uvm_fault(0xfffffa806d17c460, 0xa00000074, 0, 1) -> e kernel: page fault trap, code=0 Stopped at amap_lookups+0x1e0: movl 0x10(%r15),%r14d TID PID UID PRFLAGS PFLAGS CPU COMMAND *172284 72774 0 0 0 0 syz-executor amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000380c9000,ffff8000380c9038,ffff8000380c9070,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffffa806d17c460,a06eb8ac000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000380c91a0,a06eb8acf70) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000380c91a0) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b7da5e98b90, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffa806d17c460, 0xa00000074, 0, 1) -> e ddb> show kasan No such command ddb> trace amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000380c9000,ffff8000380c9038,ffff8000380c9070,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffffa806d17c460,a06eb8ac000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000380c91a0,a06eb8acf70) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000380c91a0) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b7da5e98b90, count: -6 ddb> show registers rdi 0x11 rsi 0x20 rbp 0xffff8000380c8e50 rbx 0 rdx 0 rcx 0 rax 0xffff800000c57f20 r8 0xffffffff8228fd20 uvm_map_inentry_sp r9 0 r10 0 r11 0x41c73634d3c6817a r12 0x9 r13 0 r14 0x20 r15 0xa00000064 rip 0xffffffff8294a4b0 amap_lookups+0x1e0 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff8000380c8dc0 ss 0 amap_lookups+0x1e0: movl 0x10(%r15),%r14d ddb> show proc PROC (syz-executor) tid=172284 pid=72774 tcnt=1 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c91d780,0xffffffff839f7ac8 process=0xffff800045ffa418 user=0xffff8000380c4000, vmspace=0xfffffa806d17c460 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND *72774 172284 35143 0 7 0 0 syz-executor 61082 499564 71532 0 2 0x2 0 syz-executor 20215 433560 52515 0 2 0 0 syz-executor 20215 519588 52515 0 3 0 0x4000080 fsleep syz-executor 11660 221493 46483 0 3 0 0x80 fsleep syz-executor 11660 188670 46483 0 2 0 0x4000000 syz-executor 11660 266696 46483 0 3 0 0x4000080 fsleep syz-executor 3891 415075 71532 0 2 0x2 0 syz-executor 71310 454912 42512 0 3 0 0x80 fsleep syz-executor 71310 283947 42512 0 3 0 0x4000080 kqsel syz-executor 31885 384821 32048 0 3 0 0x80 fsleep syz-executor 31885 122451 32048 0 3 0 0x4000080 bell syz-executor 32048 368318 71532 0 2 0x2 0xc80 syz-executor 52515 396984 71532 0 3 0x2 0x80 nanoslp syz-executor 46483 295779 71532 0 3 0x2 0x80 nanoslp syz-executor 72658 380504 71532 0 2 0x2 0 syz-executor 35143 7995 71532 0 2 0x2 0 syz-executor 42512 274311 71532 0 2 0x2 0xc80 syz-executor 71532 290985 64955 0 2 0x2 0 syz-executor 64955 438007 72999 0 3 0x100002 0x88 sigsusp ksh 72999 325426 27791 0 3 0x10 0x88 kqread sshd-session 27791 389003 9574 0 3 0x12 0x80 kqread sshd-session 52071 419264 1 0 3 0x100003 0x80 ttyin getty 9574 48035 1 0 3 0 0x88 kqread sshd 76999 357266 61869 73 3 0x1100010 0x80 kqread syslogd 61869 430170 1 0 3 0x100002 0x80 sbwait syslogd 60090 442359 1 0 3 0x100000 0x80 kqread resolvd 31676 272253 45468 77 3 0x100012 0x80 kqread dhcpleased 33505 329783 45468 77 3 0x100012 0x80 kqread dhcpleased 45468 369619 1 0 3 0 0x80 kqread dhcpleased 68944 496662 0 0 3 0x14000 0x200 bored smr 12709 516780 0 0 2 0x14000 0x200 zerothread 18259 329313 0 0 3 0x14000 0x200 aiodoned aiodoned 16528 168175 0 0 3 0x14000 0x200 syncer update 16370 214231 0 0 3 0x14000 0x200 cleaner cleaner 25053 519197 0 0 3 0x14000 0x200 reaper reaper 17242 246123 0 0 3 0x14000 0x200 pgdaemon pagedaemon 60457 519426 0 0 3 0x14000 0x200 bored viomb 80750 392682 0 0 3 0x14000 0x40000200 acpi0 acpi0 61873 30939 0 0 3 0x14000 0x200 bored softnet0 67514 384508 0 0 3 0x14000 0x200 bored systqmp 85731 374792 0 0 3 0x14000 0x200 bored systq 38425 273637 0 0 3 0x14000 0x40000200 tmoslp softclock 30587 257593 0 0 3 0x14000 0x40000200 idle0 1 443855 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11039 12121K 12522K 166960K 12699 0 pcb 17 12K 12K 166960K 87 0 rtable 166 5K 7K 166960K 730 0 pf 30 12K 13K 166960K 62 0 ifaddr 30 4K 7K 166960K 95 0 ifgroup 50 2K 2K 166960K 106 0 sysctl 3 1K 9K 166960K 16 0 counters 33 17K 18K 166960K 48 0 ioctlops 0 0K 4K 166960K 171 0 iov 0 0K 17K 166960K 16 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 81K 82K 166960K 1687 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 12 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 22 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 50K 97K 166960K 675 0 sigio 0 0K 0K 166960K 5 0 proc 63 67K 116K 166960K 850 0 subproc 55 3K 4K 166960K 172 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 111 0 in_multi 60 4K 7K 166960K 240 