syzbot


uvm_fault: savectx (3)

Status: upstream: reported on 2025/02/20 07:12
Reported-by: syzbot+a67c3d29b86efeb5eed6@syzkaller.appspotmail.com
First crash: 497d, last: 1h14m
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: savectx -1 1 1314d 1314d 0/3 auto-obsoleted due to no activity on 2023/02/23 10:19
openbsd uvm_fault: savectx (2) -1 33 619d 706d 0/3 auto-obsoleted due to no activity on 2024/12/10 09:14

Sample crash report:
uvm_fault(0xfffff9006fa24990, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff82456b28 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff80003c3cb800
gsbase 0xffff80002999dff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff82456b28
Starting stack trace...
panic(ffffffff834f00ae) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff80003c3cb750) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff80003c3d27f8,fffff9006272b128,ffff80003c3cb930) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2690
sys_futimes(ffff80003c3d27f8,ffff80003c3cba80,ffff80003c3cb9d0) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2732
syscall(ffff80003c3cba80) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c3cba80) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x576dcc669a0, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 2 661392793 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 240038  11500      0           0          0    0  syz-executor
*228780  32934      0         0x2          0    1  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x6ffe97391960, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 

Crashes (4969):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/07/02 08:30 openbsd 30d0e3967450 27192279 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 07:17 openbsd 30d0e3967450 27192279 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 06:09 openbsd 30d0e3967450 27192279 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 05:06 openbsd 30d0e3967450 27192279 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 03:31 openbsd 30d0e3967450 27192279 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 01:30 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/02 00:25 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 23:20 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 21:35 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 20:11 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 18:45 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 16:50 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 15:28 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 14:45 openbsd 927838563536 5fb9973c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 13:29 openbsd 927838563536 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 12:26 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 10:32 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 09:20 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 07:28 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 05:50 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 05:26 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 04:17 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 02:56 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/07/01 01:27 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 23:59 openbsd b68bd8e26319 00a5cf1c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 21:59 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 20:32 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 20:17 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 18:54 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 17:44 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 15:48 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 14:48 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 13:46 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 12:27 openbsd 08f6b236ad6b e5173a01 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 10:31 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 08:59 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 07:41 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 06:43 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 03:29 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 01:53 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/30 00:27 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/29 23:25 openbsd 13c7226bf352 fff8d0a0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/29 12:03 openbsd bce543ca6846 6a0c72dc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/29 10:57 openbsd bce543ca6846 6a0c72dc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/06/04 01:53 openbsd e8e5aa2db9cf 197909be .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/12/17 19:14 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: savectx
2025/02/20 07:11 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
* Struck through repros no longer work on HEAD.