uvm_fault(0xfffffd806ef0c968, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff800001571000) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 sys/dev/dt/dt_dev.c:232 spec_close(ffff800035ff2cd0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805e39e640,81,fffffd80097fb548,ffff80002a297730) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806b930718,ffff80002a297730) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806b930718,ffff80002a297730) at closef+0x192 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a297730) at fdfree+0x116 sys/kern/kern_descrip.c:1182 exit1(ffff80002a297730,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a297730,ffff800035ff3040,ffff800035ff2f90) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800035ff3040) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800035ff3040) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a9554ca9d10, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806ef0c968, 0x0, 0, 1) -> e ddb{0}> trace dt_ioctl_record_stop(ffff800001571000) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 sys/dev/dt/dt_dev.c:232 spec_close(ffff800035ff2cd0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805e39e640,81,fffffd80097fb548,ffff80002a297730) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806b930718,ffff80002a297730) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806b930718,ffff80002a297730) at closef+0x192 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a297730) at fdfree+0x116 sys/kern/kern_descrip.c:1182 exit1(ffff80002a297730,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a297730,ffff800035ff3040,ffff800035ff2f90) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800035ff3040) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800035ff3040) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a9554ca9d10, count: -12 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff800035ff2c00 rbx 0xffffffff82fa9700 dtclose rdx 0 rcx 0xffff80002a297730 rax 0xffffffff837d3978 dt_prov_static r8 0x2 r9 0 r10 0xe46e452768343a5d r11 0xe9f9daa1d6a3bb9e r12 0xffffffff837d4118 dt_static_uvm_malloc r13 0 r14 0 r15 0xffff8000014ed800 rip 0xffffffff82fa9ae0 dt_ioctl_record_stop+0xf0 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff800035ff2bd0 ss 0x10 dt_ioctl_record_stop+0xf0: movq 0(%r14),%r12 ddb{0}> show proc PROC (syz-executor) tid=135833 pid=85464 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a297730 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a320a78,0xffff800037bf6038 process=0xffff80002f05dd38 user=0xffff800035fee000, vmspace=0xfffffd806ef0c968 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 8575 482233 93509 0 2 0 syz-executor 8575 197284 93509 0 2 0x4000000 syz-executor 8575 12162 93509 0 3 0x4000000 inode syz-executor 8575 216911 93509 0 3 0x4000000 inode syz-executor 44733 75320 62948 0 2 0 syz-executor 44733 222604 62948 0 3 0x4000080 fsleep syz-executor 77402 225208 75745 0 2 0 syz-executor 77402 95822 75745 0 3 0x4000080 kqread syz-executor 77402 274453 75745 0 3 0x4000080 sbwait syz-executor 81497 244970 6742 0 3 0x80 nanoslp syz-executor 81497 145705 6742 0 3 0x4000080 netcon syz-executor 81497 240946 6742 0 3 0x4000080 fsleep syz-executor 25577 173735 85288 0 3 0x80 nanoslp syz-executor 25577 369513 85288 0 3 0x4000080 kqsel syz-executor 25577 95864 85288 0 3 0x4000080 fsleep syz-executor 75745 429830 10935 0 3 0x82 nanoslp syz-executor 47933 157200 10935 0 2 0x2 syz-executor 6742 72542 10935 0 3 0x82 nanoslp syz-executor 73451 478985 10935 0 3 0x82 nanoslp syz-executor 93509 476443 10935 0 3 0x82 nanoslp syz-executor 3151 249305 10935 0 2 0x2 syz-executor 62948 130630 10935 0 3 0x82 nanoslp syz-executor 85288 453326 10935 0 3 0x82 nanoslp syz-executor 86357 416826 1 0 3 0x100083 ttyin getty 99199 41359 0 0 3 0x14200 bored sosplice 10935 494052 75259 0 3 0x82 kqread syz-executor 75259 432913 70627 0 3 0x10008a sigsusp ksh 70627 282233 26916 0 3 0x98 kqread sshd-session 26916 160636 82088 0 3 0x92 kqread sshd-session 82088 493627 1 0 3 0x88 kqread sshd 91723 248748 842 74 3 0x1100092 bpf pflogd 842 281217 1 0 3 0x80 sbwait pflogd 97324 290211 40109 73 3 0x1100090 kqread syslogd 40109 102701 1 0 3 0x100082 sbwait syslogd 27044 476470 1 0 3 0x100080 kqread resolvd 74491 174120 61726 77 3 0x100092 kqread dhcpleased 58172 60254 61726 77 3 0x100092 kqread dhcpleased 61726 66381 1 0 3 0x80 kqread dhcpleased 89145 336180 0 0 3 0x14200 bored smr 26407 228024 0 0 2 0x14200 zerothread 67886 371065 0 0 3 0x14200 aiodoned aiodoned 20493 418229 0 0 3 0x14200 syncer update 96099 7668 0 0 3 0x14200 cleaner cleaner 23463 135706 0 0 3 0x14200 reaper reaper 12608 341863 0 0 3 0x14200 pgdaemon pagedaemon 35604 305316 0 0 3 0x14200 bored viomb 56005 76983 0 0 3 0x40014200 acpi0 acpi0 77117 257035 0 0 7 0x40014200 idle1 57429 73320 0 0 3 0x14200 bored softnet3 96085 132869 0 0 3 0x14200 bored softnet2 1987 460970 0 0 3 0x14200 bored softnet1 68830 320339 0 0 3 0x14200 bored softnet0 86470 468820 0 0 3 0x14200 bored systqmp 48879 383625 0 0 3 0x14200 bored systq 7479 324335 0 0 3 0x14200 tmoslp softclockmp 99975 190853 0 0 3 0x40014200 tmoslp softclock 65691 109987 0 0 3 0x40014200 idle0 1 359384 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 8575 (syz-executor) thread 0xffff80002a2974a0 (197284) Process 8575 (syz-executor) thread 0xffff800037bf6028 (216911) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10256 11105K 15343K 166960K 19614 0 pcb 19 20K 25K 166960K 2016 0 rtable 239 20K 21K 166960K 1419 0 pf 39 18K 82K 166960K 561 0 ifaddr 50 11K 11K 166960K 347 0 ifgroup 57 2K 3K 166960K 595 0 sysctl 4 1K 9K 166960K 53 0 counters 70 37K 38K 166960K 590 0 ioctlops 0 0K 8K 166960K 3025 0 iov 0 0K 41K 166960K 952 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1577 99K 100K 166960K 7052 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 90 0 VM map 2 1K 1K 166960K 2 0 sem 28 60K 76K 166960K 114 0 dirhash 12 2K 2K 166960K 135 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 240K 166960K 6883 0 sigio 0 0K 0K 166960K 458 0 proc 76 103K 152K 166960K 1792 0 subproc 72 4K 4K 166960K 254 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1040 0 in_multi 87 6K 7K 166960K 604 0 ether_multi 1 0K 0K 166960K 93 0 mrt 3 0K 0K 166960K 56 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 1718 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 12 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 251 174K 177K 166960K 61778 0 UVM aobj 131 8K 8K 166960K 141 0 pinsyscall 41 82K 102K 166960K 8484 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 426 0 NDP 13 0K 2K 166960K 241 0 temp 88 8684K 76272K 166960K 344965 0 kqueue 14 22K 34K 166960K 1396 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 883 0 880 11 9 2 3 0 8 1 rtentry 176 519 0 433 6 1 5 5 0 8 0 unpcb 144 5121 0 5100 36 34 2 10 0 8 1 syncache 336 15 0 15 4 4 0 1 0 8 0 tcpcb 736 2372 0 2354 52 44 8 11 0 8 6 arp 128 62 0 52 1 0 1 1 0 8 0 inpcb 328 8914 0 8889 74 62 12 16 0 8 8 nd6 144 77 0 63 1 0 1 1 0 8 0 pkpcb 40 120 0 120 14 13 1 1 0 8 1 kcovpl 48 28 0 20 1 0 1 1 0 8 0 mppekey 1024 5 0 5 3 3 0 1 0 8 0 ppxss 1192 179 0 178 1 0 1 1 0 8 0 pppxif 1504 33 0 33 12 11 1 1 0 8 1 pffrag 232 123 0 113 1 0 1 1 0 482 0 pffrnode 88 69 0 60 1 0 1 1 0 8 0 pffrent 40 277 0 265 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 4 2 2 0 1 0 8 0 pfanchor 1288 2 0 1 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 440 0 301 1 0 1 1 0 8 0 pfstkey 128 440 0 301 5 0 5 5 0 8 0 pfstate 384 439 0 301 16 1 15 15 0 8 0 pfrule 1344 34 0 28 2 1 1 2 0 8 0 rttmr 136 15 0 15 11 10 1 1 0 8 1 art_heap8 4096 6 0 2 6 2 4 4 0 8 0 art_heap4 256 2209 0 1815 44 18 26 28 0 8 1 art_table 40 2215 0 1817 5 0 5 5 0 8 0 art_node 32 513 0 443 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 4 1 0 1 1 0 8 0 semupl 112 8 0 8 2 2 0 1 0 8 0 semapl 112 103 0 77 1 0 1 1 0 8 0 shmpl 112 138 0 10 4 0 4 4 0 8 0 dirhash 1024 100 0 83 3 0 3 3 0 8 0 dino2pl 256 13986 0 12432 99 1 98 98 0 8 0 ffsino 288 13986 0 12432 112 0 112 112 0 8 0 nchpl 144 23366 0 22766 65 39 26 65 0 8 0 rtmask 32 16 0 16 8 7 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 89287 0 89286 6 5 1 2 0 8 0 