uvm_fault(0xfffff8806cabd180, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 1857 33161 0 0 0x4000000 0 syz-executor ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c8fa7e8,ffff8000388c9990,ffff8000388c98e0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000388c9990) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000388c9990) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2627d398250, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff8806cabd180, 0xf, 0, 1) -> e ddb> trace ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c8fa7e8,ffff8000388c9990,ffff8000388c98e0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000388c9990) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000388c9990) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2627d398250, count: -5 ddb> show registers rdi 0xffff8000368c4000 rsi 0x82de __ALIGN_SIZE+0x72de rbp 0xffff8000388c96b0 rbx 0xfffff88007ffd618 rdx 0xffff8000368c4000 rcx 0x82dd __ALIGN_SIZE+0x72dd rax 0xffffffff812ef043 ktrops+0x43 r8 0xfffff8806b9756f8 r9 0xfffff88007ffd618 r10 0xaf4fb849056f32b r11 0x6dcac0e71109b0ba r12 0xffff80003c8fa7e8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0x80000438 __kernel_virt_to_phys+0x438 rip 0xffffffff812ef058 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000388c9630 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=1857 pid=33161 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=77, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8fb248,0xffff80003c8fad28 process=0xffff8000ffff8d98 user=0xffff8000388c4000, vmspace=0xfffff8806cabd180 estcpu=27, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 15289 192995 39255 0 2 0xc80 syz-executor 15289 350964 39255 0 3 0x4000080 lockf syz-executor 15289 500869 39255 0 3 0x4000080 fsleep syz-executor 15289 165961 39255 0 3 0x4000080 fsleep syz-executor 33161 521399 55534 0 2 0xc80 syz-executor 33161 371738 55534 0 3 0x4000080 fsleep syz-executor *33161 1857 55534 0 7 0x4000000 syz-executor 33161 179015 55534 0 3 0x4000080 fsleep syz-executor 19426 339152 22872 0 2 0x2 syz-executor 55534 494491 22872 0 3 0x82 nanoslp syz-executor 24087 455361 22872 0 2 0x2 syz-executor 34009 19889 22872 0 2 0x2 syz-executor 52129 138157 22872 0 2 0x2 syz-executor 39255 203036 22872 0 3 0x82 nanoslp syz-executor 81554 213999 22872 0 2 0x2 syz-executor 21323 472031 22872 0 2 0x2 syz-executor 22872 183819 83498 0 3 0x82 kqread syz-executor 83498 443899 24450 0 2 0x10280a ksh 24450 162277 37702 0 3 0x98 kqread sshd-session 37702 487327 1 0 3 0x92 kqread sshd-session 29058 174646 1 0 2 0x102803 getty 56811 365345 36500 73 3 0x1100090 kqread syslogd 36500 438867 1 0 2 0x102802 syslogd 77288 500643 1 0 2 0x102800 resolvd 29442 226542 0 0 3 0x14200 bored smr 24639 243489 0 0 2 0x14200 zerothread 53249 102764 0 0 3 0x14200 aiodoned aiodoned 42569 264528 0 0 3 0x14200 syncer update 82524 299938 0 0 3 0x14200 cleaner cleaner 66503 27007 0 0 3 0x14200 reaper reaper 31303 455673 0 0 3 0x14200 pgdaemon pagedaemon 91357 170887 0 0 3 0x14200 bored viomb 94257 230789 0 0 3 0x40014200 acpi0 acpi0 27019 199071 0 0 3 0x14200 bored softnet0 93606 92649 0 0 3 0x14200 bored systqmp 57484 515053 0 0 3 0x14200 bored systq 5560 262524 0 0 3 0x40014200 tmoslp softclock 28595 280457 0 0 3 0x40014200 idle0 1 403602 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11037 12229K 12332K 166960K 12243 0 pcb 18 12K 12K 166960K 40 0 rtable 237 6K 6K 166960K 361 0 pf 30 12K 19K 166960K 44 0 ifaddr 42 7K 7K 166960K 45 0 ifgroup 50 2K 2K 166960K 55 0 sysctl 3 1K 9K 166960K 8 0 counters 33 17K 17K 166960K 34 0 ioctlops 0 0K 4K 166960K 147 0 iov 0 0K 24K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1363 86K 86K 166960K 1580 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 41K 97K 166960K 255 0 sigio 0 0K 0K 166960K 2 0 proc 54 43K 108K 166960K 507 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 9 0 in_multi 99 7K 7K 166960K 103 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 