uvm_fault(0xfffffd807982da20, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff8000014e1e00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800039d1b700) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806c25a2e8,81,fffffd8007bfd750,ffff800038111778) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c80ed38,ffff800038111778) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806c80ed38,ffff800038111778) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800038111778) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800038111778,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800038111778,ffff800039d1ba60,ffff800039d1b9b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800039d1ba60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800039d1ba60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7adb5b1fad50, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd807982da20, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff8000014e1e00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800039d1b700) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806c25a2e8,81,fffffd8007bfd750,ffff800038111778) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c80ed38,ffff800038111778) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806c80ed38,ffff800038111778) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800038111778) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800038111778,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800038111778,ffff800039d1ba60,ffff800039d1b9b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800039d1ba60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800039d1ba60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7adb5b1fad50, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff800039d1b630 rbx 0x1 rdx 0 rcx 0xffff800038111778 rax 0xffff800038111778 r8 0xffffffffffffffff r9 0 r10 0xaec78b4b6ad9dc0 r11 0x1884c8692c2b1181 r12 0 r13 0 r14 0 r15 0xffff8000014af600 rip 0xffffffff8189a858 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800039d1b600 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb> show proc PROC (syz-executor) tid=86077 pid=11603 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800038111778 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800038111248,0xffff80002f0f0a88 process=0xffff8000ffffa898 user=0xffff800039d16000, vmspace=0xfffffd807982da20 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 99532 147174 32590 0 2 0 syz-executor 99532 477373 32590 0 3 0x4000080 fsleep syz-executor 45333 406888 50546 0 2 0 syz-executor 45333 188111 50546 0 3 0x4000080 lockf syz-executor 45333 517512 50546 0 3 0x4000080 lockf syz-executor 45333 426380 50546 0 3 0x4000080 kqpoll syz-executor 72624 325757 37159 0 3 0x80 nanoslp syz-executor 72624 383611 37159 0 3 0x4000080 fsleep syz-executor 72624 325680 37159 0 3 0x4000080 kqsel syz-executor 72624 465825 37159 0 3 0x4000080 fsleep syz-executor 28565 6694 12760 0 3 0x80 nanoslp syz-executor 28565 514523 12760 0 3 0x4000080 fsleep syz-executor 28565 305048 12760 0 3 0x4000080 lockf syz-executor 14235 139197 40357 -1 3 0x90 nanoslp syz-executor 14235 26068 40357 -1 3 0x4000090 sbwait syz-executor 14235 100660 40357 -1 3 0x4000090 fsleep syz-executor 23294 331135 26421 0 3 0x80 nanoslp syz-executor 23294 498296 26421 0 3 0x4000080 pppxread syz-executor 23294 202366 26421 0 3 0x4000080 fsleep syz-executor 12760 452753 43073 0 3 0x82 nanoslp syz-executor 50546 73862 43073 0 3 0x82 nanoslp syz-executor 32590 305454 43073 0 3 0x82 nanoslp syz-executor 18213 157484 43073 0 3 0x82 nanoslp syz-executor 40357 301567 43073 0 3 0x82 nanoslp syz-executor 37159 48503 43073 0 3 0x82 nanoslp syz-executor 37595 244094 43073 0 3 0x82 wait syz-executor 26421 245500 43073 0 3 0x82 nanoslp syz-executor 43073 483734 41532 0 3 0x82 kqread syz-executor 41532 117806 97615 0 3 0x10008a sigsusp ksh 97615 450325 73277 0 3 0x98 kqread sshd-session 73277 501929 41578 0 3 0x92 kqread sshd-session 16526 145856 1 0 3 0x100083 ttyin getty 41578 345683 1 0 3 0x88 kqread sshd 67263 218732 36243 73 3 0x1100090 kqread syslogd 36243 67916 1 0 3 0x100082 sbwait syslogd 3719 94537 1 0 3 0x100080 kqread resolvd 18907 206222 28456 77 3 0x100092 kqread dhcpleased 90654 481580 28456 77 3 0x100092 kqread dhcpleased 28456 260268 1 0 3 0x80 kqread dhcpleased 64572 320432 0 0 3 0x14200 bored smr 86854 138850 0 0 2 0x14200 zerothread 41349 371194 0 0 3 0x14200 aiodoned aiodoned 85782 233358 0 0 3 0x14200 syncer update 66855 87905 0 0 3 0x14200 cleaner cleaner 91818 500994 0 0 3 0x14200 reaper reaper 67506 29506 0 0 3 0x14200 pgdaemon pagedaemon 26653 439319 0 0 3 0x14200 bored viomb 30952 72227 0 0 3 0x40014200 acpi0 acpi0 64397 383598 0 0 3 0x14200 bored softnet0 45951 498262 0 0 3 0x14200 bored systqmp 99992 251900 0 0 3 0x14200 bored systq 6988 330261 0 0 3 0x40014200 tmoslp softclock 17388 68792 0 0 3 0x40014200 idle0 1 333966 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10289 11216K 11267K 166960K 11551 0 pcb 17 12K 16K 166960K 72 0 rtable 217 6K 7K 166960K 364 0 pf 30 12K 67480K 166960K 40 0 ifaddr 41 7K 7K 166960K 49 0 ifgroup 50 2K 2K 166960K 61 0 sysctl 1 1K 9K 166960K 6 0 counters 32 17K 17K 166960K 37 0 ioctlops 0 0K 4K 166960K 114 0 iov 0 0K 12K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1409 89K 89K 166960K 1650 