uvm_fault(0xfffffd806210eb88, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at uvm_fault_lower+0xbb1: movq 0(%rbx),%rdi TID PID UID PRFLAGS PFLAGS CPU COMMAND *195203 25987 0 0 0 0K syz-executor.1 481745 25987 0 0 0x4000000 1 syz-executor.1 uvm_fault_lower(ffff800022a991a0,ffff800022a991d8,ffff800022a99120,0) at uvm_fault_lower+0xbb1 sys/uvm/uvm_fault.c:1325 uvm_fault(fffffd806210eb88,20000000,0,2) at uvm_fault+0x24f sys/uvm/uvm_fault.c:640 upageflttrap(ffff800022a99310,20000700) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff800022a99310) at usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffd49c0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806210eb88, 0x0, 0, 1) -> e ddb{0}> trace uvm_fault_lower(ffff800022a991a0,ffff800022a991d8,ffff800022a99120,0) at uvm_fault_lower+0xbb1 sys/uvm/uvm_fault.c:1325 uvm_fault(fffffd806210eb88,20000000,0,2) at uvm_fault+0x24f sys/uvm/uvm_fault.c:640 upageflttrap(ffff800022a99310,20000700) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff800022a99310) at usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffd49c0, count: -5 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff800022a99090 rbx 0 rdx 0 rcx 0x8 rax 0xffff80002122ca80 r8 0xffffffff81da849e witness_assert+0x1fe r9 0x5 r10 0x2d8fbb3a6489d276 r11 0x5109843b26a06456 r12 0xffff800022a991a0 r13 0xfffffd806f87d120 r14 0 r15 0xffffffff81491a00 uvn_flush+0x8e0 rip 0xffffffff819e07c1 uvm_fault_lower+0xbb1 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800022a99000 ss 0 uvm_fault_lower+0xbb1: movq 0(%rbx),%rdi ddb{0}> show proc PROC (syz-executor.1) pid=195203 stat=onproc flags process=0 proc=0 pri=32, usrpri=79, nice=20 forw=0xffffffffffffffff, list=0xffff800022aaea90,0xffff80002122d510 process=0xffff8000ffffadc0 user=0xffff800022a94000, vmspace=0xfffffd806210eb88 estcpu=29, cpticks=0, pctcpu=0.3 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND *25987 195203 11580 0 7 0 syz-executor.1 25987 220747 11580 0 3 0x4000080 fsleep syz-executor.1 25987 239459 11580 0 3 0x4000080 fsleep syz-executor.1 25987 481745 11580 0 7 0x4000000 syz-executor.1 25987 378227 11580 0 2 0x4000000 syz-executor.1 87261 56082 94610 0 2 0x482 syz-executor.0 11580 25619 94610 0 2 0x482 syz-executor.1 23750 236089 0 0 3 0x14200 acct acct 10804 317241 0 0 3 0x14200 bored sosplice 6242 237620 1 0 3 0x100083 ttyin getty 47051 501729 0 0 3 0x14280 nfsidl nfsio 2623 24482 0 0 3 0x14280 nfsidl nfsio 64332 231772 0 0 3 0x14280 nfsidl nfsio 78858 158294 0 0 3 0x14280 nfsidl nfsio 48296 348003 0 0 3 0x14280 nfsidl nfsio 10307 34879 0 0 3 0x14280 nfsidl nfsio 96114 12507 0 0 3 0x14280 nfsidl nfsio 30581 121177 0 0 3 0x14280 nfsidl nfsio 68428 454154 0 0 3 0x14280 nfsidl nfsio 9841 139990 0 0 3 0x14280 nfsidl nfsio 24965 478785 0 0 3 0x14280 nfsidl nfsio 62828 184789 0 0 3 0x14280 nfsidl nfsio 26693 207245 0 0 3 0x14280 nfsidl nfsio 27143 520867 0 0 3 0x14280 nfsidl nfsio 31891 127896 0 0 3 0x14280 nfsidl nfsio 62416 175153 0 0 3 0x14280 nfsidl nfsio 75496 378046 0 0 3 0x14280 nfsidl nfsio 44421 415563 0 0 3 0x14280 nfsidl