uvm_fault(0xfffffd806c2725b0, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at _copyin+0x62: repe movsl (%rsi),%es:(%rdi)
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*249164 41607 0 0 0x4000000 0 syz-executor
_copyin() at _copyin+0x62
syscall(ffff80003c96dd80) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c96dd80) at syscall+0x97e sys/arch/amd64/amd64/trap.c:637
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2b0d826faa0, count: 12
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb>
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xfffffd806c2725b0, 0x0, 0, 1) -> e
ddb> trace
_copyin() at _copyin+0x62
syscall(ffff80003c96dd80) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c96dd80) at syscall+0x97e sys/arch/amd64/amd64/trap.c:637
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2b0d826faa0, count: -3
ddb> show registers
rdi 0xffff80003c96dba0
rsi 0
rbp 0xffff80003c96dca0
rbx 0xffff80003c96dd80
rdx 0x4
rcx 0x1
rax 0x4
r8 0x7f7fffffc000
r9 0x1
r10 0x2186b82f9507c693
r11 0xffffffff82fabe00 copy_fault
r12 0xffff80003c96dba0
r13 0x4
r14 0
r15 0xfffffd8066312b40
rip 0xffffffff82fabdc2 _copyin+0x62
cs 0x8
rflags 0x50202 acpi_pdirpa+0x3c073
rsp 0xffff80003c96db90
ss 0x10
_copyin+0x62: repe movsl (%rsi),%es:(%rdi)
ddb> show proc
PROC (syz-executor) tid=249164 pid=41607 tcnt=2 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=50, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80002a7e2f78,0xffffffff83962ae8
process=0xffff800036d14db0 user=0xffff80003c968000, vmspace=0xfffffd806c2725b0
estcpu=5, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0
ddb> ps
PID TID PPID UID S FLAGS WAIT COMMAND
41607 110590 87101 0 2 0 syz-executor
*41607 249164 87101 0 7 0x4000000 syz-executor
71584 460890 62723 0 2 0 syz-executor
71584 216314 62723 0 3 0x4000080 ttyout syz-executor
24157 267943 70552 0 2 0 syz-executor
24157 502765 70552 0 3 0x4000080 sbwait syz-executor
24157 143120 70552 0 3 0x4000080 fsleep syz-executor
55609 82531 65460 0 3 0x80 nanoslp syz-executor
55609 209256 65460 0 2 0x4000000 syz-executor
55609 317836 65460 0 3 0x4000080 fsleep syz-executor
55609 282564 65460 0 3 0x4000080 fsleep syz-executor
15161 71858 0 0 3 0x14200 bored sosplice
95621 475263 58106 0 2 0xc80 syz-executor
95621 432362 58106 0 3 0x4000080 ttyin syz-executor
95621 300810 58106 0 3 0x4000080 fsleep syz-executor
69008 111581 13411 0 3 0x82 sbwait sshd-session
58106 56010 54376 0 2 0xc82 syz-executor
30676 275228 54376 0 2 0x2 syz-executor
70552 12718 54376 0 2 0xc82 syz-executor
62723 351754 54376 0 3 0x82 nanoslp syz-executor
37134 455186 54376 0 2 0xc82 syz-executor
65460 242306 54376 0 3 0x82 nanoslp syz-executor
87101 503581 54376 0 2 0xc82 syz-executor
27324 444857 54376 0 2 0xc82 syz-executor
54376 409378 51779 0 3 0x82 kqread syz-executor
51779 261280 54757 0 3 0x10008a sigsusp ksh
54757 510954 77847 0 3 0x98 kqread sshd-session
77847 57341 13411 0 3 0x92 kqread sshd-session
73820 504924 1 0 3 0x100083 ttyin getty
13411 278190 1 0 3 0x88 kqread sshd
573 368376 40819 73 3 0x1100090 kqread syslogd
40819 414523 1 0 3 0x100082 sbwait syslogd
