uvm_fault(0xffffffff82e20ad8, 0x0, 0, 2) -> e kernel: page fault trap, code=2 Stopped at km_free+0x128: movq $0,0(%rax) TID PID UID PRFLAGS PFLAGS CPU COMMAND * 29209 55576 0 0x14000 0x200 0 systqmp km_free(0,1000,ffffffff82ab0378,ffffffff82ab0390) at km_free+0x128 sys/uvm/uvm_km.c:866 pool_p_free(ffffffff82d830d0,fffffd80680f4f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1012 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82c8af30) at taskq_thread+0x9b sys/kern/kern_task.c:450 end trace frame: 0x0, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff82e20ad8, 0x0, 0, 2) -> e ddb> trace km_free(0,1000,ffffffff82ab0378,ffffffff82ab0390) at km_free+0x128 sys/uvm/uvm_km.c:866 pool_p_free(ffffffff82d830d0,fffffd80680f4f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1012 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82c8af30) at taskq_thread+0x9b sys/kern/kern_task.c:450 end trace frame: 0x0, count: -4 ddb> show registers rdi 0x1000 __ALIGN_SIZE rsi 0x28000000 rbp 0xffff80002a5a5dd0 rbx 0x28000000000 rdx 0 rcx 0xffffffff82ab0390 kp_dirty rax 0 r8 0x5d r9 0 r10 0x531ff51aab9c84d2 r11 0xf99dba9577c21585 r12 0 r13 0xffffffff82ab0378 kv_page r14 0x1000 __ALIGN_SIZE r15 0x1000 __ALIGN_SIZE rip 0xffffffff81e9d7c8 km_free+0x128 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a5a5d50 ss 0x10 km_free+0x128: movq $0,0(%rax) ddb> show proc PROC (systqmp) tid=29209 pid=55576 tcnt=1 stat=onproc flags process=14000 proc=200 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff80002a58d540,0xffff80002a58d000 process=0xffff8000ffffd4f0 user=0xffff80002a5a0000, vmspace=0xffffffff82e20ad8 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 88365 137137 91837 0 2 0 syz-executor.7 88365 147779 91837 0 3 0x4000080 fsleep syz-executor.7 79075 261092 25389 0 2 0 syz-executor.1 79075 351524 25389 0 3 0x4000080 fsleep syz-executor.1 60500 202650 26394 0 2 0 syz-executor.2 60500 425393 26394 0 2 0x4000000 syz-executor.2 74772 205216 28395 0 3 0x80 nanoslp syz-executor.0 74772 59771 28395 0 3 0x4000080 fsleep syz-executor.0 74772 155547 28395 0 3 0x4000080 fsleep syz-executor.0 16846 456296 46106 0 2 0 syz-executor.4 16846 136144 46106 0 3 0x4000080 fsleep syz-executor.4 42309 136545 33595 0 3 0x82 nanoslp syz-executor.5 25389 400341 33595 0 3 0x82 nanoslp syz-executor.1 28395 235072 33595 0 3 0x82 nanoslp syz-executor.0 91837 85723 33595 0 3 0x82 nanoslp syz-executor.7 46106 24038 33595 0 3 0x82 nanoslp syz-executor.4 21499 335474 33595 0 3 0x82 nanoslp syz-executor.3 47990 358309 33595 0 2 0x2 syz-executor.6 26394 166945 33595 0 3 0x82 nanoslp syz-executor.2 14124 246556 1 0 3 0x100083 ttyin getty 57388 253353 0 0 3 0x14280 nfsidl nfsio 59726 185283 0 0 3 0x14280 nfsidl nfsio 22560 286882 0 0 3 0x14280 nfsidl nfsio 51878 103362 0 0 3 0x14280 nfsidl nfsio 