syzbot


protection_fault: witness_checkorder (4)

Status: upstream: reported on 2024/09/09 12:11
Reported-by: syzbot+d55c37ff453fb5769fa3@syzkaller.appspotmail.com
First crash: 73d, last: 73d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: witness_checkorder (2) C 311 379d 495d 0/3 auto-obsoleted due to no activity on 2023/12/28 01:55
openbsd protection_fault: witness_checkorder 1 814d 814d 0/3 auto-obsoleted due to no activity on 2022/11/27 19:38
openbsd protection_fault: witness_checkorder (3) 1 262d 262d 0/3 auto-obsoleted due to no activity on 2024/06/02 14:39

Sample crash report:
kernel: protection fault trap, code=0
Stopped at      witness_checkorder+0x276:       movl    0x8(%r15),%r12d
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
witness_checkorder(ffff8000011f9418,9,0) at witness_checkorder+0x276 sys/kern/subr_witness.c:797
mtx_enter(ffff8000011f9408) at mtx_enter+0x47 sys/kern/kern_lock.c:238
klist_mutex_lock(ffff8000011f9408) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000011f94c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000011f94c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000011a5480) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff80000118a000) at bpfdetach+0xa6
if_detach(ffff80000118a000) at if_detach+0x14f sys/net/if.c:1195
tun_clone_destroy(ffff80000118a000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339
if_clone_destroy(ffff80002a14ab40) at if_clone_destroy+0x1d7 sys/net/if.c:1384
ifioctl(ffff800010fda7d8,80206979,ffff80002a14ab40,ffff800030d7f470) at ifioctl+0x5c5
sys_ioctl(ffff800030d7f470,ffff80002a14ad20,ffff80002a14ac70) at sys_ioctl+0x67c
syscall(ffff80002a14ad20) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a14ad20) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbdaea0300b0, count: -13
ddb{1}> show registers
rdi                                0
rsi                          0x40000    acpi_pdirpa+0x2be71
rbp               0xffff80002a14a800
rbx               0xffff800030d7f470
rdx               0xffff8000011a5d00
rcx               0xffff800030d7f470
rax               0xffff800029b7bff0
r8                                 0
r9                               0x1
r10                                0
r11                0x3ed56596756e09d
r12                                0
r13               0xdeafbeaddeafbead
r14               0xffff8000011f9418
r15               0x3631475220203843
rip               0xffffffff82e9faf6    witness_checkorder+0x276
cs                               0x8
rflags                       0x10246    __ALIGN_SIZE+0xf246
rsp               0xffff80002a14a750
ss                                 0
witness_checkorder+0x276:       movl    0x8(%r15),%r12d
ddb{1}> show proc
PROC (syz-executor) tid=234421 pid=95321 tcnt=4 stat=onproc
    flags process=0 proc=4000000<THREAD>
    runpri=32, usrpri=84, slppri=32, nice=20
    wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
    forw=0xffffffffffffffff, list=0xffff8000371c51f0,0xffff8000371c5998
    process=0xffff8000ffff5238 user=0xffff80002a145000, vmspace=0xfffffd80687d3a58
    estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 95294  441682  66313      0  2           0                syz-executor
 95294   90635  66313      0  3   0x4000000  biowait       syz-executor
 48893  205127  84722      0  2           0                syz-executor
 48893  196957  84722      0  3   0x4000080  fifow         syz-executor
 48441   69330  83954      0  2           0                syz-executor
 48441  425705  83954      0  2   0x4000000                syz-executor
 50267  407592  24594      0  7           0                syz-executor
 50267  315200  24594      0  3   0x4000080  fsleep        syz-executor
 92454  357951  41354      0  2           0                syz-executor
 92454  319470  41354      0  2   0x4000000                syz-executor
 92454   24210  41354      0  3   0x4000000  inode         syz-executor
 51174   26631  29959      0  3        0x80  nanoslp       syz-executor
 51174  475216  29959      0  3   0x4000080  fsleep        syz-executor
 51174  414635  29959      0  2   0x4000000                syz-executor
 51174  299410  29959      0  3   0x4000080  fsleep        syz-executor
 95321  517908  90364      0  3        0x80  nanoslp       syz-executor
*95321  234421  90364      0  7   0x4000000                syz-executor
 95321  324702  90364      0  2   0x4000000                syz-executor
 95321  500381  90364      0  3   0x4000080  fsleep        syz-executor
 24594  112173  19830      0  3        0x82  nanoslp       syz-executor
 90364  350522  19830      0  3        0x82  nanoslp       syz-executor
 84722  234152  19830      0  3        0x82  nanoslp       syz-executor
 67168    3414  19830      0  3        0x82  wait          syz-executor
 29959   48839  19830      0  3        0x82  nanoslp       syz-executor
 41354  364777  19830      0  3        0x82  nanoslp       syz-executor
 66313  114680  19830      0  3        0x82  nanoslp       syz-executor
 83954  196794  19830      0  3        0x82  nanoslp       syz-executor
  2159  246560      0      0  3     0x14280  nfsidl        nfsio
 11981  264994      0      0  3     0x14280  nfsidl        nfsio
 43738   26450      0      0  3     0x14280  nfsidl        nfsio
 71570  136939      0      0  3     0x14280  nfsidl        nfsio
 27641   20140      0      0  3     0x14280  nfsidl        nfsio
  2142   26673      0      0  3     0x14280  nfsidl        nfsio
 85257  119797      0      0  3     0x14280  nfsidl        nfsio
 19370   18408      0      0  3     0x14280  nfsidl        nfsio
 63922  483208      0      0  3     0x14280  nfsidl        nfsio
 46752   39199      0      0  3     0x14280  nfsidl        nfsio
 96807  324977      0      0  3     0x14280  nfsidl        nfsio
 18240  467152      0      0  3     0x14280  nfsidl        nfsio
 63522  362159      0      0  3     0x14280  nfsidl        nfsio
 86164  239951      0      0  3     0x14280  nfsidl        nfsio
 27147  154967      0      0  3     0x14280  nfsidl        nfsio
 90454  373192      0      0  3     0x14280  nfsidl        nfsio
 39799  109797      0      0  3     0x14280  nfsidl        nfsio
 25706  517104      0      0  3     0x14280  nfsidl        nfsio
 22754    5793      0      0  3     0x14280  nfsidl        nfsio
 97189  265598      0      0  3     0x14280  nfsidl        nfsio
  3366   50587      0      0  3     0x14200  bored         sosplice
  4540  166447      0      0  3     0x14200  acct          acct
 19830  177937  54572      0  3        0x82  kqread        syz-executor
 54572  287057  51903      0  3    0x10008a  sigsusp       ksh
 51903  147770  67300      0  3        0x98  kqread        sshd-session
 67300  435137  54674      0  3        0x92  kqread        sshd-session
 16377  403506      1      0  3    0x100083  ttyin         getty
 54674  454324      1      0  3        0x88  kqread        sshd
 29226   50908  79703     74  3   0x1100092  bpf           pflogd
 79703  236131      1      0  3        0x80  sbwait        pflogd
 34622  324578  14553     73  3   0x1100010  biowait       syslogd
 14553  371613      1      0  3    0x100082  sbwait        syslogd
  6538  186891      1      0  3    0x100080  kqread        resolvd
  2785  134172  84704     77  3    0x100092  kqread        dhcpleased
 61918  281157  84704     77  3    0x100092  kqread        dhcpleased
 84704  305915      1      0  3        0x80  kqread        dhcpleased
 37155  437351      0      0  3     0x14200  bored         smr
 89888  417376      0      0  2     0x14200                zerothread
 82256   35955      0      0  3     0x14200  aiodoned      aiodoned
  2766  168227      0      0  3     0x14200  syncer        update
 35115  250781      0      0  3     0x14200  cleaner       cleaner
 97220  388445      0      0  3     0x14200  reaper        reaper
 10911  419577      0      0  3     0x14200  pgdaemon      pagedaemon
 37440  507246      0      0  3     0x14200  bored         viomb
 46587  336119      0      0  3  0x40014200  acpi0         acpi0
 89783   32800      0      0  3  0x40014200                idle1
 59271   98043      0      0  3     0x14200  bored         softnet3
 80027  398174      0      0  3     0x14200  bored         softnet2
 43086  336710      0      0  3     0x14200  bored         softnet1
  8835  284398      0      0  3     0x14200  bored         softnet0
 46431  327649      0      0  3     0x14200  bored         systqmp
 41651  118100      0      0  3     0x14200  bored         systq
 60747  444661      0      0  3     0x14200  tmoslp        softclockmp
 28370  441781      0      0  3  0x40014200  tmoslp        softclock
 80898  455894      0      0  3  0x40014200                idle0
     1  506521      0      0  3     0x80082  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
Process 95294 (syz-executor) thread 0xffff80002a03e018 (90635)
exclusive rrwlock inode r = 0 (0xfffffd8072ab7708)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:149
#5  ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230
#6  ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393
#7  ufs_makeinode+0xcb sys/ufs/ufs/ufs_vnops.c:1728
#8  ufs_create+0x4e sys/ufs/ufs/ufs_vnops.c:147
#9  VOP_CREATE+0xff sys/kern/vfs_vops.c:103
#10 vn_open+0x491 sys/kern/vfs_vnops.c:116
#11 doopenat+0x31d sys/kern/vfs_syscalls.c:1123
#12 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#12 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#13 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd8072ab74e8)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  vn_open+0x1f4 sys/kern/vfs_vnops.c:107
#8  doopenat+0x31d sys/kern/vfs_syscalls.c:1123
#9  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#9  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#10 Xsyscall+0x128
Process 48441 (syz-executor) thread 0xffff8000ffff3bf8 (425705)
exclusive rrwlock inode r = 0 (0xfffffd8072ab7f88)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vfs_lookup+0x109 sys/kern/vfs_lookup.c:418
#6  namei+0x7aa sys/kern/vfs_lookup.c:250
#7  domkdirat+0x8b sys/kern/vfs_syscalls.c:3084
#8  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#8  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#9  Xsyscall+0x128
Process 50267 (syz-executor) thread 0xffff8000371c42c0 (407592)
shared rwlock vmmaplk r = 0 (0xfffffd80689d42a8)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1785
#2  uvm_fault_check+0x47 sys/uvm/uvm_fault.c:672
#3  uvm_fault+0x112 sys/uvm/uvm_fault.c:600
#4  upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
#5  usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
#6  recall_trap+0x8
Process 92454 (syz-executor) thread 0xffff800030d7ef60 (319470)
exclusive rwlock futex r = 0 (0xffffffff83457560)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  sys_futex+0x69 sys/kern/sys_futex.c:98
#2  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#2  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#3  Xsyscall+0x128
Process 92454 (syz-executor) thread 0xffff8000371c4548 (24210)
exclusive rrwlock inode r = 0 (0xfffffd807e579e68)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vget+0x2bd sys/kern/vfs_subr.c:676
#6  cache_lookup+0x36e sys/kern/vfs_cache.c:222
#7  ufs_lookup+0x218 sys/ufs/ufs/ufs_lookup.c:160
#8  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#10 namei+0x7aa sys/kern/vfs_lookup.c:250
#11 vn_open+0x13f sys/kern/vfs_vnops.c:140
#12 doopenat+0x31d sys/kern/vfs_syscalls.c:1123
#13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
Process 51174 (syz-executor) thread 0xffff8000ffff22a8 (414635)
exclusive rrwlock inode r = 0 (0xfffffd806f1ef818)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vget+0x2bd sys/kern/vfs_subr.c:676
#6  cache_lookup+0x36e sys/kern/vfs_cache.c:222
#7  ufs_lookup+0x218 sys/ufs/ufs/ufs_lookup.c:160
#8  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#10 namei+0x7aa sys/kern/vfs_lookup.c:250
#11 vn_open+0x13f sys/kern/vfs_vnops.c:140
#12 doopenat+0x31d sys/kern/vfs_syscalls.c:1123
#13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
Process 95321 (syz-executor) thread 0xffff800030d7f470 (234421)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83620708)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  __mp_acquire_count+0x58
#2  mi_switch+0x658 sys/kern/sched_bsd.c:460
#3  sleep_finish+0x219 sys/kern/kern_synch.c:416
#4  rw_enter+0x348 sys/kern/kern_rwlock.c:285
#5  lf_purgelocks+0x2f sys/kern/vfs_lockf.c:731
#6  vgonel+0x497 sys/kern/vfs_subr.c:1206
#7  vop_generic_revoke+0x3e6 sys/kern/vfs_default.c:128
#8  VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291
#9  vdevgone+0x17b
#10 bpfsdetach+0x117 sys/net/bpf.c:1802
#11 bpfdetach+0xa6
#12 if_detach+0x14f sys/net/if.c:1195
#13 tun_clone_destroy+0x2d6 sys/net/if_tun.c:339
#14 if_clone_destroy+0x1d7 sys/net/if.c:1384
#15 ifioctl+0x5c5
#16 sys_ioctl+0x67c
#17 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#17 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#18 Xsyscall+0x128
exclusive rwlock clonelk r = 0 (0xffffffff834268d0)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  if_clone_destroy+0x67
#2  ifioctl+0x5c5
#3  sys_ioctl+0x67c
#4  syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#4  syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
#5  Xsyscall+0x128
Process 95321 (syz-executor) thread 0xffff8000ffff3970 (324702)
exclusive rrwlock inode r = 0 (0xfffffd806ec3db40)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  vget+0x2bd sys/kern/vfs_subr.c:676
#6  cache_lookup+0x36e sys/kern/vfs_cache.c:222
#7  ufs_lookup+0x218 sys/ufs/ufs/ufs_lookup.c:160
#8  VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85
#9  vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566
#10 namei+0x7aa sys/kern/vfs_lookup.c:250
#11 vn_open+0x13f sys/kern/vfs_vnops.c:140
#12 doopenat+0x31d sys/kern/vfs_syscalls.c:1123
#13 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#13 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#14 Xsyscall+0x128
Process 34622 (syslogd) thread 0xffff8000ffffdbe8 (324578)
