uvm_fault(0xfffffd806c98e5d0, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND dt_ioctl_record_stop(ffff80000159db00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800031904e80) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8071bc2360,1,fffffd8007bfd410,ffff80002a7abca0) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cae2718,ffff80002a7abca0) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cae2718,ffff80002a7abca0) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff80002a7abca0) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff80002a7abca0,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80002a7abca0,ffff8000319051e0,ffff800031905130) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff8000319051e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000319051e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2d0711d9d0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806c98e5d0, 0x0, 0, 1) -> e ddb> trace dt_ioctl_record_stop(ffff80000159db00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800031904e80) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8071bc2360,1,fffffd8007bfd410,ffff80002a7abca0) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cae2718,ffff80002a7abca0) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cae2718,ffff80002a7abca0) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff80002a7abca0) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff80002a7abca0,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80002a7abca0,ffff8000319051e0,ffff800031905130) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff8000319051e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000319051e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2d0711d9d0, count: -12 ddb> show registers rdi 0 rsi 0 rbp 0xffff800031904db0 rbx 0x1 rdx 0 rcx 0xffff80002a7abca0 rax 0xffffffff837ebbe0 dt_prov_static r8 0xffffffffffffffff r9 0 r10 0x4a19c764743a7a17 r11 0x3bc9038a8a4d93b0 r12 0 r13 0 r14 0 r15 0xffff80000168cf00 rip 0xffffffff816a0638 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff800031904d80 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb> show proc PROC (syz-executor) tid=209570 pid=75536 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a7abca0 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c9667f8,0xffffffff838809f0 process=0xffff80003c9cdb20 user=0xffff800031900000, vmspace=0xfffffd806c98e5d0 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 71514 155947 95591 0 3 0x80 fsleep syz-executor 71514 523155 95591 0 3 0x4000080 sbwait syz-executor 21813 149011 35242 0 3 0x80 fsleep syz-executor 21813 11541 35242 0 3 0x4000080 piperd syz-executor 21813 320907 35242 0 3 0x4000080 fsleep syz-executor 96493 471195 46038 0 3 0x80 fsleep syz-executor 96493 38032 46038 0 3 0x4000080 sbwait syz-executor 65000 192683 7439 0 3 0x80 fsleep syz-executor 65000 313476 7439 0 3 0x4000080 fifor syz-executor 33969 515664 77844 0 3 0x80 fsleep syz-executor 33969 49517 77844 0 3 0x4000080 sbwait syz-executor 46225 38361 48226 0 3 0x80 fsleep syz-executor 46225 232970 48226 0 3 0x4000080 kqsel syz-executor 93209 489224 0 0 3 0x14200 acct acct 48226 24350 5469 0 3 0x82 nanoslp syz-executor 16397 252011 0 0 3 0x14280 nfsidl nfsio 65126 411944 0 0 3 0x14280 nfsidl nfsio 37421 439564 0 0 3 0x14280 nfsidl nfsio 47010 97456 0 0 3 0x14280 nfsidl nfsio 65113 123637 0 0 3 0x14280 nfsidl nfsio 98199 62752 0 0 3 0x14280 nfsidl nfsio 19490 468960 0 0 3 0x14280 nfsidl nfsio 84438 490844 0 0 3 0x14280 nfsidl nfsio 21475 303320 0 0 3 0x14280 nfsidl nfsio 5492 281678 0 0 3 0x14280 nfsidl nfsio 17182 396540 0 0 3 0x14280 nfsidl nfsio 14998 325081 0 0 3 0x14280 nfsidl nfsio 5947 411432 0 0 3 0x14280 nfsidl nfsio 91537 503496 0 0 3 0x14280 nfsidl nfsio 46741 267423 0 0 3 0x14280 nfsidl nfsio 4420 78817 0 0 3 0x14280 nfsidl nfsio 14602 355287 0 0 3 0x14280 nfsidl nfsio 88874 66722 0 0 3 0x14280 nfsidl nfsio 57524 223545 0 0 3 0x14280 nfsidl