uvm_fault(0xfffffd806ba835d0, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff800001491b00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c96d080) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80664a7c10,1,fffffd8007bfb750,ffff80002a815c58) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806ba56710,ffff80002a815c58) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806ba56710,ffff80002a815c58) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a815c58) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a815c58,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a815c58,ffff80003c96d3f0,ffff80003c96d340) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c96d3f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c96d3f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71505d6f3980, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806ba835d0, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff800001491b00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c96d080) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80664a7c10,1,fffffd8007bfb750,ffff80002a815c58) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806ba56710,ffff80002a815c58) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806ba56710,ffff80002a815c58) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a815c58) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a815c58,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a815c58,ffff80003c96d3f0,ffff80003c96d340) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c96d3f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c96d3f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71505d6f3980, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003c96cfb0 rbx 0xffffffff81a6e1a0 dtclose rdx 0 rcx 0xffff80002a815c58 rax 0xffffffff837c63b8 dt_prov_syscall r8 0xffffffffffffffff r9 0 r10 0x68978f9907555b52 r11 0x967ba819a22e50 r12 0xffff80000004c600 r13 0 r14 0 r15 0xffff800001492f00 rip 0xffffffff81a6e520 dt_ioctl_record_stop+0xf0 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80003c96cf80 ss 0x10 dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 ddb> show proc PROC (syz-executor) tid=7912 pid=38231 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a815c58 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a814cf8,0xffffffff83910c68 process=0xffff80002cd1edc8 user=0xffff80003c968000, vmspace=0xfffffd806ba835d0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 14757 20661 3278 0 3 0x80 nanoslp syz-executor 14757 522116 3278 0 3 0x4000080 fifor syz-executor 92507 165224 56102 0 3 0x3010 suspend syz-executor 92507 69762 56102 0 2 0x4081010 syz-executor 92507 301762 56102 0 3 0x4081010 inode syz-executor 92507 296102 56102 0 3 0x4081010 inode syz-executor 81940 386803 11222 0 3 0x80 nanoslp syz-executor 81940 159102 11222 0 3 0x4000080 kqread syz-executor 81940 358653 11222 0 3 0x4000080 fsleep syz-executor 92840 170008 22796 0 3 0x80 nanoslp syz-executor 92840 162159 22796 0 3 0x4000080 wsevent_read syz-executor 81862 301861 0 0 3 0x14200 bored sosplice 56102 4079 93936 0 3 0x82 nanoslp syz-executor 98688 312038 93936 0 2 0x2 syz-executor 22796 257333 93936 0 3 0x82 nanoslp syz-executor 66357 67414 93936 0 2 0x2 syz-executor 3278 35359 93936 0 3 0x82 nanoslp syz-executor 11115 461876 93936 0 3 0x82 wait syz-executor 11222 499745 93936 0 3 0x82 nanoslp syz-executor 36536 140645 93936 0 3 0x82 nanoslp syz-executor 93936 288534 41738 0 3 0x82 kqread syz-executor 41738 463775 23950 0 3 0x10008a sigsusp ksh 23950 355006 19924 0 3 0x98 kqread sshd-session 19924 440535 32245 0 3 0x92 kqread sshd-session 19059 344070 1 0 3 0x100083 ttyin getty 32245 464591 1 0 3 0x88 