syzbot


assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c (2)

Status: upstream: reported on 2025/05/14 11:43
Reported-by: syzbot+6420135d75d0fc423de9@syzkaller.appspotmail.com
First crash: 15d, last: 15d
Similar bugs (1)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c 5 114d 115d 0/3 auto-obsoleted due to no activity on 2025/05/05 23:49

Sample crash report:
panic: kernel diagnostic assertion "uvm_page_owner_locked_p(pg, TRUE)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1249
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 523212  63577     73   0x1100010          0    1K syslogd
*323470  88960      0     0x14000      0x200    0  reaper
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83461f74) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8340b5e6,ffffffff833a1f75,4e1,ffffffff8337a979) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pageunwire(fffffd8008e88b18) at uvm_pageunwire+0x1dd sys/uvm/uvm_page.c:1249
uvm_fault_unwire_locked(fffffd806bd25980,afae646000,afaea45000) at uvm_fault_unwire_locked+0x34f sys/uvm/uvm_fault.c:1834
uvm_unmap_kill_entry_withlock(fffffd806bd25980,fffffd8067875ee0,0) at uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
uvmspace_free(fffffd806bd25980) at uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
reaper(ffff8000ffffd1f8) at reaper+0x22d sys/kern/kern_exit.c:481
end trace frame: 0x0, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: kernel diagnostic assertion "uvm_page_owner_locked_p(pg, TRUE)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1249
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83461f74) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8340b5e6,ffffffff833a1f75,4e1,ffffffff8337a979) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pageunwire(fffffd8008e88b18) at uvm_pageunwire+0x1dd sys/uvm/uvm_page.c:1249
uvm_fault_unwire_locked(fffffd806bd25980,afae646000,afaea45000) at uvm_fault_unwire_locked+0x34f sys/uvm/uvm_fault.c:1834
uvm_unmap_kill_entry_withlock(fffffd806bd25980,fffffd8067875ee0,0) at uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
uvmspace_free(fffffd806bd25980) at uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
reaper(ffff8000ffffd1f8) at reaper+0x22d sys/kern/kern_exit.c:481
end trace frame: 0x0, count: -9
ddb{0}> show registers
rdi                                0
rsi                              0x1
rbp               0xffff80002a23fd20
rbx               0xffffffff83821dcf    cpu_info_full_primary+0x2dcf
rdx                                0
rcx               0xffff8000ffffd1f8
rax               0xffffffff83820ff0    cpu_info_full_primary+0x1ff0
r8                 0x101010101010101
r9                0x8080808080808080
r10               0x6b0242fb8b819004
r11               0x7028122b3b9f7340
r12               0xffffffff83821bd0    cpu_info_full_primary+0x2bd0
r13                                0
r14                                0
r15                              0x1
rip               0xffffffff832db845    db_enter+0x25
cs                               0x8
rflags                         0x246
rsp               0xffff80002a23fd10
ss                              0x10
db_enter+0x25:  addq    $0x8,%rsp
ddb{0}> show proc
PROC (reaper) tid=323470 pid=88960 tcnt=1 stat=onproc
    flags process=14000<NOZOMBIE,SYSTEM> proc=200<SYSTEM>
    runpri=86, usrpri=86, slppri=4, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffffd718,0xffff8000ffffcce8
    process=0xffff8000ffff6110 user=0xffff80002a23b000, vmspace=0xffffffff839ba7e0
    estcpu=36, cpticks=49, pctcpu=15.38, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 73491   90910      0      0  3     0x14200  bored         sosplice
 89995  336966  52506      0  3    0x100082  sbwait        arp
 52506  334480  35198      0  3    0x10008a  sigsusp       sh
 39157  440066  11576      0  3        0x82  wait          syz-executor
 72924  377915  11576      0  3        0x82  wait          syz-executor
 35198  100938  11576      0  3        0x82  wait          syz-executor
  1428  136199  11576      0  3        0x82  wait          syz-executor
 96874  460086  11576      0  3        0x82  wait          syz-executor
 19585  420809  11576      0  3        0x82  wait          syz-executor
 21127  270668  11576      0  3        0x82  wait          syz-executor
 11576  330858  12366      0  3        0x82  wait          syz-executor
 12366  364148  67147      0  3    0x10008a  sigsusp       ksh
 67147  222023  75854      0  3        0x98  kqread        sshd-session
 75854  197982  12759      0  3        0x92  kqread        sshd-session
 86372  288301      1      0  3    0x100083  ttyin         getty
 12759  419062      1      0  3        0x88  kqread        sshd
 86120  123767   9519     74  3   0x1100092  bpf           pflogd
  9519  475339      1      0  3        0x80  sbwait        pflogd
 63577  523212  77396     73  7   0x1100010                syslogd
 77396   25457      1      0  3    0x100082  sbwait        syslogd
 39584  158359      1      0  3    0x100080  kqread        resolvd
