uvm_fault(0xfffffd8070b9a998, 0x48, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0xa9: movl 0x20(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND 506949 51501 0 0x14000 0x200 0 reaper witness_checkorder(28,9,0) at witness_checkorder+0xa9 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x4a sys/kern/kern_lock.c:260 clockintr_unbind(ffff80000149ba30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001492000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:576 dtclose(11e5f,81,2000,ffff80002a2ba2a8) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a2ba2a8) at dtclose+0x105 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c516c70) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805f911cd8,81,fffffd80097fb750,ffff80002a2ba2a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c203c10,ffff80002a2ba2a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c203c10,ffff80002a2ba2a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806c203c10,ffff80002a2ba2a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806c203c10,ffff80002a2ba2a8) at closef+0x192 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a2ba2a8) at fdfree+0x116 sys/kern/kern_descrip.c:1182 exit1(ffff80002a2ba2a8,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a2ba2a8,ffff80003c516fe0,ffff80003c516f30) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c516fe0) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c516fe0) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:579 end trace frame: 0xffff80003c517060, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8070b9a998, 0x48, 0, 1) -> e ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xa9 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x4a sys/kern/kern_lock.c:260 clockintr_unbind(ffff80000149ba30,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001492000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:576 dtclose(11e5f,81,2000,ffff80002a2ba2a8) at dtclose+0x105 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80002a2ba2a8) at dtclose+0x105 sys/dev/dt/dt_dev.c:232 spec_close(ffff80003c516c70) at spec_close+0x45f sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805f911cd8,81,fffffd80097fb750,ffff80002a2ba2a8) at VOP_CLOSE+0x133 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c203c10,ffff80002a2ba2a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c203c10,ffff80002a2ba2a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806c203c10,ffff80002a2ba2a8) at fdrop+0x126 sys/kern/kern_descrip.c:1267 closef(fffffd806c203c10,ffff80002a2ba2a8) at closef+0x192 sys/kern/kern_descrip.c:1251 fdfree(ffff80002a2ba2a8) at fdfree+0x116 sys/kern/kern_descrip.c:1182 exit1(ffff80002a2ba2a8,0,0,1) at exit1+0x59c sys/kern/kern_exit.c:215 sys_exit(ffff80002a2ba2a8,ffff80003c516fe0,ffff80003c516f30) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80003c516fe0) at syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c516fe0) at syscall+0xb08 sys/arch/amd64/amd64/trap.c:579 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7384f1c3b7f0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c516ad0 rbx 0 rdx 0 rcx 0xffff80002a2ba2a8 rax 0xffff8000299ddff0 r8 0x90 r9 0x1 r10 0xd7eaad0f9bee249f r11 0x736262ba34d9c1a3 r12 0 r13 0x1 r14 0x28 r15 0x3 rip 0xffffffff81abd439 witness_checkorder+0xa9 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c516a20 ss 0x10 witness_checkorder+0xa9: movl 0x20(%r14),%r15d ddb{1}> show proc PROC (syz-executor) tid=285991 pid=68946 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a2ba2a8 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003bc094a8,0xffffffff838e5298 process=0xffff80003c4be210 user=0xffff80003c512000, vmspace=0xfffffd8070b9a998 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 25990 170248 65298 0 3 0x80 fsleep syz-executor 25990 408424 65298 0 3 0x4000080 pipewr syz-executor 26403 409290 45587 0 3 0x80 fsleep syz-executor 26403 312332 45587 0 3 0x4000080 piperd syz-executor 53940 283528 