uvm_fault(0xffffffff83a55168, 0xffff800028c42004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *515945 17216 0 0 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(ffffee007783b028,ffff80003c92f9a0,ffff80003c92f9d0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003c92f970) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80003c92f970) at namei+0x7c3 sys/kern/vfs_lookup.c:250 vn_open(ffff80003c92f970,8001,0) at vn_open+0x178 sys/kern/vfs_vnops.c:146 doopenat(ffff8000310b0548,ffffff9c,200000000800,8000,0,0,4a02d46ceb3d8de3) at doopenat+0x352 sys/kern/vfs_syscalls.c:1163 sys_open(ffff8000310b0548,ffff80003c92fc10,ffff80003c92fb60) at sys_open+0x59 sys/kern/vfs_syscalls.c:1065 syscall(ffff80003c92fc10) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c92fc10) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe7f91622c70, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a55168, 0xffff800028c42004, 0, 1) -> d ddb> show kasan No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(ffffee007783b028,ffff80003c92f9a0,ffff80003c92f9d0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003c92f970) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80003c92f970) at namei+0x7c3 sys/kern/vfs_lookup.c:250 vn_open(ffff80003c92f970,8001,0) at vn_open+0x178 sys/kern/vfs_vnops.c:146 doopenat(ffff8000310b0548,ffffff9c,200000000800,8000,0,0,4a02d46ceb3d8de3) at doopenat+0x352 sys/kern/vfs_syscalls.c:1163 sys_open(ffff8000310b0548,ffff80003c92fc10,ffff80003c92fb60) at sys_open+0x59 sys/kern/vfs_syscalls.c:1065 syscall(ffff80003c92fc10) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c92fc10) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe7f91622c70, count: -9 ddb> show registers rdi 0 rsi 0x2 rbp 0xffff80003c92f5d0 rbx 0 rdx 0xffff8000015baac0 rcx 0xffffffff rax 0xffff8000310b0548 r8 0xffffffffffffffff r9 0xffffee0007ffd4e0 r10 0x986c4dc200399d16 r11 0x9ee199d5404b4065 r12 0xffffee0062c19338 r13 0 r14 0 r15 0xffff800028c42000 rip 0xffffffff83045353 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c92f4e0 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=515945 pid=17216 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=79, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7367d0,0xffff8000310b0fb8 process=0xffff800045ff9698 user=0xffff80003c92a000, vmspace=0xffffee006d19f8b0 estcpu=29, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 2456 503886 84776 0 2 0 0 syz-executor 2456 466091 84776 0 3 0 0x4000080 fsleep syz-executor 2456 420772 84776 0 3 0 0x4000080 fsleep syz-executor 17216 137452 65555 0 2 0 0 syz-executor *17216 515945 65555 0 7 0 0x4000000 syz-executor 94379 291191 15292 0 2 0x10 0xc80 syz-executor 94379 36461 15292 0 3 0x10 0x4000080 fsleep syz-executor 94379 501150 15292 0 3 0x10 0x4000080 fsleep syz-executor 54774 7175 0 0 3 0x14000 0x200 acct acct 88565 471476 1 0 3 0x100003 0x80 ttyin getty 84776 516525 86793 0 3 0x2 0x80 nanoslp syz-executor 65555 132766 86793 0 3 0x2 0x80 nanoslp syz-executor 15292 127459 86793 0 3 0x2 0x80 nanoslp syz-executor 86793 477971 87470 0 3 0x2 0x80 wait syz-executor 87470 59341 89787 0 3 0x100002 0x88 sigsusp ksh 89787 433795 94633 0 3 0x10 0x88 kqread sshd-session 94633 235352 54209 0 3 0x12 0x80 kqread sshd-session 54209 435813 1 0 3 0 0x88 kqread sshd 84825 395566 10731 73 3 0x1100010 0x80 kqread syslogd 10731 147208 1 0 3 0x100002 0x80 sbwait syslogd 5255 332488 1 0 3 0x100000 0x80 kqread resolvd 49991 148330 8167 77 3 0x100012 0x80 kqread dhcpleased 81352 275242 8167 77 3 0x100012 0x80 kqread dhcpleased 8167 63380 1 0 3 0 0x80 kqread dhcpleased 21845 300169 0 0 3 0x14000 0x200 bored