¹GGRTðmü_¯|hP’(uvm_fault(0xfffff8806b834e78, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *237800 38625 0 0 0x4000000 0 syz-executor ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80002a77cd10,ffff80003a4e3630,ffff80003a4e3580) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e3630) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e3630) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47b190bba10, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff8806b834e78, 0xf, 0, 1) -> e ddb> show kasan No such command ddb> trace ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80002a77cd10,ffff80003a4e3630,ffff80003a4e3580) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e3630) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e3630) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47b190bba10, count: -5 ddb> show registers rdi 0xffff80002e0a6000 rsi 0x7e2 rbp 0xffff80003a4e3350 rbx 0xfffff88007ffd7b8 rdx 0xffff80002e0a6000 rcx 0x7e1 rax 0xffffffff82fbc813 ktrops+0x43 r8 0xfffff8807ec43708 r9 0xfffff88007ffd7b8 r10 0xd4b372cca6225e88 r11 0x10af29544089f585 r12 0xffff80002a77cd10 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0xe0c7d78f rip 0xffffffff82fbc828 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003a4e32d0 ss 0x10 ktrops+0x58: movq 0x10(%r14),%r14 ddb> show proc PROC (syz-executor) tid=237800 pid=38625 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a77d770,0xffffffff83a59fc8 process=0xffff800045ff9698 user=0xffff80003a4de000, vmspace=0xfffff8806b834e78 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 38625 369281 45732 0 2 0 0 syz-executor *38625 237800 45732 0 7 0 0x4000000 syz-executor 93256 41827 10312 0 2 0 0 syz-executor 93256 384320 10312 0 3 0 0x4000080 fsleep syz-executor 8867 30295 23974 0 2 0x10 0 syz-executor 8867 355958 23974 0 3 0x10 0x4000080 fsleep syz-executor 88775 430047 66021 0 2 0 0 syz-executor 88775 335887 66021 0 3 0 0x4000000 smrbar syz-executor 37199 134282 0 0 3 0x14000 0x280 nfsidl nfsio 10464 12302 0 0 3 0x14000 0x280 nfsidl nfsio 17249 381712 0 0 3 0x14000 0x280 nfsidl nfsio 88529 26282 0 0 3 0x14000 0x280 nfsidl nfsio 53506 431751 0 0 3 0x14000 0x280 nfsidl nfsio 32023 74355 0 0 3 0x14000 0x280 nfsidl nfsio 16518 368612 0 0 3 0x14000 0x280 nfsidl nfsio 13964 347507 0 0 3 0x14000 0x280 nfsidl nfsio 197 403246 0 0 3 0x14000 0x280 nfsidl nfsio 72961 403753 0 0 3 0x14000 0x280 nfsidl nfsio 96181 124286 0 0 3 0x14000 0x280 nfsidl nfsio 10821 69858 0 0 3 0x14000 0x280 nfsidl nfsio 83601 523314 0 0 3 0x14000 0x280 nfsidl nfsio 98561 323357 0 0 3 0x14000 0x280 nfsidl nfsio 1791 189017 0 0 3 0x14000 0x280 nfsidl nfsio 8545 299526 0 0 3 0x14000 0x280 nfsidl nfsio 82830 449616 0 0 3 0x14000 0x280 nfsidl nfsio 27352 229351 0 0 3 0x14000 0x280 nfsidl nfsio 64681 512152 0 0 3 0x14000 0x280 nfsidl nfsio 28641 181609 0 0 3 0x14000 0x280 nfsidl nfsio 6227 194522 26442 0 2 0 0 syz-executor 6227 440663 26442 0 3 0 0x4000080 fsleep syz-executor 6227 100735 26442 0 3 0 0x4000080 fsleep syz-executor 35870 406404 1 0 3 0x2 0x80 nanoslp getty 66021 298661 96081 0 2 0x2 0xc80 syz-executor 99395 126110 96081 0 2 0x2 0 syz-executor 23974 329505 96081 0 3 0x2 0x80 nanoslp syz-executor 26442 347709 96081 0 2 0x2 0xc80 syz-executor 45732 3458 96081 0 2 0x2 0xc80 syz-executor 10312 161876 96081 0 2 0x2 0xc80 syz-executor 43003 224800 96081 0 2 0x2 0 syz-executor 50815 18872 96081 0 2 0x2 0 syz-executor 96081 185944 1 0 2 0x2 0 syz-executor 13271 278316 0 0 3 0x14000 0x200 bored smr 74281 35230 0 0 2 0x14000 0x200 zerothread 50992 140738 0 0 3 0x14000 0x200 aiodoned aiodoned 4200 450182 0 0 3 0x14000 0x200 syncer update 42964 91409 0 0 3 0x14000 0x200 cleaner cleaner 72833 283206 0 0 3 0x14000 0x200 reaper reaper 79896 188462 0 0 3 0x14000 0x200 pgdaemon pagedaemon 78995 231814 0 0 3 0x14000 0x200 bored viomb 46511 399025 0 0 3 0x14000 0x40000200 acpi0 acpi0 54029 412990 0 0 2 0x14000 0x200 softnet0 54829 12839 0 0 3 0x14000 0x200 bored systqmp 56969 11551 0 0 3 0x14000 0x200 bored systq 63616 520426 0 0 3 0x14000 0x40000200 tmoslp softclock 31649 396350 0 0 3 0x14000 0x40000200 idle0 1 502384 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11029 12101K 12327K 166960K 12441 0 pcb 19 12K 12K 166960K 35 0 rtable 247 7K 7K 166960K 375 0 pf 32 13K 13K 166960K 34 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 54 2K 2K 166960K 56 0 sysctl 1 1K 9K 166960K 5 0 counters 34 17K 17K 166960K 35 0 