uvm_fault: sys_futimes

Status: closed as dup on 2026/08/16 00:01
Reported-by: syzbot+51a070d4f16cb82f5d09@syzkaller.appspotmail.com
First crash: 3d22h, last: 3d22h
Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: dovutimens -1 323266 2d03h 146d

Sample crash report:
uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
kernel: page fault trap, code=0
--db_more--           Stopped at      dovutimens+0x368:       movl    0x98(%rax),%r12d
--db_more--               TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
--db_more--            426343  35371      0           0          0    1  syz-executor
--db_more--           *184761  51061      0           0  0x4000000    0K syz-executor
--db_more--           dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more--           Xsyscall() at Xsyscall+0x128
--db_more--           end of kernel
--db_more--           end trace frame: 0x5c1c2c63e00, count: 11
--db_more--           https://www.openbsd.org/ddb.html describes the minimum info required in bug
--db_more--           reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> s = 0
uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
kernel: page fault trap, code=0
--db_more--           Stopped at      dovutimens+0x368:       movl    0x98(%rax),%r12d
--db_more--           dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
--db_more--           sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
--db_more--           syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
--db_more--           syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
--db_more--           end trace frame: 0x5c1c2c63e00, count: 11
ddb{0}> maxwidth = 0
No such command
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
--db_more--           syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
--db_more--           syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more--           Xsyscall() at Xsyscall+0x128
--db_more--           end of kernel
--db_more--           end trace frame: 0x5c1c2c63e00, count: -4
ddb{0}>  registers
No such command
ddb{0}> show proc
PROC (syz-executor) tid=184761 pid=51061 tcnt=2 stat=onproc
    flags process=0 proc=4000000<THREAD>
--db_more--               runpri=32, usrpri=81, slppri=32, nice=20
--db_more--               wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
--db_more--               forw=0xffffffffffffffff, list=0xffff80002a2234d0,0xffff80002a223ca8
--db_more--               process=0xffff800045ff44d8 user=0xffff80002a2cd000, vmspace=0xfffff5000b1f7b70
--db_more--               estcpu=31, cpticks=121, pctcpu=1.20, user=0, sys=121, intr=0
ddb{0}> ow all locks
No such command
ddb{0}> 

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/14 06:42 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: sys_futimes
* Struck through repros no longer work on HEAD.