syzbot


protection_fault: witness_checkorder

Status: auto-obsoleted due to no activity on 2022/11/27 19:38
Reported-by: syzbot+8a8a5c17abe6a3f3f106@syzkaller.appspotmail.com
First crash: 901d, last: 901d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd protection_fault: witness_checkorder (2) C 311 466d 581d 0/3 auto-obsoleted due to no activity on 2023/12/28 01:55
openbsd protection_fault: witness_checkorder (4) 1 160d 160d 0/3 auto-obsoleted due to no activity on 2024/12/08 12:11
openbsd protection_fault: witness_checkorder (5) 3 5d07h 10d 0/3 upstream: reported on 2025/02/06 12:35
openbsd protection_fault: witness_checkorder (3) 1 348d 348d 0/3 auto-obsoleted due to no activity on 2024/06/02 14:39

Sample crash report:
΄΄΄΄kernel: protection fault trap, code=0
Stopped at      witness_checkorder+0x4f5:       movl    0x10(%r14),%ecx
ddb{1}> 
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
the kernel did not panic
ddb{1}> trace
witness_checkorder(fffffd806d58d400,9,0) at witness_checkorder+0x4f5 witness_lock_order_check sys/kern/subr_witness.c:2434 [inline]
witness_checkorder(fffffd806d58d400,9,0) at witness_checkorder+0x4f5 sys/kern/subr_witness.c:885
rw_enter(fffffd806d58d3f0,1) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250
rwsleep(fffffd806d58d530,fffffd806d58d3f0,118,ffffffff82616c93,0) at rwsleep+0x100 sys/kern/kern_synch.c:314
sosend(fffffd806d58d3e8,0,ffff80002478a118,0,0,0) at sosend+0x76e sys/kern/uipc_socket.c:614
fifo_write(ffff80002478a060) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281
VOP_WRITE(fffffd806c789e98,ffff80002478a118,3,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
ktrwriteraw(ffff80002127d508,fffffd806c789e98,fffffd807f7d7340,ffff80002478a1e0,ffff80002478a1c0) at ktrwriteraw+0x15f sys/kern/kern_ktrace.c:660
ktrgenio(ffff80002127d508,18,0,ffff800000d15350,c) at ktrgenio+0x292 ktrwrite2 sys/kern/kern_ktrace.c:624 [inline]
ktrgenio(ffff80002127d508,18,0,ffff800000d15350,c) at ktrgenio+0x292 sys/kern/kern_ktrace.c:259
dofilereadv(ffff80002127d508,18,ffff80002478a358,0,ffff80002478a440) at dofilereadv+0x2e3 sys/kern/sys_generic.c:263
sys_read(ffff80002127d508,ffff80002478a3f0,ffff80002478a440) at sys_read+0x83 sys/kern/sys_generic.c:167
syscall(ffff80002478a4c0) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002478a4c0) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2fb515740, count: -12
ddb{1}> show registers
rdi                       0xffffffff
rsi                       0xffffffff
rbp               0xffff800024789dd0
rbx                       0xffffffff
rdx                                0
rcx                              0xc
rax               0xfffffd8002fb0000
r8                0xffffffff81f63300    uvm_map_inentry_pc
r9                               0x1
r10               0x3160b35817dd43f1
r11               0x893bce4804bbb1f8
r12               0xfffffd8002f88300
r13               0xfffffd806d58d400
r14               0xdeafbeaddeafbead
r15               0xffffffff82adcc30    w_locklistdata+0x42820
rip               0xffffffff81974615    witness_checkorder+0x4f5
cs                               0x8
rflags                       0x10216    __ALIGN_SIZE+0xf216
rsp               0xffff800024789d20
ss                              0x10
witness_checkorder+0x4f5:       movl    0x10(%r14),%ecx
ddb{1}> show proc
PROC (syz-fuzzer) pid=205089 stat=onproc
    flags process=2<EXEC> proc=4000001<INKTR,THREAD>
    pri=24, usrpri=50, nice=20
    forw=0xffffffffffffffff, list=0xffff80002127ca88,0xffff80002127cfd8
    process=0xffff8000ffff71f0 user=0xffff800024785000, vmspace=0xfffffd806f281738
    estcpu=1, cpticks=5, pctcpu=0.6
    user=0, sys=0, intr=0
ddb{1}> ps
   PID     TID   PPID    UID  S       FLAGS  WAIT          COMMAND
 77844  358874  62268      0  3        0x80  nanoslp       syz-executor.3
 77844  126543  62268      0  2   0x4000081                syz-executor.3
 44629    3779  15731     -1  3        0x90  nanoslp       syz-executor.5
 44629  477068  15731     -1  3   0x4000090  fsleep        syz-executor.5
 44629  475224  15731     -1  3   0x4000090  fsleep        syz-executor.5
 44629  337249  15731     -1  3   0x4000090  fsleep        syz-executor.5
 52563   73219  54968      0  2        0x83                syz-executor.1
 19257  519978  54968      0  3        0x82  nanoslp       syz-executor.6
 36588  234280      0      0  3     0x14200  acct          acct
 15731  217252  54968      0  3        0x82  nanoslp       syz-executor.5
 61938   80424  54968      0  3        0x82  piperd        syz-executor.0
 56402   84180  54968      0  2        0x83                syz-executor.4
 62268  466732  54968      0  3        0x82  nanoslp       syz-executor.3
 59830   37832      0      0  3     0x14280  nfsidl        nfsio
 17399  318650      0      0  3     0x14280  nfsidl        nfsio
 56388   24497      0      0  3     0x14280  nfsidl        nfsio
 22611  436260      0      0  3     0x14280  nfsidl        nfsio
 89121   61183      0      0  3     0x14280  nfsidl        nfsio
 98943   74739      0      0  3     0x14280  nfsidl        nfsio
 23436  520709      0      0  3     0x14280  nfsidl        nfsio
 83196  307802      0      0  3     0x14280  nfsidl        nfsio
 40638  323391      0      0  3     0x14280  nfsidl        nfsio
 13315    8105      0      0  3     0x14280  nfsidl        nfsio
 61311  333643      0      0  3     0x14280  nfsidl        nfsio
 60065   18827      0      0  3     0x14280  nfsidl        nfsio
 35456   42203      0      0  3     0x14280  nfsidl        nfsio
 64331  387097      0      0  3     0x14280  nfsidl        nfsio
 73506  487844      0      0  3     0x14280  nfsidl        nfsio
 79609   27000      0      0  3     0x14280  nfsidl        nfsio
 29589   78340      0      0  3     0x14280  nfsidl        nfsio
 50079  351706      0      0  3     0x14280  nfsidl        nfsio
 70090  268288      0      0  3     0x14280  nfsidl        nfsio
 46122    7000      0      0  3     0x14280  nfsidl        nfsio
 13682  265477      1      0  3    0x100083  ttyin         getty
 35726  251849  54968      0  3        0x82  piperd        syz-executor.2
 97098  189359      0      0  3     0x14200  bored         sosplice
 54968  278269  52688      0  3        0x82  thrsleep      syz-fuzzer
 54968  252966  52688      0  3   0x4000082  nanoslp       syz-fuzzer
 54968   27142  52688      0  3   0x4000082  thrsleep      syz-fuzzer
 54968   58873  52688      0  3   0x4000082  wait          syz-fuzzer
 54968  109390  52688      0  2   0x4000002                syz-fuzzer
 54968   24034  52688      0  3   0x4000082  wait          syz-fuzzer
 54968  390782  52688      0  3   0x4000082  thrsleep      syz-fuzzer
 54968  212280  52688      0  3   0x4000082  thrsleep      syz-fuzzer
 54968  502383  52688      0  3   0x4000082  wait          syz-fuzzer
*54968  205089  52688      0  7   0x4000003                syz-fuzzer
 54968  503072  52688      0  3   0x4000082  thrsleep      syz-fuzzer
 54968  337869  52688      0  2   0x4000083                syz-fuzzer
 54968  310001  52688      0  3   0x4000082  wait          syz-fuzzer
 54968  343092  52688      0  3   0x4000082  wait          syz-fuzzer
 54968  103583  52688      0  3   0x4000082  wait          syz-fuzzer
 54968  296150  52688      0  3   0x4000082  wait          syz-fuzzer
 52688  253197  18360      0  3    0x10008a  sigsusp       ksh
 18360  303197  22397      0  3        0x9a  kqread        sshd
 22397  490187      1      0  3        0x88  kqread        sshd
 49262  325413  62526     74  3   0x1100092  bpf           pflogd
 62526  201278      1      0  3        0x80  netio         pflogd
 91134  242654  54448     73  3   0x1100010  ffs_fsync     syslogd
 54448  168930      1      0  3    0x100082  netio         syslogd
 65399   36679      1      0  3    0x100080  kqread        resolvd
 38192   15866  11411     77  3    0x100092  kqread        dhcpleased
 24498    2317  11411     77  3    0x100092  kqread        dhcpleased
