uvm_fault(0xffffffff83a32b18, 0xffff800029272004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *164621 72197 0 0x2 0 0 syz-executor ufs_readdir(ffff80003c907950) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd807dd8b020,ffff80003c9079d8,fffffd8007ffd820,ffff80003c907a1c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80003acfa550,ffff80003c907b60,ffff80003c907ab0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80003c907b60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907b60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d4da04acb0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a32b18, 0xffff800029272004, 0, 1) -> d ddb> trace ufs_readdir(ffff80003c907950) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd807dd8b020,ffff80003c9079d8,fffffd8007ffd820,ffff80003c907a1c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80003acfa550,ffff80003c907b60,ffff80003c907ab0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80003c907b60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907b60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74d4da04acb0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80003c907940 rbx 0x200 rdx 0 rcx 0xfffffd8078a49490 rax 0xffff800029272200 r8 0xffffffffffffffff r9 0x3 r10 0xadae93f7a369d4fd r11 0x6c28e8e642664ceb r12 0 r13 0xffff80003c9079d8 r14 0xffff800029272000 r15 0xffff800029272008 rip 0xffffffff8293174e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80003c907790 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=164621 pid=72197 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003acfa2b8,0xffff80002a7367e0 process=0xffff8000ffffad18 user=0xffff80003c902000, vmspace=0xfffffd807ec5d730 estcpu=36, cpticks=6, pctcpu=0.1, user=0, sys=6, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 40609 448623 13167 0 2 0 syz-executor 40609 169232 13167 0 2 0x4000000 syz-executor 40609 396505 13167 0 3 0x4000080 fsleep syz-executor 56358 286229 88930 0 2 0 syz-executor 56358 111284 88930 0 3 0x4000080 fsleep syz-executor 76700 498121 45990 0 2 0 syz-executor 76700 210642 45990 0 3 0x4000080 fsleep syz-executor 76700 265804 45990 0 3 0x4000080 fsleep syz-executor 40303 343685 90300 0 2 0 syz-executor 40303 192660 90300 0 3 0x4000080 fsleep syz-executor 90933 519538 70948 0 3 0x80 nanoslp syz-executor 90933 395261 70948 0 3 0x4000080 ttyout syz-executor 98009 327643 0 0 3 0x14200 acct acct *72197 164621 51081 0 7 0x2 syz-executor 90856 102234 1 0 3 0x100083 ttyin getty 45990 424477 51081 0 3 0x82 nanoslp syz-executor 70948 219344 51081 0 2 0xc82 syz-executor 88930 142314 51081 0 3 0x82 nanoslp syz-executor 90300 380041 51081 0 3 0x82 nanoslp syz-executor 13167 291248 51081 0 2 0xc82 syz-executor 51081 194341 1 0 3 0x82 wait syz-executor 19932 334659 0 0 3 0x14200 bored smr 20852 352265 0 0 2 0x14200 zerothread 64333 205899 0 0 3 0x14200 aiodoned aiodoned 30188 156123 0 0 3 0x14200 syncer update 95526 26838 0 0 3 0x14200 cleaner cleaner 7749 177023 0 0 3 0x14200 reaper reaper 55084 488801 0 0 3 0x14200 pgdaemon pagedaemon 7902 191617 0 0 3 0x14200 bored viomb 18600 146072 0 0 3 0x40014200 acpi0 acpi0 84314 152466 0 0 3 0x14200 bored softnet0 84358 87817 0 0 3 0x14200 smrbar systqmp 3399 52079 0 0 3 0x14200 bored systq 67454 218192 0 0 3 0x40014200 tmoslp softclock 50746 365178 0 0 3 0x40014200 idle0 1 449377 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb>