uvm_fault(0xffffffff82a1ea50, 0x0, 0, 2) -> e kernel: page fault trap, code=0 Stopped at km_free+0x118: movq $0,0(%rax) TID PID UID PRFLAGS PFLAGS CPU COMMAND * 10393 28142 0 0x14000 0x200 0 systqmp km_free(0,1000,ffffffff82638930,ffffffff82638948) at km_free+0x118 sys/uvm/uvm_km.c:973 pool_p_free(ffffffff829d4060,fffffd8060189f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1014 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1585 taskq_thread(ffffffff82924990) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff82a1ea50, 0x0, 0, 2) -> e ddb> trace km_free(0,1000,ffffffff82638930,ffffffff82638948) at km_free+0x118 sys/uvm/uvm_km.c:973 pool_p_free(ffffffff829d4060,fffffd8060189f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1014 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1585 taskq_thread(ffffffff82924990) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -4 ddb> show registers rdi 0x1000 __ALIGN_SIZE rsi 0x28000000 rbp 0xffff8000215906d0 rbx 0x28000000000 rdx 0 rcx 0xffffffff82638948 kp_dirty rax 0 r8 0xffff80002e7a2c70 r9 0 r10 0x9b1428d982f30683 r11 0x1363c4a5012918a6 r12 0 r13 0xffffffff82638930 kv_page r14 0x1000 __ALIGN_SIZE r15 0x1000 __ALIGN_SIZE rip 0xffffffff810b7d78 km_free+0x118 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800021590650 ss 0x10 km_free+0x118: movq $0,0(%rax) ddb> show proc PROC (systqmp) pid=10393 stat=onproc flags process=14000 proc=200 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffffe2a0,0xffff8000ffffe550 process=0xffff8000ffffc000 user=0xffff80002158b000, vmspace=0xffffffff82a1ea50 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 82664 366800 75938 0 2 0 syz-executor.0 82664 405424 75938 0 2 0x4000000 syz-executor.0 50358 244 45339 0 2 0 syz-executor.1 50358 45059 45339 0 2 0x4000000 syz-executor.1 10001 515680 13156 0 2 0x2 syz-executor.7 75938 114886 13156 0 2 0x482 syz-executor.0 45931 466010 0 0 3 0x14280 nfsidl nfsio 2044 92097 0 0 3 0x14280 nfsidl nfsio 17885 515927 0 0 3 0x14280 nfsidl nfsio 14120 352006 0 0 3 0x14280 nfsidl nfsio 33913 483857 0 0 3 0x14280 nfsidl nfsio 38898 408576 0 0 3 0x14280 nfsidl nfsio 86426 316318 0 0 3 0x14280 nfsidl nfsio 54166 124105 0 0 3 0x14280 nfsidl nfsio 77516 398749 0 0 3 0x14280 nfsidl nfsio 82571 445238 0 0 3 0x14280 nfsidl nfsio 95954 30629 0 0 3 0x14280 nfsidl nfsio 29496 245030 0 0 3 0x14280 nfsidl nfsio 75500 350965 0 0 3 0x14280 nfsidl nfsio 8359 163473 0 0 3 0x14280 nfsidl nfsio 20887 125694 13156 0 2 0x2 syz-executor.5 83695 165547 13156 0 2 0x2 syz-executor.3 92842 331348 1 0 3 0x100083 ttyin getty 80003 192239 13156 0 2 0x482 syz-executor.2 83501 15295 13156 0 2 0x2 syz-executor.6 45339 294601 13156 0 2 0x482 syz-executor.1 23825 186185 0 0 3 0x14200 bored sosplice 35432 33730 0 0 3 0x14280 nfsidl nfsio 67903 250765 0 0 3 0x14280 nfsidl nfsio 81159 9300 0 0 3 0x14280 nfsidl nfsio 45327 474184 0 0 3 0x14280 nfsidl nfsio 79036 423296 0 0 3 0x14280 nfsidl nfsio 13772 424590 0 0 3 0x14280 nfsidl nfsio 4074 146369 13156 0 2 0x482 syz-executor.4 13156 317131 77762 0 3 0x82 thrsleep syz-fuzzer 13156 77310 77762 0 2 0x4000482 syz-fuzzer 13156 133805 77762 0 3 0x4000082 thrsleep syz-fuzzer 13156 362234 77762 0 2 0x4000482 syz-fuzzer 13156 325816 77762 0 3 0x4000082 thrsleep syz-fuzzer 13156 482251 77762 0 3 0x4000082 thrsleep syz-fuzzer 13156 122379 77762 0 3 0x4000082 thrsleep syz-fuzzer 13156 217789 77762 0 3 0x4000082 thrsleep syz-fuzzer 77762 135148 43328 0 3 0x10008a sigsusp ksh 