 81910  332947  64950     77  3    0x100092  kqread        dhcpleased
   416  231566  64950     77  3    0x100092  kqread        dhcpleased
 64950  160194      1      0  3        0x80  kqread        dhcpleased
 29113   37672      0      0  3     0x14200  bored         smr
 32724  466191      0      0  3     0x14200  pgzero        zerothread
 73412   13930      0      0  3     0x14200  aiodoned      aiodoned
 67520  413629      0      0  3     0x14200  syncer        update
 85958  330350      0      0  3     0x14200  cleaner       cleaner
*88960  323470      0      0  7     0x14200                reaper
 41904  405195      0      0  3     0x14200  pgdaemon      pagedaemon
 73981   17372      0      0  3     0x14200  bored         viomb
 34871  319981      0      0  3  0x40014200  acpi0         acpi0
 52554  259759      0      0  3  0x40014200                idle1
  9773   26417      0      0  3     0x14200  bored         softnet3
  3554  155784      0      0  3     0x14200  bored         softnet2
  5814  242420      0      0  3     0x14200  bored         softnet1
 61668  296563      0      0  3     0x14200  bored         softnet0
 15625  392019      0      0  3     0x14200  bored         systqmp
 12379   22035      0      0  3     0x14200  bored         systq
 81439  305526      0      0  3     0x14200  tmoslp        softclockmp
 36941  103897      0      0  3  0x40014200  tmoslp        softclock
 52604  454233      0      0  3  0x40014200                idle0
     1  247602      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{0}> show all locks
CPU 0:
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff8397d1c8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x178 sys/kern/kern_lock.c:-1
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  uvm_fault_unwire_locked+0x33e sys/uvm/uvm_fault.c:1833
#4  uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
#5  uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
#5  uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
#6  uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
#7  reaper+0x22d sys/kern/kern_exit.c:481
#8  proc_trampoline+0x10
Process 88960 (reaper) thread 0xffff8000ffffd1f8 (323470)
exclusive rwlock uobjlk r = 0 (0xfffffd806bed7228)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  uvm_fault_unwire_locked+0x25d sys/uvm/uvm_fault.c:1818
#3  uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
#4  uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
#4  uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
#5  uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
#6  reaper+0x22d sys/kern/kern_exit.c:481
#7  proc_trampoline+0x10
exclusive rwlock vmmaplk r = 0 (0xfffffd806bd25a80)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316
#2  vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5250
#3  uvm_map_teardown+0x5e sys/uvm/uvm_map.c:2480
#4  uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
#5  reaper+0x22d sys/kern/kern_exit.c:481
#6  proc_trampoline+0x10
exclusive mutex &uvm.pageqlock r = 0 (0xffffffff8397d1c8)
#0  witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5bb sys/kern/subr_witness.c:1160
#1  mtx_enter_try+0x178 sys/kern/kern_lock.c:-1
#2  mtx_enter+0x60 sys/kern/kern_lock.c:239
#3  uvm_fault_unwire_locked+0x33e sys/uvm/uvm_fault.c:1833
#4  uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
#5  uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
#5  uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
#6  uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
#7  reaper+0x22d sys/kern/kern_exit.c:481
#8  proc_trampoline+0x10
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10189  11019K   11215K 166960K     11316        0
            pcb    17     12K      12K 166960K        29        0
         rtable   196      5K       6K 166960K       327        0
             pf    32     17K      18K 166960K        45        0
         ifaddr    37      6K       7K 166960K        43        0
        ifgroup    51      2K       2K 166960K        55        0
         sysctl     3      1K       9K 166960K         7        0
       counters    64     36K      36K 166960K        66        0
       ioctlops     0      0K       4K 166960K      1486        0
            iov     0      0K      16K 166960K         5        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1339     84K      84K 166960K      1377        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         4        0
         VM map     2      1K       1K 166960K         2        0
            sem     2      0K       0K 166960K         2        0
        dirhash    12      2K       2K 166960K        12        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    11     37K      93K 166960K       176        0
           proc    71     91K     127K 166960K       527        0
        subproc    63      3K       4K 166960K        72        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K         5        0
       in_multi    78      5K       6K 166960K        90        0
