uvm_fault(0xfffffd806b9cb8b8, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff80000148a880) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:586 dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002cd29440) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80687d3bf0,1,fffffd8007bfb548,ffff800033937250) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cb70178,ffff800033937250) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cb70178,ffff800033937250) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800033937250) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800033937250,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800033937250,ffff80002cd297a0,ffff80002cd296f0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002cd297a0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002cd297a0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7df116a9ed00, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806b9cb8b8, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff80000148a880) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:586 dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002cd29440) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80687d3bf0,1,fffffd8007bfb548,ffff800033937250) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cb70178,ffff800033937250) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cb70178,ffff800033937250) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800033937250) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800033937250,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800033937250,ffff80002cd297a0,ffff80002cd296f0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002cd297a0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002cd297a0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7df116a9ed00, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002cd29370 rbx 0x1 rdx 0 rcx 0xffff800033937250 rax 0xffff800033937250 r8 0x7f7fffffc000 r9 0 r10 0x5af6ee8103c7b80c r11 0x82562f8b0b5f7f62 r12 0 r13 0 r14 0 r15 0xffff800001487f00 rip 0xffffffff8113bad8 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002cd29340 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb> show proc PROC (syz-executor) tid=507251 pid=3380 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800033937250 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000339362c0,0xffff8000339374f8 process=0xffff8000ffff6420 user=0xffff80002cd24000, vmspace=0xfffffd806b9cb8b8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 11680 331042 9019 0 3 0x80 nanoslp syz-executor 11680 10311 9019 0 3 0x4000080 msgwait syz-executor 11680 4396 9019 0 3 0x4000080 fsleep syz-executor 43071 374716 13283 0 3 0x80 nanoslp syz-executor 43071 352469 13283 0 3 0x4000080 lockf syz-executor 43071 61238 13283 0 3 0x4000080 lockf syz-executor 43071 229486 13283 0 3 0x4000080 fsleep syz-executor 328 405764 25152 0 3 0x80 nanoslp syz-executor 328 293458 25152 0 3 0x4000080 sbwait syz-executor 328 410877 25152 0 3 0x4000080 sbwait syz-executor 328 165364 25152 0 3 0x4000080 fsleep syz-executor 76051 382242 56205 0 3 0x80 nanoslp syz-executor 76051 127297 56205 0 3 0x4000080 kqread syz-executor 76051 63561 56205 0 3 0x4000080 fsleep syz-executor 87616 107473 0 0 3 0x14200 bored sosplice 9019 229075 81458 0 3 0x82 nanoslp syz-executor 56205 308657 81458 0 3 0x82 nanoslp syz-executor 13283 471296 81458 0 3 0x82 nanoslp syz-executor 77207 462148 81458 0 3 0x82 nanoslp syz-executor 64722 340587 81458 0 3 0x82 nanoslp syz-executor 25152 210298 81458 0 3 0x82 nanoslp syz-executor 57346 51779 81458 0 3 0x82 nanoslp syz-executor 34558 331433 81458 0 3 0x82 nanoslp syz-executor 81458 346103 45523 0 3 0x82 kqread syz-executor 45523 289122 61120 0 3 0x10008a sigsusp ksh 61120 279812 21232 0 3 0x98 kqread sshd-session 21232 33047 92550 0 3 0x92 