syzbot
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e
Status:
closed as dup on 2026/08/16 00:03
Reported-by: syzbot+45e6a77b3aee56775aae@syzkaller.appspotmail.com
First crash: 107d, last: 46d
Sample crash report:
panic: trap type 6, code=0, pc=ffffffff81226e58
Starting stack trace...
panic(ffffffff834f0426) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff800032394eb0) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff80003c3d6d30,fffff8806bedd8c8,ffff800032395070) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimens(ffff80003c3d6d30,ffff8000323951c0,ffff800032395110) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff8000323951c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff8000323951c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3146918e9d0, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 83 -1260770752 EXIT 0 4
Stopped at savectx+0xae: movl $0,%gs:0x688
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*249364 50098 0 0 0 1 syz-executor
269327 62720 0 0x14000 0x200 0 softnet0
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7ee96e97a610, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffff8806ccb49a8, 0x98, 0, 1) -> e
ddb{1}> show kasan
No such command
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7ee96e97a610, count: -1
ddb{1}>
Crashes (6):
| Time |
Kernel |
Commit |
Syzkaller |
Config |
Log |
Report |
Syz repro |
C repro |
VM info |
Assets (help?) |
Manager |
Title |
| 2026/07/14 13:44 |
openbsd |
ddde2be8d3c6 |
2130f682 |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
| 2026/07/06 17:47 |
openbsd |
a8064a9ef4c0 |
fcece630 |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
| 2026/07/05 07:34 |
openbsd |
e9996feb4a0b |
fcece630 |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
| 2026/06/28 11:43 |
openbsd |
2194060d1c40 |
fb92f11c |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
| 2026/06/23 16:51 |
openbsd |
a7fbd22dd6cd |
4b1d8f01 |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
| 2026/05/15 01:27 |
openbsd |
9f6962b18ef0 |
340bcdf0 |
.config |
console log |
report |
|
|
|
[disk image]
[bsd.gdb]
[kernel image]
|
ci-openbsd-multicore |
panic: uvm_fault(ADDR, 0x98, NUM, NUM) -> e |
* Struck through repros no longer work on HEAD.