uvm_fault(0xffffffff839ab6a8, 0xffff800025532000, 0, 2) -> d kernel: page fault trap, code=2 Stopped at memset+0x52: repe stosq %es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND *232314 98339 0 0x1004 0 0 syz-executor memset() at memset+0x52 ffs_write(ffff80003c93cc60) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff5006cec4548,ffff80003c93ccf0,0,fffff50007ffd618) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 uvn_io(fffff5006f208a08,ffff80003c93ce70,6,39,1) at uvn_io+0x485 sys/uvm/uvm_vnode.c:1232 uvm_pager_put(fffff5006f208a08,fffff5000731c380,ffff80003c93cf10,ffff80003c93cf34,39,0,d7e3ff200b6a909b) at uvm_pager_put+0x10a sys/uvm/uvm_pager.c:505 uvn_flush(fffff5006f208a08,0,0,19) at uvn_flush+0x68d sys/uvm/uvm_vnode.c:705 uvn_detach(fffff5006f208a08) at uvn_detach+0xb8 sys/uvm/uvm_vnode.c:344 uvm_unmap_detach(ffff80003c93d058,0) at uvm_unmap_detach+0x15e sys/uvm/uvm_map.c:1370 uvmspace_exec(ffff80002a7662a8,1000,7f7fffffc000) at uvmspace_exec+0x451 sys/uvm/uvm_map.c:3404 sys_execve(ffff80002a7662a8,ffff80003c93d6e0,ffff80003c93d630) at sys_execve+0xc61 sys/kern/kern_exec.c:474 syscall(ffff80003c93d6e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c93d6e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b40e746e570, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839ab6a8, 0xffff800025532000, 0, 2) -> d ddb> trace memset() at memset+0x52 ffs_write(ffff80003c93cc60) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff5006cec4548,ffff80003c93ccf0,0,fffff50007ffd618) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 uvn_io(fffff5006f208a08,ffff80003c93ce70,6,39,1) at uvn_io+0x485 sys/uvm/uvm_vnode.c:1232 uvm_pager_put(fffff5006f208a08,fffff5000731c380,ffff80003c93cf10,ffff80003c93cf34,39,0,d7e3ff200b6a909b) at uvm_pager_put+0x10a sys/uvm/uvm_pager.c:505 uvn_flush(fffff5006f208a08,0,0,19) at uvn_flush+0x68d sys/uvm/uvm_vnode.c:705 uvn_detach(fffff5006f208a08) at uvn_detach+0xb8 sys/uvm/uvm_vnode.c:344 uvm_unmap_detach(ffff80003c93d058,0) at uvm_unmap_detach+0x15e sys/uvm/uvm_map.c:1370 uvmspace_exec(ffff80002a7662a8,1000,7f7fffffc000) at uvmspace_exec+0x451 sys/uvm/uvm_map.c:3404 sys_execve(ffff80002a7662a8,ffff80003c93d6e0,ffff80003c93d630) at sys_execve+0xc61 sys/kern/kern_exec.c:474 syscall(ffff80003c93d6e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c93d6e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b40e746e570, count: -12 ddb> show registers rdi 0xffff800025532000 rsi 0 rbp 0xffff80003c93cb80 rbx 0x4000 __ALIGN_SIZE+0x3000 rdx 0 rcx 0x800 rax 0 r8 0x4000 __ALIGN_SIZE+0x3000 r9 0xffff80003c93cad8 r10 0x42b3e5bf0de7b24 r11 0xffff800025532000 r12 0x1 r13 0xfffff5006cf61800 r14 0xfffff50067b16b30 r15 0x1 rip 0xffffffff8104ec72 memset+0x52 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80003c93ca08 ss 0x10 memset+0x52: repe stosq %es:(%rdi) ddb> show proc PROC (syz-executor) tid=232314 pid=98339 tcnt=1 stat=onproc flags process=1004 proc=0 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a7662a8 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c911250,0xffffffff83aa16e8 process=0xffff80003c9616a0 user=0xffff80003c938000, vmspace=0xfffff50068245018 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND *98339 232314 1 0 7 0x1004 syz-executor 9610 82635 1 0 2 0x10000002 syz-executor 97838 170307 