syzbot


uvm_fault: dt_ioctl_record_stop (2)

Status: upstream: reported on 2025/08/01 00:51
Reported-by: syzbot+1ee7b3d649b3fd543300@syzkaller.appspotmail.com
First crash: 128d, last: 3h04m
Similar bugs (1)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd uvm_fault: dt_ioctl_record_stop -1 1306 128d 244d 3/3 fixed on 2025/08/01 00:18

Sample crash report:
uvm_fault(0xfffffd806cc86748, 0x0, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at      dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
dt_ioctl_record_stop(ffff800001517280) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239
spec_close(ffff80002a82cbf0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8066078cd0,81,fffffd8007bfd958,ffff80002a7bd240) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd806cb0ca50,ffff80002a7bd240) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806cb0ca50,ffff80002a7bd240) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bd240) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bd240,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bd240,ffff80002a82cf50,ffff80002a82cea0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a82cf50) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a82cf50) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78a3a3812d10, count: 3
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.
ddb> 
ddb> set $lines = 0
ddb> set $maxwidth = 0
ddb> show panic
*cpu0: uvm_fault(0xfffffd806cc86748, 0x0, 0, 1) -> e
ddb> trace
dt_ioctl_record_stop(ffff800001517280) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239
spec_close(ffff80002a82cbf0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8066078cd0,81,fffffd8007bfd958,ffff80002a7bd240) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd806cb0ca50,ffff80002a7bd240) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806cb0ca50,ffff80002a7bd240) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bd240) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bd240,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bd240,ffff80002a82cf50,ffff80002a82cea0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a82cf50) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a82cf50) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78a3a3812d10, count: -12
ddb> show registers
rdi                                0
rsi                                0
rbp               0xffff80002a82cb20
rbx                              0x1
rdx                                0
rcx               0xffff80002a7bd240
rax               0xffffffff8381c878    dt_prov_syscall
r8                0xffffffffffffffff
r9                                 0
r10               0x3a529539644f90fe
r11               0x24a99142f0f8cf11
r12                                0
r13                                0
r14                                0
r15               0xffff800001497a00
rip               0xffffffff83249b48    dt_ioctl_record_stop+0x108
cs                               0x8
rflags                       0x10207    __ALIGN_SIZE+0xf207
rsp               0xffff80002a82caf0
ss                              0x10
dt_ioctl_record_stop+0x108:     movq    0(%r14),%r14
ddb> show proc
PROC (syz-executor) tid=53984 pid=94022 tcnt=0 stat=onproc
    flags process=1008<EXITING,SINGLEEXIT> proc=2000<WEXIT>
    runpri=32, usrpri=81, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0xffff80002a7bd240 scnt=-1 ecnt=1
    forw=0xffffffffffffffff, list=0xffff80002a7767d0,0xffff80002a7bc028
    process=0xffff80002a7ddf90 user=0xffff80002a828000, vmspace=0xfffffd806cc86748
    estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 11613   74876  57940      0  2           0                syz-executor
 11613  328365  57940      0  3   0x4000080  fsleep        syz-executor
 21312  239559  19486      0  2           0                syz-executor
 21312  508285  19486      0  2   0x4000000                syz-executor
 62250   90881  72967      0  2           0                syz-executor
 62250   69119  72967      0  2   0x4000000                syz-executor
 40928   62186  50227      0  2           0                syz-executor
 40928  193833  50227      0  3   0x4000080  fsleep        syz-executor
 40928  246849  50227      0  3   0x4000080  fsleep        syz-executor
 37545  319516  64176      0  4     0x82000                syz-executor
 37545   49006  64176      0  2   0x4082000                syz-executor
 37545  326948  64176      0  3   0x4082000  inode         syz-executor
 37545  275172  64176      0  3   0x4002000  suspend       syz-executor
 19486  192784  51523      0  3        0x82  nanoslp       syz-executor
 13288  208076      1      0  3    0x100083  ttyin         getty
 64176  131478  51523      0  3        0x82  nanoslp       syz-executor
 60821  453530  51523      0  3        0x82  wait          syz-executor
 84088   68800  51523      0  3        0x82  nanoslp       syz-executor
  4153  155817  51523      0  3        0x82  nanoslp       syz-executor
  5937  412106      0      0  3     0x14280  nfsidl        nfsio
 17220   74971      0      0  3     0x14280  nfsidl        nfsio
 32197  215037      0      0  3     0x14280  nfsidl        nfsio
 68675   32745      0      0  3     0x14280  nfsidl        nfsio
 21157  160943      0      0  3     0x14280  nfsidl        nfsio
 38761   43748      0      0  3     0x14280  nfsidl        nfsio
 80124  341905      0      0  3     0x14280  nfsidl        nfsio
 47117  134939      0      0  3     0x14280  nfsidl        nfsio
 91105  340221      0      0  3     0x14280  nfsidl        nfsio
 82523   33705      0      0  3     0x14280  nfsidl        nfsio
 70922  427411      0      0  3     0x14280  nfsidl        nfsio
 26348  181569      0      0  3     0x14280  nfsidl        nfsio
  1178  278481      0      0  3     0x14280  nfsidl        nfsio
 39589  295281      0      0  3     0x14280  nfsidl        nfsio
 51158  226377      0      0  3     0x14280  nfsidl        nfsio
 88715  264815      0      0  3     0x14280  nfsidl        nfsio
  6080  331567      0      0  3     0x14280  nfsidl        nfsio
 41063  361103      0      0  3     0x14280  nfsidl        nfsio
 48085  277368      0      0  3     0x14280  nfsidl        nfsio
 87369  361068      0      0  3     0x14280  nfsidl        nfsio
 57940   80862  51523      0  3        0x82  nanoslp       syz-executor
 50227  375731  51523      0  3        0x82  nanoslp       syz-executor
 72967   93982  51523      0  3        0x82  nanoslp       syz-executor
 51523  388249  79481      0  3        0x82  kqread        syz-executor
 79481   37261  10252      0  3    0x10008a  sigsusp       ksh
 10252  388265   1501      0  3        0x98  kqread        sshd-session
  1501   29325  80018      0  3        0x92  kqread        sshd-session
 80018   41073      1      0  3        0x88  kqread        sshd
 39745  167137  55907     73  3   0x1100090  kqread        syslogd
 55907   72811      1      0  3    0x100082  sbwait        syslogd
  9716  521777      1      0  3    0x100080  kqread        resolvd
 64833  343186  46602     77  3    0x100092  kqread        dhcpleased
  4908  395751  46602     77  3    0x100092  kqread        dhcpleased
 46602  438531      1      0  3        0x80  kqread        dhcpleased
 24899    5062      0      0  3     0x14200  bored         smr
 18804   82380      0      0  2     0x14200                zerothread
 39134  444550      0      0  3     0x14200  aiodoned      aiodoned
 60893  203919      0      0  3     0x14200  syncer        update
 60431  398858      0      0  3     0x14200  cleaner       cleaner
 40196  472924      0      0  3     0x14200  reaper        reaper
   484  327248      0      0  3     0x14200  pgdaemon      pagedaemon
 85130   84551      0      0  3     0x14200  bored         viomb
 88078  421604      0      0  3  0x40014200  acpi0         acpi0
 28565  178805      0      0  3     0x14200  bored         softnet0
 35067  284909      0      0  3     0x14200  bored         systqmp
 91052  354522      0      0  3     0x14200  bored         systq
 94091  280581      0      0  3  0x40014200  tmoslp        softclock
 57956  368964      0      0  3  0x40014200                idle0
     1  196621      0      0  3        0x82  wait          init
     0       0     -1      0  3  0x10010200  scheduler     swapper
ddb> show all locks
No such command
ddb> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10234  11417K   12256K 166960K     16946        0
            pcb    17     18K      23K 166960K       735        0
         rtable   259     13K      13K 166960K       852        0
             pf    34     13K      16K 166960K       234        0
         ifaddr    42      8K       9K 166960K       159        0
        ifgroup    53      2K       2K 166960K       288        0
         sysctl     4      1K       9K 166960K        20        0
       counters    33     17K      18K 166960K       179        0
       ioctlops     0      0K       4K 166960K       664        0
            iov     0      0K      28K 166960K       201        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1524     96K      96K 166960K      3806        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        30        0
         VM map     2      1K       1K 166960K         2        0
            sem    26     21K      37K 166960K       102        0
        dirhash    78     14K      15K 166960K      1074        0
           ACPI  1692    195K     286K 166960K     12470        0
      file desc    18     65K     240K 166960K      2366        0
          sigio     0      0K       0K 166960K        88        0
           proc    61     59K     108K 166960K       840        0
        subproc    72      4K       4K 166960K       128        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       312        0
       in_multi    99      7K       7K 166960K       232        0
    ether_multi     1      0K       0K 166960K        12        0
            mrt     0      0K       0K 166960K        18        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys   253   1129K    1129K 166960K       253        0
           exec     0      0K       1K 166960K       779        0
   fusefs mount     1     32K      32K 166960K         1        0
     pfkey data     0      0K       0K 166960K         4        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   255    148K     162K 166960K     21937        0
       UVM aobj   139     20K      20K 166960K       148        0
     pinsyscall    39     78K      96K 166960K      3558        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K       148        0
            NDP    11      0K       2K 166960K       117        0
           temp    84   8672K    8752K 166960K     93002        0
         kqueue    13     20K      32K 166960K       448        0
      SYN cache     2     16K      16K 166960K         2        0
ddb> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
rtpcb      120      277    0      273     3     0     3     3     0     8    2
rtentry    136      215    0      112     4     0     4     4     0     8    0
unpcb      144     1992    0     1972     7     5     2     6     0     8    1
syncache   336        7    0        7     1     1     0     1     0     8    0
tcpqe       32        2    0        2     1     1     0     1     0     8    0
tcpcb      736      719    0      711     8     6     2     7     0     8    1
arp         96       32    0       14     1     0     1     1     0     8    0
ipq         40        9    0        5     1     0     1     1     0     8    0
ipqe        40       18    0       13     1     0     1     1     0     8    0
inpcb      328     2461    0     2447    17    13     4    15     0     8    2
ip6q        72       43    0       35     1     0     1     1     0     8    0
ip6af       40       79    0       70     1     0     1     1     0     8    0
nd6        112       48    0       24     1     0     1     1     0     8    0
pkpcb       40       12    0       12     2     1     1     1     0     8    1
kcovpl      48       14    0        6     1     0     1     1     0     8    0
mppekey    1024       2    0        2     2     1     1     1     0     8    1
ppxss      1072     117    0      117     1     0     1     1     0     8    1
pppxif     1384      43    0       43     2     1     1     1     0     8    1
pfstscr     40        3    0        3     2     1     1     1     0     8    1
pfrktable  1344       6    0        6     1     1     0     1     0     8    0
pfstitem    24        2    0        0     1     0     1     1     0     8    0
pfstkey    128       16    0       14     1     0     1     1     0     8    0
pfstate    384        9    0        8     1     0     1     1     0     8    0
pfrule     1344       3    0        3     2     1     1     1     0     8    1
rttmr      136        2    0        2     1     1     0     1     0     8    0
art_heap8  4096       3    0        0     3     0     3     3     0     8    0
art_heap4  256      977    0      547    33     5    28    32     0     8    1
art_table   40      980    0      547     6     1     5     6     0     8    0
art_node    32      213    0      120     1     0     1     1     0     8    0
sysvmsgpl   40       15    0        7     1     0     1     1     0     8    0
semupl     112        2    0        2     1     1     0     1     0     8    0
semapl     112       93    0       69     1     0     1     1     0     8    0
shmpl      112      133    0        5     4     0     4     4     0     8    0
dirhash    1024     375    0      336     7     1     6     6     0     8    0
dino2pl    256     5511    0     3997    95     0    95    95     0     8    0
ffsino     256     5511    0     3997    95     0    95    95     0     8    0
nchpl      144     8753    0     7043    64     0    64    64     0     8    0
rtmask      32       23    0       23     2     1     1     1     0     8    1
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   31152    0    31151     3     2     1     2     0     8    0
vcpupl     3904       8    0        0     1     0     1     1     0     8    0
vmpool     800       12    0        4     1     0     1     1     0     8    0
kstatmem   264      174    0      152     2     0     2     2     0     8    0
acpiwqpl    32        1    0        1     1     0     1     1     1     8    1
scsiplug    72       12    0       12     2     1     1     1     0     8    1
scxspl     216    28185    0    28185     9     7     2     8     1     8    2
plimitpl   152      844    0      826     1     0     1     1     0     8    0
sigapl     424     2623    0     2560     8     0     8     8     0     8    0
knotepl    120   378244    0   378197    50    38    12    32     0     8    7
kqueuepl   184     1043    0     1033     7     3     4     4     0     8    3
pipepl     304      493    0      466     8     5     3     8     0     8    0
fdescpl    448     2585    0     2555     5     1     4     5     0     8    0
filepl     120    18393    0    18165    16     4    12    14     0     8    2
lockfpl    104     1373    0     1371     2     1     1     2     0     8    0
lockfspl    48      451    0      449     1     0     1     1     0     8    0
sessionpl  144       28    0       20     1     0     1     1     0     8    0
pgrppl      48       70    0       54     1     0     1     1     0     8    0
ucredpl    104     2971    0     2960     1     0     1     1     0     8    0
zombiepl   144     2563    0     2560     1     0     1     1     0     8    0
processpl  1152    2623    0     2560     5     0     5     5     0     8    0
procpl     664     5725    0     5654     8     1     7     8     0     8    0
sosppl     176       21    0       21     2     1     1     1     0     8    1
sockpl     552     4825    0     4787    20    12     8    14     0     8    5
mcl64k     65536    427    0      427     2     1     1     2     0     8    1
mcl16k     16384      6    0        6     1     1     0     1     0     8    0
mcl12k     12288      1    0        1     1     1     0     1     0     8    0
mcl9k      9216       1    0        1     1     1     0     1     0     8    0
mcl8k      8192      29    0       29     2     1     1     1     0     8    1
mcl4k      4096    5435    0     5384    15     7     8    15     0     8    1
mcl2k2     2112      19    0       19     2     1     1     1     0     8    1
mcl2k      2048    3902    0     3885     8     3     5     6     0     8    2
mtagpl      96      277    0       85     6     0     6     6     0     8    0
mbufpl     256   203819    0   203488   383   348    35   125     0     8    8
bufpl      280     7827    0     1606   445     0   445   445     0     8    0
anonpl      24   367031    0   358217    88    11    77    88     0   187    0
amapchunkpl 152   75435    0    74787    44     9    35    35     0   158   10
amappl16   200     6757    0     6495    28     0    28    28     0     8    0
amappl15   192        7    0        6     1     0     1     1     0     8    0
amappl14   184        8    0        8     1     1     0     1     0     8    0
amappl13   176      479    0      478     1     0     1     1     0     8    0
amappl12   168     2960    0     2921     2     0     2     2     0     8    0
amappl11   160        6    0        5     1     0     1     1     0     8    0
amappl10   152       43    0       32     1     0     1     1     0     8    0
amappl9    144      280    0      280     1     1     0     1     0     8    0
amappl8    136       25    0       23     1     0     1     1     0     8    0
amappl7    128      105    0      104     1     0     1     1     0     8    0
amappl6    120      334    0      322     1     0     1     1     0     8    0
amappl5    112       86    0       78     1     0     1     1     0     8    0
amappl4    104      410    0      386     1     0     1     1     0     8    0
amappl3     96    15311    0    15194     4     0     4     4     0     8    0
amappl2     88      577    0      522     2     0     2     2     0     8    0
amappl1     80    18019    0    17480    12     0    12    12     0     8    0
amappl      88    20773    0    20587     5     0     5     5     0    92    0
uvmvnodes   80      159    0        0     4     0     4     4     0     8    0
dma32768   32768      1    0        1     1     1     0     1     0     8    0
dma8192    8192       1    0        1     1     1     0     1     0     8    0
dma4096    4096       6    0        6     2     1     1     1     0     8    1
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        8    0        8     1     1     0     1     0     8    0
dma128     128      258    0      258     2     1     1     1     0     8    1
dma64       64        8    0        8     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       19    0       18     1     0     1     1     0     8    0
aobjpl      72      147    0        9     3     0     3     3     0     8    0
uaddrrnd    24     2585    0     2555     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     2585    0     2555     1     0     1     1     0     8    0
vmmpekpl   168    19855    0    19802     3     0     3     3     0     8    0
vmmpepl    168   163191    0   161100   108     7   101   103     0   357    3
vmsppl     368     2584    0     2555     4     1     3     4     0     8    0
rwobjpl     40    39772    0    38372    16     0    16    16     0     8    0
pdppl      4096    5200    0     5126   123    49    74    82     0     8    0
pvpl        32  1107308    0  1092716   189    33   156   182     0   265    7
pmappl     216     2596    0     2559     3     0     3     3     0     8    0
extentpl    40       45    0       27     1     0     1     1     0     8    0
phpool     112      796    0      432    14     0    14    14     0     8    0
ddb> machine ddbcpu 0
No such command
ddb> trace
dt_ioctl_record_stop(ffff800001517280) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239
spec_close(ffff80002a82cbf0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8066078cd0,81,fffffd8007bfd958,ffff80002a7bd240) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd806cb0ca50,ffff80002a7bd240) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806cb0ca50,ffff80002a7bd240) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bd240) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bd240,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bd240,ffff80002a82cf50,ffff80002a82cea0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a82cf50) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a82cf50) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78a3a3812d10, count: -12
ddb> machine ddbcpu 1
No such command
ddb> trace
dt_ioctl_record_stop(ffff800001517280) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline]
dtclose(11e5f,81,2000,ffff80002a7bd240) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239
spec_close(ffff80002a82cbf0) at spec_close+0x466 sys/kern/spec_vnops.c:-1
VOP_CLOSE(fffffd8066078cd0,81,fffffd8007bfd958,ffff80002a7bd240) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline]
vn_closefile(fffffd806cb0ca50,ffff80002a7bd240) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615
fdrop(fffffd806cb0ca50,ffff80002a7bd240) at fdrop+0x121 sys/kern/kern_descrip.c:1280
closef(fffffd806cb0ca50,ffff80002a7bd240) at closef+0x190 sys/kern/kern_descrip.c:1264
fdfree(ffff80002a7bd240) at fdfree+0x115 sys/kern/kern_descrip.c:1195
exit1(ffff80002a7bd240,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215
sys_exit(ffff80002a7bd240,ffff80002a82cf50,ffff80002a82cea0) at sys_exit+0x1a sys/kern/kern_exit.c:-1
syscall(ffff80002a82cf50) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline]
syscall(ffff80002a82cf50) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x78a3a3812d10, count: -12

Crashes (2408):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/12/06 23:06 openbsd 666b00facabc cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/06 21:48 openbsd 666b00facabc cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/06 12:48 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/06 10:15 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/06 08:56 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/06 07:10 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/06 06:09 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/06 04:24 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/06 03:08 openbsd f8a2f73b6503 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/06 00:33 openbsd 4f07d5022fc4 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/05 23:06 openbsd 4f07d5022fc4 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 20:34 openbsd 4f07d5022fc4 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 17:27 openbsd 4f07d5022fc4 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 15:35 openbsd 4f07d5022fc4 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 12:46 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 10:56 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/05 10:32 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 09:28 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 08:08 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/05 05:39 openbsd 9dbbe670f20c cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/04 22:33 openbsd 2f3d0dde3672 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/04 15:24 openbsd 2f3d0dde3672 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/04 14:04 openbsd 2f3d0dde3672 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/04 09:45 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/04 08:37 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/04 05:42 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/04 04:28 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/04 03:05 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/04 01:03 openbsd 4ae131efb048 cee4cb10 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 18:51 openbsd fcb10a4bf1a4 98d1f71f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 14:59 openbsd fcb10a4bf1a4 98d1f71f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 13:31 openbsd fcb10a4bf1a4 98d1f71f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 12:25 openbsd fcb10a4bf1a4 98d1f71f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/03 10:46 openbsd fcb10a4bf1a4 98d1f71f .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 08:08 openbsd fcb10a4bf1a4 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 06:35 openbsd fcb10a4bf1a4 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 05:30 openbsd cbd41aff2336 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 04:17 openbsd cbd41aff2336 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/03 01:04 openbsd cbd41aff2336 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 21:35 openbsd 80126d5ff84a d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-main uvm_fault: dt_ioctl_record_stop
2025/12/02 18:29 openbsd cbd41aff2336 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 16:09 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 13:40 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 12:05 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 10:33 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 07:05 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/12/02 03:57 openbsd 2f5495769435 d4611817 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
2025/08/01 00:50 openbsd 3b565b651350 3cda49cf .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore uvm_fault: dt_ioctl_record_stop
* Struck through repros no longer work on HEAD.