percpumem 16 310 0 260 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 1 0 1 0 8 0 kstatmem 264 360 0 330 3 0 3 3 0 8 0 acpiwqpl 32 3 0 3 1 0 1 1 1 8 1 scsiplug 72 27 0 27 12 12 0 1 0 8 0 scxspl 216 175769 0 175769 30 29 1 8 1 8 1 plimitpl 152 1903 0 1885 1 0 1 1 0 8 0 sigapl 424 7120 0 7071 9 2 7 9 0 8 0 knotepl 120 937 0 0 24 0 24 24 0 8 0 kqueuepl 224 2933 0 2920 31 30 1 9 0 8 0 pipepl 336 964 0 937 11 8 3 8 0 8 0 fdescpl 520 7059 0 7029 3 0 3 3 0 8 0 filepl 160 56340 0 56109 64 45 19 21 0 8 7 lockfpl 104 5051 0 5048 13 12 1 4 0 8 0 lockfspl 48 1636 0 1633 2 1 1 2 0 8 0 sessionpl 144 54 0 45 1 0 1 1 0 8 0 pgrppl 48 221 0 204 1 0 1 1 0 8 0 ucredpl 104 10833 0 10820 1 0 1 1 0 8 0 zombiepl 144 7536 0 7535 3 2 1 1 0 8 0 processpl 1240 7120 0 7071 6 1 5 6 0 8 0 procpl 656 17711 0 17652 8 1 7 8 0 8 0 sosppl 168 47 0 47 10 10 0 1 0 8 0 sockpl 728 15249 0 15200 129 115 14 27 0 8 8 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 129 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 110 0 0 10 2 8 9 0 8 0 mtagpl 96 69 0 0 2 0 2 2 0 8 0 mbufpl 256 1368 0 0 74 0 74 74 0 8 0 bufpl 280 78057 0 71915 441 1 440 440 0 8 0 anonpl 32 18657 0 0 150 0 150 150 0 246 0 amapchunkpl 152 223844 0 223157 110 77 33 42 0 158 2 amappl16 200 25786 0 25485 163 133 30 45 0 8 7 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 178 0 166 1 0 1 1 0 8 0 amappl13 176 9 0 9 3 3 0 1 0 8 0 amappl12 168 8044 0 8014 3 1 2 2 0 8 0 amappl11 160 81 0 67 1 0 1 1 0 8 0 amappl10 152 5 0 5 2 2 0 1 0 8 0 amappl9 144 249 0 248 2 1 1 1 0 8 0 amappl8 136 24 0 21 1 0 1 1 0 8 0 amappl7 128 165 0 152 1 0 1 1 0 8 0 amappl6 120 399 0 395 1 0 1 1 0 8 0 amappl5 112 222 0 211 1 0 1 1 0 8 0 amappl4 104 373 0 351 1 0 1 1 0 8 0 amappl3 96 45229 0 45119 4 0 4 4 0 8 0 amappl2 88 1113 0 1048 2 0 2 2 0 8 0 amappl1 80 38921 0 38328 17 2 15 16 0 8 0 amappl 88 59512 0 59336 5 0 5 5 0 92 0 dma65536 65536 4 0 4 3 3 0 1 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 3 0 3 3 3 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 9 0 9 2 2 0 1 0 8 0 dma128 128 266 0 266 10 10 0 1 0 8 0 dma64 64 14 0 14 9 8 1 1 0 8 1 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 21 0 20 1 0 1 1 0 8 0 aobjpl 72 140 0 10 3 0 3 3 0 8 0 uaddrrnd 24 7059 0 7029 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7059 0 7029 1 0 1 1 0 8 0 vmmpekpl 168 47335 0 47268 4 0 4 4 0 8 0 vmmpepl 168 443388 0 441129 187 73 114 128 0 357 2 vmsppl 480 7058 0 7029 5 0 5 5 0 8 0 rwobjpl 72 114333 0 107055 153 15 138 143 0 8 1 pdppl 4096 14126 0 14058 192 120 72 86 0 8 4 pvpl 32 25899 0 0 208 1 207 207 0 265 0 pmappl 256 7058 0 7029 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 647 0 215 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace dt_ioctl_record_stop(ffff800001571000) at dt_ioctl_record_stop+0xf0 sys/dev/dt/dt_dev.c:580 dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a297730) at dtclose+0x105 sys/dev/dt/dt_dev.c:232 spec_close(ffff800035ff2cd0) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805e39e640,81,fffffd80097fb548,ffff80002a297730) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806b930718,ffff80002a297730) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806b930718,ffff80002a297730) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806b930718,ffff80002a297730) at closef+0x192 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a297730) at fdfree+0x116 sys/kern/kern_descrip.c:1182 exit1(ffff80002a297730,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a297730,ffff800035ff3040,ffff800035ff2f90) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800035ff3040) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800035ff3040) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a9554ca9d10, count: -12 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu_x86.c:1218 sched_idle(ffff8000299ddff0) at sched_idle+0x4d8 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 acpicpu_idle() at acpicpu_idle+0x41e sys/dev/acpi/acpicpu_x86.c:1218 sched_idle(ffff8000299ddff0) at sched_idle+0x4d8 sys/kern/kern_sched.c:191 end trace frame: 0x0, count: -5