uvm_fault(0xffffffff839c6698, 0xffff800025322004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *108945 15054 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a885480) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd805ed8a3a0,ffff80002a885508,fffffd8007ffd478,ffff80002a88554c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736008,ffff80002a885690,ffff80002a8855e0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a885690) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a885690) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79b85bae0db0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839c6698, 0xffff800025322004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a885480) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd805ed8a3a0,ffff80002a885508,fffffd8007ffd478,ffff80002a88554c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736008,ffff80002a885690,ffff80002a8855e0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a885690) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a885690) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79b85bae0db0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a885470 rbx 0x200 rdx 0 rcx 0xfffffd806ad06590 rax 0xffff800025322200 r8 0xffffffffffffffff r9 0x2 r10 0x8f74deda640f5101 r11 0x85b9e790a02b63c8 r12 0 r13 0xffff80002a885508 r14 0xffff800025322000 r15 0xffff800025322008 rip 0xffffffff81621aee ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a8852c0 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=108945 pid=15054 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a736538,0xffff80002a736a78 process=0xffff80002a79ed10 user=0xffff80002a880000, vmspace=0xfffffd80703c82e8 estcpu=36, cpticks=12, pctcpu=0.3, user=1, sys=11, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 9837 199912 8420 0 2 0 syz-executor 9837 345640 8420 0 3 0x4000080 kqsel syz-executor 9837 289349 8420 0 2 0x4000000 syz-executor 83487 4136 60891 0 3 0x80 nanoslp syz-executor 83487 83806 60891 0 3 0x4000080 kqsel syz-executor 77855 481147 52793 0 2 0xc80 syz-executor 77855 265072 52793 0 3 0x4000080 pppxread syz-executor 54056 491743 8266 0 3 0x80 nanoslp syz-executor 54056 453928 8266 0 3 0x4000080 semwait syz-executor 45831 42433 36967 0 3 0x82 nanoslp syz-executor 93777 390440 0 0 3 0x14200 acct acct 73910 25913 1 0 3 0x80 nanoslp init 61557 327793 0 0 3 0x14280 nfsidl nfsio 8061 11038 0 0 3 0x14280 nfsidl nfsio 74585 381018 0 0 3 0x14280 nfsidl nfsio 32622 356198 0 0 3 0x14280 nfsidl nfsio 84992 218803 0 0 3 0x14280 nfsidl nfsio 87314 361276 0 0 3 0x14280 nfsidl nfsio 79388 487641 0 0 3 0x14280 nfsidl nfsio 17127 521331 0 0 3 0x14280 nfsidl nfsio 52275 43255 0 0 3 0x14280 nfsidl nfsio 89703 325412 0 0 3 0x14280 nfsidl nfsio 60968 444282 0 0 3 0x14280 nfsidl nfsio 20331 238884 0 0 3 0x14280 nfsidl nfsio 97189 253102 0 0 3 0x14280 nfsidl nfsio 27845 18269 0 0 3 0x14280 nfsidl nfsio 46460 238759 0 0 3 0x14280 nfsidl nfsio 41985 402324 0 0 3 0x14280 nfsidl nfsio 47678 38689 0 0 3 0x14280 nfsidl nfsio 36227 363033 0 0 3 0x14280 nfsidl nfsio 60259 377603 0 0 3 0x14280 nfsidl nfsio 81877 100882 0 0 3 0x14280 nfsidl nfsio 8420 25598 36967 0 3 0x82 nanoslp syz-executor *15054 108945 36967 0 7 0x2 syz-executor 60891 359349 36967 0 2 0xc82 syz-executor 52793 96376 36967 0 3 0x82 nanoslp syz-executor 8266 322665 