uvm_fault(0xffffffff839ce170, 0xffff800026a92004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *173993 19188 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a817860) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd8069668db0,ffff80002a8178e8,fffffd8007ffd8f0,ffff80002a81792c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002f0aa020,ffff80002a817a70,ffff80002a8179c0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a817a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a817a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x709fb000f110, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839ce170, 0xffff800026a92004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a817860) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd8069668db0,ffff80002a8178e8,fffffd8007ffd8f0,ffff80002a81792c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002f0aa020,ffff80002a817a70,ffff80002a8179c0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a817a70) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a817a70) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x709fb000f110, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a817850 rbx 0x200 rdx 0 rcx 0xfffffd8076569d38 rax 0xffff800026a92200 r8 0xffffffffffffffff r9 0x3 r10 0x6b3a56c3559c4574 r11 0x7644be3a61c79ed2 r12 0 r13 0xffff80002a8178e8 r14 0xffff800026a92000 r15 0xffff800026a92008 rip 0xffffffff8267a13e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a8176a0 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=173993 pid=19188 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f0aad18,0xffff8000394d7a28 process=0xffff80002f0af198 user=0xffff80002a812000, vmspace=0xfffffd807ec67730 estcpu=36, cpticks=3, pctcpu=0.2, user=0, sys=3, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 43507 72507 36474 0 2 0 syz-executor 43507 40703 36474 0 3 0x4000080 fsleep syz-executor 7074 300376 23326 0 2 0 syz-executor 7074 56062 23326 0 3 0x4000080 fsleep syz-executor 35250 280178 76024 0 2 0 syz-executor 35250 22830 76024 0 3 0x4000080 fsleep syz-executor 4687 430765 38543 0 2 0 syz-executor 4687 470646 38543 0 2 0x4000000 syz-executor *19188 173993 78340 0 7 0x2 syz-executor 23326 383601 78340 0 2 0xc82 syz-executor 80117 437307 1 0 3 0x100083 ttyin getty 89167 334392 0 0 3 0x14200 acct acct 53196 252522 0 0 3 0x14280 nfsidl nfsio 45231 138860 0 0 3 0x14280 nfsidl nfsio 70926 243765 0 0 3 0x14280 nfsidl nfsio 54506 390965 0 0 3 0x14280 nfsidl nfsio 67324 367925 0 0 3 0x14280 nfsidl nfsio 36206 57050 0 0 3 0x14280 nfsidl nfsio 32592 449409 0 0 3 0x14280 nfsidl nfsio 67039 386876 0 0 3 0x14280 nfsidl nfsio 50252 484455 0 0 3 0x14280 nfsidl nfsio 29527 249745 0 0 3 0x14280 nfsidl nfsio 73952 175412 0 0 3 0x14280 nfsidl nfsio 70692 87299 0 0 3 0x14280 nfsidl nfsio 94900 268300 0 0 3 0x14280 nfsidl nfsio 75441 312719 0 0 3 0x14280 nfsidl nfsio 34629 310556 0 0 3 0x14280 nfsidl nfsio 96574 88502 0 0 3 0x14280 nfsidl nfsio 83934 443447 0 0 3 0x14280 nfsidl nfsio 17740 122659 0 0 3 0x14280 nfsidl nfsio 96501 126766 0 0 3 0x14280 nfsidl nfsio 99820 75133 0 0 3 0x14280 nfsidl nfsio 66092 195169 78340 0 2 0x10000c82 syz-executor 36474 206363 78340 0 2 0xc82 syz-executor 38543 156208 78340 0 2 0xc82 syz-executor 69565 299511 78340 0 2 0x2 syz-executor 76024 375547 78340 0 2 0xc82 syz-executor 78340 305628 1 0 3 0x82 wait syz-executor 84486 345256 0 0 3 0x14200 bored smr 40881 142275 0 0 2 0x14200 zerothread 12900 225626 0 0 3 0x14200 aiodoned aiodoned 56641 278472 0 0 3 0x14200 syncer update 97634 514004 0 0 3 0x14200 cleaner cleaner 89785 55436 0 0 3 0x14200 reaper reaper 72070 140177 0 0 3 0x14200 pgdaemon pagedaemon 55198 197609 0 0 3 0x14200 bored viomb 53994 512262 0 0 3 0x40014200 acpi0 acpi0 97129 106644 0 0 3 0x14200 bored softnet0 96887 262217 0 0 3 0x14200 bored systqmp 56420 460126 0 0 3 0x14200 bored systq 77310 195133 0 0 3 0x40014200 tmoslp softclock 65959 145541 0 0 3 0x40014200 idle0 1 259453 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11036 12115K 12319K 166960K 12892 0 pcb 17 12K 12K 166960K 154 0 rtable 182 