syzbot
uvm_fault: sys_futimes
Status:
closed as dup on 2026/08/16 00:01
Reported-by: syzbot+51a070d4f16cb82f5d09@syzkaller.appspotmail.com
First crash: 3d22h, last: 3d22h
Sample crash report:
uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
kernel: page fault trap, code=0
--db_more-- Stopped at dovutimens+0x368: movl 0x98(%rax),%r12d
--db_more-- TID PID UID PRFLAGS PFLAGS CPU COMMAND
--db_more-- 426343 35371 0 0 0 1 syz-executor
--db_more-- *184761 51061 0 0 0x4000000 0K syz-executor
--db_more-- dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more-- Xsyscall() at Xsyscall+0x128
--db_more-- end of kernel
--db_more-- end trace frame: 0x5c1c2c63e00, count: 11
--db_more-- https://www.openbsd.org/ddb.html describes the minimum info required in bug
--db_more-- reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}> s = 0
uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
kernel: page fault trap, code=0
--db_more-- Stopped at dovutimens+0x368: movl 0x98(%rax),%r12d
--db_more-- dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
--db_more-- sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
--db_more-- syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
--db_more-- syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
--db_more-- end trace frame: 0x5c1c2c63e00, count: 11
ddb{0}> maxwidth = 0
No such command
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff5000b1f7b70, 0x98, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
dovutimens(ffff80002a222d08,fffff5005e133568,ffff80002a2d27d0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimes(ffff80002a222d08,ffff80002a2d2920,ffff80002a2d2870) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733
--db_more-- syscall(ffff80002a2d2920) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
--db_more-- syscall(ffff80002a2d2920) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more-- Xsyscall() at Xsyscall+0x128
--db_more-- end of kernel
--db_more-- end trace frame: 0x5c1c2c63e00, count: -4
ddb{0}> registers
No such command
ddb{0}> show proc
PROC (syz-executor) tid=184761 pid=51061 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
--db_more-- runpri=32, usrpri=81, slppri=32, nice=20
--db_more-- wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
--db_more-- forw=0xffffffffffffffff, list=0xffff80002a2234d0,0xffff80002a223ca8
--db_more-- process=0xffff800045ff44d8 user=0xffff80002a2cd000, vmspace=0xfffff5000b1f7b70
--db_more-- estcpu=31, cpticks=121, pctcpu=1.20, user=0, sys=121, intr=0
ddb{0}> ow all locks
No such command
ddb{0}>
* Struck through repros no longer work on HEAD.