login: uvm_fault(0xffffffff83a72490, 0xffff8000221d2210, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *353611 11475 0 0x10 0x4000000 0 syz-executor ffs2_balloc(fffffb007e892500,138000,4000,fffffb0007ffd750,2,ffff80003c9070c8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c907150) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffb006a331d80,ffff80003c907308,7,fffffb0007ffd750) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffb006b558a60,ffff80003c907308,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a767c98,3,ffff80003c907308,0,ffff80003c9073b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a767c98,ffff80003c907460,ffff80003c9073b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c907460) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907460) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x683cec92650, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a72490, 0xffff8000221d2210, 0, 1) -> d ddb> trace ffs2_balloc(fffffb007e892500,138000,4000,fffffb0007ffd750,2,ffff80003c9070c8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c907150) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffb006a331d80,ffff80003c907308,7,fffffb0007ffd750) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffb006b558a60,ffff80003c907308,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a767c98,3,ffff80003c907308,0,ffff80003c9073b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a767c98,ffff80003c907460,ffff80003c9073b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c907460) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907460) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x683cec92650, count: -8 ddb> show registers rdi 0 rsi 0x2 rbp 0xffff80003c907070 rbx 0xfffffb007e892500 rdx 0xffff8000015b5b00 rcx 0xffff8000221d2000 rax 0x42 r8 0xffffffffffffffff r9 0xffff80003c9070c8 r10 0xc15b2ba6d07ddc26 r11 0xb12440069d58c9ae r12 0x1 r13 0xffff800000c47800 r14 0xffff80003c906f10 r15 0xfffffb0063ad1bb8 rip 0xffffffff828e29ea ffs2_balloc+0xa0a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c906f00 ss 0x10 ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 ddb> show proc PROC (syz-executor) tid=353611 pid=11475 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a766d08,0xffff80002a736a78 process=0xffff80002a744008 user=0xffff80003c902000, vmspace=0xfffffb006cfa0010 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 18792 485617 13618 0 2 0 syz-executor 18792 19859 13618 0 2 0x4000000 syz-executor 82255 284250 27850 0 2 0 syz-executor 82255 428952 27850 0 3 0x4000080 fsleep syz-executor 72978 367672 75835 0 2 0x100002 sh 64898 119439 4969 0 2 0 syz-executor 64898 512912 4969 0 3 0x4000080 netcon syz-executor 21396 176571 8114 0 2 0 syz-executor 21396 290448 8114 0 3 0x4000080 fsleep syz-executor 11475 304609 79696 0 2 0x10 syz-executor *11475 353611 79696 0 7 0x4000010 syz-executor 35486 62528 84913 0 2 0 syz-executor 35486 21137 84913 0 3 0x4000080 fsleep syz-executor 35486 133565 84913 0 3 0x4000080 fsleep syz-executor 35486 158436 84913 0 3 0x4000080 fsleep syz-executor 75835 116139 25127 0 3 0x82 wait syz-executor 8114 219695 25127 0 2 0xc82 syz-executor 98849 134347 1 0 3 0x80 nanoslp init 37585 443032 0 0 3 0x14280 nfsidl nfsio 70656 257553 0 0 3 0x14280 nfsidl nfsio 48828 139602 0 0 3 0x14280 nfsidl nfsio 13438 91812 0 0 3 0x14280 nfsidl nfsio 34759 192544 0 0 3 0x14280 nfsidl nfsio 99123 299962 0 0 3 0x14280 nfsidl nfsio 27118 203850 0 0 3 0x14280 nfsidl nfsio 21352 39631 0 0 3 0x14280 nfsidl nfsio 46727 338929 0 0 3 0x14280 nfsidl nfsio 54404 119744 0 0 3 0x14280 nfsidl nfsio 20364 367423 0 0 3 0x14280 nfsidl nfsio 18545 432530 0 0 3 0x14280 nfsidl nfsio 28129 423481 0 0 3 0x14280 nfsidl nfsio 27803 83632 0 0 3 0x14280 nfsidl nfsio 