uvm_fault(0xffffffff839f9098, 0xffff8000266a2000, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *256091 6053 0 0 0x4000000 0 syz-executor ffs2_balloc(fffff40069164d00,30001,40,fffff40007ffd680,1,ffff80003a4e6d98) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003a4e6e20) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff4006d9e6bf0,ffff80003a4e6ed0,3,fffff40007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000304b0548,fffff4006d9e6bf0,fffff40007ffd680,ffff80003a4e6f88,0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:692 doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c ktrstart sys/kern/kern_ktrace.c:150 [inline] doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c sys/kern/kern_ktrace.c:485 sys_ktrace(ffff8000304b0548,ffff80003a4e7250,ffff80003a4e71a0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e7250) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e7250) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaac69780120, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839f9098, 0xffff8000266a2000, 0, 1) -> d ddb> trace ffs2_balloc(fffff40069164d00,30001,40,fffff40007ffd680,1,ffff80003a4e6d98) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003a4e6e20) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff4006d9e6bf0,ffff80003a4e6ed0,3,fffff40007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000304b0548,fffff4006d9e6bf0,fffff40007ffd680,ffff80003a4e6f88,0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:692 doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c ktrstart sys/kern/kern_ktrace.c:150 [inline] doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c sys/kern/kern_ktrace.c:485 sys_ktrace(ffff8000304b0548,ffff80003a4e7250,ffff80003a4e71a0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e7250) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e7250) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaac69780120, count: -8 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003a4e6d40 rbx 0xfffff40069164d00 rdx 0xffff8000015b8480 rcx 0xffff8000266a2000 rax 0 r8 0xffffffffffffffff r9 0xffff80003a4e6d98 r10 0x8799190e5bd8dcc2 r11 0xe85d76f5a63b9f74 r12 0x1 r13 0xffff800000c47800 r14 0xffff80003a4e6be0 r15 0xfffff4006de89698 rip 0xffffffff81c0794a ffs2_balloc+0xa0a cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003a4e6bd0 ss 0x10 ffs2_balloc+0xa0a: movq 0(%rcx,%rax,8),%r14 ddb> show proc PROC (syz-executor) tid=256091 pid=6053 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000304b14d8,0xffffffff839d6388 process=0xffff8000318b9f98 user=0xffff80003a4e2000, vmspace=0xfffff4006caaae70 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 6053 403494 73990 0 3 0x80 fsleep syz-executor * 6053 256091 73990 0 7 0x4000000 syz-executor 26348 331541 69841 0 3 0x80 fsleep syz-executor 26348 22885 69841 0 3 0x4000080 lockf syz-executor 26348 347906 69841 0 3 0x4000080 fsleep syz-executor 27103 188856 68280 -1 3 0x90 fsleep syz-executor 27103 198339 68280 -1 3 0x4000090 nanoslp syz-executor 27103 435393 68280 -1 3 0x4000090 fsleep syz-executor 97673 138716 84338 0 3 0x80 fsleep syz-executor 97673 87062 84338 0 3 0x4000080 msgwait syz-executor 50634 109699 61227 0 3 0x80 fsleep syz-executor 50634 278888 61227 0 3 0x4000080 fifor syz-executor 35214 282024 49612 0 3 0x80 fsleep syz-executor 35214 475305 49612 0 3 0x4000080 fsleep syz-executor 35214 235415 49612 0 3 0x4000080 fifow syz-executor 68161 452603 34916 60929 3 0x90 fsleep syz-executor 68161 93268 34916 60929 3 0x4000090 msgwait syz-executor 86234 352728 2954 0 3 0x80 fsleep syz-executor 86234 319338 2954 0 3 0x4000080 rest syz-executor 17076 171431 0 0 3 0x14280 nfsidl nfsio 66537 414404 0 0 3 0x14280 nfsidl nfsio 54030 296877 0 0 3 0x14280 nfsidl nfsio 62173 289076 0 0 3 0x14280 nfsidl nfsio 77474 138795 0 0 3 0x14280 nfsidl nfsio 94381 201785 0 0 3 0x14280 nfsidl nfsio 26764 254811 0 0 3 0x14280 nfsidl nfsio 48385 417127 0 0 3 0x14280 nfsidl nfsio 93028 315920 0 0 3 0x14280 nfsidl nfsio 33669 125695 0 0 3 0x14280 nfsidl nfsio 55188 188558 0 0 3 0x14280 nfsidl