smr 46270 268090 0 0 2 0x14000 0x200 zerothread 15807 255085 0 0 3 0x14000 0x200 aiodoned aiodoned 81758 7281 0 0 3 0x14000 0x200 syncer update 29831 327004 0 0 3 0x14000 0x200 cleaner cleaner 13493 293194 0 0 3 0x14000 0x200 reaper reaper 49041 334142 0 0 3 0x14000 0x200 pgdaemon pagedaemon 80382 96087 0 0 3 0x14000 0x200 bored viomb 66889 179932 0 0 3 0x14000 0x40000200 acpi0 acpi0 23171 236427 0 0 3 0x14000 0x200 bored softnet0 25893 448414 0 0 3 0x14000 0x200 smrbar systqmp 84629 397869 0 0 3 0x14000 0x200 bored systq 79295 220602 0 0 3 0x14000 0x40000200 tmoslp softclock 40753 46098 0 0 3 0x14000 0x40000200 idle0 1 120304 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11040 12188K 12447K 166960K 13301 0 pcb 18 14K 16K 166960K 405 0 rtable 230 7K 8K 166960K 609 0 pf 32 13K 73K 166960K 328 0 ifaddr 42 7K 8K 166960K 83 0 ifgroup 50 2K 2K 166960K 122 0 sysctl 4 1K 9K 166960K 9 0 counters 33 17K 18K 166960K 116 0 ioctlops 0 0K 4K 166960K 440 0 iov 0 0K 12K 166960K 26 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1426 90K 90K 166960K 2270 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 32 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 150 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 13 45K 110K 166960K 1205 0 sigio 0 0K 0K 166960K 8 0 proc 60 59K 124K 166960K 589 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 324 0 in_multi 99 7K 7K 166960K 120 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 25 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 505 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 189 158K 175K 166960K 11676 0 UVM aobj 10 2K 2K 166960K 11 0 pinsyscall 34 68K 96K 166960K 2302 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 11 0K 2K 166960K 58 0 temp 47 9113K 9177K 166960K 20806 0 kqueue 14 22K 31K 166960K 253 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 71 0 68 1 0 1 1 0 8 0 rtentry 136 145 0 43 4 0 4 4 0 8 0 unpcb 144 756 0 741 5 3 2 4 0 8 1 syncache 336 8 0 8 2 1 1 1 0 8 1 tcpcb 736 265 0 261 8 6 2 7 0 8 1 arp 96 18 0 0 1 0 1 1 0 8 0 ipq 40 7 0 0 1 0 1 1 0 8 0 ipqe 40 13 0 5 1 0 1 1 0 8 0 inpcb 328 1172 0 1163 13 6 7 7 0 8 5 ip6q 72 4 0 0 1 0 1 1 0 8 0 ip6af 40 5 0 1 1 0 1 1 0 8 0 nd6 112 44 0 19 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 79 0 79 2 1 1 1 0 8 1 pppxif 1416 2 0 2 1 1 0 1 0 8 0 pfstscr 40 34 0 2 1 0 1 1 0 8 0 pfrktable 1344 12 0 12 2 1 1 1 0 8 1 pfsrclim 320 2 0 2 1 1 0 1 0 8 0 pfanchor 1288 11 0 8 1 0 1 1 0 8 0 pfstitem 24 32 0 26 1 0 1 1 0 8 0 pfstkey 128 34 0 15 1 0 1 1 0 8 0 pfstate 384 18 0 1 2 0 2 2 0 8 0 pfrule 1360 6 0 6 2 1 1 1 0 8 1 rttmr 136 3 0 3 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 708 0 258 33 1 32 33 0 8 2 art_table 40 709 0 258 6 0 6 6 0 8 0 art_node 32 143 0 51 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 5 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 72 143 0 133 1 0 1 1 0 8 0 shmpl 112 8 0 1 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 3443 0 1986 92 0 92 92 0 8 0 ffsino 256 3444 0 1987 92 0 92 92 0 8 0 nchpl 144 5092 0 3398 64 0 64 64 0 8 0 rtmask 32 25 0 25 2 1 1 1 0 8 1 vnodes 216 4092 0 0 228 0 228 228 0 8 0 namei 1024 15111 0 15110 3 1 2 2 0 8 1 pfiaddrpl 120 4 0 4 2 1 1 1 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 kstatmem 264 85 0 62 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 26504 0 26504 9 7 2 8 1 8 2 plimitpl 152 135 0 118 1 0 1 1 0 8 0 sigapl 424 1497 0 1458 6 1 5 6 0 8 0 knotepl 120 57819 0 57771 44 34 10 17 0 8 8 kqueuepl 184 368 0 357 1 0 1 1 0 8 0 pipepl 304 235 0 208 5 2 3 5 0 8 0 fdescpl 448 1481 0 1456 5 1 4 5 0 8 0 filepl 120 7390 0 7187 11 2 9 10 0 8 1 lockfpl 