76147 164933 0 0 3 0x14280 nfsidl nfsio 89501 247600 0 0 3 0x14280 nfsidl nfsio 93546 314322 0 0 3 0x14280 nfsidl nfsio 67652 214438 0 0 3 0x14280 nfsidl nfsio 7240 32946 0 0 3 0x14280 nfsidl nfsio 26431 183755 0 0 3 0x14280 nfsidl nfsio 23011 142441 0 0 3 0x14280 nfsidl nfsio 99171 350175 0 0 3 0x14280 nfsidl nfsio 47647 255592 0 0 3 0x14280 nfsidl nfsio 64375 66838 0 0 3 0x14280 nfsidl nfsio 32297 103119 0 0 3 0x14280 nfsidl nfsio 23418 102956 0 0 3 0x14280 nfsidl nfsio 35280 520587 0 0 3 0x14280 nfsidl nfsio 9347 244847 0 0 3 0x14280 nfsidl nfsio 71814 354849 0 0 3 0x14280 nfsidl nfsio 26808 425019 0 0 3 0x14280 nfsidl nfsio 98461 335276 0 0 3 0x14200 acct acct 19212 418484 0 0 3 0x14200 bored sosplice 33595 304530 43123 0 3 0x2000082 thrsleep syz-fuzzer 33595 203226 43123 0 3 0x6000082 nanoslp syz-fuzzer 33595 164381 43123 0 3 0x6000082 wait syz-fuzzer 33595 38630 43123 0 3 0x6000082 thrsleep syz-fuzzer 33595 106577 43123 0 3 0x6000082 wait syz-fuzzer 33595 193985 43123 0 3 0x6000082 wait syz-fuzzer 33595 358127 43123 0 3 0x6000082 thrsleep syz-fuzzer 33595 275908 43123 0 3 0x6000082 wait syz-fuzzer 33595 509869 43123 0 3 0x6000082 wait syz-fuzzer 33595 484889 43123 0 3 0x6000082 wait syz-fuzzer 33595 504235 43123 0 3 0x6000082 wait syz-fuzzer 33595 264320 43123 0 3 0x6000082 thrsleep syz-fuzzer 33595 184185 43123 0 3 0x6000082 kqread syz-fuzzer 33595 275864 43123 0 3 0x6000082 wait syz-fuzzer 43123 413667 86037 0 3 0x10008a sigsusp ksh 86037 394388 21069 0 3 0x9a kqread sshd 21069 215705 1 0 3 0x88 kqread sshd 26577 458582 3510 73 3 0x1100090 kqread syslogd 3510 386157 1 0 3 0x100082 netio syslogd 98855 276504 1 0 3 0x100080 kqread resolvd 83802 52260 43703 77 3 0x100092 kqread dhcpleased 9245 422292 43703 77 3 0x100092 kqread dhcpleased 43703 4257 1 0 3 0x80 kqread dhcpleased 69190 166472 0 0 3 0x14200 bored smr 87444 331057 0 0 2 0x14200 zerothread 64859 318709 0 0 3 0x14200 aiodoned aiodoned 58074 470284 0 0 3 0x14200 syncer update 97111 372781 0 0 3 0x14200 cleaner cleaner 88676 309701 0 0 3 0x14200 reaper reaper 27906 118963 0 0 3 0x14200 pgdaemon pagedaemon 82316 423734 0 0 3 0x14200 bored viomb 10077 297576 0 0 3 0x40014200 acpi0 acpi0 50845 93299 0 0 3 0x14200 bored softnet3 64226 374625 0 0 3 0x14200 bored softnet2 82040 422813 0 0 3 0x14200 bored softnet1 35592 12008 0 0 3 0x14200 bored softnet0 *55576 29209 0 0 7 0x14200 systqmp 53689 201447 0 0 3 0x14200 bored systq 42779 241255 0 0 3 0x40014200 tmoslp softclock 15699 93608 0 0 3 0x40014200 idle0 1 408405 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10249 6582K 19147K 166960K 57436 0 pcb 15 20K 23K 166960K 1650 0 rtable 188 14K 16K 166960K 3886 0 pf 36 10K 11K 166960K 605 0 ifaddr 37 13K 16K 166960K 586 0 ifgroup 63 2K 3K 166960K 1024 0 sysctl 3 0K 0K 166960K 7 0 counters 33 17K 18K 166960K 