 11411  481907      1      0  3        0x80  kqread        dhcpleased
 80568   75118      0      0  3     0x14200  bored         smr
 16125  149004      0      0  2     0x14200                zerothread
 34750  254683      0      0  3     0x14200  aiodoned      aiodoned
 72286  125253      0      0  3     0x14200  syncer        update
 66213  466056      0      0  3     0x14200  cleaner       cleaner
  1218  386473      0      0  7     0x14200                reaper
 97919  485743      0      0  3     0x14200  pgdaemon      pagedaemon
 89059  372890      0      0  3     0x14200  bored         viomb
 40266  213902      0      0  3  0x40014200  acpi0         acpi0
 67505   79465      0      0  3  0x40014200                idle1
  9494  168796      0      0  3     0x14200  bored         softnet
 74281  382360      0      0  3     0x14200  bored         softnet
 43608  384084      0      0  3     0x14200  bored         softnet
 88751  323402      0      0  3     0x14200  bored         softnet
 50723  520443      0      0  3     0x14200  bored         systqmp
 99131  468215      0      0  3     0x14200  bored         systq
 67093   42980      0      0  3  0x40014200  bored         softclock
 33186  229977      0      0  3  0x40014200                idle0
     1    2103      0      0  3        0x82  wait          init
     0       0     -1      0  3     0x10200  scheduler     swapper
ddb{1}> show all locks
CPU 0:
exclusive sched_lock &sched_lock r = 0 (0xffffffff82a31cf0)
#0  witness_lock+0x44d
#1  wakeup_n+0x37
#2  uvm_pmr_freepageq+0x292 sys/uvm/uvm_pmemrange.c:1352
#3  amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523
#4  uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
#5  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
#6  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
#7  reaper+0x19a sys/kern/kern_exit.c:448
#8  proc_trampoline+0x1c
exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff82b9f2a8)
#0  witness_lock+0x44d
#1  mtx_enter_try+0x100
#2  mtx_enter+0x4b sys/kern/kern_lock.c:266
#3  uvm_pmr_freepageq+0xcc sys/uvm/uvm_pmemrange.c:1333
#4  amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523
#5  uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
#6  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
#7  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
#8  reaper+0x19a sys/kern/kern_exit.c:448
#9  proc_trampoline+0x1c
Process 54968 (syz-fuzzer) thread 0xffff80002127d508 (205089)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82b6b108)
#0  witness_lock+0x44d
#1  __mp_acquire_count+0x48 sys/kern/kern_lock.c:227
#2  mi_switch+0x3bb sys/kern/sched_bsd.c:415
#3  sleep_finish+0x180 sys/kern/kern_synch.c:417
#4  rwsleep+0xd5 sys/kern/kern_synch.c:311
#5  sosend+0x76e sys/kern/uipc_socket.c:614
#6  fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281
#7  VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
#8  ktrwriteraw+0x15f sys/kern/kern_ktrace.c:660
#9  ktrgenio+0x292 ktrwrite2 sys/kern/kern_ktrace.c:624 [inline]
#9  ktrgenio+0x292 sys/kern/kern_ktrace.c:259
#10 dofilereadv+0x2e3 sys/kern/sys_generic.c:263
#11 sys_read+0x83 sys/kern/sys_generic.c:167
#12 syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#12 syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
#13 Xsyscall+0x128
Process 91134 (syslogd) thread 0xffff800021279cf0 (242654)
exclusive rrwlock inode r = 0 (0xfffffd806e7d24e0)
#0  witness_lock+0x44d
#1  rw_enter+0x3e1 sys/kern/kern_rwlock.c:310
#2  rrw_enter+0x8b sys/kern/kern_rwlock.c:465
#3  VOP_LOCK+0x87 sys/kern/vfs_vops.c:518
#4  vn_lock+0x84 sys/kern/vfs_vnops.c:564
#5  sys_fsync+0xf5 sys/kern/vfs_syscalls.c:2935
#6  syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline]
#6  syscall+0x435 sys/arch/amd64/amd64/trap.c:585
#7  Xsyscall+0x128
Process 1218 (reaper) thread 0xffff800021233508 (386473)
exclusive rwlock amaplk r = 0 (0xfffffd8067a32d70)
#0  witness_lock+0x44d
#1  amap_unref+0x2b sys/uvm/uvm_amap.c:1363
#2  uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