nfsio 2809 169608 0 0 3 0x14280 nfsidl nfsio 73193 148731 0 0 3 0x14280 nfsidl nfsio 94610 155392 12982 0 3 0x82 thrsleep syz-fuzzer 94610 119884 12982 0 3 0x4000082 thrsleep syz-fuzzer 94610 311889 12982 0 3 0x4000082 thrsleep syz-fuzzer 94610 141810 12982 0 3 0x4000082 thrsleep syz-fuzzer 94610 245916 12982 0 3 0x4000082 kqread syz-fuzzer 94610 137242 12982 0 3 0x4000082 thrsleep syz-fuzzer 94610 484484 12982 0 3 0x4000082 thrsleep syz-fuzzer 94610 143998 12982 0 3 0x4000082 thrsleep syz-fuzzer 12982 427279 19673 0 3 0x10008a sigsusp ksh 19673 321969 67594 0 3 0x9a kqread sshd 67594 228062 1 0 3 0x88 kqread sshd 7505 513462 68302 74 3 0x100092 bpf pflogd 68302 420007 1 0 3 0x80 netio pflogd 23718 61360 52425 73 3 0x100090 kqread syslogd 52425 36894 1 0 3 0x100082 netio syslogd 20228 523653 1 0 3 0x100080 kqread resolvd 62346 352404 47785 77 3 0x100092 kqread dhcpleased 53264 156803 47785 77 3 0x100092 kqread dhcpleased 47785 308021 1 0 3 0x80 kqread dhcpleased 19994 506371 0 0 3 0x14200 bored smr 12420 423578 0 0 3 0x14200 pgzero zerothread 8088 311438 0 0 3 0x14200 aiodoned aiodoned 60212 190471 0 0 3 0x14200 syncer update 3749 173357 0 0 3 0x14200 cleaner cleaner 21177 170868 0 0 3 0x14200 reaper reaper 67763 207377 0 0 3 0x14200 pgdaemon pagedaemon 71883 284613 0 0 3 0x14200 bored viomb 4584 234044 0 0 3 0x40014200 acpi0 acpi0 884 34770 0 0 3 0x40014200 idle1 8785 96541 0 0 3 0x14200 bored softnet 8826 485264 0 0 3 0x14200 bored systqmp 10050 291406 0 0 3 0x14200 bored systq 80618 413849 0 0 2 0x40014200 softclock 54726 190960 0 0 3 0x40014200 idle0 1 176854 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 25987 (syz-executor.1) thread 0xffff80002122ca80 (195203) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff829f2050) #0 witness_lock+0x4b0 stacktrace_save sys/sys/stacktrace.h:36 [inline] #0 witness_lock+0x4b0 sys/kern/subr_witness.c:1182 #1 uvm_fault+0x233 sys/uvm/uvm_fault.c:639 #2 upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 #3 usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 #4 recall_trap+0x8 Process 25987 (syz-executor.1) thread 0xffff80002122c540 (481745) exclusive rwlock amaplk r = 0 (0xfffffd80773eba98) #0 witness_lock+0x4b0 stacktrace_save sys/sys/stacktrace.h:36 [inline] #0 witness_lock+0x4b0 sys/kern/subr_witness.c:1182 #1 uvm_fault_check+0x3d2 sys/uvm/uvm_fault.c:776 #2 uvm_fault+0x102 sys/uvm/uvm_fault.c:602 #3 upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 #4 usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806210eba0) #0 witness_lock+0x4b0 stacktrace_save sys/sys/stacktrace.h:36 [inline] #0 witness_lock+0x4b0 sys/kern/subr_witness.c:1182 #1 uvmfault_lookup+0xe9 sys/uvm/uvm_fault.c:1745 #2 uvm_fault_check+0x3a sys/uvm/uvm_fault.c:676 #3 uvm_fault+0x102 sys/uvm/uvm_fault.c:602 #4 upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 #5 usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 #6 recall_trap+0x8 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10163 6468K 6871K 78643K 13821 0 pcb 13 16K 19K 78643K 1078 0 rtable 108 8K 10K 78643K 