14K 16K 166960K 588 0 pf 33 13K 18K 166960K 197 0 ifaddr 31 5K 7K 166960K 97 0 ifgroup 46 2K 2K 166960K 141 0 sysctl 3 1K 9K 166960K 7 0 counters 32 17K 18K 166960K 81 0 ioctlops 0 0K 4K 166960K 135 0 iov 0 0K 12K 166960K 21 0 mount 1 1K 1K 166960K 1 0 log 1 0K 0K 166960K 5 0 vnodes 1298 82K 82K 166960K 1864 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 12 0 dirhash 12 2K 3K 166960K 60 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 13 49K 93K 166960K 1072 0 sigio 0 0K 0K 166960K 10 0 proc 20 25K 91K 166960K 629 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 23 0 in_multi 65 4K 7K 166960K 177 0 ether_multi 1 0K 0K 166960K 17 0 mrt 0 0K 0K 166960K 51 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 448 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 104 81K 167K 166960K 10188 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 16 32K 94K 166960K 2259 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 50 0 NDP 12 0K 2K 166960K 66 0 temp 44 9104K 9150K 166960K 28912 0 kqueue 1 2K 29K 166960K 173 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 57 0 57 1 0 1 1 0 8 1 rtentry 136 172 0 100 4 0 4 4 0 8 0 unpcb 144 261 0 260 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 94 0 93 1 0 1 1 0 8 0 arp 96 25 0 15 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 4 0 2 1 0 1 1 0 8 0 inpcb 328 385 0 384 1 0 1 1 0 8 0 nd6 112 34 0 20 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1072 38 0 38 2 1 1 1 0 8 1 pppxif 1416 5 0 5 1 0 1 1 0 8 1 pfstscr 40 35 0 26 1 0 1 1 0 8 0 pfrktable 1344 20 0 20 2 1 1 1 0 8 1 pfanchor 1288 11 0 10 1 0 1 1 0 8 0 pftag 88 7 0 6 2 1 1 1 0 8 0 pfstitem 24 15 0 5 1 0 1 1 0 8 0 pfstkey 128 33 0 25 1 0 1 1 0 8 0 pfstate 384 19 0 13 1 0 1 1 0 8 0 pfrule 1360 29 0 29 2 1 1 1 0 8 1 rttmr 136 13 0 13 2 1 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 891 0 578 31 4 27 31 0 8 6 art_table 40 893 0 578 5 0 5 5 0 8 0 art_node 32 172 0 107 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 72 9 0 1 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 49 0 32 3 0 3 3 0 8 0 dino2pl 256 3070 0 1608 92 0 92 92 0 8 0 ffsino 256 3071 0 1609 92 0 92 92 0 8 0 nchpl 144 4289 0 2589 64 0 64 64 0 8 0 vnodes 216 3410 0 0 190 0 190 190 0 8 0 namei 1024 12670 0 12670 1 0 1 1 0 8 1 pfiaddrpl 120 4 0 4 1 0 1 1 0 8 1 kstatmem 264 89 0 68 2 0 2 2 0 8 0 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 20893 0 20893 4 2 2 3 1 8 2 plimitpl 152 215 0 204 1 0 1 1 0 8 0 sigapl 424 1386 0 1335 8 1 7 7 0 8 0 knotepl 120 37812 0 37795 28 18 10 17 0 8 8 kqueuepl 184 183 0 182 1 0 1 1 0 8 0 pipepl 304 137 0 110 3 0 3 3 0 8 0 fdescpl 448 1351 0 1335 5 1 4 5 0 8 0 filepl 120 4726 0 4569 7 0 7 7 0 8 0 lockfpl 104 262 0 262 1 0 1 1 0 8 1 lockfspl 48 105 0 105 1 0 1 1 0 8 1 sessionpl 144 54 0 51 1 0 1 1 0 8 0 pgrppl 48 65 0 54 1 0 1 1 0 8 0 ucredpl 104 1263 0 1260 1 0 1 1 0 8 0 zombiepl 144 1337 0 1335 2 1 1 1 0 8 0 processpl 1152 1386 0 1335 4 0 4 4 0 8 0 procpl 664 2440 0 2385 6 0 6 6 0 8 0 sockpl 552 706 0 704 3 0 3 3 0 8 2 mcl64k 65536 519 0 519 2 1 1 1 0 8 1 mcl16k 16384 233 0 233 2 1 1 1 0 8 1 mcl12k 12288 107 0 107 1 0 1 1 0 8 1 mcl9k128 9344 50 0 50 2 1 1 1 0 8 1 mcl8k 8192 142 0 142 2 1 1 1 0 8 1 mcl4k 4096 4354 0 4300 14 6 8 13 0 8 0 mcl2k2 2112 2 0 2 1 1 0 1 0 8 0 mcl2k 2048 383 0 381 4 1 3 3 0 8 2 mtagpl 96 24 0 20 1 0 1 1 0 8 0 mbufpl 256 15682 0 15590 23 5 18 18 0 8 6 bufpl 280 8640 0 2424 445 0 445 445 0 8 0 anonpl 24 186933 0 185640 69 22 47 52 0 186 24 amapchunkpl 152 33803 0 33545 35 8 27 28 0 158 12 amappl16 200 3651 0 3627 29 15 14 18 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 535 0 535 1 0 1 1 0 8 1 amappl13 176 123 0 122 1 0 1 1 0 8 0 amappl12 168 1616 0 1601 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 58 0 58 1 0 1 1 0 8 1 amappl9 144 267 0 267 1 1 0 1 0 8 0 amappl8 136 105 0 105 1 0 1 1 0 8 1 amappl7 128 152 0 150 1 0 1 1 0 8 0 amappl6 120 181 0 181 1 0 1 1 0 8 1 amappl5 112 89 0 89 1 0 1 1 0 8 1 amappl4 104 271 0 269 1 0 1 1 0 8 0 amappl3 96 7122 0 7066 4 0 4 4 0 8 1 amappl2 88 544 0 539 2 0 2 2 0 8 0 amappl1 80 14228 0 1