#3  uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
#4  uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
#5  reaper+0x19a sys/kern/kern_exit.c:448
#6  proc_trampoline+0x1c
ddb{1}> show malloc
           Type InUse  MemUse  HighUse   Limit  Requests Type Lim
         devbuf 10225   6563K    7002K  78643K     16792        0
            pcb    13     14K      16K  78643K       656        0
         rtable   177     15K      21K  78643K       994        0
         ifaddr    88     17K      20K  78643K       427        0
         sysctl     2      0K       0K  78643K         2        0
       counters    54     35K      35K  78643K       144        0
       ioctlops     0      0K       4K  78643K      2954        0
            iov     0      0K      32K  78643K       777        0
          mount     1      1K       1K  78643K         1        0
            log     0      0K       0K  78643K         4        0
         vnodes  1398     87K      88K  78643K      3286        0
      UFS quota     1     32K      32K  78643K         1        0
      UFS mount     5     36K      36K  78643K         5        0
            shm     2      1K       9K  78643K        45        0
         VM map     2      1K       1K  78643K         2        0
            sem    12      1K       1K  78643K       366        0
        dirhash    12      2K       2K  78643K        12        0
           ACPI  1697    195K     286K  78643K     12548        0
      file desc    11     37K      85K  78643K      3865        0
          sigio     0      0K       0K  78643K        64        0
           proc    71    103K     140K  78643K      1073        0
        subproc    91      5K       6K  78643K       273        0
    NFS srvsock     1      0K       0K  78643K         1        0
     NFS daemon     1     16K      16K  78643K         1        0
    ip_moptions     0      0K       0K  78643K       216        0
       in_multi    64      4K       6K  78643K       314        0
    ether_multi     1      0K       0K  78643K        12        0
            mrt     1      0K       0K  78643K         8        0
    ISOFS mount     1     32K      32K  78643K         1        0
  MSDOSFS mount     1     16K      16K  78643K         1        0
           ttys   211    943K     943K  78643K       211        0
           exec     0      0K       2K  78643K      1555        0
     pfkey data     0      0K       1K  78643K         5        0
            tdb     3      0K       0K  78643K         3        0
        pagedep     1      8K       8K  78643K         1        0
       inodedep     1     32K      32K  78643K         1        0
         newblk     1      0K       0K  78643K         1        0
        VM swap     8     62K      62K  78643K         8        0
       UVM amap   312    305K     314K  78643K     24686        0
       UVM aobj   131      4K       4K  78643K       134        0
        memdesc     1      4K       4K  78643K         1        0
    crypto data     1      1K       1K  78643K         1        0
    ip6_options     0      0K       0K  78643K       123        0
            NDP    14      0K       2K  78643K       100        0
           temp   145   4722K    5746K  78643K     44384        0
         kqueue    12     18K      26K  78643K       298        0
      SYN cache     2     16K      16K  78643K         2        0
ddb{1}> show all pools
Name      Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache    128       22    0        0     1     0     1     1     0     8    0
rtpcb      120      440    0      437    10     5     5     5     0     8    4
rtentry    112      285    0      213     4     0     4     4     0     8    0
unpcb      144     2403    0     2386    32    23     9    10     0     8    8
syncache   296       33    0       33     7     6     1     1     0     8    1
tcpqe       32      551    0      551     5     5     0     2     0     8    0
tcpcb      768     5783    0     5743   140   130    10    29     0     8    5
arp        120       46    0       33     1     0     1     1     0     8    0
inpcb      368     8013    0     8004    75    65    10    19     0     8    8
nd6         48       67    0       52     1     0     1     1     0     8    0
pkpcb       40       21    0       21     3     3     0     1     0     8    0
kcovpl      48       21    0       14     1     0     1     1     0     8    0
ppxss      1256      24    0       24     6     5     1     1     0     8    1
pfstscr     40       77    0       77     4     4     0     1     0     8    0
pffrag     232       44    0       40     3     2     1     1     0   482    0
pffrnode    88       44    0       40     3     2     1     1     0     8    0
pffrent     40       94    0       90     3     2     1     1     0     8    0
pfosfp      40     1431    0     1007     5     0     5     5     0     8    0
pfosfpen   112     1431    0      716    21     0    21    21     0     8    0
pfrktable  1344      63    0       63     2     2     0     2     0     8    0
pfanchor   1280     290    0       57    20     0    20    20     0     8    0
pftag       88        7    0        5     1     0     1     1     0     8    0
pfstitem    24       50    0       48     1     0     1     1     0     8    0
pfstkey    120      204    0      202     1     0     1     1     0     8    0
pfstate    336      127    0      125     3     2     1     3     0     8    0
pfrule     1360     175    0      174     4     3     1     3     0     8    0
rttmr      136        2    0        2     1     1     0     1     0     8    0
art_heap8  4096       2    0        0     2     0     2     2     0     8    0
art_heap4  256     1296    0      983    37    12    25    30     0     8    2
art_table   32     1298    0      983     4     0     4     4     0     8    0
art_node    16      284    0      222     1     0     1     1     0     8    0
sysvmsgpl   40        5    0        0     1     0     1     1     0     8    0
semupl     112        3    0        3     1     1     0     1     0     8    0
semapl     112      364    0      354     1     0     1     1     0     8    0
shmpl      112      131    0        3     4     0     4     4     0     8    0
dirhash    1024      17    0        0     3     0     3     3     0     8    0
dino2pl    256     6597    0     5153    91     0    91    91     0     8    0
ffsino     272     6597    0     5153    97     0    97    97     0     8    0
nchpl      144    11677    0    10036    63     0    63    63     0     8    0
rtmask      32        3    0        3     1     0     1     1     0     8    1
uvmvnodes   80     5926    0        0   121     0   121   121     0     8    0
vnodes     216     5926    0        0   330     0   330   330     0     8    0
namei      1024   41843    0    41843     3     2     1     2     0     8    1
percpumem   16       84    0       45     1     0     1     1     0     8    0
vcpupl     2048      79    0        0    10     0    10    10     0     8    0
vmpool     568       83    0        4     6     0     6     6     0     8    0
pfiaddrpl  120       25    0       25     1     1     0     1     0     8    0
kstatmem   264      110    0       82     3     0     3     3     0     8    0
scxspl     216    31855    0    31854    13    12     1     8     0     8    0
plimitpl   152      508    0      494     1     0     1     1     0     8    0
sigapl     424     4166    0     4102    10     2     8     8     0     8    0
futexpl     64    33579    0    33576     1     0     1     1     0     8    0
knotepl    120      482    0        0    13     0    13    13     0     8    0
kqueuepl   216      707    0      699    13     8     5     5     0     8    4
pipepl     320      835    0      810    24    18     6     8     0     8    3
fdescpl    496     4127    0     4103     6     2     4     5     0     8    0
filepl     152    29191    0    28971    57    39    18    19     0     8    8
lockfpl    104     1121    0     1119     4     2     2     2     0     8    1
