syzbot


uvm_fault: savectx (3)

Status: upstream: reported on 2025/02/20 07:12
Reported-by: syzbot+a67c3d29b86efeb5eed6@syzkaller.appspotmail.com
First crash: 439d, last: 56m
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: savectx -1 1 1257d 1257d 0/3 auto-obsoleted due to no activity on 2023/02/23 10:19
openbsd uvm_fault: savectx (2) -1 33 561d 648d 0/3 auto-obsoleted due to no activity on 2024/12/10 09:14

Sample crash report:
uvm_fault(0xfffffd800b0633d0, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff813c7438 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff800038fb37e0
gsbase 0xffff8000299adff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff813c7438
Starting stack trace...
panic(ffffffff83484b91) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff800038fb3730) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff8000357a4020,fffffd806f1b51c8,ffff800038fb38f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2771
sys_futimens(ffff8000357a4020,ffff800038fb3a40,ffff800038fb3990) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2847
syscall(ffff800038fb3a40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800038fb3a40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x273425c5980, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 83 -1348398448 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*226415  32434      0           0  0x4000000    1  syz-executor
 278505   1350      0         0x2        0x1    0  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x273968290e0, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 

Crashes (2007):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/05 22:45 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 21:29 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 20:06 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 18:46 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 17:18 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 16:09 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 15:07 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 13:10 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/05 11:33 openbsd 83f5cd019021 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 07:30 openbsd 126c93b16f30 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 06:25 openbsd 126c93b16f30 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 04:44 openbsd 126c93b16f30 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 02:37 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 01:35 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/04 00:27 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 22:58 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 21:41 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 20:18 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 17:43 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 17:42 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 16:11 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 14:50 openbsd 46b66a11ee10 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 13:22 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 10:58 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 09:24 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 07:53 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 06:41 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 06:32 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 05:02 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 04:00 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 02:58 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/03 00:41 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 23:37 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 19:39 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2026/05/02 16:18 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 15:17 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 14:01 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2026/05/02 13:26 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 11:52 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 09:59 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 08:49 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 07:36 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 06:23 openbsd cdbf859d9674 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 03:42 openbsd bedf3632bee6 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/12/17 19:14 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: savectx
2025/02/20 07:11 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
* Struck through repros no longer work on HEAD.