uvm_fault(0xffffffff83997a28, 0xffff80001a8a2020, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *116630 63397 0 0x2 0x1 0 syz-executor ffs2_balloc(fffffd806c798900,42035,61,fffffd8007ffd680,1,ffff80002a7e33e8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a7e3470) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807164bdb0,ffff80002a7e3520,3,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002a788010,fffffd807164bdb0,fffffd8007ffd680,ffff80002a7e35f8,ffff80002a7e35d0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:691 ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa ktrwrite2 sys/kern/kern_ktrace.c:653 [inline] ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa sys/kern/kern_ktrace.c:264 dofilewritev(ffff80002a788010,2,ffff80002a7e3788,0,ffff80002a7e3830) at dofilewritev+0x588 sys/kern/sys_generic.c:402 sys_write(ffff80002a788010,ffff80002a7e38e0,ffff80002a7e3830) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a7e38e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7e38e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x799f749d7050, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83997a28, 0xffff80001a8a2020, 0, 1) -> d ddb> trace ffs2_balloc(fffffd806c798900,42035,61,fffffd8007ffd680,1,ffff80002a7e33e8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a7e3470) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807164bdb0,ffff80002a7e3520,3,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002a788010,fffffd807164bdb0,fffffd8007ffd680,ffff80002a7e35f8,ffff80002a7e35d0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:691 ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa ktrwrite2 sys/kern/kern_ktrace.c:653 [inline] ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa sys/kern/kern_ktrace.c:264 dofilewritev(ffff80002a788010,2,ffff80002a7e3788,0,ffff80002a7e3830) at dofilewritev+0x588 sys/kern/sys_generic.c:402 sys_write(ffff80002a788010,ffff80002a7e38e0,ffff80002a7e3830) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a7e38e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7e38e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x799f749d7050, count: -9 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a7e3390 rbx 0xfffffd806c798900 rdx 0 rcx 0xffff80001a8a2000 rax 0x4 r8 0xffffffffffffffff r9 0xffff80002a7e33e8 r10 0xb7049ccddae02f49 r11 0xf1e6ecd59b094a50 r12 0x1 r13 0xffff800000c47800 r14 0xffff80002a7e3230 r15 0xfffffd806a668230 rip 0xffffffff827227da ffs2_balloc+0xa0a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a7e3220 ss 0x10 ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 ddb> show proc PROC (syz-executor) tid=116630 pid=63397 tcnt=1 stat=onproc flags process=2 proc=1 runpri=17, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7894d0,0xffff80002a789a10 process=0xffff80002a7ac910 user=0xffff80002a7de000, vmspace=0xfffffd807ece22e0 estcpu=36, cpticks=5, pctcpu=0.0, user=1, sys=4, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 85932 516217 36608 0 2 0 syz-executor 53345 107722 60701 0 2 0 syz-executor 53345 316600 60701 0 2 0x4000000 syz-executor 53345 354117 60701 0 3 0x4000080 fsleep syz-executor 20811 216984 93842 0 2 0 syz-executor 20811 319868 93842 0 2 0x4000000 syz-executor 78259 302899 11770 0 2 0 syz-executor 78259 470809 11770 0 2 0x4000000 syz-executor 25789 466904 13617 0 3 0x80 nanoslp syz-executor 25789 490122 13617 0 3 0x4000080 msgwait syz-executor 25789 28020 13617 0 3 0x4000080 fsleep syz-executor 96741 271932 0 0 3 0x14200 acct acct 69879 501790 0 0 3 0x14280 nfsidl nfsio 82696 310342 0 0 3 0x14280 nfsidl nfsio 61322 5349 0 0 3 0x14280 nfsidl nfsio 2680 394779 0 0 3 0x14280 nfsidl nfsio 24126 231034 0 0 3 0x14280 nfsidl nfsio 37663 287915 0 0 3 0x14280 nfsidl nfsio 20804 408341 0 0 3 0x14280 nfsidl nfsio 46812 479544 0 0 3 0x14280 nfsidl nfsio 66799 256755 0 0 3 0x14280 nfsidl nfsio 72515 180474 0 0 3 0x14280 nfsidl nfsio 75826 143994 0 0 3 0x14280 nfsidl nfsio 59089 397520 0 0 3 0x14280 nfsidl nfsio 20827 171788 0 0 3 0x14280 nfsidl nfsio 91424 366621 0 0 3 0x14280 nfsidl nfsio 27544 307322 0 0 3 0x14280 nfsidl nfsio 32327 241283 0 0 3 