lockfspl    48      372    0      370     1     0     1     1     0     8    0
sessionpl  144       39    0       23     1     0     1     1     0     8    0
pgrppl      48       56    0       40     1     0     1     1     0     8    0
ucredpl    104     3833    0     3820     1     0     1     1     0     8    0
zombiepl   144     4103    0     4102     3     2     1     1     0     8    0
processpl  1064    4166    0     4102     5     0     5     5     0     8    0
procpl     672    11316    0    11233    15     6     9    10     0     8    0
srpgc       96       30    0       30     6     5     1     1     0     8    1
sosppl     168       27    0       27     6     5     1     1     0     8    1
sockpl     488    10877    0    10848   182   157    25    35     0     8   20
mcl64k     65536     12    0        0     2     0     2     2     0     8    0
mcl16k     16384     13    0        0     2     0     2     2     0     8    0
mcl12k     12288     19    0        0     2     0     2     2     0     8    0
mcl9k      9216       6    0        0     1     0     1     1     0     8    0
mcl8k      8192      49    0        0     6     2     4     6     0     8    0
mcl4k      4096      17    0        0     3     0     3     3     0     8    0
mcl2k2     2112       7    0        0     1     0     1     1     0     8    0
mcl2k      2048     518    0        0    64     0    64    64     0     8    0
mtagpl      96      348    0        0     6     0     6     6     0     8    0
mbufpl     256      925    0        0    56     1    55    55     0     8    0
bufpl      288     8975    0     2640   453     0   453   453     0     8    0
anonpl      24   817031    0   802533   152    33   119   135     0   186    0
amapchunkpl 152   69548    0    68858    46    13    33    37     0   158    0
amappl16   200    11404    0    10840    69    32    37    43     0     8    5
amappl15   192      658    0      651     1     0     1     1     0     8    0
amappl14   184      155    0      152     1     0     1     1     0     8    0
amappl13   176     1153    0     1150     1     0     1     1     0     8    0
amappl12   168      828    0      822     1     0     1     1     0     8    0
amappl11   160      379    0      360     1     0     1     1     0     8    0
amappl10   152      372    0      366     1     0     1     1     0     8    0
amappl9    144      545    0      540     1     0     1     1     0     8    0
amappl8    136     1456    0     1382     3     0     3     3     0     8    0
amappl7    128      795    0      771     1     0     1     1     0     8    0
amappl6    120      338    0      325     2     1     1     2     0     8    0
amappl5    112     3371    0     3351     1     0     1     1     0     8    0
amappl4    104     1780    0     1753     2     1     1     2     0     8    0
amappl3     96    12730    0    12680     3     1     2     2     0     8    0
amappl2     88     2030    0     1989     3     2     1     2     0     8    0
amappl1     80   103977    0   103369    24     8    16    20     0     8    0
amappl      88    23882    0    23696     7     2     5     5     0    92    0
dma4096    4096       1    0        1     1     1     0     1     0     8    0
dma1024    1024       1    0        0     1     0     1     1     0     8    0
dma256     256        6    0        6     1     1     0     1     0     8    0
dma128     128      253    0      253     1     1     0     1     0     8    0
dma64       64        6    0        6     1     1     0     1     0     8    0
dma32       32        7    0        7     1     1     0     1     0     8    0
dma16       16       18    0       17     1     0     1     1     0     8    0
aobjpl      72      133    0        3     3     0     3     3     0     8    0
uaddrrnd    24     4210    0     4107     1     0     1     1     0     8    0
uaddrbest   32        2    0        0     1     0     1     1     0     8    0
uaddr       24     4210    0     4107     1     0     1     1     0     8    0
vmmpekpl   168    36395    0    36315     4     0     4     4     0     8    0
vmmpepl    168   409068    0   406459   183    45   138   147     0   357    0
vmsppl     368     4209    0     4106    12     2    10    10     0     8    0
rwobjpl     56   107450    0    99797   120     8   112   112     0     8    0
pdppl      4096    8427    0     8291   374   226   148   148     0     8   12
pvpl        32  1644296    0  1625770   309   117   192   259     0   265    0
pmappl     248     4209    0     4106     8     1     7     7     0     8    0
extentpl    40       56    0       38     1     0     1     1     0     8    0
phpool     112     1306    0      322    29     0    29    29     0     8    0
ddb{1}> machine ddbcpu 0
Stopped at      x86_ipi_db+0x1a:        addq    $0x8,%rsp
ddb{0}> trace
x86_ipi_db(ffffffff82940ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393
x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23
__sanitizer_cov_trace_cmp4(3ef7c1,3ef7c1) at __sanitizer_cov_trace_cmp4+0x2a kd_curproc sys/dev/kcov.c:577 [inline]
__sanitizer_cov_trace_cmp4(3ef7c1,3ef7c1) at __sanitizer_cov_trace_cmp4+0x2a sys/dev/kcov.c:201
__mp_lock(ffffffff82a31ae8) at __mp_lock+0x62 __mp_lock_held sys/kern/kern_lock.c:236 [inline]
__mp_lock(ffffffff82a31ae8) at __mp_lock+0x62 sys/kern/kern_lock.c:137
wakeup_n(ffffffff82b9f100,ffffffff) at wakeup_n+0xc5 wakeup_proc sys/kern/kern_synch.c:478 [inline]
wakeup_n(ffffffff82b9f100,ffffffff) at wakeup_n+0xc5 sys/kern/kern_synch.c:551
uvm_pmr_freepageq(ffff8000212395c8) at uvm_pmr_freepageq+0x292 sys/uvm/uvm_pmemrange.c:1352
amap_wipeout(fffffd8068afa1a0) at amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523
uvm_unmap_detach(ffff800021239690,1) at uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1351
uvm_map_teardown(fffffd807effd2e0) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2541
uvmspace_free(fffffd807effd2e0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3436
reaper(ffff800021233508) at reaper+0x19a sys/kern/kern_exit.c:448
end trace frame: 0x0, count: -12
ddb{0}> machine ddbcpu 1
Stopped at      witness_checkorder+0x4f5:       movl    0x10(%r14),%ecx
ddb{1}> trace
witness_checkorder(fffffd806d58d400,9,0) at witness_checkorder+0x4f5 witness_lock_order_check sys/kern/subr_witness.c:2434 [inline]
witness_checkorder(fffffd806d58d400,9,0) at witness_checkorder+0x4f5 sys/kern/subr_witness.c:885
rw_enter(fffffd806d58d3f0,1) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250
rwsleep(fffffd806d58d530,fffffd806d58d3f0,118,ffffffff82616c93,0) at rwsleep+0x100 sys/kern/kern_synch.c:314
sosend(fffffd806d58d3e8,0,ffff80002478a118,0,0,0) at sosend+0x76e sys/kern/uipc_socket.c:614
fifo_write(ffff80002478a060) at fifo_write+0x7c sys/miscfs/fifofs/fifo_vnops.c:281
VOP_WRITE(fffffd806c789e98,ffff80002478a118,3,fffffd807f7d7340) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245
ktrwriteraw(ffff80002127d508,fffffd806c789e98,fffffd807f7d7340,ffff80002478a1e0,ffff80002478a1c0) at ktrwriteraw+0x15f sys/kern/kern_ktrace.c:660
ktrgenio(ffff80002127d508,18,0,ffff800000d15350,c) at ktrgenio+0x292 ktrwrite2 sys/kern/kern_ktrace.c:624 [inline]
ktrgenio(ffff80002127d508,18,0,ffff800000d15350,c) at ktrgenio+0x292 sys/kern/kern_ktrace.c:259
dofilereadv(ffff80002127d508,18,ffff80002478a358,0,ffff80002478a440) at dofilereadv+0x2e3 sys/kern/sys_generic.c:263
sys_read(ffff80002127d508,ffff80002478a3f0,ffff80002478a440) at sys_read+0x83 sys/kern/sys_generic.c:167
syscall(ffff80002478a4c0) at syscall+0x4c3 mi_syscall sys/sys/syscall_mi.h:101 [inline]
syscall(ffff80002478a4c0) at syscall+0x4c3 sys/arch/amd64/amd64/trap.c:585
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x2fb515740, count: -12

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2022/08/29 19:37 openbsd ab19a69ebe1d 94da0b6b .config console log report ci-openbsd-multicore protection_fault: witness_checkorder
* Struck through repros no longer work on HEAD.