    ether_multi     1      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    43    201K     201K 166960K        43        0
           exec     0      0K       1K 166960K       366        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   257    156K     160K 166960K      3284        0
       UVM aobj     3      2K       2K 166960K         3        0
     pinsyscall    37     74K     103K 166960K      1245        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K         1        0
            NDP    11      0K       1K 166960K        26        0
           temp    34   8662K    8734K 166960K     14892        0
         kqueue    13     20K      32K 166960K        35        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120       35    0       31     1     0     1     1     0     8    0
rtentry    176      103    0       12     5     0     5     5     0     8    0
unpcb      144       60    0       43     1     0     1     1     0     8    0
syncache   336        3    0        3     1     1     0     1     0     8    0
tcpcb      808       18    0       14     1     0     1     1     0     8    0
arp        128       17    0        2     1     0     1     1     0     8    0
inpcb      384       99    0       92     2     1     1     2     0     8    0
nd6        144       21    0        3     1     0     1     1     0     8    0
kcovpl      48        8    0        1     1     0     1     1     0     8    0
pffrag     232        1    0        0     1     0     1     1     0   482    0
pffrnode    88        1    0        0     1     0     1     1     0     8    0
pffrent     40        1    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfstitem    24       24    0       16     1     0     1     1     0     8    0
pfstkey    128       24    0       16     1     0     1     1     0     8    0
pfstate    384       24    0       16     3     0     3     3     0     8    1
pfrule     1344      21    0       16     2     1     1     2     0     8    0
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      412    0       44    26     0    26    26     0     8    2
art_table   32      413    0       44     4     0     4     4     0     8    0
art_node    16      102    0       19     1     0     1     1     0     8    0
sysvmsgpl   40        2    0        2     1     1     0     1     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     1624    0      110    95     0    95    95     0     8    0
ffsino     288     1624    0      110   109     0   109   109     0     8    0
nchpl      144     1883    0      190    63     0    63    63     0     8    0
uvmvnodes   80     1727    0        0    36     0    36    36     0     8    0
vnodes     216     1727    0        0    96     0    96    96     0     8    0
namei      1024    5707    0     5707     2     2     0     2     0     8    0
percpumem   16       48    0        1     1     0     1     1     0     8    0
kstatmem   264       26    0        2     2     0     2     2     0     8    0
scxspl     216    10488    0    10487    10     8     2     8     1     8    1
plimitpl   152       30    0       12     1     0     1     1     0     8    0
sigapl     424      475    0      423     7     0     7     7     0     8    0
knotepl    120      542    0        0    17     0    17    17     0     8    0
kqueuepl   224       98    0       89     5     4     1     5     0     8    0
pipepl     336      105    0       78     3     0     3     3     0     8    0
fdescpl    520      456    0      431     3     0     3     3     0     8    0
filepl     160     1816    0     1620    12     3     9    12     0     8    0
lockfpl    104       30    0       28     1     0     1     1     0     8    0
lockfspl    48       11    0        9     1     0     1     1     0     8    0
sessionpl  144       22    0       13     1     0     1     1     0     8    0
pgrppl      48       34    0       17     1     0     1     1     0     8    0
ucredpl    104       83    0       69     1     0     1     1     0     8    0
zombiepl   144      431    0      423     1     0     1     1     0     8    0
processpl  1208     475    0      423     5     0     5     5     0     8    0
procpl     656      555    0      488     6     0     6     6     0     8    0
sosppl     168        2    0        2     1     1     0     1     0     8    0
sockpl     728      195    0      167     4     1     3     4     0     8    0
mcl8k      8192       3    0        0     1     0     1     1     0     8    0
mcl4k      4096     115    0        0    15     0    15    15     0     8    0
mcl2k      2048      35    0        0     5     0     5     5     0     8    0
mtagpl      96        4    0        0     1     0     1     1     0     8    0
mbufpl     256      190    0        0    12     0    12    12     0     8    0
bufpl      280     5053    0      119   353     0   353   353     0     8    0
anonpl      32    10469    0        0    85     0    85    85     0   246    0