68816 0 3 0x80 fsleep syz-executor 53940 414974 68816 0 3 0x4000080 ttyin syz-executor 69045 215045 92988 0 3 0x80 fsleep syz-executor 69045 434758 92988 0 3 0x4000080 lockf syz-executor 91605 244904 16804 0 3 0x80 fsleep syz-executor 91605 325635 16804 0 3 0x4000080 piperd syz-executor 29885 384748 21858 0 3 0x80 fsleep syz-executor 29885 369532 21858 0 3 0x4000080 kqread syz-executor 29885 136434 21858 0 3 0x4000080 fsleep syz-executor 16804 404168 65813 0 3 0x82 nanoslp syz-executor 50065 64254 0 0 3 0x14200 acct acct 7681 21308 1 0 3 0x100083 ttyin getty 45587 310235 65813 0 3 0x82 nanoslp syz-executor 92988 237597 65813 0 3 0x82 nanoslp syz-executor 21858 263512 65813 0 3 0x82 nanoslp syz-executor 7614 40115 0 0 3 0x14200 bored sosplice 65298 512014 65813 0 3 0x82 nanoslp syz-executor 11223 488457 65813 0 3 0x82 nanoslp syz-executor 68816 486998 65813 0 3 0x82 nanoslp syz-executor 26582 303393 65813 0 3 0x82 wait syz-executor 65813 279645 45841 0 3 0x82 kqread syz-executor 45841 22970 39029 0 3 0x10008a sigsusp ksh 39029 392618 92395 0 3 0x98 kqread sshd-session 92395 148973 84462 0 3 0x92 kqread sshd-session 84462 322178 1 0 3 0x88 kqread sshd 51822 1603 67852 74 3 0x1100092 bpf pflogd 67852 469464 1 0 3 0x80 sbwait pflogd 51330 373396 76122 73 3 0x1100090 kqread syslogd 76122 465149 1 0 3 0x100082 sbwait syslogd 36805 14332 1 0 3 0x100080 kqread resolvd 65037 76760 23638 77 3 0x100092 kqread dhcpleased 81856 290307 23638 77 3 0x100092 kqread dhcpleased 23638 29129 1 0 3 0x80 kqread dhcpleased 3502 234359 0 0 3 0x14200 bored smr 1843 44167 0 0 3 0x14200 pgzero zerothread 50035 29427 0 0 3 0x14200 aiodoned aiodoned 77736 185251 0 0 3 0x14200 syncer update 87577 461680 0 0 3 0x14200 cleaner cleaner 51501 506949 0 0 7 0x14200 reaper 89353 347297 0 0 3 0x14200 pgdaemon pagedaemon 268 219759 0 0 3 0x14200 bored viomb 342 198932 0 0 3 0x40014200 acpi0 acpi0 91766 404578 0 0 3 0x40014200 idle1 77035 177139 0 0 3 0x14200 bored softnet3 99207 281615 0 0 3 0x14200 bored softnet2 97727 92057 0 0 3 0x14200 bored softnet1 76739 334585 0 0 3 0x14200 bored softnet0 10696 254673 0 0 3 0x14200 bored systqmp 52542 46011 0 0 3 0x14200 bored systq 84506 233688 0 0 3 0x14200 tmoslp softclockmp 4212 98328 0 0 3 0x40014200 tmoslp softclock 27711 95917 0 0 3 0x40014200 idle0 1 264668 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 51501 (reaper) thread 0xffff8000ffffcf68 (506949) exclusive rwlock kmmaplk r = 0 (0xffffffff839da450) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x377 sys/kern/kern_rwlock.c:310 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5168 #3 uvm_unmap+0x81 sys/uvm/uvm_map.c:1792 #4 km_free+0x87 sys/uvm/uvm_km.c:831 #5 uvm_uarea_free+0x4f sys/uvm/uvm_glue.c:285 #6 reaper+0x1cb sys/kern/kern_exit.c:493 #7 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10246 11135K 11883K 166960K 15182 0 pcb 18 16K 18K 166960K 597 0 rtable 169 17K 17K 166960K 755 0 pf 37 18K 82K 166960K 167 0 ifaddr 33 5K 7K 166960K 126 0 ifgroup 55 2K 2K 166960K 200 0 sysctl 3 1K 9K 166960K 20 0 counters 68 36K 38K 166960K 206 0 ioctlops 0 0K 4K 166960K 1687 0 iov 1 16K 34K 166960K 87 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1458 92K 92K 166960K 3392 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 33 0 VM map 2 1K 1K 166960K 2 0 sem 28 3K 3K 166960K 114 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 110K 166960K 2213 0 sigio 1 0K 0K 166960K 41 0 proc 73 91K 140K 166960K 832 0 subproc 72 4K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 162 0 in_multi 58 4K 7K 166960K 216 0 ether_multi 1 0K 0K 166960K 16 0 mrt 2 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 271 1208K 1208K 166960K 271 0 exec 0 0K 1K 166960K 936 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 258 161K 178K 166960K 20738 0 UVM aobj 44 2K 2K 166960K 45 0 pinsyscall 43 86K 105K 166960K 3476 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 124 0 NDP 12 0K 2K 166960K 83 0 temp 84 8696K 8765K 166960K 147493 0 kqueue 