uvm_fault(0xfffffd8067fc95d8, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff80000143cf80) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002f127180) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806acb79a8,81,fffffd8007bfb138,ffff80003c991738) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806bbae100,ffff80003c991738) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806bbae100,ffff80003c991738) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80003c991738) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80003c991738,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80003c991738,ffff80002f1274f0,ffff80002f127440) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002f1274f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002f1274f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71c80ad54c40, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd8067fc95d8, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff80000143cf80) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002f127180) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806acb79a8,81,fffffd8007bfb138,ffff80003c991738) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806bbae100,ffff80003c991738) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806bbae100,ffff80003c991738) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80003c991738) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80003c991738,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80003c991738,ffff80002f1274f0,ffff80002f127440) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002f1274f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002f1274f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71c80ad54c40, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002f1270b0 rbx 0xffffffff81328f90 dtclose rdx 0 rcx 0xffff80003c991738 rax 0xffffffff8386ded0 dt_prov_syscall r8 0xffffffffffffffff r9 0 r10 0xa5c66b39d081cc0c r11 0x51f6b25c8f126cf7 r12 0xffff80000006ae00 r13 0 r14 0 r15 0xffff800000b50200 rip 0xffffffff81329310 dt_ioctl_record_stop+0xf0 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80002f127080 ss 0x10 dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 ddb> show proc PROC (syz-executor) tid=274975 pid=56276 tcnt=0 stat=onproc flags process=1018 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c991738 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c990548,0xffff80002a77b208 process=0xffff80002cd21b68 user=0xffff80002f122000, vmspace=0xfffffd8067fc95d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 9490 92064 82215 0 2 0 syz-executor 69954 40765 81335 0 2 0 syz-executor 69954 465042 81335 0 3 0x4000080 fsleep syz-executor 59377 30433 73527 0 2 0x100000 sh 73527 500908 70176 0 3 0x10008a sigsusp sh 57950 245975 98057 0 2 0 syz-executor 57950 75535 98057 0 3 0x4000080 fsleep syz-executor 16269 192627 7109 0 2 0 syz-executor 16269 416882 7109 0 3 0x4000080 fsleep syz-executor 63598 204433 4056 0 2 0 syz-executor 63598 352242 4056 0 3 0x4000080 fsleep syz-executor 70176 234747 80871 0 3 0x82 wait syz-executor 71641 40482 0 0 3 0x14200 acct acct 9067 459332 0 0 3 0x14200 bored sosplice 98057 464378 80871 0 3 0x82 nanoslp syz-executor 7109 349003 80871 0 3 0x82 nanoslp syz-executor 82215 427450 80871 0 3 0x82 nanoslp syz-executor 4056 465619 80871 0 3 0x82 nanoslp syz-executor 25811 204376 80871 0 2 0x2 syz-executor 81335 198467 80871 0 3 0x82 nanoslp syz-executor 32144 13521 80871 0 3 0x82 nanoslp syz-executor 80871 471560 16160 0 2 0x2 syz-executor 16160 258412 68235 0 3 0x10008a sigsusp ksh 68235 352840 44056 0 3 0x98 kqread sshd-session 44056 351636 87886 0 3 0x92 kqread sshd-session 25666 481743 1 0 3 0x100083 ttyin getty 87886 363695 1 0 3 0x88 kqread sshd 14700 33274 73073 73 3 0x1100090 kqread syslogd 73073 140742 1 0 3 0x100082 sbwait syslogd 51941 423552 1 0 3 0x100080 kqread resolvd 5829 6056 51742 77 3 0x100092 kqread dhcpleased 89436 303313 51742 77 3 0x100092 kqread dhcpleased 51742 256136 1 0 3 0x80 kqread dhcpleased 77661 199431 0 0 3 0x14200 bored smr 91193 232494 0 0 2 0x14200 zerothread 92951 280903 0 0 3 0x14200 aiodoned aiodoned 35125 431156 0 0 3 0x14200 syncer update 15039 454560 0 0 3 0x14200 cleaner cleaner 13126 422588 0 0 3 0x14200 reaper reaper 99573 116045 0 0 3 0x14200 pgdaemon pagedaemon 42109 296086 0 0 3 0x14200 bored viomb 94884 410540 0 0 3 0x40014200 acpi0 acpi0 34898 341607 0 0 3 0x14200 bored softnet7 16521 200874 0 0 3 0x14200 bored softnet6 59302 51755 0 0 3 0x14200 bored softnet5 7579 157336 0 0 3 0x14200 bored softnet4 66668 264598 0 0 3 0x14200 bored softnet3 50369 154073 0 0 3 0x14200 bored softnet2 96660 109389 0 0 3 0x14200 bored softnet1 48086 377744 0 0 3 0x14200 bored softnet0 59652 261967 0 0 3 0x14200 bored systqmp 34138 381292 0 0 3 0x14200 bored systq 17548 344516 0 0 3 0x40014200 tmoslp softclock 66685 29567 0 0 3 0x40014200 idle0 1 102616 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10223 11092K 11579K 166960K 12884 0 pcb 21 16K 18K 166960K 212 0 rtable 168 7K 8K 166960K 368 0 pf 32 13K 18K 166960K 130 0 ifaddr 32 5K 7K 166960K 86 0 ifgroup 46 2K 2K 166960K 158 0 sysctl 3 1K 9K 166960K 18 0 counters 31 17K 18K 166960K 140 0 ioctlops 0 0K 4K 166960K 205 0 iov 0 0K 16K 166960K 45 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1432 90K 90K 166960K 2295 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 30 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 876 0 sigio 1 0K 0K 166960K 19 0 proc 60 59K 124K 166960K 754 0 subproc 72 4K 4K 166960K 225 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 55 0 in_multi 68 4K 7K 166960K 122 0 ether_multi 1 0K 0K 166960K 3 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 485 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 208 151K 174K 166960K 8624 0 UVM aobj 24 2K 2K 166960K 28 0 pinsyscall 39 78K 96K 166960K 2042 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 22 0 NDP 10 0K 2K 166960K 61 0 temp 74 8676K 8744K 166960K 24982 0 kqueue 13 20K 30K 166960K 128 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 87 0 84 1 0 1 1 0 8 0 rtentry 136 108 0 51 4 0 4 4 0 8 0 unpcb 144 704 0 683 6 0 6 6 0 8 5 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 237 0 232 7 0 7 7 0 8 6 arp 88 10 0 4 1 0 1 1 0 8 0 inpcb 328 627 0 615 7 0 7 7 0 8 6 nd6 104 18 0 7 1 0 1 1 0 8 0 pkpcb 40 11 0 11 1 0 1 1 0 8 1 kcovpl 48 25 0 17 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 88 0 88 1 0 1 1 0 8 1 pppxif 1384 1 0 1 1 0 1 1 0 8 1 pfstscr 40 4 0 3 1 0 1 1 0 8 0 pffrag 232 2 0 1 1 0 1 1 0 482 0 pffrnode 88 2 0 1 1 0 1 1 0 8 0 pffrent 40 5 0 4 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 1 0 1 1 0 1 1 0 8 1 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 6 0 0 1 0 1 1 0 8 0 pfstkey 128 15 0 10 1 0 1 1 0 8 0 pfstate 384 8 0 5 1 0 1 1 0 8 0 pfrule 1344 8 0 6 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 544 0 224 28 0 28 28 0 8 5 art_table 40 546 0 224 5 0 5 5 0 8 0 art_node 32 108 0 58 1 0 1 1 0 8 0 sysvmsgpl 40 34 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 22 0 12 1 0 1 1 0 8 0 shmpl 112 25 0 4 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2724 0 1208 95 0 95 95 0 8 0 ffsino 256 2724 0 1208 95 0 95 95 0 8 0 nchpl 144 3801 0 2102 64 0 64 64 0 8 0 rtmask 32 5 0 5 1 0 1 1 0 8 1 uvmvnodes 80 3502 0 0 72 0 72 72 0 8 0 vnodes 216 3502 0 0 195 0 195 195 0 8 0 namei 1024 13535 0 13534 2 0 2 2 0 8 1 kstatmem 264 88 0 68 2 0 2 2 0 8 0 scsiplug 72 4 0 4 1 0 1 1 0 8 1 scxspl 216 12545 0 12545 8 0 8 8 1 8 8 plimitpl 152 264 0 247 1 0 1 1 0 8 0 sigapl 424 1128 0 1076 7 0 7 7 0 8 1 knotepl 120 29297 0 29250 10 0 10 10 0 8 8 kqueuepl 184 219 0 210 1 0 1 1 0 8 0 pipepl 304 243 0 216 3 0 3 3 0 8 0 fdescpl 448 1105 0 1075 5 0 5 5 0 8 1 filepl 120 6473 0 6254 14 0 14 14 0 8 7 lockfpl 104 577 0 573 2 0 2 2 0 8 1 lockfspl 48 276 0 272 1 0 1 1 0 8 0 sessionpl 144 40 0 32 1 0 1 1 0 8 0 pgrppl 48 75 0 59 1 0 1 1 0 8 0 ucredpl 104 830 0 816 1 0 1 1 0 8 0 zombiepl 144 1077 0 1076 1 0 1 1 0 8 0 processpl 1168 1128 0 1076 5 0 5 5 0 8 1 procpl 656 2043 0 1987 6 0 6 6 0 8 0 sosppl 168 4 0 4 1 0 1 1 0 8 1 sockpl 552 1562 0 1526 12 2 10 12 0 8 7 mcl64k 65536 37 0 37 1 0 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 10 0 10 1 0 1 1 0 8 1 mcl4k 4096 3272 0 3217 14 0 14 14 0 8 6 mcl2k 2048 1021 0 1019 4 0 4 4 0 8 3 mtagpl 96 53 0 13 1 0 1 1 0 8 0 mbufpl 256 11573 0 11339 78 55 23 78 0 8 6 bufpl 280 4247 0 121 295 0 295 295 0 8 0 anonpl 24 171780 0 168738 44 0 44 44 0 187 19 amapchunkpl 152 28312 0 27907 36 0 36 36 0 158 19 amappl16 200 3102 0 3077 18 8 10 14 0 8 8 amappl15 192 8 0 8 1 0 1 1 0 8 1 amappl14 184 105 0 95 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 0 1 1 0 8 1 amappl12 168 1821 0 1792 2 0 2 2 0 8 0 amappl11 160 43 0 33 1 0 1 1 0 8 0 amappl10 152 2 0 2 1 0 1 1 0 8 1 amappl9 144 240 0 240 1 0 1 1 0 8 1 amappl8 136 29 0 28 1 0 1 1 0 8 0 amappl7 128 102 0 92 1 0 1 1 0 8 0 amappl6 120 239 0 235 1 0 1 1 0 8 0 amappl5 112 148 0 142 1 0 1 1 0 8 0 amappl4 104 273 0 258 1 0 1 1 0 8 0 amappl3 96 5465 0 5372 4 0 4 4 0 8 0 amappl2 88 699 0 643 2 0 2 2 0 8 0 amappl1 80 11474 0 10921 14 0 14 14 0 8 0 amappl 88 7821 0 7677 5 0 5 5 0 92 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 255 0 255 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 27 0 4 1 0 1 1 0 8 0 uaddrrnd 24 1105 0 1075 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1105 0 1075 1 0 1 1 0 8 0 vmmpekpl 168 9705 0 9669 2 0 2 2 0 8 0 vmmpepl 168 73222 0 71412 93 0 93 93 0 357 7 vmsppl 368 1104 0 1075 4 0 4 4 0 8 1 rwobjpl 40 23930 0 19582 46 0 46 46 0 8 1 pdppl 4096 2216 0 2150 136 68 68 82 0 8 2 pvpl 32 473944 0 465700 112 0 112 112 0 265 31 pmappl 216 1104 0 1075 3 0 3 3 0 8 1 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 486 0 123 13 0 13 13 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff80000143cf80) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002f127180) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806acb79a8,81,fffffd8007bfb138,ffff80003c991738) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806bbae100,ffff80003c991738) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806bbae100,ffff80003c991738) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80003c991738) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80003c991738,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80003c991738,ffff80002f1274f0,ffff80002f127440) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002f1274f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002f1274f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71c80ad54c40, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff80000143cf80) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80003c991738) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002f127180) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806acb79a8,81,fffffd8007bfb138,ffff80003c991738) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806bbae100,ffff80003c991738) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806bbae100,ffff80003c991738) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806bbae100,ffff80003c991738) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80003c991738) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80003c991738,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80003c991738,ffff80002f1274f0,ffff80002f127440) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002f1274f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002f1274f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71c80ad54c40, count: -12