kqread sshd 4367 225593 97496 73 2 0x1100010 syslogd 97496 433835 1 0 3 0x100082 sbwait syslogd 65049 182226 1 0 3 0x100080 kqread resolvd 98790 59015 40465 77 3 0x100092 kqread dhcpleased 71669 332073 40465 77 3 0x100092 kqread dhcpleased 40465 245230 1 0 3 0x80 kqread dhcpleased 59044 137495 0 0 3 0x14200 bored smr 83690 424740 0 0 3 0x14200 pgzero zerothread 57125 298746 0 0 3 0x14200 aiodoned aiodoned 11733 179787 0 0 3 0x14200 syncer update 75672 452763 0 0 3 0x14200 cleaner cleaner 94184 124469 0 0 3 0x14200 reaper reaper 16023 66644 0 0 3 0x14200 pgdaemon pagedaemon 58465 120383 0 0 3 0x14200 bored viomb 82036 365423 0 0 3 0x40014200 acpi0 acpi0 13642 86589 0 0 3 0x14200 bored softnet7 39685 268453 0 0 3 0x14200 bored softnet6 10974 175947 0 0 3 0x14200 bored softnet5 67191 469815 0 0 3 0x14200 bored softnet4 68085 92624 0 0 3 0x14200 bored softnet3 50774 265449 0 0 3 0x14200 bored softnet2 82164 376769 0 0 3 0x14200 bored softnet1 38535 185823 0 0 3 0x14200 bored softnet0 87579 298095 0 0 3 0x14200 bored systqmp 15861 348694 0 0 3 0x14200 bored systq 25173 7600 0 0 3 0x40014200 tmoslp softclock 23348 500458 0 0 3 0x40014200 idle0 1 423812 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10224 11421K 11629K 166960K 12237 0 pcb 17 16K 18K 166960K 194 0 rtable 189 6K 7K 166960K 330 0 pf 30 12K 19K 166960K 45 0 ifaddr 39 6K 8K 166960K 53 0 ifgroup 50 2K 2K 166960K 61 0 sysctl 4 1K 9K 166960K 9 0 counters 32 17K 17K 166960K 36 0 ioctlops 0 0K 4K 166960K 146 0 iov 0 0K 12K 166960K 15 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1409 89K 89K 166960K 1777 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 75 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 433 0 sigio 0 0K 0K 166960K 2 0 proc 60 59K 91K 166960K 497 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 41 0 in_multi 80 6K 7K 166960K 115 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 427 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 236 155K 167K 166960K 5393 0 UVM aobj 74 3K 3K 166960K 76 0 pinsyscall 38 76K 92K 166960K 1465 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 22 0 NDP 11 0K 2K 166960K 31 0 temp 43 8668K 8746K 166960K 7473 0 kqueue 14 22K 26K 166960K 67 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 60 0 56 1 0 1 1 0 8 0 rtentry 136 112 0 32 4 0 4 4 0 8 0 unpcb 144 343 0 324 6 0 6 6 0 8 5 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 207 0 203 7 0 7 7 0 8 6 arp 88 15 0 1 1 0 1 1 0 8 0 ipq 40 3 0 1 1 0 1 1 0 8 0 ipqe 40 4 0 2 1 0 1 1 0 8 0 inpcb 328 670 0 663 16 7 9 13 0 8 8 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 104 18 0 3 1 0 1 1 0 8 0 pkpcb 40 12 0 12 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 3 0 3 1 0 1 1 0 8 1 pfosfp 40 1 0 0 1 0 1 1 0 8 0 pfosfpen 112 1 0 0 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 540 0 183 30 0 30 30 0 8 6 art_table 40 542 0 183 5 0 5 5 0 8 0 art_node 32 112 0 45 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 4 1 0 1 1 0 8 1 semapl 112 73 0 63 1 0 1 1 0 8 0 shmpl 112 73 0 2 3 0 3 3 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2121 0 619 95 0 95 95 0 8 0 ffsino 256 2121 0 619 95 0 95 95 0 8 0 nchpl 144 2721 0 1033 63 0 63 63 0 8 0 uvmvnodes 80 2511 0 0 52 0 52 52 0 8 0 vnodes 216 2511 0 0 140 0 140 140 0 8 0 namei 1024 9762 0 9761 1 0 1 1 0 8 0 kstatmem 264 30 0 8 2 0 2 2 0 8 0 scxspl 216 9751 0 9751 8 0 8 8 1 8 8 plimitpl 152 170 0 153 1 0 1 1 0 8 0 sigapl 424 719 0 669 7 0 7 7 0 8 1 knotepl 120 14460 0 14411 10 0 10 10 0 8 5 kqueuepl 184 94 0 81 1 0 1 1 0 8 0 pipepl 304 117 0 90 3 0 3 3 0 8 0 fdescpl 448 697 0 668 5 0 5 5 0 8 1 filepl 120 4264 0 3971 14 0 14 14 0 8 4 lockfpl 104 327 0 323 2 0 2 2 0 8 1 lockfspl 48 164 