login: uvm_fault(0xffffffff83ab6968, 0xffff800029a22004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 26430 37607 0 0x10 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffffd806de23050,ffff80002a7bbb80,ffff80002a7bbbb0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80002a7bbb50) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80002a7bbb50) at namei+0x7c3 sys/kern/vfs_lookup.c:250 dosymlinkat(ffff80002a7734e0,200000000200,ffffff9c,200000000000) at dosymlinkat+0xef sys/kern/vfs_syscalls.c:1746 syscall(ffff80002a7bbd20) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7bbd20) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1c2911da400, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83ab6968, 0xffff800029a22004, 0, 1) -> d ddb> trace ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffffd806de23050,ffff80002a7bbb80,ffff80002a7bbbb0) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80002a7bbb50) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80002a7bbb50) at namei+0x7c3 sys/kern/vfs_lookup.c:250 dosymlinkat(ffff80002a7734e0,200000000200,ffffff9c,200000000000) at dosymlinkat+0xef sys/kern/vfs_syscalls.c:1746 syscall(ffff80002a7bbd20) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a7bbd20) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1c2911da400, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a7bb8e0 rbx 0 rdx 0xffff8000015ec3c0 rcx 0xffffffff rax 0xffff80002a7734e0 r8 0xffffffffffffffff r9 0xfffffd8007ffd2d8 r10 0x2951ec25984020e2 r11 0x8ca2df10544c933f r12 0xfffffd806ea55450 r13 0 r14 0 r15 0xffff800029a22000 rip 0xffffffff820623f3 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a7bb7f0 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=26430 pid=37607 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a772020,0xffff80002a773cb8 process=0xffff8000ffffba98 user=0xffff80002a7b6000, vmspace=0xfffffd806f58c5c8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb>