uvm_fault(0xffffffff83abc5a8, 0xffff800027bf2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 94646 98472 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a7f1d10) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(ffffee806fc6e608,ffff80002a7f1d98,ffffee8007ffd680,ffff80002a7f1ddc) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7794d0,ffff80002a7f1f20,ffff80002a7f1e70) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3133 syscall(ffff80002a7f1f20) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7f1f20) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71e6f2c86ec0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83abc5a8, 0xffff800027bf2004, 0, 1) -> d ddb> show kasan No such command ddb> trace ufs_readdir(ffff80002a7f1d10) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(ffffee806fc6e608,ffff80002a7f1d98,ffffee8007ffd680,ffff80002a7f1ddc) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a7794d0,ffff80002a7f1f20,ffff80002a7f1e70) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3133 syscall(ffff80002a7f1f20) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7f1f20) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71e6f2c86ec0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a7f1d00 rbx 0x200 rdx 0 rcx 0xffffee806cb24158 rax 0xffff800027bf2200 r8 0xffffffffffffffff r9 0x2 r10 0x412b8d25cda9805e r11 0x218055f142f1533f r12 0 r13 0xffff80002a7f1d98 r14 0xffff800027bf2000 r15 0xffff800027bf2008 rip 0xffffffff8105569e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a7f1b50 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=94646 pid=98472 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a778a70,0xffff80002a7374d8 process=0xffff80002a79c010 user=0xffff80002a7ec000, vmspace=0xffffee807f22fb80 estcpu=36, cpticks=5, pctcpu=0.1, user=1, sys=3, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 87867 518447 1 0 3 0x100003 0x80 ttyin getty 91126 126824 0 0 3 0x14000 0x200 acct acct 8019 300751 0 0 3 0x14000 0x280 nfsidl nfsio 9490 93714 0 0 3 0x14000 0x280 nfsidl nfsio 6527 203198 0 0 3 0x14000 0x280 nfsidl nfsio 69378 297292 0 0 3 0x14000 0x280 nfsidl nfsio 70721 183550 0 0 3 0x14000 0x280 nfsidl nfsio 66959 272928 0 0 3 0x14000 0x280 nfsidl nfsio 97919 251459 0 0 3 0x14000 0x280 nfsidl nfsio 73322 413203 0 0 3 0x14000 0x280 nfsidl nfsio 39349 34733 0 0 3 0x14000 0x280 nfsidl nfsio 95505 281006 0 0 3 0x14000 0x280 nfsidl nfsio 53040 498187 0 0 3 0x14000 0x280 nfsidl nfsio 66508 366309 0 0 3 0x14000 0x280 nfsidl nfsio 88667 115921 0 0 3 0x14000 0x280 nfsidl nfsio 38072 121783 0 0 3 0x14000 0x280 nfsidl nfsio 98016 296697 0 0 3 0x14000 0x280 nfsidl nfsio 54320 393573 0 0 3 0x14000 0x280 nfsidl nfsio 32682 295117 0 0 3 0x14000 0x280 nfsidl nfsio 6910 79793 0 0 3 0x14000 0x280 nfsidl nfsio 20947 60668 0 0 3 0x14000 0x280 nfsidl nfsio 35307 406862 0 0 3 0x14000 0x280 nfsidl nfsio 77469 229977 92449 0 3 0x2 0x80 wait syz-executor *98472 94646 92449 0 7 0x2 0 syz-executor 64605 337177 92449 0 3 0x2 0x80 nanoslp syz-executor 92449 171450 1 0 3 0x2 0x80 wait syz-executor 97526 487702 0 0 3 0x14000 0x200 bored smr 14575 303999 0 0 2 0x14000 0x200 zerothread 80844 177717 0 0 3 0x14000 0x200 aiodoned aiodoned 94982 56685 0 0 3 0x14000 0x200 syncer update 55973 8337 0 0 3 0x14000 0x200 cleaner cleaner 27110 327995 0 0 3 0x14000 0x200 reaper reaper 84021 206010 0 0 3 0x14000 0x200 pgdaemon pagedaemon 92514 405325 0 0 3 0x14000 0x200 bored viomb 23607 265562 0 0 3 0x14000 0x40000200 acpi0 acpi0 49716 408479 0 0 3 0x14000 0x200 bored softnet0 47876 206993 0 0 3 0x14000 0x200 smrbar systqmp 91575 450365 0 0 3 0x14000 0x200 bored systq 88435 455781 0 0 3 0x14000 0x40000200 tmoslp softclock 36564 41791 0 0 3 0x14000 0x40000200 idle0 1 433307 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11022 12092K 12464K 166960K 12718 0 pcb 17 12K 12K 166960K 104 0 rtable 163 5K 8K 166960K 424 0 pf 26 12K 21K 166960K 88 0 ifaddr 26 4K 7K 166960K 60 0 ifgroup 34 1K 2K 166960K 83 0 sysctl 4 1K 9K 166960K 13 0 counters 29 17K 18K 166960K 45 0 ioctlops 0 0K 4K 166960K 136 0 iov 0 0K 16K 166960K 57 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1397 88K 88K 166960K 1939 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 33 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 8 29K 240K 166960K 672 0 sigio 0 0K 0K 166960K 11 0 proc 20 25K 100K 166960K 595 0 subproc 45 2K 4K 166960K 84 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 65 0 in_multi 55 4K 7K 166960K 117 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 127 572K 572K 166960K 127 0 exec 0 0K 1K 166960K 454 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 69 56K 161K 166960K 7272 0 UVM aobj 10 2K 2K 166960K 13 0 pinsyscall 11 22K 94K 166960K 1792 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 58 0 NDP 7 0K 2K 166960K 40 0 temp 31 9107K 9179K 166960K 23693 0 kqueue 1 2K 24K 166960K 123 0 SYN cache 2 16K 16K 166960K 2 0 ddb>