0 160 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 36 0 20 1 0 1 1 0 8 0 ucredpl 104 370 0 357 1 0 1 1 0 8 0 zombiepl 144 673 0 669 1 0 1 1 0 8 0 processpl 1168 719 0 669 5 0 5 5 0 8 1 procpl 656 1150 0 1093 6 0 6 6 0 8 0 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 552 1095 0 1065 15 5 10 13 0 8 7 mcl64k 65536 19 0 19 1 0 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 10 0 10 1 0 1 1 0 8 1 mcl4k 4096 2807 0 2756 13 0 13 13 0 8 6 mcl2k 2048 686 0 682 3 0 3 3 0 8 2 mtagpl 96 92 0 10 3 0 3 3 0 8 0 mbufpl 256 7529 0 7261 26 0 26 26 0 8 7 bufpl 280 3605 0 117 250 0 250 250 0 8 0 anonpl 24 117681 0 113369 33 0 33 33 0 187 6 amapchunkpl 152 23489 0 22981 35 0 35 35 0 158 14 amappl16 200 1727 0 1630 6 0 6 6 0 8 0 amappl15 192 2 0 2 1 0 1 1 0 8 1 amappl14 184 111 0 100 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 0 1 1 0 8 1 amappl12 168 1327 0 1298 3 0 3 3 0 8 1 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 3 0 3 1 0 1 1 0 8 1 amappl9 144 256 0 256 1 0 1 1 0 8 1 amappl8 136 16 0 15 1 0 1 1 0 8 0 amappl7 128 98 0 88 1 0 1 1 0 8 0 amappl6 120 168 0 165 1 0 1 1 0 8 0 amappl5 112 124 0 116 1 0 1 1 0 8 0 amappl4 104 262 0 247 1 0 1 1 0 8 0 amappl3 96 3127 0 3012 4 0 4 4 0 8 1 amappl2 88 619 0 565 2 0 2 2 0 8 0 amappl1 80 9156 0 8607 14 0 14 14 0 8 2 amappl 88 4694 0 4524 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 75 0 2 2 0 2 2 0 8 0 uaddrrnd 24 697 0 668 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 697 0 668 1 0 1 1 0 8 0 vmmpekpl 168 6786 0 6759 2 0 2 2 0 8 0 vmmpepl 168 48811 0 46890 86 0 86 86 0 357 0 vmsppl 368 696 0 668 4 0 4 4 0 8 1 rwobjpl 40 17272 0 13763 36 0 36 36 0 8 0 pdppl 4096 1400 0 1336 94 28 66 80 0 8 2 pvpl 32 309279 0 299562 99 0 99 99 0 265 13 pmappl 216 696 0 668 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 391 0 28 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff800001491b00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c96d080) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80664a7c10,1,fffffd8007bfb750,ffff80002a815c58) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806ba56710,ffff80002a815c58) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806ba56710,ffff80002a815c58) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a815c58) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a815c58,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a815c58,ffff80003c96d3f0,ffff80003c96d340) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c96d3f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c96d3f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71505d6f3980, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff800001491b00) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(31e5f,1,2000,ffff80002a815c58) at dtclose+0xd5 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c96d080) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80664a7c10,1,fffffd8007bfb750,ffff80002a815c58) at VOP_CLOSE+0x12a sys/kern/vfs_vops.c:156 vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806ba56710,ffff80002a815c58) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806ba56710,ffff80002a815c58) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806ba56710,ffff80002a815c58) at closef+0x190 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a815c58) at fdfree+0x115 sys/kern/kern_descrip.c:1182 exit1(ffff80002a815c58,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a815c58,ffff80003c96d3f0,ffff80003c96d340) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c96d3f0) at syscall+0x97e mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c96d3f0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x71505d6f3980, count: -12