43328 318886 33457 0 3 0x9a kqread sshd 33457 321597 1 0 3 0x88 kqread sshd 81403 221911 58477 73 3 0x1100090 kqread syslogd 58477 311139 1 0 3 0x100082 netio syslogd 2877 328288 1 0 3 0x100080 kqread resolvd 54961 219879 39974 77 3 0x100092 kqread dhcpleased 57665 300547 39974 77 3 0x100092 kqread dhcpleased 39974 303323 1 0 3 0x80 kqread dhcpleased 42000 380498 0 0 2 0x14200 smr 48344 25600 0 0 2 0x14200 zerothread 88261 338133 0 0 3 0x14200 aiodoned aiodoned 72481 498293 0 0 2 0x14600 update 89015 279635 0 0 3 0x14200 cleaner cleaner 62134 350949 0 0 3 0x14200 reaper reaper 7816 129098 0 0 3 0x14200 pgdaemon pagedaemon 64933 370921 0 0 3 0x14200 bored viomb 51489 139787 0 0 3 0x40014200 acpi0 acpi0 83195 65678 0 0 3 0x14200 bored softnet *28142 10393 0 0 7 0x14200 systqmp 8619 89628 0 0 2 0x14200 systq 38859 468821 0 0 2 0x40014200 softclock 25122 202964 0 0 3 0x40014200 idle0 1 47784 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10184 6713K 8016K 78643K 63269 0 pcb 13 20K 25K 78643K 6832 0 rtable 199 14K 17K 78643K 1180 0 ifaddr 76 18K 25K 78643K 1752 0 sysctl 2 0K 0K 78643K 2 0 counters 26 17K 17K 78643K 143 0 ioctlops 0 0K 4K 78643K 9343 0 iov 0 0K 32K 78643K 2552 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1393 87K 87K 78643K 14298 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 17K 78643K 71 0 VM map 2 0K 0K 78643K 2 0 sem 11 5K 6K 78643K 14 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 12 41K 69K 78643K 20105 0 sigio 0 0K 0K 78643K 237 0 proc 72 59K 83K 78643K 1355 0 subproc 104 6K 6K 78643K 312 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 691 0 in_multi 84 5K 7K 78643K 592 0 ether_multi 1 0K 0K 78643K 136 0 mrt 0 0K 0K 78643K 86 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 103 466K 466K 78643K 103 0 exec 0 0K 2K 78643K 1905 0 pfkey data 0 0K 1K 78643K 1 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 356 386K 404K 78643K 99176 0 UVM aobj 127 8K 8K 78643K 161 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 474 0 NDP 10 0K 2K 78643K 178 0 temp 258 4998K 5072K 78643K 214044 0 kqueue 12 18K 26K 78643K 935 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 350 0 347 1 0 1 1 0 8 0 rtentry 112 330 0 241 4 1 3 4 0 8 0 unpcb 136 5699 0 5686 43 42 1 6 0 8 0 syncache 296 62 0 62 12 12 0 1 0 8 0 tcpqe 32 52 0 52 6 6 0 1 0 8 0 tcpcb 736 4894 0 4890 57 56 1 9 0 8 0 arp 88 54 0 38 1 0 1 1 0 8 0 ipq 40 15 0 15 6 6 0 1 0 8 0 ipqe 40 193 0 193 6 6 0 1 0 8 0 inpcb 312 20033 0 20026 130 126 4 21 0 8 3 ip6q 72 1 0 1 1 1 0 1 0 8 0 nd6 48 77 0 57 1 0 1 1 0 8 0 pkpcb 40 46 0 46 8 8 0 1 0 8 0 kcovpl 48 24 0 16 1 0 1 1 0 8 0 ppxss 1152 51 0 51 9 9 0 1 0 8 0 pfstscr 40 45 0 45 2 2 0 1 0 8 0 pfosfp 40 39 0 38 3 2 1 1 0 8 0 pfosfpen 112 39 0 38 3 2 1 1 0 8 0 pfrktable 1344 29 0 29 5 5 0 1 0 8 0 pftag 88 23 0 13 1 0 1 1 0 8 0 pfqueue 264 10 0 10 7 7 0 1 0 8 0 pfstitem 24 40 0 40 1 1 0 1 0 8 0 pfstkey 112 88 0 88 2 2 0 1 0 8 0 pfstate 320 48 0 48 3 3 0 2 0 8 0 pfrule 1360 1179 0 1179 20 20 0 5 0 8 0 rttmrq 48 109 0 105 1 0 1 1 0 8 0 rttmr 72 10 0 10 3 3 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1385 0 976 39 13 26 29 0 8 0 art_table 32 1386 0 976 4 0 4 4 0 8 0 art_node 16 324 0 245 1 0 1 1 0 8 0 semapl 112 9 0 0 1 0 1 1 0 8 0 shmpl 112 158 0 35 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 24447 0 22980 93 0 93 93 0 8 0 ffsino 240 24447 0 22980 87 0 87 87 0 8 0 nchpl 144 47374 0 45744 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 147422 0 147418 3 2 1 2 0 8 0 vcpupl 1984 20 0 2 3 0 3 3 0 8 0 vmpool 528 24 0 6 3 1 2 2 0 8 0 pfiaddrpl 120 20 0 20 3 3 0 1 0 8 0 kstatmem 264 254 0 234 2 0 2 2 0 8 0 scsiplug 72 5 0 5 2 2 0 1 0 8 0 scxspl 216 137604 0 137604 13 12 1 8 0 8 1 plimitpl 152 483 0 469 1 0 1 1 0 8 0 sigapl 424 20390 0 20331 9 1 8 8 0 8 0 futexpl 64 154053 0 154053 1 0 1 1 0 8 1 knotepl 120 164946 0 164866 41 37 4 11 0 8 0 kqueuepl 184 1693 0 1685 11 10 1 4 0 8 0 pipepl 304 1389 0 1361 33 30 3 8 0 8 0 fdescpl 432 20337 0 20314 4 0 4 4 0 8 0 filepl 120 97504 0 97271 68 57 11 18 0 8 3 lockfpl 104 6022 0 6020 10 9 1 2 0 8 0 lockfspl 48 2161 0 2159 1 0 1 1 0 8 0 sessionpl 144 43 0 27 1 0 1 1 0 8 0 pgrppl 48 68 0 52 1 0 1 1 0 8 0 ucredpl 96 6211 0 6200 1 0 1 1 0 8 0 zombiepl 144 20333 0 20331 1 0 1 1 0 8 0 processpl 1000 20390 0 20331 9 1 8 9 0 8 0 procpl 672 43805 0 43737 18 11 7 8 0 8 0 sosppl 168 96 0 96 8 8 0 1 0 8 0 sockpl 448 26139 0 26116 294 285 9 32 0 8 6 mcl64k 65536 417 0 417 23 23 0 1 0 8 0 mcl16k 16384 127 0 127 19 19 0 1 0 8 0 mcl12k 12288 287 0 287 23 23 0 1 0 8 0 mcl9k 9216 171 0 171 20 19 1 1 0 8 1 mcl8k 8192 1206 0 1206 24 23 1 1 0 8 1 mcl4k 4096 1339 0 1339 15 14 1 1 0 8 1 mcl2k2 2112 79 0 79 24 24 0 1 0 8 0 mcl2k 2048 70902 0 70823 61 48 13 17 0 8 0 mtagpl 96 11211 0 9454 45 2 43 43 0 8 0 mbufpl 256 289534 0 287533 162 34 128 129 0 8 0 bufpl 288 28864 0 22457 458 0 458 458 0 8 0 anonpl 24 3369600 0 3356988 189 106 83 97 0 188 0 amapchunkpl 152 288067 0 287558 67 43 24 35 0 158 0 amappl16 200 50476 0 50098 118 97 21 30 0 8 0 amappl15 192 5579 0 5577 2 1 1 1 0 8 0 amappl14 184 1633 0 1626 1 0 1 1 0 8 0 amappl13 176 560 0 557 1 0 1 1 0 8 0 amappl12 168 1628 0 1623 2 1 1 1 0 8 0 amappl11 160 5517 0 5497 3 2 1 2 0 8 0 amappl10 152 4297 0 4288 1 0 1 1 0 8 0 amappl9 144 684 0 681 1 0 1 1 0 8 0 amappl8 136 3501 0 3352 6 0 6 6 0 8 0 amappl7 128 2611 0 2599 1 0 1 1 0 8 0 amappl6 120 619 0 596 2 1 1 2 0 8 0 amappl5 112 19252 0 19238 1 0 1 1 0 8 0 amappl4 104 10525 0 10490 2 0 2 2 0 8 0 amappl3 96 56123 0 56086 2 0 2 2 0 8 0 amappl2 88 22487 0 22425 3 1 2 3 0 8 0 amappl1 80 457635 0 457086 33 19 14 19 0 8 0 amappl 88 98145 0 97990 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 160 0 34 3 0 3 3 0 8 0 uaddrrnd 24 20361 0 20320 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 20361 0 20320 1 0 1 1 0 8 0 vmmpekpl 168 112837 0 112783 3 0 3 3 0 8 0 vmmpepl 168 1884828 0 1882716 224 107 117 121 0 357 5 vmsppl 272 20360 0 20320 5 1 4 4 0 8 0 rwobjpl 24 426509 0 419055 49 2 47 47 0 8 0 pdppl 4096 40728 0 40658 585 505 80 84 0 8 10 pvpl 32 6787049 0 6771245 411 269 142 240 0 265 2 pmappl 216 20360 0 20320 3 0 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 2082 0 1171 28 0 28 28 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace km_free(0,1000,ffffffff82638930,ffffffff82638948) at km_free+0x118 sys/uvm/uvm_km.c:973 pool_p_free(ffffffff829d4060,fffffd8060189f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1014 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1585 taskq_thread(ffffffff82924990) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -4 ddb> machine ddbcpu 1 No such command ddb> trace km_free(0,1000,ffffffff82638930,ffffffff82638948) at km_free+0x118 sys/uvm/uvm_km.c:973 pool_p_free(ffffffff829d4060,fffffd8060189f90) at pool_p_free+0x14b sys/kern/subr_pool.c:1014 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1585 taskq_thread(ffffffff82924990) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -4