kern.securelevel: 0 -> 1
creating runtime link editor directory cache.
preserving editor files.
starting network daemons: sshd.
starting local daemons:.
Wed Dec 26 22:26:38 PST 2018

OpenBSD/amd64 (ci-openbsd-main-5.c.syzkaller.internal) (tty00)

Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts.
2018/12/26 22:27:00 parsed 1 programs
2018/12/26 22:27:03 executed programs: 0
login: uvm_fault(0xffffff003f12ca50, 0x6000100, 0, 1) -> e

kernel: page fault trap, code=0

Stopped at      switchwrite+0x98:       movq    0(%r13),%rbx

ddb> 

ddb> set $lines = 0

ddb> show panic

kernel page fault

uvm_fault(0xffffff003f12ca50, 0x6000100, 0, 1) -> e

switchwrite(ffffff0037c07360,ffffff0037c07360,ffff800014ad6268) at switchwrite+0x98

end trace frame: 0xffff800014ad6140, count: 0

ddb> trace

switchwrite(ffffff0037c07360,ffffff0037c07360,ffff800014ad6268) at switchwrite+0x98

spec_write(ffffffff81e38cc0) at spec_write+0xa0

VOP_WRITE(82,ffffff0037c07360,1,ffff800014ad6268) at VOP_WRITE+0x65

vn_write(ffffff0037690960,ffff800014ad6268,82) at vn_write+0x127

dofilewritev(ffff8000ffffc710,ffff800014ad6310,82,ffff800014ad6328,806c53c9e38) at dofilewritev+0x13e

sys_write(ffff800014ad63b0,ffff8000ffffc710,ffff800014a15660) at sys_write+0x6e

syscall(0) at syscall+0x3e4

Xsyscall(6,0,c,0,3,80490192010) at Xsyscall+0x128

end of kernel

end trace frame: 0x806c53c9ec0, count: -8

ddb> show registers

rdi               0xffffffff81e043a8    switch_ifs_lk

rsi               0xffff800014ad6268

rbp               0xffff800014ad60c0

rbx                        0x6000100    __kernel_end_phys+0x4000100

rdx                              0x1

rcx                           0x2158    __ALIGN_SIZE+0x1158

rax                              0x8

r8                0xffff800014ad6310

r9                                 0

r10                                0

r11               0xffffffff815244d0    switchwrite

r12                             0x82

r13                        0x6000100    __kernel_end_phys+0x4000100

r14               0xffff800000adc900

r15               0xffff800014ad6268

rip               0xffffffff81524568    switchwrite+0x98

cs                               0x8

rflags                       0x10202    __ALIGN_SIZE+0xf202

rsp               0xffff800014ad6060

ss                              0x10

switchwrite+0x98:       movq    0(%r13),%rbx

ddb>