371 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 158 126K 160K 166960K 4035 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 25 50K 96K 166960K 1355 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 11 0K 2K 166960K 28 0 temp 44 9127K 9145K 166960K 7056 0 kqueue 6 10K 24K 166960K 46 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 81 0 80 2 0 2 2 0 8 1 rtentry 136 111 0 1 4 0 4 4 0 8 0 unpcb 144 102 0 94 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 33 0 31 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 295 0 292 7 0 7 7 0 8 6 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 2 0 2 1 0 1 1 0 8 1 nd6 112 24 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 4 0 1 1 0 1 1 0 482 0 pffrnode 88 4 0 1 1 0 1 1 0 8 0 pffrent 40 6 0 3 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 7 0 1 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1831 0 367 92 0 92 92 0 8 0 ffsino 256 1832 0 367 92 0 92 92 0 8 0 nchpl 144 2184 0 497 64 0 64 64 0 8 0 vnodes 216 2035 0 0 114 0 114 114 0 8 0 namei 1024 6781 0 6775 2 0 2 2 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 8392 0 8333 8 0 8 8 1 8 2 plimitpl 152 47 0 32 1 0 1 1 0 8 0 sigapl 424 550 0 517 6 0 6 6 0 8 1 knotepl 120 6596 0 6567 2 0 2 2 0 8 0 kqueuepl 184 51 0 46 1 0 1 1 0 8 0 pipepl 304 128 0 101 3 0 3 3 0 8 0 fdescpl 448 537 0 517 5 0 5 5 0 8 1 filepl 120 2608 0 2414 12 0 12 12 0 8 3 lockfpl 104 64 0 59 1 0 1 1 0 8 0 lockfspl 48 25 0 22 1 0 1 1 0 8 0 sessionpl 144 32 0 26 1 0 1 1 0 8 0 pgrppl 48 40 0 26 1 0 1 1 0 8 0 ucredpl 104 425 0 413 1 0 1 1 0 8 0 zombiepl 144 517 0 517 1 0 1 1 0 8 1 processpl 1152 550 0 517 4 0 4 4 0 8 0 procpl 664 744 0 705 5 0 5 5 0 8 0 sockpl 552 483 0 471 8 0 8 8 0 8 5 mcl64k 65536 12 0 11 1 0 1 1 0 8 0 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2677 0 2625 13 0 13 13 0 8 6 mcl2k 2048 216 0 215 2 0 2 2 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 6220 0 6072 12 0 12 12 0 8 0 bufpl 272 3556 0 102 231 0 231 231 0 8 0 anonpl 24 100420 0 95103 33 0 33 33 0 186 0 amapchunkpl 152 11990 0 11505 25 0 25 25 0 158 5 amappl16 200 1512 0 1500 5 0 5 5 0 8 3 amappl15 192 10 0 9 1 0 1 1 0 8 0 amappl14 184 410 0 409 1 0 1 1 0 8 0 amappl13 176 115 0 109 1 0 1 1 0 8 0 amappl12 168 787 0 768 2 0 2 2 0 8 0 amappl11 160 19 0 19 1 0 1 1 0 8 1 amappl10 152 90 0 86 1 0 1 1 0 8 0 amappl9 144 298 0 298 1 0 1 1 0 8 1 amappl8 136 92 0 92 1 0 1 1 0 8 1 amappl7 128 139 0 134 1 0 1 1 0 8 0 amappl6 120 152 0 151 1 0 1 1 0 8 0 amappl5 112 94 0 88 1 0 1 1 0 8 0 amappl4 104 377 0 367 1 0 1 1 0 8 0 amappl3 96 2194 0 2141 3 0 3 3 0 8 0 amappl2 88 524 0 499 2 0 2 2 0 8 0 amappl1 80 10507 0 10247 13 0 13 13 0 8 2 amappl 88 3289 0 3185 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 537 0 517 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 537 0 517 1 0 1 1 0 8 0 vmmpekpl 168 6251 0 6218 2 0 2 2 0 8 0 vmmpepl 168 42977 0 41958 80 0 80 80 0 357 9 vmsppl 368 536 0 517 4 0 4 4 0 8 1 rwobjpl 40 14993 0 14468 11 0 11 11 0 8 1 pdppl 4096 1080 0 1034 96 30 66 82 0 8 20 pvpl 32 255099 0 246235 90 0 90 90 0 265 17 pmappl 216 536 0 517 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 590 0 30 16 0 16 16 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c8fa7e8,ffff8000388c9990,ffff8000388c98e0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000388c9990) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000388c9990) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2627d398250, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c8fa7e8,ffffffffffffffff,0,80000438,fffff8806b9756f8,fffff88007ffd618) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8806b9756f8,4,438,0,ffff80003c8fa7e8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c8fa7e8,ffff8000388c9990,ffff8000388c98e0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000388c9990) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000388c9990) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2627d398250, count: -5