uvm_fault(0xfffffd806cd36180, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff8000016b6680) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff80002a879460) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806cd23b50,1,fffffd8007ffd478,ffff80003c91a2b8) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c3c8000,ffff80003c91a2b8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c3c8000,ffff80003c91a2b8) at closef+0x190 sys/kern/kern_descrip.c:1265 fdfree(ffff80003c91a2b8) at fdfree+0x115 sys/kern/kern_descrip.c:1196 exit1(ffff80003c91a2b8,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80003c91a2b8,ffff80002a8797c0,ffff80002a879710) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a8797c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8797c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x757062eca090, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806cd36180, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff8000016b6680) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff80002a879460) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806cd23b50,1,fffffd8007ffd478,ffff80003c91a2b8) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c3c8000,ffff80003c91a2b8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c3c8000,ffff80003c91a2b8) at closef+0x190 sys/kern/kern_descrip.c:1265 fdfree(ffff80003c91a2b8) at fdfree+0x115 sys/kern/kern_descrip.c:1196 exit1(ffff80003c91a2b8,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80003c91a2b8,ffff80002a8797c0,ffff80002a879710) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a8797c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8797c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x757062eca090, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a879390 rbx 0x1 rdx 0 rcx 0xffff80003c91a2b8 rax 0xffffffff83831048 dt_prov_syscall r8 0xffffffffffffffff r9 0 r10 0x420c748dd6fa20f2 r11 0xaf266b5a31f41842 r12 0 r13 0 r14 0 r15 0xffff800001603200 rip 0xffffffff82827a08 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80002a879360 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb> show proc PROC (syz-executor) tid=464686 pid=75046 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c91a2b8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c91ba10,0xffff80003c91b258 process=0xffff80002a764008 user=0xffff80002a874000, vmspace=0xfffffd806cd36180 estcpu=36, cpticks=24, pctcpu=0.5, user=0, sys=19, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 17148 144018 11384 0 2 0 syz-executor 17148 61176 11384 0 3 0x4000080 fsleep syz-executor 4976 405348 53685 0 2 0 syz-executor 4976 279086 53685 0 3 0x4000080 fsleep syz-executor 4976 39132 53685 0 3 0x4000080 fsleep syz-executor 3289 306500 20194 60929 2 0x10 syz-executor 3289 145882 20194 60929 2 0x4000010 syz-executor 45574 510317 82434 0 2 0 syz-executor 45574 205580 82434 0 3 0x4000080 fsleep syz-executor 2012 46324 15339 0 2 0 syz-executor 2012 346872 15339 0 3 0x4000080 fsleep syz-executor 2012 175767 15339 0 3 0x4000080 fsleep syz-executor 2012 232598 15339 0 3 0x4000080 fsleep syz-executor 46824 348259 0 0 3 0x14200 acct acct 11384 20657 70719 0 2 0xc82 syz-executor 53685 442359 70719 0 2 0xc82 syz-executor 36383 146462 14090 27 3 0x1100092 kqread sshd-auth 14090 346191 79670 0 3 0x82 kqread sshd-session 20194 440298 70719 0 2 0xc82 syz-executor 15339 253527 70719 0 2 0xc82 syz-executor 82434 64885 70719 0 2 0xc82 syz-executor 67894 109907 70719 0 3 0x82 wait syz-executor 40341 273899 70719 0 2 0xc82 syz-executor 70719 444781 83299 0 3 0x82 wait syz-executor 83299 180335 1658 0 3 0x10008a sigsusp ksh 1658 273314 51002 0 3 0x98 kqread sshd-session 51002 430751 79670 0 3 0x92 kqread sshd-session 6540 182487 1 0 2 0x100083 getty 79670 113466 1 0 3 0x88 kqread sshd 69785 71902 89337 73 3 0x1100090 kqread syslogd 89337 510050 1 0 3 0x100082 sbwait syslogd 40940 215096 1 0 3 0x100080 kqread resolvd 65814 306720 79358 77 3 0x100092 kqread dhcpleased 74309 62155 79358 77 3 0x100092 kqread dhcpleased 79358 351613 1 0 3 0x80 kqread dhcpleased 74073 361762 0 0 3 0x14200 bored smr 90378 215629 0 0 2 0x14200 zerothread 65850 192432 0 0 3 0x14200 aiodoned aiodoned 97834 476092 0 0 3 0x14200 syncer update 30085 113912 0 0 3 0x14200 cleaner cleaner 80532 460136 0 0 3 0x14200 reaper reaper 37951 307737 0 0 3 0x14200 pgdaemon pagedaemon 62526 454722 0 0 3 0x14200 bored viomb 75767 129586 0 0 3 0x40014200 acpi0 acpi0 43220 193833 0 0 2 0x14200 softnet0 98385 395011 0 0 3 0x14200 bored systqmp 5214 265844 0 0 3 0x14200 bored systq 41277 132551 0 0 2 0x40014200 softclock 16433 492543 0 0 3 0x40014200 idle0 1 410360 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11077 12260K 13372K 166960K 16485 0 pcb 19 18K 19K 166960K 817 0 rtable 206 18K 19K 166960K 809 0 pf 31 13K 18K 166960K 232 0 ifaddr 32 6K 7K 166960K 146 0 ifgroup 43 1K 2K 166960K 216 0 sysctl 4 1K 9K 166960K 86 0 counters 32 17K 18K 166960K 120 0 ioctlops 0 0K 4K 166960K 463 0 iov 0 0K 28K 166960K 173 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1520 96K 96K 166960K 4084 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 35 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 231 0 dirhash 12 2K 3K 166960K 63 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 240K 166960K 2225 0 sigio 0 0K 0K 166960K 47 0 proc 63 67K 83K 166960K 867 0 subproc 63 3K 5K 166960K 198 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 623 0 in_multi 56 4K 7K 166960K 256 0 ether_multi 1 0K 0K 166960K 16 0 mrt 1 0K 0K 166960K 43 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 931 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 242 160K 181K 166960K 20795 0 UVM aobj 83 32K 32K 166960K 88 0 pinsyscall 41 82K 94K 166960K 3555 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 149 0 NDP 10 0K 2K 166960K 102 0 temp 79 9076K 9197K 166960K 90998 0 kqueue 16 26K 34K 166960K 416 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 351 0 348 3 0 3 3 0 8 2 rtentry 136 233 0 161 4 0 4 4 0 8 0 unpcb 144 1364 0 1339 4 0 4 4 0 8 3 syncache 336 12 0 12 2 1 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 967 0 959 7 0 7 7 0 8 6 arp 96 37 0 24 1 0 1 1 0 8 0 inpcb 328 3318 0 3305 27 17 10 17 0 8 8 nd6 112 50 0 35 1 0 1 1 0 8 0 pkpcb 40 18 0 18 1 0 1 1 0 8 1 kcovpl 48 22 0 15 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 67 0 67 2 1 1 1 0 8 1 pppxif 1384 6 0 6 1 0 1 1 0 8 1 pfstscr 40 5 0 5 1 0 1 1 0 8 1 pffrag 232 51 0 40 1 0 1 1 0 482 0 pffrnode 88 51 0 40 1 0 1 1 0 8 0 pffrent 40 93 0 82 1 0 1 1 0 8 0 pfosfp 40 3 0 0 1 0 1 1 0 8 0 pfosfpen 112 3 0 0 1 0 1 1 0 8 0 pfrktable 1344 9 0 7 1 0 1 1 0 8 0 pfsrclim 320 36 0 33 1 0 1 1 0 8 0 pfstlim 224 1 0 0 1 0 1 1 0 8 0 pfanchor 1288 5 0 4 1 0 1 1 0 8 0 pftag 88 4 0 4 1 0 1 1 0 8 1 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 6 0 0 1 0 1 1 0 8 0 pfstkey 128 12 0 6 1 0 1 1 0 8 0 pfstate 384 7 0 4 1 0 1 1 0 8 0 pfrule 1360 18 0 16 2 1 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 5 0 1 4 0 4 4 0 8 0 art_heap4 256 1079 0 781 31 2 29 31 0 8 8 art_table 40 1084 0 782 6 0 6 6 0 8 0 art_node 32 231 0 171 1 0 1 1 0 8 0 sysvmsgpl 40 21 0 12 2 1 1 1 0 8 0 semapl 112 227 0 217 1 0 1 1 0 8 0 shmpl 112 71 0 5 2 0 2 2 0 8 0 dirhash 1024 51 0 34 3 0 3 3 0 8 0 dino2pl 256 5701 0 4229 93 0 93 93 0 8 0 ffsino 256 5701 0 4229 93 0 93 93 0 8 0 nchpl 144 8664 0 6939 64 0 64 64 0 8 0 rtmask 32 12 0 12 2 1 1 1 0 8 1 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 32947 0 32947 2 1 1 2 0 8 1 vcpupl 3904 14 0 0 2 0 2 2 0 8 0 vmpool 808 14 0 0 2 0 2 2 0 8 0 kstatmem 264 140 0 120 2 0 2 2 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 7 0 7 1 0 1 1 0 8 1 scxspl 216 39832 0 39832 10 2 8 8 1 8 8 plimitpl 152 506 0 490 1 0 1 1 0 8 0 sigapl 424 2509 0 2464 9 1 8 8 0 8 2 knotepl 120 88039 0 87954 44 32 12 17 0 8 8 kqueuepl 184 827 0 814 9 3 6 6 0 8 5 pipepl 304 324 0 296 3 0 3 3 0 8 0 fdescpl 448 2468 0 