0x14280 nfsidl nfsio 90930 137575 0 0 3 0x14280 nfsidl nfsio 9698 389794 0 0 3 0x14280 nfsidl nfsio 51829 336380 0 0 3 0x14280 nfsidl nfsio 45126 31882 0 0 3 0x14280 nfsidl nfsio 36995 207101 18835 0 3 0x82 wait syz-executor 36608 51518 18835 0 3 0x82 nanoslp syz-executor 11770 45642 18835 0 3 0x82 nanoslp syz-executor 13617 130039 18835 0 3 0x82 nanoslp syz-executor 92739 414545 18835 0 3 0x82 nanoslp syz-executor 93842 74415 18835 0 2 0xc82 syz-executor 60701 273042 18835 0 2 0xc82 syz-executor *63397 116630 18835 0 7 0x3 syz-executor 18835 445604 44625 0 2 0x82 syz-executor 44625 34992 72395 0 3 0x10008a sigsusp ksh 72395 248557 95283 0 3 0x98 kqread sshd-session 95283 235257 61528 0 3 0x92 kqread sshd-session 69223 466462 1 0 3 0x100083 ttyopn getty 61528 32678 1 0 3 0x88 kqread sshd 73709 236817 21876 73 3 0x1100090 kqread syslogd 21876 21491 1 0 3 0x100082 sbwait syslogd 27147 209965 1 0 3 0x100080 kqread resolvd 43229 78949 73673 77 3 0x100092 kqread dhcpleased 88063 513435 73673 77 3 0x100092 kqread dhcpleased 73673 505302 1 0 3 0x80 kqread dhcpleased 98526 7743 0 0 3 0x14200 bored smr 12898 444281 0 0 2 0x14200 zerothread 29978 143597 0 0 3 0x14200 aiodoned aiodoned 7588 398487 0 0 3 0x14200 syncer update 48153 436346 0 0 3 0x14200 cleaner cleaner 43341 70521 0 0 3 0x14200 reaper reaper 52133 160617 0 0 3 0x14200 pgdaemon pagedaemon 51457 12012 0 0 3 0x14200 bored viomb 82117 476017 0 0 3 0x40014200 acpi0 acpi0 79740 157992 0 0 3 0x14200 bored softnet0 2436 281880 0 0 3 0x14200 bored systqmp 96237 18367 0 0 3 0x14200 bored systq 50177 285888 0 0 3 0x40014200 tmoslp softclock 78676 312084 0 0 3 0x40014200 idle0 1 381052 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11062 12114K 13387K 166960K 13036 0 pcb 18 14K 15K 166960K 82 0 rtable 199 7K 8K 166960K 424 0 pf 29 12K 93K 166960K 94 0 ifaddr 37 6K 7K 166960K 67 0 ifgroup 46 2K 2K 166960K 96 0 sysctl 4 1K 9K 166960K 10 0 counters 32 17K 18K 166960K 185 0 ioctlops 0 0K 4K 166960K 356 0 iov 0 0K 12K 166960K 15 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1390 87K 88K 166960K 1884 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 25 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 443 0 sigio 0 0K 0K 166960K 3 0 proc 60 59K 108K 166960K 524 0 subproc 72 4K 4K 166960K 105 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 179 0 in_multi 81 6K 7K 166960K 120 0 ether_multi 1 0K 0K 166960K 7 0 mrt 1 0K 0K 166960K 15 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 445 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 226 159K 181K 166960K 5607 0 UVM aobj 11 2K 2K 166960K 11 0 pinsyscall 38 76K 94K 166960K 1544 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 10 0K 2K 166960K 45 0 temp 45 9067K 9131K 166960K 6937 0 kqueue 14 22K 30K 166960K 72 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 187 0 184 3 2 1 3 0 8 0 rtentry 136 125 0 43 4 0 4 4 0 8 0 unpcb 144 299 0 284 6 5 1 6 0 8 0 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 252 0 245 7 6 1 7 0 8 0 arp 96 20 0 2 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 34 0 32 1 0 1 1 0 8 0 inpcb 328 698 0 621 12 5 7 7 0 8 0 ip6q 72 17 0 17 1 1 0 1 0 8 0 ip6af 40 34 0 34 1 1 0 1 0 8 0 nd6 112 26 0 9 1 0 1 1 0 8 0 pkpcb 40 38 0 38 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 148 0 148 1 0 1 1 0 8 1 pppxif 1416 2 0 2 2 1 1 1 0 8 1 pfstscr 40 33 0 33 1 1 0 1 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstkey 128 66 0 66 1 1 0 1 0 8 0 pfstate 384 33 0 33 1 1 0 1 0 8 0 pfrule 1360 3 0 3 2 1 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 518 0 150 29 0 29 29 0 8 2 art_table 40 520 0 150 5 0 5 5 0 8 0 art_node 32 123 0 49 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 22 0 12 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2264 0 805 92 0 92 92 0 8 0 ffsino 256 2264 0 805 92 0 92 92 0 8 0 nchpl 144 2885 0 1188 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 1 0 1 0 8 0 vnodes 216 2628 0 0 146 0 146 146 0 8 0 namei 1024 9856 0 9856 3 2 1 2 0 8 1 kstatmem 264 56 0 36 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 12956 0 12956 3 2 1 3 1 8 1 plimitpl 152 99 0 83 1 0 1 1 0 8 0 sigapl 424 759 0 696 8 0 8 8 0 8 0 knotepl 120 18273 0 17986 16 6 10 10 0 8 1 kqueuepl 184 132 0 121 3 0 3 3 0 8 2 pipepl 304 142 0 114 3 0 3 3 0 8 0 fdescpl 448 724 0 695 5 1 4 5 0 8 0 filepl 120 4937 0 4650 16 6 10 14 0 8 1 lockfpl 104 247 0 244 2 0 2 2 0 8 1 lockfspl 48 97 0 94 1 0 1 1 0 8 0 sessionpl 144 36 0 27 1 0 1 1 0 8 0 pgrppl 48 45 0 28 1 0 1 1 0 8 0 ucredpl 104 1048 0 1037 1 0 1 1 0 8 0 zombiepl 144 698 0 696 1 0 1 1 0 8 0 processpl 1152 759 0 696 5 0 5 5 0 8 0 procpl 664 1226 0 1157 7 0 7 7 0 8 0 sosppl 176 3 0 3 1 1 0 1 0 8 0 sockpl 552 1236 0 1140 18 10 8 12 0 8 1 mcl64k 65536 22 0 22 2 1 1 1 0 8 1 mcl8k 8192 7 0 7 1 1 0 1 0 8 0 mcl4k 4096 2910 0 2857 13 5 8 13 0 8 0 mcl2k 2048 465 0 462 9 4 5 5 0 8 4 mtagpl 96 9 0 5 1 0 1 1 0 8 0 mbufpl 256 8356 0 8182 61 37 24 52 0 8 8 bufpl 280 7035 0 821 444 0 444 444 0 8 0 anonpl 24 136018 0 132729 45 13 32 45 0 187 0 amapchunkpl 152 17744 0 17257 36 10 26 29 0 158 5 amappl16 200 2579 0 2548 17 13 4 15 0 8 0 amappl15 192 71 0 71 1 1 0 1 0 8 0 amappl14 184 413 0 412 1 0 1 1 0 8 0 amappl13 176 118 0 108 1 0 1 1 0 8 0 amappl12 168 963 0 935 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 63 0 52 1 0 1 1 0 8 0 amappl9 144 254 0 254 1 1 0 1 0 8 0 amappl8 136 147 0 145 1 0 1 1 0 8 0 amappl7 128 141 0 130 1 0 1 1 0 8 0 amappl6 120 166 0 164 1 0 1 1 0 8 0 amappl5 112 93 0 84 1 0 1 1 0 8 0 amappl4 104 260 0 243 1 0 1 1 0 8 0 amappl3 96 3461 0 3348 4 0 4 4 0 8 0 amappl2 88 548 0 494 2 0 2 2 0 8 0 amappl1 80 11189 0 10639 17 2 15 15 0 8 1 amappl 88 4860 0 4698 5 1 4 5 0 92 0 uvmvnodes 80 107 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 10 0 0 1 0 1 1 0 8 0 uaddrrnd 24 724 0 695 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 724 0 695 1 0 1 1 0 8 0 vmmpekpl 168 7550 0 7520 2 0 2 2 0 8 0 vmmpepl 168 54223 0 52434 106 12 94 94 0 357 9 vmsppl 368 723 0 695 4 1 3 4 0 8 0 rwobjpl 40 18000 0 17026 13 0 13 13 0 8 0 pdppl 4096 1454 0 1390 104 34 70 80 0 8 6 pvpl 32 341838 0 333231 108 17 91 103 0 265 5 pmappl 216 723 0 695 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 434 0 96 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ffs2_balloc(fffffd806c798900,42035,61,fffffd8007ffd680,1,ffff80002a7e33e8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a7e3470) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807164bdb0,ffff80002a7e3520,3,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002a788010,fffffd807164bdb0,fffffd8007ffd680,ffff80002a7e35f8,ffff80002a7e35d0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:691 ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa ktrwrite2 sys/kern/kern_ktrace.c:653 [inline] ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa sys/kern/kern_ktrace.c:264 dofilewritev(ffff80002a788010,2,ffff80002a7e3788,0,ffff80002a7e3830) at dofilewritev+0x588 sys/kern/sys_generic.c:402 sys_write(ffff80002a788010,ffff80002a7e38e0,ffff80002a7e3830) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a7e38e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7e38e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x799f749d7050, count: -9 ddb> machine ddbcpu 1 No such command ddb> trace ffs2_balloc(fffffd806c798900,42035,61,fffffd8007ffd680,1,ffff80002a7e33e8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a7e3470) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807164bdb0,ffff80002a7e3520,3,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff80002a788010,fffffd807164bdb0,fffffd8007ffd680,ffff80002a7e35f8,ffff80002a7e35d0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:691 ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa ktrwrite2 sys/kern/kern_ktrace.c:653 [inline] ktrgenio(ffff80002a788010,2,1,ffff800000c55250,19) at ktrgenio+0x2aa sys/kern/kern_ktrace.c:264 dofilewritev(ffff80002a788010,2,ffff80002a7e3788,0,ffff80002a7e3830) at dofilewritev+0x588 sys/kern/sys_generic.c:402 sys_write(ffff80002a788010,ffff80002a7e38e0,ffff80002a7e3830) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80002a7e38e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7e38e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x799f749d7050, count: -9