uvm_fault(0xffffffff83aee2d0, 0xffff800029a72004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND *429722 22370 0 0x2 0 0 syz-executor ufs_readdir(ffff80002a8893c0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd806c1f1298,ffff80002a889448,fffffd8007ffd340,ffff80002a88948c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736538,ffff80002a8895d0,ffff80002a889520) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3220 syscall(ffff80002a8895d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8895d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe90ab84dc0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83aee2d0, 0xffff800029a72004, 0, 1) -> d ddb> trace ufs_readdir(ffff80002a8893c0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd806c1f1298,ffff80002a889448,fffffd8007ffd340,ffff80002a88948c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736538,ffff80002a8895d0,ffff80002a889520) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3220 syscall(ffff80002a8895d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8895d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe90ab84dc0, count: -5 ddb> show registers rdi 0x200 rsi 0x800 rbp 0xffff80002a8893b0 rbx 0x200 rdx 0 rcx 0xfffffd8060e80a10 rax 0xffff800029a72200 r8 0xffffffffffffffff r9 0x3 r10 0x28c2452fa0931ca0 r11 0xd0d878c2207288d r12 0 r13 0xffff80002a889448 r14 0xffff800029a72000 r15 0xffff800029a72008 rip 0xffffffff81d3375e ufs_readdir+0x26e cs 0x8 rflags 0x10283 __ALIGN_SIZE+0xf283 rsp 0xffff80002a889200 ss 0x10 ufs_readdir+0x26e: movzwl 0x4(%r14),%ebx ddb> show proc PROC (syz-executor) tid=429722 pid=22370 tcnt=1 stat=onproc flags process=2 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7362a0,0xffff80002a76a7f0 process=0xffff80002a79f610 user=0xffff80002a884000, vmspace=0xfffffd807ea17008 estcpu=36, cpticks=16, pctcpu=0.1, user=1, sys=15, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 92841 126547 96130 0 2 0xc80 syz-executor 92841 336796 96130 0 3 0x4000080 fsleep syz-executor 92841 228643 96130 0 3 0x4000080 lockf syz-executor 92841 496028 96130 0 3 0x4000080 fsleep syz-executor 23849 294438 97436 0 2 0 syz-executor 23849 295411 97436 0 3 0x4000080 fsleep syz-executor 23849 221716 97436 0 3 0x4000080 fsleep syz-executor 23849 477947 97436 0 3 0x4000080 fsleep syz-executor 24356 241115 56025 0 2 0 syz-executor 24356 446189 56025 0 3 0x4000080 fsleep syz-executor 33266 428734 0 0 3 0x14200 acct acct 20774 185824 1 0 3 0x100083 ttyin getty 75371 140495 0 0 3 0x14280 nfsidl nfsio 1440 477792 0 0 3 0x14280 nfsidl nfsio 72271 397711 0 0 3 0x14280 nfsidl nfsio 92521 503829 0 0 3 0x14280 nfsidl nfsio 32233 498803 0 0 3 0x14280 nfsidl nfsio 15894 254076 0 0 3 0x14280 nfsidl nfsio 65915 65432 0 0 3 0x14280 nfsidl nfsio 95565 88486 0 0 3 0x14280 nfsidl nfsio 14259 407321 0 0 3 0x14280 nfsidl nfsio 81147 375722 0 0 3 0x14280 nfsidl nfsio 80812 144785 0 0 3 0x14280 nfsidl nfsio 22358 493659 0 0 3 0x14280 nfsidl nfsio 1000 165702 0 0 3 0x14280 nfsidl nfsio 84878 227841 0 0 3 0x14280 nfsidl nfsio 80329 46758 0 0 3 0x14280 nfsidl nfsio 80492 328243 0 0 3 0x14280 nfsidl nfsio 4866 78920 0 0 3 0x14280 nfsidl nfsio 8767 432152 0 0 3 0x14280 nfsidl nfsio 49166 168443 0 0 3 0x14280 nfsidl nfsio 2747 31718 0 0 3 0x14280 nfsidl nfsio *22370 429722 83831 0 7 0x2 syz-executor 96130 485061 83831 0 2 0xc82 syz-executor 67652 136700 83831 0 2 0xc82 syz-executor 97436 320587 83831 0 3 0x82 nanoslp syz-executor 56025 420973 83831 0 2 0xc82 syz-executor 83831 