uvm_fault(0xffffffff83a01cb8, 0xffff800029ef5000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pvclock_get+0x53: movl 0(%r15),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *456772 59701 0 0 0x4000000 0 syz-executor pvclock_get(ffffffff83849610) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline] pvclock_get(ffffffff83849610) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333 nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline] nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline] nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257 clockintr_dispatch(ffff8000314cb5f0) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180 lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a uvm_objtree_RBT_COMPARE(ffffffff834e3ed8,fffffd80636f00f8) at uvm_objtree_RBT_COMPARE+0x7b sys/uvm/uvm_page.c:82 uvm_pagelookup(fffffd80636f00e8,1c3000) at uvm_pagelookup+0x51 uvm_objtree_RBT_FIND sys/uvm/uvm_object.h:93 [inline] uvm_pagelookup(fffffd80636f00e8,1c3000) at uvm_pagelookup+0x51 sys/uvm/uvm_page.c:1214 buf_free_pages(fffffd80636f0028) at buf_free_pages+0xec sys/kern/vfs_biomem.c:-1 buf_dealloc_mem(fffffd80636f0028) at buf_dealloc_mem+0x14e sys/kern/vfs_biomem.c:179 buf_put(fffffd80636f0028) at buf_put+0x1d9 sys/kern/vfs_bio.c:123 brelse(fffffd80636f0028) at brelse+0x397 sys/kern/vfs_bio.c:932 writedisklabel(d02,ffffffff810d5ba0,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158 sdioctl(d02,84946467,ffff800001587000,3,ffff80002a747230) at sdioctl+0x959 sys/scsi/sd.c:921 VOP_IOCTL(fffffd806f3d4e58,84946467,ffff800001587000,3,fffffd8007ffd8f0,ffff80002a747230) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264 end trace frame: 0xffff8000314cbba0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a01cb8, 0xffff800029ef5000, 0, 1) -> e ddb> trace pvclock_get(ffffffff83849610) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline] pvclock_get(ffffffff83849610) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333 nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline] nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline] nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257 clockintr_dispatch(ffff8000314cb5f0) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180 lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a uvm_objtree_RBT_COMPARE(ffffffff834e3ed8,fffffd80636f00f8) at uvm_objtree_RBT_COMPARE+0x7b sys/uvm/uvm_page.c:82 uvm_pagelookup(fffffd80636f00e8,1c3000) at uvm_pagelookup+0x51 uvm_objtree_RBT_FIND sys/uvm/uvm_object.h:93 [inline] uvm_pagelookup(fffffd80636f00e8,1c3000) at uvm_pagelookup+0x51 sys/uvm/uvm_page.c:1214 buf_free_pages(fffffd80636f0028) at buf_free_pages+0xec sys/kern/vfs_biomem.c:-1 buf_dealloc_mem(fffffd80636f0028) at buf_dealloc_mem+0x14e sys/kern/vfs_biomem.c:179 buf_put(fffffd80636f0028) at buf_put+0x1d9 sys/kern/vfs_bio.c:123 brelse(fffffd80636f0028) at brelse+0x397 sys/kern/vfs_bio.c:932 writedisklabel(d02,ffffffff810d5ba0,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158 sdioctl(d02,84946467,ffff800001587000,3,ffff80002a747230) at sdioctl+0x959 sys/scsi/sd.c:921 VOP_IOCTL(fffffd806f3d4e58,84946467,ffff800001587000,3,fffffd8007ffd8f0,ffff80002a747230) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd806cb0fbd0,84946467,ffff800001587000,ffff80002a747230) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537 