301 0 ioctlops 0 0K 2K 166960K 1047 0 iov 0 0K 24K 166960K 1840 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1511 94K 95K 166960K 16051 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 205 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 1770 0 dirhash 12 2K 2K 166960K 81 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 15 53K 85K 166960K 18549 0 sigio 0 0K 0K 166960K 523 0 proc 61 59K 100K 166960K 3483 0 subproc 104 6K 6K 166960K 1282 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1228 0 in_multi 73 5K 7K 166960K 1190 0 ether_multi 1 0K 0K 166960K 13 0 mrt 1 0K 0K 166960K 13 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 4399 0 pfkey data 0 0K 0K 166960K 16 0 tdb 3 0K 0K 166960K 3 0 pagedep 1 8K 8K 166960K 1 0 inodedep 1 32K 32K 166960K 1 0 newblk 1 0K 0K 166960K 1 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 490 569K 570K 166960K 170094 0 UVM aobj 131 9K 9K 166960K 145 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 836 0 NDP 15 0K 1K 166960K 474 0 temp 74 6704K 6832K 166960K 180214 0 kqueue 12 18K 32K 166960K 2281 0 SYN cache 2 2456K 2464K 166960K 4 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 831 0 828 5 2 3 3 0 8 2 rtentry 112 1214 0 1134 8 4 4 4 0 8 0 unpcb 144 14831 0 14814 156 155 1 11 0 8 0 syncache 312 194 0 194 36 36 0 1 0 8 0 tcpqe 32 496 1339 496 13 13 0 3 0 8 0 tcpcb 808 5437 0 5386 168 156 12 19 0 8 4 arp 88 219 0 209 1 0 1 1 0 8 0 ipq 40 76 0 76 7 7 0 1 0 8 0 ipqe 40 166 0 166 7 7 0 1 0 8 0 inpcb 336 16540 0 16484 216 203 13 17 0 8 5 nd6 104 304 0 287 1 0 1 1 0 8 0 pkpcb 40 196 0 196 16 16 0 1 0 8 0 kcovpl 48 93 0 85 1 0 1 1 0 8 0 ppxss 1160 73 0 73 21 20 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 4715 0 4301 82 53 29 31 0 8 1 art_table 32 4716 0 4301 4 0 4 4 0 8 0 art_node 16 1162 0 1088 1 0 1 1 0 8 0 semupl 112 9 0 9 1 1 0 1 0 8 0 semapl 112 1756 0 1746 1 0 1 1 0 8 0 shmpl 112 142 0 14 5 1 4 4 0 8 0 dirhash 1024 63 0 46 3 0 3 3 0 8 0 dino2pl 256 26214 0 24669 97 0 97 97 0 8 0 ffsino 240 26214 0 24669 92 0 92 92 0 8 0 nchpl 144 50930 0 49268 64 1 63 63 0 8 0 uvmvnodes 80 7795 0 0 160 0 160 160 0 8 0 vnodes 216 7795 0 0 434 0 434 434 0 8 0 namei 1024 179050 0 179050 9 8 1 3 0 8 1 vcpupl 2048 173 0 1 22 0 22 22 0 8 0 vmpool 664 208 0 36 16 1 15 15 0 8 0 kstatmem 264 564 0 536 4 1 3 3 0 8 0 scxspl 216 149761 0 149744 53 51 2 8 1 8 0 plimitpl 152 2349 0 2334 1 0 1 1 0 8 0 sigapl 424 19388 0 19322 11 2 9 9 0 8 0 futexpl 64 178853 0 178848 1 0 1 1 0 8 0 knotepl 120 169950 0 169866 50 47 3 11 0 8 0 kqueuepl 184 4907 0 4899 87 86 1 7 0 8 0 pipepl 288 3250 0 3222 81 78 3 7 0 8 0 fdescpl 432 18649 0 18623 4 0 4 4 0 8 0 filepl 120 120318 0 120069 178 166 12 18 0 8 4 lockfpl 104 9585 0 9583 13 12 1 2 0 8 0 lockfspl 48 3529 0 3527 1 0 1 1 0 8 0 sessionpl 144 113 0 97 1 0 1 1 0 8 0 pgrppl 48 