uvm_fault(0xffffffff83aaac00, 0xffff8000273638a8, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *333205 9760 0 0x1000 0x4080000 0 syz-executor ffs2_balloc(ffffef8069038d00,c84000,4000,ffffef8007ffd410,2,ffff80003c94ec58) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c94ece0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(ffffef805c236be8,ffff80003c94ee98,7,ffffef8007ffd410) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(ffffef806bee1178,ffff80003c94ee98,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a795a10,6,ffff80003c94ee98,0,ffff80003c94ef40) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a795a10,ffff80003c94eff0,ffff80003c94ef40) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c94eff0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c94eff0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcaf689d1350, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83aaac00, 0xffff8000273638a8, 0, 1) -> d ddb> trace ffs2_balloc(ffffef8069038d00,c84000,4000,ffffef8007ffd410,2,ffff80003c94ec58) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c94ece0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(ffffef805c236be8,ffff80003c94ee98,7,ffffef8007ffd410) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(ffffef806bee1178,ffff80003c94ee98,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a795a10,6,ffff80003c94ee98,0,ffff80003c94ef40) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a795a10,ffff80003c94eff0,ffff80003c94ef40) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c94eff0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c94eff0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcaf689d1350, count: -8 ddb> show registers rdi 0 rsi 0x2 rbp 0xffff80003c94ec00 rbx 0xffffef8069038d00 rdx 0xffff8000015e56c0 rcx 0xffff800027362000 rax 0x315 r8 0xffffffffffffffff r9 0xffff80003c94ec58 r10 0x4709349ab1b4d480 r11 0xbd5258616ddea083 r12 0x1 r13 0xffff800000c47800 r14 0xffff80003c94eaa0 r15 0xffffef806954bde0 rip 0xffffffff81f78c1a ffs2_balloc+0xa0a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c94ea90 ss 0x10 ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 ddb> show proc PROC (syz-executor) tid=333205 pid=9760 tcnt=2 stat=onproc flags process=1000 proc=4080000 runpri=17, usrpri=78, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a737230 scnt=1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a765a08,0xffff80002a737240 process=0xffff8000ffff04a0 user=0xffff80003c94a000, vmspace=0xffffef806c1438b8 estcpu=28, cpticks=11, pctcpu=0.3, user=0, sys=11, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 15418 453054 51042 -1 2 0x10 syz-executor 15418 200539 51042 -1 2 0x4000010 syz-executor 1765 89490 28438 0 2 0xc80 syz-executor 1765 492189 28438 0 3 0x4000080 fsleep syz-executor 79437 256259 3078 0 3 0x80 nanoslp syz-executor 79437 242837 3078 0 2 0x4000000 syz-executor 79437 511843 3078 0 3 0x4000080 fsleep syz-executor 67286 9574 96263 -1 2 0xc90 syz-executor 67286 214182 96263 -1 3 0x4000090 kqread syz-executor 67286 149294 96263 -1 3 0x4000090 fsleep syz-executor 20586 517381 16625 0 3 0x80 nanoslp syz-executor 20586 298201 16625 0 3 0x4000080 lockf syz-executor 20586 813 16625 0 3 0x4000080 fsleep syz-executor 93102 230730 4164 0 2 0xc80 syz-executor 93102 338226 4164 0 3 0x4000080 kqsel syz-executor 93102 37532 4164 0 3 0x4000080 fsleep syz-executor 10897 54121 45718 0 2 0xc80 syz-executor 10897 15891 45718 0 3 0x4000080 kqread syz-executor 10897 58620 45718 0 3 0x4000080 fsleep syz-executor * 9760 333205 70944 0 7 0x4081000 syz-executor 9760 83299 70944 0 3 0x4003000 suspend syz-executor 53464 440808 1 0 3 0x80 nanoslp init 73072 27319 0 0 3 0x14280 nfsidl nfsio 69175 241828 0 0 3 0x14280 nfsidl nfsio 49836 206885 0 0 3 0x14280 nfsidl nfsio 24194 92905 0 0 3 0x14280 nfsidl nfsio 75502 387623 0 0 3 0x14280 nfsidl nfsio 19537 311721 0 0 3 0x14280 nfsidl nfsio 90974 195769 0 0 3 0x14280 nfsidl nfsio 45161 139468 0 0 3 0x14280 nfsidl nfsio 67634 475358 0 0 3 0x14280 nfsidl nfsio 38725 103507 0 0 3 0x14280 nfsidl nfsio 