uvm_fault(0xfffff6006d188b90, 0x6ddd0a05, 0, 1) -> e kernel: page fault trap, code=0 Stopped at amap_lookups+0x1e0: movl 0x10(%r15),%r14d TID PID UID PRFLAGS PFLAGS CPU COMMAND *468494 60752 0 0x10 0 0 syz-executor amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff80002a76d490,ffff80002a76d4c8,ffff80002a76d500,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffff6006d188b90,40f2e6be000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff80002a76d630,40f2e6beeb0) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80002a76d630) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7ee2cd49cbd0, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff6006d188b90, 0x6ddd0a05, 0, 1) -> e ddb> show kasan No such command ddb> trace amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff80002a76d490,ffff80002a76d4c8,ffff80002a76d500,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffff6006d188b90,40f2e6be000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff80002a76d630,40f2e6beeb0) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80002a76d630) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7ee2cd49cbd0, count: -6 ddb> show registers rdi 0x11 rsi 0x20 rbp 0xffff80002a76d2e0 rbx 0 rdx 0 rcx 0 rax 0xffff800000c57a00 r8 0xffffffff83055bb0 uvm_map_inentry_sp r9 0 r10 0 r11 0x9558f0e6c60e542a r12 0x17 r13 0 r14 0x20 r15 0x6ddd09f5 rip 0xffffffff820d1aa0 amap_lookups+0x1e0 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80002a76d250 ss 0 amap_lookups+0x1e0: movl 0x10(%r15),%r14d ddb> show proc PROC (syz-executor) tid=468494 pid=60752 tcnt=2 stat=onproc flags process=10 proc=0 runpri=86, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800030cb0a78,0xffff800030cb0d20 process=0xffff800045ffa418 user=0xffff80002a768000, vmspace=0xfffff6006d188b90 estcpu=36, cpticks=2, pctcpu=0.0, user=1, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 84278 220262 97705 0 2 0 0 syz-executor 84278 155288 97705 0 3 0 0x4000080 fsleep syz-executor *60752 468494 88909 0 7 0x10 0 syz-executor 60752 151071 88909 0 3 0x10 0x4000080 fsleep syz-executor 69022 469673 40839 0 2 0 0 syz-executor 69022 486225 40839 0 3 0 0x4000080 fsleep syz-executor 69022 121973 40839 0 3 0 0x4000080 fsleep syz-executor 46394 384330 62094 0 2 0 0xc80 syz-executor 46394 499702 62094 0 3 0 0x4000080 kqread syz-executor 46591 386866 65768 60929 2 0x10 0xc80 syz-executor 46591 151755 65768 60929 3 0x10 0x4000080 kqread syz-executor 46591 103744 65768 60929 3 0x10 0x4000080 fsleep syz-executor 6298 60239 64669 0 3 0 0x80 nanoslp syz-executor 6298 100395 64669 0 3 0 0x4000080 kqsel syz-executor 6298 450131 64669 0 3 0 0x4000080 fsleep syz-executor 88909 17648 18915 0 3 0x2 0x80 nanoslp syz-executor 55187 210431 1 0 3 0x100003 0x80 ttyin getty 49224 396834 18915 0 2 0x2 0 syz-executor 62094 499918 18915 0 2 0x2 0xc80 syz-executor 40839 240403 18915 0 3 0x2 0x80 nanoslp syz-executor 64669 443609 18915 0 3 0x2 0x80 nanoslp syz-executor 13254 23949 18915 0 2 0x2 0 syz-executor 65768 475689 18915 0 3 0x2 0x80 nanoslp syz-executor 97705 490654 18915 0 2 0x2 0xc80 syz-executor 18915 158960 1 0 3 0x2 0x80 kqread syz-executor 1601 206279 1 73 3 0x1100010 0x80 kqread syslogd 6960 270861 0 0 3 0x14000 0x200 bored smr 30955 147105 0 0 2 0x14000 0x200 zerothread 78870 93124 0 0 3 0x14000 0x200 aiodoned aiodoned 782 395124 0 0 3 0x14000 0x200 syncer update 38295 346838 0 0 3 0x14000 0x200 cleaner cleaner 3642 464072 0 0 3 0x14000 0x200 reaper reaper 67640 198134 0 0 3 0x14000 0x200 pgdaemon pagedaemon 41261 264331 0 0 3 0x14000 0x200 bored viomb 63474 431862 0 0 3 0x14000 0x40000200 acpi0 acpi0 55315 258092 0 0 2 0x14000 0x200 softnet0 34246 128761 0 0 3 0x14000 0x200 smrbar systqmp 60412 350366 0 0 3 0x14000 0x200 bored systq 13964 152582 0 0 3 0x14000 0x40000200 tmoslp softclock 30636 416641 0 0 3 0x14000 0x40000200 idle0 1 164676 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11038 12187K 12304K 166960K 12583 0 pcb 18 14K 16K 166960K 204 0 rtable 254 9K 9K 166960K 491 0 pf 30 12K 13K 166960K 59 0 ifaddr 40 7K 7K 166960K 67 0 ifgroup 47 1K 2K 166960K 90 0 sysctl 4 1K 9K 166960K 13 0 counters 33 17K 18K 166960K 82 0 ioctlops 0 0K 4K 166960K 213 0 iov 0 0K 12K 166960K 18 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1356 85K 86K 166960K 1656 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 13 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 31 