59355 521957 0 0 3 0x14280 nfsidl nfsio 27588 523606 0 0 3 0x14280 nfsidl nfsio 34380 322151 0 0 3 0x14280 nfsidl nfsio 96903 43606 0 0 3 0x14280 nfsidl nfsio 29905 519042 0 0 3 0x14280 nfsidl nfsio 56556 249519 0 0 3 0x14280 nfsidl nfsio 24970 152165 25127 0 3 0x82 wait syz-executor 13618 316917 25127 0 2 0xc82 syz-executor 84913 467687 25127 0 2 0xc82 syz-executor 27850 267024 25127 0 2 0xc82 syz-executor 79696 324333 25127 0 2 0xc82 syz-executor 4969 354140 25127 0 2 0xc82 syz-executor 25127 74529 1 0 3 0x82 kqread syz-executor 22948 254231 73641 0 3 0x98 kqread sshd-session 73641 474618 1 0 3 0x92 kqread sshd-session 96645 162634 1 73 3 0x1100090 kqread syslogd 19249 204797 0 0 3 0x14200 bored smr 66840 249139 0 0 2 0x14200 zerothread 128 361478 0 0 3 0x14200 aiodoned aiodoned 71555 393828 0 0 3 0x14200 syncer update 77278 60483 0 0 3 0x14200 cleaner cleaner 85436 366906 0 0 3 0x14200 reaper reaper 44943 434248 0 0 3 0x14200 pgdaemon pagedaemon 36205 43991 0 0 3 0x14200 bored viomb 25865 90668 0 0 3 0x40014200 acpi0 acpi0 60774 136611 0 0 3 0x14200 bored softnet0 88844 223711 0 0 3 0x14200 bored systqmp 97627 344452 0 0 3 0x14200 bored systq 21541 492527 0 0 3 0x40014200 tmoslp softclock 68421 1550 0 0 3 0x40014200 idle0 1 411401 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11032 12159K 14332K 166960K 13382 0 pcb 18 16K 18K 166960K 106 0 rtable 172 6K 8K 166960K 745 0 pf 35 14K 19K 166960K 118 0 ifaddr 31 5K 7K 166960K 108 0 ifgroup 51 2K 2K 166960K 143 0 sysctl 4 1K 9K 166960K 11 0 counters 33 17K 18K 166960K 62 0 ioctlops 0 0K 4K 166960K 158 0 iov 0 0K 16K 166960K 87 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1541 97K 97K 166960K 2133 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 94 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 717 0 sigio 0 0K 0K 166960K 8 0 proc 11 17K 124K 166960K 905 0 subproc 72 4K 4K 166960K 180 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 54 0 in_multi 56 4K 7K 166960K 229 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 595 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 165 97K 168K 166960K 7387 0 UVM aobj 14 2K 4K 166960K 18 0 pinsyscall 25 50K 96K 166960K 2132 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 10 0 NDP 11 0K 2K 166960K 75 0 temp 48 9113K 9175K 166960K 20118 0 kqueue 5 8K 26K 166960K 95 0 SYN cache 2 16K 24K 166960K 3 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 81 0 81 1 0 1 1 0 8 1 rtentry 136 239 0 170 4 0 4 4 0 8 0 unpcb 144 607 0 599 13 7 6 8 0 8 5 syncache 336 6 0 6 2 1 1 1 0 8 1 tcpcb 736 286 0 283 18 14 4 16 0 8 3 arp 96 41 0 31 1 0 1 1 0 8 0 ipq 40 3 0 0 1 0 1 1 0 8 0 ipqe 40 4 0 1 1 0 1 1 0 8 0 inpcb 328 694 0 690 22 18 4 20 0 8 3 ip6q 72 1 0 0 1 0 1 1 0 8 0 nd6 112 58 0 45 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 20 0 12 1 0 1 1 0 8 0 ppxss 1072 11 0 11 2 1 1 1 0 8 1 pfstscr 40 8 0 2 1 0 1 1 0 8 0 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 0 1 0 1 1 0 8 0 pfstitem 24 6 0 0 1 0 1 1 0 8 0 pfstkey 128 7 0 1 1 0 1 1 0 8 0 pfstate 384 4 0 1 1 0 1 1 0 8 0 pfrule 1360 8 0 6 1 0 1 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 987 0 689 32 4 28 32 0 8 6 art_table 40 990 0 689 6 1 5 6 0 8 0 art_node 32 238 0 175 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 4 2 1 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 72 27 0 17 1 0 1 1 0 8 0 shmpl 112 15 0 4 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2405 0 921 93 0 93 93 0 8 0 ffsino 256 2405 0 921 93 0 93 93 0 8 0 nchpl 144 3204 0 1463 65 0 65 65 0 8 0 rtmask 32 3 0 3 2 1 1 1 0 8 1 vnodes 216 3060 0 0 170 0 170 170 0 8 0 namei 1024 11602 0 11602 4 2 2 2 0 8 2 kstatmem 264 75 0 52 2 0 2 2 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 15048 0 15048 15 7 8 8 1 8 8 