uvm_fault(0xfffffd806c26c2e0, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff800001620d00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003692eff0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806ed2d2a0,81,fffffd8007bfb750,ffff80002a7f1c50) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd80708d52d0,ffff80002a7f1c50) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd80708d52d0,ffff80002a7f1c50) at closef+0x18d sys/kern/kern_descrip.c:1251 fdfree(ffff80002a7f1c50) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a7f1c50,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a7f1c50,ffff80003692f360,ffff80003692f2b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003692f360) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003692f360) at syscall+0x97e sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7155581a6f40, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c26c2e0, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff800001620d00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003692eff0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806ed2d2a0,81,fffffd8007bfb750,ffff80002a7f1c50) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd80708d52d0,ffff80002a7f1c50) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd80708d52d0,ffff80002a7f1c50) at closef+0x18d sys/kern/kern_descrip.c:1251 fdfree(ffff80002a7f1c50) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a7f1c50,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a7f1c50,ffff80003692f360,ffff80003692f2b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003692f360) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003692f360) at syscall+0x97e sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7155581a6f40, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003692ef20 rbx 0xffffffff8168f460 dtclose rdx 0 rcx 0xffffffff837ecff0 cpu_info_full_primary+0x1ff0 rax 0xffffffff8387d7b0 dt_prov_static r8 0x2 r9 0 r10 0x7551b0909b3bd64a r11 0xc5455f32f8c51983 r12 0xffffffff8387df50 dt_static_uvm_malloc r13 0 r14 0 r15 0xffff800001598b00 rip 0xffffffff8168f7e0 dt_ioctl_record_stop+0xf0 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80003692eef0 ss 0x10 dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 ddb> show proc PROC (syz-executor) tid=464451 pid=73563 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a7f1c50 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a7f07d0,0xffff80003c97cfa0 process=0xffff800035d168e0 user=0xffff80003692a000, vmspace=0xfffffd806c26c2e0 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 46756 342001 40416 0 2 0 syz-executor 15489 268965 63634 0 3 0x80 nanoslp syz-executor 15489 229786 63634 0 3 0x4000080 sbwait syz-executor 15489 77002 63634 0 3 0x4000080 fsleep syz-executor 19801 383763 1 0 3 0x100083 ttyin getty 1294 93620 70080 0 3 0x82 wait syz-executor 44386 405263 0 0 3 0x14200 acct acct 40416 503462 70080 0 2 0x2 syz-executor 30815 486480 70080 0 2 0x2 syz-executor 124 197379 0 0 3 0x14200 bored sosplice 24752 15765 0 0 3 0x14280 nfsidl nfsio 50265 37326 0 0 3 0x14280 nfsidl nfsio 11531 143941 0 0 3 0x14280 nfsidl nfsio 62590 41412 0 0 3 0x14280 nfsidl nfsio 23817 61864 0 0 3 0x14280 nfsidl nfsio 92335 261406 0 0 3 0x14280 nfsidl nfsio 97064 472462 0 0 3 0x14280 nfsidl nfsio 65499 174890 0 0 3 0x14280 nfsidl nfsio 94278 268175 0 0 3 0x14280 nfsidl nfsio 44229 386438 0 0 3 0x14280 nfsidl nfsio 3660 255980 0 0 3 0x14280 nfsidl nfsio 13555 182300 0 0 3 0x14280 nfsidl nfsio 37653 137967 0 0 3 0x14280 nfsidl nfsio 20548 12339 0 0 3 0x14280 nfsidl nfsio 43108 470407 0 0 3 0x14280 nfsidl nfsio 78634 153676 0 0 3 0x14280 nfsidl nfsio 77928 451811 0 0 3 0x14280 nfsidl nfsio 47423 281379 0 0 3 0x14280 nfsidl nfsio 30933 172733 0 0 3 0x14280 nfsidl nfsio 72070 115617 0 0 3 0x14280 nfsidl nfsio 40679 39698 70080 0 2 0x2 syz-executor 63634 206137 70080 0 3 0x82 nanoslp syz-executor 58991 242249 70080 0 2 0x10000082 syz-executor 63768 129799 70080 0 3 0x82 nanoslp syz-executor 86840 269861 70080 0 3 0x82 wait