login: uvm_fault(0xfffff5806fbdf3d8, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND 86314 62531 0 0 0 0 syz-executor *348336 62531 0 0 0x4000000 1K syz-executor ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c41f4f8,ffff8000333913c0,ffff800033391310) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000333913c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000333913c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9d3fac9080, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffff5806fbdf3d8, 0xf, 0, 1) -> e ddb{1}> show kasan No such command ddb{1}> trace ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c41f4f8,ffff8000333913c0,ffff800033391310) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000333913c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000333913c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9d3fac9080, count: -5 ddb{1}> show registers rdi 0xffff80003078c000 rsi 0x2baf __ALIGN_SIZE+0x1baf rbp 0xffff8000333910d0 rbx 0xfffff580097fd750 rdx 0xffff80003078c000 rcx 0x2bae __ALIGN_SIZE+0x1bae rax 0xffffffff82458bf3 ktrops+0x43 r8 0xfffff5805f76e2a0 r9 0xfffff580097fd750 r10 0x5c00062b1b4581f2 r11 0x738b971609b9993d r12 0xffff80003c41f4f8 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xa0c7df9f rip 0xffffffff82458c08 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800033391050 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=348336 pid=62531 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a222010,0xffffffff83ac30b8 process=0xffff80003c48dd08 user=0xffff80003338c000, vmspace=0xfffff5806fbdf3d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 62531 86314 39330 0 7 0 0 syz-executor *62531 348336 39330 0 7 0 0x4000000 syz-executor 64610 12125 58215 60929 3 0x10 0x80 nanoslp syz-executor 64610 306171 58215 60929 3 0x10 0x4000080 kqsel syz-executor 64610 411034 58215 60929 3 0x10 0x4000080 fsleep syz-executor 64610 447409 58215 60929 3 0x10 0x4000080 fsleep syz-executor 66840 36704 56465 0 3 0 0x80 nanoslp syz-executor 66840 155835 56465 0 3 0 0x4000080 fifor syz-executor 58173 34599 1 0 3 0x100003 0x80 ttyin getty 38901 2239 0 0 3 0x14000 0x280 nfsidl nfsio 1452 328898 0 0 3 0x14000 0x280 nfsidl nfsio 81676 214256 0 0 3 0x14000 0x280 nfsidl nfsio 88891 506879 0 0 3 0x14000 0x280 nfsidl nfsio 51610 510726 0 0 3 0x14000 0x280 nfsidl nfsio 66261 393360 0 0 3 0x14000 0x280 nfsidl nfsio 16475 176601 0 0 3 0x14000 0x280 nfsidl nfsio 65964 159104 0 0 3 0x14000 0x280 nfsidl nfsio 18092 43883 0 0 3 0x14000 0x280 nfsidl nfsio 95689 306604 0 0 3 0x14000 0x280 nfsidl nfsio 1437 1750 0 0 3 0x14000 0x280 nfsidl nfsio 18786 37589 0 0 3 0x14000 0x280 nfsidl nfsio 57482 463181 0 0 3 0x14000 0x280 nfsidl nfsio 85082 197833 0 0 3 0x14000 0x280 nfsidl nfsio 96278 377777 0 0 3 0x14000 0x280 nfsidl nfsio 82893 29661 0 0 3 0x14000 0x280 nfsidl nfsio 96588 57622 0 0 3 0x14000 0x280 nfsidl nfsio 12730 137536 0 0 3 0x14000 0x280 nfsidl nfsio 35120 401658 0 0 3 0x14000 0x280 nfsidl nfsio 10615 413268 0 0 3 0x14000 0x280 nfsidl nfsio 58215 105663 34234 0 3 0x2 0x80 nanoslp syz-executor 39330 433369 34234 0 3 0x2 0x80 nanoslp syz-executor 58993 461683 34234 0 3 0x2 0x80 nanoslp syz-executor 56465 278392 34234 0 3 0x2 0x80 nanoslp syz-executor 71471 224376 34234 0 3 0x2 0 biowait syz-executor 73184 297579 34234 0 3 0x2 0x80 nanoslp syz-executor 73485 400393 34234 0 3 0x2 0x80 nanoslp syz-executor 28195 75542 34234 0 2 0x2 0 syz-executor 34234 331288 1 0 3 0x2 0x80 kqread syz-executor 83315 348210 0 0 3 0x14000 0x200 bored smr 43543 215903 0 0 2 0x14000 0x200 zerothread 85523 394907 0 0 3 0x14000 0x200 