2463 0 ifaddr 52 13K 15K 78643K 742 0 sysctl 2 0K 0K 78643K 2 0 counters 44 34K 34K 78643K 278 0 ioctlops 0 0K 4K 78643K 2946 0 iov 0 0K 24K 78643K 624 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1332 84K 84K 78643K 3500 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 53 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 1K 78643K 662 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12598 0 file desc 5 13K 25K 78643K 7174 0 sigio 0 0K 0K 78643K 61 0 proc 73 87K 111K 78643K 1701 0 subproc 26 1K 1K 78643K 523 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 511 0 in_multi 29 1K 2K 78643K 840 0 ether_multi 1 0K 0K 78643K 115 0 mrt 0 0K 0K 78643K 21 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 235 1049K 1049K 78643K 235 0 exec 0 0K 2K 78643K 1910 0 pfkey data 0 0K 0K 78643K 3 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 343 598K 614K 78643K 92950 0 UVM aobj 131 8K 8K 78643K 137 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 419 0 NDP 7 0K 0K 78643K 226 0 temp 93 4212K 8298K 78643K 47213 0 kqueue 13 20K 26K 78643K 301 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 398 0 395 5 4 1 3 0 8 0 rtentry 112 634 0 602 2 0 2 2 0 8 0 unpcb 128 4468 0 4453 46 45 1 9 0 8 0 syncache 296 31 0 31 12 12 0 1 0 8 0 tcpqe 32 16 0 16 7 7 0 1 0 8 0 tcpcb 736 2459 0 2455 100 99 1 10 0 8 0 arp 120 96 0 90 1 0 1 1 0 8 0 inpcb 304 7116 0 7109 128 122 6 11 0 8 5 rttmr 72 8 0 8 3 3 0 1 0 8 0 nd6 48 160 0 155 1 0 1 1 0 8 0 pkpcb 40 11 0 11 3 3 0 1 0 8 0 kcovpl 48 40 0 38 1 0 1 1 0 8 0 ppxss 1248 34 0 34 11 11 0 1 0 8 0 pfstscr 40 90 0 90 7 7 0 1 0 8 0 pffrag 232 114 0 114 6 6 0 1 0 482 0 pffrnode 88 114 0 114 6 6 0 1 0 8 0 pffrent 40 654 0 654 6 6 0 1 0 8 0 pfosfp 40 1432 0 1008 5 0 5 5 0 8 0 pfosfpen 112 1432 0 714 21 0 21 21 0 8 0 pfrktable 1344 292 0 282 3 2 1 2 0 8 0 pftag 88 5 0 3 1 0 1 1 0 8 0 pfqueue 264 2 0 2 1 1 0 1 0 8 0 pfstitem 24 15 0 13 1 0 1 1 0 8 0 pfstkey 112 192 0 190 1 0 1 1 0 8 0 pfstate 320 104 0 102 1 0 1 1 0 8 0 pfsrctr 152 56 0 56 4 4 0 1 0 8 0 pfrule 1360 374 0 315 7 2 5 5 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2906 0 2761 23 11 12 15 0 8 0 art_table 32 2907 0 2761 2 0 2 2 0 8 0 art_node 16 633 0 607 1 0 1 1 0 8 0 sysvmsgpl 40 53 0 13 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 660 0 650 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 10677 0 9253 91 1 90 90 0 8 0 ffsino 272 10677 0 9253 96 0 96 96 0 8 0 nchpl 144 20142 0 19625 63 43 20 61 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 77236 0 77236 3 2 1 1 0 8 1 percpumem 16 151 0 117 1 0 1 1 0 8 0 vcpupl 2048 135 0 0 17 0 17 17 0 8 0 vmpool 560 176 0 41 11 1 10 10 0 8 0 pfiaddrpl 120 98 0 82 1 0 1 1 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 61552 0 61552 24 23 1 6 0 8 1 plimitpl 152 877 0 868 1 0 1 1 0 8 0 sigapl 424 7332 0 7278 7 0 7 7 0 8 0 futexpl 64 52443 0 52441 4 3 1 1 0 8 0 knotepl 112 115 0 0 3 0 3 3 0 8 0 kqueuepl 216 1997 0 1985 55 52 3 12 0 8 2 pipepl 336 1904 0 1894 63 61 2 11 0 8 1 fdescpl 496 7296 0 7278 3 0 3 3 0 8 0 filepl 152 54047 0 53939 113 106 