syzbot


uvm_fault: mtx_enter_try

Status: upstream: reported on 2025/05/06 23:24
Reported-by: syzbot+672fa7f73ef24ecf094f@syzkaller.appspotmail.com
First crash: 119d, last: 21d

Sample crash report:
uvm_fault(0xfffffd80670073f8, 0x20, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      mtx_enter_try+0x7b:     movl    0x8(%r14),%r15d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
mtx_enter_try(18) at mtx_enter_try+0x7b sys/kern/kern_lock.c:290
mtx_enter(18) at mtx_enter+0x62 sys/kern/kern_lock.c:261
clockintr_unbind(ffff8000014c2f30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001464000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:582
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003b835a30) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8067338440,41,fffffd80097fb680,ffff80003c47ea90) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd80659f47e0,ffff80003c47ea90) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd80659f47e0,ffff80003c47ea90) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003c47ea90) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003c47ea90,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c47ea90,ffff80003b835da0,ffff80003b835cf0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003b835da0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b835da0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
end trace frame: 0xffff80003b835e20, count: 0
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd80670073f8, 0x20, 0, 1) -> e
ddb{1}> trace
mtx_enter_try(18) at mtx_enter_try+0x7b sys/kern/kern_lock.c:290
mtx_enter(18) at mtx_enter+0x62 sys/kern/kern_lock.c:261
clockintr_unbind(ffff8000014c2f30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001464000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:582
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003b835a30) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8067338440,41,fffffd80097fb680,ffff80003c47ea90) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd80659f47e0,ffff80003c47ea90) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd80659f47e0,ffff80003c47ea90) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003c47ea90) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003c47ea90,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c47ea90,ffff80003b835da0,ffff80003b835cf0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003b835da0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b835da0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7b73edb1fbe0, count: -15
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003b835890
rbx                                0
rdx                                0
rcx               0xffff80003c47ea90
rax               0xffff8000299edf00
r8                0xffffffffffffffff
r9                               0x1
r10               0x96e6848be6986b33
r11               0x9fbbfa226df0889b
r12                              0x1
r13               0xffff8000299edff0
r14                             0x18
r15                                0
rip               0xffffffff82bdfcfb    mtx_enter_try+0x7b
cs                               0x8
rflags                       0x10297    __ALIGN_SIZE+0xf297
rsp               0xffff80003b835850
ss                              0x10
mtx_enter_try+0x7b:     movl    0x8(%r14),%r15d
ddb{1}> show proc
PROC (syz-executor) tid=146217 pid=63937 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80003c47ea90 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80002a2bcd38,0xffffffff8387e128
    process=0xffff80003b825d60 user=0xffff80003b830000, vmspace=0xfffffd80670073f8
    estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 16502   33676   5625      0  2           0                syz-executor
 16502   95963   5625      0  3   0x4000080  fsleep        syz-executor
 72034  208372  74579      0  3        0x80  nanoslp       syz-executor
 72034  165892  74579      0  3   0x4000080  kqread        syz-executor
  7793  257622  36778      0  3      0x3000  suspend       syz-executor
  7793  208158  36778      0  3   0x4081000  biowait       syz-executor
 61241  408924  82773      0  3         0x2  biowait       syz-executor
 72714  323034      0      0  3     0x14200  bored         sosplice
 36778  469480  82773      0  3        0x82  wait          syz-executor
  5625  306843  82773      0  3        0x82  nanoslp       syz-executor
 80834  211939  82773      0  3        0x82  nanoslp       syz-executor
 74579  495395  82773      0  3        0x82  nanoslp       syz-executor
 50467  385545  82773      0  3        0x82  nanoslp       syz-executor
 21748   62286  82773      0  3         0x2  biowait       syz-executor
 78162  522725  82773      0  3        0x82  nanoslp       syz-executor
 82773  253445  18681      0  3        0x82  kqread        syz-executor
 18681  370973  57762      0  3    0x10008a  sigsusp       ksh
 57762  230090   3240      0  3        0x98  kqread        sshd-session
  3240  488544  74006      0  3        0x92  kqread        sshd-session
  1892  145743      1      0  3    0x100083  ttyin         getty
 74006  483596      1      0  3        0x88  kqread        sshd
 58974  329770  44078     74  3   0x1100092  bpf           pflogd
 44078  212405      1      0  3        0x80  sbwait        pflogd
 25983  379609  21622     73  3   0x1100090  kqread        syslogd
 21622  315525      1      0  3    0x100082  sbwait        syslogd
  4623  469326      1      0  3    0x100080  kqread        resolvd
 59970  202841  56550     77  3    0x100092  kqread        dhcpleased
 34806  149533  56550     77  3    0x100092  kqread        dhcpleased
 56550  210780      1      0  3        0x80  kqread        dhcpleased
 55442  516988      0      0  3     0x14200  bored         smr
 39336  139822      0      0  3     0x14200  pgzero        zerothread
 70868  180058      0      0  3     0x14200  aiodoned      aiodoned
  9348  490487      0      0  3     0x14200  syncer        update
 56796  144338      0      0  3     0x14200  cleaner       cleaner
 44552   21054      0      0  3     0x14200  reaper        reaper
 97709  152916      0      0  3     0x14200  pgdaemon      pagedaemon
 43144  490849      0      0  3     0x14200  bored         viomb
 30541  214041      0      0  3  0x40014200  acpi0         acpi0
 39567   72207      0      0  3  0x40014200                idle1
 79532  357040      0      0  3     0x14200  bored         softnet7
 20063  384025      0      0  3     0x14200  bored         softnet6
 39763  440264      0      0  3     0x14200  bored         softnet5
 66878  209179      0      0  3     0x14200  bored         softnet4
 19612  462032      0      0  3     0x14200  bored         softnet3
 80347  173481      0      0  3     0x14200  bored         softnet2
 71318  104328      0      0  3     0x14200  bored         softnet1
  6448   48312      0      0  3     0x14200  bored         softnet0
 28112   78754      0      0  3     0x14200  bored         systqmp
 38389   20919      0      0  3     0x14200  bored         systq
 23272  216641      0      0  3     0x14200  tmoslp        softclockmp
  3281   11661      0      0  3  0x40014200  tmoslp        softclock
 71171  100200      0      0  3  0x40014200                idle0
     1  440999      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 7793 (syz-executor) thread 0xffff80002a2bcfd0 (208158)
Process 61241 (syz-executor) thread 0xffff80003b82ba18 (408924)
Process 21748 (syz-executor) thread 0xffff80002a2d6d10 (62286)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10221  11138K   11492K 166960K     12201        0
            pcb    17     13K      14K 166960K       153        0
         rtable   209      8K       8K 166960K       379        0
             pf    35     17K      19K 166960K        91        0
         ifaddr    42      7K       8K 166960K        72        0
        ifgroup    55      2K       2K 166960K       105        0
         sysctl     3      1K       9K 166960K         8        0
       counters    68     36K      37K 166960K       124        0
       ioctlops     0      0K       8K 166960K      1547        0
            iov     0      0K      12K 166960K        19        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1338     84K      85K 166960K      1799        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        14        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K        88        0
        dirhash    12      2K       2K 166960K        15        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    15     53K      97K 166960K       685        0
          sigio     0      0K       0K 166960K        10        0
           proc    73    115K     147K 166960K       599        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K        59        0
       in_multi    95      7K       7K 166960K       124        0
    ether_multi     1      0K       0K 166960K         2        0
            mrt     0      0K       0K 166960K         5        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    79    360K     360K 166960K        79        0
           exec     0      0K       1K 166960K       478        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   239    172K     177K 166960K      7872        0
       UVM aobj    84      4K       4K 166960K        84        0
     pinsyscall    40     80K     104K 166960K      1797        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        42        0
            NDP    12      0K       2K 166960K        46        0
           temp    51   8641K    8721K 166960K     27482        0
         kqueue    14     22K      26K 166960K        94        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      127    0      123     3     0     3     3     0     8    2
rtentry    176      135    0       47     5     0     5     5     0     8    0
unpcb      144      296    0      278     1     0     1     1     0     8    0
syncache   336        4    0        4     2     2     0     1     0     8    0
tcpcb      736      209    0      204    10     3     7     7     0     8    6
arp        128       19    0        5     1     0     1     1     0     8    0
inpcb      328      595    0      582    12     5     7     7     0     8    5
nd6        144       22    0        4     1     0     1     1     0     8    0
pkpcb       40        5    0        5     3     2     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      21    0       21     2     1     1     1     0     8    1
pppxif     1504       3    0        3     2     1     1     1     0     8    1
pfstscr     40        2    0        1     1     0     1     1     0     8    0
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        3    0        0     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        3     3     2     1     1     0     8    1
pfstitem    24       55    0       16     1     0     1     1     0     8    0
pfstkey    128       56    0       16     2     0     2     2     0     8    0
pfstate    384       54    0       16     5     0     5     5     0     8    0
pfrule     1344      24    0       17     2     1     1     2     0     8    0
