login: uvm_fault(0xffffffff83a60a18, 0xffff8000228b2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *238130 93468 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a7ef070) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffa006c8bfe60,ffff80002a7ef0f8,fffffa0007ffd7b8,ffff80002a7ef13c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef280,ffff80002a7ef1d0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3132 syscall(ffff80002a7ef280) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef280) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a52f57194e0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a60a18, 0xffff8000228b2004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a7ef070) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffa006c8bfe60,ffff80002a7ef0f8,fffffa0007ffd7b8,ffff80002a7ef13c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef280,ffff80002a7ef1d0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3132 syscall(ffff80002a7ef280) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef280) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a52f57194e0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a7ef060 rbx 0x200 rdx 0 rcx 0xfffffa006d7b1370 rax 0xffff8000228b2200 r8 0xffffffffffffffff r9 0x2 r10 0x19876539f3863afb r11 0x2377bfef9396afdd r12 0 r13 0xffff80002a7ef0f8 r14 0xffff8000228b2000 r15 0xffff8000228b2008 rip 0xffffffff82007c4e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a7eeeb0 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=238130 pid=93468 tcnt=1 stat=onproc flags process=2 proc=0 runpri=72, usrpri=72, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a767a00,0xffff80002a736a78 process=0xffff80002a79cd90 user=0xffff80002a7ea000, vmspace=0xfffffa007ec5dcf0 estcpu=36, cpticks=9, pctcpu=0.0, user=2, sys=7, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 13577 341381 19134 0 3 0x80 fsleep syz-executor 13577 431729 19134 0 3 0x4000080 kqread syz-executor 37395 262415 1 0 3 0x100083 ttyin getty 86417 516065 32926 0 3 0x80 fsleep syz-executor 86417 439913 32926 0 3 0x4000080 sbwait syz-executor 27776 191978 13171 0 3 0x80 fsleep syz-executor 27776 353453 13171 0 3 0x4000080 ttyopn syz-executor 85260 206613 0 0 3 0x14200 acct acct 32926 2564 16175 0 3 0x82 nanoslp syz-executor 13171 319393 16175 0 3 0x82 nanoslp syz-executor 19134 172086 16175 0 3 0x82 nanoslp syz-executor *93468 238130 16175 0 7 0x2 syz-executor 38486 341440 16175 0 3 0x82 nanoslp syz-executor 16175 228142 1 0 3 0x82 nanoslp syz-executor 18117 292486 13942 0 3 0x98 kqread sshd-session 13942 514528 1 0 3 0x92 kqread sshd-session 89952 449709 1 73 3 0x1100090 kqread syslogd 9764 438235 0 0 3 0x14200 bored smr 97442 381218 0 0 2 0x14200 zerothread 463 122313 0 0 3 0x14200 aiodoned aiodoned 39518 410673 0 0 3 0x14200 syncer update 33881 344761 0 0 3 0x14200 cleaner cleaner 9557 450608 0 0 3 0x14200 reaper reaper 53284 187705 0 0 3 0x14200 pgdaemon pagedaemon 84755 53672 0 0 3 0x14200 bored viomb 74890 364365 0 0 3 0x40014200 acpi0 acpi0 66493 257232 0 0 3 0x14200 bored softnet0 41589 299031 0 0 3 0x14200 smrbar systqmp 70972 277573 0 0 3 0x14200 bored systq 10405 13763 0 0 3 0x40014200 tmoslp softclock 22795 446838 0 0 3 0x40014200 idle0 1 415460 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11040 12100K 12386K 166960K 12653 0 pcb 17 18K 20K 166960K 185 0 rtable 165 6K 8K 166960K 487 0 pf 25 12K 72K 166960K 110 0 ifaddr 25 4K 7K 166960K 67 0 ifgroup 31 1K 2K 166960K 97 0 sysctl 3 1K 9K 166960K 12 0 counters 29 17K 18K 166960K 56 0 ioctlops 0 0K 4K 166960K 233 0 iov 0 0K 12K 166960K 59 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1391 87K 88K 166960K 2021 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 28 0 dirhash 12 2K 3K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 11 37K 93K 166960K 655 0 sigio 0 0K 0K 166960K 1 0 proc 20 25K 91K 166960K 581 0 subproc 45 2K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 186 0 in_multi 51 3K 7K 166960K 133 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 223 996K 996K 166960K 223 0 exec 0 0K 1K 166960K 469 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 113 66K 164K 166960K 7659 0 UVM aobj 10 2K 2K 166960K 11 0 pinsyscall 19 38K 94K 166960K 1915 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 7 0K 2K 166960K 44 0 temp 37 9113K 9176K 166960K 24726 0 kqueue 5 8K 30K 166960K 103 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 195 0 194 3 2 1 3 0 8 0 rtentry 136 145 0 79 4 0 4 4 0 8 0 unpcb 144 389 0 380 6 0 6 6 0 8 5 syncache 336 10 0 10 2 1 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 