syzbot


assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2)

Status: upstream: reported on 2025/05/14 11:43
Reported-by: syzbot+6420135d75d0fc423de9@syzkaller.appspotmail.com
First crash: 167d, last: 13d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c -1 5 265d 266d 0/3 auto-obsoleted due to no activity on 2025/05/05 23:49

Sample crash report:
pmap_unwire: wiring for pmap 0xfffffd806bdea400 va 0xf9019069000 didn't panic: kernel diagnostic assertion "uvm_page_owner_locked_p(pg, TRUE)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1249
Starting stack trace...
panic(ffffffff83384034) at panic+0x1d0 sys/kern/subr_prf.c:229
__assert(ffffffff833c780d,ffffffff833b4f59,4e1,ffffffff833be976) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pageunwire(fffffd8009333720) at uvm_pageunwire+0x1dd
uvm_fault_unwire_locked(fffffd8077a54200,f901904f000,f901944e000) at uvm_fault_unwire_locked+0x35f sys/uvm/uvm_fault.c:1812
uvm_unmap_kill_entry_withlock(fffffd8077a54200,fffffd806b3d72e0,0) at uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
uvm_map_teardown(fffffd8077a54200) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd8077a54200) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
exit1(ffff80003c444fb8,0,0,1) at exit1+0x6fc sys/kern/kern_exit.c:260
sys_exit(ffff80003c444fb8,ffff80003c41dd70,ffff80003c41dcc0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c41dd70) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c41dd70) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7a8a798ab180, count: 247
End of stack trace.

Crashes (5):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/10/15 05:59 openbsd 29cfb2f1a350 b6605ba8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
2025/09/25 04:37 openbsd a25aeda82389 770ff59f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
2025/08/29 14:44 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
2025/06/27 19:04 openbsd 1800221da719 803ce19b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
2025/05/14 11:42 openbsd b0ff9b09a8b9 a4fa04ef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
* Struck through repros no longer work on HEAD.