uvm_fault(0xffffffff839cfb50, 0xffff800029e92004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *217439 65753 0 0 0x4000000 0 syz-executor ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffff0806e62d498,ffff80002a77f038,ffff80002a77f068) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80002a77f008) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80002a77f008) at namei+0x7c3 sys/kern/vfs_lookup.c:250 domknodat(ffff80002a79efa8,ffffff9c,200000000280,1ffa,0) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1531 syscall(ffff80002a77f1f0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a77f1f0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22b6d8dd7a0, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839cfb50, 0xffff800029e92004, 0, 1) -> d ddb> show kasan No such command ddb> trace ufs_lookup() at ufs_lookup+0x613 sys/ufs/ufs/ufs_lookup.c:279 VOP_LOOKUP(fffff0806e62d498,ffff80002a77f038,ffff80002a77f068) at VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 vfs_lookup(ffff80002a77f008) at vfs_lookup+0x94a sys/kern/vfs_lookup.c:580 namei(ffff80002a77f008) at namei+0x7c3 sys/kern/vfs_lookup.c:250 domknodat(ffff80002a79efa8,ffffff9c,200000000280,1ffa,0) at domknodat+0xb4 sys/kern/vfs_syscalls.c:1531 syscall(ffff80002a77f1f0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a77f1f0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22b6d8dd7a0, count: -7 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a77eda0 rbx 0 rdx 0xffff8000015e5740 rcx 0xffffffff rax 0xffff80002a79efa8 r8 0xffffffffffffffff r9 0xfffff08007ffd750 r10 0xe852ff1e6e49a11b r11 0x7ee68a05fe548051 r12 0xfffff0806f7fbaa0 r13 0 r14 0 r15 0xffff800029e92000 rip 0xffffffff831e0403 ufs_lookup+0x613 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a77ecb0 ss 0x10 ufs_lookup+0x613: movzwl 0x4(%r15,%r14,1),%ebx ddb> show proc PROC (syz-executor) tid=217439 pid=65753 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a79ed10,0xffff80002a79ea88 process=0xffff800045ffa418 user=0xffff80002a77a000, vmspace=0xfffff0806d1bbb90 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 23988 215360 22008 0 3 0x3000 suspend syz-executor 23988 96250 22008 0 2 0x4081000 syz-executor 65753 84928 63951 0 3 0x80 fsleep syz-executor *65753 217439 63951 0 7 0x4000000 syz-executor 87120 432377 70068 0 3 0x80 fsleep syz-executor 87120 294696 70068 0 2 0x4000c80 syz-executor 35498 46717 87203 0 3 0x80 fsleep syz-executor 35498 496127 87203 0 3 0x4000080 bell syz-executor 13737 125302 2890 0 3 0x80 fsleep syz-executor 13737 342242 2890 0 3 0x4000080 sbwait syz-executor 233 149044 1 0 3 0x100083 ttyin getty 87203 147994 87291 0 2 0xc82 syz-executor 2890 89254 87291 0 2 0xc82 syz-executor 49004 357478 87291 0 3 0x82 wait syz-executor 63951 14569 87291 0 3 0x82 nanoslp syz-executor 70068 443961 87291 0 2 0xc82 syz-executor 22008 141388 87291 0 2 0xc82 syz-executor 87291 366207 1 0 3 0x82 wait syz-executor 20319 174642 0 0 3 0x14200 bored smr 10952 194805 0 0 2 0x14200 zerothread 95568 503054 0 0 3 0x14200 aiodoned aiodoned 5031 70614 0 0 3 0x14200 syncer update 85526 200874 0 0 3 0x14200 cleaner cleaner 89519 75468 0 0 3 0x14200 reaper reaper 40534 70502 0 0 3 0x14200 pgdaemon pagedaemon 19667 85526 0 0 3 0x14200 bored viomb 46689 170649 0 0 3 0x40014200 acpi0 acpi0 11094 298256 0 0 3 0x14200 bored softnet0 11699 459867 0 0 3 0x14200 smrbar systqmp 15721 417676 0 0 3 0x14200 bored systq 21206 448826 0 0 3 0x40014200 tmoslp softclock 61765 437085 0 0 3 0x40014200 idle0 1 322285 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11038 12136K 12244K 166960K 12651 0 pcb 17 12K 12K 166960K 89 0 rtable 303 8K 8K 166960K 496 0 pf 31 13K 15K 166960K 58 0 ifaddr 49 9K 9K 166960K 61 0 ifgroup 50 2K 2K 166960K 66 0 sysctl 1 1K 9K 166960K 6 0 counters 33 17K 17K 166960K 41 0 ioctlops 0 0K 4K 166960K 81 0 iov 1 4K 16K 166960K 27 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1780 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 18 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 50 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 57K 228K 166960K 688 0 sigio 0 0K 0K 166960K 2 0 proc 20 25K 124K 166960K 540 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 63 0 in_multi 99 7K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 69 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 376 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 20 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 123 82K 160K 166960K 7222 0 UVM aobj 54 2K 2K 166960K 54 0 pinsyscall 18 36K 96K 166960K 1789 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 8 0 NDP 11 0K 2K 166960K 35 0 temp 43 9108K 9172K 166960K 32037 0 kqueue 2 4K 24K 166960K 132 0 SYN cache 2 16K 16K 166960K 2 0 ddb>