Warning: Permanently added '10.128.0.166' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program uvm_fault(0xfffffd806da8dcd0, 0x7, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 450020 2527 0 0x14000 0x200 1 reaper witness_checkorder(fffffd806f1e9be0,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f1e9bd0) at mtx_enter+0x3e knote_remove(ffff80002120d2b8,fffffd806f1e9bd0,fffffd806f1e9c58,4,0) at knote_remove+0x20d knote_fdclose(ffff80002120d2b8,4) at knote_fdclose+0xae fdfree(ffff80002120d2b8) at fdfree+0xdf exit1(ffff80002120d2b8,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120d2b8,ffff8000212b1310,ffff8000212b1360) at sys_exit+0x1a syscall(ffff8000212b13e0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c72a36850d0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault(0xfffffd806da8dcd0, 0x7, 0, 1) -> e ddb{0}> trace witness_checkorder(fffffd806f1e9be0,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f1e9bd0) at mtx_enter+0x3e knote_remove(ffff80002120d2b8,fffffd806f1e9bd0,fffffd806f1e9c58,4,0) at knote_remove+0x20d knote_fdclose(ffff80002120d2b8,4) at knote_fdclose+0xae fdfree(ffff80002120d2b8) at fdfree+0xdf exit1(ffff80002120d2b8,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120d2b8,ffff8000212b1310,ffff8000212b1360) at sys_exit+0x1a syscall(ffff8000212b13e0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c72a36850d0, count: -9 ddb{0}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff8000212b10b0 rbx 0xe rdx 0 rcx 0xfffffd80037e9680 rax 0xffffffff82c39ff0 cpu_info_full_primary+0x1ff0 r8 0x1 r9 0 r10 0x3d6b4d181ccf3426 r11 0xbe5bbabd98ce3446 r12 0 r13 0xfffffd806f1e9be0 r14 0xffffffffffffffff r15 0xffff80002120d2b8 rip 0xffffffff826c515c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000212b1000 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{0}> show proc PROC (syz-executor289034553) pid=208464 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=76, nice=20 forw=0xffffffffffffffff, list=0xffff8000211f4018,0xffff80002120dd68 process=0xffff8000ffff6198 user=0xffff8000212ac000, vmspace=0xfffffd806da8dcd0 estcpu=26, cpticks=2, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 31925 402483 21469 0 2 0 syz-executor289034553 31925 480774 21469 0 2 0x4000080 syz-executor289034553 45136 393319 45373 0 2 0 syz-executor289034553 45136 522141 45373 0 3 0x4000080 fsleep syz-executor289034553 45136 208614 45373 0 3 0x4000080 fsleep syz-executor289034553 7049 244504 39300 0 2 0 syz-executor289034553 7049 106842 39300 0 3 0x4000080 fsleep syz-executor289034553 51601 287108 85644 0 2 0 syz-executor289034553 51601 12803 85644 0 3 0x4000080 fsleep syz-executor289034553 21469 317442 3765 0 3 0x80 nanoslp syz-executor289034553 37434 16204 3765 0 2 0 syz-executor289034553 45373 120939 3765 0 2 0 syz-executor289034553 40847 359322 3765 0 3 0x80 nanoslp syz-executor289034553 12783 298626 3765 0 3 0x80 nanoslp syz-executor289034553 39300 250939 3765 0 2 0 syz-executor289034553 90414 252707 3765 0 3 0x80 nanoslp syz-executor289034553 85644 173597 3765 0 2 0 syz-executor289034553 3765 263148 73763 0 3 0x82 nanoslp syz-executor289034553 73763 199380 18324 0 3 0x10008a sigsusp ksh 18324 262308 27046 0 3 0x9a kqread sshd 41773 513380 1 0 3 0x100083 ttyin getty 27046 320453 1 0 3 0x88 kqread sshd 8456 25655 742 73 3 0x1100090 kqread syslogd 742 295206 1 0 3 0x100082 netio syslogd 69011 209546 1 0 3 0x100080 kqread resolvd 2602 446862 41501 77 3 0x100092 kqread dhcpleased 49703 166338 41501 77 3 0x100092 kqread dhcpleased 41501 371883 1 0 3 0x80 kqread dhcpleased 99494 102786 0 0 3 0x14200 bored smr 35294 451728 0 0 2 0x14200 zerothread 34496 316941 0 0 3 0x14200 aiodoned aiodoned 64716 139282 0 0 3 0x14200 syncer update 8467 22778 0 0 3 0x14200 cleaner cleaner 2527 450020 0 0 7 0x14200 reaper 75037 180401 0 0 3 0x14200 pgdaemon pagedaemon 80854 121739 0 0 3 0x14200 bored viomb 24332 193000 0 0 3 0x40014200 acpi0 acpi0 70375 362384 0 0 3 0x40014200 idle1 93985 39216 0 0 3 0x14200 bored softnet3 32675 16306 0 0 3 0x14200 bored softnet2 80656 478071 0 0 3 0x14200 bored softnet1 42622 501196 0 0 3 0x14200 bored softnet0 32463 