syzbot


uvm_fault: savectx (3)

Status: upstream: reported on 2025/02/20 07:12
Reported-by: syzbot+a67c3d29b86efeb5eed6@syzkaller.appspotmail.com
First crash: 421d, last: 35m
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: savectx -1 1 1238d 1238d 0/3 auto-obsoleted due to no activity on 2023/02/23 10:19
openbsd uvm_fault: savectx (2) -1 33 543d 630d 0/3 auto-obsoleted due to no activity on 2024/12/10 09:14

Sample crash report:
uvm_fault(0xfffffd800f49fd78, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff830d17e8 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff80002a25d910
gsbase 0xffff8000299bdff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff830d17e8
Starting stack trace...
panic(ffffffff8347cd48) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff80002a25d860) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff8000ffffc538,fffffd8068b316f0,ffff80002a25da40) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2771
sys_futimes(ffff8000ffffc538,ffff80002a25db90,ffff80002a25dae0) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2813
syscall(ffff80002a25db90) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002a25db90) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7415c395ca0, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 74 696934400 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
 358361  99075      0           0          0    0  syz-executor
*503127  89608      0           0          0    1  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7d15ba700f30, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: uvm_fault(0xfffffd800f49fd78, 0x98, 0, 1) -> e
ddb{1}> trace
savectx() at savectx+0xae
end of kernel
end trace frame: 0x7d15ba700f30, count: -1
ddb{1}> 

Crashes (1415):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/04/17 08:56 openbsd 2dd8b2a80c95 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/17 06:19 openbsd 2dd8b2a80c95 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/17 03:09 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 23:23 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 22:09 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 19:11 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 18:09 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 17:28 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 15:43 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 14:30 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 13:15 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 12:10 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 10:26 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 09:11 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 07:18 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 06:49 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 04:55 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 03:47 openbsd 2a36b3c3c2a3 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/16 00:59 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 23:45 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 22:37 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 19:59 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 18:33 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 17:55 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 16:38 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 15:29 openbsd 8928aa246822 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 12:39 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 10:14 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 08:21 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 06:53 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 03:45 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/15 02:27 openbsd 54c4adda4f87 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 23:05 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 19:51 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 18:45 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 17:06 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 15:23 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 14:09 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 12:34 openbsd 84c70f1e56c7 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 10:33 openbsd bb890fd2477a 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 09:08 openbsd bb890fd2477a 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 08:09 openbsd bb890fd2477a 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 07:09 openbsd bb890fd2477a 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/14 06:08 openbsd bb890fd2477a 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/04/13 20:12 openbsd ef90b149a753 9530ccf9 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/12/17 19:14 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: savectx
2025/02/20 07:11 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
* Struck through repros no longer work on HEAD.