Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program uvm_fault(0xfffffd8075e271f0, 0x8, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 29094 23706 0 0x14000 0x200 0 reaper witness_checkorder(fffffd806f167298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f167288) at mtx_enter+0x3e knote_remove(ffff80002121b2b8,fffffd806f167288,fffffd806f167310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002121b2b8,3) at knote_fdclose+0xae fdfree(ffff80002121b2b8) at fdfree+0xdf exit1(ffff80002121b2b8,0,0,1) at exit1+0x3ff sys_exit(ffff80002121b2b8,ffff8000212a5400,ffff8000212a5450) at sys_exit+0x1a syscall(ffff8000212a54d0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c0434f0ebd0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8075e271f0, 0x8, 0, 1) -> e ddb{1}> trace witness_checkorder(fffffd806f167298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f167288) at mtx_enter+0x3e knote_remove(ffff80002121b2b8,fffffd806f167288,fffffd806f167310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002121b2b8,3) at knote_fdclose+0xae fdfree(ffff80002121b2b8) at fdfree+0xdf exit1(ffff80002121b2b8,0,0,1) at exit1+0x3ff sys_exit(ffff80002121b2b8,ffff8000212a5400,ffff8000212a5450) at sys_exit+0x1a syscall(ffff8000212a54d0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c0434f0ebd0, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff8000212a51a0 rbx 0xe rdx 0 rcx 0xfffffd80037e45e0 rax 0xffff800020d58ff0 r8 0x1 r9 0x1 r10 0x56c69e8cf696aaad r11 0xb539ca2536a091f2 r12 0 r13 0xfffffd806f167298 r14 0 r15 0xffff80002121b2b8 rip 0xffffffff81b8d00c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000212a50f0 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor1550576242) pid=300086 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=57, nice=20 forw=0xffffffffffffffff, list=0xffff80002120cd60,0xffff80002121ad78 process=0xffff8000212ad0d8 user=0xffff8000212a0000, vmspace=0xfffffd8075e271f0 estcpu=7, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 62319 378202 95035 0 2 0 syz-executor1550576242 37834 41484 97503 0 2 0 syz-executor1550576242 629 306625 85796 0 2 0 syz-executor1550576242 34845 226832 82036 0 2 0 syz-executor1550576242 79631 312844 31165 0 2 0 syz-executor1550576242 9887 4247 74417 0 2 0 syz-executor1550576242 9887 385988 74417 0 3 0x4000080 fsleep syz-executor1550576242 85198 493741 12420 0 2 0 syz-executor1550576242 31165 406695 93385 0 3 0x80 nanoslp syz-executor1550576242 12420 265678 93385 0 3 0x80 nanoslp syz-executor1550576242 95035 340957 93385 0 3 0x80 nanoslp syz-executor1550576242 74417 144957 93385 0 3 0x80 nanoslp syz-executor1550576242 68117 465235 93385 0 3 0x80 nanoslp syz-executor1550576242 82036 395713 93385 0 2 0 syz-executor1550576242 97503 13525 93385 0 3 0x80 nanoslp syz-executor1550576242 85796 77724 93385 0 3 0x80 nanoslp syz-executor1550576242 93385 329886 62165 0 3 0x82 nanoslp syz-executor1550576242 62165 339847 55942 0 3 0x10008a sigsusp ksh 55942 253390 32828 0 3 0x9a kqread sshd 64571 402143 1 0 3 0x100083 ttyin getty 32828 503628 1 0 3 0x88 kqread sshd 49698 332101 96697 73 3 0x1100090 kqread syslogd 96697 437824 1 0 3 0x100082 netio syslogd 