Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program uvm_fault(0xfffffd806fa00018, 0x18ff000008, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND 14747 12581 0 0 0 0 syz-executor3863784987 witness_checkorder(fffffd806f0db0e8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0db0d8) at mtx_enter+0x3e knote_remove(ffff8000211f42c0,fffffd806f0db0d8,fffffd806f0db160,3,0) at knote_remove+0x20d knote_fdclose(ffff8000211f42c0,3) at knote_fdclose+0xae fdfree(ffff8000211f42c0) at fdfree+0xdf exit1(ffff8000211f42c0,0,0,1) at exit1+0x3e4 sys_exit(ffff8000211f42c0,ffff80002127b280,ffff80002127b2d0) at sys_exit+0x1a syscall(ffff80002127b350) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e580, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806fa00018, 0x18ff000008, 0, 1) -> e ddb{1}> trace witness_checkorder(fffffd806f0db0e8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0db0d8) at mtx_enter+0x3e knote_remove(ffff8000211f42c0,fffffd806f0db0d8,fffffd806f0db160,3,0) at knote_remove+0x20d knote_fdclose(ffff8000211f42c0,3) at knote_fdclose+0xae fdfree(ffff8000211f42c0) at fdfree+0xdf exit1(ffff8000211f42c0,0,0,1) at exit1+0x3e4 sys_exit(ffff8000211f42c0,ffff80002127b280,ffff80002127b2d0) at sys_exit+0x1a syscall(ffff80002127b350) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e580, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff80002127b020 rbx 0xe rdx 0 rcx 0xfffffd8003971d80 rax 0xffff800020d58ff0 r8 0 r9 0x1 r10 0xe724f693828d3594 r11 0x1ed9ca7b69700f92 r12 0 r13 0xfffffd806f0db0e8 r14 0x18ff000000 r15 0xffff8000211f42c0 rip 0xffffffff81ef9c8c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002127af70 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor3863784987) pid=378478 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000211f5008,0xffff8000211f4820 process=0xffff8000ffff8c98 user=0xffff800021276000, vmspace=0xfffffd806fa00018 estcpu=0, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 41988 444983 9823 0 2 0 syz-executor3863784987 12581 14747 40403 0 7 0 syz-executor3863784987 92127 129033 35794 0 3 0 biowait syz-executor3863784987 8038 298360 35794 0 2 0 syz-executor3863784987 9823 253767 35794 0 2 0 syz-executor3863784987 40403 420230 35794 0 3 0x80 nanoslp syz-executor3863784987 23792 389895 35794 0 3 0 biowait syz-executor3863784987 27173 422417 35794 0 3 0 biowait syz-executor3863784987 78788 299090 35794 0 3 0x80 nanoslp syz-executor3863784987 20193 281319 35794 0 3 0x80 nanoslp syz-executor3863784987 35794 20074 94415 0 3 0x82 nanoslp syz-executor3863784987 94415 463218 13217 0 3 0x10008a sigsusp ksh 13217 513852 3888 0 2 0x12 sshd 51518 60429 1 0 3 0x100083 ttyin getty 3888 416823 1 0 3 0x88 kqread sshd 70535 133840 60718 73 3 0x1100090 kqread syslogd 60718 13413 1 0 3 0x100082 netio syslogd 51268 440106 1 0 3 0x100080 kqread resolvd 82462 511291 37222 77 3 0x100092 kqread dhcpleased 61808 239455 37222 77 3 0x100092 kqread dhcpleased 37222 215862 1 0 3 0x80 kqread dhcpleased 33692 292303 0 0 3 0x14200 bored smr 46521 106155 0 0 2 0x14200 zerothread 19433 217810 0 0 3 0x14200 aiodoned aiodoned 46573 155689 0 0 3 0x14200 syncer update 13042 73100 0 0 3 0x14200 cleaner cleaner 67061 378366 0 0 2 0x14200 reaper 38698 326692 0 0 3 0x14200 pgdaemon pagedaemon 37656 356481 0 0 3 0x14200 bored viomb 59197 133894 0 0 3 0x40014200 acpi0 acpi0 69118 426126 0 0 3 0x40014200 idle1 88044 143238 0 0 3 0x14200 bored softnet3 34192 145488 0 0 3 0x14200 bored softnet2 89751 28771 0 0 3 0x14200 bored softnet1 