uvm_fault(0xfffff0800b1cb1e8, 0x98, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dovutimens+0x368: movl 0x98(%rax),%r12d --db_more--  TID PID UID PRFLAGS PFLAGS CPU COMMAND --db_more-- *459629 32992 0 0 0x4000000 0 syz-executor --db_more--  83008 56415 0 0x2 0x1 1 syz-executor --db_more-- dovutimens(ffff80003b3bd780,fffff0806dfa03a0,ffff80003c3df9f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691 --db_more-- sys_futimes(ffff80003b3bd780,ffff80003c3dfb40,ffff80003c3dfa90) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733 syscall(ffff80003c3dfb40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3dfb40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel --db_more-- end trace frame: 0xd5be098e780, count: 11 --db_more-- https://www.openbsd.org/ddb.html describes the minimum info required in bug --db_more-- reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> nes = 0 No such command ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffff0800b1cb1e8, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace dovutimens(ffff80003b3bd780,fffff0806dfa03a0,ffff80003c3df9f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691 sys_futimes(ffff80003b3bd780,ffff80003c3dfb40,ffff80003c3dfa90) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733 syscall(ffff80003c3dfb40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3dfb40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 --db_more-- Xsyscall() at Xsyscall+0x128 --db_more-- end of kernel --db_more-- end trace frame: 0xd5be098e780, count: -4 ddb{0}> w registers Symbol not found ddb{0}> show proc PROC (syz-executor) tid=459629 pid=32992 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 --db_more--  wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 --db_more--  forw=0xffffffffffffffff, list=0xffff80003b3bc028,0xffffffff83b024c0 --db_more--  process=0xffff800045fe04f8 user=0xffff80003c3da000, vmspace=0xfffff0800b1cb1e8 --db_more--  estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> how all locks No such command ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11089 12149K 12292K 166960K 12617 0 pcb 17 14K 15K 166960K 60 0 --db_more--  rtable 225 7K 8K 166960K 402 0 --db_more--  pf 33 17K 38K 166960K 92 0 --db_more--  ifaddr 40 7K 8K 166960K 66 0 --db_more--  ifgroup 51 2K 3K 166960K 97 0 --db_more--  sysctl 3 1K 9K 166960K 8 0 counters 68 36K 38K 166960K 240 0 ioctlops 0 0K 4K 166960K 1586 0 iov 0 0K 16K 166960K 8 0 --db_more--  mount 1 1K 1K 166960K 1 0 --db_more--  log 1 0K 0K 166960K 5 0 --db_more--  vnodes 1361 86K 86K 166960K 1671 0 --db_more--  UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 9 0 VM map 2 1K 1K 166960K 2 0 --db_more--  sem 7 0K 0K 166960K 72 0 --db_more--  dirhash 12 2K 2K 166960K 12 0 --db_more--  ACPI 1734 201K 291K 166960K 11964 0 --db_more--  file desc 16 61K 93K 166960K 327 0 --db_more--  sigio 0 0K 0K 166960K 5 0 --db_more--  proc 11 17K 164K 166960K 577 0 --db_more--  subproc 72 4K 4K 166960K 74 0 --db_more--  NFS srvsock 1 0K 0K 166960K 1 0 --db_more-- ddb{0}> hine ddbcpu 0 No such command ddb{0}> trace dovutimens(ffff80003b3bd780,fffff0806dfa03a0,ffff80003c3df9f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691 sys_futimes(ffff80003b3bd780,ffff80003c3dfb40,ffff80003c3dfa90) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733 syscall(ffff80003c3dfb40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3dfb40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 --db_more-- Xsyscall() at Xsyscall+0x128 --db_more-- end of kernel --db_more-- ddb{0}> hine ddbcpu 1 No such command ddb{0}> trace dovutimens(ffff80003b3bd780,fffff0806dfa03a0,ffff80003c3df9f0) at dovutimens+0x368 sys/kern/vfs_syscalls.c:2691 sys_futimes(ffff80003b3bd780,ffff80003c3dfb40,ffff80003c3dfa90) at sys_futimes+0x208 sys/kern/vfs_syscalls.c:2733 syscall(ffff80003c3dfb40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3dfb40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 --db_more--