36967 0 3 0x82 nanoslp syz-executor 36967 524171 7282 0 3 0x82 wait syz-executor 7282 263111 1 0 3 0x10008a sigsusp ksh 71397 390623 21934 73 3 0x1100090 kqread syslogd 21934 203879 1 0 3 0x100082 sbwait syslogd 68953 423823 0 0 3 0x14200 bored smr 33079 353203 0 0 2 0x14200 zerothread 55469 455251 0 0 3 0x14200 aiodoned aiodoned 74458 156472 0 0 3 0x14200 syncer update 64739 367978 0 0 3 0x14200 cleaner cleaner 57756 135237 0 0 3 0x14200 reaper reaper 27838 428040 0 0 3 0x14200 pgdaemon pagedaemon 30100 32120 0 0 3 0x14200 bored viomb 36301 61175 0 0 3 0x40014200 acpi0 acpi0 12785 337245 0 0 3 0x14200 bored softnet0 1166 427482 0 0 3 0x14200 bored systqmp 86470 275275 0 0 3 0x14200 bored systq 39594 15613 0 0 2 0x40014200 softclock 22615 150407 0 0 3 0x40014200 idle0 1 471068 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11040 12116K 12433K 166960K 12787 0 pcb 17 12K 12K 166960K 106 0 rtable 169 14K 15K 166960K 490 0 pf 36 14K 20K 166960K 149 0 ifaddr 32 5K 8K 166960K 85 0 ifgroup 46 2K 2K 166960K 124 0 sysctl 3 1K 9K 166960K 7 0 counters 32 17K 18K 166960K 70 0 ioctlops 0 0K 4K 166960K 100 0 iov 0 0K 12K 166960K 25 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 81K 82K 166960K 1730 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 18 0 dirhash 12 2K 3K 166960K 51 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 97K 166960K 815 0 sigio 0 0K 0K 166960K 9 0 proc 38 26K 124K 166960K 557 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 26 0 in_multi 64 4K 7K 166960K 144 0 ether_multi 1 0K 0K 166960K 14 0 mrt 0 0K 0K 166960K 32 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 410 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 136 95K 151K 166960K 8331 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 21 42K 96K 166960K 1956 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 24 0 NDP 12 0K 2K 166960K 54 0 temp 37 9103K 9166K 166960K 20574 0 kqueue 5 8K 27K 166960K 143 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 51 0 51 1 0 1 1 0 8 1 rtentry 136 145 0 79 4 0 4 4 0 8 0 unpcb 144 218 0 213 1 0 1 1 0 8 0 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 88 0 86 1 0 1 1 0 8 0 arp 96 22 0 10 1 0 1 1 0 8 0 ipq 40 4 0 2 1 0 1 1 0 8 0 ipqe 40 6 0 4 1 0 1 1 0 8 0 inpcb 328 310 0 308 2 0 2 2 0 8 1 nd6 112 27 0 14 1 0 1 1 0 8 0 pkpcb 40 1 0 0 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1072 28 0 28 1 0 1 1 0 8 1 pppxif 1416 6 0 6 1 0 1 1 0 8 1 pfstscr 40 20 0 8 1 0 1 1 0 8 0 pfrktable 1344 9 0 7 1 0 1 1 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 9 0 4 1 0 1 1 0 8 0 pftag 88 5 0 3 1 0 1 1 0 8 0 pfstitem 24 12 0 2 1 0 1 1 0 8 0 pfstkey 128 20 0 11 1 0 1 1 0 8 0 pfstate 384 11 0 4 1 0 1 1 0 8 0 pfrule 1360 16 0 14 1 0 1 1 0 8 0 rttmr 136 5 0 5 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 682 0 377 33 4 29 33 0 8 8 art_table 40 684 0 377 6 0 6 6 0 8 1 art_node 32 145 0 89 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 12 0 3 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 43 0 26 3 0 3 3 0 8 0 dino2pl 256 2711 0 1250 92 0 92 92 0 8 0 ffsino 256 2711 0 1250 92 0 92 92 0 8 0 nchpl 144 3636 0 1937 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2971 0 0 166 0 166 166 0 8 0 namei 1024 10670 0 10670 2 0 2 2 0 8 2 pfiaddrpl 120 2 0 1 1 0 1 1 0 8 0 kstatmem 264 73 0 52 2 0 2 2 0 8 0 scsiplug 