syzbot


uvm_fault: savectx (3)

Status: upstream: reported on 2025/02/20 07:12
Reported-by: syzbot+a67c3d29b86efeb5eed6@syzkaller.appspotmail.com
First crash: 194d, last: 7h56m
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: savectx -1 1 1012d 1012d 0/3 auto-obsoleted due to no activity on 2023/02/23 10:19
openbsd uvm_fault: savectx (2) -1 33 316d 403d 0/3 auto-obsoleted due to no activity on 2024/12/10 09:14

Sample crash report:
uvm_fault(0xfffffd800b103998, 0x20, 0, 1) -> e
fatal page fault panic:  e r n e     aenneli c iasgnserotton  a(ssert>siih_ot ate h >sih_state I GSIS_ PENDIN  |    _RESTA RT))  = =   S I S PE NDING"    f a i le d     i e "/syz k a l le r /m an ag er  / ul t i c      ernel/   s    n/ker   oftintr. c    l i  e   7 1 
  S art nISstacTART)c =..
IS_PENDING" failed: file "/syzkaller/mnac(ffrs/fuft337190/0)rne /sys/kern/kern_softintr.c", lini +0x1Pd0ar
allel traceback, suppressed...
__assert(ffffffff833bp946,ffffffff8331ee0b,47,ffffffff83416792) at __assert+0x29 sys/kern/subr_prf.c:-1
softintr_dispatch(0) at softintr_dispatch+0x2ea
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsoftclock() at Xsoftclock+0x27
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 sys/kern/kern_lock.c:165
syscall(ffff80002a3336e0) at syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline]
syscall(ffff80002a3336e0) at syscall+0xaf4 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7f330a5cd060, count: 249
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 91 20 EXIT 0 1
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 225319  18006      0           0  0x4000000    0  syz-executor
* 37168  73309      0  0x10000002          0    1  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x766843000dc0, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu0: uvm_fault(0xfffffd800b103998, 0x20, 0, 1) -> e
 cpu1: kernel diagnostic assertion "(sih->sih_state & (SIS_PENDING | SIS_RESTART)) == SIS_PENDING" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_softintr.c", line 71
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x766843000dc0, count: -1
ddb{1}> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a3d7100
rbx                                0
rdx                                0
rcx               0xffff8000ffff2d08
rax                             0x33
r8                0xffff80002a3d7030
r9                                 0
r10               0x4db40b1e416e1140
r11               0xf631deba4b7765a2
r12                                0
r13                                0
r14               0xffff8000ffff2d08
r15                                0
rip               0xffffffff822643ee    savectx+0xae
cs                               0x8
rflags                          0x46
rsp               0xffff80002a3d7080
ss                              0x10
savectx+0xae:   movl    $0,%gs:0x688
ddb{1}> show proc
PROC (syz-executor) tid=37168 pid=73309 tcnt=1 stat=onproc
    flags process=10000002<EXEC,WAITEVENT> proc=0
    runpri=32, usrpri=50, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000ffff2540,0xffff8000ffff27e8
    process=0xffff8000ffff79c8 user=0xffff80002a3d2000, vmspace=0xfffffd806ef6f008
    estcpu=36, cpticks=210, pctcpu=0.52, user=3, sys=204, intr=2
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 35518  412394  95615      0  2           0                syz-executor
 35518  398412  95615      0  3   0x4000080  fsleep        syz-executor
 18006  329047  46786      0  2           0                syz-executor
 18006  225319  46786      0  7   0x4000000                syz-executor
 18006  501410  46786      0  3   0x4000080  fsleep        syz-executor
 84222  510747  31469      0  2           0                syz-executor
 84222  263755  31469      0  2   0x4000000                syz-executor
 18191  458440  12002      0  2       0xc80                syz-executor
 18191  359731  12002      0  3   0x4000080  lockf         syz-executor
 18191  350888  12002      0  3   0x4000080  fsleep        syz-executor
 89461   48627  17515      0  3         0x2  netlock       syz-executor
  9477  296405  40620      0  4     0x82000                syz-executor
  9477    2166  40620      0  2   0x4082000                syz-executor
  9477  511593  40620      0  3   0x4002000  suspend       syz-executor
  9477   27240  40620      0  4   0x4082000                syz-executor
 22407  495926      0      0  3     0x14200  acct          acct
 95615  322587  17515      0  3        0x82  nanoslp       syz-executor
 30510  517681      0      0  3     0x14200  bored         sosplice
 46786  264915  17515      0  3        0x82  nanoslp       syz-executor
*73309   37168  17515      0  7  0x10000002                syz-executor
 56380  107353  17515      0  3        0x82  wait          syz-executor
 31469  515783  17515      0  3        0x82  nanoslp       syz-executor
 12002   25904  17515      0  2       0xc82                syz-executor
 40620  344176  17515      0  3        0x82  nanoslp       syz-executor
 17515  239292  74712      0  3        0x82  kqread        syz-executor
 74712  430411  69964      0  3    0x10008a  sigsusp       ksh
 69964  500987  96050      0  3        0x98  kqread        sshd-session
 96050  145730  57711      0  3        0x92  kqread        sshd-session
 21748   74710      1      0  3    0x100083  ttyin         getty
 57711  108552      1      0  3        0x88  kqread        sshd
 12692  204693  38537     74  3   0x1100092  bpf           pflogd
 38537  150319      1      0  3        0x80  sbwait        pflogd
  4723  269271  30149     73  3   0x1100090  kqread        syslogd
 30149  106972      1      0  3    0x100082  sbwait        syslogd
 14978  375866      1      0  3    0x100080  kqread        resolvd
 82181  310092  75504     77  3    0x100092  kqread        dhcpleased
   242  109379  75504     77  3    0x100092  kqread        dhcpleased
 75504  214281      1      0  3        0x80  kqread        dhcpleased
 91667  262511      0      0  3     0x14200  bored         smr
 74108  436339      0      0  2     0x14200                zerothread
 91263  433794      0      0  3     0x14200  aiodoned      aiodoned
 74702  401172      0      0  3     0x14200  syncer        update
 55168  449223      0      0  3     0x14200  cleaner       cleaner
 80513  463753      0      0  3     0x14200  reaper        reaper
 94604  297173      0      0  3     0x14200  pgdaemon      pagedaemon
 55934   48327      0      0  3     0x14200  bored         viomb
 90459  365280      0      0  3  0x40014200  acpi0         acpi0
 12807  141993      0      0  3  0x40014200                idle1
 72293  303994      0      0  3     0x14200  bored         softnet7
 42333  313144      0      0  3     0x14200  bored         softnet6
 98516  271639      0      0  3     0x14200  bored         softnet5
 82382   43047      0      0  3     0x14200  bored         softnet4
 38646  114196      0      0  3     0x14200  bored         softnet3
 32446  308820      0      0  3     0x14200  bored         softnet2
 34143  443336      0      0  3     0x14200  bored         softnet1
 93349  361255      0      0  3     0x14200  bored         softnet0
   280  453816      0      0  3     0x14200  bored         systqmp
 12906   43222      0      0  3     0x14200  bored         systq
 83600   15717      0      0  3     0x14200  tmoslp        softclockmp
 83230   79959      0      0  3  0x40014200  tmoslp        softclock
  7926  163867      0      0  3  0x40014200                idle0
     1  202133      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{1}> show all locks
Process 18006 (syz-executor) thread 0xffff8000ffff3238 (225319)
Process 84222 (syz-executor) thread 0xffff80003b02f4e8 (263755)
Process 9477 (syz-executor) thread 0xffff80003b02fa18 (2166)
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10262  11093K   11200K 166960K     12618        0
            pcb    17     16K      18K 166960K       552        0
         rtable   183     10K      13K 166960K       774        0
             pf    39     18K      82K 166960K       654        0
         ifaddr    35      6K       7K 166960K       148        0
        ifgroup    59      2K       2K 166960K       242        0
         sysctl     4      1K       9K 166960K        21        0
       counters    70     37K      38K 166960K       418        0
       ioctlops     0      0K       5K 166960K      2361        0
            iov     0      0K      28K 166960K       101        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1394     88K      88K 166960K      2816        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      5K       5K 166960K        13        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       0K 166960K       160        0
        dirhash    12      2K       3K 166960K        36        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    17     61K     240K 166960K      1731        0
          sigio     0      0K       0K 166960K        30        0
           proc    73    115K     164K 166960K       775        0
        subproc    72      4K       4K 166960K        92        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       224        0
       in_multi    59      4K       7K 166960K       245        0
    ether_multi     1      0K       0K 166960K        29        0
            mrt     3      0K       0K 166960K        20        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   259   1155K    1155K 166960K       259        0
           exec     0      0K       1K 166960K       620        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       4K 166960K         3        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   259    168K     185K 166960K     17595        0
       UVM aobj    36      2K       2K 166960K        39        0
     pinsyscall    42     84K      99K 166960K      2884        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       108        0
            NDP    15      0K       2K 166960K       101        0
           temp    78   8652K    8720K 166960K    102140        0
         kqueue    16     22K      35K 166960K       417        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      160    0      155     1     0     1     1     0     8    0
rtentry    176      187    0      122     5     0     5     5     0     8    0
unpcb      144      994    0      977     9     8     1     4     0     8    0
syncache   336        7    0        7     2     2     0     1     0     8    0
tcpqe       32        3    0        3     1     1     0     1     0     8    0
tcpcb      736      444    0      436     8     6     2     4     0     8    1
arp        128       19    0        7     1     0     1     1     0     8    0
inpcb      328     1908    0     1895    21    14     7     7     0     8    5
nd6        144       33    0       24     1     0     1     1     0     8    0
pkpcb       40      147    0      147     4     3     1     1     0     8    1
kcovpl      48       10    0        2     1     0     1     1     0     8    0
mppekey    1024       2    0        2     1     0     1     1     0     8    1
ppxss      1192     155    0      155     2     1     1     1     0     8    1
pppxif     1504      11    0       11     4     3     1     1     0     8    1
pfstscr     40        2    0        1     1     0     1     1     0     8    0
pffrag     232       16    0        7     1     0     1     1     0   482    0
pffrnode    88       12    0        4     1     0     1     1     0     8    0
pffrent     40       25    0       16     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344     100    0      100     4     3     1     1     0     8    1
pfanchor   1288      70    0       67     1     0     1     1     0     8    0
pftag       88       26    0       25     1     0     1     1     0     8    0
pfstitem    24      143    0       42     1     0     1     1     0     8    0
pfstkey    128      149    0       46     4     0     4     4     0     8    0
pfstate    384      142    0       44    10     0    10    10     0     8    0
pfrule     1344      77    0       72     2     1     1     2     0     8    0
rttmr      136        7    0        7     3     2     1     1     0     8    1
art_heap8  4096       6    0        2     6     2     4     6     0     8    0
art_heap4  256     1074    0      781    33    11    22    28     0     8    3
art_table   40     1080    0      783     5     0     5     5     0     8    0
art_node    32      187    0      131     1     0     1     1     0     8    0
sysvmsgpl   40       15    0        9     1     0     1     1     0     8    0
semapl     112      153    0      143     1     0     1     1     0     8    0
shmpl      112       36    0        3     1     0     1     1     0     8    0
dirhash    1024      33    0       16     3     0     3     3     0     8    0
dino2pl    256     4833    0     3322    95     0    95    95     0     8    0
ffsino     296     4833    0     3322   117     0   117   117     0     8    0
nchpl      144     7259    0     5561    64     0    64    64     0     8    0
rtmask      32       19    0       19     4     3     1     1     0     8    1
uvmvnodes   80     5579    0        0   114     0   114   114     0     8    0
vnodes     216     5579    0        0   310     0   310   310     0     8    0
namei      1024   25025    0    25025     4     3     1     2     0     8    1
percpumem   16      224    0      174     1     0     1     1     0     8    0
pfiaddrpl  120       25    0       25     4     3     1     1     0     8    1
kstatmem   264      160    0      130     3     0     3     3     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72        5    0        5     3     3     0     1     0     8    0
scxspl     216    49304    0    49304    14    12     2     8     1     8    2
plimitpl   152      589    0      567     1     0     1     1     0     8    0
