Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program vnd0: sloppy read from proc 7258 (syz-executor121655267): blkno 64 bcount 2048 vnd0: sloppy read from proc 7258 (syz-executor121655267): blkno 1024 bcount 2048 uvm_fault(0xffffffff82e86fb0, 0xffff80001c862000, 0, 2) -> d kernel: page fault trap, code=2 Stopped at memset+0x52: repe stosq %es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND *365957 54393 0 0 0 0 syz-executor121655267 memset() at memset+0x52 VOP_WRITE(fffffd806d6da008,ffff80002a68b7b0,5,fffffd807f7d78f0) at VOP_WRITE+0xc3 vn_write(fffffd806f97d690,ffff80002a68b7b0,1) at vn_write+0x1a0 dofilewritev(ffff80002a5f7558,3,ffff80002a68b7b0,1,ffff80002a68b870) at dofilewritev+0x1a0 sys_pwritev(ffff80002a5f7558,ffff80002a68b920,ffff80002a68b870) at sys_pwritev+0xb6 syscall(ffff80002a68b920) at syscall+0x751 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d8ea6d887d0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff82e86fb0, 0xffff80001c862000, 0, 2) -> d ddb> trace memset() at memset+0x52 VOP_WRITE(fffffd806d6da008,ffff80002a68b7b0,5,fffffd807f7d78f0) at VOP_WRITE+0xc3 vn_write(fffffd806f97d690,ffff80002a68b7b0,1) at vn_write+0x1a0 dofilewritev(ffff80002a5f7558,3,ffff80002a68b7b0,1,ffff80002a68b870) at dofilewritev+0x1a0 sys_pwritev(ffff80002a5f7558,ffff80002a68b920,ffff80002a68b870) at sys_pwritev+0xb6 syscall(ffff80002a68b920) at syscall+0x751 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d8ea6d887d0, count: -7 ddb> show registers rdi 0xffff80001c862000 rsi 0 rbp 0xffff80002a68b580 rbx 0xe rdx 0 rcx 0x800 rax 0 r8 0x4000 __ALIGN_SIZE+0x3000 r9 0xffff80002a68b4f8 r10 0x5a499870ce4eed5 r11 0xffff80001c862000 r12 0x4000 __ALIGN_SIZE+0x3000 r13 0x4000 __ALIGN_SIZE+0x3000 r14 0xffff80001c862000 r15 0x4000 __ALIGN_SIZE+0x3000 rip 0xffffffff811e0032 memset+0x52 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80002a68b4b8 ss 0x10 memset+0x52: repe stosq %es:(%rdi) ddb> show proc PROC (syz-executor121655267) tid=365957 pid=54393 tcnt=1 stat=onproc flags process=0 proc=0 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a5f62c0,0xffff80002a5f6d70 process=0xffff80002a603ab8 user=0xffff80002a686000, vmspace=0xfffffd806d3719b0 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 24146 407532 12941 0 2 0 syz-executor121655267 4342 404944 97765 0 2 0 syz-executor121655267 39702 381700 39039 0 2 0 syz-executor121655267 75804 85728 12947 0 2 0 syz-executor121655267 16741 262755 5155 0 2 0 syz-executor121655267 *54393 365957 4816 0 7 0 syz-executor121655267 92851 429543 39930 0 2 0x80 syz-executor121655267 7258 408804 58342 0 2 0 syz-executor121655267 39930 468160 25315 0 2 0x480 syz-executor121655267 12941 236357 25315 0 2 0x480 syz-executor121655267 39039 124797 25315 0 2 0x480 syz-executor121655267 12947 76338 25315 0 2 0x480 syz-executor121655267 5155 397553 25315 0 2 0x480 syz-executor121655267 97765 518388 25315 0 2 0x480 syz-executor121655267 4816 276905 25315 0 2 0x480 syz-executor121655267 58342 253635 25315 0 2 0x480 syz-executor121655267 25315 282748 92512 0 3 0x82 nanoslp syz-executor121655267 92512 285573 19003 0 3 0x10008a sigsusp ksh 19003 304151 6922 0 3 0x9a kqread sshd 96559 51111 1 0 3 0x100083 ttyin getty 6922 467035 1 0 3 0x88 kqread sshd 12968 315655 93933 73 2 0x1100010 syslogd 93933 47088 1 0 3 0x100082 netio syslogd 61909 298144 1 0 3 0x100080 kqread resolvd 87575 522683 84825 77 3 0x100092 kqread dhcpleased 51482 524267 84825 77 3 0x100092 kqread dhcpleased 84825 446059 1 0 3 0x80 kqread dhcpleased 79596 368776 0 0 3 0x14200 bored smr 79996 487569 0 0 2 0x14200 zerothread 24142 330469 0 0 3 0x14200 aiodoned aiodoned 45677 69759 0 0 3 0x14200 syncer update 2148 437357 0 0 3 0x14200 cleaner cleaner 6284 376218 0 0 3 0x14200 reaper reaper 2552 292838 0 0 3 0x14200 pgdaemon pagedaemon 37587 302027 0 0 3 0x14200 bored viomb 23865 7012 0 0 3 0x40014200 acpi0 acpi0 85646 198265 0 0 3 0x14200 bored softnet3 90650 127883 0 0 3 0x14200 bored softnet2 60692 473758 0 0 3 0x14200 bored softnet1 51939 359195 0 0 2 0x14200 softnet0 39771 324456 0 0 3 0x14200 bored systqmp 70512 399103 0 0 3 0x14200 bored systq 56886 374886 0 0 3 0x40014200 tmoslp softclock 18589 488195 0 0 3 0x40014200 idle0 1 376423 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10138 6382K 6413K 