nfsio 13385 518078 0 0 3 0x14280 nfsidl nfsio 25799 434097 1 0 3 0x100083 ttyin getty 41517 356523 5469 0 3 0x82 nanoslp syz-executor 35242 438181 5469 0 3 0x82 nanoslp syz-executor 95591 43941 5469 0 3 0x82 nanoslp syz-executor 77844 293106 5469 0 3 0x82 nanoslp syz-executor 7439 377691 5469 0 3 0x82 nanoslp syz-executor 46038 158727 5469 0 3 0x82 nanoslp syz-executor 39504 245859 5469 0 3 0x82 nanoslp syz-executor 5469 97711 25744 0 3 0x82 kqread syz-executor 25744 365490 73084 0 3 0x10008a sigsusp ksh 73084 108030 80249 0 3 0x98 kqread sshd-session 80249 392435 50730 0 3 0x92 kqread sshd-session 50730 185557 1 0 3 0x88 kqread sshd 62832 24264 95419 73 3 0x1100090 kqread syslogd 95419 513096 1 0 3 0x100082 sbwait syslogd 4585 448883 1 0 3 0x100080 kqread resolvd 39855 247498 12914 77 3 0x100092 kqread dhcpleased 58494 202731 12914 77 3 0x100092 kqread dhcpleased 12914 495240 1 0 3 0x80 kqread dhcpleased 16389 375483 0 0 3 0x14200 bored smr 29865 90117 0 0 3 0x14200 pgzero zerothread 23089 449524 0 0 3 0x14200 aiodoned aiodoned 21497 343346 0 0 3 0x14200 syncer update 5107 369524 0 0 3 0x14200 cleaner cleaner 2077 385127 0 0 3 0x14200 reaper reaper 85809 468875 0 0 3 0x14200 pgdaemon pagedaemon 95568 404502 0 0 3 0x14200 bored viomb 92860 501756 0 0 3 0x40014200 acpi0 acpi0 15997 79531 0 0 3 0x14200 bored softnet0 62931 491372 0 0 3 0x14200 bored systqmp 87676 403252 0 0 3 0x14200 bored systq 81500 117603 0 0 3 0x40014200 tmoslp softclock 18277 150412 0 0 3 0x40014200 idle0 1 186605 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11080 12143K 12461K 166960K 12534 0 pcb 17 12K 12K 166960K 64 0 rtable 167 6K 8K 166960K 429 0 pf 30 12K 16K 166960K 63 0 ifaddr 33 5K 7K 166960K 61 0 ifgroup 48 2K 2K 166960K 82 0 sysctl 4 1K 9K 166960K 9 0 counters 34 17K 18K 166960K 47 0 ioctlops 0 0K 4K 166960K 80 0 iov 0 0K 16K 166960K 9 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1341 84K 85K 166960K 1673 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 47 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 224K 166960K 416 0 sigio 0 0K 0K 166960K 2 0 proc 63 67K 91K 166960K 542 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 30 0 in_multi 66 4K 7K 166960K 125 0 ether_multi 1 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 473 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 159K 172K 166960K 5277 0 UVM aobj 8 4K 4K 166960K 12 0 pinsyscall 39 78K 94K 166960K 1516 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 24 0 NDP 11 0K 2K 166960K 39 0 temp 45 8668K 8733K 166960K 14532 0 kqueue 16 26K 30K 166960K 55 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 49 0 46 1 0 1 1 0 8 0 rtentry 136 126 0 59 4 0 4 4 0 8 0 unpcb 144 164 0 137 2 0 2 2 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 71 0 66 1 0 1 1 0 8 0 arp 96 20 0 8 1 0 1 1 0 8 0 inpcb 328 265 0 257 4 0 4 4 0 8 2 ip6q 72 2 0 1 1 0 1 1 0 8 0 ip6af 40 3 0 2 1 0 1 1 0 8 0 nd6 112 28 0 13 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1072 8 0 6 1 0 1 1 0 8 0 pppxif 1384 1 0 1 1 0 1 1 0 8 1 pfrktable 1344 4 0 4 1 0 1 1 0 8 1 pfanchor 1288 1 0 1 1 0 1 1 0 8 1 pfrule 1360 3 0 2 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 570 0 257 29 0 29 29 0 8 6 art_table 40 571 0 257 5 0 5 5 0 8 0 art_node 32 126 0 66 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 43 0 35 1 0 1 1 0 8 0 shmpl 112 8 0 3 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2125 0 622 95 0 95 95 0 8 0 ffsino 256 2125 0 622 95 0 95 95 0 8 0 nchpl 144 2664 0 966 64 0 64 64 0 8 0 rtmask 32 2 0 1 1 0 1 1 0 8 0 vnodes 216 2353 0 0 131 0 131 131 0 8 0 namei 1024 8754 0 8754 2 0 2 2 0 8 2 vmpool 808 1 0 1 1 0 1 1 0 8 1 pfiaddrpl 120 1 0 1 1 0 1 1 0 8 1 kstatmem 264 40 0 18 2 0 2 2 0 8 0 scxspl 216 8495 0 8495 8 0 8 8 1 8 8 plimitpl 152 59 0 43 1 0 1 1 0 8 0 sigapl 424 713 0 649 8 0 8 8 0 8 0 knotepl 120 12965 0 12906 17 6 11 17 0 8 8 kqueuepl 184 84 0 70 1 0 1 1 0 8 0 pipepl 304 133 0 104 3 0 3 3 0 8 0 fdescpl 448 679 0 649 5 