uvm_fault(0xfffffd806b98b3e8, 0x6b0b60, 0, 2) -> e kernel: page fault trap, code=2 Stopped at copyout+0x57: repe movsq (%rsi),%es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND *394719 81672 0 0 0x4000000 0 syz-executor copyout() at copyout+0x57 syscall(ffff80002a3d3d90) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3d3d90) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a02bcd8c0, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806b98b3e8, 0x6b0b60, 0, 2) -> e ddb{0}> trace copyout() at copyout+0x57 syscall(ffff80002a3d3d90) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3d3d90) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a02bcd8c0, count: -3 ddb{0}> show registers rdi 0x6b0b60 acpi_pdirpa+0x69c9d1 rsi 0xffff80002a3d3a70 rbp 0xffff80002a3d3cb0 rbx 0xfffca7a4 rdx 0xffff80002a3ce000 rcx 0x4 rax 0x20 r8 0x7f7fffffc000 r9 0 r10 0x12b96ce1acec8b64 r11 0xffffffff831cbe50 copy_fault r12 0x4 r13 0x16 r14 0xffff80002a3d3a70 r15 0xffff80002a3d3d90 rip 0xffffffff831cbd77 copyout+0x57 cs 0x8 rflags 0x50202 acpi_pdirpa+0x3c073 rsp 0xffff80002a3d3a00 ss 0x10 copyout+0x57: repe movsq (%rsi),%es:(%rdi) ddb{0}> show proc PROC (syz-executor) tid=394719 pid=81672 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=85, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff3238,0xffff8000ffff2d18 process=0xffff800038429368 user=0xffff80002a3ce000, vmspace=0xfffffd806b98b3e8 estcpu=36, cpticks=56, pctcpu=0.43, user=0, sys=55, intr=1 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 22016 509817 98974 0 2 0 syz-executor 22016 385029 98974 0 2 0x4000000 syz-executor 74020 545 97043 0 2 0 syz-executor 74020 131491 97043 0 3 0x4000080 fsleep syz-executor 47636 428786 39643 0 2 0 syz-executor 47636 79434 39643 0 2 0x4000000 syz-executor 8543 65765 84169 0 2 0x100002 sh 95515 103937 26300 0 2 0x100002 sh 81672 267901 32372 0 2 0 syz-executor *81672 394719 32372 0 7 0x4000000 syz-executor 84169 115150 39351 0 3 0x82 wait syz-executor 26300 509454 39351 0 3 0x82 wait syz-executor 23643 332594 0 0 3 0x14200 acct acct 39643 282764 39351 0 3 0x82 nanoslp syz-executor 32372 399670 39351 0 3 0x82 nanoslp syz-executor 18682 338779 1 0 3 0x100083 ttyin getty 97043 161648 39351 0 3 0x82 nanoslp syz-executor 98974 316458 39351 0 3 0x82 nanoslp syz-executor 48524 381580 39351 0 3 0x82 nanoslp syz-executor 4312 105413 39351 0 2 0x2 syz-executor 76303 195611 0 0 3 0x14200 bored sosplice 39351 174909 28085 0 3 0x82 kqread syz-executor 28085 148314 98233 0 3 0x10008a sigsusp ksh 98233 221949 48553 0 3 0x98 kqread sshd-session 48553 38644 96559 0 3 0x92 kqread sshd-session 96559 479134 1 0 3 0x88 kqread sshd 67626 201282 10450 74 3 0x1100092 bpf pflogd 10450 482172 1 0 3 0x80 sbwait pflogd 1461 69745 62994 73 3 0x1100090 kqread syslogd 62994 507892 1 0 3 0x100082 sbwait syslogd 89172 212957 1 0 3 0x100080 kqread resolvd 92878 47737 96962 77 3 0x100092 kqread dhcpleased 91494 401385 96962 77 3 0x100092 kqread dhcpleased 96962 349037 1 0 3 0x80 kqread dhcpleased 29177 8573 0 0 3 0x14200 bored smr 31434 73286 0 0 2 0x14200 zerothread 26336 447105 0 0 3 0x14200 aiodoned aiodoned 79471 307553 0 0 3 0x14200 syncer update 97330 129685 0 0 3 0x14200 cleaner cleaner 7803 390870 0 0 3 0x14200 reaper reaper 39649 276060 0 0 3 0x14200 pgdaemon pagedaemon 27128 357806 0 0 3 0x14200 bored viomb 2444 458556 0 0 3 0x40014200 acpi0 acpi0 81166 417133 0 0 7 0x40014200 idle1 78536 210381 0 0 3 0x14200 bored softnet7 57133 304406 0 0 3 0x14200 bored softnet6 66669 193715 0 0 3 0x14200 bored softnet5 68264 313775 0 0 3 0x14200 bored softnet4 182 511223 0 0 3 0x14200 bored softnet3 26977 507666 0 0 3 0x14200 bored softnet2 22323 391201 0 0 3 0x14200 bored softnet1 57036 201004 0 0 3 0x14200 bored softnet0 59969 188344 0 0 3 0x14200 bored systqmp 12231 4361 0 0 3 0x14200 bored systq 68145 45886 0 0 3 0x14200 tmoslp softclockmp 65202 481619 0 0 3 0x40014200 tmoslp softclock 67452 314855 0 0 3 0x40014200 idle0 1 