sample crash report:
panic: trap type 6, code=0, pc=ffffffff81226e58
Starting stack trace...
panic(ffffffff834f0426) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff800032394eb0) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff80003c3d6d30,fffff8806bedd8c8,ffff800032395070) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimens(ffff80003c3d6d30,ffff8000323951c0,ffff800032395110) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff8000323951c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000323951c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3146918e9d0, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 83 -1260770752 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*249364  50098      0           0          0    1  syz-executor
 269327  62720      0     0x14000      0x200    0  softnet0
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7ee96e97a610, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffff8806ccb49a8, 0x98, 0, 1) -> e
ddb{1}> show kasan
No such command
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7ee96e97a610, count: -1
ddb{1}> 

Crashes (6):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/14 13:44 openbsd ddde2be8d3c6 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
2026/07/06 17:47 openbsd a8064a9ef4c0 fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
2026/07/05 07:34 openbsd e9996feb4a0b fcece630 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
2026/06/28 11:43 openbsd 2194060d1c40 fb92f11c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
2026/06/23 16:51 openbsd a7fbd22dd6cd 4b1d8f01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
2026/05/15 01:27 openbsd 9f6962b18ef0 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
* Struck through repros no longer work on HEAD.