syzbot


uvm_fault: savectx (3)

Status: upstream: reported on 2025/02/20 07:12
Reported-by: syzbot+a67c3d29b86efeb5eed6@syzkaller.appspotmail.com
First crash: 448d, last: 1h36m
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: savectx -1 1 1266d 1266d 0/3 auto-obsoleted due to no activity on 2023/02/23 10:19
openbsd uvm_fault: savectx (2) -1 33 570d 657d 0/3 auto-obsoleted due to no activity on 2024/12/10 09:14

Sample crash report:
login: uvm_fault(0xfffffd806c6f87b8, 0x98, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff82587568 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff800039bb9730
gsbase 0xffff8000299adff0  kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff82587568
Starting stack trace...
panic(ffffffff83481399) at panic+0x1d0 sys/kern/subr_prf.c:229
kerntrap(ffff800039bb9680) at kerntrap+0x30b
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
dovutimens(ffff80003c3fda18,fffffd805fb9da28,ffff800039bb9840) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2771
sys_futimens(ffff80003c3fda18,ffff800039bb9990,ffff800039bb98e0) at sys_futimens+0xb3 sys/kern/vfs_syscalls.c:2847
syscall(ffff800039bb9990) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800039bb9990) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x79eb709d030, count: 250
End of stack trace.
WARNING: SPL NOT LOWERED ON SYSCALL 83 344831840 EXIT 0 4
Stopped at      savectx+0xae:   movl    $0,%gs:0x688
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*489604  49514      0           0  0x4000000    1  syz-executor
 273167  96953      0         0x2          0    0  syz-executor
savectx() at savectx+0xae
end of kernel
end trace frame: 0x9791e1eff70, count: 14
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> 

Crashes (2393):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/14 20:57 openbsd 9f6962b18ef0 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 17:47 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 15:42 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 14:41 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 13:37 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 12:31 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 12:05 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 10:34 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 08:17 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 06:16 openbsd 86898828a45d 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 04:53 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 03:44 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 02:20 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/14 01:14 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 23:45 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 22:00 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 20:35 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 19:29 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 17:22 openbsd ed5454cb43ec 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 15:01 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 13:54 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 12:12 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 10:49 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 09:50 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 08:05 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 06:11 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 04:27 openbsd 104c674285fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 03:04 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 01:37 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/13 00:14 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 22:21 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 20:39 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 19:29 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 18:00 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 16:19 openbsd 5e6d4834f229 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 13:39 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 12:16 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 11:12 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 09:35 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 09:16 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 06:49 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/12 05:20 openbsd 369ac04692fe 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
2026/05/02 19:39 openbsd 3c6f8ccfe730 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: savectx
2025/12/17 19:14 openbsd 9c2b8e445a0b a066d2bc .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-setuid uvm_fault: savectx
2025/02/20 07:11 openbsd 483a78e15aaa 50668798 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: savectx
* Struck through repros no longer work on HEAD.