Warning: Permanently added '10.128.10.9' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program uvm_fault(0xfffffd806d709588, 0x4d00000056, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 54341 14620 0 0x14000 0x200 0 reaper witness_checkorder(fffffd806f035298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f035288) at mtx_enter+0x3e knote_remove(ffff80002120cac0,fffffd806f035288,fffffd806f035310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002120cac0,3) at knote_fdclose+0xae fdfree(ffff80002120cac0) at fdfree+0xdf exit1(ffff80002120cac0,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120cac0,ffff8000212c13e0,ffff8000212c1430) at sys_exit+0x1a syscall(ffff8000212c14b0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fbbb933b00, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806d709588, 0x4d00000056, 0, 1) -> e ddb{1}> trace witness_checkorder(fffffd806f035298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f035288) at mtx_enter+0x3e knote_remove(ffff80002120cac0,fffffd806f035288,fffffd806f035310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002120cac0,3) at knote_fdclose+0xae fdfree(ffff80002120cac0) at fdfree+0xdf exit1(ffff80002120cac0,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120cac0,ffff8000212c13e0,ffff8000212c1430) at sys_exit+0x1a syscall(ffff8000212c14b0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fbbb933b00, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff8000212c1180 rbx 0xe rdx 0 rcx 0xfffffd8003973e20 rax 0xffff800020d58ff0 r8 0x7f7fffffc000 r9 0x1 r10 0x1a2ea12af7397920 r11 0xa27e815561df602a r12 0 r13 0xfffffd806f035298 r14 0x4d0000004e r15 0xffff80002120cac0 rip 0xffffffff81009f9c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000212c10d0 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor2366699129) pid=199256 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff80002120d010,0xffff80002121b2a8 process=0xffff8000212af688 user=0xffff8000212bc000, vmspace=0xfffffd806d709588 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 42791 220458 64311 0 2 0 syz-executor2366699129 42791 152313 64311 0 2 0x4000000 syz-executor2366699129 96857 330534 26961 0 2 0 syz-executor2366699129 96857 297836 26961 0 3 0x4000080 fsleep syz-executor2366699129 83265 86889 15212 0 3 0x80 nanoslp syz-executor2366699129 26961 172142 15212 0 3 0x80 nanoslp syz-executor2366699129 34749 408506 15212 0 3 0x80 nanoslp syz-executor2366699129 41309 283103 15212 0 3 0x80 nanoslp syz-executor2366699129 64311 239331 15212 0 3 0x80 nanoslp syz-executor2366699129 25863 361520 15212 0 3 0x80 nanoslp syz-executor2366699129 32801 146069 15212 0 3 0x80 nanoslp syz-executor2366699129 22752 19413 15212 0 3 0x80 nanoslp syz-executor2366699129 15212 182758 55867 0 3 0x82 nanoslp syz-executor2366699129 55867 279378 14649 0 3 0x10008a sigsusp ksh 14649 325118 40367 0 2 0x12 sshd 92470 449335 1 0 3 0x100083 ttyin getty 40367 261481 1 0 3 0x88 kqread sshd 69485 356150 83896 74 3 0x1100092 bpf pflogd 83896 204624 1 0 3 0x80 netio pflogd 72096 96055 87939 73 3 0x1100090 kqread syslogd 87939 132950 1 0 3 0x100082 netio syslogd 58202 410979 1 0 3 0x100080 kqread resolvd 8890 265037 93766 77 3 0x100092 kqread dhcpleased 1710 349946 93766 77 3 0x100092 kqread dhcpleased 93766 259173 1 0 3 0x80 kqread dhcpleased 73549 308595 0 0 3 0x14200 bored smr 76652 262082 0 0 2 0x14200 zerothread 58140 318526 0 0 3 0x14200 aiodoned aiodoned 93354 51895 0 0 3 0x14200 syncer update 8028 433373 0 0 3 0x14200 cleaner cleaner 14620 54341 0 0 7 0x14200 reaper 93496 299876 0 0 3 0x14200 pgdaemon pagedaemon 56039 404304 0 0 3 0x14200 bored viomb 23973 421925 0 0 3 0x40014200 acpi0 acpi0 4112 289298 0 0 3 0x40014200 idle1 43588 165154 0 0 3 0x14200 bored softnet3 21712 170663 0 0 3 0x14200 bored softnet2 7718 250204 0 0 3 0x14200 bored softnet1 75788 119101 0 0 3 0x14200 bored softnet0 9798 131471 0 0 3 0x14200 bored systqmp 76819 121188 0 0 3 0x14200 bored systq 14051 415407 0 0 3 0x40014200 bored softclock 94406 313035 0 0 3 0x40014200 idle0 1 57550 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10162 6456K 6457K 78643K 11240 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 114 0 pf 15 6K 10K 78643K 26 0 ifaddr 13 9K 9K 78643K 13 0 ifgroup 22 1K 1K 78643K 22 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 4K 78643K 1475 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1176 74K 74K 78643K 1192 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 67 91K 91K 78643K 302 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 269 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 146 70K 71K 78643K 5503 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 4 0K 0K 78643K 4 0 temp 1 5904K 