syzbot


uvm_fault: dt_ioctl_record_stop (2)

Status: upstream: reported on 2025/08/01 00:51
Reported-by: syzbot+1ee7b3d649b3fd543300@syzkaller.appspotmail.com
First crash: 105d, last: 39m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: dt_ioctl_record_stop -1 1306 105d 222d 3/3 fixed on 2025/08/01 00:18

Sample crash report:
uvm_fault(0xfffffd806cb2b5d0, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
dt_ioctl_record_stop(ffff800001474000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 sys/dev/dt/dt_dev.c:239
spec_close(ffff80003a815a90) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806863a7d0,81,fffffd80097fd340,ffff80003a409a10) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd8061c7e238,ffff80003a409a10) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8061c7e238,ffff80003a409a10) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003a409a10) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003a409a10,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003a409a10,ffff80003a815e00,ffff80003a815d50) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003a815e00) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003a815e00) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x733c08fb1bf0, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb{0}> 
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
*cpu0: uvm_fault(0xfffffd806cb2b5d0, 0x0, 0, 1) -> e
ddb{0}> trace
dt_ioctl_record_stop(ffff800001474000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 sys/dev/dt/dt_dev.c:239
spec_close(ffff80003a815a90) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806863a7d0,81,fffffd80097fd340,ffff80003a409a10) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd8061c7e238,ffff80003a409a10) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8061c7e238,ffff80003a409a10) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003a409a10) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003a409a10,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003a409a10,ffff80003a815e00,ffff80003a815d50) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003a815e00) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003a815e00) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x733c08fb1bf0, count: -12
ddb{0}> show registers
rdi                                0
rsi                                0
rbp               0xffff80003a8159c0
rbx                              0x1
rdx                                0
rcx               0xffff80003a409a10
rax               0xffffffff8387a220    dt_prov_static
r8                0xffffffffffffffff
r9                                 0
r10               0x4e07776e4b2bf920
r11               0xbf6c43ae7e1953be
r12                                0
r13                                0
r14                                0
r15               0xffff8000014a6700
rip               0xffffffff819b70e8    dt_ioctl_record_stop+0x108
cs                               0x8
rflags                       0x10207    __ALIGN_SIZE+0xf207
rsp               0xffff80003a815990
ss                              0x10
dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
ddb{0}> show proc
PROC (syz-executor) tid=68453 pid=17297 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=86, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80003a409a10 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80003c4a7788,0xffff80003c4342e0
    process=0xffff80003c4cc9c8 user=0xffff80003a810000, vmspace=0xfffffd806cb2b5d0
    estcpu=36, cpticks=4, pctcpu=0.0, user=0, sys=0, intr=0
ddb{0}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 61706  163272  83540  60929  2        0x10                syz-executor
 61706  333555  83540  60929  3   0x4000090  fsleep        syz-executor
 32711  372458  56120      0  3        0x80  nanoslp       syz-executor
 32711     661  56120      0  3   0x4000080  fsleep        syz-executor
 32711  355279  56120      0  2   0x4000000                syz-executor
 32711  430254  56120      0  3   0x4000080  fsleep        syz-executor
 52624  110154  79392      0  2           0                syz-executor
 52624  377870  79392      0  2   0x4000000                syz-executor
 52624  412201  79392      0  3   0x4000000  inode         syz-executor
 67167  247309  33056      0  3        0x80  nanoslp       syz-executor
 67167  389694  33056      0  3   0x4000080  sbwait        syz-executor
 67167  356455  33056      0  3   0x4000080  fsleep        syz-executor
 91935  121298  31243      0  2           0                syz-executor
 91935   26667  31243      0  3   0x4000080  sbwait        syz-executor
 98356  190016  74331      0  2           0                syz-executor
 98356  304200  74331      0  3   0x4000080  sbwait        syz-executor
 98356  515281  74331      0  3   0x4000080  sbufrcv       syz-executor
 98356  453458  74331      0  3   0x4000080  fsleep        syz-executor
 96292  373094  53177      0  2           0                syz-executor
 96292  113959  53177      0  3   0x4000080  fsleep        syz-executor
 96292  517665  53177      0  3   0x4000080  fsleep        syz-executor
 53177  251118   5184      0  3        0x82  nanoslp       syz-executor
 37491   86125      0      0  3     0x14200  acct          acct
 25038  139296      0      0  3     0x14280  nfsidl        nfsio
 78872  174825      0      0  3     0x14280  nfsidl        nfsio
 33109  444982      0      0  3     0x14280  nfsidl        nfsio
 92553  340754      0      0  3     0x14280  nfsidl        nfsio
