uvm_fault(0xfffff4006d1a02f0, 0x6a72eed9, 0, 1) -> e kernel: page fault trap, code=0 Stopped at amap_lookups+0x1e0: movl 0x10(%r15),%r14d TID PID UID PRFLAGS PFLAGS CPU COMMAND * 86034 38241 0 0 0 0 syz-executor amap_lookups(fffff4006cf6a7f0,15000,ffff8000318b7090,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffff4006cf6a7f0,15000,ffff8000318b7090,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000318b7190,ffff8000318b71c8,ffff8000318b7200,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffff4006d1a02f0,354046d0000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000318b7330,354046d09b0) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000318b7330) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7838321213f0, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffff4006d1a02f0, 0x6a72eed9, 0, 1) -> e ddb> show kasan No such command ddb> trace amap_lookups(fffff4006cf6a7f0,15000,ffff8000318b7090,8) at amap_lookups+0x1e0 amap_chunk_get sys/uvm/uvm_amap.c:118 [inline] amap_lookups(fffff4006cf6a7f0,15000,ffff8000318b7090,8) at amap_lookups+0x1e0 sys/uvm/uvm_amap.c:1168 uvm_fault_check(ffff8000318b7190,ffff8000318b71c8,ffff8000318b7200,0) at uvm_fault_check+0x840 sys/uvm/uvm_fault.c:840 uvm_fault(fffff4006d1a02f0,354046d0000,0,1) at uvm_fault+0xe6 sys/uvm/uvm_fault.c:627 upageflttrap(ffff8000318b7330,354046d09b0) at upageflttrap+0xa0 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff8000318b7330) at usertrap+0x413 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7838321213f0, count: -6 ddb> show registers rdi 0x11 rsi 0x20 rbp 0xffff8000318b6fe0 rbx 0x1 rdx 0 rcx 0x1 rax 0xffff800000c57e20 r8 0xffffffff83075d80 uvm_map_inentry_sp r9 0 r10 0 r11 0x15f5dbff728f7511 r12 0x1d r13 0 r14 0x20 r15 0x6a72eec9 rip 0xffffffff81029930 amap_lookups+0x1e0 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff8000318b6f50 ss 0 amap_lookups+0x1e0: movl 0x10(%r15),%r14d ddb>