uvm_fault(0xfffffd806c047450, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *374096 19289 0 0 0x4000000 0 syz-executor ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003ad44030,ffff80003c9fb2d0,ffff80003c9fb220) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff80003c9fb2d0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb3c4d7addb0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c047450, 0xf, 0, 1) -> e ddb> trace ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003ad44030,ffff80003c9fb2d0,ffff80003c9fb220) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff80003c9fb2d0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb3c4d7addb0, count: -5 ddb> show registers rdi 0xffff80003ad44030 rsi 0xffffffffffffffff rbp 0xffff80003c9faff0 rbx 0xfffffd807f7d75b0 rdx 0 rcx 0x80000310 __kernel_virt_to_phys+0x310 rax 0xffff80003ad44030 r8 0xfffffd806b228ea8 r9 0xfffffd807f7d75b0 r10 0x9eef6fc94b6dc28a r11 0x5addc32e442c5fc1 r12 0xffff80003ad44030 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0x80000310 __kernel_virt_to_phys+0x310 rip 0xffffffff824b6208 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c9faf70 ss 0 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=374096 pid=19289 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=71, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003ad44a70,0xffff80003ad45750 process=0xffff8000ffff3440 user=0xffff80003c9f6000, vmspace=0xfffffd806c047450 estcpu=21, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 19289 319375 49220 0 2 0 syz-executor *19289 374096 49220 0 7 0x4000000 syz-executor 19289 321164 49220 0 3 0x4000080 fsleep syz-executor 19289 412772 49220 0 3 0x4000080 fsleep syz-executor 67566 181818 82602 0 2 0 syz-executor 67566 445958 82602 0 3 0x4000080 kqread syz-executor 67566 193593 82602 0 3 0x4000080 fsleep syz-executor 9210 24215 0 0 3 0x14200 acct acct 16645 181874 58701 0 3 0x80 nanoslp syz-executor 16645 522708 58701 0 3 0x4000080 netcon syz-executor 16645 478281 58701 0 3 0x4000080 fsleep syz-executor 17727 353557 16951 0 3 0x80 nanoslp syz-executor 17727 183026 16951 0 3 0x4000080 kqsel syz-executor 17727 93643 16951 0 3 0x4000080 fsleep syz-executor 96743 296036 90988 0 2 0x480 syz-executor 96743 153739 90988 0 3 0x4000080 kqread syz-executor 96743 328703 90988 0 3 0x4000080 fsleep syz-executor 23938 423683 0 0 3 0x14280 nfsidl nfsio 32002 308782 0 0 3 0x14280 nfsidl nfsio 27097 18291 0 0 3 0x14280 nfsidl nfsio 88780 121621 0 0 3 0x14280 nfsidl nfsio 83291 435002 0 0 3 0x14280 nfsidl nfsio 79196 385195 0 0 3 0x14280 nfsidl nfsio 57337 481588 0 0 3 0x14280 nfsidl nfsio 15507 212059 0 0 3 0x14280 nfsidl nfsio 30447 436553 0 0 3 0x14280 nfsidl nfsio 24147 32948 0 0 3 0x14280 nfsidl nfsio 59402 22797 0 0 3 0x14280 nfsidl nfsio 14487 343195 0 0 3 0x14280 nfsidl nfsio 88875 360391 0 0 3 0x14280 nfsidl nfsio 42455 102776 0 0 3 0x14280 nfsidl nfsio 8153 319066 0 0 3 0x14280 nfsidl nfsio 79144 16486 0 0 3 0x14280 nfsidl nfsio 8998 421342 0 0 3 0x14280 nfsidl nfsio 70897 246089 0 0 3 0x14280 nfsidl nfsio 17844 203814 0 0 3 0x14280 nfsidl nfsio 2809 426566 0 0 3 