13 20K 28K 166960K 343 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 440 0 437 5 4 1 3 0 8 0 rtentry 176 214 0 150 5 0 5 5 0 8 0 unpcb 144 1452 0 1433 15 14 1 5 0 8 0 syncache 336 11 0 11 6 6 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 625 0 621 20 19 1 7 0 8 0 arp 128 31 0 19 1 0 1 1 0 8 0 inpcb 328 2265 0 2255 41 36 5 12 0 8 3 nd6 144 38 0 25 1 0 1 1 0 8 0 pkpcb 40 17 0 17 6 5 1 1 0 8 1 kcovpl 48 12 0 4 1 0 1 1 0 8 0 mppekey 1024 3 0 3 1 1 0 1 0 8 0 ppxss 1192 49 0 49 6 5 1 1 0 8 1 pppxif 1504 8 0 8 4 3 1 1 0 8 1 pffrag 232 26 0 18 1 0 1 1 0 482 0 pffrnode 88 24 0 16 1 0 1 1 0 8 0 pffrent 40 103 0 95 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfstitem 24 121 0 66 1 0 1 1 0 8 0 pfstkey 128 121 0 66 3 0 3 3 0 8 0 pfstate 384 121 0 66 7 0 7 7 0 8 0 pfrule 1344 28 0 21 2 1 1 2 0 8 0 rttmr 136 3 0 3 3 3 0 1 0 8 0 art_heap8 4096 5 0 1 5 1 4 4 0 8 0 art_heap4 256 992 0 715 29 9 20 26 0 8 1 art_table 32 997 0 716 4 0 4 4 0 8 0 art_node 16 201 0 144 1 0 1 1 0 8 0 sysvmsgpl 40 9 0 7 2 1 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 107 0 81 1 0 1 1 0 8 0 shmpl 112 42 0 1 2 0 2 2 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 5183 0 3669 96 1 95 96 0 8 0 ffsino 288 5183 0 3669 109 0 109 109 0 8 0 nchpl 144 8251 0 6548 64 0 64 64 0 8 0 rtmask 32 8 0 8 4 4 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 28369 0 28369 4 3 1 2 0 8 1 percpumem 16 118 0 69 1 0 1 1 0 8 0 kstatmem 264 120 0 92 4 1 3 3 0 8 0 scsiplug 72 4 0 4 3 2 1 1 0 8 1 scxspl 216 37920 0 37920 16 15 1 8 1 8 1 plimitpl 152 361 0 344 1 0 1 1 0 8 0 sigapl 424 2553 0 2501 11 2 9 9 0 8 2 knotepl 120 587 0 0 18 0 18 18 0 8 0 kqueuepl 224 627 0 616 6 5 1 5 0 8 0 pipepl 336 380 0 350 11 8 3 6 0 8 0 fdescpl 520 2500 0 2468 3 0 3 3 0 8 0 filepl 160 15514 0 15289 42 31 11 20 0 8 1 lockfpl 104 656 0 652 2 1 1 2 0 8 0 lockfspl 48 293 0 290 1 0 1 1 0 8 0 sessionpl 144 36 0 27 1 0 1 1 0 8 0 pgrppl 48 67 0 50 1 0 1 1 0 8 0 ucredpl 104 2503 0 2490 1 0 1 1 0 8 0 zombiepl 144 2503 0 2501 4 3 1 1 0 8 0 processpl 1240 2553 0 2501 6 0 6 6 0 8 0 procpl 656 5614 0 5555 9 1 8 8 0 8 1 srpgc 96 15 0 15 4 3 1 1 0 8 1 sosppl 168 14 0 14 5 5 0 1 0 8 0 sockpl 728 4217 0 4184 52 45 7 19 0 8 2 mcl64k 65536 11 0 0 2 0 2 2 0 8 0 mcl16k 16384 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 6 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 11 0 0 2 0 2 2 0 8 0 mcl4k 4096 125 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 42 0 0 5 0 5 5 0 8 0 mtagpl 96 110 0 0 3 0 3 3 0 8 0 mbufpl 256 1222 0 0 73 0 73 73 0 8 0 bufpl 280 14822 0 8680 439 0 439 439 0 8 0 anonpl 32 21787 0 0 178 2 176 176 0 246 0 amapchunkpl 152 71870 0 71213 60 31 29 31 0 158 2 amappl16 200 8850 0 8337 85 34 51 53 0 8 0 amappl15 192 9 0 8 1 0 1 1 0 8 0 amappl14 184 140 0 128 1 0 1 1 0 8 0 amappl13 176 6 0 6 1 1 0 1 0 8 0 amappl12 168 3233 0 3201 3 1 2 2 0 8 0 amappl11 160 54 0 40 1 0 1 1 0 8 0 amappl10 152 9 0 8 2 1 1 1 0 8 0 amappl9 144 247 0 247 1 1 0 1 0 8 0 amappl8 136 27 0 24 1 0 1 1 0 8 0 amappl7 128 129 0 117 1 0 1 1 0 8 0 amappl6 120 229 0 225 1 0 1 1 0 8 0 amappl5 112 140 0 130 1 0 1 1 0 8 0 amappl4 104 369 0 349 1 0 1 1 0 8 0 amappl3 96 14761 0 14644 5 1 4 4 0 8 0 amappl2 88 773 0 711 2 0 2 2 0 8 0 amappl1 80 19355 0 18743 16 1 15 15 0 8 0 amappl 88 19606 0 19422 5 0 5 5 0 92 0 dma32768 32768 2 0 2 2 1 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 255 0 255 3 2 1 1 0 8 1 dma64 64 9 0 9 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 44 0 1 1 0 1 1 0 8 0 uaddrrnd 24 2500 0 2468 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2500 0 2468 1 0 1 1 0 8 0 vmmpekpl 168 20097 0 20044 3 0 3 3 0 8 0 vmmpepl 168 161046 0 158504 156 25 131 132 0 357 1 vmsppl 480 2499 0 2468 8 3 5 5 0 8 0 rwobjpl 72 47800 0 40392 145 4 141 144 0 8 0 pdppl 4096 5008 0 4936 128 54 74 86 0 8 2 pvpl 32 30268 0 0 245 2 243 243 0 265 0 pmappl 256 2499 0 2468 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 521 0 107 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0