57376 349316 0 0 3 0x14200 bored softnet0 48602 5498 0 0 3 0x14200 bored systqmp 55615 49803 0 0 3 0x14200 bored systq 52035 238613 0 0 3 0x40014200 bored softclock 78302 501128 0 0 3 0x40014200 idle0 1 416781 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive sched_lock &sched_lock r = 0 (0xffffffff82cc8bd0) #0 witness_lock+0x447 #1 sched_idle+0x199 #2 proc_trampoline+0x1c Process 92127 (syz-executor3863784987) thread 0xffff8000211f5008 (129033) exclusive rrwlock inode r = 0 (0xfffffd806d1e86f8) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 ufs_ihashins+0x46 #5 ffs_vget+0x141 #6 ffs_inode_alloc+0x1c2 #7 ufs_mkdir+0xf8 #8 VOP_MKDIR+0xc3 #9 domkdirat+0x125 #10 syscall+0x5e2 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d639a38) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 vn_lock+0x84 #5 vfs_lookup+0xd5 #6 namei+0x55a #7 domkdirat+0x79 #8 syscall+0x5e2 #9 Xsyscall+0x128 Process 23792 (syz-executor3863784987) thread 0xffff8000211eed58 (389895) exclusive rrwlock inode r = 0 (0xfffffd806d1e8f78) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 ufs_ihashins+0x46 #5 ffs_vget+0x141 #6 ffs_inode_alloc+0x1c2 #7 ufs_mkdir+0xf8 #8 VOP_MKDIR+0xc3 #9 domkdirat+0x125 #10 syscall+0x5e2 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d6394e8) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 vn_lock+0x84 #5 vfs_lookup+0xd5 #6 namei+0x55a #7 domkdirat+0x79 #8 syscall+0x5e2 #9 Xsyscall+0x128 Process 27173 (syz-executor3863784987) thread 0xffff8000211ef7f8 (422417) exclusive rrwlock inode r = 0 (0xfffffd806d1e8808) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 ufs_ihashins+0x46 #5 ffs_vget+0x141 #6 ffs_inode_alloc+0x1c2 #7 ufs_mkdir+0xf8 #8 VOP_MKDIR+0xc3 #9 domkdirat+0x125 #10 syscall+0x5e2 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d6393d8) #0 witness_lock+0x447 #1 rw_enter+0x3c8 #2 rrw_enter+0x8c #3 VOP_LOCK+0x8b #4 vn_lock+0x84 #5 vfs_lookup+0xd5 #6 namei+0x55a #7 domkdirat+0x79 #8 syscall+0x5e2 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10156 6389K 6420K 78643K 11234 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 110 0 pf 12 6K 6K 78643K 12 0 ifaddr 12 9K 9K 78643K 12 0 ifgroup 17 1K 1K 78643K 17 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1174 73K 74K 78643K 1187 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 78K 79K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 243 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 114 5K 5K 78643K 2374 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5904K 5968K 78643K 2913 0 kqueue 11 16K 18K 78643K 36 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 20 0 17 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 2 1 1 1 0 8 1 tcpqe 32 195 0 195 1 1 0 1 0 8 0 tcpcb 808 32 0 27 1 0 1 1 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 50 0 44 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 96 0 0 6 0 6 6 0 8 0 art_table 32 97 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1447 0 46 88 0 88 88 0 8 0 ffsino 272 1447 0 46 94 0 94 94 0 8 0 nchpl 144 1644 0 70 59 0 59 59 0 8 0 uvmvnodes 80 1456 0 0 30 0 30 30 0 8 0 vnodes 216 1456 0 0 81 0 81 81 0 8 0 namei 1024 4329 0 4326 3 1 2 2 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 5001 0 4998 3 2 1 2 1 8 0 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 331 0 289 5 0 5 5 0 8 0 futexpl 64 81 0 81 1 0 1 1 0 8 1 knotepl 120 39 0 0 2 0 2 2 0 8 0 kqueuepl 216 32 0 25 1 0 1 1 0 8 0 pipepl 320 87 0 84 2 1 1 1 0 8 0 fdescpl 496 314 0 290 5 1 4 4 0 