sigapl     424     2066    0     2010    10     1     9     9     0     8    1
knotepl    120     1005    0        0    30     0    30    30     0     8    0
kqueuepl   224      687    0      676     8     6     2     5     0     8    1
pipepl     344      355    0      328    15     4    11    14     0     8    8
fdescpl    528     1993    0     1962     3     0     3     3     0     8    0
filepl     160    13072    0    12847    34    15    19    23     0     8    8
lockfpl    104      919    0      915     2     1     1     2     0     8    0
lockfspl    48      266    0      263     1     0     1     1     0     8    0
sessionpl  144       28    0       19     1     0     1     1     0     8    0
pgrppl      48       57    0       40     1     0     1     1     0     8    0
ucredpl    104     2424    0     2410     1     0     1     1     0     8    0
zombiepl   144     2339    0     2336     1     0     1     1     0     8    0
processpl  1232    2066    0     2010     7     1     6     6     0     8    1
procpl     664     4793    0     4728    13     5     8     9     0     8    1
sosppl     168       16    0       16     2     1     1     1     0     8    1
sockpl     752     3305    0     3270    32    21    11    14     0     8    6
mcl64k     65536      5    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl9k      9216       1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     121    0        0    16     0    16    16     0     8    0
mcl2k2     2112       1    0        0     1     0     1     1     0     8    0
mcl2k      2048      69    0        0     9     0     9     9     0     8    0
mtagpl      96        3    0        0     1     0     1     1     0     8    0
mbufpl     256     1113    0        0    70     0    70    70     0     8    0
bufpl      280    21044    0    14901   440     0   440   440     0     8    0
anonpl      32    12507    0        0   102     1   101   101     0   246    0
amapchunkpl 152   59193    0    58594    55    15    40    40     0   158   13
amappl16   200     7202    0     7025    49    31    18    26     0     8    8
amappl15   192        9    0        8     3     2     1     1     0     8    0
amappl14   184      153    0      141     1     0     1     1     0     8    0
amappl13   176        1    0        1     1     1     0     1     0     8    0
amappl12   168     2683    0     2652     3     1     2     2     0     8    0
amappl11   160       54    0       40     1     0     1     1     0     8    0
amappl10   152        6    0        6     1     1     0     1     0     8    0
amappl9    144      249    0      248     1     0     1     1     0     8    0
amappl8    136       25    0       22     1     0     1     1     0     8    0
amappl7    128      118    0      105     1     0     1     1     0     8    0
amappl6    120      276    0      272     1     0     1     1     0     8    0
amappl5    112      132    0      122     1     0     1     1     0     8    0
amappl4    104      327    0      307     1     0     1     1     0     8    0
amappl3     96    10443    0    10338     3     0     3     3     0     8    0
amappl2     88     2280    0     2199     2     0     2     2     0     8    0
amappl1     80    15570    0    14962    16     2    14    15     0     8    0
amappl      88    16552    0    16370     5     0     5     5     0    92    0
dma16384   16384      1    0        1     1     1     0     1     0     8    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma512     512        1    0        1     1     1     0     1     0     8    0
dma256     256        7    0        7     2     2     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64       10    0       10     5     5     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       21    0       20     1     0     1     1     0     8    0
aobjpl      72       38    0        3     1     0     1     1     0     8    0
uaddrrnd    24     1993    0     1962     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1993    0     1962     1     0     1     1     0     8    0
vmmpekpl   168    17587    0    17545     3     0     3     3     0     8    0
vmmpepl    168   130209    0   128029   120    14   106   109     0   357    3
vmsppl     488     1992    0     1962     7     2     5     5     0     8    0
rwobjpl     80    41096    0    34372   138     0   138   138     0     8    0
pdppl      4096    3994    0     3924   108    34    74    82     0     8    4
pvpl        32    21257    0        0   173     1   172   172     0   265    0