rttmr      136        2    0        2     1     0     1     1     0     8    1
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256      572    0      143    30     3    27    30     0     8    0
art_table   40      574    0      143     5     0     5     5     0     8    0
art_node    32      134    0       55     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        3     2     1     1     1     0     8    1
semapl     112       86    0       76     1     0     1     1     0     8    0
shmpl      112       81    0        0     3     0     3     3     0     8    0
dirhash    1024      19    0        2     3     0     3     3     0     8    0
dino2pl    256     2475    0      962    95     0    95    95     0     8    0
ffsino     296     2475    0      962   117     0   117   117     0     8    0
nchpl      144     3363    0     1669    64     0    64    64     0     8    0
rtmask      32        7    0        7     2     1     1     1     0     8    1
uvmvnodes   80     2838    0        0    58     0    58    58     0     8    0
vnodes     216     2838    0        0   158     0   158   158     0     8    0
namei      1024   10320    0    10320     2     1     1     1     0     8    1
percpumem   16       77    0       28     1     0     1     1     0     8    0
kstatmem   264       58    0       32     3     1     2     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        4    0        4     1     0     1     1     0     8    1
scxspl     216    22683    0    22680     9     8     1     8     1     8    0
plimitpl   152       83    0       65     1     0     1     1     0     8    0
sigapl     424      993    0      940     7     0     7     7     0     8    0
knotepl    120      432    0        0    13     0    13    13     0     8    0
kqueuepl   224      151    0      141     1     0     1     1     0     8    0
pipepl     344      132    0      105     3     0     3     3     0     8    0
fdescpl    528      965    0      936     3     0     3     3     0     8    0
filepl     160     4366    0     4141    18     3    15    15     0     8    4
lockfpl    104      407    0      405     1     0     1     1     0     8    0
lockfspl    48      194    0      192     1     0     1     1     0     8    0
sessionpl  144       24    0       15     1     0     1     1     0     8    0
pgrppl      48       33    0       16     1     0     1     1     0     8    0
ucredpl    104      541    0      528     1     0     1     1     0     8    0
zombiepl   144     1168    0     1164     1     0     1     1     0     8    0
processpl  1248     993    0      940     5     0     5     5     0     8    0
procpl     664     1884    0     1828     9     2     7     7     0     8    0
sosppl     168        2    0        2     2     2     0     1     0     8    0
sockpl     752     1032    0      997    24    12    12    17     0     8    7
mcl64k     65536     20    0        0     3     0     3     3     0     8    1
mcl16k     16384      9    0        0     2     0     2     2     0     8    0
mcl12k     12288      6    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192      11    0        0     2     0     2     2     0     8    0
mcl4k      4096     134    0        0    17     0    17    17     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256      278    0        0    17     0    17    17     0     8    0
bufpl      280     9776    0     3633   440     0   440   440     0     8    0
anonpl      32     9932    0        0    81     1    80    80     0   246    0
amapchunkpl 152   25183    0    24637    34     6    28    28     0   158    2
amappl16   200     3463    0     3259    33    13    20    20     0     8    3
amappl15   192        2    0        2     1     1     0     1     0     8    0
amappl14   184      113    0      101     1     0     1     1     0     8    0
amappl13   176        9    0        9     1     1     0     1     0     8    0
amappl12   168     1624    0     1594     4     1     3     3     0     8    0
amappl11   160       73    0       59     1     0     1     1     0     8    0
amappl10   152       14    0       14     1     1     0     1     0     8    0
amappl9    144      254    0      254     1     1     0     1     0     8    0
amappl8    136       24    0       22     1     0     1     1     0     8    0
amappl7    128      131    0      119     1     0     1     1     0     8    0
amappl6    120      180    0      177     1     0     1     1     0     8    0
amappl5    112      129    0      118     1     0     1     1     0     8    0
amappl4    104      305    0      285     1     0     1     1     0     8    0
amappl3     96     4918    0     4806     5     1     4     4     0     8    0
amappl2     88      649    0      587     2     0     2     2     0     8    0
amappl1     80    10695    0    10091    17     3    14    15     0     8    0
amappl      88     7102    0     6938     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     2     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       83    0        0     2     0     2     2     0     8    0
uaddrrnd    24      965    0      935     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      965    0      935     1     0     1     1     0     8    0
vmmpekpl   168     8898    0     8855     3     0     3     3     0     8    0
vmmpepl    168    66062    0    63951   117    13   104   104     0   357    0
vmsppl     488      964    0      935     6     2     4     5     0     8    0
rwobjpl     80    22685    0    18658    84     0    84    84     0     8    0
pdppl      4096    1938    0     1870   110    38    72    88     0     8    4
pvpl        32    18540    0        0   150     0   150   150     0   265    0
pmappl     256      964    0      935     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      304    0       49     8     0     8     8     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff837c4ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839714e0) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839714e0) at __mp_lock+0x199 sys/kern/kern_lock.c:165
intr_handler(ffff80003c464d10,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
pmap_do_remove(fffffd806b814d00,e492f892000,e492f8a9000,0) at pmap_do_remove+0x6d6 sys/arch/amd64/amd64/pmap.c:1825
uvm_unmap_kill_entry_withlock(fffffd8067007210,fffffd805f57f388,0) at uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1863
uvm_map_teardown(fffffd8067007210) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd8067007210) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
exit1(ffff80002a2bc808,0,0,1) at exit1+0x6fc sys/kern/kern_exit.c:260
sys_exit(ffff80002a2bc808,ffff80003c465140,ffff80003c465090) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c465140) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c465140) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73b808e0d450, count: 1
ddb{0}> trace
x86_ipi_db(ffffffff837c4ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839714e0) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839714e0) at __mp_lock+0x199 sys/kern/kern_lock.c:165
intr_handler(ffff80003c464d10,ffff800000079a80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
Xspllower() at Xspllower+0x1d
pmap_do_remove(fffffd806b814d00,e492f892000,e492f8a9000,0) at pmap_do_remove+0x6d6 sys/arch/amd64/amd64/pmap.c:1825
uvm_unmap_kill_entry_withlock(fffffd8067007210,fffffd805f57f388,0) at uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1863
uvm_map_teardown(fffffd8067007210) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd8067007210) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486
exit1(ffff80002a2bc808,0,0,1) at exit1+0x6fc sys/kern/kern_exit.c:260
sys_exit(ffff80002a2bc808,ffff80003c465140,ffff80003c465090) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c465140) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c465140) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73b808e0d450, count: -14
ddb{0}> machine ddbcpu 1
Stopped at      mtx_enter_try+0x7b:     movl    0x8(%r14),%r15d
mtx_enter_try(18) at mtx_enter_try+0x7b sys/kern/kern_lock.c:290
mtx_enter(18) at mtx_enter+0x62 sys/kern/kern_lock.c:261
clockintr_unbind(ffff8000014c2f30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001464000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:582
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003b835a30) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8067338440,41,fffffd80097fb680,ffff80003c47ea90) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd80659f47e0,ffff80003c47ea90) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd80659f47e0,ffff80003c47ea90) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003c47ea90) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003c47ea90,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c47ea90,ffff80003b835da0,ffff80003b835cf0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003b835da0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b835da0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
end trace frame: 0xffff80003b835e20, count: 0
ddb{1}> trace
mtx_enter_try(18) at mtx_enter_try+0x7b sys/kern/kern_lock.c:290
mtx_enter(18) at mtx_enter+0x62 sys/kern/kern_lock.c:261
clockintr_unbind(ffff8000014c2f30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001464000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:582
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(21e5f,41,2000,ffff80003c47ea90) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff80003b835a30) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8067338440,41,fffffd80097fb680,ffff80003c47ea90) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd80659f47e0,ffff80003c47ea90) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd80659f47e0,ffff80003c47ea90) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd80659f47e0,ffff80003c47ea90) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003c47ea90) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003c47ea90,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c47ea90,ffff80003b835da0,ffff80003b835cf0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003b835da0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003b835da0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7b73edb1fbe0, count: -15

Crashes (7):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/08/12 07:51 openbsd 4f0517bc68fc c06e8995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/07/05 23:25 openbsd 0168633b2ab2 4f67c4ae .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/06/27 01:47 openbsd 69432c0dafb3 803ce19b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/06/25 13:35 openbsd 31f40ba00147 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/06/25 08:33 openbsd 31f40ba00147 26d77996 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/05/20 05:22 openbsd 03d4002980cf b84f0537 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
2025/05/06 23:24 openbsd 7a1ed1390929 350f4ffc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: mtx_enter_try
* Struck through repros no longer work on HEAD.