491628 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 22016 (syz-executor) thread 0xffff80002a39b268 (385029) exclusive rrwlock inode r = 0 (0xfffffd80651ba920) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vn_write+0x18f sys/kern/vfs_vnops.c:405 #6 dofilewritev+0x242 sys/kern/sys_generic.c:380 #7 sys_write+0xa2 sys/kern/sys_generic.c:300 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 #9 Xsyscall+0x128 Process 8543 (sh) thread 0xffff800032c094e0 (65765) exclusive rwlock vmmaplk r = 0 (0xfffffd806b98b118) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168 #3 uvm_map_pageable+0x183 sys/uvm/uvm_map.c:2214 #4 sysctl_vslock+0x106 sys/kern/kern_sysctl.c:201 #5 sys_sysctl+0x371 sys/kern/kern_sysctl.c:301 #6 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 #7 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff8385d2f8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 sysctl_vslock+0x45 sys/kern/kern_sysctl.c:191 #3 sys_sysctl+0x371 sys/kern/kern_sysctl.c:301 #4 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 #5 Xsyscall+0x128 Process 95515 (sh) thread 0xffff800032c08fb0 (103937) exclusive rwlock vmmaplk r = 0 (0xfffffd806b98bc88) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168 #3 uvmspace_fork+0x12b sys/uvm/uvm_map.c:3738 #4 process_new+0x577 sys/kern/kern_fork.c:281 #5 fork1+0x3f6 sys/kern/kern_fork.c:-1 #6 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffffd805f446500) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168 #3 uvmspace_fork+0x44 sys/uvm/uvm_map.c:3729 #4 process_new+0x577 sys/kern/kern_fork.c:281 #5 fork1+0x3f6 sys/kern/kern_fork.c:-1 #6 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 #7 Xsyscall+0x128 Process 4312 (syz-executor) thread 0xffff80002a39a2d8 (105413) exclusive rwlock vmmaplk r = 0 (0xfffffd806b98b6d0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168 #3 uvmspace_fork+0x44 sys/uvm/uvm_map.c:3729 #4 process_new+0x577 sys/kern/kern_fork.c:281 #5 fork1+0x3f6 sys/kern/kern_fork.c:-1 #6 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 #7 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10248 11083K 12356K 166960K 16645 0 pcb 18 17K 22K 166960K 1124 0 rtable 169 13K 14K 166960K 1323 0 pf 36 18K 67485K 166960K 533 0 ifaddr 29 5K 8K 166960K 355 0 ifgroup 55 2K 2K 166960K 584 0 sysctl 4 1K 9K 166960K 100 0 counters 68 36K 38K 166960K 684 0 ioctlops 0 0K 4K 166960K 2651 0 iov 0 0K 32K 166960K 459 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1515 95K 96K 166960K 5753 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 5K 13K 166960K 54 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 243 0 dirhash 12 2K 2K 166960K 54 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 236K 166960K 4632 0 sigio 0 0K 0K 166960K 93 0 proc 72 115K 163K 166960K 1907 0 subproc 72 4K 4K 166960K 371 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 837 0 in_multi 43 3K 7K 166960K 586 0 ether_multi 1 0K 0K 166960K 24 0 mrt 1 0K 0K 166960K 22 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 181 811K 811K 166960K 181 0 exec 0 0K 1K 166960K 1460 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 6 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 161K 178K 166960K 42421 0 UVM aobj 27 3K 3K 166960K 27 0 pinsyscall 44 88K 100K 166960K 6532 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 332 0 NDP 12 0K 2K 166960K 264 0 temp 82 8652K 8908K 166960K 208454 0 kqueue 15 22K 32K 166960K 868 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 452 0 449 4 3 1 3 0 8 0 rtentry 176 484 0 436 5 0 5 5 0 8 0 unpcb 144 2926 0 2909 21 15 6 6 0 8 5 syncache 336 11 0 11 4 4 0 1 0 8 0 tcpqe 32 4 0 4 3 3 0 1 0 8 0 tcpcb 736 1905 0 1900 52 45 7 13 0 8 6 arp 128 61 0 51 1 0 1 1 0 8 0 inpcb 328 5312 0 5301 56 49 7 13 0 8 5 nd6 144 84 0 79 1 0 1 1 0 8 0 pkpcb 40 39 0 39 8 8 0 1 0 8 0 kcovpl 48 41 0 33 1 0 1 1 0 8 0 mppekey 1024 3 0 3 2 2 0 1 0 8 0 ppxss 1192 233 0 233 4 3 1 1 0 8 1 pppxif 1504 19 0 19 7 6 1 1 