pmappl     256     1992    0     1962     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      367    0       63     9     0     9     9     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffffffff83830ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 sys/kern/kern_lock.c:165
vio_ctrleof(ffff80000019fb00) at vio_ctrleof+0x4a sys/dev/pv/if_vio.c:1983
intr_handler(ffff8000360068d0,ffff80000006a200) at intr_handler+0x125 sys/arch/amd64/amd64/intr.c:563
Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f
Xspllower() at Xspllower+0x1d
cnputc(70) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(70) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x203 sys/kern/subr_prf.c:723
db_printf(ffffffff8337b692) at db_printf+0x9b sys/kern/subr_prf.c:-1
panic(ffffffff83371900) at panic+0x12d sys/kern/subr_prf.c:218
__assert(ffffffff833b0946,ffffffff8331ee0b,47,ffffffff83416792) at __assert+0x29 sys/kern/subr_prf.c:-1
end trace frame: 0xffff800036006d40, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff83830ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline]
__mp_lock(ffffffff839a4800) at __mp_lock+0x192 sys/kern/kern_lock.c:165
vio_ctrleof(ffff80000019fb00) at vio_ctrleof+0x4a sys/dev/pv/if_vio.c:1983
intr_handler(ffff8000360068d0,ffff80000006a200) at intr_handler+0x125 sys/arch/amd64/amd64/intr.c:563
Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f
Xspllower() at Xspllower+0x1d
cnputc(70) at cnputc+0x67 sys/dev/cons.c:218
db_putchar(70) at db_putchar+0x36d sys/ddb/db_output.c:155
kprintf() at kprintf+0x203 sys/kern/subr_prf.c:723
db_printf(ffffffff8337b692) at db_printf+0x9b sys/kern/subr_prf.c:-1
panic(ffffffff83371900) at panic+0x12d sys/kern/subr_prf.c:218
__assert(ffffffff833b0946,ffffffff8331ee0b,47,ffffffff83416792) at __assert+0x29 sys/kern/subr_prf.c:-1
softintr_dispatch(0) at softintr_dispatch+0x2ea
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsoftclock() at Xsoftclock+0x27
tsleep_nsec(ffff8000000396f4,10,ffffffff833adf1c,12a05f200) at tsleep_nsec+0x1e4 sys/kern/kern_synch.c:143
vio_ctrl_submit(ffff800000039000,0) at vio_ctrl_submit+0x181 sys/dev/pv/if_vio.c:1832
vio_ctrl_mq(ffff800000039000) at vio_ctrl_mq+0x116 sys/dev/pv/if_vio.c:1919
vio_stop(ffff800000039058,1) at vio_stop+0x525 virtio_has_feature sys/dev/pv/virtiovar.h:226 [inline]
vio_stop(ffff800000039058,1) at vio_stop+0x525 sys/dev/pv/if_vio.c:1046
vio_ioctl(ffff800000039058,80206910,ffff800036007010) at vio_ioctl+0x565 sys/dev/pv/if_vio.c:-1
if_downall() at if_downall+0xe2 sys/net/if.c:1722
boot(104) at boot+0x1e1 sys/arch/amd64/amd64/machdep.c:922
reboot(104) at reboot+0xb1
panic(ffffffff83371900) at panic+0x1f9
__assert(ffffffff833b0946,ffffffff8331ee0b,47,ffffffff83416792) at __assert+0x29 sys/kern/subr_prf.c:-1
softintr_dispatch(0) at softintr_dispatch+0x2ea
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847
Xsoftclock() at Xsoftclock+0x27
cnputc(20) at cnputc+0x67 sys/dev/cons.c:218
kputchar(20,5,0) at kputchar+0x2ed sys/kern/subr_prf.c:367
kprintf() at kprintf+0x203 sys/kern/subr_prf.c:723
printf(ffffffff833377d8) at printf+0x8b sys/kern/subr_prf.c:529
trap_print(ffff800036007590,6) at trap_print+0xd8 sys/arch/amd64/amd64/trap.c:631
kerntrap(ffff800036007590) at kerntrap+0x2e6 sys/arch/amd64/amd64/trap.c:485
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
mtx_enter_try(18) at mtx_enter_try+0x7b sys/kern/kern_lock.c:290
mtx_enter(18) at mtx_enter+0x62 sys/kern/kern_lock.c:261
clockintr_unbind(ffff8000014e2b30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375
dt_ioctl_record_stop(ffff800001479000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:582
dtclose(11e5f,81,2000,ffff8000ffff3238) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff8000ffff3238) at dtclose+0x109 sys/dev/dt/dt_dev.c:232
spec_close(ffff800036007820) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd807d02f7e8,81,fffffd80097fb750,ffff8000ffff3238) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806b86fd60,ffff8000ffff3238) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806b86fd60,ffff8000ffff3238) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd806b86fd60,ffff8000ffff3238) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806b86fd60,ffff8000ffff3238) at closef+0x192 sys/kern/kern_descrip.c:1264
syscall(ffff800036007a80) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800036007a80) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:746
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xdde011588f0, count: -49
ddb{0}> machine ddbcpu 1
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
savectx() at savectx+0xae
end of kernel
end trace frame: 0x766843000dc0, count: 14
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x766843000dc0, count: -1