aiodoned aiodoned 2266 417525 0 0 3 0x14000 0x200 syncer update 99610 167267 0 0 3 0x14000 0x200 cleaner cleaner 91281 186121 0 0 3 0x14000 0x200 reaper reaper 34494 450192 0 0 3 0x14000 0x200 pgdaemon pagedaemon 30502 19937 0 0 3 0x14000 0x200 bored viomb 77454 303205 0 0 3 0x14000 0x40000200 acpi0 acpi0 22034 66139 0 0 3 0x14000 0x40000200 idle1 21601 288422 0 0 3 0x14000 0x200 bored softnet1 31644 435831 0 0 3 0x14000 0x200 bored softnet0 49953 343782 0 0 3 0x14000 0x200 bored systqmp 33147 12206 0 0 3 0x14000 0x200 bored systq 97503 491099 0 0 3 0x14000 0x200 tmoslp softclockmp 23169 522089 0 0 3 0x14000 0x40000200 tmoslp softclock 24901 29397 0 0 3 0x14000 0x40000200 idle0 1 327340 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 62531 (syz-executor) thread 0xffff80003c41f4f8 (348336) Process 71471 (syz-executor) thread 0xffff800045ffdc90 (224376) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11058 12038K 12480K 166960K 12868 0 pcb 17 15K 16K 166960K 202 0 rtable 224 8K 10K 166960K 443 0 pf 39 18K 25K 166960K 139 0 ifaddr 39 6K 7K 166960K 63 0 ifgroup 56 2K 2K 166960K 93 0 sysctl 3 1K 9K 166960K 10 0 counters 70 37K 37K 166960K 104 0 ioctlops 0 0K 4K 166960K 1662 0 iov 0 0K 16K 166960K 36 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1324 83K 83K 166960K 1988 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 16 0 VM map 2 1K 1K 166960K 2 0 sem 23 1K 1K 166960K 133 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 57K 102K 166960K 674 0 sigio 1 0K 0K 166960K 7 0 proc 21 33K 180K 166960K 638 0 subproc 72 4K 4K 166960K 73 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 44 0 in_multi 84 5K 6K 166960K 129 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 510 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 133 82K 173K 166960K 8009 0 UVM aobj 22 2K 2K 166960K 23 0 pinsyscall 18 36K 106K 166960K 1871 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 27 0 NDP 12 0K 2K 166960K 45 0 temp 39 9119K 9183K 166960K 20254 0 kqueue 1 2K 26K 166960K 133 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 77 0 77 1 0 1 1 0 8 1 rtentry 176 130 0 32 6 0 6 6 0 8 1 unpcb 144 239 0 237 2 0 2 2 0 8 1 syncache 336 6 0 6 2 1 1 1 0 8 1 tcpcb 736 136 0 135 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 641 0 640 7 2 5 7 0 8 4 nd6 152 31 0 11 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 13 0 13 1 0 1 1 0 8 1 pfstscr 40 10 0 8 1 0 1 1 0 8 0 pffrag 232 9 0 2 1 0 1 1 0 482 0 pffrnode 88 9 0 2 1 0 1 1 0 8 0 pffrent 40 15 0 7 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 5 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 1 0 1 0 8 0 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 14 0 11 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 0 1 0 1 1 0 8 0 pfstitem 24 69 0 6 1 0 1 1 0 8 0 pfstkey 128 76 0 12 3 0 3 3 0 8 0 pfstate 448 70 0 8 7 0 7 7 0 8 0 pfrule 1360 28 0 22 2 1 1 2 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 561 0 160 34 4 30 34 0 8 2 art_table 40 563 0 160 6 0 6 6 0 8 0 art_node 32 130 0 40 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 4 2 1 1 1 0 8 1 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 126 0 105 1 0 1 1 0 8 0 shmpl 112 20 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2717 0 1248 93 0 93 93 0 8 0 ffsino 296 2717 0 1248 114 0 114 114 0 8 0 nchpl 144 3665 0 1956 64 0 64 64 0 8 0 rtmask 32 3 0 3 1 0 1 1 0 8 1 vnodes 216 3103 0 0 173 0 173 173 0 8 0 namei 1024 12240 0 12239 4 1 3 3 0 8 2 percpumem 16 68 0 17 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 0 1 1 0 8 1 kstatmem 264 53 0 26 2 0 2 2 0 8 0 scsiplug 72 3 0 3 1 0 1 1 0 8 1 scxspl 216 14051 0 14050 5 3 2 3 1 8 1 plimitpl 152 196 0 186 1 0 1 1 0 8 0 sigapl 424 1018 0 964 8 0 8 8 0 8 0 knotepl 120 309 0 0 10 0 10 10 0 8 0 kqueuepl 224 276 0 273 7 4 3 5 0 8 2 pipepl 344 191 0 164 3 0 3 3 0 8 0 fdescpl 528 982 0 964 3 0 3 3 0 8 0 filepl 160 5587 0 5421 16 2 14 16 0 8 5 lockfpl 104 279 0 277 1 0 1 1 0 8 0 lockfspl 48 127 0 125 1 0 1 1 0 8 0 sessionpl 144 52 0 49 1 0 1 1 0 8 0 pgrppl 48 68 0 57 1 0 1 1 0 8 0 ucredpl 104 1310 0 1306 1 0 1 1 0 8 0 zombiepl 144 967 0 964 1 0 1 1 0 8 0 processpl 1232 1018 0 964 6 0 6 6 0 8 0 procpl 664 1893 0 1834 8 0 8 8 0 8 1 sosppl 176 6 0 6 1 0 1 1 0 8 1 sockpl 752 976 0 973 11 4 7 11 0 8 5 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 112 0 0 14 0 14 14 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 165 0 0 10 0 10 10 0 8 0 bufpl 272 5785 0 109 379 0 379 379 0 8 0 anonpl 32 7594 0 0 62 0 62 62 0 247 0 amapchunkpl 152 25776 0 25418 29 1 28 28 0 158 9 amappl16 200 3414 0 3389 21 7 14 15 0 8 8 amappl15 192 6 0 5 1 0 1 1 0 8 0 amappl14 184 447 0 447 1 0 1 1 0 8 1 amappl13 176 128 0 127 1 0 1 1 0 8 0 amappl12 168 1242 0 1225 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 88 0 88 1 0 1 1 0 8 1 amappl9 144 303 0 303 1 0 1 1 0 8 1 amappl8 136 111 0 111 1 0 1 1 0 8 1 amappl7 128 152 0 150 1 0 1 1 0 8 0 amappl6 120 156 0 155 1 0 1 1 0 8 0 amappl5 112 118 0 117 1 0 1 1 0 8 0 amappl4 104 303 0 300 1 0 1 1 0 8 0 amappl3 96 4594 0 4530 3 0 3 3 0 8 0 amappl2 88 1122 0 1094 2 0 2 2 0 8 0 amappl1 80 12697 0 12580 14 0 14 14 0 8 6 amappl 88 7095 0 6978 5 0 5 5 0 92 0 uvmvnodes 80 120 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 22 0 1 1 0 1 1 0 8 0 uaddrrnd 24 982 0 964 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 982 0 964 1 0 1 1 0 8 0 vmmpekpl 168 9807 0 9768 3 0 3 3 0 8 0 vmmpepl 168 70779 0 69959 96 7 89 96 0 357 42 vmsppl 488 981 0 964 5 1 4 5 0 8 1 rwobjpl 80 21865 0 21394 27 2 25 27 0 8 1 pdppl 4096 1971 0 1928 101 54 47 85 0 8 4 pvpl 32 14327 0 0 116 0 116 116 0 265 0 pmappl 256 981 0 964 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 665 0 63 18 0 18 18 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8399aff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a85e40) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83a85e40) at __mp_lock+0x199 sys/kern/kern_lock.c:173 intr_handler(ffff8000393a3240,ffff8000002a2900) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x75125d5f1bf0, count: 9 ddb{0}> trace x86_ipi_db(ffffffff8399aff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a85e40) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83a85e40) at __mp_lock+0x199 sys/kern/kern_lock.c:173 intr_handler(ffff8000393a3240,ffff8000002a2900) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x75125d5f1bf0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c41f4f8,ffff8000333913c0,ffff800033391310) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000333913c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000333913c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9d3fac9080, count: 10 ddb{1}> trace ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80003c41f4f8,ffffffffffffffff,0,a0c7df9f,fffff5805f76e2a0,fffff580097fd750) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff5805f76e2a0,4,20c7df9f,0,ffff80003c41f4f8) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80003c41f4f8,ffff8000333913c0,ffff800033391310) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff8000333913c0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000333913c0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd9d3fac9080, count: -5 ddb{1}>