10235 57157 0 3 0x82 wait syz-executor 57157 8424 8510 0 3 0x10008a sigsusp ksh 8510 29636 13114 0 3 0x98 kqread sshd-session 13114 187380 563 0 3 0x92 kqread sshd-session 563 354030 1 0 3 0x88 kqread sshd 18228 171207 89731 73 3 0x1100090 kqread syslogd 89731 380949 1 0 3 0x100082 sbwait syslogd 41890 483418 1 0 3 0x100080 kqread resolvd 96254 318357 97643 77 3 0x100092 kqread dhcpleased 64548 236277 97643 77 3 0x100092 kqread dhcpleased 97643 227838 1 0 3 0x80 kqread dhcpleased 75901 454105 0 0 3 0x14200 bored smr 83539 427780 0 0 2 0x14200 zerothread 3014 230473 0 0 3 0x14200 aiodoned aiodoned 5322 289812 0 0 3 0x14200 syncer update 7457 64618 0 0 3 0x14200 cleaner cleaner 25939 318275 0 0 3 0x14200 reaper reaper 7271 49621 0 0 3 0x14200 pgdaemon pagedaemon 85055 98240 0 0 3 0x14200 bored viomb 34462 282222 0 0 3 0x40014200 acpi0 acpi0 9930 390524 0 0 3 0x14200 bored softnet0 51770 440641 0 0 3 0x14200 bored systqmp 7128 235005 0 0 3 0x14200 bored systq 73474 34556 0 0 3 0x40014200 tmoslp softclock 59407 69988 0 0 3 0x40014200 idle0 1 245758 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11040 12236K 12495K 166960K 12839 0 pcb 17 13K 14K 166960K 204 0 rtable 214 9K 9K 166960K 720 0 pf 31 13K 21K 166960K 146 0 ifaddr 35 6K 7K 166960K 110 0 ifgroup 46 2K 2K 166960K 151 0 sysctl 4 1K 9K 166960K 12 0 counters 32 17K 18K 166960K 74 0 ioctlops 0 0K 4K 166960K 301 0 iov 0 0K 17K 166960K 59 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1388 87K 88K 166960K 2048 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 37 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 240K 166960K 939 0 sigio 0 0K 0K 166960K 9 0 proc 60 59K 91K 166960K 852 0 subproc 72 4K 4K 166960K 154 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 71 0 in_multi 88 6K 7K 166960K 221 0 ether_multi 1 0K 0K 166960K 6 0 mrt 1 0K 0K 166960K 22 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 546 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 199 150K 181K 166960K 9264 0 UVM aobj 20 2K 4K 166960K 21 0 pinsyscall 35 70K 92K 166960K 2264 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 24 0 NDP 12 0K 2K 166960K 78 0 temp 58 9111K 9178K 166960K 32470 0 kqueue 14 22K 32K 166960K 167 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 94 0 91 1 0 1 1 0 8 0 rtentry 136 227 0 142 4 0 4 4 0 8 0 unpcb 144 472 0 456 4 0 4 4 0 8 3 syncache 336 8 0 8 1 0 1 1 0 8 1 tcpcb 736 315 0 310 7 0 7 7 0 8 5 arp 96 39 0 28 1 0 1 1 0 8 0 ipq 40 5 0 0 1 0 1 1 0 8 0 ipqe 40 6 0 0 1 0 1 1 0 8 0 inpcb 328 983 0 972 12 3 9 12 0 8 7 ip6q 72 5 0 3 1 0 1 1 0 8 0 ip6af 40 8 0 6 1 0 1 1 0 8 0 nd6 112 55 0 34 1 0 1 1 0 8 0 pkpcb 40 70 0 70 1 0 1 1 0 8 1 kcovpl 48 17 0 9 1 0 1 1 0 8 0 ppxss 1072 26 0 26 1 0 1 1 0 8 1 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfstscr 40 11 0 6 1 0 1 1 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfsrclim 320 3 0 3 1 0 1 1 0 8 1 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 6 0 1 1 0 1 1 0 8 0 pfstkey 128 12 0 7 1 0 1 1 0 8 0 pfstate 384 7 0 3 1 0 1 1 0 8 0 pfrule 1360 6 0 6 1 0 1 1 0 8 1 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 955 0 559 33 0 33 33 0 8 7 art_table 40 957 0 559 6 0 6 6 0 8 1 art_node 32 224 0 148 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 9 1 0 1 1 0 8 0 semapl 72 34 0 24 1 0 1 1 0 8 0 shmpl 112 18 0 1 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2776 0 1303 93 0 93 93 0 8 0 ffsino 256 2776 0 1303 93 0 93 93 0 8 0 nchpl 144 3909 0 2185 64 0 64 64 0 8 0 rtmask 32 5 0 5 1 0 1 1 0 8 1 vnodes 216 3325 0 0 185 0 185 185 0 8 0 namei 1024 12975 0 12975 2 0 2 2 0 8 2 kstatmem 264 89 0 68 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 17850 0 17850 8 0 8 8 1 8 8 plimitpl 152 185 0 169 1 0 1 1 0 8 0 sigapl 424 1225 0 1165 8 0 8 8 0 8 0 knotepl 120 29530 0 29481 30 20 10 24 0 8 8 kqueuepl 184 225 0 215 1 0 1 1 0 8 0 pipepl 304 201 0 174 3 0 3 3 0 8 0 fdescpl 448 1191 0 1165 5 0 5 5 0 8 1 filepl 120 6137 0 5920 11 0 11 11 0 8 3 lockfpl 104 363 0 359 1 0 1 1 0 8 0 lockfspl 48 100 0 97 1 0 1 1 0 8 0 sessionpl 144 116 0 108 1 0 1 1 0 8 0 pgrppl 48 141 0 125 1 0 1 1 0 8 0 ucredpl 104 745 0 733 1 0 1 1 0 8 0 zombiepl 144 1169 0 1165 1 0 1 1 0 8 0 processpl 1152 1225 0 1165 5 0 5 5 0 8 0 procpl 664 2200 0 2133 8 0 8 8 0 8 1 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 552 1654 0 1624 12 2 10 12 0 8 7 mcl64k 65536 39 0 39 1 0 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 11 0 11 1 0 1 1 0 8 1 mcl4k 4096 3376 0 3318 15 0 15 15 0 8 6 mcl2k 2048 798 0 792 2 0 2 2 0 8 1 mtagpl 96 12 0 9 1 0 1 1 0 8 0 mbufpl 256 11177 0 11040 13 0 13 13 0 8 1 bufpl 280 6413 0 197 445 0 445 445 0 8 0 anonpl 24 173840 0 170856 71 0 71 71 0 186 33 amapchunkpl 152 30344 0 29956 39 0 39 39 0 158 21 amappl16 200 3042 0 3015 34 19 15 28 0 8 8 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 517 0 516 1 0 1 1 0 8 0 amappl13 176 137 0 127 1 0 1 1 0 8 0 amappl12 168 1462 0 1437 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 0 1 1 0 8 1 amappl10 152 61 0 51 1 0 1 1 0 8 0 amappl9 144 268 0 268 1 0 1 1 0 8 1 amappl8 136 130 0 129 1 0 1 1 0 8 0 amappl7 128 156 0 145 1 0 1 1 0 8 0 amappl6 120 238 0 236 1 0 1 1 0 8 0 amappl5 112 103 0 95 1 0 1 1 0 8 0 amappl4 104 304 0 289 1 0 1 1 0 8 0 amappl3 96 6060 0 5970 4 0 4 4 0 8 1 amappl2 88 598 0 544 2 0 2 2 0 8 0 amappl1 80 13977 0 13439 13 0 13 13 0 8 1 amappl 88 8312 0 8176 5 0 5 5 0 92 1 uvmvnodes 80 122 0 0 3 0 3 3 0 8 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 20 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1191 0 1165 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1191 0 1165 1 0 1 1 0 8 0 vmmpekpl 168 10157 0 10112 3 0 3 3 0 8 0 vmmpepl 168 81313 0 79693 102 0 102 102 0 357 22 vmsppl 368 1190 0 1165 4 0 4 4 0 8 1 rwobjpl 40 23759 0 22799 16 0 16 16 0 8 3 pdppl 4096 2388 0 2330 108 40 68 80 0 8 10 pvpl 32 508711 0 500086 138 0 138 138 0 265 39 pmappl 216 1190 0 1165 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 390 0 40 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace ufs_readdir(ffff80002a8893c0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd806c1f1298,ffff80002a889448,fffffd8007ffd340,ffff80002a88948c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736538,ffff80002a8895d0,ffff80002a889520) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3220 syscall(ffff80002a8895d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8895d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe90ab84dc0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace ufs_readdir(ffff80002a8893c0) at ufs_readdir+0x26e sys/ufs/ufs/ufs_vnops.c:1397 VOP_READDIR(fffffd806c1f1298,ffff80002a889448,fffffd8007ffd340,ffff80002a88948c) at VOP_READDIR+0x125 sys/kern/vfs_vops.c:453 sys_getdents(ffff80002a736538,ffff80002a8895d0,ffff80002a889520) at sys_getdents+0x2dd sys/kern/vfs_syscalls.c:3220 syscall(ffff80002a8895d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8895d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe90ab84dc0, count: -5