5968K 78643K 3090 0 kqueue 12 18K 24K 78643K 428 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 35 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 2 1 1 1 0 8 1 tcpqe 32 151 0 151 1 1 0 1 0 8 0 tcpcb 808 412 0 405 2 0 2 2 0 8 1 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 437 0 429 2 0 2 2 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 9 0 7 2 1 1 1 0 8 0 pfstkey 128 9 0 7 2 1 1 1 0 8 0 pfstate 376 9 0 7 2 1 1 1 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 97 0 0 7 0 7 7 0 8 0 art_table 32 98 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1432 0 38 88 0 88 88 0 8 0 ffsino 272 1432 0 38 93 0 93 93 0 8 0 nchpl 144 1618 0 49 59 0 59 59 0 8 0 uvmvnodes 80 1446 0 0 30 0 30 30 0 8 0 vnodes 216 1446 0 0 81 0 81 81 0 8 0 namei 1024 4560 0 4560 2 1 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 8 0 0 1 0 1 1 0 8 0 scxspl 216 5106 0 5106 11 10 1 8 1 8 1 plimitpl 152 25 0 10 1 0 1 1 0 8 0 sigapl 424 750 0 702 7 1 6 6 0 8 0 futexpl 64 1058 0 1057 1 0 1 1 0 8 0 knotepl 120 51 0 0 2 0 2 2 0 8 0 kqueuepl 216 424 0 416 1 0 1 1 0 8 0 pipepl 320 94 0 91 2 1 1 1 0 8 0 fdescpl 496 733 0 707 4 0 4 4 0 8 0 filepl 152 1679 0 1619 3 0 3 3 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 18 0 9 1 0 1 1 0 8 0 pgrppl 48 18 0 9 1 0 1 1 0 8 0 ucredpl 104 71 0 59 1 0 1 1 0 8 0 zombiepl 144 708 0 702 2 1 1 1 0 8 0 processpl 1072 750 0 702 4 0 4 4 0 8 0 procpl 680 1164 0 1113 6 1 5 5 0 8 0 sockpl 488 492 0 466 6 1 5 5 0 8 1 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 334 0 0 41 5 36 41 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 346 0 0 22 0 22 22 0 8 0 bufpl 288 2535 0 90 175 0 175 175 0 8 0 anonpl 24 217742 0 215568 28 13 15 25 0 186 0 amapchunkpl 152 18856 0 18621 15 1 14 14 0 158 3 amappl16 200 6376 0 6374 6 5 1 5 0 8 0 amappl15 192 14 0 14 1 1 0 1 0 8 0 amappl14 184 117 0 106 1 0 1 1 0 8 0 amappl13 176 11 0 11 1 1 0 1 0 8 0 amappl12 168 1271 0 1253 3 1 2 2 0 8 1 amappl11 160 61 0 47 1 0 1 1 0 8 0 amappl10 152 22 0 21 1 0 1 1 0 8 0 amappl9 144 268 0 268 2 2 0 1 0 8 0 amappl8 136 34 0 32 1 0 1 1 0 8 0 amappl7 128 437 0 423 1 0 1 1 0 8 0 amappl6 120 233 0 218 1 0 1 1 0 8 0 amappl5 112 120 0 109 1 0 1 1 0 8 0 amappl4 104 469 0 435 1 0 1 1 0 8 0 amappl3 96 4057 0 4008 3 1 2 2 0 8 0 amappl2 88 905 0 852 2 0 2 2 0 8 0 amappl1 80 10710 0 10224 16 4 12 12 0 8 0 amappl 88 5191 0 5098 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 733 0 707 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 733 0 707 1 0 1 1 0 8 0 vmmpekpl 168 9062 0 9042 2 0 2 2 0 8 0 vmmpepl 168 52075 0 50725 73 5 68 68 0 357 4 vmsppl 464 732 0 707 4 0 4 4 0 8 0 rwobjpl 56 23678 0 21503 34 2 32 33 0 8 1 pdppl 4096 1474 0 1414 94 24 70 70 0 8 10 pvpl 32 346447 0 341118 68 21 47 57 0 265 2 pmappl 248 732 0 707 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 541 0 33 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffffffff82b79ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff82d8c508) at __mp_lock+0x133 intr_handler(ffff8000211b99f0,ffff80000027b500) at intr_handler+0x62 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff82d8c508) at __mp_lock+0x129 reaper(ffff8000211b3a98) at reaper+0x160 end trace frame: 0x0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff82b79ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff82d8c508) at __mp_lock+0x133 intr_handler(ffff8000211b99f0,ffff80000027b500) at intr_handler+0x62 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff82d8c508) at __mp_lock+0x129 reaper(ffff8000211b3a98) at reaper+0x160 end trace frame: 0x0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx witness_checkorder(fffffd806f035298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f035288) at mtx_enter+0x3e knote_remove(ffff80002120cac0,fffffd806f035288,fffffd806f035310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002120cac0,3) at knote_fdclose+0xae fdfree(ffff80002120cac0) at fdfree+0xdf exit1(ffff80002120cac0,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120cac0,ffff8000212c13e0,ffff8000212c1430) at sys_exit+0x1a syscall(ffff8000212c14b0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fbbb933b00, count: 6 ddb{1}> trace witness_checkorder(fffffd806f035298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f035288) at mtx_enter+0x3e knote_remove(ffff80002120cac0,fffffd806f035288,fffffd806f035310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002120cac0,3) at knote_fdclose+0xae fdfree(ffff80002120cac0) at fdfree+0xdf exit1(ffff80002120cac0,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120cac0,ffff8000212c13e0,ffff8000212c1430) at sys_exit+0x1a syscall(ffff8000212c14b0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fbbb933b00, count: -9