2757 377295 1 0 3 0x100080 kqread resolvd 29565 271742 96901 77 3 0x100092 kqread dhcpleased 92524 120300 96901 77 3 0x100092 kqread dhcpleased 96901 398646 1 0 3 0x80 kqread dhcpleased 43459 278867 0 0 3 0x14200 bored smr 49442 5075 0 0 2 0x14200 zerothread 27730 216215 0 0 3 0x14200 aiodoned aiodoned 86217 142195 0 0 3 0x14200 syncer update 45283 151 0 0 3 0x14200 cleaner cleaner 23706 29094 0 0 7 0x14200 reaper 17254 461588 0 0 3 0x14200 pgdaemon pagedaemon 22523 372893 0 0 3 0x14200 bored viomb 67623 257500 0 0 3 0x40014200 acpi0 acpi0 23243 494497 0 0 3 0x40014200 idle1 8845 225865 0 0 3 0x14200 bored softnet3 60659 373275 0 0 3 0x14200 bored softnet2 5440 96056 0 0 3 0x14200 bored softnet1 77364 368056 0 0 3 0x14200 bored softnet0 1379 225733 0 0 3 0x14200 bored systqmp 10098 375844 0 0 3 0x14200 bored systq 12037 364934 0 0 3 0x40014200 bored softclock 35759 234889 0 0 3 0x40014200 idle0 1 126698 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive sched_lock &sched_lock r = 0 (0xffffffff82cdefb0) #0 witness_lock+0x447 #1 preempt+0x37 #2 ast+0x109 #3 Xsyscall+0x156 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10156 6389K 6420K 78643K 11234 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 110 0 pf 12 6K 6K 78643K 12 0 ifaddr 12 9K 9K 78643K 12 0 ifgroup 17 1K 1K 78643K 17 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1174 73K 74K 78643K 1187 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 78K 79K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 243 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 111 6K 7K 78643K 4670 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5904K 5968K 78643K 2836 0 kqueue 12 18K 24K 78643K 437 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 2 1 1 1 0 8 1 tcpqe 32 145 0 145 1 1 0 1 0 8 0 tcpcb 808 8 0 5 1 0 1 1 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 440 0 432 2 0 2 2 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 96 0 0 6 0 6 6 0 8 0 art_table 32 97 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1422 0 37 87 0 87 87 0 8 0 ffsino 272 1422 0 37 93 0 93 93 0 8 0 nchpl 144 1606 0 47 58 0 58 58 0 8 0 uvmvnodes 80 1431 0 0 30 0 30 30 0 8 0 vnodes 216 1431 0 0 80 0 80 80 0 8 0 namei 1024 4256 0 4256 2 1 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 5148 0 5148 10 9 1 8 1 8 1 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 737 0 691 6 0 6 6 0 8 0 futexpl 64 827 0 826 1 0 1 1 0 8 0 knotepl 120 49 0 0 2 0 2 2 0 8 0 kqueuepl 216 434 0 426 1 0 1 1 0 8 0 pipepl 320 87 0 84 2 1 1 1 0 8 0 fdescpl 496 720 0 691 5 1 4 4 0 8 0 filepl 152 1540 0 1485 3 0 3 3 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 692 0 691 2 1 1 1 0 8 0 processpl 1072 737 0 691 4 0 4 4 0 8 0 procpl 680 1159 0 1112 5 0 5 5 0 8 0 sockpl 488 493 0 469 4 0 4 4 0 8 1 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 303 0 0 35 3 32 35 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 343 0 0 19 1 18 19 0 8 0 bufpl 288 2510 0 88 173 0 173 173 0 8 0 anonpl 24 180796 0 178874 25 12 13 23 0 186 0 amapchunkpl 152 15398 0 15216 12 1 11 11 0 158 2 amappl16 200 4967 0 4965 6 5 1 5 0 8 0 amappl15 192 13 0 13 1 1 0 1 0 8 0 amappl14 