8 1 filepl 152 1160 0 1105 3 0 3 3 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 291 0 289 2 1 1 1 0 8 0 processpl 1072 331 0 289 3 0 3 3 0 8 0 procpl 680 343 0 300 4 0 4 4 0 8 0 sockpl 488 103 0 80 4 0 4 4 0 8 1 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 244 0 0 31 0 31 31 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 252 0 0 16 0 16 16 0 8 0 bufpl 288 2538 0 88 175 0 175 175 0 8 0 anonpl 24 153936 0 151954 23 10 13 23 0 186 0 amapchunkpl 152 8076 0 7861 11 1 10 10 0 158 1 amappl16 200 4112 0 4106 6 5 1 5 0 8 0 amappl15 192 12 0 12 1 1 0 1 0 8 0 amappl14 184 98 0 89 1 0 1 1 0 8 0 amappl13 176 12 0 12 1 1 0 1 0 8 0 amappl12 168 806 0 786 1 0 1 1 0 8 0 amappl11 160 58 0 48 1 0 1 1 0 8 0 amappl10 152 12 0 12 2 1 1 1 0 8 1 amappl9 144 163 0 163 2 1 1 1 0 8 1 amappl8 136 26 0 24 1 0 1 1 0 8 0 amappl7 128 38 0 26 1 0 1 1 0 8 0 amappl6 120 138 0 125 1 0 1 1 0 8 0 amappl5 112 102 0 94 1 0 1 1 0 8 0 amappl4 104 410 0 383 1 0 1 1 0 8 0 amappl3 96 2392 0 2348 2 0 2 2 0 8 0 amappl2 88 497 0 452 3 1 2 2 0 8 0 amappl1 80 9098 0 8646 14 3 11 11 0 8 0 amappl 88 2106 0 2029 2 0 2 2 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 314 0 290 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 314 0 290 1 0 1 1 0 8 0 vmmpekpl 168 6818 0 6798 2 0 2 2 0 8 1 vmmpepl 168 33709 0 32515 57 4 53 53 0 357 1 vmsppl 464 313 0 290 4 1 3 3 0 8 0 rwobjpl 56 17732 0 15639 31 1 30 31 0 8 0 pdppl 4096 636 0 580 76 20 56 56 0 8 0 pvpl 32 249283 0 244441 52 12 40 52 0 265 0 pmappl 248 313 0 290 3 1 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 504 0 23 14 0 14 14 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffffffff82c05ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ca0020) at __mp_lock+0x122 intr_handler(ffff800021281420,ffff80000067b200) at intr_handler+0x62 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff82ca0020) at __mp_lock+0x129 syscall(ffff8000212815f0) at syscall+0x5cd Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e410, count: 6 ddb{0}> trace x86_ipi_db(ffffffff82c05ff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ca0020) at __mp_lock+0x122 intr_handler(ffff800021281420,ffff80000067b200) at intr_handler+0x62 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff82ca0020) at __mp_lock+0x129 syscall(ffff8000212815f0) at syscall+0x5cd Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e410, count: -9 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx witness_checkorder(fffffd806f0db0e8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0db0d8) at mtx_enter+0x3e knote_remove(ffff8000211f42c0,fffffd806f0db0d8,fffffd806f0db160,3,0) at knote_remove+0x20d knote_fdclose(ffff8000211f42c0,3) at knote_fdclose+0xae fdfree(ffff8000211f42c0) at fdfree+0xdf exit1(ffff8000211f42c0,0,0,1) at exit1+0x3e4 sys_exit(ffff8000211f42c0,ffff80002127b280,ffff80002127b2d0) at sys_exit+0x1a syscall(ffff80002127b350) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e580, count: 6 ddb{1}> trace witness_checkorder(fffffd806f0db0e8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0db0d8) at mtx_enter+0x3e knote_remove(ffff8000211f42c0,fffffd806f0db0d8,fffffd806f0db160,3,0) at knote_remove+0x20d knote_fdclose(ffff8000211f42c0,3) at knote_fdclose+0xae fdfree(ffff8000211f42c0) at fdfree+0xdf exit1(ffff8000211f42c0,0,0,1) at exit1+0x3e4 sys_exit(ffff8000211f42c0,ffff80002127b280,ffff80002127b2d0) at sys_exit+0x1a syscall(ffff80002127b350) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fd9e6e5e580, count: -9 ddb{1}>