uvm_fault: upageflttrap

Status: upstream: reported on 2026/08/11 02:27
Reported-by: syzbot+d777299a072dec9bb4cb@syzkaller.appspotmail.com
First crash: 15d, last: 2h45m

Sample crash report:
uvm_fault(fffff8000b1f7b70,a2af277d000,0,1) at uvm_fault+0x1ea sys/uvm/uvm_fault.c:650
upageflttrap(ffff800035ba43b0,a2af277d000) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff800035ba43b0) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x72844bfcf510, count: -11
ddb{0}> machine ddbcpu 1
Stopped at      db_enter+0x25:  addq    $0x8,%rsp
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
witness_checkorder(fffff8006e3e5670,9,0) at witness_checkorder+0x10d1 sys/kern/subr_witness.c:-1
rw_do_enter_write(fffff8006e3e5658,1) at rw_do_enter_write+0xba sys/kern/kern_rwlock.c:234
rrw_enter(fffff8006e3e5658,1) at rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
VOP_LOCK(fffff8005cd95dd8,2001) at VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
vn_lock(fffff8005cd95dd8,2001) at vn_lock+0xa4 sys/kern/vfs_vnops.c:576
vfs_lookup(ffff80003c422730) at vfs_lookup+0x12b sys/kern/vfs_lookup.c:431
namei(ffff80003c422730) at namei+0x7c5 sys/kern/vfs_lookup.c:250
unp_connect(ffff80000166e918,fffff8006fd46400,ffff800045fe2558) at unp_connect+0x29d sys/kern/uipc_usrreq.c:872
uipc_dgram_send(ffff80000166e918,fffff8006f965700,fffff8006fd46400,0) at uipc_dgram_send+0x163 sys/kern/uipc_usrreq.c:609
sosend(ffff80000166e918,fffff8006fd46400,ffff80003c4229b8,0,0,c) at sosend+0x804 sys/kern/uipc_socket.c:-1
sendit(ffff800045fe2558,3,ffff80003c422b38,c,ffff80003c422bf0) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785
sys_sendmsg(ffff800045fe2558,ffff80003c422ca0,ffff80003c422bf0) at sys_sendmsg+0x246 sys/kern/uipc_syscalls.c:603
syscall(ffff80003c422ca0) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c422ca0) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xaee606d7640, count: -15

Crashes (19):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/26 07:54 openbsd 3505799fc8d8 6a91adb4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/25 15:39 openbsd 35698001175f a9a1fc32 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/23 16:32 openbsd 69b59cbe79d8 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/21 23:49 openbsd d8ab52b87c98 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/21 11:31 openbsd 073728865af4 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/20 16:24 openbsd 66ffe5599e58 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/20 06:53 openbsd 1a498b6f2b58 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/17 16:58 openbsd 3b8d610e537f 905244d6 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/17 01:16 openbsd ae3832a13713 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/15 09:17 openbsd a536f3ad0739 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/11 10:03 openbsd 99858244924d 557a89d3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/11 02:27 openbsd b56428e2942e 508909ea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: upageflttrap
2026/08/17 22:27 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba31e17d73ed 1e72964b .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/16 18:09 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan ba31e17d73ed 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/15 03:27 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan f02e55361321 746171ee .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/14 10:41 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 6f9b3e89 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/14 04:58 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/14 01:06 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan 3be50a05e816 b13552fe .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
2026/08/12 18:41 https://github.com/blackgnezdo/openbsd-src.git syzbot-kasan b7bfd6278925 ee03bfea .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-kasan uvm_fault: upageflttrap
* Struck through repros no longer work on HEAD.