166960K 11216 0 pcb 15 10K 10K 166960K 15 0 rtable 58 1K 2K 166960K 110 0 pf 12 6K 6K 166960K 12 0 ifaddr 11 5K 5K 166960K 11 0 ifgroup 17 1K 1K 166960K 17 0 counters 22 16K 16K 166960K 22 0 ioctlops 0 0K 2K 166960K 21 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1174 73K 74K 166960K 1188 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 1 0K 0K 166960K 1 0 proc 55 58K 59K 166960K 246 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 11 0K 0K 166960K 11 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 243 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 101 6K 6K 166960K 2190 0 UVM aobj 3 2K 2K 166960K 3 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 3 0K 0K 166960K 3 0 temp 1 6748K 6812K 166960K 2780 0 kqueue 11 16K 18K 166960K 24 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpqe 32 134 0 134 1 0 1 1 0 8 1 tcpcb 808 8 0 5 1 0 1 1 0 8 0 arp 88 2 0 0 1 0 1 1 0 8 0 inpcb 360 26 0 20 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 96 0 0 6 0 6 6 0 8 0 art_table 32 97 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1423 0 37 87 0 87 87 0 8 0 ffsino 240 1423 0 37 82 0 82 82 0 8 0 nchpl 144 1607 0 47 58 0 58 58 0 8 0 uvmvnodes 80 1433 0 0 30 0 30 30 0 8 0 vnodes 216 1433 0 0 80 0 80 80 0 8 0 namei 1024 4281 0 4277 2 0 2 2 0 8 1 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 5790 0 5790 3 0 3 3 1 8 3 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 330 0 285 6 0 6 6 0 8 0 knotepl 120 3612 0 3583 2 0 2 2 0 8 1 kqueuepl 184 20 0 13 1 0 1 1 0 8 0 pipepl 288 87 0 84 1 0 1 1 0 8 0 fdescpl 432 314 0 285 4 0 4 4 0 8 0 filepl 120 1148 0 1085 2 0 2 2 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 68 0 57 1 0 1 1 0 8 0 zombiepl 144 285 0 285 1 0 1 1 0 8 1 processpl 1072 330 0 285 4 0 4 4 0 8 0 procpl 680 330 0 285 4 0 4 4 0 8 0 sockpl 488 79 0 57 3 0 3 3 0 8 0 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 10 0 10 1 0 1 1 0 8 1 mcl2k 2048 12115 0 12075 28 15 13 28 0 8 7 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 19489 0 19444 15 3 12 15 0 8 7 bufpl 280 2885 0 87 200 0 200 200 0 8 0 anonpl 24 177466 0 175127 24 0 24 24 0 188 6 amapchunkpl 152 8174 0 8027 7 0 7 7 0 158 1 amappl16 200 5237 0 5199 5 0 5 5 0 8 1 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 105 0 96 1 0 1 1 0 8 0 amappl13 176 8 0 7 1 0 1 1 0 8 0 amappl12 168 792 0 780 1 0 1 1 0 8 0 amappl11 160 60 0 50 1 0 1 1 0 8 0 amappl10 152 16 0 16 1 0 1 1 0 8 1 amappl9 144 101 0 101 1 0 1 1 0 8 1 amappl8 136 69 0 67 1 0 1 1 0 8 0 amappl7 128 93 0 82 1 0 1 1 0 8 0 amappl6 120 133 0 128 1 0 1 1 0 8 0 amappl5 112 96 0 88 1 0 1 1 0 8 0 amappl4 104 333 0 307 1 0 1 1 0 8 0 amappl3 96 2441 0 2411 1 0 1 1 0 8 0 amappl2 88 647 0 595 2 0 2 2 0 8 0 amappl1 80 8901 0 8462 11 0 11 11 0 8 1 amappl 88 1919 0 1856 2 0 2 2 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 314 0 285 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 314 0 285 1 0 1 1 0 8 0 vmmpekpl 168 6845 0 6826 1 0 1 1 0 8 0 vmmpepl 168 34826 0 33641 54 0 54 54 0 357 1 vmsppl 352 313 0 285 3 0 3 3 0 8 0 rwobjpl 24 18801 0 16716 14 0 14 14 0 8 1 pdppl 4096 634 0 570 78 14 64 64 0 8 0 pvpl 32 272208 0 267316 52 0 52 52 0 265 10 pmappl 216 313 0 285 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 314 0 32 9 0 9 9 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace memset() at memset+0x52 VOP_WRITE(fffffd806d6da008,ffff80002a68b7b0,5,fffffd807f7d78f0) at VOP_WRITE+0xc3 vn_write(fffffd806f97d690,ffff80002a68b7b0,1) at vn_write+0x1a0 dofilewritev(ffff80002a5f7558,3,ffff80002a68b7b0,1,ffff80002a68b870) at dofilewritev+0x1a0 sys_pwritev(ffff80002a5f7558,ffff80002a68b920,ffff80002a68b870) at sys_pwritev+0xb6 syscall(ffff80002a68b920) at syscall+0x751 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d8ea6d887d0, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace memset() at memset+0x52 VOP_WRITE(fffffd806d6da008,ffff80002a68b7b0,5,fffffd807f7d78f0) at VOP_WRITE+0xc3 vn_write(fffffd806f97d690,ffff80002a68b7b0,1) at vn_write+0x1a0 dofilewritev(ffff80002a5f7558,3,ffff80002a68b7b0,1,ffff80002a68b870) at dofilewritev+0x1a0 sys_pwritev(ffff80002a5f7558,ffff80002a68b920,ffff80002a68b870) at sys_pwritev+0xb6 syscall(ffff80002a68b920) at syscall+0x751 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d8ea6d887d0, count: -7