== raw serial-console capture (vm.sh log) ==

sendmail_submit: /etc/mail/aliases.db not present,  generating
sendmail_clientmqueue: /etc/mail/aliases.db not present,  generating
Starting cron.
Local package initialization:.

Sat Sep 26 18:40:17 UTC 2026


DragonFly/x86_64 (dfbsd) (ttyd0)



login: Sep 26 18:40:50 dfbsd kernel: vinum: loaded
vn0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
vn0: MBR magic not found; assume a COMPATIBILITY_SLICE (s0)
Sep 26 18:40:53 dfbsd kernel: vinumioctl: invalid ioctl from process 862 (vinum): 40906468
Sep 26 18:40:53 dfbsd kernel: vinumioctl: invalid ioctl from process 863 (vinum): 40906468
Sep 26 18:40:53 dfbsd kernel: vinum: drive d1 is up
Sep 26 18:40:54 dfbsd kernel: vinumioctl: invalid ioctl from process 866 (vinum): 40906468
Sep 26 18:40:54 dfbsd kernel: vinum: s0 is up
Sep 26 18:40:54 dfbsd kernel: vinum: s1 is up
Sep 26 18:40:54 dfbsd kernel: vinum: p0 is up
Sep 26 18:40:54 dfbsd kernel: vinum: v0 is up
Sep 26 18:40:55 dfbsd kernel: vinumioctl: invalid ioctl from process 867 (vinum): 40906468
Sep 26 18:40:58 dfbsd kernel: vinumioctl: invalid ioctl from process 870 (vinum): 40906468
Sep 26 18:40:58 dfbsd kernel: vinumioctl: invalid ioctl from process 871 (vinum): 40906468
dscheck(vn0s0a): b_bcount 10 is not on a sector boundary (ssize 512)
Sep 26 18:41:00 dfbsd kernel: vinumioctl: invalid ioctl from process 874 (vinum): 40906468
Sep 26 18:41:00 dfbsd kernel: vinumioctl: invalid ioctl from process 877 (ls): 40906468
Sep 26 18:41:00 dfbsd kernel: vinumioctl: invalid ioctl from process 877 (ls): 40906468
Sep 26 18:41:00 dfbsd kernel: vinumioctl: invalid ioctl from process 876 (vinum): 40906468
Sep 26 18:41:00 dfbsd kernel: vinumioctl: invalid ioctl from process 885 (dd): 40906468
Sep 26 18:41:00 dfbsd last message repeated 2 times
Sep 26 18:43:40 dfbsd kernel: vinumioctl: invalid ioctl from process 1060 (ls): 40906468
Sep 26 18:43:40 dfbsd last message repeated 2 times
Sep 26 18:43:40 dfbsd kernel: vinumioctl: invalid ioctl from process 1061 (vinum): 40906468
Sep 26 18:43:40 dfbsd kernel: vinumioctl: invalid ioctl from process 1063 (vinum): 40906468
dscheck(vn0s0a): b_bcount 64 is not on a sector boundary (ssize 512)
Sep 26 18:43:59 dfbsd kernel: vinumioctl: invalid ioctl from process 1091 (mk): 40906468
Sep 26 18:43:59 dfbsd kernel: vinumioctl: invalid ioctl from process 1092 (mk): 40906468
Sep 26 18:43:59 dfbsd kernel: vinumioctl: invalid ioctl from process 1094 (dd): 40906468
Sep 26 18:43:59 dfbsd last message repeated 2 times
Fatal user address access from kernel mode from dd at ffffffff8062d660


Fatal trap 12: page fault while in kernel mode
cpuid = 1; lapic id = 1
fault virtual address	= 0xa8
fault code		= supervisor read data, page not present
instruction pointer	= 0x8:0xffffffff8062d660
stack pointer	        = 0x10:0xfffff801181df710
frame pointer	        = 0x10:0xfffff801181df818
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1175
current thread          = pri 6 
kernel: type 12 trap, code=0

CPU1 stopping CPUs: 0x0000003d
 stopped
Stopped at      dev_dflags:     movq    0xa8(%rdi),%rax
db> 
== annotation ==
Reading a hand-mknod'ed vinum character device node (valid rawplex minor
0x50000000 AND composite minors) wedges/panics the kernel BEFORE the vinum
driver is reached.  Two independent captures, identical signature:

  Fatal user address access from kernel mode from dd at ffffffff8062d660

  Fatal trap 12: page fault while in kernel mode
  cpuid = 1; lapic id = 1
  fault virtual address	= 0xa8
  fault code		= supervisor read data, page not present
  instruction pointer	= 0x8:0xffffffff8062d660
  stack pointer	        = 0x10:0xfffff801181df710
  frame pointer	        = 0x10:0xfffff801181df818
  code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 0, def32 0, gran 1
  processor eflags	= interrupt enabled, resume, IOPL = 0
  current process	= 1175        (dd)
  current thread          = pri 6
  kernel: type 12 trap, code=0

  CPU1 stopping CPUs: 0x00004000
   stopped
  Stopped at      dev_dflags:     movq    0xa8(%rdi),%rax
  db>

rdi == 0: dev_dflags(NULL cdev).  The mknod'ed UFS char vnode never gets a
resolved v_rdev on DragonFly (nothing maps v_umajor/v_uminor -> a cdev), and
a read path dereferences it unchecked.  Consequence for DF-5063: composite
VINUM_PLEX_TYPE / VINUM_SD_TYPE minors cannot be delivered to
Plexno()/Sdno() at all on this system — the unvalidated table walks in
vinumutil.c are unreachable today (dead code), hence the Info severity.
(Root-gated; belongs to sys/vfs/devfs + sys/vfs/ufs, NOT vinum — reported
to the orchestrator as a cross-file observation.)