syzbot


panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x7fff

Status: upstream: reported on 2026/03/14 05:28
Reported-by: syzbot+bf6251e1e8d383881ce5@syzkaller.appspotmail.com
First crash: 2d19h, last: 2d19h

Sample crash report:
panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x110c235000, opte 0x7fff
Starting stack trace...
panic(ffffffff8349a006) at panic+0x1ba sys/kern/subr_prf.c:229
pmap_remove_pte(fffffd806b4865f8,fffffd800719e300,7f8008861180,110c230000,110c400000,0) at pmap_remove_pte
pmap_do_remove(fffffd806b4865f8,110c230000,110e230000,0) at pmap_do_remove+0x53a sys/arch/amd64/amd64/pmap.c:1920
uvm_unmap_kill_entry_withlock(fffffd806ccd8e70,fffffd806ccc9070,0) at uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1869
uvm_map_teardown(fffffd806ccd8e70) at uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline]
uvm_map_teardown(fffffd806ccd8e70) at uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2497
exit1(ffff80002a79c7e0,0,0,1) at exit1+0x6e6 sys/kern/kern_exit.c:259
sys_exit(ffff80002a79c7e0,ffff80003c9ab2f0,ffff80003c9ab240) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003c9ab2f0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c9ab2f0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x718eed1b5990, count: 248
End of stack trace.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/14 05:27 openbsd fd49698d88e5 351cb5cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va ADDR, opte 0x7fff
* Struck through repros no longer work on HEAD.