Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program uvm_fault(0xfffffd806d0b71f0, 0x18ff000008, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 348622 32035 0 0 0 1 syz-executor1926909187 witness_checkorder(fffffd8078959370,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd8078959360) at mtx_enter+0x3e knote_remove(ffff800021213808,fffffd8078959360,fffffd80789593e8,0,0) at knote_remove+0x20d knote_fdclose(ffff800021213808,0) at knote_fdclose+0xae fdfree(ffff800021213808) at fdfree+0xdf exit1(ffff800021213808,0,0,1) at exit1+0x3e4 sys_exit(ffff800021213808,ffff8000212a1a60,ffff8000212a1ab0) at sys_exit+0x1a syscall(ffff8000212a1b30) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ecd87203620, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806d0b71f0, 0x18ff000008, 0, 1) -> e ddb{0}> trace witness_checkorder(fffffd8078959370,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd8078959360) at mtx_enter+0x3e knote_remove(ffff800021213808,fffffd8078959360,fffffd80789593e8,0,0) at knote_remove+0x20d knote_fdclose(ffff800021213808,0) at knote_fdclose+0xae fdfree(ffff800021213808) at fdfree+0xdf exit1(ffff800021213808,0,0,1) at exit1+0x3e4 sys_exit(ffff800021213808,ffff8000212a1a60,ffff8000212a1ab0) at sys_exit+0x1a syscall(ffff8000212a1b30) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ecd87203620, count: -9 ddb{0}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff8000212a1800 rbx 0xe rdx 0 rcx 0xfffffd80037e34a0 rax 0xffffffff82c05ff0 cpu_info_full_primary+0x1ff0 r8 0x2 r9 0 r10 0xffff8000212a16c0 r11 0xc694b9d97fcb19e0 r12 0 r13 0xfffffd8078959370 r14 0x18ff000000 r15 0xffff800021213808 rip 0xffffffff81ef9c8c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000212a1750 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{0}> show proc PROC (syz-executor1926909187) pid=339026 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=63, nice=20 forw=0xffffffffffffffff, list=0xffff8000211e52b0,0xffffffff82c90e98 process=0xffff800021225508 user=0xffff80002129c000, vmspace=0xfffffd806d0b71f0 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 60244 10720 26056 0 2 0 syz-executor1926909187 60244 173936 26056 0 3 0x4000080 fsleep syz-executor1926909187 30609 73566 49426 0 2 0 syz-executor1926909187 30609 38702 49426 0 2 0x4000080 syz-executor1926909187 49456 303257 75364 0 2 0 syz-executor1926909187 49456 324911 75364 0 3 0x4000080 fsleep syz-executor1926909187 37618 369861 68428 0 3 0x80 nanoslp syz-executor1926909187 37618 263347 68428 0 3 0x4000080 netcon syz-executor1926909187 37618 313312 68428 0 3 0x4000080 fsleep syz-executor1926909187 68428 245925 85487 0 2 0 syz-executor1926909187 49426 224727 85487 0 2 0x480 syz-executor1926909187 26056 325105 85487 0 2 0x480 syz-executor1926909187 32035 348622 85487 0 7 0 syz-executor1926909187 75364 183932 85487 0 3 0x80 nanoslp syz-executor1926909187 41629 110969 85487 0 2 0 syz-executor1926909187 121 419284 85487 0 3 0x80 nanoslp syz-executor1926909187 68761 149462 85487 0 3 0x80 nanoslp syz-executor1926909187 85487 523016 1067 0 3 0x82 nanoslp syz-executor1926909187 1067 400847 51219 0 3 0x10008a sigsusp ksh 51219 309900 26250 0 3 0x9a kqread sshd 54146 397958 1 0 3 0x100083 ttyin getty 26250 87661 1 0 3 0x88 kqread sshd 87321 208314 88994 73 3 0x1100090 kqread syslogd 88994 458029 1 0 3 0x100082 netio syslogd 8460 383640 1 0 3 0x100080 kqread resolvd 47948 74652 15207 77 3 0x100092 kqread dhcpleased 99949 29070 15207 77 3 0x100092 kqread dhcpleased 15207 381261 1 0 3 0x80 kqread dhcpleased 43323 101851 0 0 3 0x14200 bored smr 62565 388587 0 0 2 0x14200 zerothread 9857 686 0 0 3 0x14200 aiodoned aiodoned 78973 170343 0 0 3 0x14200 syncer update 86073 189318 0 0 3 0x14200 cleaner cleaner 71818 44822 0 0 2 0x14200 reaper 88031 183216 0 0 3 0x14200 pgdaemon pagedaemon 53176 184394 0 0 3 0x14200 bored viomb 42076 181598 0 0 3 0x40014200 acpi0 acpi0 14864 169054 0 0 3 0x40014200 idle1 86048 470981 0 0 3 0x14200 bored softnet3 795 183302 0 0 3 0x14200 bored softnet2 37939 165367 0 0 3 0x14200 bored softnet1 64307 477287 0 0 3 0x14200 bored softnet0 30812 282432 0 0 3 0x14200 bored systqmp 47043 272851 0 0 3 0x14200 bored systq 16537 373466 0 0 2 0x40014200 softclock 45240 122016 0 0 3 0x40014200 idle0 1 423527 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10156 6389K 6420K 78643K 11234 0 pcb 13 14K 18K 78643K 17 0 rtable 58 1K 2K 78643K 106 0 pf 12 6K 6K 78643K 12 0 ifaddr 12 9K 9K 78643K 12 0 ifgroup 17 1K 1K 78643K 17 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1174 73K 74K 78643K 1187 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 78K 79K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 238 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 136 6K 7K 78643K 3256 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5904K 5968K 78643K 2797 0 kqueue 12 18K 22K 78643K 161 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 18 0 15 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 313 0 290 2 0 2 2 0 8 1 syncache 304 144 0 144 1 0 1 1 0 8 1 tcpqe 32 553 0 553 1 0 1 1 0 8 1 tcpcb 808 427 0 152 28 0 28 28 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 725 0 440 27 0 27 27 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 97 0 0 7 0 7 7 0 8 0 art_table 32 98 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1422 0 37 87 0 87 87 0 8 0 ffsino 272 1422 0 37 93 0 93 93 0 8 0 nchpl 144 1606 0 47 58 0 58 58 0 8 0 uvmvnodes 80 1431 0 0 30 0 30 30 0 8 0 vnodes 216 1431 0 0 80 0 80 80 0 8 0 namei 1024 4230 0 4230 1 0 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 4884 0 4884 3 1 2 2 1 8 2 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 452 0 406 6 0 6 6 0 8 0 futexpl 64 1446 0 1443 1 0 1 1 0 8 0 knotepl 120 45 0 0 2 0 2 2 0 8 0 kqueuepl 216 158 0 149 1 0 1 1 0 8 0 pipepl 320 85 0 82 1 0 1 1 0 8 0 fdescpl 496 435 0 409 5 1 4 4 0 8 0 filepl 152 2092 0 2006 4 0 4 4 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 410 0 406 1 0 1 1 0 8 0 processpl 1072 452 0 406 4 0 4 4 0 8 0 procpl 680 598 0 546 5 0 5 5 0 8 0 sockpl 488 1056 0 744 40 0 40 40 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 246 0 0 31 0 31 31 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 331 0 0 21 0 21 21 0 8 0 bufpl 288 2508 0 84 174 0 174 174 0 8 0 anonpl 24 183815 0 181708 24 1 23 24 0 186 9 amapchunkpl 152 11455 0 11179 13 0 13 13 0 158 0 amappl16 200 5252 0 5247 5 1 4 5 0 8 3 amappl15 192 6 0 6 2 2 0 1 0 8 0 amappl14 184 107 0 98 1 0 1 1 0 8 0 amappl13 176 19 0 19 1 1 0 1 0 8 0 amappl12 168 916 0 898 1 0 1 1 0 8 0 amappl11 160 48 0 38 1 0 1 1 0 8 0 amappl10 152 17 0 17 1 0 1 1 0 8 1 amappl9 144 162 0 162 1 0 1 1 0 8 1 amappl8 136 26 0 24 1 0 1 1 0 8 0 amappl7 128 160 0 145 1 0 1 1 0 8 0 amappl6 120 134 0 121 1 0 1 1 0 8 0 amappl5 112 112 0 104 1 0 1 1 0 8 0 amappl4 104 406 0 379 1 0 1 1 0 8 0 amappl3 96 3054 0 2998 2 0 2 2 0 8 0 amappl2 88 602 0 554 2 0 2 2 0 8 0 amappl1 80 9575 0 9122 11 0 11 11 0 8 0 amappl 88 2994 0 2897 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 435 0 409 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 435 0 409 1 0 1 1 0 8 0 vmmpekpl 168 7376 0 7354 2 0 2 2 0 8 0 vmmpepl 168 38905 0 37619 62 1 61 61 0 357 0 vmsppl 464 434 0 409 5 1 4 4 0 8 0 rwobjpl 56 19943 0 17843 31 1 30 31 0 8 0 pdppl 4096 878 0 818 86 20 66 66 0 8 6 pvpl 32 285442 0 280483 52 1 51 52 0 265 9 pmappl 248 434 0 409 3 1 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 569 0 22 16 0 16 16 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace witness_checkorder(fffffd8078959370,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd8078959360) at mtx_enter+0x3e knote_remove(ffff800021213808,fffffd8078959360,fffffd80789593e8,0,0) at knote_remove+0x20d knote_fdclose(ffff800021213808,0) at knote_fdclose+0xae fdfree(ffff800021213808) at fdfree+0xdf exit1(ffff800021213808,0,0,1) at exit1+0x3e4 sys_exit(ffff800021213808,ffff8000212a1a60,ffff8000212a1ab0) at sys_exit+0x1a syscall(ffff8000212a1b30) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ecd87203620, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ca0020) at __mp_lock+0x120 syscall(ffff80002126bc00) at syscall+0x5cd Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ecd87203620, count: 9 ddb{1}> trace x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ca0020) at __mp_lock+0x120 syscall(ffff80002126bc00) at syscall+0x5cd Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ecd87203620, count: -6 ddb{1}>