kqread sshd-session 58470 37336 1 0 3 0x100083 ttyopn getty 92550 231464 1 0 3 0x88 kqread sshd 72743 208071 38159 73 3 0x1100090 kqread syslogd 38159 425889 1 0 3 0x100082 sbwait syslogd 78294 495398 1 0 3 0x100080 kqread resolvd 19595 174337 98806 77 3 0x100092 kqread dhcpleased 43388 442807 98806 77 3 0x100092 kqread dhcpleased 98806 370143 1 0 3 0x80 kqread dhcpleased 5569 202897 0 0 3 0x14200 bored smr 91782 225615 0 0 3 0x14200 pgzero zerothread 1424 113322 0 0 3 0x14200 aiodoned aiodoned 93691 285504 0 0 3 0x14200 syncer update 94604 453234 0 0 3 0x14200 cleaner cleaner 70513 250769 0 0 3 0x14200 reaper reaper 95823 76241 0 0 3 0x14200 pgdaemon pagedaemon 70602 520973 0 0 3 0x14200 bored viomb 19015 99374 0 0 3 0x40014200 acpi0 acpi0 68362 74002 0 0 3 0x14200 bored softnet7 68923 269352 0 0 3 0x14200 bored softnet6 89647 102749 0 0 3 0x14200 bored softnet5 18550 387704 0 0 3 0x14200 bored softnet4 39321 199880 0 0 3 0x14200 bored softnet3 13054 135890 0 0 3 0x14200 bored softnet2 64382 52289 0 0 3 0x14200 bored softnet1 36977 398292 0 0 3 0x14200 bored softnet0 69174 295142 0 0 3 0x14200 bored systqmp 92135 196582 0 0 3 0x14200 bored systq 84220 272302 0 0 3 0x40014200 tmoslp softclock 9717 66039 0 0 3 0x40014200 idle0 1 327533 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10195 11109K 11183K 166960K 11666 0 pcb 18 13K 17K 166960K 170 0 rtable 182 7K 8K 166960K 322 0 pf 26 12K 14K 166960K 58 0 ifaddr 34 6K 7K 166960K 56 0 ifgroup 42 1K 2K 166960K 66 0 sysctl 2 1K 9K 166960K 10 0 counters 30 17K 18K 166960K 45 0 ioctlops 0 0K 4K 166960K 148 0 iov 0 0K 16K 166960K 24 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1367 86K 86K 166960K 1705 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 1K 166960K 15 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 417 0 sigio 0 0K 0K 166960K 7 0 proc 63 67K 91K 166960K 525 0 subproc 72 4K 4K 166960K 73 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 45 0 in_multi 77 5K 7K 166960K 113 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 367 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 245 151K 168K 166960K 5359 0 UVM aobj 15 2K 2K 166960K 15 0 pinsyscall 39 78K 94K 166960K 1459 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 18 0 NDP 9 0K 2K 166960K 35 0 temp 44 8631K 8703K 166960K 20329 0 kqueue 15 24K 32K 166960K 93 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 55 0 52 1 0 1 1 0 8 0 rtentry 136 103 0 33 4 0 4 4 0 8 0 unpcb 144 475 0 459 6 0 6 6 0 8 5 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 113 0 106 4 0 4 4 0 8 3 arp 88 12 0 2 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 4 0 2 1 0 1 1 0 8 0 inpcb 328 355 0 342 4 0 4 4 0 8 2 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 5 0 4 1 0 1 1 0 8 0 nd6 104 18 0 5 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 13 0 13 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfrule 1344 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 478 0 158 27 0 27 27 0 8 4 art_table 40 482 0 158 5 0 5 5 0 8 0 art_node 32 103 0 41 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 2 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 12 0 5 1 0 1 1 0 8 0 shmpl 112 12 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2212 0 717 95 0 95 95 0 8 0 ffsino 256 2212 0 717 95 0 95 95 0 8 0 nchpl 144 2803 0 1117 63 0 63 63 0 8 0 rtmask 32 5 0 5 1 0 1 1 0 8 1 uvmvnodes 80 2430 0 0 50 0 50 50 0 8 0 vnodes 216 2430 0 0 135 0 135 135 0 8 0 namei 1024 9197 0 9197 2 0 2 2 0 8 2 kstatmem 264 38 0 20 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 9432 0 9432 8 0 8 8 1 8 8 plimitpl 152 133 0 117 1 0 1 1 0 8 0 sigapl 424 704 0 653 7 0 7 7 0 8 1 knotepl 120 15971 0 15758 47 15 32 39 0 8 22 kqueuepl 184 224 0 211 4 0 4 4 0 8 2 pipepl 304 196 0 169 5 0 5 5 0 8 2 fdescpl 448 683 0 653 5 0 5 5 0 8 1 filepl 120 4064 0 3839 14 0 14 14 0 8 4 lockfpl 104 135 0 130 1 0 1 1 0 8 0 lockfspl 48 55 0 52 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 44 0 28 1 0 1 1 0 8 0 ucredpl 104 741 0 729 1 0 1 1 0 8 0 zombiepl 144 657 0 653 1 0 1 1 0 8 0 processpl 1152 704 0 653 5 0 5 5 0 8 1 procpl 664 1140 0 1079 6 0 6 6 0 8 0 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 552 936 0 904 15 2 13 13 0 8 10 mcl64k 65536 11 0 11 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 39 0 39 1 0 1 1 0 8 1 mcl4k 4096 2817 0 2764 15 0 15 15 0 8 8 mcl2k 2048 554 0 550 4 0 4 4 0 8 3 mtagpl 96 10 0 7 1 0 1 1 0 8 0 mbufpl 256 7908 0 7731 75 55 20 75 0 8 8 bufpl 280 3690 0 119 256 0 256 256 0 8 0 anonpl 24 135467 0 132119 35 0 35 35 0 187 7 amapchunkpl 152 17731 0 17193 32 0 32 32 0 158 10 amappl16 200 2309 0 2279 5 0 5 5 0 8 2 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 112 0 102 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 0 1 1 0 8 1 amappl12 168 1295 0 1265 3 0 3 3 0 8 1 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 17 0 17 1 0 1 1 0 8 1 amappl9 144 243 0 243 1 0 1 1 0 8 1 amappl8 136 38 0 37 1 0 1 1 0 8 0 amappl7 128 101 0 91 1 0 1 1 0 8 0 amappl6 120 177 0 173 1 0 1 1 0 8 0 amappl5 112 127 0 121 1 0 1 1 0 8 0 amappl4 104 278 0 264 1 0 1 1 0 8 0 amappl3 96 2769 0 2666 3 0 3 3 0 8 0 amappl2 88 923 0 851 2 0 2 2 0 8 0 amappl1 80 9500 0 8949 14 0 14 14 0 8 1 amappl 88 4648 0 4467 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 0 1 0 1 1 0 8 0 uaddrrnd 24 683 0 653 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 683 0 653 1 0 1 1 0 8 0 vmmpekpl 168 6996 0 6968 2 0 2 2 0 8 0 vmmpepl 168 49416 0 47497 89 0 89 89 0 357 4 vmsppl 368 682 0 653 4 0 4 4 0 8 1 rwobjpl 40 18186 0 14874 34 0 34 34 0 8 0 pdppl 4096 1372 0 1306 104 38 66 80 0 8 0 pvpl 32 327087 0 317784 104 0 104 104 0 265 16 pmappl 216 682 0 653 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 443 0 93 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff80000148a880) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:586 dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002cd29440) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80687d3bf0,1,fffffd8007bfb548,ffff800033937250) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cb70178,ffff800033937250) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cb70178,ffff800033937250) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800033937250) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800033937250,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800033937250,ffff80002cd297a0,ffff80002cd296f0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002cd297a0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002cd297a0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7df116a9ed00, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff80000148a880) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:586 dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff800033937250) at dtclose+0xd9 sys/dev/dt/dt_dev.c:232 spec_close(ffff80002cd29440) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80687d3bf0,1,fffffd8007bfb548,ffff800033937250) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cb70178,ffff800033937250) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cb70178,ffff800033937250) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cb70178,ffff800033937250) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800033937250) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800033937250,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800033937250,ffff80002cd297a0,ffff80002cd296f0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002cd297a0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002cd297a0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:746 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7df116a9ed00, count: -12