uvm_fault(0xfffffd8067539b98, 0x1ce0, 0, 2) -> e kernel: page fault trap, code=2 Stopped at copyout+0x57: repe movsq (%rsi),%es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND * 73704 5775 0 0 0x4000000 0 syz-executor copyout() at copyout+0x57 syscall(ffff800038952f90) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800038952f90) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x353cbc33da0, count: 12 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd8067539b98, 0x1ce0, 0, 2) -> e ddb> trace copyout() at copyout+0x57 syscall(ffff800038952f90) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800038952f90) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x353cbc33da0, count: -3 ddb> show registers rdi 0x1ce0 __ALIGN_SIZE+0xce0 rsi 0xffff800038952d00 rbp 0xffff800038952ec0 rbx 0xa916 __ALIGN_SIZE+0x9916 rdx 0xffff80003894e000 rcx 0x4 rax 0x20 r8 0x7f7fffffc000 r9 0x1 r10 0x1e7ed9bd0eceb475 r11 0xffffffff81a01e80 copy_fault r12 0 r13 0x16 r14 0xffff800038952d00 r15 0xffff800038952f90 rip 0xffffffff81a01da7 copyout+0x57 cs 0x8 rflags 0x50202 acpi_pdirpa+0x3c073 rsp 0xffff800038952c10 ss 0x10 copyout+0x57: repe movsq (%rsi),%es:(%rdi) ddb> show proc PROC (syz-executor) tid=73704 pid=5775 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c980d20,0xffff80003c981cc0 process=0xffff80003c985260 user=0xffff80003894e000, vmspace=0xfffffd8067539b98 estcpu=31, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 5775 459252 76053 0 2 0 syz-executor * 5775 73704 76053 0 7 0x4000000 syz-executor 5775 376146 76053 0 3 0x4000080 fsleep syz-executor 80372 74081 98939 0 2 0 syz-executor 80372 322272 98939 0 2 0x4000000 syz-executor 51469 469779 60340 0 3 0x80 nanoslp syz-executor 51469 391449 60340 0 3 0x4000080 kqread syz-executor 51469 252892 60340 0 3 0x4000080 fsleep syz-executor 7967 156902 72222 0 2 0xc80 syz-executor 7967 70592 72222 0 3 0x4000080 kqsel syz-executor 7967 372442 72222 0 3 0x4000080 fsleep syz-executor 78016 295778 63484 0 2 0xc80 syz-executor 78016 439178 63484 0 3 0x4000080 tunread syz-executor 78016 157769 63484 0 3 0x4000000 inode syz-executor 78016 312271 63484 0 3 0x4000080 fsleep syz-executor 97424 49230 0 0 3 0x14200 bored sosplice 63484 266239 2132 0 3 0x82 nanoslp syz-executor 92048 319918 2132 0 2 0xc82 syz-executor 76053 19980 2132 0 3 0x82 nanoslp syz-executor 72222 89178 2132 0 2 0xc82 syz-executor 98939 146930 2132 0 2 0xc82 syz-executor 59432 173649 2132 0 2 0x2 syz-executor 60340 453239 2132 0 2 0xc82 syz-executor 68780 507128 2132 0 2 0x2 syz-executor 2132 51105 42472 0 3 0x82 kqread syz-executor 42472 276137 80651 0 3 0x10008a sigsusp ksh 80651 341130 80167 0 3 0x98 kqread sshd-session 80167 66010 54791 0 3 0x92 kqread sshd-session 36099 209563 1 0 3 0x100083 ttyin getty 54791 295922 1 0 3 0x88 kqread sshd 53032 273714 96483 73 3 0x1100090 kqread syslogd 96483 379425 1 0 3 0x100082 sbwait syslogd 22759 509977 1 0 3 0x100080 kqread resolvd 76992 87274 86193 77 3 0x100092 kqread dhcpleased 39566 200281 86193 77 3 0x100092 kqread dhcpleased 86193 296443 1 0 3 0x80 kqread dhcpleased 67281 144564 0 0 3 0x14200 bored smr 17151 395385 0 0 2 0x14200 zerothread 83519 166184 0 0 3 0x14200 aiodoned aiodoned 35378 65694 0 0 3 0x14200 syncer update 60198 482867 0 0 3 0x14200 cleaner cleaner 69250 297482 0 0 3 0x14200 reaper reaper 38764 234373 0 0 3 0x14200 pgdaemon pagedaemon 96698 265049 0 0 3 0x14200 bored viomb 96584 444437 0 0 3 0x40014200 acpi0 acpi0 39826 385160 0 0 3 0x14200 bored softnet7 99466 311228 0 0 3 0x14200 bored softnet6 4116 345890 0 0 3 0x14200 bored softnet5 18936 499934 0 0 3 0x14200 bored softnet4 90691 325592 0 0 3 0x14200 bored softnet3 18863 428739 0 0 3 0x14200 bored softnet2 9515 482731 0 0 3 0x14200 bored softnet1 19268 363918 0 0 3 0x14200 bored softnet0 53994 173016 0 0 3 0x14200 bored systqmp 84286 328802 0 0 3 0x14200 bored systq 42870 151531 0 0 2 0x40014200 softclock 53951 473826 0 0 3 0x40014200 idle0 1 469978 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10466 12366K 12366K 166960K 12047 0 pcb 19 16K 18K 166960K 99 0 rtable 187 6K 8K 166960K 312 0 pf 32 13K 16K 166960K 57 0 ifaddr 38 6K 7K 166960K 54 0 ifgroup 50 2K 2K 166960K 74 0 sysctl 3 1K 9K 166960K 8 0 counters 32 17K 18K 166960K 42 0 ioctlops 0 0K 4K 166960K 65 0 iov 0 0K 24K 166960K 22 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1402 88K 88K 166960K 1745 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 14 