0 5 5 0 8 1 filepl 120 3357 0 3129 9 0 9 9 0 8 1 lockfpl 104 101 0 98 1 0 1 1 0 8 0 lockfspl 48 47 0 44 1 0 1 1 0 8 0 sessionpl 144 24 0 16 1 0 1 1 0 8 0 pgrppl 48 34 0 18 1 0 1 1 0 8 0 ucredpl 104 620 0 609 1 0 1 1 0 8 0 zombiepl 144 651 0 649 1 0 1 1 0 8 0 processpl 1152 713 0 649 5 0 5 5 0 8 0 procpl 664 1105 0 1034 7 0 7 7 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 552 487 0 449 5 0 5 5 0 8 2 mcl64k 65536 7 0 6 1 0 1 1 0 8 0 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 7 0 7 1 0 1 1 0 8 1 mcl4k 4096 2789 0 2737 13 0 13 13 0 8 6 mcl2k 2048 514 0 511 1 0 1 1 0 8 0 mtagpl 96 17 0 10 1 0 1 1 0 8 0 mbufpl 256 7048 0 6918 16 0 16 16 0 8 5 bufpl 280 2760 0 118 189 0 189 189 0 8 0 anonpl 24 124200 0 121063 33 0 33 33 0 187 10 amapchunkpl 152 16339 0 15861 30 0 30 30 0 158 10 amappl16 200 1950 0 1919 5 0 5 5 0 8 3 amappl15 192 10 0 10 1 0 1 1 0 8 1 amappl14 184 8 0 8 1 0 1 1 0 8 1 amappl13 176 448 0 447 1 0 1 1 0 8 0 amappl12 168 1030 0 991 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 0 1 1 0 8 1 amappl10 152 111 0 101 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 0 1 1 0 8 1 amappl8 136 53 0 52 1 0 1 1 0 8 0 amappl7 128 83 0 82 1 0 1 1 0 8 0 amappl6 120 278 0 267 1 0 1 1 0 8 0 amappl5 112 69 0 61 1 0 1 1 0 8 0 amappl4 104 393 0 369 1 0 1 1 0 8 0 amappl3 96 2706 0 2616 3 0 3 3 0 8 0 amappl2 88 804 0 731 2 0 2 2 0 8 0 amappl1 80 10250 0 9704 13 0 13 13 0 8 0 amappl 88 4503 0 4342 4 0 4 4 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 8 0 8 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 4 1 0 1 1 0 8 0 uaddrrnd 24 679 0 649 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 679 0 649 1 0 1 1 0 8 0 vmmpekpl 168 7018 0 6983 2 0 2 2 0 8 0 vmmpepl 168 49945 0 48120 84 0 84 84 0 357 3 vmsppl 368 678 0 649 4 0 4 4 0 8 1 rwobjpl 40 16108 0 15164 11 0 11 11 0 8 0 pdppl 4096 1366 0 1300 98 30 68 80 0 8 2 pvpl 32 314563 0 305840 105 0 105 105 0 265 22 pmappl 216 679 0 650 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 372 0 30 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace dt_ioctl_record_stop(ffff80000159db00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800031904e80) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8071bc2360,1,fffffd8007bfd410,ffff80002a7abca0) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cae2718,ffff80002a7abca0) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cae2718,ffff80002a7abca0) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff80002a7abca0) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff80002a7abca0,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80002a7abca0,ffff8000319051e0,ffff800031905130) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff8000319051e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000319051e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2d0711d9d0, count: -12 ddb> machine ddbcpu 1 No such command ddb> trace dt_ioctl_record_stop(ffff80000159db00) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff80002a7abca0) at dtclose+0xd9 sys/dev/dt/dt_dev.c:239 spec_close(ffff800031904e80) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8071bc2360,1,fffffd8007bfd410,ffff80002a7abca0) at VOP_CLOSE+0x129 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806cae2718,ffff80002a7abca0) at vn_closefile+0x11d sys/kern/vfs_vnops.c:615 fdrop(fffffd806cae2718,ffff80002a7abca0) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd806cae2718,ffff80002a7abca0) at closef+0x190 sys/kern/kern_descrip.c:1264 fdfree(ffff80002a7abca0) at fdfree+0x115 sys/kern/kern_descrip.c:1195 exit1(ffff80002a7abca0,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80002a7abca0,ffff8000319051e0,ffff800031905130) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff8000319051e0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff8000319051e0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:775 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c2d0711d9d0, count: -12