syzbot


panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff (2)

Status: upstream: reported on 2025/11/24 08:10
Reported-by: syzbot+5743a7a1158aaf9df698@syzkaller.appspotmail.com
First crash: 143d, last: 27d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff 2 11 599d 731d 0/3 auto-obsoleted due to no activity on 2024/11/22 23:18

Sample crash report:
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x110c260000, opte 0x3efff
Starting stack trace...
panic(ffffffff834a0589) at panic+0x1ba sys/kern/subr_prf.c:229
pmap_remove_pte(fffffd80727bccb8,fffffd8006ec4300,7f8008861180,110c230000,110c400000,0) at pmap_remove_pte
pmap_do_remove(fffffd80727bccb8,110c230000,110e230000,0) at pmap_do_remove+0x53a sys/arch/amd64/amd64/pmap.c:1920
uvm_unmap_kill_entry_withlock(fffffd807eba9018,fffffd805e0f2780,0) at uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1869
uvm_map_teardown(fffffd807eba9018) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd807eba9018) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2497
exit1(ffff80002f0c0a78,0,0,1) at exit1+0x6e6 sys/kern/kern_exit.c:259
sys_exit(ffff80002f0c0a78,ffff80002ccb9b20,ffff80002ccb9a70) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002ccb9b20) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002ccb9b20) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7448dadbd670, count: 248
End of stack trace.

syncing disks...set $lines = 0
set $maxwidth = 0
show panic
trace
show registers
show proc
ps
show all locks
show malloc
show all pools
machine ddbcpu 0
trace
machine ddbcpu 1
trace

Crashes (3):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/20 01:05 openbsd f53d362946f9 2f245add .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2026/01/10 18:47 openbsd 7ae91379da7d 56f88057 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
2025/11/24 08:09 openbsd 879ea5f6fdb7 4fb8ef37 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x3efff
* Struck through repros no longer work on HEAD.