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 407 0 sigio 0 0K 0K 166960K 8 0 proc 60 59K 108K 166960K 508 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 45 0 in_multi 85 6K 7K 166960K 111 0 ether_multi 1 0K 0K 166960K 5 0 mrt 1 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 371 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 230 143K 152K 166960K 5136 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 38 76K 94K 166960K 1439 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 13 0 NDP 11 0K 1K 166960K 35 0 temp 43 8636K 8710K 166960K 14487 0 kqueue 14 22K 28K 166960K 62 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 125 0 122 1 0 1 1 0 8 0 rtentry 136 102 0 24 4 0 4 4 0 8 0 unpcb 144 367 0 350 6 0 6 6 0 8 5 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 138 0 133 4 0 4 4 0 8 3 arp 88 12 0 1 1 0 1 1 0 8 0 inpcb 328 658 0 647 18 0 18 18 0 8 16 ip6q 72 19 0 17 1 0 1 1 0 8 0 ip6af 40 36 0 34 1 0 1 1 0 8 0 nd6 104 20 0 4 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 7 0 7 1 0 1 1 0 8 1 pfosfp 40 1 0 1 1 0 1 1 0 8 1 pfosfpen 112 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 0 1 0 1 1 0 8 0 pfstate 384 2 0 0 1 0 1 1 0 8 0 pfrule 1344 1 0 1 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 489 0 131 29 0 29 29 0 8 4 art_table 40 491 0 131 5 0 5 5 0 8 0 art_node 32 102 0 33 1 0 1 1 0 8 0 sysvmsgpl 40 13 0 10 1 0 1 1 0 8 0 semapl 112 12 0 2 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2140 0 641 95 0 95 95 0 8 0 ffsino 256 2140 0 641 95 0 95 95 0 8 0 nchpl 144 2734 0 1051 63 0 63 63 0 8 0 uvmvnodes 80 2451 0 0 51 0 51 51 0 8 0 vnodes 216 2451 0 0 137 0 137 137 0 8 0 namei 1024 8617 0 8617 2 0 2 2 0 8 2 kstatmem 264 38 0 16 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 9571 0 9571 8 0 8 8 1 8 8 plimitpl 152 135 0 118 1 0 1 1 0 8 0 sigapl 424 692 0 642 7 0 7 7 0 8 1 knotepl 120 22802 0 22754 17 0 17 17 0 8 14 kqueuepl 184 94 0 80 1 0 1 1 0 8 0 pipepl 304 116 0 87 3 0 3 3 0 8 0 fdescpl 448 671 0 642 5 0 5 5 0 8 1 filepl 120 3809 0 3478 15 0 15 15 0 8 3 lockfpl 104 279 0 276 2 0 2 2 0 8 1 lockfspl 48 116 0 113 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 34 0 18 1 0 1 1 0 8 0 ucredpl 104 649 0 637 1 0 1 1 0 8 0 zombiepl 144 644 0 642 1 0 1 1 0 8 0 processpl 1168 692 0 642 5 0 5 5 0 8 1 procpl 664 1093 0 1033 6 0 6 6 0 8 0 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 552 1162 0 1129 21 4 17 17 0 8 13 mcl64k 65536 53 0 53 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 8 0 8 1 0 1 1 0 8 1 mcl4k 4096 2824 0 2776 15 1 14 15 0 8 8 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 599 0 594 4 0 4 4 0 8 2 mtagpl 96 11 0 7 1 0 1 1 0 8 0 mbufpl 256 8701 0 8552 14 0 14 14 0 8 0 bufpl 280 3844 0 117 267 0 267 267 0 8 0 anonpl 24 128210 0 124883 44 0 44 44 0 187 22 amapchunkpl 152 16450 0 15970 25 0 25 25 0 158 4 amappl16 200 2521 0 2482 15 4 11 15 0 8 8 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 104 0 94 1 0 1 1 0 8 0 amappl13 176 18 0 17 1 0 1 1 0 8 0 amappl12 168 1285 0 1256 3 0 3 3 0 8 1 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 9 0 9 1 0 1 1 0 8 1 amappl9 144 243 0 243 1 0 1 1 0 8 1 amappl8 136 36 0 35 1 0 1 1 0 8 0 amappl7 128 97 0 87 1 0 1 1 0 8 0 amappl6 120 173 0 170 1 0 1 1 0 8 0 amappl5 112 112 0 106 1 0 1 1 0 8 0 amappl4 104 263 0 248 1 0 1 1 0 8 0 amappl3 96 2897 0 2787 3 0 3 3 0 8 0 amappl2 88 617 0 561 2 0 2 2 0 8 0 amappl1 80 8929 0 8380 13 0 13 13 0 8 1 amappl 88 4454 0 4290 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 671 0 642 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 671 0 642 1 0 1 1 0 8 0 vmmpekpl 168 6459 0 6433 2 0 2 2 0 8 0 vmmpepl 168 47860 0 45998 92 0 92 92 0 357 8 vmsppl 368 670 0 642 4 0 4 4 0 8 1 rwobjpl 40 17605 0 14294 34 0 34 34 0 8 0 pdppl 4096 1349 0 1284 95 28 67 81 0 8 2 pvpl 32 316744 0 307930 113 0 113 113 0 265 33 pmappl 216 670 0 642 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 379 0 29 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace copyout() at copyout+0x57 syscall(ffff800038952f90) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800038952f90) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x353cbc33da0, count: -3 ddb> machine ddbcpu 1 No such command ddb> trace copyout() at copyout+0x57 syscall(ffff800038952f90) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800038952f90) at syscall+0x962 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x353cbc33da0, count: -3