login: uvm_fault(0xfffffd806c09e010, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *390008 84108 0 0 0x4000000 0 syz-executor ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003c94f9d0,ffff800035d1d070,ffff800035d1cfc0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff800035d1d070) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800035d1d070) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2fee77db6b0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c09e010, 0xf, 0, 1) -> e ddb> trace ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003c94f9d0,ffff800035d1d070,ffff800035d1cfc0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff800035d1d070) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800035d1d070) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2fee77db6b0, count: -5 ddb> show registers rdi 0xffff80002a8f6000 rsi 0x3867 __ALIGN_SIZE+0x2867 rbp 0xffff800035d1cd90 rbx 0xfffffd807f7d7888 rdx 0xffff80002a8f6000 rcx 0x3866 __ALIGN_SIZE+0x2866 rax 0xffffffff81e02623 ktrops+0x43 r8 0xfffffd8063c0c018 r9 0xfffffd807f7d7888 r10 0x8e657bd15417c7f6 r11 0x65e71dc0ad61454e r12 0xffff80003c94f9d0 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xc0000d06 rip 0xffffffff81e02638 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800035d1cd10 ss 0 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=390008 pid=84108 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c94e550,0xffff80003c94e2d0 process=0xffff800035d155d0 user=0xffff800035d18000, vmspace=0xfffffd806c09e010 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 98187 151122 12708 0 2 0 syz-executor 84108 98979 89848 0 2 0 syz-executor *84108 390008 89848 0 7 0x4000000 syz-executor 87627 340699 65891 0 3 0x82 nanoslp syz-executor 97310 524019 0 0 3 0x14200 acct acct 13070 324168 65891 0 3 0x82 wait syz-executor 52723 428877 1 0 3 0x100083 ttyin getty 56202 272369 65891 0 3 0x82 nanoslp syz-executor 6611 252339 65891 0 2 0x2 syz-executor 12708 398601 65891 0 3 0x82 nanoslp syz-executor 69057 10856 65891 0 2 0x482 syz-executor 80884 383950 0 0 3 0x14200 bored sosplice 14924 1498 65891 0 2 0x2 syz-executor 89848 153513 65891 0 2 0x482 syz-executor 65891 94447 84594 0 2 0x482 syz-executor 84594 16425 71786 0 3 0x10008a sigsusp ksh 71786 16126 41313 0 3 0x98 kqread sshd-session 41313 405663 68970 0 3 0x92 kqread sshd-session 68970 353068 1 0 3 0x88 kqread sshd 2167 152169 42041 73 3 0x1100090 kqread syslogd 42041 153824 1 0 3 0x100082 sbwait syslogd 14572 43544 1 0 3 0x100080 kqread resolvd 377 129149 39350 77 3 0x100092 kqread dhcpleased 91294 39142 39350 77 3 0x100092 kqread dhcpleased 39350 491923 1 0 3 0x80 kqread dhcpleased 29030 150306 0 0 3 0x14200 bored smr 77531 444897 0 0 2 0x14200 zerothread 45691 281316 0 0 3 0x14200 aiodoned aiodoned 25112 213784 0 0 3 0x14200 syncer update 90505 430172 0 0 3 0x14200 cleaner cleaner 38555 85290 0 0 3 0x14200 reaper reaper 65396 139345 0 0 3 0x14200 pgdaemon pagedaemon 92675 379195 0 0 3 0x14200 bored viomb 16188 390068 0 0 3 0x40014200 acpi0 acpi0 96891 39920 0 0 3 0x14200 bored softnet3 65424 162708 0 0 3 0x14200 bored softnet2 