Crashes (140):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/09/02 06:51 openbsd d88aded70a2b 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/09/02 05:01 openbsd d88aded70a2b 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/09/01 17:56 openbsd 813b141997c4 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/09/01 09:44 openbsd c92b9bbde912 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/31 13:29 openbsd d417098b3164 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/31 03:50 openbsd 956d2a6101a0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/30 18:26 openbsd 4b2601e5b4e0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/30 14:48 openbsd 4b2601e5b4e0 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/30 07:49 openbsd 909b52fe0f3b 807a3b61 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/08/29 20:29 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/29 15:46 openbsd 7c5e7ac95d6c 3e1beec6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/29 07:12 openbsd 906513d7bd69 d401b9d7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/27 15:09 openbsd 2a098345d1c3 e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/27 04:59 openbsd 2a098345d1c3 e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/26 17:21 openbsd d9624900b8bd e12e5ba4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/26 06:24 openbsd 07d23478ec82 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/25 17:14 openbsd 4f8e478bcc72 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/25 11:50 openbsd 4f8e478bcc72 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/24 22:39 openbsd bd153159a117 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/23 05:37 openbsd ccaf50e2ba15 bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/22 08:30 openbsd 3468367b8f8a bf27483f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/21 07:50 openbsd 70b219c460a6 0b9605c8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/08/20 19:32 openbsd 8dd4d68c0f49 0b9605c8 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/19 12:09 openbsd 5f352b01c2c4 523f460e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/08/19 06:45 openbsd b981b677995a 523f460e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/19 03:33 openbsd b981b677995a 523f460e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/18 21:19 openbsd b981b677995a 523f460e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/16 11:52 openbsd 0823c7e0b279 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/15 22:17 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/15 14:28 openbsd 1733a114764f 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/15 04:09 openbsd bc42849e5050 1804e95e .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/12 21:57 openbsd ca8bfee27b33 22ec1469 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/11 13:43 openbsd 3e54954732e9 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/10 22:23 openbsd 9abff0b24f7a 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/10 13:14 openbsd db91578bce12 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/10 00:24 openbsd 6d30732ef287 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/09 22:33 openbsd 6d30732ef287 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/09 10:53 openbsd 86b9fcdd2575 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/09 06:20 openbsd 86b9fcdd2575 32a0e5ed .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/07 07:41 openbsd 01075e58a8ba 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/06 08:11 openbsd f0bae7c1d04d 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/05 06:32 openbsd ba714b803396 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/03 16:49 openbsd bf6d80a8c313 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/03 02:22 openbsd d2170a9a220c 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/08/02 07:47 openbsd 4c5c4401a4d8 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/07/31 22:15 openbsd 788294299689 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/07/31 02:02 openbsd e727a61a1a01 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/07/30 20:14 openbsd e727a61a1a01 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/07/28 10:43 openbsd 0897303859b5 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/07/27 18:26 openbsd 7b0d12c26b01 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2025/05/11 10:33 openbsd 9ae922823a2f 77908e5f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: savectx
2025/02/20 07:11 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
* Struck through repros no longer work on HEAD.