nfsio 24672 144232 0 0 3 0x14280 nfsidl nfsio 82770 52920 0 0 3 0x14280 nfsidl nfsio 29603 514173 0 0 3 0x14280 nfsidl nfsio 86121 390876 0 0 3 0x14280 nfsidl nfsio 16313 362740 0 0 3 0x14280 nfsidl nfsio 63499 474111 0 0 3 0x14280 nfsidl nfsio 15663 300729 0 0 3 0x14280 nfsidl nfsio 51305 297645 0 0 3 0x14280 nfsidl nfsio 78223 391953 0 0 3 0x14280 nfsidl nfsio 38930 258136 0 0 3 0x14200 acct acct 97893 431955 1 0 3 0x100083 ttyin getty 2954 22178 40572 0 2 0xc82 syz-executor 61227 384339 40572 0 3 0x82 nanoslp syz-executor 84338 178492 40572 0 2 0xc82 syz-executor 34916 447019 40572 0 2 0xc82 syz-executor 68280 15965 40572 0 3 0x82 nanoslp syz-executor 73990 388271 40572 0 3 0x82 nanoslp syz-executor 49612 239333 40572 0 3 0x82 nanoslp syz-executor 69841 298528 40572 0 3 0x82 nanoslp syz-executor 40572 340691 1 0 3 0x82 kqread syz-executor 48083 361949 0 0 3 0x14200 bored smr 97865 306343 0 0 3 0x14200 pgzero zerothread 99060 86652 0 0 3 0x14200 aiodoned aiodoned 13941 452957 0 0 3 0x14200 syncer update 51276 242082 0 0 3 0x14200 cleaner cleaner 25920 273107 0 0 3 0x14200 reaper reaper 81613 292797 0 0 3 0x14200 pgdaemon pagedaemon 74655 32384 0 0 3 0x14200 bored viomb 77230 382655 0 0 3 0x40014200 acpi0 acpi0 64023 506258 0 0 3 0x14200 bored softnet0 94653 116061 0 0 3 0x14200 bored systqmp 98479 210606 0 0 3 0x14200 bored systq 16467 413627 0 0 3 0x40014200 tmoslp softclock 41034 289726 0 0 3 0x40014200 idle0 1 220760 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11042 12191K 13179K 166960K 13307 0 pcb 19 18K 20K 166960K 316 0 rtable 200 7K 8K 166960K 602 0 pf 39 14K 20K 166960K 83 0 ifaddr 38 6K 7K 166960K 58 0 ifgroup 59 2K 2K 166960K 76 0 sysctl 3 1K 9K 166960K 13 0 counters 35 18K 18K 166960K 42 0 ioctlops 0 0K 4K 166960K 282 0 iov 0 0K 16K 166960K 37 0 mount 1 1K 1K 166960K 1 0 log 6 1K 1K 166960K 10 0 vnodes 1486 93K 94K 166960K 2169 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 15 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 56 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 65K 89K 166960K 756 0 sigio 0 0K 0K 166960K 6 0 proc 20 25K 83K 166960K 573 0 subproc 72 4K 4K 166960K 73 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 81 0 in_multi 73 5K 7K 166960K 118 0 ether_multi 1 0K 0K 166960K 18 0 mrt 2 0K 0K 166960K 48 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 425 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 146 84K 160K 166960K 8533 0 UVM aobj 17 2K 2K 166960K 18 0 pinsyscall 20 40K 93K 166960K 1887 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 29 0 NDP 13 0K 2K 166960K 38 0 temp 55 9110K 13210K 166960K 31961 0 kqueue 4 8K 28K 166960K 102 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 90 0 89 1 0 1 1 0 8 0 rtentry 136 204 0 119 4 0 4 4 0 8 0 unpcb 144 489 0 480 6 0 6 6 0 8 5 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 249 0 248 5 0 5 5 0 8 4 arp 96 20 0 7 1 0 1 1 0 8 0 ipq 40 5 0 0 1 0 1 1 0 8 0 ipqe 40 9 0 3 1 0 1 1 0 8 0 inpcb 328 980 0 975 9 0 9 9 0 8 8 ip6q 72 2 0 0 1 0 1 1 0 8 0 ip6af 40 4 0 0 1 0 1 1 0 8 0 nd6 112 31 0 13 1 0 1 1 0 8 0 pkpcb 40 12 0 12 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 6 0 6 1 0 1 1 0 8 1 pfstscr 40 6 0 6 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfstlim 224 1 0 0 1 0 1 1 0 8 0 pfanchor 1288 1 0 1 1 0 1 1 0 8 1 pftag 88 1 0 1 1 0 1 1 0 8 1 pfstkey 128 6 0 6 1 0 1 1 0 8 1 pfstate 384 3 4 3 1 0 1 1 0 8 1 pfrule 1360 8 0 8 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 571 0 218 29 0 29 29 0 8 4 art_table 40 573 0 218 5 0 5 5 0 8 0 art_node 32 192 0 115 2 0 2 2 0 8 1 sysvmsgpl 40 10 0 8 1 0 1 1 0 8 0 semapl 72 49 0 39 1 0 1 1 0 8 0 shmpl 112 15 0 1 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2674 0 1215 92 0 92 92 0 8 0 ffsino 256 2674 0 1215 92 0 92 92 0 8 0 nchpl 144 3775 0 2073 64 0 64 64 0 8 0 vnodes 216 3355 0 0 187 0 187 187 0 8 0 namei 1024 12301 0 12301 2 0 2 2 0 8 2 kstatmem 264 41 0 14 3 0 3 3 0 8 1 scsiplug 72 4 0 4 1 0 1 1 0 8 1 scxspl 216 16354 0 16354 2 0 2 2 1 8 2 plimitpl 152 205 0 194 1 0 1 1 0 8 0 sigapl 424 1100 0 1046 8 0 8 8 0 8 1 knotepl 120 29020 0 28991 10 0 10 10 0 8 8 kqueuepl 184 134 0 130 1 0 1 1 0 8 0 pipepl 304 301 0 274 8 0 8 8 0 8 5 fdescpl 448 1046 0 1026 5 0 5 5 0 8 2 filepl 120 6169 0 5995 13 0 13 13 0 8 5 lockfpl 104 358 0 355 2 0 2 2 0 8 1 lockfspl 48 133 0 131 1 0 1 1 0 8 0 sessionpl 144 48 0 45 1 0 1 1 0 8 0 pgrppl 48 65 0 54 1 0 1 1 0 8 0 ucredpl 104 895 0 890 1 0 1 1 0 8 0 zombiepl 144 1046 0 1046 1 0 1 1 0 8 1 processpl 1152 1100 0 1046 5 0 5 5 0 8 1 procpl 664 2051 0 1986 7 0 7 7 0 8 1 sockpl 552 1593 0 1578 12 3 9 12 0 8 7 mcl64k 65536 80 0 80 1 0 1 1 0 8 1 mcl16k 16384 8 0 8 1 0 1 1 0 8 1 mcl12k 12288 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 87 0 87 1 0 1 1 0 8 1 mcl4k 4096 3511 0 3461 14 0 14 14 0 8 7 mcl2k 2048 669 0 665 1 0 1 1 0 8 0 mtagpl 96 11 0 8 1 0 1 1 0 8 0 mbufpl 256 11919 0 11742 18 0 18 18 0 8 5 bufpl 280 6885 0 669 445 0 445 445 0 8 0 anonpl 24 194076 0 192414 70 0 70 70 0 186 41 amapchunkpl 152 29208 0 28817 32 0 32 32 0 158 15 amappl16 200 4430 0 4407 40 27 13 27 0 8 8 amappl15 192 9 0 9 1 0 1 1 0 8 1 amappl14 184 414 0 414 1 0 1 1 0 8 1 amappl13 176 124 0 123 1 0 1 1 0 8 0 amappl12 168 1288 0 1269 2 0 2 2 0 8 0 amappl11 160 11 0 11 1 0 1 1 0 8 1 amappl10 152 62 0 62 1 0 1 1 0 8 1 amappl9 144 279 0 279 1 0 1 1 0 8 1 amappl8 136 109 0 108 1 0 1 1 0 8 0 amappl7 128 148 0 145 1 0 1 1 0 8 0 amappl6 120 166 0 166 1 0 1 1 0 8 1 amappl5 112 131 0 130 1 0 1 1 0 8 0 amappl4 104 274 0 270 1 0 1 1 0 8 0 amappl3 96 5612 0 5523 4 0 4 4 0 8 0 amappl2 88 568 0 558 2 0 2 2 0 8 0 amappl1 80 13127 0 13006 15 1 14 15 0 8 8 amappl 88 7684 0 7554 5 0 5 5 0 92 1 uvmvnodes 80 130 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 255 0 255 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 17 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1046 0 1026 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1046 0 1026 1 0 1 1 0 8 0 vmmpekpl 168 10530 0 10497 3 0 3 3 0 8 0 vmmpepl 168 75723 0 74823 101 0 101 101 0 357 52 vmsppl 368 1045 0 1026 4 0 4 4 0 8 1 rwobjpl 40 23696 0 23219 15 0 15 15 0 8 2 pdppl 4096 2098 0 2052 104 56 48 78 0 8 2 pvpl 32 492291 0 487179 151 0 151 151 0 265 90 pmappl 216 1045 0 1026 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 379 0 56 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ffs2_balloc(fffff40069164d00,30001,40,fffff40007ffd680,1,ffff80003a4e6d98) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003a4e6e20) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff4006d9e6bf0,ffff80003a4e6ed0,3,fffff40007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000304b0548,fffff4006d9e6bf0,fffff40007ffd680,ffff80003a4e6f88,0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:692 doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c ktrstart sys/kern/kern_ktrace.c:150 [inline] doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c sys/kern/kern_ktrace.c:485 sys_ktrace(ffff8000304b0548,ffff80003a4e7250,ffff80003a4e71a0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e7250) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e7250) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaac69780120, count: -8 ddb> machine ddbcpu 1 No such command ddb> trace ffs2_balloc(fffff40069164d00,30001,40,fffff40007ffd680,1,ffff80003a4e6d98) at ffs2_balloc+0xa0a sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80003a4e6e20) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffff4006d9e6bf0,ffff80003a4e6ed0,3,fffff40007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000304b0548,fffff4006d9e6bf0,fffff40007ffd680,ffff80003a4e6f88,0) at ktrwriteraw+0x19b sys/kern/kern_ktrace.c:692 doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c ktrstart sys/kern/kern_ktrace.c:150 [inline] doktrace(fffff4006d9e6bf0,4,1b08,0,ffff8000304b0548) at doktrace+0x88c sys/kern/kern_ktrace.c:485 sys_ktrace(ffff8000304b0548,ffff80003a4e7250,ffff80003a4e71a0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e7250) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e7250) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaac69780120, count: -8 ddb>