uvm_fault(0xffffffff8353da28, 0xffff800016ad20b0, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ffs2_balloc+0x9fe: movq 0(%rcx,%rax,8),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *422621 83765 73 0x1100010 0x1 0K syslogd ffs2_balloc(fffffd8067497dd8,8a3a8,60,fffffd807f7d32d8,1,ffff80002a069c48) at ffs2_balloc+0x9fe sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a069cd0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807d1f26f0,ffff80002a069d88,3,fffffd807f7d32d8) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffffd960,fffffd807d1f26f0,fffffd807f7d32d8,ffff80002a069e50,ffff80002a069e30) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682 ktrsyscall(ffff8000ffffd960,79,18,ffff80002a069fe0) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182 syscall(ffff80002a069fe0) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline] syscall(ffff80002a069fe0) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72cd770effc0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xffffffff8353da28, 0xffff800016ad20b0, 0, 1) -> d ddb{0}> trace ffs2_balloc(fffffd8067497dd8,8a3a8,60,fffffd807f7d32d8,1,ffff80002a069c48) at ffs2_balloc+0x9fe sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a069cd0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807d1f26f0,ffff80002a069d88,3,fffffd807f7d32d8) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffffd960,fffffd807d1f26f0,fffffd807f7d32d8,ffff80002a069e50,ffff80002a069e30) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682 ktrsyscall(ffff8000ffffd960,79,18,ffff80002a069fe0) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182 syscall(ffff80002a069fe0) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline] syscall(ffff80002a069fe0) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72cd770effc0, count: -7 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a069bf0 rbx 0 rdx 0 rcx 0xffff800016ad2000 rax 0x16 r8 0xffffffffffffffff r9 0xffff80002a069c48 r10 0xf899ab66e5ea0fe7 r11 0xf5789499019722a2 r12 0x10 r13 0x1 r14 0xffffffff r15 0xfffffd806bd44120 rip 0xffffffff8224177e ffs2_balloc+0x9fe cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80002a069a80 ss 0x10 ffs2_balloc+0x9fe: movq 0(%rcx,%rax,8),%r14 ddb{0}> show proc PROC (syslogd) tid=422621 pid=83765 tcnt=1 stat=onproc flags process=1100010 proc=1 runpri=17, usrpri=54, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffd6d8,0xffff8000ffffccc8 process=0xffff8000ffff9230 user=0xffff80002a065000, vmspace=0xfffffd806ecfca58 estcpu=4, cpticks=4, pctcpu=0.20, user=7, sys=159, intr=2 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 67844 408190 54606 0 2 0 syz-executor 67844 280779 54606 0 3 0x4000080 netcon syz-executor 66732 478975 16220 0 2 0x2 ndp 20478 301656 22669 0 2 0x10 syz-executor 20478 514546 22669 0 3 0x4000090 fsleep syz-executor 16220 401751 81693 0 3 0x10008a sigsusp sh 74742 5981 60497 0 2 0 syz-executor 74742 471595 60497 0 2 0x4000000 syz-executor 74742 154937 60497 0 3 0x4000080 fsleep syz-executor 74742 85563 60497 0 3 0x4000080 fsleep syz-executor 44400 488051 62072 0 2 0x480 syz-executor 44400 381063 62072 0 3 0x4000080 ttyout syz-executor 44400 310229 62072 0 3 0x4000080 fsleep syz-executor 74356 386942 8172 0 3 0x82 piperd syz-executor 81693 133770 8172 0 3 0x82 wait syz-executor 52968 264859 8172 0 2 0x2 syz-executor 60497 476237 8172 0 2 0x482 syz-executor 13624 151057 8172 0 3 0x82 piperd syz-executor 54606 48693 8172 0 3 0x82 nanoslp syz-executor 22669 57482 8172 0 3 0x82 nanoslp syz-executor 62072 206547 8172 0 3 0x82 nanoslp syz-executor 47969 274651 1 0 3 0x100083 ttyin getty 74710 123185 0 0 3 0x14200 bored sosplice 8172 439174 65784 0 2 0x2 syz-executor 65784 460528 76133 0 3 0x10008a sigsusp ksh 76133 96099 