19661 0 0 3 0x14200 bored systqmp 5293 224535 0 0 3 0x14200 bored systq 54999 420302 0 0 3 0x40014200 bored softclock 31164 495922 0 0 3 0x40014200 idle0 1 385876 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10156 6389K 6420K 78643K 11234 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 110 0 pf 12 6K 6K 78643K 12 0 ifaddr 12 9K 9K 78643K 12 0 ifgroup 17 1K 1K 78643K 17 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1181 74K 74K 78643K 1317 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 78K 79K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 243 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 125 6K 7K 78643K 3047 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5904K 5968K 78643K 3077 0 kqueue 13 20K 30K 78643K 154 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 1 0 1 1 0 8 1 tcpqe 32 81 0 81 1 1 0 1 0 8 0 tcpcb 808 140 0 132 2 0 2 2 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 288 0 275 3 0 3 3 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 96 0 0 6 0 6 6 0 8 0 art_table 32 97 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1422 0 37 87 0 87 87 0 8 0 ffsino 272 1422 0 37 93 0 93 93 0 8 0 nchpl 144 1606 0 47 58 0 58 58 0 8 0 uvmvnodes 80 1561 0 0 32 0 32 32 0 8 0 vnodes 216 1561 0 0 87 0 87 87 0 8 0 namei 1024 4386 0 4386 1 0 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 4862 0 4862 3 2 1 2 1 8 1 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 449 0 403 6 0 6 6 0 8 0 futexpl 64 960 0 956 1 0 1 1 0 8 0 knotepl 120 49 0 0 2 0 2 2 0 8 0 kqueuepl 216 280 0 268 2 0 2 2 0 8 0 pipepl 320 217 0 214 1 0 1 1 0 8 0 fdescpl 496 432 0 406 5 1 4 4 0 8 0 filepl 152 1908 0 1842 4 0 4 4 0 8 0 lockfpl 104 263 0 258 1 0 1 1 0 8 0 lockfspl 48 134 0 129 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 407 0 403 1 0 1 1 0 8 0 processpl 1072 449 0 403 4 0 4 4 0 8 0 procpl 680 650 0 598 5 0 5 5 0 8 0 sockpl 488 341 0 312 5 0 5 5 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 262 0 0 33 0 33 33 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 274 0 0 19 1 18 18 0 8 0 bufpl 288 2475 0 88 171 0 171 171 0 8 0 anonpl 24 165300 0 163266 24 7 17 24 0 186 3 amapchunkpl 152 10161 0 9926 13 1 12 12 0 158 0 amappl16 200 4602 0 4599 5 4 1 5 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 99 0 90 1 0 1 1 0 8 0 amappl13 176 19 0 18 1 0 1 1 0 8 0 amappl12 168 921 0 904 1 0 1 1 0 8 0 amappl11 160 46 0 36 1 0 1 1 0 8 0 amappl10 152 17 0 17 1 0 1 1 0 8 1 amappl9 144 150 0 150 1 1 0 1 0 8 0 amappl8 136 31 0 29 1 0 1 1 0 8 0 amappl7 128 155 0 140 1 0 1 1 0 8 0 amappl6 120 138 0 125 1 0 1 1 0 8 0 amappl5 112 105 0 97 1 0 1 1 0 8 0 amappl4 104 411 0 384 1 0 1 1 0 8 0 amappl3 96 2781 0 2735 2 0 2 2 0 8 0 amappl2 88 596 0 548 2 0 2 2 0 8 0 amappl1 80 9733 0 9277 11 0 11 11 0 8 0 amappl 88 2779 0 2692 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 432 0 406 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 432 0 406 1 0 1 1 0 8 0 vmmpekpl 168 8110 0 8088 2 0 2 2 0 8 0 vmmpepl 168 37774 0 36575 58 0 58 58 0 357 0 vmsppl 464 431 0 406 5 1 4 4 0 8 0 rwobjpl 56 19770 0 17535 34 1 33 33 0 8 0 pdppl 4096 871 0 812 81 16 65 65 0 8 6 pvpl 32 266266 0 261459 52 7 45 52 0 265 3 pmappl 248 431 0 406 3 1 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 510 0 19 15 0 15 15 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace witness_checkorder(fffffd806f1e9be0,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f1e9bd0) at mtx_enter+0x3e knote_remove(ffff80002120d2b8,fffffd806f1e9bd0,fffffd806f1e9c58,4,0) at knote_remove+0x20d knote_fdclose(ffff80002120d2b8,4) at knote_fdclose+0xae fdfree(ffff80002120d2b8) at fdfree+0xdf exit1(ffff80002120d2b8,0,0,1) at exit1+0x3e4 sys_exit(ffff80002120d2b8,ffff8000212b1310,ffff8000212b1360) at sys_exit+0x1a syscall(ffff8000212b13e0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c72a36850d0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82c85668) at __mp_lock+0x122 reaper(ffff8000211b3548) at reaper+0x160 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82c85668) at __mp_lock+0x122 reaper(ffff8000211b3548) at reaper+0x160 end trace frame: 0x0, count: -5