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 16 57K 97K 166960K 554 0 proc 20 25K 124K 166960K 623 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 36 0 in_multi 91 6K 7K 166960K 140 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 18 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 516 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 139 91K 159K 166960K 6493 0 UVM aobj 50 2K 4K 166960K 55 0 pinsyscall 20 40K 96K 166960K 1710 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 12 0K 2K 166960K 44 0 temp 44 9112K 9176K 166960K 14408 0 kqueue 4 6K 29K 166960K 97 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 64 0 63 1 0 1 1 0 8 0 rtentry 136 145 0 39 4 0 4 4 0 8 0 unpcb 144 366 0 360 6 0 6 6 0 8 5 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 142 0 140 4 0 4 4 0 8 3 arp 96 23 0 4 1 0 1 1 0 8 0 inpcb 328 539 0 535 10 1 9 10 0 8 8 ip6q 72 4 0 1 1 0 1 1 0 8 0 ip6af 40 5 0 2 1 0 1 1 0 8 0 nd6 112 31 0 11 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1072 44 0 44 1 0 1 1 0 8 1 pppxif 1416 34 0 34 1 0 1 1 0 8 1 pftag 88 1 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 610 0 156 31 0 31 31 0 8 1 art_table 40 614 0 156 6 0 6 6 0 8 0 art_node 32 145 0 41 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 28 0 18 1 0 1 1 0 8 0 shmpl 112 52 0 5 2 0 2 2 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2299 0 835 92 0 92 92 0 8 0 ffsino 256 2299 0 835 92 0 92 92 0 8 0 nchpl 144 3063 0 1356 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2556 0 0 142 0 142 142 0 8 0 namei 1024 10437 0 10435 2 0 2 2 0 8 1 kstatmem 264 47 0 24 2 0 2 2 0 8 0 scsiplug 72 5 0 5 1 0 1 1 0 8 1 scxspl 216 12007 0 12007 8 0 8 8 1 8 8 plimitpl 152 81 0 69 1 0 1 1 0 8 0 sigapl 424 846 0 814 6 0 6 6 0 8 1 knotepl 120 17066 0 17040 16 6 10 16 0 8 7 kqueuepl 184 150 0 144 3 0 3 3 0 8 2 pipepl 304 161 0 134 3 0 3 3 0 8 0 fdescpl 448 833 0 814 5 0 5 5 0 8 1 filepl 120 4587 0 4405 15 0 15 15 0 8 8 lockfpl 104 530 0 529 2 0 2 2 0 8 1 lockfspl 48 131 0 130 1 0 1 1 0 8 0 sessionpl 144 45 0 41 1 0 1 1 0 8 0 pgrppl 48 189 0 177 1 0 1 1 0 8 0 ucredpl 104 539 0 531 1 0 1 1 0 8 0 zombiepl 144 814 0 814 1 0 1 1 0 8 1 processpl 1152 846 0 814 4 0 4 4 0 8 0 procpl 664 1423 0 1382 5 0 5 5 0 8 1 sosppl 176 4 0 4 1 0 1 1 0 8 1 sockpl 552 990 0 979 13 4 9 13 0 8 7 mcl64k 65536 28 0 27 1 0 1 1 0 8 0 mcl8k 8192 10 0 9 1 0 1 1 0 8 0 mcl4k 4096 3093 0 3037 13 0 13 13 0 8 6 mcl2k2 2112 3 0 3 1 0 1 1 0 8 1 mcl2k 2048 463 0 462 1 0 1 1 0 8 0 mextrefs 64 209 0 208 1 0 1 1 0 8 0 mtagpl 96 7 0 5 1 0 1 1 0 8 0 mbufpl 256 8694 0 8520 17 0 17 17 0 8 5 bufpl 272 3998 0 103 260 0 260 260 0 8 0 anonpl 24 129510 0 127403 45 0 45 45 0 187 9 amapchunkpl 152 20509 0 20163 29 0 29 29 0 158 9 amappl16 200 1962 0 1922 14 1 13 14 0 8 8 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 433 0 433 1 0 1 1 0 8 1 amappl13 176 131 0 129 1 0 1 1 0 8 0 amappl12 168 1103 0 1084 2 0 2 2 0 8 0 amappl11 160 5 0 4 1 0 1 1 0 8 0 amappl10 152 59 0 57 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 105 0 105 1 0 1 1 0 8 1 amappl7 128 163 0 158 1 0 1 1 0 8 0 amappl6 120 177 0 176 1 0 1 1 0 8 0 amappl5 112 96 0 94 1 0 1 1 0 8 0 amappl4 104 270 0 263 1 0 1 1 0 8 0 amappl3 96 4059 0 3983 3 0 3 3 0 8 0 amappl2 88 539 0 523 2 0 2 2 0 8 0 amappl1 80 11953 0 11801 13 0 13 13 0 8 2 amappl 88 5701 0 5583 5 0 5 5 0 92 1 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 54 0 5 1 0 1 1 0 8 0 uaddrrnd 24 833 0 814 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 833 0 814 1 0 1 1 0 8 0 vmmpekpl 168 8252 0 8209 3 0 3 3 0 8 0 vmmpepl 168 59929 0 59018 91 0 91 91 0 357 40 vmsppl 368 832 0 814 4 0 4 4 0 8 1 rwobjpl 40 18669 0 18135 13 0 13 13 0 8 1 pdppl 4096 1672 0 1628 100 52 48 82 0 8 4 pvpl 32 366824 0 360259 108 0 108 108 0 265 39 pmappl 216 832 0 814 3 0 3 3 0 8 1 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 636 0 52 17 0 17 17 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffff6006a40c5c8,f000,ffff80002a76d390,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff80002a76d490,ffff80002a76d4c8,ffff80002a76d500,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffff6006d188b90,40f2e6be000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff80002a76d630,40f2e6beeb0) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80002a76d630) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7ee2cd49cbd0, count: -6 ddb> machine ddbcpu 1 No such command ddb>