7 14 0 8 2 lockfpl 104 1316 0 1313 3 2 1 2 0 8 0 lockfspl 48 445 0 442 1 0 1 1 0 8 0 sessionpl 144 57 0 46 1 0 1 1 0 8 0 pgrppl 48 76 0 65 1 0 1 1 0 8 0 ucredpl 96 6282 0 6270 1 0 1 1 0 8 0 zombiepl 144 7278 0 7277 1 0 1 1 0 8 0 processpl 1064 7332 0 7277 4 0 4 4 0 8 0 procpl 672 22010 0 21944 26 19 7 7 0 8 1 srpgc 96 62 0 62 10 10 0 1 0 8 0 sosppl 168 42 0 42 13 13 0 1 0 8 0 sockpl 480 12004 0 11979 288 276 12 34 0 8 8 mcl64k 65536 26 0 0 3 0 3 3 0 8 0 mcl16k 16384 12 0 0 2 0 2 2 0 8 0 mcl12k 12288 31 0 0 2 0 2 2 0 8 0 mcl9k 9216 10 0 0 1 0 1 1 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 25 0 0 4 1 3 3 0 8 0 mcl2k2 2112 15 0 0 1 0 1 1 0 8 0 mcl2k 2048 299 0 0 27 9 18 27 0 8 0 mtagpl 96 237 0 0 6 1 5 6 0 8 0 mbufpl 256 950 0 0 46 0 46 46 0 8 0 bufpl 288 14981 0 8652 453 0 453 453 0 8 0 anonpl 24 2098330 0 2078613 279 138 141 149 0 186 16 amapchunkpl 152 233645 0 232927 112 73 39 43 0 158 10 amappl16 200 19501 0 18785 128 82 46 51 0 8 7 amappl15 192 901 0 896 1 0 1 1 0 8 0 amappl14 184 561 0 558 3 2 1 1 0 8 0 amappl13 176 1775 0 1773 1 0 1 1 0 8 0 amappl12 168 2261 0 2256 1 0 1 1 0 8 0 amappl11 160 922 0 903 1 0 1 1 0 8 0 amappl10 152 792 0 788 1 0 1 1 0 8 0 amappl9 144 132 0 129 1 0 1 1 0 8 0 amappl8 136 1532 0 1485 2 0 2 2 0 8 0 amappl7 128 764 0 756 1 0 1 1 0 8 0 amappl6 120 294 0 284 1 0 1 1 0 8 0 amappl5 112 5081 0 5060 1 0 1 1 0 8 0 amappl4 104 3549 0 3521 1 0 1 1 0 8 0 amappl3 96 3231 0 3212 1 0 1 1 0 8 0 amappl2 88 10831 0 10782 3 1 2 2 0 8 0 amappl1 80 131539 0 131088 16 6 10 13 0 8 0 amappl 88 91872 0 91658 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 7472 0 7319 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7472 0 7319 1 0 1 1 0 8 0 vmmpekpl 168 57685 0 57643 4 1 3 3 0 8 0 vmmpepl 168 688106 0 685788 377 265 112 143 0 357 7 vmsppl 368 7471 0 7319 15 1 14 15 0 8 0 rwobjpl 56 174016 0 166400 122 12 110 112 0 8 1 pdppl 4096 14952 0 14773 217 36 181 183 0 8 2 pvpl 32 3621407 0 3600449 437 233 204 222 0 265 28 pmappl 248 7471 0 7319 10 0 10 10 0 8 0 extentpl 40 57 0 38 1 0 1 1 0 8 0 phpool 112 1177 0 225 28 0 28 28 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace uvm_fault_lower(ffff800022a991a0,ffff800022a991d8,ffff800022a99120,0) at uvm_fault_lower+0xbb1 sys/uvm/uvm_fault.c:1325 uvm_fault(fffffd806210eb88,20000000,0,2) at uvm_fault+0x24f sys/uvm/uvm_fault.c:640 upageflttrap(ffff800022a99310,20000700) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff800022a99310) at usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffd49c0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020d38ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff829f1e48) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829f1e48) at __mp_lock+0x122 sys/kern/kern_lock.c:147 uvm_fault(fffffd806210eb88,fe3b1acf000,0,1) at uvm_fault+0x233 sys/uvm/uvm_fault.c:639 upageflttrap(ffff800024763120,fe3b1acf7f0) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff800024763120) at usertrap+0x214 sys/arch/amd64/amd64/trap.c:403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xfe473b7f3f0, count: 7