134 0 131 2 1 1 2 0 8 0 arp 96 22 0 11 1 0 1 1 0 8 0 ipq 40 5 0 3 2 1 1 1 0 8 0 ipqe 40 10 0 8 2 1 1 1 0 8 0 inpcb 328 827 0 823 13 3 10 13 0 8 8 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 36 0 26 1 0 1 1 0 8 0 pkpcb 40 7 0 7 2 1 1 1 0 8 1 kcovpl 48 9 0 4 1 0 1 1 0 8 0 ppxss 1072 16 0 16 2 1 1 1 0 8 1 pppxif 1416 3 0 3 1 0 1 1 0 8 1 pfstscr 40 13 0 11 2 1 1 1 0 8 0 pfrktable 1344 3 0 3 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 5 0 1 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 1 0 0 1 0 1 1 0 8 0 pfstkey 128 13 0 12 2 1 1 1 0 8 0 pfstate 384 7 0 6 2 1 1 1 0 8 0 pfrule 1360 7 0 7 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 596 0 327 30 2 28 30 0 8 8 art_table 40 599 0 327 5 0 5 5 0 8 0 art_node 32 143 0 81 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 0 1 0 1 1 0 8 0 semapl 72 24 0 14 1 0 1 1 0 8 0 shmpl 112 8 0 1 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2490 0 1029 92 0 92 92 0 8 0 ffsino 256 2544 0 1083 92 0 92 92 0 8 0 nchpl 144 3289 0 1586 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 3063 0 0 171 0 171 171 0 8 0 namei 1024 11567 0 11567 3 1 2 2 0 8 2 pfiaddrpl 120 1 0 1 1 0 1 1 0 8 1 kstatmem 264 51 0 36 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 1 0 1 0 8 0 scxspl 216 15118 0 15118 11 3 8 8 1 8 8 plimitpl 152 158 0 146 1 0 1 1 0 8 0 sigapl 424 956 0 924 7 1 6 6 0 8 0 knotepl 120 30823 0 30796 27 17 10 18 0 8 8 kqueuepl 184 311 0 306 9 3 6 6 0 8 5 pipepl 304 307 0 280 3 0 3 3 0 8 0 fdescpl 448 942 0 926 5 1 4 5 0 8 0 filepl 120 5837 0 5689 19 4 15 15 0 8 7 lockfpl 104 331 0 331 2 1 1 2 0 8 1 lockfspl 48 88 0 88 1 0 1 1 0 8 1 sessionpl 144 41 0 36 1 0 1 1 0 8 0 pgrppl 48 106 0 94 1 0 1 1 0 8 0 ucredpl 104 935 0 927 1 0 1 1 0 8 0 zombiepl 144 927 0 924 1 0 1 1 0 8 0 processpl 1152 956 0 924 4 0 4 4 0 8 0 procpl 664 1635 0 1600 5 0 5 5 0 8 0 sosppl 176 3 0 3 2 1 1 1 0 8 1 sockpl 552 1433 0 1419 27 17 10 22 0 8 8 mcl64k 65536 21 0 20 2 1 1 1 0 8 0 mcl16k 16384 2 0 2 1 1 0 1 0 8 0 mcl12k 12288 3 0 3 2 1 1 1 0 8 1 mcl8k 8192 27 0 27 2 1 1 1 0 8 1 mcl4k 4096 3152 0 3099 15 7 8 14 0 8 0 mcl2k 2048 514 0 493 3 0 3 3 0 8 0 mtagpl 96 12 0 7 1 0 1 1 0 8 0 mbufpl 256 10148 0 9918 30 11 19 23 0 8 3 bufpl 272 6750 0 534 415 0 415 415 0 8 0 anonpl 24 169983 0 168167 79 18 61 61 0 186 22 amapchunkpl 152 24884 0 24617 33 6 27 27 0 158 6 amappl16 200 2965 0 2951 26 11 15 16 0 8 9 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 421 0 421 1 0 1 1 0 8 1 amappl13 176 127 0 123 1 0 1 1 0 8 0 amappl12 168 1259 0 1244 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 61 0 59 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 1 0 1 0 8 0 amappl8 136 98 0 98 1 0 1 1 0 8 1 amappl7 128 168 0 163 1 0 1 1 0 8 0 amappl6 120 158 0 158 1 0 1 1 0 8 1 amappl5 112 100 0 96 1 0 1 1 0 8 0 amappl4 104 356 0 349 1 0 1 1 0 8 0 amappl3 96 4657 0 4599 4 0 4 4 0 8 1 amappl2 88 583 0 555 2 0 2 2 0 8 0 amappl1 80 13898 0 13615 16 0 16 16 0 8 4 amappl 88 6744 0 6654 5 0 5 5 0 92 0 uvmvnodes 80 121 0 0 3 0 3 3 0 8 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma8192 8192 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 1 1 0 1 1 0 8 0 uaddrrnd 24 942 0 926 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 942 0 926 1 0 1 1 0 8 0 vmmpekpl 168 9912 0 9867 3 0 3 3 0 8 0 vmmpepl 168 70796 0 69858 110 11 99 99 0 357 24 vmsppl 368 941 0 926 4 1 3 4 0 8 0 rwobjpl 40 22170 0 21638 17 2 15 15 0 8 2 pdppl 4096 1890 0 1852 98 52 46 80 0 8 8 pvpl 32 429203 0 424215 161 25 136 136 0 265 43 pmappl 216 941 0 926 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 809 0 82 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_readdir(ffff80002a7ef070) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffa006c8bfe60,ffff80002a7ef0f8,fffffa0007ffd7b8,ffff80002a7ef13c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef280,ffff80002a7ef1d0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3132 syscall(ffff80002a7ef280) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef280) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a52f57194e0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ufs_readdir(ffff80002a7ef070) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffa006c8bfe60,ffff80002a7ef0f8,fffffa0007ffd7b8,ffff80002a7ef13c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7662a8,ffff80002a7ef280,ffff80002a7ef1d0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3132 syscall(ffff80002a7ef280) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7ef280) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a52f57194e0, count: -5