63264 303739 0 0 3 0x14280 nfsidl nfsio 14697 501301 0 0 3 0x14280 nfsidl nfsio 8447 106180 0 0 3 0x14280 nfsidl nfsio 55342 398401 0 0 3 0x14280 nfsidl nfsio 25913 200339 0 0 3 0x14280 nfsidl nfsio 90320 451273 0 0 3 0x14280 nfsidl nfsio 20800 266658 0 0 3 0x14280 nfsidl nfsio 61839 353123 0 0 3 0x14280 nfsidl nfsio 85988 277894 0 0 3 0x14280 nfsidl nfsio 23176 16865 0 0 3 0x14280 nfsidl nfsio 28438 104612 66438 0 3 0x82 nanoslp syz-executor 96263 221320 66438 0 2 0xc82 syz-executor 70944 284085 66438 0 2 0xc82 syz-executor 45718 211863 66438 0 2 0xc82 syz-executor 3078 381680 66438 0 3 0x82 nanoslp syz-executor 4164 521109 66438 0 2 0xc82 syz-executor 16625 445659 66438 0 2 0xc82 syz-executor 51042 50137 66438 0 2 0xc82 syz-executor 66438 497521 1 0 3 0x82 kqread syz-executor 10558 248797 63336 0 3 0x98 kqread sshd-session 63336 318881 1 0 3 0x92 kqread sshd-session 60479 479869 1 73 3 0x1100090 kqread syslogd 28558 169663 0 0 3 0x14200 bored smr 74734 20488 0 0 2 0x14200 zerothread 74594 285087 0 0 3 0x14200 aiodoned aiodoned 68011 456518 0 0 3 0x14200 syncer update 18651 432922 0 0 3 0x14200 cleaner cleaner 81865 236928 0 0 3 0x14200 reaper reaper 53398 335584 0 0 3 0x14200 pgdaemon pagedaemon 34049 166164 0 0 3 0x14200 bored viomb 39846 524037 0 0 3 0x40014200 acpi0 acpi0 14944 278096 0 0 2 0x14200 softnet0 60996 420556 0 0 3 0x14200 bored systqmp 27240 325722 0 0 3 0x14200 bored systq 51614 157102 0 0 3 0x40014200 tmoslp softclock 57492 363692 0 0 3 0x40014200 idle0 1 24947 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11063 12171K 12727K 166960K 13399 0 pcb 18 14K 16K 166960K 319 0 rtable 260 10K 11K 166960K 509 0 pf 33 13K 21K 166960K 131 0 ifaddr 43 8K 8K 166960K 74 0 ifgroup 50 2K 2K 166960K 103 0 sysctl 3 1K 9K 166960K 15 0 counters 33 17K 18K 166960K 67 0 ioctlops 0 0K 4K 166960K 561 0 iov 0 0K 16K 166960K 160 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1400 88K 88K 166960K 2198 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 83 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 236K 166960K 737 0 sigio 0 0K 0K 166960K 8 0 proc 12 17K 83K 166960K 575 0 subproc 72 4K 4K 166960K 73 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 73 0 in_multi 103 7K 7K 166960K 131 0 ether_multi 2 0K 0K 166960K 6 0 mrt 0 0K 0K 166960K 21 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 418 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 177 96K 166K 166960K 8033 0 UVM aobj 18 2K 2K 166960K 19 0 pinsyscall 25 50K 90K 166960K 1816 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 11 0K 2K 166960K 51 0 temp 77 9116K 9180K 166960K 12628 0 kqueue 8 14K 26K 166960K 128 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 136 0 135 2 0 2 2 0 8 1 rtentry 136 138 0 31 5 0 5 5 0 8 0 unpcb 144 789 0 779 6 0 6 6 0 8 5 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpcb 736 282 0 279 7 0 7 7 0 8 6 arp 96 20 0 1 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 6 0 4 1 0 1 1 0 8 0 inpcb 328 880 0 874 7 0 7 7 0 8 6 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 3 0 2 1 0 1 1 0 8 0 nd6 112 36 0 7 1 0 1 1 0 8 0 pkpcb 40 5 0 5 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 4 0 4 1 0 1 1 0 8 1 ppxss 1072 30 0 30 1 0 1 1 0 8 1 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfstscr 40 66 0 64 1 0 1 1 0 8 0 pfosfp 40 1 0 1 1 0 1 1 0 8 1 pfosfpen 112 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 8 0 6 1 0 1 1 0 8 0 pfanchor 1288 10 0 3 1 0 1 1 0 8 0 pftag 88 1 0 1 1 0 1 1 0 8 1 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 66 0 64 1 0 1 1 0 8 0 pfstate 384 33 0 32 1 0 1 1 0 8 0 pfrule 1360 8 0 6 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 600 0 106 33 0 33 33 0 8 1 art_table 40 602 0 106 6 0 6 6 0 8 0 art_node 32 138 0 41 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 4 1 0 1 1 0 8 1 semapl 72 74 0 64 1 0 1 1 0 8 0 shmpl 112 16 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2740 0 1271 93 0 93 93 0 8 0 ffsino 256 2740 0 1271 93 0 93 93 0 8 0 nchpl 144 3768 0 2069 64 0 64 64 0 8 0 rtmask 32 8 0 8 