syz-executor 70080 349763 26370 0 2 0x2 syz-executor 26370 391502 90603 0 3 0x10008a sigsusp ksh 90603 11356 8344 0 3 0x98 kqread sshd-session 8344 253520 94106 0 3 0x92 kqread sshd-session 94106 434005 1 0 3 0x88 kqread sshd 89156 308633 70389 73 3 0x1100090 kqread syslogd 70389 333303 1 0 3 0x100082 sbwait syslogd 30052 408990 1 0 3 0x100080 kqread resolvd 50893 267025 64069 77 3 0x100092 kqread dhcpleased 92145 341508 64069 77 3 0x100092 kqread dhcpleased 64069 326920 1 0 3 0x80 kqread dhcpleased 81970 338540 0 0 3 0x14200 bored smr 71635 496722 0 0 2 0x14200 zerothread 71704 415922 0 0 3 0x14200 aiodoned aiodoned 68079 428902 0 0 3 0x14200 syncer update 13623 317141 0 0 3 0x14200 cleaner cleaner 8031 290571 0 0 3 0x14200 reaper reaper 56395 501143 0 0 3 0x14200 pgdaemon pagedaemon 90500 149028 0 0 3 0x14200 bored viomb 59126 113967 0 0 3 0x40014200 acpi0 acpi0 19652 493378 0 0 3 0x14200 bored softnet3 86826 341899 0 0 3 0x14200 bored softnet2 39956 161343 0 0 3 0x14200 bored softnet1 71506 208419 0 0 2 0x14200 softnet0 67956 471451 0 0 3 0x14200 bored systqmp 42836 513365 0 0 3 0x14200 bored systq 99094 328267 0 0 3 0x40014200 tmoslp softclock 40707 183988 0 0 3 0x40014200 idle0 1 171811 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10242 11297K 12308K 166960K 13963 0 pcb 17 14K 16K 166960K 327 0 rtable 198 9K 10K 166960K 630 0 pf 37 14K 22K 166960K 135 0 ifaddr 36 6K 7K 166960K 104 0 ifgroup 57 2K 2K 166960K 165 0 sysctl 4 1K 9K 166960K 88 0 counters 33 17K 18K 166960K 91 0 ioctlops 0 0K 4K 166960K 230 0 iov 0 0K 16K 166960K 112 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1520 96K 96K 166960K 2819 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 10K 166960K 31 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 38 0 dirhash 12 2K 3K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 97K 166960K 1401 0 sigio 0 0K 0K 166960K 34 0 proc 61 59K 124K 166960K 692 0 subproc 72 4K 4K 166960K 110 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 204 0 in_multi 74 5K 7K 166960K 180 0 ether_multi 1 0K 0K 166960K 11 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 534 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 200 150K 175K 166960K 13497 0 UVM aobj 82 7K 9K 166960K 87 0 pinsyscall 36 72K 96K 166960K 2551 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 85 0 NDP 12 0K 2K 166960K 74 0 temp 73 8687K 8791K 166960K 36138 0 kqueue 13 20K 33K 166960K 249 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 206 0 203 2 0 2 2 0 8 1 rtentry 136 175 0 93 4 0 4 4 0 8 0 unpcb 144 1086 0 1067 4 0 4 4 0 8 3 syncache 336 7 0 7 2 1 1 1 0 8 1 tcpqe 32 9 0 9 1 0 1 1 0 8 1 tcpcb 808 628 0 620 8 0 8 8 0 8 6 arp 88 30 0 14 1 0 1 1 0 8 0 ipq 40 7 0 0 1 0 1 1 0 8 0 ipqe 40 8 0 1 1 0 1 1 0 8 0 inpcb 328 1499 0 1487 8 1 7 7 0 8 5 ip6q 72 4 0 1 1 0 1 1 0 8 0 ip6af 40 5 0 2 1 0 1 1 0 8 0 nd6 104 38 0 19 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 1 1 1 0 8 1 kcovpl 48 12 0 4 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 0 1 1 0 8 1 ppxss 1072 46 0 46 2 1 1 1 0 8 1 pppxif 1384 4 0 4 1 0 1 1 0 8 1 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 2 1 0 1 1 0 8 1 pfstate 384 1 0 1 1 0 1 1 0 8 1 pfrule 1344 6 0 3 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 742 0 387 29 1 28 29 0 8 5 art_table 32 746 0 387 4 0 4 4 0 8 0 art_node 16 172 0 99 1 0 1 1 0 8 0 sysvmsgpl 40 16 0 10 2 1 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 33 0 23 1 0 1 1 0 8 0 shmpl 112 84 0 5 3 0 3 3 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 3993 0 2495 95 0 95 95 0 8 0 ffsino 248 3993 0 2495 95 0 95 95 0 8 0 nchpl 144 5963 0 4268 64 0 64 64 0 8 0 rtmask 32 8 0 8 2 1 1 1 0 8 1 uvmvnodes 80 4983 0 0 102 0 102 102 0 8 0 vnodes 216 4983 0 0 277 0 277 277 0 8 0 namei 1024 20605 0 20603 2 1 1 2 0 8 0 kstatmem 264 100 0 76 2 0 2 2 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 7 0 7 2 1 1 1 0 8 1 scxspl 216 19653 0 19653 10 2 8 8 1 8 8 plimitpl 152 251 0 234 1 0 1 1 0 8 0 sigapl 424 1697 0 1631 9 1 8 8 0 8 0 knotepl 120 50354 0 50306 