amapchunkpl 152    9855    0     9042    36     4    32    36     0   158    0
amappl16   200     2012    0     1988     5     3     2     5     0     8    0
amappl15   192       10    0        9     1     0     1     1     0     8    0
amappl14   184      122    0      109     1     0     1     1     0     8    0
amappl13   176        6    0        6     1     1     0     1     0     8    0
amappl12   168     1097    0     1063     3     1     2     2     0     8    0
amappl11   160       51    0       37     1     0     1     1     0     8    0
amappl10   152        2    0        2     1     1     0     1     0     8    0
amappl9    144      246    0      246     1     1     0     1     0     8    0
amappl8    136       23    0       21     1     0     1     1     0     8    0
amappl7    128      107    0       94     1     0     1     1     0     8    0
amappl6    120      170    0      166     1     0     1     1     0     8    0
amappl5    112      142    0      132     1     0     1     1     0     8    0
amappl4    104      310    0      290     1     0     1     1     0     8    0
amappl3     96     1548    0     1424     4     0     4     4     0     8    0
amappl2     88      619    0      555     2     0     2     2     0     8    0
amappl1     80     8337    0     7696    15     1    14    15     0     8    0
amappl      88     2613    0     2432     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72        2    0        0     1     0     1     1     0     8    0
uaddrrnd    24      456    0      423     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      456    0      423     1     0     1     1     0     8    0
vmmpekpl   168     5446    0     5403     2     0     2     2     0     8    0
vmmpepl    168    35715    0    33657    91     1    90    91     0   357    0
vmsppl     480      455    0      423     5     0     5     5     0     8    0
rwobjpl     72    14499    0    11781    50     0    50    50     0     8    0
pdppl      4096     920    0      846   100    26    74    86     0     8    0
pvpl        32    32110    0        0   259     0   259   259     0   265    0
pmappl     256      455    0      423     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      380    0       31    11     0    11    11     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff83461f74) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff8340b5e6,ffffffff833a1f75,4e1,ffffffff8337a979) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_pageunwire(fffffd8008e88b18) at uvm_pageunwire+0x1dd sys/uvm/uvm_page.c:1249
uvm_fault_unwire_locked(fffffd806bd25980,afae646000,afaea45000) at uvm_fault_unwire_locked+0x34f sys/uvm/uvm_fault.c:1834
uvm_unmap_kill_entry_withlock(fffffd806bd25980,fffffd8067875ee0,0) at uvm_unmap_kill_entry_withlock+0x81 sys/uvm/uvm_map.c:1860
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd806bd25980) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
uvmspace_free(fffffd806bd25980) at uvmspace_free+0xcd sys/uvm/uvm_map.c:3420
reaper(ffff8000ffffd1f8) at reaper+0x22d sys/kern/kern_exit.c:481
end trace frame: 0x0, count: -9
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153
_kernel_lock_held() at _kernel_lock_held+0x20 sys/kern/kern_lock.c:76
tsleep(fffffd806e26b790,11,ffffffff8341499b,0) at tsleep+0xcf sys/kern/kern_synch.c:124
vwaitforio(fffffd806e26b710,0,ffffffff8341499b,ffffffffffffffff) at vwaitforio+0xd2 sys/kern/vfs_subr.c:-1
ffs_fsync(ffff80002a2c68d0) at ffs_fsync+0x376 sys/ufs/ffs/ffs_vnops.c:482
VOP_FSYNC(fffffd806e26b710,fffffd807f7d3b60,1,ffff8000ffff3720) at VOP_FSYNC+0x108 sys/kern/vfs_vops.c:311
sys_fsync(ffff8000ffff3720,ffff80002a2c6a80,ffff80002a2c69d0) at sys_fsync+0x16f sys/kern/vfs_syscalls.c:2936
syscall(ffff80002a2c6a80) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2c6a80) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71137c01f1a0, count: 3
ddb{1}> trace
x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline]
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153
_kernel_lock_held() at _kernel_lock_held+0x20 sys/kern/kern_lock.c:76
tsleep(fffffd806e26b790,11,ffffffff8341499b,0) at tsleep+0xcf sys/kern/kern_synch.c:124
vwaitforio(fffffd806e26b710,0,ffffffff8341499b,ffffffffffffffff) at vwaitforio+0xd2 sys/kern/vfs_subr.c:-1
ffs_fsync(ffff80002a2c68d0) at ffs_fsync+0x376 sys/ufs/ffs/ffs_vnops.c:482
VOP_FSYNC(fffffd806e26b710,fffffd807f7d3b60,1,ffff8000ffff3720) at VOP_FSYNC+0x108 sys/kern/vfs_vops.c:311
sys_fsync(ffff8000ffff3720,ffff80002a2c6a80,ffff80002a2c69d0) at sys_fsync+0x16f sys/kern/vfs_syscalls.c:2936
syscall(ffff80002a2c6a80) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a2c6a80) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:579
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x71137c01f1a0, count: -12

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/14 11:42 openbsd b0ff9b09a8b9 a4fa04ef .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore assert "uvm_page_owner_locked_p(pg, TRUE)" failed in uvm_page.c
* Struck through repros no longer work on HEAD.