 37590  326615      0      0  3     0x14280  nfsidl        nfsio
 75825  382734      0      0  3     0x14280  nfsidl        nfsio
 32739  356905      0      0  3     0x14280  nfsidl        nfsio
 69159  207931      0      0  3     0x14280  nfsidl        nfsio
 86852  296637      0      0  3     0x14280  nfsidl        nfsio
 11059  431731      0      0  3     0x14280  nfsidl        nfsio
  3509   60570      0      0  3     0x14280  nfsidl        nfsio
 96179  221230      0      0  3     0x14280  nfsidl        nfsio
 32534  220349      0      0  3     0x14280  nfsidl        nfsio
 45714   59938      0      0  3     0x14280  nfsidl        nfsio
 39474  162600      0      0  3     0x14280  nfsidl        nfsio
 46277  160724      0      0  3     0x14280  nfsidl        nfsio
 51129  514759      0      0  3     0x14280  nfsidl        nfsio
 20097  239414      0      0  3     0x14280  nfsidl        nfsio
 60792  115854      0      0  3     0x14280  nfsidl        nfsio
  9841   42427      0      0  3     0x14280  nfsidl        nfsio
 83540  343534   5184      0  3        0x82  nanoslp       syz-executor
 79392  215192   5184      0  3        0x82  nanoslp       syz-executor
 74331  240881   5184      0  3        0x82  nanoslp       syz-executor
 29854    2921   5184      0  3        0x82  nanoslp       syz-executor
 56120  479554   5184      0  3        0x82  nanoslp       syz-executor
 31243  379506   5184      0  3        0x82  nanoslp       syz-executor
 33056  249505   5184      0  3        0x82  nanoslp       syz-executor
  5184  195953  65475      0  3        0x82  kqread        syz-executor
 65475  403403   2867      0  3    0x10008a  sigsusp       ksh
  2867  131016  30201      0  3        0x98  kqread        sshd-session
 30201  435224  45162      0  3        0x92  kqread        sshd-session
 98961  426869      1      0  3    0x100083  ttyin         getty
 45162  145295      1      0  3        0x88  kqread        sshd
 10479  157399    949     74  3   0x1100092  bpf           pflogd
   949  438071      1      0  3        0x80  sbwait        pflogd
 21826  287653  22102     73  3   0x1100090  kqread        syslogd
 22102  163655      1      0  3    0x100082  sbwait        syslogd
 13375  125132      1      0  3    0x100080  kqread        resolvd
 10382  245646  54784     77  3    0x100092  kqread        dhcpleased
 19265  443993  54784     77  3    0x100092  kqread        dhcpleased
 54784   56123      1      0  3        0x80  kqread        dhcpleased
 67116  153596      0      0  3     0x14200  bored         smr
 87160   85286      0      0  2     0x14200                zerothread
 38954  454396      0      0  3     0x14200  aiodoned      aiodoned
 89811  299005      0      0  3     0x14200  syncer        update
 82117  288444      0      0  3     0x14200  cleaner       cleaner
 36695  516564      0      0  3     0x14200  reaper        reaper
  3027  323379      0      0  3     0x14200  pgdaemon      pagedaemon
   151  462967      0      0  3     0x14200  bored         viomb
 23482  247090      0      0  3  0x40014200  acpi0         acpi0
 14024   42195      0      0  7  0x40014200                idle1
 39839  325219      0      0  3     0x14200  bored         softnet1
 50960  433654      0      0  3     0x14200  bored         softnet0
 79941  498242      0      0  3     0x14200  bored         systqmp
 50757   83126      0      0  3     0x14200  bored         systq
 19005  359027      0      0  3     0x14200  tmoslp        softclockmp
 25715  381046      0      0  3  0x40014200  tmoslp        softclock
 39168  128447      0      0  3  0x40014200                idle0
     1  403418      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb{0}> show all locks
Process 32711 (syz-executor) thread 0xffff80003a408020 (355279)
exclusive rrwlock inode r = 0 (0xfffffd806f33ba58)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_pwrite+0xae sys/kern/vfs_syscalls.c:3367
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#9  Xsyscall+0x128
Process 52624 (syz-executor) thread 0xffff80003c434800 (377870)
exclusive rrwlock inode r = 0 (0xfffffd806c821c70)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vn_write+0x18f sys/kern/vfs_vnops.c:405
#6  dofilewritev+0x242 sys/kern/sys_generic.c:380
#7  sys_write+0xa2 sys/kern/sys_generic.c:300
#8  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#9  Xsyscall+0x128
Process 52624 (syz-executor) thread 0xffff80003c4a7258 (412201)
exclusive rrwlock inode r = 0 (0xfffffd806eb7d540)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  rrw_enter+0xc6 sys/kern/kern_rwlock.c:621
#3  VOP_LOCK+0xbd sys/kern/vfs_vops.c:527
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:570
#5  vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1
#6  namei+0x7ca sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3098
#8  syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8  syscall+0xb17 sys/arch/amd64/amd64/trap.c:765
#9  Xsyscall+0x128
Process 98356 (syz-executor) thread 0xffff8000fffee2b0 (304200)
exclusive rwlock sbufrcv r = 0 (0xffff8000014ac120)
#0  witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1  rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2  sblock+0xb6 sys/kern/uipc_socket2.c:536
#3  soreceive+0x27d sys/kern/uipc_socket.c:878
#4  recvit+0x40b sys/kern/uipc_syscalls.c:1078
#5  sys_recvmmsg+0x410 sys/kern/uipc_syscalls.c:969
#6  syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6  syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765
#7  Xsyscall+0x128
ddb{0}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10213  11171K   11409K 166960K     12034        0
            pcb    18     14K      16K 166960K       154        0
         rtable   199      7K       9K 166960K       449        0
             pf    33     17K      22K 166960K        84        0
         ifaddr    39      6K       8K 166960K        69        0
        ifgroup    51      2K       2K 166960K       101        0
         sysctl     4      1K       9K 166960K        10        0
       counters    66     36K      37K 166960K       108        0
       ioctlops     0      0K       4K 166960K      1537        0
            iov     1      4K      16K 166960K        15        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1376     87K      87K 166960K      1702        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K         6        0
         VM map     2      1K       1K 166960K         2        0
            sem    11      0K       0K 166960K        19        0
        dirhash    12      2K       2K 166960K        21        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K       490        0
          sigio     0      0K       0K 166960K        10        0
           proc    72    115K     180K 166960K       604        0
        subproc    72      4K       4K 166960K        81        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       166        0
       in_multi    87      6K       7K 166960K       118        0
    ether_multi     1      0K       0K 166960K         4        0
            mrt     0      0K       0K 166960K        10        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   109    493K     493K 166960K       109        0
           exec     0      0K       1K 166960K       419        0
   fusefs mount     1     32K      32K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   274    168K     174K 166960K      6126        0
       UVM aobj    11      4K       4K 166960K        12        0
     pinsyscall    43     86K     106K 166960K      1637        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     2      0K       0K 166960K        20        0
            NDP    11      0K       2K 166960K        45        0
           temp    75   8668K    8915K 166960K     43789        0
         kqueue    16     22K      29K 166960K        81        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{0}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       26    0        0     1     0     1     1     0     8    0
rtpcb      120      194    0      190     3     0     3     3     0     8    2
rtentry    176      136    0       51     6     0     6     6     0     8    0
unpcb      144      195    0      170     2     0     2     2     0     8    1
syncache   336        5    0        5     1     0     1     1     0     8    1
tcpqe       32        3    0        3     1     0     1     1     0     8    1
tcpcb      736      135    0      128     7     0     7     7     0     8    6
arp        136       22    0        8     1     0     1     1     0     8    0
inpcb      328      509    0      498    13     3    10    13     0     8    8
nd6        152       27    0        6     1     0     1     1     0     8    0
pkpcb       40        3    0        3     1     0     1     1     0     8    1
kcovpl      48        9    0        1     1     0     1     1     0     8    0
ppxss      1192      14    0       14     1     0     1     1     0     8    1
pppxif     1504       1    0        1     1     0     1     1     0     8    1
pffrag     232        3    0        0     1     0     1     1     0   482    0
pffrnode    88        3    0        0     1     0     1     1     0     8    0
pffrent     40        3    0        0     1     0     1     1     0     8    0
pfosfp      40     1429    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1429    0      714    21     0    21    21     0     8    0
pfrktable  1344       3    0        2     1     0     1     1     0     8    0
pfstitem    24       16    0        0     1     0     1     1     0     8    0
pfstkey    128       16    0        0     1     0     1     1     0     8    0
pfstate    448       16    0        0     2     0     2     2     0     8    0
pfsrctr    152       12    0        6     1     0     1     1     0     8    0
pfrule     1344      23    0       17     2     1     1     2     0     8    0
rttmr      136        3    0        3     1     0     1     1     0     8    1
art_heap8  4096       1    0        0     1     0     1     1     0     8    0
art_heap4  256      656    0      258    31     1    30    31     0     8    3
art_table   40      657    0      258     5     0     5     5     0     8    0
art_node    32      136    0       60     1     0     1     1     0     8    0
sysvmsgpl   40        3    0        0     1     0     1     1     0     8    0
semupl     112        2    0        2     1     0     1     1     0     8    1
semapl     112       14    0        5     1     0     1     1     0     8    0
shmpl      112        8    0        1     1     0     1     1     0     8    0
dirhash    1024      23    0        6     3     0     3     3     0     8    0
dino2pl    256     2247    0      727    95     0    95    95     0     8    0
ffsino     296     2247    0      727   117     0   117   117     0     8    0
nchpl      144     2907    0     1199    64     0    64    64     0     8    0
rtmask      32        4    0        4     1     0     1     1     0     8    1
vnodes     216     2499    0        0   139     0   139   139     0     8    0
namei      1024    9521    0     9520     2     1     1     2     0     8    0
percpumem   16       69    0       21     1     0     1     1     0     8    0
vcpupl     3968       1    0        0     1     0     1     1     0     8    0
vmpool     840        1    0        0     1     0     1     1     0     8    0
kstatmem   264       56    0       32     3     0     3     3     0     8    1
scsiplug    72        3    0        3     1     0     1     1     0     8    1
scxspl     216     9693    0     9693     3     2     1     2     1     8    1
plimitpl   152      215    0      194     1     0     1     1     0     8    0
sigapl     424      807    0      738     8     0     8     8     0     8    0
knotepl    120      563    0        0    18     0    18    18     0     8    0
kqueuepl   224      156    0      144     3     0     3     3     0     8    2
pipepl     344      271    0      244     9     0     9     9     0     8    6
fdescpl    528      769    0      737     3     0     3     3     0     8    0
filepl     160     4294    0     4057    16     0    16    16     0     8    4
lockfpl    104      146    0      144     1     0     1     1     0     8    0
lockfspl    48       67    0       65     1     0     1     1     0     8    0
sessionpl  144       25    0       16     1     0     1     1     0     8    0
pgrppl      48       37    0       20     1     0     1     1     0     8    0
ucredpl    104      739    0      725     1     0     1     1     0     8    0
zombiepl   144      739    0      738     1     0     1     1     0     8    0
processpl  1232     807    0      738     6     0     6     6     0     8    0
procpl     664     1325    0     1242     8     0     8     8     0     8    1
sosppl     176        2    0        2     1     0     1     1     0     8    1
sockpl     752      908    0      868    18     6    12    18     0     8    7
mcl64k     65536      1    0        0     1     0     1     1     0     8    0
mcl16k     16384      1    0        0     1     0     1     1     0     8    0
mcl12k     12288      1    0        0     1     0     1     1     0     8    0
mcl8k      8192       2    0        0     1     0     1     1     0     8    0
mcl4k      4096     116    0        0    15     0    15    15     0     8    0
mcl2k      2048      20    0        0     3     0     3     3     0     8    0
mtagpl      96        6    0        0     1     0     1     1     0     8    0
mbufpl     256      166    0        0    11     0    11    11     0     8    0
bufpl      280     3481    0      131   240     0   240   240     0     8    0
anonpl      32    10856    0        0    88     0    88    88     0   246    0
amapchunkpl 152   19534    0    18863    30     0    30    30     0   158    4
amappl16   200     2779    0     2553    23     2    21    21     0     8    4
amappl15   192        1    0        1     1     1     0     1     0     8    0
amappl14   184        7    0        7     1     1     0     1     0     8    0
amappl13   176      438    0      436     1     0     1     1     0     8    0
amappl12   168     1141    0     1098     3     0     3     3     0     8    0
amappl11   160       80    0       80     1     1     0     1     0     8    0
amappl10   152       49    0       35     1     0     1     1     0     8    0
amappl9    144      267    0      266     2     1     1     1     0     8    0
amappl8    136       28    0       25     1     0     1     1     0     8    0
amappl7    128       83    0       81     1     0     1     1     0     8    0
amappl6    120      291    0      278     1     0     1     1     0     8    0
amappl5    112       78    0       68     1     0     1     1     0     8    0
amappl4    104      422    0      393     1     0     1     1     0     8    0
amappl3     96     3205    0     3100     4     1     3     3     0     8    0
amappl2     88      896    0      819     2     0     2     2     0     8    0
amappl1     80    11034    0    10433    16     1    15    15     0     8    0
amappl      88     5313    0     5118     5     0     5     5     0    92    0
uvmvnodes   80      114    0        0     3     0     3     3     0     8    0
dma65536   65536      1    0        1     1     0     1     1     0     8    1
dma4096    4096       2    0        2     2     1     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      254    0      254     2     1     1     1     0     8    1
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       11    0        1     1     0     1     1     0     8    0
uaddrrnd    24      769    0      737     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24      769    0      737     1     0     1     1     0     8    0
vmmpekpl   168     8501    0     8457     3     0     3     3     0     8    0
vmmpepl    168    56282    0    54073   105     0   105   105     0   357    5
vmsppl     488      768    0      737     5     0     5     5     0     8    1
rwobjpl     80    18281    0    16996    30     0    30    30     0     8    0
pdppl      4096    1547    0     1475   100    26    74    85     0     8    2
pvpl        32    18030    0        0   147     1   146   146     0   265    0
pmappl     256      769    0      737     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      282    0       30     8     0     8     8     0     8    0
