uvm_fault: syscall (2)

Status: closed as dup on 2026/08/16 00:04
Reported-by: syzbot+e9f225d9edbd542f75ea@syzkaller.appspotmail.com
First crash: 5d17h, last: 2d04h
Duplicate of
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported
uvm_fault: dovutimens -1 323266 2d03h 146d
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: syscall -1 1 2377d 2377d 0/4 auto-closed as invalid on 2020/05/13 08:21

Sample crash report:
uvm_fault(0xffffee806cf19200, 0x98, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      dovutimens+0x368:       movl    0x98(%rax),%r12d
--db_more--               TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
--db_more--            520953  81228      0    0x100002          0    1  sh
--db_more--           * 76865  57403      0           0  0x4000000    0K syz-executor
--db_more--           dovutimens(ffff80003bfb6d20,ffffee806cea41b8,ffff800034b9b6e0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
--db_more--           sys_futimens(ffff80003bfb6d20,ffff800034b9b830,ffff800034b9b780) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff800034b9b830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800034b9b830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
--db_more--           end trace frame: 0x1c98f1a30c0, count: 11
--db_more--           https://www.openbsd.org/ddb.html describes the minimum info required in bug
--db_more--           reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> nes = 0
No such command
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xffffee806cf19200, 0x98, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
dovutimens(ffff80003bfb6d20,ffffee806cea41b8,ffff800034b9b6e0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimens(ffff80003bfb6d20,ffff800034b9b830,ffff800034b9b780) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff800034b9b830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800034b9b830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more--           Xsyscall() at Xsyscall+0x128
--db_more--           end of kernel
--db_more--           end trace frame: 0x1c98f1a30c0, count: -4
ddb{0}> w registers
Symbol not found
ddb{0}> show proc
PROC (syz-executor) tid=76865 pid=57403 tcnt=3 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=86, slppri=32, nice=20
--db_more--               wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
--db_more--               forw=0xffffffffffffffff, list=0xffff80003bfb6fb8,0xffff80003bfb7790
--db_more--               process=0xffff80002a381cf8 user=0xffff800034b96000, vmspace=0xffffee806cf19200
--db_more--               estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{0}> how all locks
No such command
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 11068  12102K   12367K 166960K     12732        0
            pcb    17     15K      17K 166960K       261        0
--db_more--                    rtable   216     10K      10K 166960K       502        0
--db_more--                        pf    41     19K      38K 166960K       150        0
--db_more--                    ifaddr    41      7K       8K 166960K        87        0
--db_more--                   ifgroup    60      2K       2K 166960K       134        0
--db_more--                    sysctl     4      1K       9K 166960K        11        0
       counters    72     37K      37K 166960K       138        0
       ioctlops     0      0K       4K 166960K      1648        0
            iov     0      0K      28K 166960K        21        0
--db_more--                     mount     1      1K       1K 166960K         1        0
--db_more--                       log     0      0K       0K 166960K         4        0
--db_more--                    vnodes  1332     84K      84K 166960K      1783        0
--db_more--                 UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       5K 166960K         7        0
         VM map     2      1K       1K 166960K         2        0
--db_more--                       sem    12      0K       1K 166960K        27        0
--db_more--                   dirhash    15      2K       2K 166960K        18        0
--db_more--                      ACPI  1734    201K     291K 166960K     11964        0
--db_more--                 file desc    16     57K     260K 166960K       558        0
--db_more--                     sigio     0      0K       0K 166960K         2        0
--db_more--                      proc    71    115K     164K 166960K       665        0
--db_more--                   subproc    72      4K       4K 166960K        99        0
--db_more--               NFS srvsock     1      0K       0K 166960K         1        0
--db_more--           ddb{0}> hine ddbcpu 0
No such command
ddb{0}> trace
dovutimens(ffff80003bfb6d20,ffffee806cea41b8,ffff800034b9b6e0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691
sys_futimens(ffff80003bfb6d20,ffff800034b9b830,ffff800034b9b780) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2767
syscall(ffff800034b9b830) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800034b9b830) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
--db_more--

Crashes (66):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/16 00:15 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 22:35 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 21:17 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 20:15 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 18:54 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 16:13 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 14:30 openbsd b903a0834f41 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 10:32 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 09:09 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 08:02 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 06:39 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 03:42 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 01:41 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/15 00:38 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 21:18 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 20:16 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 19:10 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 18:41 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 17:38 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 17:21 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 15:54 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 14:52 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 14:28 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 14:23 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 14:22 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 14:02 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 13:46 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 11:39 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 11:30 openbsd 7d89a3e82316 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 08:26 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 07:42 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 07:40 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 07:18 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 07:07 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 04:20 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 02:30 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 02:24 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 01:11 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/14 00:52 openbsd 52741ec3fdca b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 21:21 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 20:19 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 19:57 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 13:25 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 10:51 openbsd b8ee6bbd8ccb 4d118901 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 09:23 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 08:32 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 08:21 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 07:26 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 06:07 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 05:17 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/13 00:35 openbsd a63ea9f8f0de 359b2492 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/12 18:45 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/12 17:30 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/12 15:06 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/12 15:05 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
2026/08/12 10:58 openbsd 2610791609b5 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: syscall
* Struck through repros no longer work on HEAD.