uvm_fault(0xfffff7000b1f73d0, 0x100000010, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at amap_lookups+0x1e0: movl 0x10(%r12),%r14d
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*443942 4754 0 0x2 0 0 syz-executor
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:120 [inline]
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1170
uvm_fault_check(ffff80002a37de70,ffff80002a37dea8,ffff80002a37dee0,0) at uvm_fault_check+0x8d2 sys/uvm/uvm_fault.c:840
uvm_fault(fffff7000b1f73d0,487df638000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
upageflttrap(ffff80002a37e010,487df6387e0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff80002a37e010) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x753ff4dab900, count: 9
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffff7000b1f73d0, 0x100000010, 0, 1) -> e
ddb{0}> show kasan
No such command
ddb{0}> trace
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:120 [inline]
amap_lookups(fffff7006d7ebd30,17000,ffff80002a37dd70,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1170
uvm_fault_check(ffff80002a37de70,ffff80002a37dea8,ffff80002a37dee0,0) at uvm_fault_check+0x8d2 sys/uvm/uvm_fault.c:840
uvm_fault(fffff7000b1f73d0,487df638000,0,2) at uvm_fault+0x106 sys/uvm/uvm_fault.c:627
upageflttrap(ffff80002a37e010,487df6387e0) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:194
usertrap(ffff80002a37e010) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:648
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x753ff4dab900, count: -6
ddb{0}> show registers
rdi 0x11
rsi 0x40
rbp 0xffff80002a37dcc0
rbx 0x17
rdx 0
rcx 0x1
rax 0xffff80000159eb60
r8 0x487df638000
r9 0x487df638001
r10 0
r11 0x1b6482044e81af99
r12 0x100000000
r13 0x1
r14 0x40
r15 0x10
rip 0xffffffff8181ecf0 amap_lookups+0x1e0
cs 0x8
rflags 0x10202 __ALIGN_SIZE+0xf202
rsp 0xffff80002a37dc30
ss 0
amap_lookups+0x1e0: movl 0x10(%r12),%r14d
ddb{0}>