2438 5 1 4 5 0 8 0 filepl 120 19198 0 18983 16 2 14 14 0 8 4 lockfpl 104 1352 0 1350 2 0 2 2 0 8 1 lockfspl 48 399 0 397 1 0 1 1 0 8 0 sessionpl 144 43 0 34 1 0 1 1 0 8 0 pgrppl 48 98 0 81 1 0 1 1 0 8 0 ucredpl 104 3185 0 3172 1 0 1 1 0 8 0 zombiepl 144 2467 0 2464 2 1 1 1 0 8 0 processpl 1152 2509 0 2464 5 0 5 5 0 8 1 procpl 664 5491 0 5438 7 0 7 7 0 8 1 sosppl 176 7 0 7 1 0 1 1 0 8 1 sockpl 552 5188 0 5147 23 12 11 16 0 8 8 mcl64k 65536 244 0 244 1 0 1 1 0 8 1 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 25 0 25 2 1 1 1 0 8 1 mcl4k 4096 5202 0 5144 14 5 9 12 0 8 1 mcl2k 2048 2225 0 2223 3 1 2 2 0 8 1 mtagpl 96 72 0 71 3 1 2 2 0 8 1 mbufpl 256 31798 0 31670 83 62 21 74 0 8 7 bufpl 280 13775 0 7560 445 0 445 445 0 8 0 anonpl 24 358480 0 354684 71 0 71 71 0 187 28 amapchunkpl 152 70823 0 70317 35 1 34 34 0 158 13 amappl16 200 7558 0 7522 40 16 24 28 0 8 17 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 496 0 495 1 0 1 1 0 8 0 amappl13 176 191 0 179 1 0 1 1 0 8 0 amappl12 168 2749 0 2718 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 155 0 145 1 0 1 1 0 8 0 amappl9 144 284 0 283 1 0 1 1 0 8 0 amappl8 136 127 0 126 1 0 1 1 0 8 0 amappl7 128 192 0 178 1 0 1 1 0 8 0 amappl6 120 221 0 220 1 0 1 1 0 8 0 amappl5 112 142 0 132 1 0 1 1 0 8 0 amappl4 104 332 0 315 1 0 1 1 0 8 0 amappl3 96 14636 0 14520 4 0 4 4 0 8 0 amappl2 88 715 0 647 2 0 2 2 0 8 0 amappl1 80 22102 0 21391 20 1 19 19 0 8 3 amappl 88 19510 0 19341 5 0 5 5 0 92 0 uvmvnodes 80 177 0 0 4 0 4 4 0 8 0 dma8192 8192 2 0 2 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 9 0 9 2 1 1 1 0 8 1 dma128 128 257 0 257 2 1 1 1 0 8 1 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 87 0 5 2 0 2 2 0 8 0 uaddrrnd 24 2468 0 2437 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2468 0 2437 1 0 1 1 0 8 0 vmmpekpl 168 19746 0 19689 3 0 3 3 0 8 0 vmmpepl 168 164271 0 162204 114 0 114 114 0 357 18 vmsppl 368 2467 0 2437 5 1 4 4 0 8 1 rwobjpl 40 43701 0 42382 19 0 19 19 0 8 0 pdppl 4096 4970 0 4888 143 61 82 84 0 8 0 pvpl 32 1071870 0 1061101 155 0 155 155 0 265 37 pmappl 216 2481 0 2437 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 502 0 139 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff8000016b6680) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff80002a879460) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806cd23b50,1,fffffd8007ffd478,ffff80003c91a2b8) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c3c8000,ffff80003c91a2b8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c3c8000,ffff80003c91a2b8) at closef+0x190 sys/kern/kern_descrip.c:1265 fdfree(ffff80003c91a2b8) at fdfree+0x115 sys/kern/kern_descrip.c:1196 exit1(ffff80003c91a2b8,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80003c91a2b8,ffff80002a8797c0,ffff80002a879710) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a8797c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8797c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x757062eca090, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff8000016b6680) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80003c91a2b8) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff80002a879460) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd806cd23b50,1,fffffd8007ffd478,ffff80003c91a2b8) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c3c8000,ffff80003c91a2b8) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806c3c8000,ffff80003c91a2b8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c3c8000,ffff80003c91a2b8) at closef+0x190 sys/kern/kern_descrip.c:1265 fdfree(ffff80003c91a2b8) at fdfree+0x115 sys/kern/kern_descrip.c:1196 exit1(ffff80003c91a2b8,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80003c91a2b8,ffff80002a8797c0,ffff80002a879710) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a8797c0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80002a8797c0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x757062eca090, count: -12