ioctlops 0 0K 2K 166960K 65 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1355 85K 86K 166960K 1454 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 14 53K 81K 166960K 181 0 proc 21 33K 100K 166960K 519 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 6 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 373 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 112 81K 158K 166960K 3366 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 17 34K 89K 166960K 1295 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 4 0 NDP 12 0K 2K 166960K 29 0 temp 34 9110K 9118K 166960K 4994 0 kqueue 1 2K 22K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 39 0 39 1 0 1 1 0 8 1 rtentry 136 113 0 1 4 0 4 4 0 8 0 unpcb 144 145 0 141 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 23 0 22 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 95 0 91 2 0 2 2 0 8 1 nd6 112 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 473 0 0 30 0 30 30 0 8 0 art_table 40 475 0 0 5 0 5 5 0 8 0 art_node 32 113 0 11 1 0 1 1 0 8 0 semapl 72 4 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1641 0 180 92 0 92 92 0 8 0 ffsino 256 1641 0 180 92 0 92 92 0 8 0 nchpl 144 1899 0 205 64 0 64 64 0 8 0 vnodes 216 1808 0 0 101 0 101 101 0 8 0 namei 1024 6122 0 6121 2 0 2 2 0 8 1 kstatmem 264 27 0 2 2 0 2 2 0 8 0 scxspl 216 6484 0 6484 3 0 3 3 1 8 3 plimitpl 152 40 0 30 1 0 1 1 0 8 0 sigapl 424 500 0 450 6 0 6 6 0 8 0 knotepl 120 4546 0 4529 9 0 9 9 0 8 7 kqueuepl 184 32 0 31 1 0 1 1 0 8 0 pipepl 304 130 0 102 3 0 3 3 0 8 0 fdescpl 448 467 0 450 4 0 4 4 0 8 1 filepl 120 2213 0 2051 9 0 9 9 0 8 1 lockfpl 104 33 0 32 1 0 1 1 0 8 0 lockfspl 48 15 0 14 1 0 1 1 0 8 0 sessionpl 144 23 0 21 1 0 1 1 0 8 0 pgrppl 48 31 0 21 1 0 1 1 0 8 0 ucredpl 104 141 0 137 1 0 1 1 0 8 0 zombiepl 144 450 0 450 1 0 1 1 0 8 1 processpl 1152 500 0 450 4 0 4 4 0 8 0 procpl 664 577 0 521 6 0 6 6 0 8 0 sockpl 552 281 0 273 3 0 3 3 0 8 1 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 6 0 6 1 0 1 1 0 8 1 mcl4k 4096 2540 0 2483 15 0 15 15 0 8 7 mcl2k 2048 142 0 139 1 0 1 1 0 8 0 mextrefs 64 54 0 52 1 0 1 1 0 8 0 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4636 0 4483 14 0 14 14 0 8 4 bufpl 272 2426 0 102 155 0 155 155 0 8 0 anonpl 24 86085 0 84669 44 0 44 44 0 187 26 amapchunkpl 152 9505 0 9222 22 0 22 22 0 158 6 amappl16 200 1227 0 1212 14 5 9 14 0 8 7 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 417 0 417 1 0 1 1 0 8 1 amappl13 176 161 0 160 1 0 1 1 0 8 0 amappl12 168 703 0 687 2 0 2 2 0 8 0 amappl11 160 14 0 14 1 0 1 1 0 8 1 amappl10 152 71 0 71 1 0 1 1 0 8 1 amappl9 144 270 0 270 1 0 1 1 0 8 1 amappl8 136 97 0 97 1 0 1 1 0 8 1 amappl7 128 144 0 142 1 0 1 1 0 8 0 amappl6 120 147 0 147 1 0 1 1 0 8 1 amappl5 112 95 0 94 1 0 1 1 0 8 0 amappl4 104 279 0 276 1 0 1 1 0 8 0 amappl3 96 1692 0 1630 3 0 3 3 0 8 0 amappl2 88 531 0 523 2 0 2 2 0 8 0 amappl1 80 10359 0 10247 13 0 13 13 0 8 8 amappl 88 2660 0 2563 4 0 4 4 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 467 0 450 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 467 0 450 1 0 1 1 0 8 0 vmmpekpl 168 5769 0 5736 2 0 2 2 0 8 0 vmmpepl 168 38772 0 38049 88 0 88 88 0 357 49 vmsppl 368 466 0 450 4 0 4 4 0 8 1 rwobjpl 40 14091 0 13712 13 0 13 13 0 8 1 pdppl 4096 940 0 900 88 42 46 74 0 8 6 pvpl 32 223185 0 219198 101 0 101 101 0 265 57 pmappl 216 466 0 450 2 0 2 2 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 509 0 42 14 0 14 14 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80002a77cd10,ffff80003a4e3630,ffff80003a4e3580) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e3630) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e3630) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47b190bba10, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 ktrcanset sys/kern/kern_ktrace.c:728 [inline] ktrops(ffff80002a77cd10,ffffffffffffffff,0,e0c7d78f,fffff8807ec43708,fffff88007ffd7b8) at ktrops+0x58 sys/kern/kern_ktrace.c:571 doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd ktrsetchildren sys/kern/kern_ktrace.c:596 [inline] doktrace(fffff8807ec43708,4,60c7d78f,0,ffff80002a77cd10) at doktrace+0x6bd sys/kern/kern_ktrace.c:518 sys_ktrace(ffff80002a77cd10,ffff80003a4e3630,ffff80003a4e3580) at sys_ktrace+0x11c sys/kern/kern_ktrace.c:559 syscall(ffff80003a4e3630) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a4e3630) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x47b190bba10, count: -5 ddb>