login: uvm_fault(0xffffffff83a21568, 0xffff8000295c2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *268267 93988 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a7ef4b0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffb806d557d88,ffff80002a7ef538,fffffb8007ffd680,ffff80002a7ef57c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef6c0,ffff80002a7ef610) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3133 syscall(ffff80002a7ef6c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef6c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6faa7aa81eb0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a21568, 0xffff8000295c2004, 0, 1) -> d ddb> show kasan No such command ddb> trace ufs_readdir(ffff80002a7ef4b0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffb806d557d88,ffff80002a7ef538,fffffb8007ffd680,ffff80002a7ef57c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef6c0,ffff80002a7ef610) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3133 syscall(ffff80002a7ef6c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef6c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6faa7aa81eb0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a7ef4a0 rbx 0x200 rdx 0 rcx 0xfffffb806f8fe050 rax 0xffff8000295c2200 r8 0xffffffffffffffff r9 0x2 r10 0x9c786f249162fa70 r11 0x7d357e34b0266d6b r12 0 r13 0xffff80002a7ef538 r14 0xffff8000295c2000 r15 0xffff8000295c2008 rip 0xffffffff815fd3ae ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a7ef2f0 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=268267 pid=93988 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7674d0,0xffff80002a736fa8 process=0xffff80002a79d210 user=0xffff80002a7ea000, vmspace=0xfffffb8076a1eb88 estcpu=36, cpticks=10, pctcpu=0.0, user=1, sys=8, intr=1 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 42389 178818 1 0 3 0x100003 0x80 ttyin getty 7116 521526 0 0 3 0x14000 0x200 acct acct 88151 176775 0 0 3 0x14000 0x280 nfsidl nfsio 5475 137279 0 0 3 0x14000 0x280 nfsidl nfsio 45693 390657 0 0 3 0x14000 0x280 nfsidl nfsio 84532 187039 0 0 3 0x14000 0x280 nfsidl nfsio 3963 84437 0 0 3 0x14000 0x280 nfsidl nfsio 33827 335508 0 0 3 0x14000 0x280 nfsidl nfsio 7782 168559 0 0 3 0x14000 0x280 nfsidl nfsio 96466 163152 0 0 3 0x14000 0x280 nfsidl nfsio 56929 20652 0 0 3 0x14000 0x280 nfsidl nfsio 67452 81200 0 0 3 0x14000 0x280 nfsidl nfsio 74460 370147 0 0 3 0x14000 0x280 nfsidl nfsio 85549 237376 0 0 3 0x14000 0x280 nfsidl nfsio 59432 103109 0 0 3 0x14000 0x280 nfsidl nfsio 12960 465758 0 0 3 0x14000 0x280 nfsidl nfsio 51699 369517 0 0 3 0x14000 0x280 nfsidl nfsio 83430 66525 0 0 3 0x14000 0x280 nfsidl nfsio 27403 393626 0 0 3 0x14000 0x280 nfsidl nfsio 40675 257026 0 0 3 0x14000 0x280 nfsidl nfsio 45388 90823 0 0 3 0x14000 0x280 nfsidl nfsio 27789 309891 0 0 3 0x14000 0x280 nfsidl nfsio *93988 268267 2796 0 7 0x2 0 syz-executor