104 397 0 395 2 0 2 2 0 8 1 lockfspl 48 187 0 185 1 0 1 1 0 8 0 sessionpl 144 32 0 24 1 0 1 1 0 8 0 pgrppl 48 44 0 28 1 0 1 1 0 8 0 ucredpl 104 952 0 940 1 0 1 1 0 8 0 zombiepl 144 1463 0 1458 2 1 1 1 0 8 0 processpl 1152 1497 0 1458 4 0 4 4 0 8 0 procpl 664 2803 0 2759 7 1 6 6 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 552 2033 0 2006 12 5 7 8 0 8 4 mcl64k 65536 302 0 299 2 1 1 1 0 8 0 mcl16k 16384 93 0 93 2 1 1 1 0 8 1 mcl12k 12288 17 0 17 2 1 1 1 0 8 1 mcl9k128 9344 16 0 15 2 1 1 1 0 8 0 mcl8k 8192 90 0 90 2 1 1 1 0 8 1 mcl4k 4096 4526 0 4481 13 6 7 13 0 8 0 mcl2k2 2112 6 0 6 2 1 1 1 0 8 1 mcl2k 2048 772 0 770 1 0 1 1 0 8 0 mextrefs 64 959 0 959 2 1 1 1 0 8 1 mtagpl 96 7 0 7 1 0 1 1 0 8 1 mbufpl 256 16774 0 16669 22 1 21 21 0 8 7 bufpl 272 9993 0 3777 415 0 415 415 0 8 0 anonpl 24 176055 0 173093 57 8 49 49 0 187 11 amapchunkpl 152 48409 0 48058 54 20 34 37 0 158 16 amappl16 200 2849 0 2820 34 22 12 17 0 8 6 amappl15 192 5 0 4 1 0 1 1 0 8 0 amappl14 184 407 0 406 1 0 1 1 0 8 0 amappl13 176 182 0 171 1 0 1 1 0 8 0 amappl12 168 1718 0 1694 2 0 2 2 0 8 0 amappl11 160 31 0 30 1 0 1 1 0 8 0 amappl10 152 58 0 47 1 0 1 1 0 8 0 amappl9 144 267 0 267 1 1 0 1 0 8 0 amappl8 136 116 0 115 1 0 1 1 0 8 0 amappl7 128 157 0 146 1 0 1 1 0 8 0 amappl6 120 155 0 154 1 0 1 1 0 8 0 amappl5 112 87 0 79 1 0 1 1 0 8 0 amappl4 104 260 0 244 1 0 1 1 0 8 0 amappl3 96 8262 0 8179 5 1 4 4 0 8 0 amappl2 88 524 0 469 2 0 2 2 0 8 0 amappl1 80 14523 0 13991 14 2 12 14 0 8 0 amappl 88 10866 0 10740 6 1 5 5 0 92 0 uvmvnodes 80 144 0 0 3 0 3 3 0 8 0 dma4096 4096 2 0 2 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 10 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1481 0 1456 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1481 0 1456 1 0 1 1 0 8 0 vmmpekpl 168 12070 0 12030 3 0 3 3 0 8 0 vmmpepl 168 95911 0 94351 104 11 93 93 0 357 10 vmsppl 368 1480 0 1456 4 1 3 4 0 8 0 rwobjpl 40 25009 0 24048 14 0 14 14 0 8 1 pdppl 4096 2968 0 2912 106 40 66 82 0 8 10 pvpl 32 659404 0 649518 163 23 140 140 0 265 29 pmappl 216 1480 0 1456 3 1 2 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 811 0 64 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(ffffee007783b028,ffff80003c92f9a0,ffff80003c92f9d0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003c92f970) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80003c92f970) at namei+0x7c3 sys/kern/vfs_lookup.c:250 vn_open(ffff80003c92f970,8001,0) at vn_open+0x178 sys/kern/vfs_vnops.c:146 doopenat(ffff8000310b0548,ffffff9c,200000000800,8000,0,0,4a02d46ceb3d8de3) at doopenat+0x352 sys/kern/vfs_syscalls.c:1163 sys_open(ffff8000310b0548,ffff80003c92fc10,ffff80003c92fb60) at sys_open+0x59 sys/kern/vfs_syscalls.c:1065 syscall(ffff80003c92fc10) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c92fc10) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe7f91622c70, count: -9 ddb> machine ddbcpu 1 No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(ffffee007783b028,ffff80003c92f9a0,ffff80003c92f9d0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003c92f970) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80003c92f970) at namei+0x7c3 sys/kern/vfs_lookup.c:250 vn_open(ffff80003c92f970,8001,0) at vn_open+0x178 sys/kern/vfs_vnops.c:146 doopenat(ffff8000310b0548,ffffff9c,200000000800,8000,0,0,4a02d46ceb3d8de3) at doopenat+0x352 sys/kern/vfs_syscalls.c:1163 sys_open(ffff8000310b0548,ffff80003c92fc10,ffff80003c92fb60) at sys_open+0x59 sys/kern/vfs_syscalls.c:1065 syscall(ffff80003c92fc10) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c92fc10) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe7f91622c70, count: -9