0x14280 nfsidl nfsio 66710 218317 5103 0 3 0x100082 sbwait ndp 5103 241695 64104 0 3 0x10008a sigsusp sh 51990 101666 26044 0 2 0x2 syz-executor 64104 344807 26044 0 3 0x82 wait syz-executor 58701 287091 26044 0 2 0x482 syz-executor 9567 252598 26044 0 2 0x2 syz-executor 49220 86810 26044 0 3 0x82 nanoslp syz-executor 90988 325903 26044 0 2 0x482 syz-executor 16951 124894 26044 0 2 0x482 syz-executor 82602 382484 26044 0 2 0x482 syz-executor 26044 133397 30740 0 3 0x82 kqread syz-executor 30740 110707 58445 0 3 0x10008a sigsusp ksh 58445 494738 2450 0 3 0x98 kqread sshd-session 2450 146663 50687 0 3 0x92 kqread sshd-session 23821 466319 1 0 3 0x100083 ttyin getty 50687 119346 1 0 3 0x88 kqread sshd 24641 206295 66442 73 3 0x1100090 kqread syslogd 66442 25839 1 0 3 0x100082 sbwait syslogd 1622 368328 1 0 3 0x100080 kqread resolvd 69464 102333 37101 77 3 0x100092 kqread dhcpleased 83105 229092 37101 77 3 0x100092 kqread dhcpleased 37101 467693 1 0 3 0x80 kqread dhcpleased 49618 346169 0 0 3 0x14200 bored smr 42654 295862 0 0 2 0x14200 zerothread 59033 282148 0 0 3 0x14200 aiodoned aiodoned 83411 511308 0 0 3 0x14200 syncer update 96571 132497 0 0 3 0x14200 cleaner cleaner 50323 60337 0 0 3 0x14200 reaper reaper 1650 35234 0 0 3 0x14200 pgdaemon pagedaemon 92125 347699 0 0 3 0x14200 bored viomb 76583 298910 0 0 3 0x40014200 acpi0 acpi0 483 232792 0 0 3 0x14200 bored softnet3 41719 476958 0 0 3 0x14200 bored softnet2 92175 469509 0 0 3 0x14200 bored softnet1 73054 40084 0 0 2 0x14200 softnet0 53550 16036 0 0 3 0x14200 bored systqmp 71942 35497 0 0 3 0x14200 bored systq 26914 445267 0 0 3 0x40014200 tmoslp softclock 17168 348794 0 0 3 0x40014200 idle0 1 496821 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10173 11041K 11239K 166960K 11342 0 pcb 18 12K 12K 166960K 28 0 rtable 234 6K 6K 166960K 353 0 pf 31 13K 13K 166960K 33 0 ifaddr 42 7K 7K 166960K 45 0 ifgroup 50 2K 2K 166960K 52 0 sysctl 1 1K 1K 166960K 1 0 counters 30 17K 17K 166960K 31 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 12K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1336 84K 84K 166960K 1467 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 89K 166960K 187 0 sigio 0 0K 0K 166960K 1 0 proc 59 59K 91K 166960K 479 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 14 0 in_multi 99 7K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 353 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 213 72K 73K 166960K 3055 0 UVM aobj 5 2K 2K 166960K 6 0 pinsyscall 39 78K 92K 166960K 1219 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 13 0K 1K 166960K 28 0 temp 38 8670K 8734K 166960K 4815 0 kqueue 15 24K 26K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 42 0 38 1 0 1 1 0 8 0 rtentry 112 111 0 1 4 0 4 4 0 8 0 unpcb 144 74 0 59 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 49 0 12 4 0 4 4 0 8 0 arp 88 18 0 0 1 0 1 1 0 8 0 inpcb 344 126 0 83 5 0 5 5 0 8 1 nd6 104 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 1 0 1 1 0 1 1 0 8 1 pfstkey 128 2 0 2 1 0 1 1 0 8 1 pfstate 344 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 32 452 