plimitpl 152 148 0 135 1 0 1 1 0 8 0 sigapl 424 1015 0 959 8 0 8 8 0 8 1 knotepl 120 17987 0 17960 18 8 10 10 0 8 8 kqueuepl 184 183 0 179 4 3 1 4 0 8 0 pipepl 304 179 0 152 3 0 3 3 0 8 0 fdescpl 448 981 0 958 5 1 4 5 0 8 1 filepl 120 5381 0 5192 23 11 12 20 0 8 5 lockfpl 104 361 0 359 2 0 2 2 0 8 1 lockfspl 48 166 0 164 1 0 1 1 0 8 0 sessionpl 144 61 0 57 1 0 1 1 0 8 0 pgrppl 48 81 0 69 1 0 1 1 0 8 0 ucredpl 104 712 0 704 1 0 1 1 0 8 0 zombiepl 144 960 0 959 1 0 1 1 0 8 0 processpl 1152 1015 0 959 5 0 5 5 0 8 0 procpl 664 1616 0 1552 7 0 7 7 0 8 1 sosppl 176 2 0 2 1 1 0 1 0 8 0 sockpl 552 1408 0 1396 41 32 9 33 0 8 8 mcl64k 65536 32 0 32 2 1 1 1 0 8 1 mcl16k 16384 2 0 2 1 1 0 1 0 8 0 mcl12k 12288 2 0 2 1 1 0 1 0 8 0 mcl9k128 9344 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 14 0 14 2 1 1 1 0 8 1 mcl4k 4096 3126 0 3075 15 7 8 14 0 8 1 mcl2k 2048 573 0 573 3 2 1 2 0 8 1 mtagpl 96 5 0 4 1 0 1 1 0 8 0 mbufpl 256 9200 0 9077 12 0 12 12 0 8 1 bufpl 272 6661 0 445 415 0 415 415 0 8 0 anonpl 24 149900 0 147322 71 24 47 53 0 186 19 amapchunkpl 152 23354 0 22935 41 7 34 34 0 158 17 amappl16 200 2351 0 2308 29 18 11 19 0 8 8 amappl15 192 84 0 84 2 1 1 1 0 8 1 amappl14 184 551 0 550 1 0 1 1 0 8 0 amappl13 176 145 0 142 1 0 1 1 0 8 0 amappl12 168 1264 0 1243 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 58 0 56 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 143 0 143 1 0 1 1 0 8 1 amappl7 128 170 0 163 1 0 1 1 0 8 0 amappl6 120 264 0 261 1 0 1 1 0 8 0 amappl5 112 110 0 106 1 0 1 1 0 8 0 amappl4 104 326 0 318 1 0 1 1 0 8 0 amappl3 96 4510 0 4420 3 0 3 3 0 8 0 amappl2 88 627 0 601 2 0 2 2 0 8 0 amappl1 80 13340 0 13049 13 1 12 13 0 8 1 amappl 88 6382 0 6241 5 1 4 5 0 92 0 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 17 0 4 1 0 1 1 0 8 0 uaddrrnd 24 981 0 958 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 981 0 958 1 0 1 1 0 8 0 vmmpekpl 168 9099 0 9060 3 0 3 3 0 8 0 vmmpepl 168 69774 0 68530 94 9 85 94 0 357 19 vmsppl 368 980 0 958 4 1 3 4 0 8 0 rwobjpl 40 21146 0 20525 14 2 12 14 0 8 1 pdppl 4096 1968 0 1916 110 56 54 82 0 8 2 pvpl 32 413230 0 406623 146 29 117 117 0 265 40 pmappl 216 980 0 958 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 821 0 93 22 0 22 22 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ffs2_balloc(fffffb007e892500,138000,4000,fffffb0007ffd750,2,ffff80003c9070c8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c907150) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffb006a331d80,ffff80003c907308,7,fffffb0007ffd750) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffb006b558a60,ffff80003c907308,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a767c98,3,ffff80003c907308,0,ffff80003c9073b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a767c98,ffff80003c907460,ffff80003c9073b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c907460) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907460) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x683cec92650, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace ffs2_balloc(fffffb007e892500,138000,4000,fffffb0007ffd750,2,ffff80003c9070c8) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c907150) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffb006a331d80,ffff80003c907308,7,fffffb0007ffd750) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffb006b558a60,ffff80003c907308,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a767c98,3,ffff80003c907308,0,ffff80003c9073b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a767c98,ffff80003c907460,ffff80003c9073b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c907460) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c907460) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x683cec92650, count: -8