1 0 1 1 0 8 1 vnodes 216 3365 0 0 187 0 187 187 0 8 0 namei 1024 12966 0 12966 2 0 2 2 0 8 2 pfiaddrpl 120 2 0 1 1 0 1 1 0 8 0 kstatmem 264 65 0 42 3 0 3 3 0 8 1 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 16191 0 16191 8 0 8 8 1 8 8 plimitpl 152 334 0 321 1 0 1 1 0 8 0 sigapl 424 1029 0 973 7 0 7 7 0 8 0 knotepl 120 42507 0 41955 17 0 17 17 0 8 0 kqueuepl 184 284 0 273 4 0 4 4 0 8 3 pipepl 304 195 0 168 5 0 5 5 0 8 2 fdescpl 448 995 0 972 4 0 4 4 0 8 0 filepl 120 6746 0 6545 11 0 11 11 0 8 3 lockfpl 104 385 0 380 2 0 2 2 0 8 1 lockfspl 48 147 0 144 1 0 1 1 0 8 0 sessionpl 144 71 0 67 1 0 1 1 0 8 0 pgrppl 48 83 0 71 1 0 1 1 0 8 0 ucredpl 104 1077 0 1067 1 0 1 1 0 8 0 zombiepl 144 973 0 973 1 0 1 1 0 8 1 processpl 1152 1029 0 973 5 0 5 5 0 8 0 procpl 664 1879 0 1809 7 0 7 7 0 8 1 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 552 1835 0 1818 13 3 10 11 0 8 8 mcl64k 65536 95 0 95 1 0 1 1 0 8 1 mcl9k128 9344 67 0 67 1 0 1 1 0 8 1 mcl8k 8192 39 0 39 2 0 2 2 0 8 2 mcl4k 4096 3297 0 3242 14 0 14 14 0 8 7 mcl2k 2048 591 0 586 2 0 2 2 0 8 1 mtagpl 96 21 0 8 1 0 1 1 0 8 0 mbufpl 256 15901 0 15683 135 111 24 123 0 8 8 bufpl 272 6732 0 516 415 0 415 415 0 8 0 anonpl 24 163178 0 157354 60 0 60 60 0 186 24 amapchunkpl 152 27096 0 26645 26 0 26 26 0 158 8 amappl16 200 2772 0 2528 26 4 22 22 0 8 9 amappl15 192 18 0 18 1 0 1 1 0 8 1 amappl14 184 408 0 408 1 0 1 1 0 8 1 amappl13 176 120 0 117 1 0 1 1 0 8 0 amappl12 168 1232 0 1211 2 0 2 2 0 8 0 amappl11 160 75 0 75 1 0 1 1 0 8 1 amappl10 152 57 0 55 1 0 1 1 0 8 0 amappl9 144 286 0 285 1 0 1 1 0 8 0 amappl8 136 95 0 95 1 0 1 1 0 8 1 amappl7 128 160 0 154 1 0 1 1 0 8 0 amappl6 120 151 0 151 1 0 1 1 0 8 1 amappl5 112 119 0 114 1 0 1 1 0 8 0 amappl4 104 272 0 266 1 0 1 1 0 8 0 amappl3 96 5230 0 5134 3 0 3 3 0 8 0 amappl2 88 526 0 501 2 0 2 2 0 8 0 amappl1 80 12544 0 12252 13 0 13 13 0 8 2 amappl 88 7176 0 7024 4 0 4 4 0 92 0 uvmvnodes 80 118 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 255 0 255 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 1 1 0 1 1 0 8 0 uaddrrnd 24 995 0 972 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 995 0 972 1 0 1 1 0 8 0 vmmpekpl 168 9212 0 9182 2 0 2 2 0 8 0 vmmpepl 168 69867 0 68380 91 0 91 91 0 357 22 vmsppl 368 994 0 972 4 0 4 4 0 8 1 rwobjpl 40 20801 0 19969 13 0 13 13 0 8 1 pdppl 4096 1996 0 1944 92 40 52 76 0 8 0 pvpl 32 446333 0 435427 122 0 122 122 0 265 28 pmappl 216 994 0 972 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 909 0 151 24 0 24 24 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ffs2_balloc(ffffef8069038d00,c84000,4000,ffffef8007ffd410,2,ffff80003c94ec58) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c94ece0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(ffffef805c236be8,ffff80003c94ee98,7,ffffef8007ffd410) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(ffffef806bee1178,ffff80003c94ee98,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a795a10,6,ffff80003c94ee98,0,ffff80003c94ef40) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a795a10,ffff80003c94eff0,ffff80003c94ef40) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c94eff0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c94eff0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcaf689d1350, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace ffs2_balloc(ffffef8069038d00,c84000,4000,ffffef8007ffd410,2,ffff80003c94ec58) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003c94ece0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(ffffef805c236be8,ffff80003c94ee98,7,ffffef8007ffd410) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(ffffef806bee1178,ffff80003c94ee98,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80002a795a10,6,ffff80003c94ee98,0,ffff80003c94ef40) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80002a795a10,ffff80003c94eff0,ffff80003c94ef40) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c94eff0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c94eff0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcaf689d1350, count: -8