0 0 3 0x14200 acct acct 52512 66530 1 0 3 0x80 nanoslp init 32384 98731 1 0 3 0x82 wait syz-executor 95887 340855 0 0 3 0x14200 bored smr 82749 290681 0 0 2 0x14200 zerothread 83552 366765 0 0 3 0x14200 aiodoned aiodoned 28895 392015 0 0 3 0x14200 syncer update 7373 211691 0 0 3 0x14200 cleaner cleaner 94123 417277 0 0 3 0x14200 reaper reaper 43344 109298 0 0 3 0x14200 pgdaemon pagedaemon 86507 187367 0 0 3 0x14200 bored viomb 43858 13730 0 0 3 0x40014200 acpi0 acpi0 37494 382837 0 0 2 0x14200 softnet0 72115 199017 0 0 3 0x14200 smrbar systqmp 96695 15522 0 0 3 0x14200 bored systq 7182 293757 0 0 3 0x40014200 tmoslp softclock 72823 365129 0 0 3 0x40014200 idle0 1 184044 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11041 12098K 12507K 166960K 12786 0 pcb 17 13K 14K 166960K 173 0 rtable 125 6K 12K 166960K 497 0 pf 21 11K 18K 166960K 114 0 ifaddr 18 3K 7K 166960K 62 0 ifgroup 26 1K 2K 166960K 86 0 sysctl 3 1K 9K 166960K 12 0 counters 27 17K 18K 166960K 45 0 ioctlops 0 0K 4K 166960K 228 0 iov 0 0K 16K 166960K 19 0 mount 1 1K 1K 166960K 1 0 log 2 0K 0K 166960K 6 0 vnodes 1415 89K 89K 166960K 1893 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 35 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 4 13K 89K 166960K 724 0 sigio 0 0K 0K 166960K 7 0 proc 11 17K 91K 166960K 594 0 subproc 18 1K 4K 166960K 91 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 63 0 in_multi 33 2K 7K 166960K 143 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 18 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 1 0K 1K 166960K 519 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 31 27K 161K 166960K 7988 0 UVM aobj 14 2K 2K 166960K 15 0 pinsyscall 7 14K 91K 166960K 2079 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 5 0K 1K 166960K 41 0 temp 30 9105K 9170K 166960K 25694 0 kqueue 0 0K 28K 166960K 106 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 105 0 105 2 0 2 2 0 8 2 rtentry 136 142 0 96 4 0 4 4 0 8 1 unpcb 144 285 0 285 4 0 4 4 0 8 4 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpcb 736 123 0 122 2 0 2 2 0 8 1 arp 96 23 0 16 1 0 1 1 0 8 0 ipq 40 2 0 1 1 0 1 1 0 8 0 ipqe 40 4 0 3 1 0 1 1 0 8 0 inpcb 328 460 0 459 4 0 4 4 0 8 3 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 3 0 0 1 0 1 1 0 8 0 nd6 112 36 0 30 1 0 1 1 0 8 0 pkpcb 40 6 0 6 1 0 1 1 0 8 1 kcovpl 48 10 0 8 1 0 1 1 0 8 0 ppxss 1072 7 0 7 1 0 1 1 0 8 1 pfstscr 40 6 0 4 1 0 1 1 0 8 0 pfrktable 1344 11 1 11 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 5 0 5 1 0 1 1 0 8 1 pftag 88 3 0 3 1 0 1 1 0 8 1 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 3 0 0 1 0 1 1 0 8 0 pfstkey 128 8 0 5 1 0 1 1 0 8 0 pfstate 384 5 0 3 1 0 1 1 0 8 0 pfrule 1360 8 0 8 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 601 0 407 30 5 25 30 0 8 9 art_table 40 604 0 407 5 0 5 5 0 8 1 art_node 32 142 0 99 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 9 1 0 1 1 0 8 0 semapl 72 33 0 23 1 0 1 1 0 8 0 shmpl 112 12 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2486 0 1033 92 0 92 92 0 8 0 ffsino 256 2517 0 1064 92 0 92 92 0 8 0 nchpl 144 3240 0 1537 64 0 64 64 0 8 0 rtmask 32 2 0 2 1 0 1 1 0 8 1 vnodes 216 2973 0 0 166 0 166 166 0 8 0 namei 1024 10736 0 10735 2 0 2 2 0 8 1 pfiaddrpl 120 4 0 4 1 0 1 1 0 8 1 kstatmem 264 43 0 32 2 0 2 2 0 8 0 scsiplug 72 4 0 4 1 0 