exclusive rrwlock inode r = 0 (0xfffffd806e4a02c0)
#0  witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0  witness_lock+0x5b8 sys/kern/subr_witness.c:1151
#1  rw_enter+0x41b sys/kern/kern_rwlock.c:309
#2  rrw_enter+0xbe sys/kern/kern_rwlock.c:464
#3  VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524
#4  vn_lock+0xa4 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0x152 sys/kern/vfs_syscalls.c:2926
#6  syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline]
#6  syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577
#7  Xsyscall+0x128
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10197  10108K   10423K 166960K     12154        0
            pcb    19     16K      18K 166960K       235        0
         rtable   208      6K       7K 166960K      1355        0
             pf    39     18K      22K 166960K       165        0
         ifaddr    40      7K       7K 166960K       186        0
        ifgroup    55      2K       2K 166960K       224        0
       counters    64     36K      36K 166960K       154        0
       ioctlops     0      0K       4K 166960K      1586        0
            iov     0      0K      12K 166960K        71        0
          mount     1      1K       1K 166960K         1        0
            log     0      0K       0K 166960K         4        0
         vnodes  1407     88K      89K 166960K      2277        0
      UFS quota     1     32K      32K 166960K         1        0
      UFS mount     5     36K      36K 166960K         5        0
            shm     2      1K       9K 166960K        13        0
         VM map     2      1K       1K 166960K         2        0
            sem    12      0K       1K 166960K        25        0
        dirhash    12      2K       2K 166960K        18        0
           ACPI  1690    195K     286K 166960K     12418        0
      file desc    18     65K      97K 166960K      1204        0
          sigio     0      0K       0K 166960K        17        0
           proc    71     91K     140K 166960K      1434        0
        subproc   104      6K       6K 166960K       510        0
    NFS srvsock     1      0K       0K 166960K         1        0
     NFS daemon     1     16K      16K 166960K         1        0
    ip_moptions     0      0K       0K 166960K       103        0
       in_multi    89      6K       7K 166960K       445        0
    ether_multi     1      0K       0K 166960K         1        0
            mrt     0      0K       0K 166960K         1        0
    ISOFS mount     1     32K      32K 166960K         1        0
  MSDOSFS mount     1     16K      16K 166960K         1        0
           ttys    73    334K     334K 166960K        73        0
           exec     0      0K       1K 166960K       910        0
     pfkey data     0      0K       0K 166960K         1        0
            tdb     3      0K       0K 166960K         3        0
        VM swap     8     62K      64K 166960K        10        0
       UVM amap   272     74K      99K 166960K     11113        0
       UVM aobj    21      3K       5K 166960K        22        0
     pinsyscall    43     86K     105K 166960K      3090        0
        memdesc     1      4K       4K 166960K         1        0
    crypto data     1      1K       1K 166960K         1        0
    ip6_options     0      0K       0K 166960K        38        0
            NDP    12      0K       1K 166960K       134        0
           temp    52   6817K    6885K 166960K     41719        0
         kqueue    15     24K      28K 166960K       121        0
      SYN cache     2     16K      16K 166960K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       24    0        0     1     0     1     1     0     8    0
rtpcb      120      152    0      149     1     0     1     1     0     8    0
rtentry    112      470    0      375     4     1     3     4     0     8    0
unpcb      144      610    0      590     8     6     2     4     0     8    1
syncache   336       12    0       12     5     5     0     1     0     8    0
tcpqe       32        5    0        5     2     2     0     1     0     8    0
tcpcb      808      310    0      304    12    11     1     8     0     8    0
arp        120       83    0       66     1     0     1     1     0     8    0
inpcb      336     1162    0     1151    22    20     2    12     0     8    0
nd6        136      124    0      100     1     0     1     1     0     8    0
pkpcb       40        6    0        6     4     4     0     1     0     8    0
kcovpl      48       39    0       31     1     0     1     1     0     8    0
ppxss      1168      10    0       10     3     3     0     1     0     8    0
pfstscr     40       17    0       17     4     4     0     1     0     8    0
pffrag     232        6    0        3     1     0     1     1     0   482    0
pffrnode    88        6    0        3     1     0     1     1     0     8    0
pffrent     40       94    0       91     1     0     1     1     0     8    0
pfosfp      40     1428    0     1005     5     0     5     5     0     8    0
pfosfpen   112     1428    0      714    21     0    21    21     0     8    0
pfrktable  1344       1    0        1     1     1     0     1     0     8    0
pfanchor   1288       1    0        0     1     0     1     1     0     8    0
pftag       88        3    0        3     1     1     0     1     0     8    0
pfstitem    24      127    0       99     1     0     1     1     0     8    0
pfstkey    128      159    0      129     2     0     2     2     0     8    0
pfstate    376      140    0      114     6     1     5     6     0     8    0
pfrule     1344      27    0       20     2     1     1     2     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1863    0     1478    36    11    25    29     0     8    0
art_table   32     1865    0     1478     5     1     4     4     0     8    0
art_node    16      469    0      386     1     0     1     1     0     8    0
sysvmsgpl   40        5    0        4     1     0     1     1     0     8    0
semapl     112       21    0       11     1     0     1     1     0     8    0
shmpl      112       19    0        1     1     0     1     1     0     8    0
dirhash    1024      21    0        4     3     0     3     3     0     8    0
dino2pl    256     2689    0     1126    98     0    98    98     0     8    0
ffsino     272     2689    0     1126   105     0   105   105     0     8    0
nchpl      144     3797    0     3208    63    38    25    63     0     8    0
uvmvnodes   80     3531    0        0    73     0    73    73     0     8    0
vnodes     216     3532    0        0   197     0   197   197     0     8    0
namei      1024   15154    0    15151     5     4     1     2     0     8    0
percpumem   16       91    0       45     1     0     1     1     0     8    0
kstatmem   264      114    0       90     2     0     2     2     0     8    0
scxspl     216    24266    0    24264    11    10     1     8     1     8    0
plimitpl   152      185    0      167     1     0     1     1     0     8    0
sigapl     424     1466    0     1394     9     0     9     9     0     8    0
futexpl     64     9639    0     9634     4     3     1     1     0     8    0
knotepl    120      560    0        0    17     0    17    17     0     8    0
kqueuepl   216      184    0      173     1     0     1     1     0     8    0
pipepl     320      415    0      388    11     8     3     8     0     8    0
fdescpl    496     1426    0     1394     6     1     5     6     0     8    0
filepl     152     7247    0     6994    35    24    11    16     0     8    1
lockfpl    104      326    0      323     2     1     1     2     0     8    0
lockfspl    48       90    0       87     1     0     1     1     0     8    0
sessionpl  144       57    0       48     1     0     1     1     0     8    0
pgrppl      48      102    0       85     1     0     1     1     0     8    0
ucredpl    104      780    0      767     1     0     1     1     0     8    0
zombiepl   144     1708    0     1707     2     1     1     1     0     8    0
processpl  1160    1466    0     1394     6     0     6     6     0     8    0
procpl     648     2522    0     2437     8     0     8     8     0     8    0
srpgc       96       14    0       14     3     2     1     1     0     8    1
sosppl     168        3    0        3     2     2     0     1     0     8    0
sockpl     664     1933    0     1899    28    24     4    14     0     8    1
mcl64k     65536      9    0        0     2     0     2     2     0     8    0
mcl16k     16384     10    0        0     2     0     2     2     0     8    0
mcl12k     12288      3    0        0     1     0     1     1     0     8    0
mcl9k      9216       2    0        0     1     0     1     1     0     8    0
mcl8k      8192      13    0        0     2     0     2     2     0     8    0
mcl4k      4096       6    0        0     1     0     1     1     0     8    0
mcl2k      2048     218    0        0    28     1    27    28     0     8    0
mtagpl      96        8    0        0     1     0     1     1     0     8    0
mbufpl     256      481    0        0    28     0    28    28     0     8    0
bufpl      280     8540    0     1478   505     0   505   505     0     8    0
anonpl      24   266685    0   259054   104    27    77   102     0   185   20
amapchunkpl 152   35516    0    34787    52    15    37    47     0   158    8
amappl16   200     5793    0     5676    32    20    12    19     0     8    0
amappl15   192        7    0        6     1     0     1     1     0     8    0
amappl14   184      195    0      183     1     0     1     1     0     8    0
amappl13   176       13    0       13     1     1     0     1     0     8    0
amappl12   168     2556    0     2524     4     2     2     3     0     8    0
amappl11   160       51    0       37     1     0     1     1     0     8    0
amappl10   152       12    0       12     1     1     0     1     0     8    0
amappl9    144      129    0      129     1     1     0     1     0     8    0
amappl8    136       18    0       15     1     0     1     1     0     8    0
amappl7    128      184    0      171     1     0     1     1     0     8    0
amappl6    120      473    0      472     1     0     1     1     0     8    0
amappl5    112      261    0      249     1     0     1     1     0     8    0
amappl4    104      425    0      404     1     0     1     1     0     8    0
amappl3     96     6320    0     6207     3     0     3     3     0     8    0
amappl2     88     1735    0     1654     3     0     3     3     0     8    0
amappl1     80    13789    0    13198    17     3    14    16     0     8    0
amappl      88    10457    0    10247     5     0     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma2048    2048       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72       21    0        1     1     0     1     1     0     8    0
uaddrrnd    24     1426    0     1394     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     1426    0     1394     1     0     1     1     0     8    0
vmmpekpl   168    14604    0    14550     4     0     4     4     0     8    0
vmmpepl    168    99618    0    97536   115    23    92   103     0   357    1
vmsppl     440     1425    0     1394     6     2     4     5     0     8    0
rwobjpl     56    33918    0    29283    66     0    66    66     0     8    0
pdppl      4096    2859    0     2788   153    82    71    87     0     8    0
pvpl        32    48585    0        0   395     3   392   392     0   265    0
pmappl     248     1425    0     1394     3     0     3     3     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112      511    0      140    12     0    12    12     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x27:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff834dbff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff83620500) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline]
__mp_lock(ffffffff83620500) at __mp_lock+0x192 sys/kern/kern_lock.c:144
intr_handler(ffff80002a0c69d0,ffff800000079f80) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x44 sys/dev/kcov.c:164
uvm_fault(fffffd80689d41b8,bd42363e000,0,1) at uvm_fault+0x1ed sys/uvm/uvm_fault.c:622
upageflttrap(ffff80002a0c6d60,bd42363e000) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188
usertrap(ffff80002a0c6d60) at usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436
recall_trap() at recall_trap+0x8
end of kernel
end trace frame: 0x7104a05767c0, count: -11
ddb{0}> machine ddbcpu 1
Stopped at      witness_checkorder+0x276:       movl    0x8(%r15),%r12d
ddb{1}> trace
witness_checkorder(ffff8000011f9418,9,0) at witness_checkorder+0x276 sys/kern/subr_witness.c:797
mtx_enter(ffff8000011f9408) at mtx_enter+0x47 sys/kern/kern_lock.c:238
klist_mutex_lock(ffff8000011f9408) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352
klist_invalidate(ffff8000011f94c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline]
klist_invalidate(ffff8000011f94c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283
bpfsdetach(ffff8000011a5480) at bpfsdetach+0x12f sys/net/bpf.c:1800
bpfdetach(ffff80000118a000) at bpfdetach+0xa6
if_detach(ffff80000118a000) at if_detach+0x14f sys/net/if.c:1195
tun_clone_destroy(ffff80000118a000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339
if_clone_destroy(ffff80002a14ab40) at if_clone_destroy+0x1d7 sys/net/if.c:1384
ifioctl(ffff800010fda7d8,80206979,ffff80002a14ab40,ffff800030d7f470) at ifioctl+0x5c5
sys_ioctl(ffff800030d7f470,ffff80002a14ad20,ffff80002a14ac70) at sys_ioctl+0x67c
syscall(ffff80002a14ad20) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline]
syscall(ffff80002a14ad20) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xbdaea0300b0, count: -13

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/09/09 12:10 openbsd 2402a19bf852 8f722c94 .config console log report [disk image] [bsd.gdb] [kernel image] ci-openbsd-multicore protection_fault: witness_checkorder
* Struck through repros no longer work on HEAD.