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 21 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 551 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 192 142K 165K 166960K 6864 0 UVM aobj 53 4K 4K 166960K 55 0 pinsyscall 36 72K 95K 166960K 2063 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 11 0K 2K 166960K 65 0 temp 36 9112K 9121K 166960K 9012 0 kqueue 13 20K 26K 166960K 77 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 74 0 71 1 0 1 1 0 8 0 rtentry 136 242 0 174 4 0 4 4 0 8 0 unpcb 144 380 0 365 6 0 6 6 0 8 5 syncache 336 12 0 12 1 0 1 1 0 8 1 tcpqe 32 4 0 4 1 0 1 1 0 8 1 tcpcb 736 117 0 109 2 0 2 2 0 8 1 arp 96 41 0 33 1 0 1 1 0 8 0 inpcb 328 402 0 390 2 0 2 2 0 8 0 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 59 0 45 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 19 0 13 1 0 1 1 0 8 0 ppxss 1072 2 0 2 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pftag 88 1 0 1 1 0 1 1 0 8 1 pfrule 1360 2 0 2 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1061 0 733 32 0 32 32 0 8 8 art_table 40 1062 0 733 6 0 6 6 0 8 0 art_node 32 242 0 181 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 20 0 10 1 0 1 1 0 8 0 shmpl 112 52 0 2 2 0 2 2 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2232 0 746 93 0 93 93 0 8 0 ffsino 256 2232 0 746 93 0 93 93 0 8 0 nchpl 144 2982 0 1243 65 0 65 65 0 8 0 vnodes 216 2518 0 0 140 0 140 140 0 8 0 namei 1024 10335 0 10334 2 0 2 2 0 8 1 kstatmem 264 53 0 30 2 0 2 2 0 8 0 scsiplug 72 3 0 3 1 0 1 1 0 8 1 scxspl 216 11378 0 11378 8 0 8 8 1 8 8 plimitpl 152 141 0 124 1 0 1 1 0 8 0 sigapl 424 946 0 906 6 0 6 6 0 8 1 knotepl 120 17620 0 17573 9 0 9 9 0 8 7 kqueuepl 184 127 0 117 1 0 1 1 0 8 0 pipepl 304 218 0 191 5 0 5 5 0 8 2 fdescpl 448 933 0 906 5 0 5 5 0 8 1 filepl 120 4321 0 4127 11 0 11 11 0 8 4 lockfpl 104 249 0 247 2 0 2 2 0 8 1 lockfspl 48 56 0 54 1 0 1 1 0 8 0 sessionpl 144 62 0 54 1 0 1 1 0 8 0 pgrppl 48 86 0 70 1 0 1 1 0 8 0 ucredpl 104 528 0 516 1 0 1 1 0 8 0 zombiepl 144 906 0 906 1 0 1 1 0 8 1 processpl 1152 946 0 906 4 0 4 4 0 8 0 procpl 664 1467 0 1422 6 0 6 6 0 8 1 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 552 879 0 849 12 1 11 12 0 8 8 mcl64k 65536 39 0 38 1 0 1 1 0 8 0 mcl16k 16384 1 0 1 1 0 1 1 0 8 1 mcl12k 12288 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 7 0 7 1 0 1 1 0 8 1 mcl4k 4096 3065 0 3013 15 0 15 15 0 8 8 mcl2k 2048 617 0 617 3 0 3 3 0 8 3 mextrefs 64 251 0 251 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 9379 0 8998 26 0 26 26 0 8 0 bufpl 272 3810 0 104 248 0 248 248 0 8 0 anonpl 24 145675 0 142770 44 0 44 44 0 187 18 amapchunkpl 152 21380 0 21003 28 0 28 28 0 158 10 amappl16 200 2283 0 2263 14 3 11 14 0 8 8 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 544 0 543 1 0 1 1 0 8 0 amappl13 176 137 0 127 1 0 1 1 0 8 0 amappl12 168 1215 0 1191 2 0 2 2 0 8 0 amappl11 160 23 0 23 1 0 1 1 0 8 1 amappl10 152 60 0 50 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 189 0 188 1 0 1 1 0 8 0 amappl7 128 162 0 151 1 0 1 1 0 8 0 amappl6 120 259 0 256 1 0 1 1 0 8 0 amappl5 112 95 0 87 1 0 1 1 0 8 0 amappl4 104 309 0 290 1 0 1 1 0 8 0 amappl3 96 4246 0 4159 3 0 3 3 0 8 0 amappl2 88 612 0 558 2 0 2 2 0 8 0 amappl1 80 12966 0 12427 13 0 13 13 0 8 1 amappl 88 5934 0 5803 4 0 4 4 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 54 0 2 1 0 1 1 0 8 0 uaddrrnd 24 933 0 906 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 933 0 906 1 0 1 1 0 8 0 vmmpekpl 168 8885 0 8836 3 0 3 3 0 8 0 vmmpepl 168 66259 0 64644 89 0 89 89 0 357 11 vmsppl 368 932 0 906 4 0 4 4 0 8 1 rwobjpl 40 20516 0 19560 13 0 13 13 0 8 2 pdppl 4096 1872 0 1812 116 50 66 82 0 8 6 pvpl 32 398553 0 390871 119 0 119 119 0 265 41 pmappl 216 932 0 906 3 0 3 3 0 8 1 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 651 0 50 18 0 18 18 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000380c9000,ffff8000380c9038,ffff8000380c9070,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffffa806d17c460,a06eb8ac000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000380c91a0,a06eb8acf70) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000380c91a0) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b7da5e98b90, count: -6 ddb> machine ddbcpu 1 No such command ddb> trace amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffffa806d167970,1000,ffff8000380c8f00,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000380c9000,ffff8000380c9038,ffff8000380c9070,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffffa806d17c460,a06eb8ac000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000380c91a0,a06eb8acf70) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000380c91a0) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7b7da5e98b90, count: -6