533 0 517 1 0 1 1 0 8 0 ucredpl 104 17680 0 17668 1 0 1 1 0 8 0 zombiepl 144 19324 0 19322 2 1 1 1 0 8 0 processpl 1072 19388 0 19322 5 0 5 5 0 8 0 procpl 680 46341 0 46256 24 15 9 9 0 8 0 sosppl 168 158 0 155 9 8 1 1 0 8 0 sockpl 456 32484 0 32405 668 647 21 40 0 8 8 mcl64k 65536 694 0 694 28 27 1 1 0 8 1 mcl16k 16384 366 0 366 34 33 1 1 0 8 1 mcl12k 12288 735 0 735 27 26 1 1 0 8 1 mcl9k 9216 254 0 254 39 38 1 1 0 8 1 mcl8k 8192 1294 0 1294 32 31 1 2 0 8 1 mcl4k 4096 2160 0 2160 18 17 1 4 0 8 1 mcl2k2 2112 137 0 137 38 38 0 1 0 8 0 mcl2k 2048 107081 0 107010 83 71 12 50 0 8 1 mtagpl 96 3972 0 3722 43 34 9 17 0 8 0 mbufpl 256 357132 0 356733 743 701 42 115 0 8 8 bufpl 288 37486 0 31079 458 0 458 458 0 8 0 anonpl 24 1775840 0 1760915 227 122 105 114 0 188 0 amapchunkpl 152 548148 0 547253 164 113 51 51 0 158 12 amappl16 200 35909 0 35446 149 121 28 37 0 8 0 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 415 0 401 2 1 1 2 0 8 0 amappl13 176 11 0 10 1 0 1 1 0 8 0 amappl12 168 20647 0 20612 3 1 2 3 0 8 0 amappl11 160 53 0 43 1 0 1 1 0 8 0 amappl10 152 126 0 114 1 0 1 1 0 8 0 amappl9 144 323 0 322 1 0 1 1 0 8 0 amappl8 136 719 0 593 5 0 5 5 0 8 0 amappl7 128 395 0 371 2 0 2 2 0 8 0 amappl6 120 1587 0 1572 1 0 1 1 0 8 0 amappl5 112 466 0 458 1 0 1 1 0 8 0 amappl4 104 1197 0 1169 2 1 1 2 0 8 0 amappl3 96 105342 0 105250 3 0 3 3 0 8 0 amappl2 88 20037 0 19962 3 1 2 3 0 8 0 amappl1 80 80897 0 80387 23 11 12 22 0 8 0 amappl 88 168506 0 168237 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 144 0 14 3 0 3 3 0 8 0 uaddrrnd 24 18857 0 18659 2 0 2 2 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 18857 0 18659 2 0 2 2 0 8 0 vmmpekpl 168 134979 0 134886 5 0 5 5 0 8 0 vmmpepl 168 1125655 0 1123162 518 386 132 142 0 357 0 vmsppl 352 18856 0 18659 21 2 19 19 0 8 0 rwobjpl 24 260836 0 251315 63 5 58 58 0 8 0 pdppl 4096 37720 0 37490 1031 796 235 240 0 8 5 pvpl 32 4859904 0 4839412 571 395 176 338 0 265 0 pmappl 216 18856 0 18659 12 0 12 12 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 3261 0 2227 31 0 31 31 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace km_free(0,1000,ffffffff82ab0378,ffffffff82ab0390) at km_free+0x128 sys/uvm/uvm_km.c:866 pool_p_free(ffffffff82d830d0,fffffd80680f4f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1012 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82c8af30) at taskq_thread+0x9b sys/kern/kern_task.c:450 end trace frame: 0x0, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace km_free(0,1000,ffffffff82ab0378,ffffffff82ab0390) at km_free+0x128 sys/uvm/uvm_km.c:866 pool_p_free(ffffffff82d830d0,fffffd80680f4f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1012 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82c8af30) at taskq_thread+0x9b sys/kern/kern_task.c:450 end trace frame: 0x0, count: -4