184 100 0 91 1 0 1 1 0 8 0 amappl13 176 8 0 8 1 1 0 1 0 8 0 amappl12 168 1201 0 1187 1 0 1 1 0 8 0 amappl11 160 49 0 39 1 0 1 1 0 8 0 amappl10 152 16 0 16 2 1 1 1 0 8 1 amappl9 144 192 0 192 1 1 0 1 0 8 0 amappl8 136 41 0 39 1 0 1 1 0 8 0 amappl7 128 450 0 436 1 0 1 1 0 8 0 amappl6 120 136 0 123 1 0 1 1 0 8 0 amappl5 112 106 0 98 1 0 1 1 0 8 0 amappl4 104 412 0 384 1 0 1 1 0 8 0 amappl3 96 3746 0 3712 2 0 2 2 0 8 1 amappl2 88 878 0 833 3 1 2 2 0 8 0 amappl1 80 11084 0 10630 15 4 11 11 0 8 0 amappl 88 4399 0 4326 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 720 0 691 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 720 0 691 1 0 1 1 0 8 0 vmmpekpl 168 8744 0 8723 2 0 2 2 0 8 0 vmmpepl 168 47874 0 46693 64 7 57 57 0 357 5 vmsppl 464 719 0 691 5 1 4 4 0 8 0 rwobjpl 56 23119 0 21051 32 1 31 31 0 8 1 pdppl 4096 1448 0 1382 88 22 66 66 0 8 0 pvpl 32 295893 0 291241 63 22 41 52 0 265 3 pmappl 248 719 0 691 3 1 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 520 0 29 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffffffff82bffff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82cd6528) at __mp_lock+0x122 intr_handler(ffff8000211b9660,ffff80000067b300) at intr_handler+0x62 Xintr_ioapic_edge26_untramp() at Xintr_ioapic_edge26_untramp+0x18f mtx_enter_try(ffffffff82b722d0) at mtx_enter_try+0x19 mtx_enter(ffffffff82b722d0) at mtx_enter+0x4f msleep(ffffffff82c98a58,ffffffff82b722d0,4,ffffffff828590ec,0) at msleep+0x1f1 reaper(ffff8000211b3548) at reaper+0xdb end trace frame: 0x0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff82bffff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82cd6528) at __mp_lock+0x122 intr_handler(ffff8000211b9660,ffff80000067b300) at intr_handler+0x62 Xintr_ioapic_edge26_untramp() at Xintr_ioapic_edge26_untramp+0x18f mtx_enter_try(ffffffff82b722d0) at mtx_enter_try+0x19 mtx_enter(ffffffff82b722d0) at mtx_enter+0x4f msleep(ffffffff82c98a58,ffffffff82b722d0,4,ffffffff828590ec,0) at msleep+0x1f1 reaper(ffff8000211b3548) at reaper+0xdb end trace frame: 0x0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx witness_checkorder(fffffd806f167298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f167288) at mtx_enter+0x3e knote_remove(ffff80002121b2b8,fffffd806f167288,fffffd806f167310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002121b2b8,3) at knote_fdclose+0xae fdfree(ffff80002121b2b8) at fdfree+0xdf exit1(ffff80002121b2b8,0,0,1) at exit1+0x3ff sys_exit(ffff80002121b2b8,ffff8000212a5400,ffff8000212a5450) at sys_exit+0x1a syscall(ffff8000212a54d0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c0434f0ebd0, count: 6 ddb{1}> trace witness_checkorder(fffffd806f167298,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f167288) at mtx_enter+0x3e knote_remove(ffff80002121b2b8,fffffd806f167288,fffffd806f167310,3,0) at knote_remove+0x20d knote_fdclose(ffff80002121b2b8,3) at knote_fdclose+0xae fdfree(ffff80002121b2b8) at fdfree+0xdf exit1(ffff80002121b2b8,0,0,1) at exit1+0x3ff sys_exit(ffff80002121b2b8,ffff8000212a5400,ffff8000212a5450) at sys_exit+0x1a syscall(ffff8000212a54d0) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c0434f0ebd0, count: -9