uvm_fault(0xffffffff82bcbd30, 0xffff8000211f3000, 0, 2) -> e kernel: page fault trap, code=0 Stopped at kcov_remote_enter+0x112: movq $0,0(%rcx) TID PID UID PRFLAGS PFLAGS CPU COMMAND *264116 43094 0 0 0 0 syz-executor.5 kcov_remote_enter(0,ffff8000fffee010) at kcov_remote_enter+0x112 sys/dev/kcov.c:672 timeout_run(ffff8000217100e8) at timeout_run+0x80 sys/kern/kern_timeout.c:639 softclock_process_tick_timeout(ffff8000217100e8,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:688 softclock(0) at softclock+0x130 sys/kern/kern_timeout.c:711 softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90 Xsoftclock() at Xsoftclock+0x1f uvm_fault_upper_lookup(ffff80002e930720,ffff80002e930758,ffff80002e930620,ffff80002e9306a0) at uvm_fault_upper_lookup+0xe0 sys/uvm/uvm_fault.c:878 uvm_fault(fffffd807ad12970,8548e7ff000,0,1) at uvm_fault+0x109 sys/uvm/uvm_fault.c:606 upageflttrap(ffff80002e9308a0,8548e7fffd0) at upageflttrap+0x7c sys/arch/amd64/amd64/trap.c:186 usertrap(ffff80002e9308a0) at usertrap+0x1e8 sys/arch/amd64/amd64/trap.c:438 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffc0a40, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff82bcbd30, 0xffff8000211f3000, 0, 2) -> e ddb> trace kcov_remote_enter(0,ffff8000fffee010) at kcov_remote_enter+0x112 sys/dev/kcov.c:672 timeout_run(ffff8000217100e8) at timeout_run+0x80 sys/kern/kern_timeout.c:639 softclock_process_tick_timeout(ffff8000217100e8,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:688 softclock(0) at softclock+0x130 sys/kern/kern_timeout.c:711 softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90 Xsoftclock() at Xsoftclock+0x1f uvm_fault_upper_lookup(ffff80002e930720,ffff80002e930758,ffff80002e930620,ffff80002e9306a0) at uvm_fault_upper_lookup+0xe0 sys/uvm/uvm_fault.c:878 uvm_fault(fffffd807ad12970,8548e7ff000,0,1) at uvm_fault+0x109 sys/uvm/uvm_fault.c:606 upageflttrap(ffff80002e9308a0,8548e7fffd0) at upageflttrap+0x7c sys/arch/amd64/amd64/trap.c:186 usertrap(ffff80002e9308a0) at usertrap+0x1e8 sys/arch/amd64/amd64/trap.c:438 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffc0a40, count: -11 ddb> show registers rdi 0x4 rsi 0xffff8000006b4a00 rbp 0xffff80002e930390 rbx 0 rdx 0xffff80002ce638c0 rcx 0xffff8000211f3000 rax 0xfffffd8067523de0 r8 0 r9 0 r10 0x18e8543796a29552 r11 0xf2dfe4b700b532a r12 0xffff800021710028 r13 0xffffffff82b9dff0 cpu_info_full_primary+0x1ff0 r14 0xffff8000fffee010 r15 0 rip 0xffffffff819ddc22 kcov_remote_enter+0x112 cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff80002e930370 ss 0 kcov_remote_enter+0x112: movq $0,0(%rcx) ddb> show proc PROC (syz-executor.5) pid=264116 stat=onproc flags process=0 proc=0 pri=82, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff80002ce63350,0xffff80002ce62880 process=0xffff8000217217a0 user=0xffff80002e92b000, vmspace=0xfffffd807ad12970 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=1 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 76668 475136 54564 0 2 0 syz-executor.1 *43094 264116 5971 0 7 0 syz-executor.5 32886 68277 2449 0 2 0 syz-executor.6 32886 201353 2449 0 3 0x4000080 fsleep syz-executor.6 16775 302835 22637 0 2 0 syz-executor.0 16775 141459 22637 0 3 0x4000080 fsleep syz-executor.0 48232 55147 78747 0 3 0x80 nanoslp syz-executor.2 48232 225227 