uvm_fault(0xffOT LOW0Eb1c ON , SYSCAL, 0L, 13 ) -> 0 6kEerTe0 a aStopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *269559 89844 0 0 0x4000000 0 syz-executor 520631 88980 0 0 0x4000000 1K syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0xd719b0a15a0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffff2800b1cb988, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0xd719b0a15a0, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a235c30 rbx 0 rdx 0 rcx 0xffff80003c3b8fb0 rax 0x35 r8 0xffff80002a235b60 r9 0 r10 0xc10c6a1ef485c2d r11 0xb8de3e8b5570ff8c r12 0 r13 0 r14 0xffff80003c3b8fb0 r15 0 rip 0xffffffff8299e3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a235bb0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=269559 pid=89844 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3b87e8,0xffff80003c3b8d28 process=0xffff80002a37dcf8 user=0xffff80002a230000, vmspace=0xfffff2806f079d68 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 89844 151968 45717 0 2 0 0 syz-executor *89844 269559 45717 0 7 0 0x4000000 syz-executor 89844 15717 45717 0 3 0 0x4000080 fsleep syz-executor 6326 218242 48525 0 2 0 0 syz-executor 6326 119651 48525 0 3 0 0x4000080 fsleep syz-executor 15988 1627 27963 0 2 0 0 syz-executor 15988 81008 27963 0 3 0 0x4000080 fsleep syz-executor 15988 393252 27963 0 3 0 0x4000080 fsleep syz-executor 88980 518829 1415 0 2 0 0 syz-executor 88980 520631 1415 0 7 0 0x4000000 syz-executor 84722 423168 69358 0 3 0 0x80 nanoslp syz-executor 84722 126915 69358 0 3 0 0x4000080 kqsel syz-executor 33307 314697 81932 0 3 0x2 0x80 wait syz-executor 71821 87935 81932 0 3 0x2 0 biowait syz-executor 15788 414549 81932 0 3 0x2 0 biowait syz-executor 45717 311573 81932 0 3 0x2 0x80 nanoslp syz-executor 48525 80129 81932 0 3 0x2 0x80 nanoslp syz-executor 27963 426869 81932 0 3 0x2 0x80 nanoslp syz-executor 69358 217794 81932 0 3 0x2 0x80 nanoslp syz-executor 1415 75252 81932 0 3 0x2 0x80 nanoslp syz-executor 81932 290312 1 0 3 0x2 0x80 kqread syz-executor 26261 183292 0 0 3 0x14000 0x200 bored smr 3986 437261 0 0 2 0x14000 0x200 zerothread 16670 222100 0 0 3 0x14000 0x200 aiodoned aiodoned 57536 361243 0 0 3 0x14000 0x200 syncer update 13045 510325 0 0 3 0x14000 0x200 cleaner cleaner 15710 108469 0 0 3 0x14000 0x200 reaper reaper 97855 361597 0 0 3 0x14000 0x200 pgdaemon pagedaemon 32858 20948 0 0 3 0x14000 0x200 bored viomb 78737 166619 0 0 3 0x14000 0x40000200 acpi0 acpi0 67841 514570 0 0 3 0x14000 0x40000200 idle1 5686 415989 0 0 3 0x14000 0x200 bored softnet1 12461 216213 0 0 3 0x14000 0x200 bored softnet0 5397 225441 0 0 3 0x14000 0x200 smrbar systqmp 981 19595 0 0 3 0x14000 0x200 bored systq 92508 422926 0 0 3 0x14000 0x200 tmoslp softclockmp 3926 144662 0 0 3 0x14000 0x40000200 tmoslp softclock 84356 283511 0 0 3 0x14000 0x40000200 idle0 1 88298 0 0 3 0x10000002 0x80 nanoslp init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839f8588) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 mtx_enter+0x4b4 sys/kern/kern_lock.c:487 #2 uvm_pageclean+0x29c sys/uvm/uvm_page.c:937 #3 uvm_pagefree+0x26 sys/uvm/uvm_page.c:977 #4 uvm_anfree+0xe9 sys/uvm/uvm_anon.c:112 #5 amap_wiperange_chunk+0x1a6 sys/uvm/uvm_amap.c:-1 #6 amap_pp_adjref+0x6d0 sys/uvm/uvm_amap.c:-1 #7 amap_adjref_anons+0x22d sys/uvm/uvm_amap.c:1298 #8 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 #9 sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 #10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 Process 89844 (syz-executor) thread 0xffff80003c3b8fb0 (269559) exclusive rwlock amaplk r = 0 (0xfffff2806e528a30) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 amap_unref+0x3d sys/uvm/uvm_amap.c:1329 #3 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 #4 sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 #5 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #6 Xsyscall+0x128 exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839f8588) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 mtx_enter+0x4b4 sys/kern/kern_lock.c:487 #2 uvm_pageclean+0x29c sys/uvm/uvm_page.c:937 #3 uvm_pagefree+0x26 sys/uvm/uvm_page.c:977 #4 uvm_anfree+0xe9 sys/uvm/uvm_anon.c:112 #5 amap_wiperange_chunk+0x1a6 sys/uvm/uvm_amap.c:-1 #6 amap_pp_adjref+0x6d0 sys/uvm/uvm_amap.c:-1 #7 amap_adjref_anons+0x22d sys/uvm/uvm_amap.c:1298 #8 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 #9 sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 #10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 Process 88980 (syz-executor) thread 0xffff800045feea78 (520631) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b124c0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 syscall+0xaf4 mi_syscall sys/sys/syscall_mi.h:175 [inline] #1 syscall+0xaf4 sys/arch/amd64/amd64/trap.c:783 #2 Xsyscall+0x128 Process 71821 (syz-executor) thread 0xffff80003c40e800 (87935) exclusive rrwlock inode r = 0 (0xfffff2806d7c0560) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 ufs_ihashins+0x4f ufs_ihash sys/ufs/ufs/ufs_ihash.c:-1 [inline] #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:150 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1232 #6 ffs_inode_alloc+0x279 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0xfc sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x101 sys/kern/vfs_vops.c:394 #9 domkdirat+0x179 sys/kern/vfs_syscalls.c:3063 #10 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff280650b3a08) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x12b sys/kern/vfs_lookup.c:431 #6 namei+0x7c5 sys/kern/vfs_lookup.c:250 #7 domkdirat+0x8b sys/kern/vfs_syscalls.c:3048 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #9 Xsyscall+0x128 Process 15788 (syz-executor) thread 0xffff800045fee548 (414549) exclusive rrwlock inode r = 0 (0xfffff2806efaf5a0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vget+0x2a2 sys/kern/vfs_subr.c:692 #6 ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98 #7 ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203 #8 ufs_lookup+0x1a36 sys/ufs/ufs/ufs_lookup.c:478 #9 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x963 sys/kern/vfs_lookup.c:580 #11 namei+0x7c5 sys/kern/vfs_lookup.c:250 #12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807 #13 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #13 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff2806d7c0ea0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x12b sys/kern/vfs_lookup.c:431 #6 namei+0x7c5 sys/kern/vfs_lookup.c:250 #7 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1807 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 #9 Xsyscall+0x128 Process 5397 (systqmp) thread 0xffff800045ffe000 (225441) shared rwlock systqmp r = 0 (0xffffffff839008f8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x12a sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11073 12168K 14952K 166960K 13692 0 pcb 17 14K 14K 166960K 293 0 rtable 210 15K 18K 166960K 541 0 pf 43 19K 39K 166960K 176 0 ifaddr 40 7K 8K 166960K 86 0 ifgroup 62 2K 3K 166960K 137 0 sysctl 4 1K 9K 166960K 15 0 counters 72 37K 38K 166960K 132 0 ioctlops 0 0K 4K 166960K 1741 0 iov 0 0K 40K 166960K 43 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1480 93K 93K 166960K 2350 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 20 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 89 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 57K 89K 166960K 921 0 sigio 0 0K 0K 166960K 20 0 proc 12 17K 196K 166960K 694 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 165 0 in_multi 79 5K 6K 166960K 156 0 ether_multi 1 0K 0K 166960K 7 0 mrt 2 0K 0K 166960K 26 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 97 440K 440K 166960K 97 0 exec 0 0K 1K 166960K 635 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 122 70K 178K 166960K 10052 0 UVM aobj 25 2K 2K 166960K 26 0 pinsyscall 16 32K 106K 166960K 2159 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 42 0 NDP 13 0K 2K 166960K 54 0 temp 58 9123K 9153K 166960K 44068 0 kqueue 2 4K 30K 166960K 149 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}>