ddb{0}> machine ddbcpu 0
Invalid cpu 0
ddb{0}> trace
dt_ioctl_record_stop(ffff800001474000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80003a409a10) at dtclose+0x109 sys/dev/dt/dt_dev.c:239
spec_close(ffff80003a815a90) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806863a7d0,81,fffffd80097fd340,ffff80003a409a10) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd8061c7e238,ffff80003a409a10) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615
fdrop(fffffd8061c7e238,ffff80003a409a10) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd8061c7e238,ffff80003a409a10) at closef+0x192 sys/kern/kern_descrip.c:1264
fdfree(ffff80003a409a10) at fdfree+0x116 sys/kern/kern_descrip.c:1195
exit1(ffff80003a409a10,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003a409a10,ffff80003a815e00,ffff80003a815d50) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80003a815e00) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003a815e00) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:765
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x733c08fb1bf0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: 10
ddb{1}> trace
x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
acpicpu_idle() at acpicpu_idle+0x457 sys/dev/acpi/acpicpu_x86.c:1224
sched_idle(ffff8000299edff0) at sched_idle+0x391 sys/kern/kern_sched.c:191
end trace frame: 0x0, count: -5

Crashes (1999):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/14 19:38 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 18:34 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 16:58 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 15:45 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 13:18 openbsd 56163c0cd41e f7988ea4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 11:30 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 10:12 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/14 08:40 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/14 07:06 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 05:13 openbsd 83ff66b05700 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/14 02:51 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/14 00:51 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 23:45 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 21:25 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 17:19 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/13 15:43 openbsd 3a7be1e428cc 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/13 14:07 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 12:46 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/13 11:42 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/13 08:38 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 06:46 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 05:23 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 04:16 openbsd b192115449a5 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/13 00:49 openbsd 30ee307006ea 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/12 23:23 openbsd 30ee307006ea 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/12 18:52 openbsd 30ee307006ea 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/12 17:49 openbsd 4bd49954ab16 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/12 16:30 openbsd 30ee307006ea 07e030de .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/12 11:13 openbsd 30ee307006ea 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/12 09:51 openbsd f90c65410264 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/12 07:55 openbsd f90c65410264 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/11 23:43 openbsd f90c65410264 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/11 22:05 openbsd f90c65410264 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/11 18:24 openbsd 05de582f27ae 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/11 15:31 openbsd 05de582f27ae 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/11 12:09 openbsd 05de582f27ae 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/11 11:00 openbsd 05de582f27ae 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/11 08:42 openbsd 05de582f27ae 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/11 07:19 openbsd d046e1d8fd3f 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/11 05:44 openbsd d046e1d8fd3f 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/11 03:45 openbsd d046e1d8fd3f 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 22:59 openbsd d046e1d8fd3f 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/10 19:37 openbsd d046e1d8fd3f 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 17:27 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 16:26 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 16:03 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 13:44 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 10:42 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 07:11 openbsd 129ed0dedc2e 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/11/10 04:56 openbsd ba1265228048 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 02:36 openbsd ba1265228048 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/10 01:08 openbsd ba1265228048 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/11/09 22:15 openbsd ba1265228048 4e1406b4 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/08/01 00:50 openbsd 3b565b651350 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
* Struck through repros no longer work on HEAD.