78747 0 3 0x4000080 fsleep syz-executor.2 48232 478438 78747 0 3 0x4000080 piperd syz-executor.2 48232 221445 78747 0 3 0x4000080 fsleep syz-executor.2 22637 488662 20904 0 3 0x82 nanoslp syz-executor.0 5971 46992 20904 0 3 0x82 nanoslp syz-executor.5 39948 211860 0 0 3 0x14200 bored sosplice 63959 131954 0 0 3 0x14280 nfsidl nfsio 10384 486450 0 0 3 0x14280 nfsidl nfsio 3391 132821 0 0 3 0x14280 nfsidl nfsio 53264 247623 0 0 3 0x14280 nfsidl nfsio 34545 124917 0 0 3 0x14280 nfsidl nfsio 65083 179102 0 0 3 0x14280 nfsidl nfsio 40535 224749 0 0 3 0x14280 nfsidl nfsio 93704 146336 0 0 3 0x14280 nfsidl nfsio 75557 368353 0 0 3 0x14280 nfsidl nfsio 5040 345070 0 0 3 0x14280 nfsidl nfsio 56202 313892 0 0 3 0x14280 nfsidl nfsio 1241 291932 0 0 3 0x14280 nfsidl nfsio 53595 49445 0 0 3 0x14280 nfsidl nfsio 80765 140620 0 0 3 0x14280 nfsidl nfsio 95124 445172 0 0 3 0x14280 nfsidl nfsio 16474 338137 0 0 3 0x14280 nfsidl nfsio 70024 272863 0 0 3 0x14280 nfsidl nfsio 39499 520923 0 0 3 0x14280 nfsidl nfsio 63292 237915 0 0 3 0x14280 nfsidl nfsio 82314 85862 0 0 3 0x14280 nfsidl nfsio 82657 208665 0 0 3 0x14200 acct acct 2449 370555 20904 0 3 0x82 nanoslp syz-executor.6 18422 453151 20904 0 3 0x82 nanoslp syz-executor.7 40230 84733 20904 0 3 0x82 piperd syz-executor.4 52323 316995 20904 0 3 0x2 biowait syz-executor.3 78747 288761 20904 0 3 0x82 nanoslp syz-executor.2 54564 396388 20904 0 3 0x82 nanoslp syz-executor.1 20904 357439 12089 0 3 0x82 wait syz-fuzzer 20904 409553 12089 0 3 0x4000082 nanoslp syz-fuzzer 20904 204339 12089 0 3 0x4000082 wait syz-fuzzer 20904 452231 12089 0 3 0x4000082 thrsleep syz-fuzzer 20904 374888 12089 0 3 0x4000082 thrsleep syz-fuzzer 20904 285518 12089 0 3 0x4000082 thrsleep syz-fuzzer 20904 396176 12089 0 3 0x4000082 wait syz-fuzzer 20904 291980 12089 0 3 0x4000082 wait syz-fuzzer 20904 85823 12089 0 3 0x4000082 wait syz-fuzzer 20904 314866 12089 0 3 0x4000082 thrsleep syz-fuzzer 20904 242782 12089 0 3 0x4000082 kqread syz-fuzzer 20904 506639 12089 0 3 0x4000082 wait syz-fuzzer 20904 423841 12089 0 3 0x4000082 wait syz-fuzzer 20904 341983 12089 0 3 0x4000082 wait syz-fuzzer 12089 31323 25585 0 3 0x10008a sigsusp ksh 25585 515457 20065 0 3 0x9a kqread sshd 50037 424302 1 0 3 0x100083 ttyin getty 20065 127951 1 0 3 0x88 kqread sshd 31892 248991 16494 73 3 0x1100090 kqread syslogd 16494 435986 1 0 3 0x100082 netio syslogd 38663 273608 1 0 3 0x100080 kqread resolvd 86383 115030 91426 77 3 0x100092 kqread dhcpleased 42569 471894 91426 77 3 0x100092 kqread dhcpleased 91426 100599 1 0 3 0x80 kqread dhcpleased 91896 351849 0 0 3 0x14200 bored smr 58607 491250 0 0 2 0x14200 zerothread 63777 429307 0 0 3 0x14200 aiodoned aiodoned 18047 13870 0 0 3 0x14200 syncer update 61650 387849 0 0 3 0x14200 cleaner cleaner 36281 124431 0 0 3 0x14200 reaper reaper 78000 17970 0 0 3 0x14200 pgdaemon pagedaemon 9851 388100 0 0 3 0x14200 bored viomb 56042 316996 0 0 3 0x40014200 acpi0 acpi0 68642 403071 0 0 3 0x14200 bored softnet 88978 36033 0 0 3 0x14200 bored softnet 47976 3073 0 0 3 0x14200 bored softnet 19409 296033 0 0 3 0x14200 bored softnet 19394 351060 0 0 3 0x14200 bored systqmp 29442 314966 0 0 3 0x14200 bored systq 49454 61557 0 0 3 0x40014200 bored softclock 37897 309265 0 0 3 0x40014200 idle0 1 513003 