˜2'¢uvm_fault(0xffffffff839dba20, 0xffff80001c9c2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x623: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 463575 41307 0 0x10 0 0 syz-executor * 49933 41307 0 0x10 0x4000000 1K syz-executor ufs_lookup() at ufs_lookup+0x623 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffffd805e67cde0,ffff80003939d628,ffff80003939d658) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003939d5f8) at vfs_lookup+0x963 sys/kern/vfs_lookup.c:580 namei(ffff80003939d5f8) at namei+0x7c5 sys/kern/vfs_lookup.c:250 domknodat(ffff80002a222fa0,ffffff9c,200000000000,2000,6381) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1617 syscall(ffff80003939d7f0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003939d7f0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2beafb85520, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff839dba20, 0xffff80001c9c2004, 0, 1) -> d ddb{1}> trace ufs_lookup() at ufs_lookup+0x623 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffffd805e67cde0,ffff80003939d628,ffff80003939d658) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80003939d5f8) at vfs_lookup+0x963 sys/kern/vfs_lookup.c:580 namei(ffff80003939d5f8) at namei+0x7c5 sys/kern/vfs_lookup.c:250 domknodat(ffff80002a222fa0,ffffff9c,200000000000,2000,6381) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1617 syscall(ffff80003939d7f0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003939d7f0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2beafb85520, count: -7 ddb{1}> show registers rdi 0 rsi 0x2 rbp 0xffff80003939d390 rbx 0 rdx 0 rcx 0xffff80002a222fa0 rax 0xffff80002999dff0 r8 0xffffffffffffffff r9 0xfffffd80097fd340 r10 0xe47b57b528c5e427 r11 0xdf7f0e84421c90c6 r12 0xfffffd805d8d0c30 r13 0 r14 0 r15 0xffff80001c9c2000 rip 0xffffffff8286c5e3 ufs_lookup+0x623 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003939d2a0 ss 0x10 ufs_lookup+0x623: movzwl 0x4(%r15,%r14,1),%ebx ddb{1}>