72 5 0 5 1 0 1 1 0 8 1 scxspl 216 18048 0 18048 8 0 8 8 1 8 8 plimitpl 152 175 0 164 1 0 1 1 0 8 0 sigapl 424 1135 0 1081 8 0 8 8 0 8 1 knotepl 120 30512 0 30488 17 7 10 17 0 8 8 kqueuepl 184 157 0 152 1 0 1 1 0 8 0 pipepl 304 134 0 107 3 0 3 3 0 8 0 fdescpl 448 1100 0 1080 5 0 5 5 0 8 1 filepl 120 3882 0 3706 7 0 7 7 0 8 0 lockfpl 104 192 0 191 1 0 1 1 0 8 0 lockfspl 48 87 0 86 1 0 1 1 0 8 0 sessionpl 144 47 0 44 1 0 1 1 0 8 0 pgrppl 48 56 0 45 1 0 1 1 0 8 0 ucredpl 104 976 0 971 1 0 1 1 0 8 0 zombiepl 144 1084 0 1081 1 0 1 1 0 8 0 processpl 1152 1135 0 1081 5 0 5 5 0 8 0 procpl 664 1923 0 1864 7 0 7 7 0 8 0 sockpl 552 581 0 573 3 0 3 3 0 8 2 mcl64k 65536 227 0 227 1 0 1 1 0 8 1 mcl16k 16384 120 0 120 1 0 1 1 0 8 1 mcl12k 12288 59 0 59 1 0 1 1 0 8 1 mcl9k128 9344 18 0 18 1 0 1 1 0 8 1 mcl8k 8192 44 0 44 1 0 1 1 0 8 1 mcl4k 4096 3625 0 3569 13 0 13 13 0 8 5 mcl2k2 2112 2 0 2 1 0 1 1 0 8 1 mcl2k 2048 394 0 391 2 0 2 2 0 8 1 mtagpl 96 21 0 14 1 0 1 1 0 8 0 mbufpl 256 11195 0 11072 15 0 15 15 0 8 0 bufpl 280 7752 0 1536 445 0 445 445 0 8 0 anonpl 24 168366 0 166512 59 0 59 59 0 186 27 amapchunkpl 152 27362 0 27046 27 0 27 27 0 158 10 amappl16 200 3286 0 3260 21 9 12 16 0 8 8 amappl15 192 29 0 29 1 0 1 1 0 8 1 amappl14 184 423 0 422 1 0 1 1 0 8 0 amappl13 176 122 0 119 1 0 1 1 0 8 0 amappl12 168 1341 0 1323 2 0 2 2 0 8 0 amappl11 160 7 0 5 1 0 1 1 0 8 0 amappl10 152 58 0 54 1 0 1 1 0 8 0 amappl9 144 268 0 268 1 0 1 1 0 8 1 amappl8 136 98 0 97 1 0 1 1 0 8 0 amappl7 128 145 0 140 1 0 1 1 0 8 0 amappl6 120 158 0 157 1 0 1 1 0 8 0 amappl5 112 106 0 104 1 0 1 1 0 8 0 amappl4 104 270 0 262 1 0 1 1 0 8 0 amappl3 96 5667 0 5600 4 0 4 4 0 8 1 amappl2 88 539 0 523 2 0 2 2 0 8 0 amappl1 80 12904 0 12748 13 0 13 13 0 8 4 amappl 88 7560 0 7449 4 0 4 4 0 92 0 uvmvnodes 80 119 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma2048 2048 2 0 2 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1100 0 1080 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1100 0 1080 1 0 1 1 0 8 0 vmmpekpl 168 9517 0 9475 2 0 2 2 0 8 0 vmmpepl 168 75656 0 74763 90 0 90 90 0 357 40 vmsppl 368 1099 0 1080 4 0 4 4 0 8 1 rwobjpl 40 21946 0 21457 13 0 13 13 0 8 0 pdppl 4096 2206 0 2160 98 44 54 82 0 8 8 pvpl 32 550947 0 546109 143 0 143 143 0 265 65 pmappl 216 1099 0 1080 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 371 0 48 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_readdir(ffff80002a885480) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd805ed8a3a0,ffff80002a885508,fffffd8007ffd478,ffff80002a88554c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736008,ffff80002a885690,ffff80002a8855e0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a885690) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a885690) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79b85bae0db0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ufs_readdir(ffff80002a885480) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd805ed8a3a0,ffff80002a885508,fffffd8007ffd478,ffff80002a88554c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736008,ffff80002a885690,ffff80002a8855e0) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3219 syscall(ffff80002a885690) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a885690) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x79b85bae0db0, count: -5 ddb>