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 37 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 266 0 sigio 0 0K 0K 166960K 2 0 proc 59 59K 83K 166960K 485 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 8 0 in_multi 96 7K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 371 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 151K 160K 166960K 4083 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 39 78K 93K 166960K 1334 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 11 0K 2K 166960K 31 0 temp 40 8647K 8713K 166960K 5049 0 kqueue 15 24K 28K 166960K 51 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 44 0 41 1 0 1 1 0 8 0 rtentry 136 112 0 13 4 0 4 4 0 8 0 unpcb 144 160 0 72 4 0 4 4 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 43 0 37 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 147 0 134 2 0 2 2 0 8 0 nd6 112 24 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 4 0 4 1 0 1 1 0 8 1 pppxif 1384 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfrule 1344 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 459 0 47 29 0 29 29 0 8 1 art_table 40 460 0 47 5 0 5 5 0 8 0 art_node 32 112 0 23 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 35 0 25 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1880 0 374 95 0 95 95 0 8 0 ffsino 256 1880 0 374 95 0 95 95 0 8 0 nchpl 144 2227 0 533 63 0 63 63 0 8 0 vnodes 216 2112 0 0 118 0 118 118 0 8 0 namei 1024 7238 0 7238 2 0 2 2 0 8 2 kstatmem 264 30 0 8 2 0 2 2 0 8 0 scxspl 216 7047 0 7047 8 0 8 8 1 8 8 plimitpl 152 52 0 34 1 0 1 1 0 8 0 sigapl 424 543 0 500 6 0 6 6 0 8 1 knotepl 120 7851 0 7738 22 6 16 16 0 8 12 kqueuepl 184 100 0 86 3 0 3 3 0 8 2 pipepl 304 122 0 95 3 0 3 3 0 8 0 fdescpl 448 530 0 500 5 0 5 5 0 8 1 filepl 120 2757 0 2389 12 0 12 12 0 8 0 lockfpl 104 75 0 65 1 0 1 1 0 8 0 lockfspl 48 36 0 29 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 678 0 665 1 0 1 1 0 8 0 zombiepl 144 502 0 500 1 0 1 1 0 8 0 processpl 1152 543 0 500 4 0 4 4 0 8 0 procpl 664 740 0 684 5 0 5 5 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 552 387 0 283 8 0 8 8 0 8 0 mcl64k 65536 13 0 13 1 0 1 1 0 8 1 mcl8k 8192 5 0 5 1 0 1 1 0 8 1 mcl4k 4096 2600 0 2544 14 0 14 14 0 8 6 mcl2k 2048 352 0 352 2 0 2 2 0 8 2 mtagpl 96 5 0 5 1 0 1 1 0 8 1 mbufpl 256 5146 0 4983 12 0 12 12 0 8 0 bufpl 280 2550 0 121 174 0 174 174 0 8 0 anonpl 24 112387 0 109171 31 0 31 31 0 187 9 amapchunkpl 152 11981 0 11449 24 0 24 24 0 158 3 amappl16 200 2162 0 2138 5 0 5 5 0 8 3 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 9 0 9 1 0 1 1 0 8 1 amappl13 176 408 0 407 1 0 1 1 0 8 0 amappl12 168 870 0 831 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 0 1 1 0 8 1 amappl10 152 44 0 34 1 0 1 1 0 8 0 amappl9 144 243 0 243 1 0 1 1 0 8 1 amappl8 136 23 0 22 1 0 1 1 0 8 0 amappl7 128 83 0 81 1 0 1 1 0 8 0 amappl6 120 263 0 252 1 0 1 1 0 8 0 amappl5 112 76 0 68 1 0 1 1 0 8 0 amappl4 104 384 0 363 1 0 1 1 0 8 0 amappl3 96 1925 0 1829 3 0 3 3 0 8 0 amappl2 88 641 0 569 2 0 2 2 0 8 0 amappl1 80 9245 0 8708 12 0 12 12 0 8 1 amappl 88 3372 0 3193 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 530 0 500 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 530 0 500 1 0 1 1 0 8 0 vmmpekpl 168 5930 0 5898 2 0 2 2 0 8 0 vmmpepl 168 41384 0 39556 81 0 81 81 0 357 1 vmsppl 368 529 0 500 4 0 4 4 0 8 1 rwobjpl 40 14578 0 13628 10 0 10 10 0 8 0 pdppl 4096 1066 0 1000 98 32 66 80 0 8 0 pvpl 32 266619 0 257907 93 0 93 93 0 265 14 pmappl 216 529 0 500 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 367 0 32 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff8000014e1e00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800039d1b700) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806c25a2e8,81,fffffd8007bfd750,ffff800038111778) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c80ed38,ffff800038111778) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806c80ed38,ffff800038111778) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800038111778) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800038111778,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800038111778,ffff800039d1ba60,ffff800039d1b9b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800039d1ba60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800039d1ba60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7adb5b1fad50, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff8000014e1e00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff800038111778) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800039d1b700) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806c25a2e8,81,fffffd8007bfd750,ffff800038111778) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c80ed38,ffff800038111778) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c80ed38,ffff800038111778) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806c80ed38,ffff800038111778) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff800038111778) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff800038111778,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff800038111778,ffff800039d1ba60,ffff800039d1b9b0) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800039d1ba60) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff800039d1ba60) at syscall+0x962 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7adb5b1fad50, count: -12