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 4 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1729 0 226 95 0 95 95 0 8 0 ffsino 248 1729 0 226 95 0 95 95 0 8 0 nchpl 144 1990 0 315 63 0 63 63 0 8 0 uvmvnodes 80 1821 0 0 38 0 38 38 0 8 0 vnodes 216 1821 0 0 102 0 102 102 0 8 0 namei 1024 6180 0 6179 2 0 2 2 0 8 1 kstatmem 264 24 0 2 2 0 2 2 0 8 0 scxspl 216 6056 0 6056 3 0 3 3 1 8 3 plimitpl 152 39 0 20 1 0 1 1 0 8 0 sigapl 424 488 0 422 8 0 8 8 0 8 0 futexpl 64 813 0 807 1 0 1 1 0 8 0 knotepl 120 4929 0 4879 8 0 8 8 0 8 6 kqueuepl 184 107 0 93 4 0 4 4 0 8 2 pipepl 296 105 0 78 3 0 3 3 0 8 0 fdescpl 440 451 0 422 5 0 5 5 0 8 1 filepl 120 2098 0 1846 12 0 12 12 0 8 3 lockfpl 104 20 0 18 1 0 1 1 0 8 0 lockfspl 48 11 0 9 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 31 0 15 1 0 1 1 0 8 0 ucredpl 104 420 0 409 1 0 1 1 0 8 0 zombiepl 144 422 0 422 1 0 1 1 0 8 1 processpl 1112 488 0 422 5 0 5 5 0 8 0 procpl 656 585 0 508 7 0 7 7 0 8 0 sockpl 528 243 0 181 5 0 5 5 0 8 0 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 8 0 8 1 0 1 1 0 8 1 mcl4k 4096 2463 0 2403 15 0 15 15 0 8 7 mcl2k 2048 150 0 149 3 0 3 3 0 8 2 mtagpl 96 6 0 4 1 0 1 1 0 8 0 mbufpl 256 4557 0 4398 15 0 15 15 0 8 2 bufpl 280 2298 0 125 156 0 156 156 0 8 0 anonpl 24 100804 0 97620 33 0 33 33 0 187 11 amapchunkpl 152 9465 0 9000 26 0 26 26 0 158 6 amappl16 200 1911 0 1890 6 0 6 6 0 8 4 amappl15 192 8 0 8 1 0 1 1 0 8 1 amappl14 184 109 0 97 1 0 1 1 0 8 0 amappl13 176 3 0 3 1 0 1 1 0 8 1 amappl12 168 1063 0 1033 3 0 3 3 0 8 0 amappl11 160 41 0 31 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 0 1 1 0 8 1 amappl9 144 253 0 253 1 0 1 1 0 8 1 amappl8 136 18 0 17 1 0 1 1 0 8 0 amappl7 128 98 0 87 1 0 1 1 0 8 0 amappl6 120 171 0 167 1 0 1 1 0 8 0 amappl5 112 112 0 106 1 0 1 1 0 8 0 amappl4 104 275 0 260 1 0 1 1 0 8 0 amappl3 96 1510 0 1405 3 0 3 3 0 8 0 amappl2 88 611 0 556 2 0 2 2 0 8 0 amappl1 80 7621 0 7074 12 0 12 12 0 8 0 amappl 88 2712 0 2551 5 0 5 5 0 92 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 451 0 422 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 451 0 422 1 0 1 1 0 8 0 vmmpekpl 168 5280 0 5250 2 0 2 2 0 8 0 vmmpepl 168 33935 0 32233 81 0 81 81 0 357 3 vmsppl 360 450 0 422 4 0 4 4 0 8 1 rwobjpl 32 14487 0 11783 22 0 22 22 0 8 0 pdppl 4096 909 0 844 93 22 71 79 0 8 6 pvpl 32 224611 0 216205 89 0 89 89 0 265 12 pmappl 216 450 0 422 2 0 2 2 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 267 0 22 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003ad44030,ffff80003c9fb2d0,ffff80003c9fb220) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff80003c9fb2d0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb3c4d7addb0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003ad44030,ffffffffffffffff,0,80000310,fffffd806b228ea8,fffffd807f7d75b0) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd806b228ea8,4,310,0,ffff80003ad44030) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003ad44030,ffff80003c9fb2d0,ffff80003c9fb220) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff80003c9fb2d0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb3c4d7addb0, count: -5