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10244 7058K 7820K 78643K 20536 0 pcb 13 18K 23K 78643K 742 0 rtable 202 15K 16K 78643K 711 0 ifaddr 73 21K 22K 78643K 214 0 counters 27 17K 17K 78643K 100 0 ioctlops 0 0K 2K 78643K 317 0 iov 1 8K 24K 78643K 474 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1407 88K 88K 78643K 3846 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 14 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 213 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 15 53K 73K 78643K 1721 0 sigio 0 0K 0K 78643K 249 0 proc 58 59K 75K 78643K 589 0 subproc 104 6K 6K 78643K 143 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 58 0 in_multi 82 5K 6K 78643K 190 0 ether_multi 1 0K 0K 78643K 16 0 mrt 0 0K 0K 78643K 18 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 85 387K 387K 78643K 85 0 exec 0 0K 1K 78643K 603 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 284 89K 89K 78643K 12465 0 UVM aobj 131 4K 4K 78643K 131 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 42 0 NDP 11 0K 1K 78643K 63 0 temp 124 5770K 5846K 78643K 38314 0 kqueue 12 18K 30K 78643K 134 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 158 0 155 2 0 2 2 0 8 1 rtentry 112 187 0 99 4 0 4 4 0 8 0 unpcb 144 1988 0 1975 26 20 6 6 0 8 5 syncache 296 17 0 17 4 3 1 1 0 8 1 tcpqe 32 120 0 120 2 2 0 1 0 8 0 tcpcb 776 621 0 617 19 11 8 8 0 8 7 arp 88 25 0 9 1 0 1 1 0 8 0 inpcb 336 2650 0 2642 38 29 9 12 0 8 8 nd6 48 37 0 17 1 0 1 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1160 52 0 52 3 3 0 1 0 8 0 pppxif 1360 42 0 42 2 2 0 1 0 8 0 pfstscr 40 80 0 78 2 1 1 1 0 8 0 pfanchor 1280 7 0 0 1 0 1 1 0 8 0 pfstitem 24 8 0 4 1 0 1 1 0 8 0 pfstkey 128 160 0 156 2 1 1 1 0 8 0 pfstate 352 80 0 78 2 1 1 1 0 8 0 rttmr 136 4 0 4 2 2 0 1 0 8 0 art_heap8 4096 2 0 1 2 1 1 2 0 8 0 art_heap4 256 875 0 488 32 7 25 29 0 8 0 art_table 32 877 0 489 4 0 4 4 0 8 0 art_node 16 177 0 100 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 211 0 201 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 3742 0 2309 90 0 90 90 0 8 0 ffsino 240 3742 0 2309 85 0 85 85 0 8 0 nchpl 144 6132 0 4498 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 22561 0 22560 4 3 1 3 0 8 0 vmpool 664 7 0 7 2 2 0 1 0 8 0 kstatmem 264 78 0 56 2 0 2 2 0 8 0 scxspl 216 17928 0 17927 9 8 1 8 0 8 0 plimitpl 152 122 0 106 1 0 1 1 0 8 0 sigapl 424 2030 0 1965 8 0 8 8 0 8 0 futexpl 64 20525 0 20521 1 0 1 1 0 8 0 knotepl 120 24160 0 24080 15 10 5 7 0 8 1 kqueuepl 184 290 0 282 4 3 1 3 0 8 0 pipepl 288 1066 0 1005 22 17 5 7 0 8 0 fdescpl 432 1992 0 1966 4 0 4 4 0 8 0 filepl 120 16857 0 16553 41 26 15 18 0 8 5 lockfpl 104 621 0 619 2 1 1 2 0 8 0 lockfspl 48 120 0 118 1 0 1 1 0 8 0 sessionpl 144 26 0 10 1 0 1 1 0 8 0 pgrppl 48 32 0 16 1 0 1 1 0 8 0 ucredpl 104 1710 0 1697 1 0 1 1 0 8 0 zombiepl 144 1966 0 1965 2 1 1 1 0 8 0 processpl 1008 2030 0 1965 10 1 9 9 0 8 0 procpl 696 4462 0 4379 11 2 9 10 0 8 0 sosppl 168 6 0 6 2 1 1 1 0 8 1 sockpl 456 4832 0 4808 120 109 11 25 0 8 8 mcl64k 65536 150 0 150 3 2 1 1 0 8 1 mcl16k 16384 56 0 56 5 4 1 1 0 8 1 mcl12k 12288 65 0 65 6 5 1 1 0 8 1 mcl9k 9216 23 0 23 7 6 1 1 0 8 1 mcl8k 8192 252 0 252 4 3 1 1 0 8 1 mcl4k 4096 277 0 277 2 1 1 1 0 8 1 mcl2k2 2112 8 0 8 5 4 1 1 0 8 1 mcl2k 2048 79472 0 79397 40 28 12 34 0 8 1 mtagpl 96 239 0 49 7 1 6 6 0 8 1 mbufpl 256 158996 0 158615 202 162 40 79 0 8 8 bufpl 288 6553 0 156 458 0 458 458 0 8 0 anonpl 24 405930 0 389268 113 3 110 110 0 188 0 amapchunkpl 152 34791 0 34127 34 5 29 30 0 158 0 amappl16 200 4373 0 3801 33 2 31 31 0 8 0 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 169 0 155 2 0 2 2 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 435 0 430 1 0 1 1 0 8 0 amappl11 160 44 0 34 1 0 1 1 0 8 0 amappl10 152 39 0 28 1 0 1 1 0 8 0 amappl9 144 992 0 990 1 0 1 1 0 8 0 amappl8 136 172 0 116 3 0 3 3 0 8 0 amappl7 128 149 0 129 2 0 2 2 0 8 0 amappl6 120 203 0 195 2 1 1 2 0 8 0 amappl5 112 191 0 185 1 0 1 1 0 8 0 amappl4 104 513 0 490 2 1 1 2 0 8 0 amappl3 96 5160 0 5113 2 0 2 2 0 8 0 amappl2 88 2399 0 2333 3 1 2 3 0 8 0 amappl1 80 46700 0 46029 29 13 16 26 0 8 0 amappl 88 11915 0 11742 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 1999 0 1973 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1999 0 1973 1 0 1 1 0 8 0 vmmpekpl 168 22587 0 22533 3 0 3 3 0 8 0 vmmpepl 168 187725 0 185165 174 41 133 146 0 357 12 vmsppl 344 1998 0 1973 3 0 3 3 0 8 0 rwobjpl 24 55541 0 47858 47 0 47 47 0 8 0 pdppl 4096 4004 0 3946 156 94 62 68 0 8 4 pvpl 32 862337 0 840508 370 178 192 360 0 265 0 pmappl 216 1998 0 1973 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1152 0 356 24 0 24 24 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace kcov_remote_enter(0,ffff8000fffee010) at kcov_remote_enter+0x112 sys/dev/kcov.c:672 timeout_run(ffff8000217100e8) at timeout_run+0x80 sys/kern/kern_timeout.c:639 softclock_process_tick_timeout(ffff8000217100e8,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:688 softclock(0) at softclock+0x130 sys/kern/kern_timeout.c:711 softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90 Xsoftclock() at Xsoftclock+0x1f uvm_fault_upper_lookup(ffff80002e930720,ffff80002e930758,ffff80002e930620,ffff80002e9306a0) at uvm_fault_upper_lookup+0xe0 sys/uvm/uvm_fault.c:878 uvm_fault(fffffd807ad12970,8548e7ff000,0,1) at uvm_fault+0x109 sys/uvm/uvm_fault.c:606 upageflttrap(ffff80002e9308a0,8548e7fffd0) at upageflttrap+0x7c sys/arch/amd64/amd64/trap.c:186 usertrap(ffff80002e9308a0) at usertrap+0x1e8 sys/arch/amd64/amd64/trap.c:438 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffc0a40, count: -11 ddb> machine ddbcpu 1 No such command ddb> trace kcov_remote_enter(0,ffff8000fffee010) at kcov_remote_enter+0x112 sys/dev/kcov.c:672 timeout_run(ffff8000217100e8) at timeout_run+0x80 sys/kern/kern_timeout.c:639 softclock_process_tick_timeout(ffff8000217100e8,0) at softclock_process_tick_timeout+0x1ac sys/kern/kern_timeout.c:688 softclock(0) at softclock+0x130 sys/kern/kern_timeout.c:711 softintr_dispatch(0) at softintr_dispatch+0xd1 sys/arch/amd64/amd64/softintr.c:90 Xsoftclock() at Xsoftclock+0x1f uvm_fault_upper_lookup(ffff80002e930720,ffff80002e930758,ffff80002e930620,ffff80002e9306a0) at uvm_fault_upper_lookup+0xe0 sys/uvm/uvm_fault.c:878 uvm_fault(fffffd807ad12970,8548e7ff000,0,1) at uvm_fault+0x109 sys/uvm/uvm_fault.c:606 upageflttrap(ffff80002e9308a0,8548e7fffd0) at upageflttrap+0x7c sys/arch/amd64/amd64/trap.c:186 usertrap(ffff80002e9308a0) at usertrap+0x1e8 sys/arch/amd64/amd64/trap.c:438 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7ffffc0a40, count: -11