0 8 1 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pffrag 232 25 0 24 1 0 1 1 0 482 0 pffrnode 88 19 0 18 1 0 1 1 0 8 0 pffrent 40 45 0 44 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 3 3 3 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 52 0 48 1 0 1 1 0 8 0 pfstkey 128 52 0 48 2 0 2 2 0 8 0 pfstate 384 51 0 48 4 2 2 4 0 8 0 pfrule 1344 29 0 24 2 1 1 2 0 8 0 rttmr 136 6 0 6 4 4 0 1 0 8 0 art_heap8 4096 7 0 3 6 2 4 6 0 8 0 art_heap4 256 2281 0 2067 33 13 20 28 0 8 1 art_table 40 2288 0 2070 5 0 5 5 0 8 0 art_node 32 482 0 447 1 0 1 1 0 8 0 sysvmsgpl 40 15 0 11 2 1 1 1 0 8 0 semupl 112 4 0 4 1 1 0 1 0 8 0 semapl 112 237 0 227 1 0 1 1 0 8 0 shmpl 112 24 0 0 1 0 1 1 0 8 0 dirhash 1024 45 0 28 3 0 3 3 0 8 0 dino2pl 256 9733 0 8159 99 0 99 99 0 8 0 ffsino 296 9733 0 8159 122 0 122 122 0 8 0 nchpl 144 15654 0 14999 64 38 26 64 0 8 0 rtmask 32 28 0 28 9 8 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 57301 0 57301 5 4 1 3 0 8 1 percpumem 16 357 0 308 1 0 1 1 0 8 0 kstatmem 264 378 0 348 5 2 3 3 0 8 0 scsiplug 72 22 0 22 10 10 0 1 0 8 0 scxspl 216 74964 0 74964 15 14 1 8 1 8 1 plimitpl 152 1057 0 1039 1 0 1 1 0 8 0 sigapl 424 4853 0 4796 9 2 7 9 0 8 0 knotepl 120 834 0 0 24 0 24 24 0 8 0 kqueuepl 224 1851 0 1839 22 21 1 5 0 8 0 pipepl 344 698 0 671 13 10 3 9 0 8 0 fdescpl 528 4796 0 4763 3 0 3 3 0 8 0 filepl 160 32173 0 31953 42 27 15 19 0 8 2 lockfpl 104 2931 0 2928 7 6 1 2 0 8 0 lockfspl 48 933 0 930 1 0 1 1 0 8 0 sessionpl 144 64 0 55 1 0 1 1 0 8 0 pgrppl 48 292 0 275 1 0 1 1 0 8 0 ucredpl 104 5500 0 5486 1 0 1 1 0 8 0 zombiepl 144 7630 0 7629 1 0 1 1 0 8 0 processpl 1232 4853 0 4796 6 0 6 6 0 8 0 procpl 664 12317 0 12256 9 2 7 8 0 8 0 sosppl 168 13 0 13 4 4 0 1 0 8 0 sockpl 752 8836 0 8805 79 68 11 20 0 8 6 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 14 0 0 2 0 2 2 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 4 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 15 0 15 15 0 8 0 mcl2k 2048 66 0 0 8 1 7 8 0 8 0 mtagpl 96 43 0 0 2 0 2 2 0 8 0 mbufpl 256 6064 0 0 377 0 377 377 0 8 0 bufpl 280 43859 0 37716 441 1 440 440 0 8 0 anonpl 32 16619 0 0 136 1 135 135 0 246 0 amapchunkpl 152 146208 0 145697 71 36 35 35 0 158 10 amappl16 200 15647 0 15506 107 99 8 44 0 8 0 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 193 0 181 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 5957 0 5925 4 2 2 3 0 8 0 amappl11 160 52 0 38 1 0 1 1 0 8 0 amappl10 152 8 0 7 1 0 1 1 0 8 0 amappl9 144 265 0 265 1 1 0 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 184 0 172 1 0 1 1 0 8 0 amappl6 120 570 0 564 1 0 1 1 0 8 0 amappl5 112 261 0 251 1 0 1 1 0 8 0 amappl4 104 354 0 332 1 0 1 1 0 8 0 amappl3 96 30372 0 30267 5 1 4 4 0 8 0 amappl2 88 1158 0 1092 2 0 2 2 0 8 0 amappl1 80 30202 0 29594 18 3 15 17 0 8 0 amappl 88 40483 0 40326 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 3 0 3 3 3 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 3 0 2 1 0 1 1 0 8 0 dma256 256 8 0 8 3 3 0 1 0 8 0 dma128 128 261 0 261 6 6 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 26 0 0 1 0 1 1 0 8 0 uaddrrnd 24 4795 0 4763 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4795 0 4763 1 0 1 1 0 8 0 vmmpekpl 168 36480 0 36417 4 0 4 4 0 8 0 vmmpepl 168 304945 0 302852 131 30 101 123 0 357 0 vmsppl 488 4795 0 4763 7 2 5 5 0 8 0 rwobjpl 80 84211 0 77191 151 3 148 148 0 8 0 pdppl 4096 9599 0 9526 172 98 74 84 0 8 1 pvpl 32 23697 0 0 193 1 192 192 0 265 0 pmappl 256 4795 0 4763 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 795 0 178 18 0 18 18 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace copyout() at copyout+0x57 syscall(ffff80002a3d3d90) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a3d3d90) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a02bcd8c0, count: -3 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224 sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224 sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: -5