sys_ioctl(ffff80002a747230,ffff8000314cbd80,ffff8000314cbcd0) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff8000314cbd80) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000314cbd80) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6a9ff28e7d0, count: -18 ddb> show registers rdi 0xffffffff rsi 0xd rbp 0xffff8000314cb4e0 rbx 0x3 rdx 0xffff8000015ac080 rcx 0 rax 0xc r8 0 r9 0 r10 0 r11 0x756c202170ebde30 r12 0xd36 r13 0xffffffff83921258 th1 r14 0xffffffff83849610 pvclock_timecounter r15 0xffff800029ef5000 rip 0xffffffff81664863 pvclock_get+0x53 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000314cb490 ss 0x10 pvclock_get+0x53: movl 0(%r15),%r12d ddb> show proc PROC (syz-executor) tid=456772 pid=59701 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a746a68,0xffff80002a7467e0 process=0xffff80003c91db20 user=0xffff8000314c6000, vmspace=0xfffffd806cb315d0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 7175 215905 36499 0 2 0 syz-executor 7175 369383 36499 0 3 0x4000080 fsleep syz-executor 59701 95455 21280 0 2 0 syz-executor *59701 456772 21280 0 7 0x4000000 syz-executor 8461 245947 18422 0 3 0x80 nanoslp syz-executor 8461 265617 18422 0 3 0x4000000 smrbar syz-executor 7080 346054 49502 0 2 0 syz-executor 7080 220351 49502 0 3 0x4000080 pipewr syz-executor 98423 211016 15932 0 3 0x80 nanoslp syz-executor 98423 47018 15932 0 3 0x4000080 sbwait syz-executor 98423 140770 15932 0 3 0x4000080 fsleep syz-executor 42062 52148 0 0 3 0x14200 acct acct 68492 283495 3825 0 2 0x2 syz-executor 36499 234850 3825 0 3 0x82 nanoslp syz-executor 18422 208337 3825 0 3 0x82 nanoslp syz-executor 49502 404231 3825 0 3 0x82 nanoslp syz-executor 35882 212820 3825 0 3 0x82 nanoslp syz-executor 15932 499388 3825 0 3 0x82 nanoslp syz-executor 50764 419145 3825 0 3 0x82 nanoslp syz-executor 21280 38732 3825 0 3 0x82 nanoslp syz-executor 3825 140989 1 0 3 0x82 kqread syz-executor 24093 472705 0 0 3 0x14200 bored smr 68048 395715 0 0 2 0x14200 zerothread 76633 71737 0 0 3 0x14200 aiodoned aiodoned 34722 302831 0 0 3 0x14200 syncer update 9803 237036 0 0 3 0x14200 cleaner cleaner 92603 227085 0 0 3 0x14200 reaper reaper 30788 511185 0 0 3 0x14200 pgdaemon pagedaemon 52883 242932 0 0 3 0x14200 bored viomb 18551 418898 0 0 3 0x40014200 acpi0 acpi0 53857 272865 0 0 3 0x14200 bored softnet0 50427 227329 0 0 3 0x14200 bored systqmp 23871 134257 0 0 3 0x14200 bored systq 21938 511047 0 0 3 0x40014200 tmoslp softclock 83002 244194 0 0 3 0x40014200 idle0 1 12364 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11032 12129K 12316K 166960K 12575 0 pcb 18 12K 12K 166960K 52 0 rtable 211 7K 7K 166960K 385 0 pf 29 13K 18K 166960K 55 0 ifaddr 34 6K 7K 166960K 52 0 ifgroup 42 1K 2K 166960K 65 0 sysctl 1 1K 9K 166960K 6 0 counters 31 17K 17K 166960K 42 0 ioctlops 1 2K 4K 166960K 205 0 iov 0 0K 12K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1543 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 1K 166960K 17 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 61K 97K 166960K 321 0 sigio 0 0K 0K 166960K 3 0 proc 14 25K 124K 166960K 514 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 25 0 in_multi 77 5K 7K 166960K 107 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 7 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 421 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 132 78K 172K 166960K 4586 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 17 34K 96K 166960K 1432 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 9 0K 2K 166960K 33 0 temp 44 9068K 9168K 166960K 9498 0 kqueue 3 6K 30K 166960K 72 0 SYN cache 2 16K 16K 166960K 2 0 ddb>