82292 0 3 0x98 kqread sshd-session 82292 95249 76424 0 3 0x92 kqread sshd-session 76424 246468 1 0 3 0x88 kqread sshd 92494 438992 49978 74 3 0x1100092 bpf pflogd 49978 410583 1 0 3 0x80 sbwait pflogd *83765 422621 45142 73 7 0x1100011 syslogd 45142 36590 1 0 3 0x100082 sbwait syslogd 14499 43136 1 0 3 0x100080 kqread resolvd 35123 415107 64147 77 3 0x100092 kqread dhcpleased 6958 124089 64147 77 3 0x100092 kqread dhcpleased 64147 195597 1 0 3 0x80 kqread dhcpleased 52723 69482 0 0 3 0x14200 bored smr 58347 497661 0 0 2 0x14200 zerothread 90674 166069 0 0 3 0x14200 aiodoned aiodoned 50140 402411 0 0 3 0x14200 syncer update 37663 89049 0 0 3 0x14200 cleaner cleaner 94287 304950 0 0 3 0x14200 reaper reaper 35490 65139 0 0 3 0x14200 pgdaemon pagedaemon 86294 429706 0 0 3 0x14200 bored viomb 82787 351303 0 0 3 0x40014200 acpi0 acpi0 54808 159220 0 0 7 0x40014200 idle1 73681 523368 0 0 3 0x14200 bored softnet3 38686 517413 0 0 3 0x14200 bored softnet2 50375 12496 0 0 3 0x14200 bored softnet1 15783 321772 0 0 3 0x14200 bored softnet0 21438 155876 0 0 3 0x14200 bored systqmp 45867 101044 0 0 3 0x14200 bored systq 55884 485458 0 0 3 0x14200 tmoslp softclockmp 70653 222944 0 0 3 0x40014200 tmoslp softclock 58713 341545 0 0 3 0x40014200 idle0 1 469639 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 52968 (syz-executor) thread 0xffff80002a106ce8 (264859) Process 83765 (syslogd) thread 0xffff8000ffffd960 (422621) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10241 10241K 10564K 166960K 14226 0 pcb 17 16K 18K 166960K 609 0 rtable 218 8K 8K 166960K 2244 0 pf 38 18K 26K 166960K 303 0 ifaddr 42 8K 8K 166960K 303 0 ifgroup 59 2K 2K 166960K 357 0 sysctl 3 0K 0K 166960K 5 0 counters 66 36K 37K 166960K 226 0 ioctlops 0 0K 4K 166960K 1876 0 iov 0 0K 32K 166960K 205 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1505 95K 95K 166960K 3724 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 25 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 103 0 dirhash 12 2K 2K 166960K 39 0 ACPI 1690 195K 286K 166960K 12418 0 file desc 16 57K 93K 166960K 2682 0 sigio 0 0K 0K 166960K 61 0 proc 73 91K 140K 166960K 2264 0 subproc 104 6K 7K 166960K 819 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 553 0 in_multi 95 7K 7K 166960K 769 0 ether_multi 1 0K 0K 166960K 17 0 mrt 1 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 1490 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 73K 99K 166960K 23013 0 UVM aobj 58 6K 6K 166960K 64 0 pinsyscall 42 84K 104K 166960K 5207 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 136 0 NDP 15 0K 2K 166960K 224 0 temp 78 6824K 6929K 166960K 98840 0 kqueue 13 20K 31K 166960K 301 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 265 0 262 1 0 1 1 0 8 0 rtentry 112 762 0 665 4 0 4 4 0 8 0 unpcb 144 2425 0 2405 21 17 4 8 0 8 3 syncache 336 7 0 7 3 3 0 1 0 8 0 tcpqe 32 5 0 5 3 3 0 1 0 8 0 tcpcb 808 1136 0 1129 34 33 1 11 0 8 0 arp 120 135 0 116 1 0 1 1 0 8 0 inpcb 336 3606 0 3594 48 46 2 13 0 8 1 nd6 136 203 0 180 1 0 1 1 0 8 0 pkpcb 40 15 0 15 6 6 0 1 0 8 0 kcovpl 48 63 0 55 1 0 1 1 0 8 0 ppxss 1168 15 0 15 6 6 0 1 0 8 0 pfstscr 40 2 0 2 2 2 0 1 0 8 0 pffrag 232 17 0 14 1 0 1 1 0 482 0 pffrnode 88 17 0 14 1 0 1 1 0 8 0 pffrent 40 108 0 105 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 21 0 21 0 8 0 pfrktable 1344 16 0 16 3 3 0 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 15 0 15 3 3 0 1 0 8 0 pfstitem 24 245 0 216 1 0 1 1 0 8 0 pfstkey 128 251 0 222 4 0 4 4 0 8 0 pfstate 376 247 0 218 10 3 7 10 0 8 0 pfrule 1344 69 0 59 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 3082 0 2674 37 9 28 30 0 8 2 art_table 32 3084 0 2674 4 0 4 4 0 8 0 art_node 16 757 0 670 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 5 1 0 1 1 0 8 0 semapl 112 98 0 88 1 0 1 1 0 8 0 shmpl 112 61 0 6 2 0 2 2 0 8 0 dirhash 1024 35 0 18 3 0 3 3 0 8 0 dino2pl 256 4972 0 3360 101 0 101 101 0 8 0 ffsino 272 4972 0 3360 108 0 108 108 0 8 0 nchpl 144 7855 0 7184 66 40 26 63 0 8 0 uvmvnodes 80 6775 0 0 139 0 139 139 0 8 0 vnodes 216 6775 0 0 377 0 377 377 0 8 0 namei 1024 33658 0 33657 6 5 1 1 0 8 0 percpumem 16 127 0 80 1 0 1 1 0 8 0 kstatmem 264 186 0 160 4 2 2 3 0 8 0 scsiplug 72 6 0 6 4 4 0 1 0 8 0 scxspl 216 50771 0 50771 15 14 1 8 1 8 1 plimitpl 152 834 0 817 1 0 1 1 0 8 0 sigapl 424 2899 0 2850 10 3 7 9 0 8 1 futexpl 64 29061 0 29057 7 6 1 1 0 8 0 knotepl 120 631 0 0 17 0 17 17 0 8 0 kqueuepl 216 914 0 904 14 13 1 8 0 8 0 pipepl 320 672 0 645 16 13 3 8 0 8 0 fdescpl 496 2858 0 2828 9 4 5 5 0 8 0 filepl 152 20132 0 19879 44 31 13 20 0 8 3 lockfpl 104 1112 0 1110 3 2 1 2 0 8 0 lockfspl 48 321 0 319 1 0 1 1 0 8 0 sessionpl 144 83 0 74 1 0 1 1 0 8 0 pgrppl 48 239 0 222 1 0 1 1 0 8 0 ucredpl 104 3285 0 3271 1 0 1 1 0 8 0 zombiepl 144 2850 0 2850 1 0 1 1 0 8 1 processpl 1160 2899 0 2850 6 2 4 6 0 8 0 procpl 648 5597 0 5541 9 3 6 8 0 8 0 srpgc 96 4 0 4 2 2 0 1 0 8 0 sosppl 168 11 0 11 7 7 0 1 0 8 0 sockpl 664 6369 0 6335 75 67 8 20 0 8 5 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 258 0 0 30 0 30 30 0 8 0 mtagpl 96 39 0 0 1 0 1 1 0 8 0 mbufpl 256 1121 0 0 64 0 64 64 0 8 0 bufpl 280 10634 0 3534 508 0 508 508 0 8 0 anonpl 24 422051 0 414134 124 46 78 97 0 185 16 amapchunkpl 152 74754 0 74183 63 28 35 43 0 158 9 amappl16 200 8463 0 8292 76 54 22 28 0 8 8 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 294 0 282 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 1 0 1 0 8 0 amappl12 168 4382 0 4352 3 1 2 2 0 8 0 amappl11 160 56 0 41 1 0 1 1 0 8 0 amappl10 152 7 0 7 1 1 0 1 0 8 0 amappl9 144 143 0 143 1 1 0 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 220 0 207 1 0 1 1 0 8 0 amappl6 120 716 0 713 1 0 1 1 0 8 0 amappl5 112 370 0 358 1 0 1 1 0 8 0 amappl4 104 486 0 469 1 0 1 1 0 8 0 amappl3 96 15228 0 15130 4 0 4 4 0 8 0 amappl2 88 1474 0 1402 2 0 2 2 0 8 0 amappl1 80 19076 0 18481 14 1 13 14 0 8 0 amappl 88 22072 0 21906 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 63 0 6 2 0 2 2 0 8 0 uaddrrnd 24 2858 0 2828 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2858 0 2828 1 0 1 1 0 8 0 vmmpekpl 168 23236 0 23185 4 0 4 4 0 8 0 vmmpepl 168 182726 0 180790 135 35 100 104 0 357 8 vmsppl 440 2857 0 2828 6 2 4 5 0 8 0 rwobjpl 56 55293 0 47348 116 0 116 116 0 8 2 pdppl 4096 5723 0 5656 185 114 71 85 0 8 4 pvpl 32 36567 0 0 295 0 295 295 0 265 0 pmappl 248 2857 0 2828 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 635 0 219 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace ffs2_balloc(fffffd8067497dd8,8a3a8,60,fffffd807f7d32d8,1,ffff80002a069c48) at ffs2_balloc+0x9fe sys/ufs/ffs/ffs_balloc.c:614 ffs_write(ffff80002a069cd0) at ffs_write+0x4f9 sys/ufs/ffs/ffs_vnops.c:345 VOP_WRITE(fffffd807d1f26f0,ffff80002a069d88,3,fffffd807f7d32d8) at VOP_WRITE+0x102 sys/kern/vfs_vops.c:245 ktrwriteraw(ffff8000ffffd960,fffffd807d1f26f0,fffffd807f7d32d8,ffff80002a069e50,ffff80002a069e30) at ktrwriteraw+0x1bc sys/kern/kern_ktrace.c:682 ktrsyscall(ffff8000ffffd960,79,18,ffff80002a069fe0) at ktrsyscall+0x31d sys/kern/kern_ktrace.c:182 syscall(ffff80002a069fe0) at syscall+0x2eb mi_syscall sys/sys/syscall_mi.h:157 [inline] syscall(ffff80002a069fe0) at syscall+0x2eb sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72cd770effc0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu.c:1219 sched_idle(ffff800029b7bff0) at sched_idle+0x558 sys/kern/kern_sched.c:182 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu.c:1219 sched_idle(ffff800029b7bff0) at sched_idle+0x558 sys/kern/kern_sched.c:182 end trace frame: 0x0, count: -5