Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program kernel: protection fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace witness_checkorder(fffffd806f0835f8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0835e8) at mtx_enter+0x3e knote_remove(ffff8000212122a8,fffffd806f0835e8,fffffd806f083670,3,0) at knote_remove+0x20d knote_fdclose(ffff8000212122a8,3) at knote_fdclose+0xae fdfree(ffff8000212122a8) at fdfree+0xdf exit1(ffff8000212122a8,0,0,1) at exit1+0x3e4 sys_exit(ffff8000212122a8,ffff8000212c7590,ffff8000212c75e0) at sys_exit+0x1a syscall(ffff8000212c7660) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x771da95e2800, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff8000212c7330 rbx 0xe rdx 0 rcx 0xfffffd80037e64a0 rax 0xffff800020d58ff0 r8 0x1 r9 0x1 r10 0xf423b184da9a0bab r11 0x3f80d195e2100e27 r12 0 r13 0xfffffd806f0835f8 r14 0xe00a002a0038e009 r15 0xffff8000212122a8 rip 0xffffffff825dd58c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000212c7280 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor4176385814) pid=220487 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=65, nice=20 forw=0xffffffffffffffff, list=0xffff8000212127f8,0xffff8000211eed68 process=0xffff8000212ac018 user=0xffff8000212c2000, vmspace=0xfffffd806d866af8 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 79242 277826 89404 0 2 0 syz-executor4176385814 85550 276192 73962 0 2 0 syz-executor4176385814 92170 310378 12933 0 7 0 syz-executor4176385814 88121 375384 12620 0 2 0 syz-executor4176385814 93463 65887 77897 0 2 0 syz-executor4176385814 93463 458258 77897 0 3 0x4000080 fsleep syz-executor4176385814 36874 44039 96350 0 2 0 syz-executor4176385814 36874 250974 96350 0 3 0x4000080 fsleep syz-executor4176385814 76283 44800 12079 0 2 0 syz-executor4176385814 76283 340258 12079 0 2 0x4000000 syz-executor4176385814 89404 157828 17033 0 3 0x80 nanoslp syz-executor4176385814 73962 68815 17033 0 3 0x80 nanoslp syz-executor4176385814 96350 402696 17033 0 3 0x80 nanoslp syz-executor4176385814 87289 298738 17033 0 3 0x80 nanoslp syz-executor4176385814 77897 487025 17033 0 3 0x80 nanoslp syz-executor4176385814 12620 254102 17033 0 3 0x80 nanoslp syz-executor4176385814 12933 56578 17033 0 3 0x80 nanoslp syz-executor4176385814 12079 213780 17033 0 3 0x80 nanoslp syz-executor4176385814 17033 259831 78208 0 3 0x82 nanoslp syz-executor4176385814 78208 249669 46608 0 3 0x10008a sigsusp ksh 46608 423416 94197 0 2 0x9a sshd 14302 521853 1 0 3 0x100083 ttyin getty 94197 377365 1 0 3 0x88 kqread sshd 24248 318117 31797 74 3 0x1100092 bpf pflogd 31797 139381 1 0 3 0x80 netio pflogd 31276 335766 14772 73 3 0x1100090 kqread syslogd 14772 230399 1 0 3 0x100082 netio syslogd 94525 328685 1 0 3 0x100080 kqread resolvd 34583 481991 4368 77 3 0x100092 kqread dhcpleased 12281 77792 4368 77 3 0x100092 kqread dhcpleased 4368 429059 1 0 3 0x80 kqread dhcpleased 95504 125566 0 0 3 0x14200 bored smr 46879 460275 0 0 2 0x14200 zerothread 68592 302044 0 0 3 0x14200 aiodoned aiodoned 97315 20524 0 0 3 0x14200 syncer update 27442 158433 0 0 3 0x14200 cleaner cleaner 81927 136710 0 0 2 0x14200 reaper 56431 232736 0 0 3 0x14200 pgdaemon pagedaemon 74640 354132 0 0 3 0x14200 bored viomb 85523 481092 0 0 3 0x40014200 acpi0 acpi0 44402 319078 0 0 3 0x40014200 idle1 34659 15168 0 0 3 0x14200 bored softnet3 95255 450505 0 0 3 0x14200 bored softnet2 24608 245862 0 0 3 0x14200 bored softnet1 84358 9994 0 0 3 0x14200 bored softnet0 76245 373502 0 0 3 0x14200 bored systqmp 4827 214373 0 0 3 0x14200 bored systq 23789 455500 0 0 3 0x40014200 bored softclock 34547 297001 0 0 3 0x40014200 idle0 1 483691 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10162 6455K 6456K 78643K 11240 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 116 0 pf 15 6K 10K 78643K 26 0 ifaddr 13 9K 9K 78643K 13 0 ifgroup 22 1K 1K 78643K 22 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 4K 78643K 1475 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1176 74K 74K 78643K 1192 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 67 91K 91K 78643K 302 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 272 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 133 6K 7K 78643K 3735 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 4 0K 0K 78643K 4 0 temp 1 5904K 5968K 78643K 3122 0 kqueue 11 16K 24K 78643K 229 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 21 0 18 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 35 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 1 0 1 1 0 8 1 tcpqe 32 301 0 301 1 1 0 1 0 8 0 tcpcb 808 8 0 5 1 0 1 1 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 243 0 234 2 0 2 2 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 9 0 0 1 0 1 1 0 8 0 pfstkey 128 9 0 0 1 0 1 1 0 8 0 pfstate 376 9 0 0 1 0 1 1 0 8 0 pfrule 1344 21 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 97 0 0 7 0 7 7 0 8 0 art_table 32 98 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1432 0 38 88 0 88 88 0 8 0 ffsino 272 1432 0 38 93 0 93 93 0 8 0 nchpl 144 1618 0 49 59 0 59 59 0 8 0 uvmvnodes 80 1446 0 0 30 0 30 30 0 8 0 vnodes 216 1446 0 0 81 0 81 81 0 8 0 namei 1024 4575 0 4575 1 0 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 8 0 0 1 0 1 1 0 8 0 scxspl 216 4893 0 4893 3 2 1 2 1 8 1 plimitpl 152 17 0 10 1 0 1 1 0 8 0 sigapl 424 563 0 515 7 1 6 6 0 8 0 futexpl 64 421 0 419 1 0 1 1 0 8 0 knotepl 120 48 0 0 2 0 2 2 0 8 0 kqueuepl 216 228 0 221 1 0 1 1 0 8 0 pipepl 320 95 0 92 1 0 1 1 0 8 0 fdescpl 496 546 0 515 4 0 4 4 0 8 0 filepl 152 1491 0 1430 3 0 3 3 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 18 0 9 1 0 1 1 0 8 0 pgrppl 48 18 0 9 1 0 1 1 0 8 0 ucredpl 104 71 0 59 1 0 1 1 0 8 0 zombiepl 144 516 0 515 1 0 1 1 0 8 0 processpl 1072 563 0 515 4 0 4 4 0 8 0 procpl 680 777 0 725 6 1 5 5 0 8 0 sockpl 488 299 0 272 4 0 4 4 0 8 0 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 294 0 0 37 0 37 37 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 326 0 0 21 0 21 21 0 8 0 bufpl 288 2570 0 90 178 0 178 178 0 8 0 anonpl 24 190215 0 188051 26 3 23 25 0 186 9 amapchunkpl 152 12494 0 12267 12 0 12 12 0 158 2 amappl16 200 5381 0 5380 5 2 3 5 0 8 2 amappl15 192 45 0 45 1 1 0 1 0 8 0 amappl14 184 118 0 107 1 0 1 1 0 8 0 amappl13 176 12 0 12 1 1 0 1 0 8 0 amappl12 168 1083 0 1065 2 1 1 2 0 8 0 amappl11 160 66 0 52 1 0 1 1 0 8 0 amappl10 152 19 0 19 1 0 1 1 0 8 1 amappl9 144 159 0 158 1 0 1 1 0 8 0 amappl8 136 46 0 44 1 0 1 1 0 8 0 amappl7 128 240 0 224 1 0 1 1 0 8 0 amappl6 120 160 0 145 1 0 1 1 0 8 0 amappl5 112 119 0 107 1 0 1 1 0 8 0 amappl4 104 470 0 438 1 0 1 1 0 8 0 amappl3 96 3245 0 3200 3 1 2 2 0 8 0 amappl2 88 718 0 665 2 0 2 2 0 8 0 amappl1 80 10579 0 10076 12 0 12 12 0 8 0 amappl 88 3424 0 3337 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 546 0 515 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 546 0 515 1 0 1 1 0 8 0 vmmpekpl 168 8229 0 8205 2 0 2 2 0 8 0 vmmpepl 168 43834 0 42488 64 1 63 63 0 357 4 vmsppl 464 545 0 515 4 0 4 4 0 8 0 rwobjpl 56 22049 0 19871 33 1 32 32 0 8 1 pdppl 4096 1100 0 1030 86 16 70 70 0 8 0 pvpl 32 304719 0 299342 57 2 55 57 0 265 11 pmappl 248 545 0 515 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 529 0 19 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82b9dff0) at x86_ipi_db+0x1e x86_ipi_handler() at x86_ipi_handler+0xb7 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82d78858) at __mp_lock+0x122 intr_handler(ffff8000212a4f70,ffff80000067b300) at intr_handler+0x62 Xintr_ioapic_edge26_untramp() at Xintr_ioapic_edge26_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a __mp_lock(ffffffff82d78858) at __mp_lock+0x133 syscall(ffff8000212a5150) at syscall+0x5cd Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x771da95e2720, count: -10 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> trace witness_checkorder(fffffd806f0835f8,9,0) at witness_checkorder+0x1ec mtx_enter(fffffd806f0835e8) at mtx_enter+0x3e knote_remove(ffff8000212122a8,fffffd806f0835e8,fffffd806f083670,3,0) at knote_remove+0x20d knote_fdclose(ffff8000212122a8,3) at knote_fdclose+0xae fdfree(ffff8000212122a8) at fdfree+0xdf exit1(ffff8000212122a8,0,0,1) at exit1+0x3e4 sys_exit(ffff8000212122a8,ffff8000212c7590,ffff8000212c75e0) at sys_exit+0x1a syscall(ffff8000212c7660) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x771da95e2800, count: -9