1 1 0 8 1 scxspl 216 19131 0 19131 8 0 8 8 1 8 8 plimitpl 152 228 0 224 1 0 1 1 0 8 0 sigapl 424 1041 0 1019 8 0 8 8 0 8 4 knotepl 120 22956 0 22956 17 9 8 17 0 8 8 kqueuepl 184 248 0 248 4 0 4 4 0 8 4 pipepl 304 464 0 455 5 0 5 5 0 8 3 fdescpl 448 1007 0 1000 5 0 5 5 0 8 2 filepl 120 5215 0 5178 10 0 10 10 0 8 3 lockfpl 104 213 0 213 1 0 1 1 0 8 1 lockfspl 48 92 0 92 1 0 1 1 0 8 1 sessionpl 144 41 0 39 1 0 1 1 0 8 0 pgrppl 48 151 0 147 1 0 1 1 0 8 0 ucredpl 104 737 0 734 1 0 1 1 0 8 0 zombiepl 144 1021 0 1019 1 0 1 1 0 8 0 processpl 1152 1041 0 1019 5 0 5 5 0 8 1 procpl 664 1730 0 1708 7 0 7 7 0 8 3 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 552 876 0 875 7 0 7 7 0 8 6 mcl64k 65536 40 0 39 1 0 1 1 0 8 0 mcl8k 8192 8 0 7 1 0 1 1 0 8 0 mcl4k 4096 3176 0 3121 14 0 14 14 0 8 6 mcl2k 2048 563 0 561 4 0 4 4 0 8 3 mtagpl 96 10 0 10 1 0 1 1 0 8 1 mbufpl 256 9489 0 9392 19 0 19 19 0 8 3 bufpl 280 8607 0 2391 445 0 445 445 0 8 0 anonpl 24 148412 0 148153 57 0 57 57 0 186 40 amapchunkpl 152 26028 0 25955 36 0 36 36 0 158 24 amappl16 200 2118 0 2114 16 4 12 15 0 8 8 amappl15 192 10 0 10 1 0 1 1 0 8 1 amappl14 184 438 0 438 1 0 1 1 0 8 1 amappl13 176 122 0 122 1 0 1 1 0 8 1 amappl12 168 1348 0 1344 2 0 2 2 0 8 0 amappl11 160 10 0 10 1 0 1 1 0 8 1 amappl10 152 59 0 59 1 0 1 1 0 8 1 amappl9 144 286 0 286 1 0 1 1 0 8 1 amappl8 136 102 0 102 1 0 1 1 0 8 1 amappl7 128 147 0 145 1 0 1 1 0 8 0 amappl6 120 167 0 167 1 0 1 1 0 8 1 amappl5 112 96 0 96 1 0 1 1 0 8 1 amappl4 104 267 0 266 1 0 1 1 0 8 0 amappl3 96 4979 0 4964 4 0 4 4 0 8 1 amappl2 88 583 0 580 2 0 2 2 0 8 0 amappl1 80 13205 0 13179 13 1 12 13 0 8 8 amappl 88 7042 0 7015 5 0 5 5 0 92 1 uvmvnodes 80 119 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1007 0 1000 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1007 0 1000 1 0 1 1 0 8 0 vmmpekpl 168 10227 0 10202 3 0 3 3 0 8 0 vmmpepl 168 72430 0 72237 92 0 92 92 0 357 65 vmsppl 368 1006 0 1000 4 0 4 4 0 8 1 rwobjpl 40 20811 0 20613 13 0 13 13 0 8 0 pdppl 4096 2020 0 2000 96 58 38 78 0 8 18 pvpl 32 424680 0 423854 118 0 118 118 0 265 73 pmappl 216 1006 0 1000 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 373 0 63 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace memset() at memset+0x52 ffs_write(ffff80003c93cc60) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff5006cec4548,ffff80003c93ccf0,0,fffff50007ffd618) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 uvn_io(fffff5006f208a08,ffff80003c93ce70,6,39,1) at uvn_io+0x485 sys/uvm/uvm_vnode.c:1232 uvm_pager_put(fffff5006f208a08,fffff5000731c380,ffff80003c93cf10,ffff80003c93cf34,39,0,d7e3ff200b6a909b) at uvm_pager_put+0x10a sys/uvm/uvm_pager.c:505 uvn_flush(fffff5006f208a08,0,0,19) at uvn_flush+0x68d sys/uvm/uvm_vnode.c:705 uvn_detach(fffff5006f208a08) at uvn_detach+0xb8 sys/uvm/uvm_vnode.c:344 uvm_unmap_detach(ffff80003c93d058,0) at uvm_unmap_detach+0x15e sys/uvm/uvm_map.c:1370 uvmspace_exec(ffff80002a7662a8,1000,7f7fffffc000) at uvmspace_exec+0x451 sys/uvm/uvm_map.c:3404 sys_execve(ffff80002a7662a8,ffff80003c93d6e0,ffff80003c93d630) at sys_execve+0xc61 sys/kern/kern_exec.c:474 syscall(ffff80003c93d6e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c93d6e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b40e746e570, count: -12 ddb> machine ddbcpu 1 No such command ddb>