92110 358006 1 0 3 0x100080 kqread resolvd
76953 482772 42689 77 3 0x100092 kqread dhcpleased
96969 48097 42689 77 3 0x100092 kqread dhcpleased
42689 153423 1 0 3 0x80 kqread dhcpleased
88587 161307 0 0 3 0x14200 bored smr
85212 83071 0 0 2 0x14200 zerothread
24500 428462 0 0 3 0x14200 aiodoned aiodoned
6971 103551 0 0 3 0x14200 syncer update
49866 80556 0 0 3 0x14200 cleaner cleaner
77763 221088 0 0 3 0x14200 reaper reaper
81092 174035 0 0 3 0x14200 pgdaemon pagedaemon
88633 319434 0 0 3 0x14200 bored viomb
30125 296516 0 0 3 0x40014200 acpi0 acpi0
2732 502095 0 0 3 0x14200 bored softnet3
50248 444980 0 0 3 0x14200 bored softnet2
66590 244401 0 0 3 0x14200 bored softnet1
10416 489719 0 0 3 0x14200 bored softnet0
17860 202889 0 0 3 0x14200 bored systqmp
66959 68282 0 0 3 0x14200 bored systq
58666 331565 0 0 3 0x40014200 tmoslp softclock
97787 360078 0 0 3 0x40014200 idle0
1 261056 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb> show all locks
No such command
ddb> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 10192 11092K 11253K 166960K 11351 0
pcb 18 12K 12K 166960K 31 0
rtable 238 7K 7K 166960K 355 0
pf 31 13K 14K 166960K 40 0
ifaddr 42 7K 7K 166960K 46 0
ifgroup 50 2K 2K 166960K 54 0
sysctl 1 1K 9K 166960K 5 0
counters 32 17K 18K 166960K 102 0
ioctlops 0 0K 4K 166960K 107 0
iov 0 0K 4K 166960K 5 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1352 85K 85K 166960K 1409 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 4 0
VM map 2 1K 1K 166960K 2 0
sem 5 0K 0K 166960K 5 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 17 61K 97K 166960K 208 0
sigio 0 0K 0K 166960K 3 0
proc 63 67K 116K 166960K 483 0
subproc 72 4K 4K 166960K 74 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 9 0
in_multi 99 7K 7K 166960K 105 0
ether_multi 1 0K 0K 166960K 2 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 91 413K 413K 166960K 91 0
exec 0 0K 1K 166960K 354 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 241 172K 181K 166960K 3445 0
UVM aobj 4 2K 2K 166960K 5 0
pinsyscall 40 80K 96K 166960K 1230 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 0K 166960K 4 0
NDP 11 0K 2K 166960K 29 0
temp 37 8678K 8742K 166960K 3987 0
kqueue 14 22K 26K 166960K 32 0
SYN cache 2 16K 16K 166960K 2 0
ddb> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb 120 42 0 39 1 0 1 1 0 8 0
rtentry 136 111 0 1 4 0 4 4 0 8 0
unpcb 144 55 0 36 1 0 1 1 0 8 0
syncache 336 7 0 7 1 0 1 1 0 8 1
tcpcb 736 35 0 28 2 0 2 2 0 8 1
arp 88 18 0 0 1 0 1 1 0 8 0
inpcb 328 156 0 144 2 0 2 2 0 8 0
ip6q 72 3 0 1 1 0 1 1 0 8 0
ip6af 40 3 0 2 1 0 1 1 0 8 0
nd6 104 24 0 0 1 0 1 1 0 8 0
kcovpl 48 8 0 0 1 0 1 1 0 8 0
ppxss 1072 70 0 70 1 0 1 1 0 8 1
pfstkey 128 2 0 2 1 0 1 1 0 8 1
pfstate 384 1 0 1 1 0 1 1 0 8 1
pfrule 1344 1 0 1 1 0 1 1 0 8 1
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 452 0 0 29 0 29 29 0 8 0
art_table 32 453 0 0 4 0 4 4 0 8 0
art_node 16 110 0 10 1 0 1 1 0 8 0
semapl 112 3 0 0 1 0 1 1 0 8 0
shmpl 112 2 0 1 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1667 0 160 95 0 95 95 0 8 0
ffsino 248 1667 0 160 95 0 95 95 0 8 0
nchpl 144 1948 0 264 63 0 63 63 0 8 0
uvmvnodes 80 1783 0 0 37 0 37 37 0 8 0
vnodes 216 1783 0 0 100 0 100 100 0 8 0
namei 1024 5731 0 5731 2 0 2 2 0 8 2
kstatmem 264 26 0 4 2 0 2 2 0 8 0
scxspl 216 6150 0 6150 2 0 2 2 1 8 2
plimitpl 152 39 0 21 1 0 1 1 0 8 0
sigapl 424 485 0 438 7 0 7 7 0 8 1
knotepl 120 11412 0 11136 9 0 9 9 0 8 0
kqueuepl 184 72 0 29 3 0 3 3 0 8 0
pipepl 296 105 0 78 3 0 3 3 0 8 0
fdescpl 440 468 0 438 5 0 5 5 0 8 1
filepl 120 1724 0 1466 9 0 9 9 0 8 0
lockfpl 104 32 0 30 1 0 1 1 0 8 0
lockfspl 48 16 0 14 1 0 1 1 0 8 0
sessionpl 144 23 0 14 1 0 1 1 0 8 0
pgrppl 48 32 0 15 1 0 1 1 0 8 0
ucredpl 104 139 0 128 1 0 1 1 0 8 0
zombiepl 144 440 0 438 1 0 1 1 0 8 0
processpl 1160 485 0 438 4 0 4 4 0 8 0
procpl 656 597 0 541 6 0 6 6 0 8 1
sockpl 528 253 0 219 3 0 3 3 0 8 0
mcl64k 65536 9 0 9 1 0 1 1 0 8 1
mcl16k 16384 1 0 1 1 0 1 1 0 8 1
mcl12k 12288 1 0 1 1 0 1 1 0 8 1
mcl8k 8192 5 0 5 1 0 1 1 0 8 1
mcl4k 4096 2493 0 2439 15 0 15 15 0 8 7
mcl2k 2048 205 0 203 1 0 1 1 0 8 0
mtagpl 96 5 0 4 1 0 1 1 0 8 0
mbufpl 256 4767 0 4613 16 0 16 16 0 8 6
bufpl 280 2374 0 114 162 0 162 162 0 8 0
anonpl 24 111444 0 108079 44 0 44 44 0 187 22
amapchunkpl 152 10332 0 9830 27 0 27 27 0 158 6
amappl16 200 2326 0 2306 14 4 10 14 0 8 8
amappl15 192 6 0 6 1 0 1 1 0 8 1
amappl14 184 105 0 94 1 0 1 1 0 8 0
amappl13 176 9 0 9 1 0 1 1 0 8 1
amappl12 168 1075 0 1045 3 0 3 3 0 8 1
amappl11 160 43 0 33 1 0 1 1 0 8 0
amappl10 152 2 0 2 1 0 1 1 0 8 1
amappl9 144 262 0 262 1 0 1 1 0 8 1
amappl8 136 43 0 42 1 0 1 1 0 8 0
amappl7 128 108 0 96 1 0 1 1 0 8 0
amappl6 120 168 0 164 1 0 1 1 0 8 0
amappl5 112 116 0 110 1 0 1 1 0 8 0
amappl4 104 286 0 272 1 0 1 1 0 8 0
amappl3 96 1652 0 1541 3 0 3 3 0 8 0
amappl2 88 615 0 552 2 0 2 2 0 8 0
amappl1 80 8439 0 7799 15 0 15 15 0 8 0
amappl 88 2799 0 2628 4 0 4 4 0 92 0
dma4096 4096 1 0 1 1 0 1 1 0 8 1
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 0 1 1 0 8 1
dma128 128 253 0 253 1 0 1 1 0 8 1
dma64 64 6 0 6 1 0 1 1 0 8 1
dma32 32 7 0 7 1 0 1 1 0 8 1
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 4 0 1 1 0 1 1 0 8 0
uaddrrnd 24 468 0 438 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 468 0 438 1 0 1 1 0 8 0
vmmpekpl 168 5487 0 5455 2 0 2 2 0 8 0
vmmpepl 168 37116 0 35140 94 0 94 94 0 357 5
vmsppl 360 467 0 438 4 0 4 4 0 8 1
rwobjpl 32 15136 0 12404 23 0 23 23 0 8 0
pdppl 4096 943 0 876 97 26 71 83 0 8 4
pvpl 32 244002 0 234462 112 0 112 112 0 265 32
pmappl 216 467 0 438 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 268 0 26 8 0 8 8 0 8 0
ddb> machine ddbcpu 0
No such command
ddb> trace
_copyin() at _copyin+0x62
syscall(ffff80003c96dd80) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c96dd80) at syscall+0x97e sys/arch/amd64/amd64/trap.c:637
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2b0d826faa0, count: -3
ddb> machine ddbcpu 1
No such command
ddb> trace
_copyin() at _copyin+0x62
syscall(ffff80003c96dd80) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80003c96dd80) at syscall+0x97e sys/arch/amd64/amd64/trap.c:637
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2b0d826faa0, count: -3