syzbot


uvm_fault: uao_detach (2)

Status: upstream: reported on 2025/10/07 22:23
Reported-by: syzbot+5f4aae1c0ad0ae6e74dd@syzkaller.appspotmail.com
First crash: 55d, last: 4h01m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: uao_detach -1 2 428d 431d 0/3 auto-obsoleted due to no activity on 2024/12/28 09:29

Sample crash report:
uvm_fault(0xfffffd806ca42b98, 0x3f, 0, 2) -> e
kernel: page fault trap, code=2
Stopped at      uao_detach+0xb9:        movq    %r15,0x40(%r12)
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*497490  23782      0           0  0x4000000    0  syz-executor
uao_detach(fffffd80691f3758) at uao_detach+0xb9 sys/uvm/uvm_aobj.c:824
shm_deallocate_segment(fffffd806da46240) at shm_deallocate_segment+0x43 sys/kern/sysv_shm.c:152
sys_shmat(ffff80002a813a20,ffff80003a919d30,ffff80003a919c80) at sys_shmat+0x559 sys/kern/sysv_shm.c:281
syscall(ffff80003a919d30) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003a919d30) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbcafd6fccb0, count: 10
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/02 04:31 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: uao_detach
2025/10/07 22:22 openbsd a66c1d641baa 7e2882b3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: uao_detach
* Struck through repros no longer work on HEAD.