uvm_fault(0xffffffff83a5ce70, 0xffff800029ee5000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at pvclock_get+0x53: movl 0(%r15),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND *103542 93397 0 0 0x4000000 0 syz-executor pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline] pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333 nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline] nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline] nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257 clockintr_dispatch(ffff80003a4cef30) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180 lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf sys/dev/kcov.c:153 uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 uvm_objtree_RBT_FIND sys/uvm/uvm_object.h:93 [inline] uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 sys/uvm/uvm_page.c:1214 buf_free_pages(fffffd806f6f6d58) at buf_free_pages+0xec sys/kern/vfs_biomem.c:-1 buf_dealloc_mem(fffffd806f6f6d58) at buf_dealloc_mem+0x14e sys/kern/vfs_biomem.c:179 buf_put(fffffd806f6f6d58) at buf_put+0x1d9 sys/kern/vfs_bio.c:123 brelse(fffffd806f6f6d58) at brelse+0x397 sys/kern/vfs_bio.c:932 writedisklabel(d02,ffffffff831a1c80,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158 sdioctl(d01,84946467,ffff800001609800,3,ffff80003c8fa550) at sdioctl+0x959 sys/scsi/sd.c:919 VOP_IOCTL(fffffd806b151208,84946467,ffff800001609800,3,fffffd8007ffd888,ffff80003c8fa550) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264 end trace frame: 0xffff80003a4cf4e0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a5ce70, 0xffff800029ee5000, 0, 1) -> e ddb> trace pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 pvclock_read_begin sys/dev/pv/pvclock.c:278 [inline] pvclock_get(ffffffff838abfd0) at pvclock_get+0x53 sys/dev/pv/pvclock.c:333 nsecuptime() at nsecuptime+0x62 tc_delta sys/kern/kern_tc.c:138 [inline] nsecuptime() at nsecuptime+0x62 binuptime sys/kern/kern_tc.c:191 [inline] nsecuptime() at nsecuptime+0x62 sys/kern/kern_tc.c:257 clockintr_dispatch(ffff80003a4cef30) at clockintr_dispatch+0xe8 sys/kern/kern_clockintr.c:180 lapic_clockintr(0,0) at lapic_clockintr+0x43 sys/arch/amd64/amd64/lapic.c:482 Xresume_lapic_ltimer() at Xresume_lapic_ltimer+0x2a __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf sys/dev/kcov.c:153 uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 uvm_objtree_RBT_FIND sys/uvm/uvm_object.h:93 [inline] uvm_pagelookup(fffffd806f6f6e18,436000) at uvm_pagelookup+0x51 sys/uvm/uvm_page.c:1214 buf_free_pages(fffffd806f6f6d58) at buf_free_pages+0xec sys/kern/vfs_biomem.c:-1 buf_dealloc_mem(fffffd806f6f6d58) at buf_dealloc_mem+0x14e sys/kern/vfs_biomem.c:179 buf_put(fffffd806f6f6d58) at buf_put+0x1d9 sys/kern/vfs_bio.c:123 brelse(fffffd806f6f6d58) at brelse+0x397 sys/kern/vfs_bio.c:932 writedisklabel(d02,ffffffff831a1c80,ffff800000039000) at writedisklabel+0x1b8 sys/arch/amd64/amd64/disksubr.c:158 sdioctl(d01,84946467,ffff800001609800,3,ffff80003c8fa550) at sdioctl+0x959 sys/scsi/sd.c:919 VOP_IOCTL(fffffd806b151208,84946467,ffff800001609800,3,fffffd8007ffd888,ffff80003c8fa550) at VOP_IOCTL+0xa3 sys/kern/vfs_vops.c:264 vn_ioctl(fffffd807abf97f8,84946467,ffff800001609800,ffff80003c8fa550) at vn_ioctl+0xea sys/kern/vfs_vnops.c:537 sys_ioctl(ffff80003c8fa550,ffff80003a4cf6c0,ffff80003a4cf610) at sys_ioctl+0x660 sys/kern/sys_generic.c:-1 syscall(ffff80003a4cf6c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4cf6c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x837091d560, count: -18 ddb> show registers rdi 0xffffffff rsi 0xd rbp 0xffff80003a4cee20 rbx 0x3 rdx 0xffff8000015e7100 rcx 0 rax 0xc r8 0 r9 0 r10 0 r11 0x23ebe02d2002fcc9 r12 0x10e5 __ALIGN_SIZE+0xe5 r13 0xffffffff838b8b70 th0 r14 0xffffffff838abfd0 pvclock_timecounter r15 0xffff800029ee5000 rip 0xffffffff81372d13 pvclock_get+0x53 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003a4cedd0 ss 0x10 pvclock_get+0x53: movl 0(%r15),%r12d ddb> show proc PROC (syz-executor) tid=103542 pid=93397 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8faa80,0xffffffff83a18de8 process=0xffff8000ffffa418 user=0xffff80003a4ca000, vmspace=0xfffffd806cad4010 estcpu=31, cpticks=247, pctcpu=2.47, user=0, sys=247, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 93397 267001 50935 0 2 0 syz-executor *93397 103542 50935 0 7 0x4000000 syz-executor 60850 55178 46518 0 2 0 syz-executor 60850 288256 46518 0 2 0x4000c80 syz-executor 4144 255030 86910 0 2 0 syz-executor 4144 489818 86910 0 2 0x4000000 syz-executor 31684 116964 66348 0 2 0 syz-executor 31684 482224 66348 0 2 0x4000000 syz-executor 23382 381614 88286 0 2 0 syz-executor 23382 195471 88286 0 2 0x4000000 syz-executor 15202 523888 77595 0 2 0xc80 syz-executor 15202 353762 77595 0 3 0x4000080 lockf syz-executor 15202 385360 77595 0 3 0x4000080 fsleep syz-executor 77595 335140 33406 0 2 0xc82 syz-executor 90680 271052 1 0 3 0x80 nanoslp init 50935 381615 33406 0 2 0xc82 syz-executor 64340 158674 33406 0 3 0x82 piperd syz-executor 86910 161591 33406 0 2 0xc82 syz-executor 66348 453315 33406 0 2 0xc82 syz-executor 46518 441111 33406 0 2 0xc82 syz-executor 22534 372473 33406 0 3 0x82 piperd syz-executor 88286 98201 33406 0 2 0xc82 syz-executor 33406 84972 1 0 2 0x2 syz-executor 55537 77140 0 0 2 0x14200 smr 24959 428178 0 0 2 0x14200 zerothread 13936 121111 0 0 3 0x14200 aiodoned aiodoned 98459 410104 0 0 2 0x14e00 update 1576 345796 0 0 3 0x14200 cleaner cleaner 91346 463094 0 0 3 0x14200 reaper reaper 83899 272101 0 0 3 0x14200 pgdaemon pagedaemon 29536 344221 0 0 3 0x14200 bored viomb 19965 483481 0 0 3 0x40014200 acpi0 acpi0 67750 403223 0 0 3 0x14200 bored softnet0 99384 95843 0 0 3 0x14200 smrbar systqmp 13274 481434 0 0 3 0x14200 bored systq 59427 487009 0 0 2 0x40014200 softclock 31836 88996 0 0 3 0x40014200 idle0 1 296875 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb>