uvm_fault: amap_lookups

Status: upstream: reported on 2026/07/14 00:24
Reported-by: syzbot+7651266b7ef13d67cc1a@syzkaller.appspotmail.com
First crash: 67d, last: 18h37m

Sample crash report:
uvm_fault(0xfffff7000b1f73d0, 0x100000010, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      amap_lookups+0x1e0:     movl    0x10(%r12),%r14d
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*443942   4754      0         0x2          0    0  syz-executor
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:120 [inline]
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1170
uvm_fault_check(ffff80002a37de70,ffff80002a37dea8,ffff80002a37dee0,0) at uvm_fault_check+0x8d2 sys/uvm/uvm_fault.c:840
uvm_fault(fffff7000b1f73d0,487df638000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
upageflttrap(ffff80002a37e010,487df6387e0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff80002a37e010) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x753ff4dab900, count: 9
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff7000b1f73d0, 0x100000010, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:120 [inline]
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1170
uvm_fault_check(ffff80002a37de70,ffff80002a37dea8,ffff80002a37dee0,0) at uvm_fault_check+0x8d2 sys/uvm/uvm_fault.c:840
uvm_fault(fffff7000b1f73d0,487df638000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
upageflttrap(ffff80002a37e010,487df6387e0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff80002a37e010) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x753ff4dab900, count: -6
ddb{0}> show registers
rdi                             0x11
rsi                             0x40
rbp               0xffff80002a37dcc0
rbx                             0x17
rdx                                0
rcx                              0x1
rax               0xffff80000159eb60
r8                     0x487df638000
r9                     0x487df638001
r10                                0
r11               0x1b6482044e81af99
r12                      0x100000000
r13                              0x1
r14                             0x40
r15                             0x10
rip               0xffffffff8181ecf0    amap_lookups+0x1e0
cs                               0x8
rflags                       0x10202    __ALIGN_SIZE+0xf202
rsp               0xffff80002a37dc30
ss                                 0
amap_lookups+0x1e0:     movl    0x10(%r12),%r14d
ddb{0}> 

Crashes (60):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/09/18 18:47 openbsd c10aa57bf0a6 853b104b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/08/25 18:55 openbsd 35698001175f a9a1fc32 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/25 11:36 openbsd 35698001175f a9a1fc32 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/08/05 08:05 openbsd e4512c136ac0 52aa2820 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/08/05 01:30 openbsd e4512c136ac0 52aa2820 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/03 21:15 openbsd 8bdaccf9d694 6b7c9f71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/03 19:14 openbsd 8bdaccf9d694 6b7c9f71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/03 15:17 openbsd 8bdaccf9d694 6b7c9f71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/02 21:13 openbsd f8480ad0276a e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/02 17:33 openbsd f8480ad0276a e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/08/02 02:31 openbsd f8480ad0276a e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/08/01 21:54 openbsd 59ec3ab4d107 e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/08/01 18:43 openbsd 59ec3ab4d107 e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/08/01 01:21 openbsd ec875f0e6c74 e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/31 22:37 openbsd ec875f0e6c74 e611ffe1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/31 13:22 openbsd 6bf809100faf db462e94 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/29 18:06 openbsd 92d0a7b388e6 b63596d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/29 16:12 openbsd 92d0a7b388e6 b63596d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/29 15:50 openbsd 92d0a7b388e6 b63596d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/29 14:14 openbsd 92d0a7b388e6 b63596d1 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/29 05:05 openbsd 7c9a09f11f52 19622d9d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/28 06:01 openbsd 02abc4651138 45ae1df4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/27 09:03 openbsd 03525b20a4f0 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/27 07:40 openbsd 03525b20a4f0 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/27 01:38 openbsd d2534f409959 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/25 22:23 openbsd d6cf5170b77f 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/25 10:57 openbsd f3d8a5574675 492bab15 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/24 23:59 openbsd 969775618695 dd737a83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/24 17:50 openbsd 969775618695 dd737a83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/24 17:15 openbsd 969775618695 dd737a83 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/07/24 11:35 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/24 09:35 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/24 08:59 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/24 04:37 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/24 00:46 openbsd 691001c74c47 544adce9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/23 15:44 openbsd 6c9531571979 71a13572 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/22 08:26 openbsd e524649e2c66 b561ce9c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/22 05:42 openbsd e524649e2c66 b561ce9c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/21 16:58 openbsd 20200149c668 7c5de9c3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/21 12:40 openbsd 20200149c668 7c5de9c3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/21 06:02 openbsd d55fd7dd01df de6a700d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/21 01:07 openbsd d55fd7dd01df de6a700d .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/20 03:16 openbsd 16594d90c4be 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/07/19 21:59 openbsd 2fc221d2874b 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/07/19 07:35 openbsd fc1b4e4caf7d 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/19 03:44 openbsd fc1b4e4caf7d 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/18 23:29 openbsd bc321d44d2f5 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/18 22:50 openbsd bc321d44d2f5 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/18 18:52 openbsd bc321d44d2f5 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/18 06:35 openbsd 97f4e10dc0be 72524a66 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/07/17 15:08 openbsd 94b919120046 7f27c57a .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/15 23:01 openbsd 5b4a77182f82 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: amap_lookups
2026/07/15 20:58 openbsd 5b4a77182f82 27a8bd60 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/15 15:12 openbsd af68cf7bb0f1 a4ed0f4f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/15 07:15 openbsd c070732167b6 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: amap_lookups
2026/07/15 02:23 openbsd c070732167b6 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/14 02:47 openbsd 925b83c94733 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
2026/07/14 00:24 openbsd 925b83c94733 2130f682 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: amap_lookups
* Struck through repros no longer work on HEAD.