syzbot


uvm_fault: dt_ioctl_record_stop (3)

Status: upstream: reported on 2026/03/24 13:23
Reported-by: syzbot+d82ab40d2bcc01c05570@syzkaller.appspotmail.com
First crash: 80d, last: 14d
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: dt_ioctl_record_stop (2) -1 4591 80d 316d 3/3 fixed on 2026/03/24 12:14
openbsd uvm_fault: dt_ioctl_record_stop -1 1306 316d 432d 3/3 fixed on 2025/08/01 00:18

Sample crash report:
uvm_fault(0xfffffd807ec60000, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
dt_ioctl_record_stop(ffff800001615a00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(21e5f,81,2000,ffff80003c8fcd28) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(21e5f,81,2000,ffff80003c8fcd28) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239
spec_close(ffff80002a89f3c0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd806edac040,81,fffffd8007ffdb60,ffff80003c8fcd28) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806ff09000,ffff80003c8fcd28) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:298 [inline]
vn_closefile(fffffd806ff09000,ffff80003c8fcd28) at vn_closefile+0x11d sys/kern/vfs_vnops.c:621
fdrop(fffffd806ff09000,ffff80003c8fcd28) at fdrop+0x121 sys/kern/kern_descrip.c:1281
closef(fffffd806ff09000,ffff80003c8fcd28) at closef+0x190 sys/kern/kern_descrip.c:1265
fdfree(ffff80003c8fcd28) at fdfree+0x115 sys/kern/kern_descrip.c:1196
exit1(ffff80003c8fcd28,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80003c8fcd28,ffff80002a89f720,ffff80002a89f670) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a89f720) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a89f720) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x7cb941706f40, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> 

Crashes (32):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/05/29 14:19 openbsd 8563f4150859 cb4e87ff .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/05/25 20:31 openbsd 61b7e18e5713 c69befb3 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/05/11 20:19 openbsd 9c5367037e8c 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/05/10 07:14 openbsd 33e6d7cf8045 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/05/06 08:30 openbsd eec9cf095b26 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/05/04 08:00 openbsd 126c93b16f30 340bcdf0 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/25 06:16 openbsd 2f70c1a437bc 9c2d0995 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/24 20:52 openbsd 9aeaae004919 1c2b9291 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/04/24 14:48 openbsd 9aeaae004919 1c2b9291 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/24 08:36 openbsd 179a5728e367 9cfb3ca7 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/04/21 08:03 openbsd 5ca82bba1a6e 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/04/16 23:00 openbsd 203548908adb 1a086e7c .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/04/09 12:29 openbsd b0cdb9e75fee 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/09 04:16 openbsd b0cdb9e75fee 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/05 19:44 openbsd bc22b0de1984 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/04/01 11:28 openbsd 9f2496a89535 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/31 19:29 openbsd 077f28b4c6a4 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/31 15:43 openbsd 077f28b4c6a4 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/31 12:27 openbsd 077f28b4c6a4 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2026/03/27 19:57 openbsd f3ad7971a235 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/27 18:50 openbsd f3ad7971a235 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/27 16:35 openbsd f3ad7971a235 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/27 05:41 openbsd 2f434a4256f3 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/26 16:57 openbsd 9c6370df4fcd 4b3d9a38 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/26 11:42 openbsd 84b7e477fd25 c6143aac .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/25 19:29 openbsd ee1bf64f5bae 4367a094 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/25 07:28 openbsd 87dc1fa97379 35e4ff71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/25 06:26 openbsd 87dc1fa97379 35e4ff71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/25 05:59 openbsd 87dc1fa97379 35e4ff71 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/24 19:10 openbsd 7348976a6ac6 74e70d19 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/24 15:31 openbsd 7348976a6ac6 74e70d19 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2026/03/24 13:23 openbsd 7348976a6ac6 74e70d19 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
* Struck through repros no longer work on HEAD.