25 14 11 17 0 8 8 kqueuepl 184 490 0 481 3 0 3 3 0 8 2 pipepl 296 292 0 264 3 0 3 3 0 8 0 fdescpl 440 1657 0 1630 5 1 4 5 0 8 0 filepl 120 11352 0 11134 14 2 12 12 0 8 2 lockfpl 104 358 0 356 1 0 1 1 0 8 0 lockfspl 48 150 0 148 1 0 1 1 0 8 0 sessionpl 144 29 0 21 1 0 1 1 0 8 0 pgrppl 48 65 0 49 1 0 1 1 0 8 0 ucredpl 104 1964 0 1950 1 0 1 1 0 8 0 zombiepl 144 1635 0 1631 1 0 1 1 0 8 0 processpl 1160 1697 0 1631 5 0 5 5 0 8 0 procpl 656 3502 0 3434 8 0 8 8 0 8 1 sosppl 168 11 0 11 1 0 1 1 0 8 1 sockpl 528 2839 0 2801 10 0 10 10 0 8 6 mcl64k 65536 35 0 33 2 1 1 1 0 8 0 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k 9216 3 0 3 2 1 1 1 0 8 1 mcl8k 8192 22 0 21 2 1 1 1 0 8 0 mcl4k 4096 4079 0 4017 16 7 9 15 0 8 1 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 1519 0 1503 4 1 3 3 0 8 0 mtagpl 96 157 0 29 4 0 4 4 0 8 0 mbufpl 256 22287 0 21988 21 0 21 21 0 8 2 bufpl 280 4966 0 124 346 0 346 346 0 8 0 anonpl 24 229228 0 226226 55 10 45 45 0 187 20 amapchunkpl 152 59576 0 59189 40 5 35 35 0 158 15 amappl16 200 4193 0 4164 31 20 11 15 0 8 8 amappl15 192 2 0 2 1 1 0 1 0 8 0 amappl14 184 120 0 110 1 0 1 1 0 8 0 amappl13 176 10 0 10 2 1 1 1 0 8 1 amappl12 168 2336 0 2310 3 1 2 3 0 8 0 amappl11 160 50 0 39 1 0 1 1 0 8 0 amappl10 152 14 0 14 2 1 1 1 0 8 1 amappl9 144 252 0 252 1 1 0 1 0 8 0 amappl8 136 22 0 21 1 0 1 1 0 8 0 amappl7 128 120 0 110 1 0 1 1 0 8 0 amappl6 120 219 0 216 1 0 1 1 0 8 0 amappl5 112 126 0 119 1 0 1 1 0 8 0 amappl4 104 306 0 289 1 0 1 1 0 8 0 amappl3 96 9272 0 9184 4 0 4 4 0 8 0 amappl2 88 687 0 630 2 0 2 2 0 8 0 amappl1 80 13743 0 13198 15 1 14 14 0 8 1 amappl 88 12524 0 12388 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 2 1 1 1 0 8 1 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 86 0 5 2 0 2 2 0 8 0 uaddrrnd 24 1657 0 1630 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1657 0 1630 1 0 1 1 0 8 0 vmmpekpl 168 13566 0 13514 3 0 3 3 0 8 0 vmmpepl 168 106476 0 104709 96 1 95 95 0 357 8 vmsppl 360 1656 0 1630 4 1 3 4 0 8 0 rwobjpl 32 32241 0 26347 48 0 48 48 0 8 0 pdppl 4096 3320 0 3260 116 50 66 82 0 8 6 pvpl 32 701002 0 692126 133 16 117 117 0 265 25 pmappl 216 1656 0 1630 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 312 0 65 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff800001620d00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003692eff0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806ed2d2a0,81,fffffd8007bfb750,ffff80002a7f1c50) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd80708d52d0,ffff80002a7f1c50) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd80708d52d0,ffff80002a7f1c50) at closef+0x18d sys/kern/kern_descrip.c:1251 fdfree(ffff80002a7f1c50) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a7f1c50,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a7f1c50,ffff80003692f360,ffff80003692f2b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003692f360) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003692f360) at syscall+0x97e sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7155581a6f40, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff800001620d00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a7f1c50) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003692eff0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806ed2d2a0,81,fffffd8007bfb750,ffff80002a7f1c50) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd80708d52d0,ffff80002a7f1c50) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd80708d52d0,ffff80002a7f1c50) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd80708d52d0,ffff80002a7f1c50) at closef+0x18d sys/kern/kern_descrip.c:1251 fdfree(ffff80002a7f1c50) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a7f1c50,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a7f1c50,ffff80003692f360,ffff80003692f2b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003692f360) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003692f360) at syscall+0x97e sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7155581a6f40, count: -12