71282 432835 0 0 3 0x14200 bored softnet1 82167 439767 0 0 3 0x14200 bored softnet0 65327 450814 0 0 3 0x14200 bored systqmp 19436 276350 0 0 3 0x14200 bored systq 33289 315061 0 0 2 0x40014200 softclock 32200 59645 0 0 3 0x40014200 idle0 1 93931 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10217 11125K 15210K 166960K 16416 0 pcb 17 18K 21K 166960K 655 0 rtable 218 11K 12K 166960K 877 0 pf 37 14K 22K 166960K 222 0 ifaddr 40 7K 9K 166960K 162 0 ifgroup 53 2K 2K 166960K 269 0 sysctl 4 1K 2K 166960K 5 0 counters 34 17K 18K 166960K 207 0 ioctlops 0 0K 4K 166960K 549 0 iov 0 0K 28K 166960K 196 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1520 95K 96K 166960K 4059 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 38 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 67 0 dirhash 12 2K 3K 166960K 45 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 97K 166960K 2181 0 sigio 0 0K 0K 166960K 81 0 proc 61 59K 124K 166960K 933 0 subproc 72 4K 4K 166960K 145 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 340 0 in_multi 81 6K 7K 166960K 245 0 ether_multi 1 0K 0K 166960K 25 0 mrt 2 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 892 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 210 150K 174K 166960K 20797 0 UVM aobj 131 6K 6K 166960K 141 0 pinsyscall 37 74K 100K 166960K 3423 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 101 0 NDP 12 0K 2K 166960K 112 0 temp 75 8684K 8812K 166960K 56642 0 kqueue 13 20K 32K 166960K 378 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 379 0 376 4 1 3 3 0 8 2 rtentry 136 262 0 174 4 0 4 4 0 8 0 unpcb 144 1961 0 1946 16 12 4 6 0 8 3 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 544 0 539 11 7 4 8 0 8 3 arp 88 42 0 24 1 0 1 1 0 8 0 ipq 40 5 0 2 1 0 1 1 0 8 0 ipqe 40 12 0 7 1 0 1 1 0 8 0 inpcb 344 2824 0 2815 41 32 9 19 0 8 7 nd6 104 56 0 36 1 0 1 1 0 8 0 pkpcb 40 43 0 43 3 2 1 1 0 8 1 kcovpl 48 16 0 8 1 0 1 1 0 8 0 ppxss 1072 146 0 142 4 3 1 1 0 8 0 pppxif 1384 19 0 18 4 3 1 1 0 8 0 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pfrktable 1344 5 0 2 1 0 1 1 0 8 0 pfanchor 1288 4 0 3 2 1 1 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 1 0 1 0 8 0 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 6 0 2 1 0 1 1 0 8 0 pfstate 344 3 0 1 1 0 1 1 0 8 0 pfrule 1344 13 0 10 1 0 1 1 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 1053 0 673 34 4 30 30 0 8 5 art_table 32 1056 0 673 4 0 4 4 0 8 0 art_node 16 250 0 172 1 0 1 1 0 8 0 semupl 112 3 0 3 2 1 1 1 0 8 1 semapl 112 64 0 54 1 0 1 1 0 8 0 shmpl 112 138 0 10 4 0 4 4 0 8 0 dirhash 1024 39 0 22 3 0 3 3 0 8 0 dino2pl 256 5454 0 3938 96 0 96 96 0 8 0 ffsino 248 5454 0 3938 96 0 96 96 0 8 0 nchpl 144 8560 0 6865 64 0 64 64 0 8 0 rtmask 32 9 0 9 3 2 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 31964 0 31963 5 3 2 2 0 8 1 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 158 0 134 2 0 2 2 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 10 0 10 4 3 1 1 0 8 1 scxspl 216 25156 0 25156 14 11 3 8 1 8 3 plimitpl 152 604 0 587 1 0 1 1 0 8 0 sigapl 424 2473 0 2427 9 1 8 8 0 8 1 futexpl 64 32044 0 32044 1 0 1 1 0 8 1 knotepl 120 80767 0 80720 43 32 11 18 0 8 7 kqueuepl 184 813 0 802 7 3 4 4 0 8 3 pipepl 296 326 0 299 3 0 3 3 0 8 0 fdescpl 440 2429 0 2401 5 1 4 5 0 8 0 filepl 120 18742 0 18526 21 8 13 13 0 8 3 lockfpl 104 943 0 941 3 1 2 2 0 8 1 lockfspl 48 328 0 326 1 0 1 1 0 8 0 sessionpl 144 32 0 24 1 0 1 1 0 8 0 pgrppl 48 72 0 56 1 0 1 1 0 8 0 ucredpl 104 2805 0 2794 1 0 1 1 0 8 0 zombiepl 144 2678 0 2674 2 1 1 1 0 8 0 processpl 1112 2473 0 2427 5 0 5 5 0 8 0 procpl 656 5398 0 5351 10 2 8 8 0 8 1 sosppl 168 14 0 14 3 2 1 1 0 8 1 sockpl 528 5234 0 5207 37 28 9 16 0 8 6 mcl64k 65536 59 0 59 2 1 1 1 0 8 1 mcl16k 16384 1 0 1 1 1 0 1 0 8 0 mcl12k 12288 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 56 0 56 4 3 1 1 0 8 1 mcl4k 4096 5053 0 4999 15 7 8 13 0 8 0 mcl2k 2048 2271 0 2267 5 2 3 3 0 8 2 mtagpl 96 309 0 222 7 0 7 7 0 8 0 mbufpl 256 27779 0 27536 109 76 33 84 0 8 8 bufpl 280 6220 0 132 435 0 435 435 0 8 0 anonpl 24 301920 0 298769 92 47 45 45 0 187 15 amapchunkpl 152 83438 0 83009 72 39 33 35 0 158 14 amappl16 200 5189 0 5158 36 24 12 15 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 124 0 114 1 0 1 1 0 8 0 amappl13 176 8 0 8 2 1 1 1 0 8 1 amappl12 168 3166 0 3138 3 1 2 3 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 242 0 242 1 1 0 1 0 8 0 amappl8 136 27 0 25 1 0 1 1 0 8 0 amappl7 128 123 0 113 1 0 1 1 0 8 0 amappl6 120 249 0 245 1 0 1 1 0 8 0 amappl5 112 160 0 153 1 0 1 1 0 8 0 amappl4 104 321 0 304 1 0 1 1 0 8 0 amappl3 96 14249 0 14150 7 3 4 4 0 8 0 amappl2 88 743 0 686 2 0 2 2 0 8 0 amappl1 80 16735 0 16197 14 2 12 14 0 8 0 amappl 88 19516 0 19369 8 3 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 140 0 10 3 0 3 3 0 8 0 uaddrrnd 24 2429 0 2401 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2429 0 2401 1 0 1 1 0 8 0 vmmpekpl 168 17640 0 17582 3 0 3 3 0 8 0 vmmpepl 168 151635 0 149857 109 15 94 94 0 357 10 vmsppl 360 2428 0 2401 4 1 3 4 0 8 0 rwobjpl 32 42034 0 35153 59 1 58 58 0 8 1 pdppl 4096 4865 0 4802 137 70 67 83 0 8 4 pvpl 32 987559 0 979037 185 70 115 115 0 265 28 pmappl 216 2428 0 2401 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 431 0 179 9 0 9 9 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003c94f9d0,ffff800035d1d070,ffff800035d1cfc0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff800035d1d070) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800035d1d070) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2fee77db6b0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:727 [inline] ktrops(ffff80003c94f9d0,ffffffffffffffff,0,c0000d06,fffffd8063c0c018,fffffd807f7d7888) at ktrops+0x58 sys/kern/kern_ktrace.c:570 doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd ktrsetchildren sys/kern/kern_ktrace.c:595 [inline] doktrace(fffffd8063c0c018,4,40000d06,0,ffff80003c94f9d0) at doktrace+0x6dd sys/kern/kern_ktrace.c:517 sys_ktrace(ffff80003c94f9d0,ffff800035d1d070,ffff800035d1cfc0) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:558 syscall(ffff800035d1d070) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800035d1d070) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2fee77db6b0, count: -5