login: witness: lock_object uninitialized: 0xffff800001366028 Starting stack trace... witness_checkorder(ffff800001366028,9,0) at witness_checkorder+0x1af witness_debugger sys/kern/subr_witness.c:2522 [inline] witness_checkorder(ffff800001366028,9,0) at witness_checkorder+0x1af sys/kern/subr_witness.c:779 rw_enter_write(ffff800001366018) at rw_enter_write+0x7a sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800001366000) at unveil_delete_names+0x3d sys/kern/kern_unveil.c:102 unveil_destroy(ffff800037298910) at unveil_destroy+0xbd sys/kern/kern_unveil.c:183 exit1(ffff800037199978,0,0,1) at exit1+0x60f sys/kern/kern_exit.c:233 sys_exit(ffff800037199978,ffff80002a5462f0,ffff80002a546240) at sys_exit+0x1a syscall(ffff80002a5462f0) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a5462f0) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72e0fb431d60, count: 249 End of stack trace. Stopped at db_enter+0x25: addq $0x8,%rsp ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 witness_checkorder(ffff800001366028,9,0) at witness_checkorder+0x1b4 rw_enter_write(ffff800001366018) at rw_enter_write+0x7a sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800001366000) at unveil_delete_names+0x3d sys/kern/kern_unveil.c:102 unveil_destroy(ffff800037298910) at unveil_destroy+0xbd sys/kern/kern_unveil.c:183 exit1(ffff800037199978,0,0,1) at exit1+0x60f sys/kern/kern_exit.c:233 sys_exit(ffff800037199978,ffff80002a5462f0,ffff80002a546240) at sys_exit+0x1a syscall(ffff80002a5462f0) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a5462f0) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72e0fb431d60, count: -9 ddb{0}> show registers rdi 0 rsi 0x4000000000000000 rbp 0xffff80002a545fc0 rbx 0 rdx 0 rcx 0xffff800037199978 rax 0xffffffff834f2ff0 cpu_info_full_primary+0x1ff0 r8 0xffff80002a545f60 r9 0x8080808080808080 r10 0xffff80002a545eb0 r11 0xee5c6a0078e6cdcf r12 0 r13 0x1 r14 0xffff800001366028 r15 0x3 rip 0xffffffff81ac00e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a545fb0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=450770 pid=7124 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800037199978 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800037198a48,0xffff8000ffff6f60 process=0xffff800037298910 user=0xffff80002a541000, vmspace=0xfffffd806a70cc68 estcpu=36, cpticks=13, pctcpu=0.14, user=0, sys=9, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28918 514830 34241 0 2 0x480 syz-executor 28918 352663 34241 0 3 0x4000080 ttyopn syz-executor 28918 65956 34241 0 3 0x4000080 fsleep syz-executor 23199 36722 2028 0 2 0x2 syz-executor 4757 302942 2028 0 3 0x82 piperd syz-executor 38679 145464 2028 0 3 0x82 piperd syz-executor 13159 378398 2028 0 3 0x82 piperd syz-executor 34241 436801 2028 0 2 0x482 syz-executor 73298 402064 2028 0 2 0x482 syz-executor 61504 340690 2028 0 3 0x82 piperd syz-executor 30266 509132 0 0 3 0x14200 acct acct 98425 187175 0 0 3 0x14280 nfsidl nfsio 51288 82070 0 0 3 0x14280 nfsidl nfsio 99400 49421 0 0 3 0x14280 nfsidl nfsio 26885 45977 0 0 3 0x14280 nfsidl nfsio 4811 490173 0 0 3 0x14280 nfsidl nfsio 94880 275214 0 0 3 0x14280 nfsidl nfsio 64719 200469 0 0 3 0x14280 nfsidl nfsio 23193 73421 0 0 3 0x14280 nfsidl nfsio 36668 36729 0 0 3 0x14280 nfsidl nfsio 28840 298452 0 0 3 0x14280 nfsidl nfsio 88370 36463 0 0 3 0x14280 nfsidl nfsio 22790 366979 0 0 3 0x14280 nfsidl nfsio 26776 84895 0 0 3 0x14280 nfsidl nfsio 13554 418933 0 0 3 0x14280 nfsidl nfsio 75714 159475 0 0 3 0x14280 nfsidl nfsio 34690 487794 0 0 3 0x14280 nfsidl nfsio 83207 371813 0 0 3 0x14280 nfsidl nfsio 74908 392841 0 0 3 0x14280 nfsidl nfsio 17097 488915 0 0 3 0x14280 nfsidl nfsio 603 431793 0 0 3 0x14280 nfsidl nfsio 3093 350616 0 0 3 0x14200 bored sosplice 7987 223014 1 0 2 0x100083 getty 2028 53865 53047 0 3 0x82 nanoslp syz-executor 53047 332338 38054 0 3 0x10008a sigsusp ksh 38054 89534 75601 0 3 0x98 kqread sshd-session 75601 391622 97930 0 3 0x92 kqread sshd-session 97930 427421 1 0 3 0x88 kqread sshd 41544 404900 48871 74 3 0x1100092 bpf pflogd 48871 181603 1 0 3 0x80 sbwait pflogd 98 88245 78219 73 2 0x1100090 syslogd 78219 60627 1 0 3 0x100082 sbwait syslogd 92741 165840 1 0 7 0x100001 resolvd 81385 406019 53503 77 2 0x100013 dhcpleased 60743 349078 53503 77 3 0x100092 kqread dhcpleased 53503 89808 1 0 3 0x80 kqread dhcpleased 71788 489256 0 0 3 0x14200 bored smr 77173 496304 0 0 3 0x14200 pgzero zerothread 21826 5707 0 0 3 0x14200 aiodoned aiodoned 50044 502030 0 0 3 0x14200 syncer update 82728 288082 0 0 3 0x14200 cleaner cleaner 99464 117279 0 0 3 0x14200 reaper reaper 8194 247899 0 0 3 0x14200 pgdaemon pagedaemon 29595 365683 0 0 3 0x14200 bored viomb 91378 413289 0 0 3 0x40014200 acpi0 acpi0 23098 501873 0 0 3 0x40014200 idle1 81005 121637 0 0 3 0x14200 bored softnet3 41510 144293 0 0 3 0x14200 bored softnet2 8246 394618 0 0 3 0x14200 bored softnet1 52177 427961 0 0 2 0x14200 softnet0 44916 405979 0 0 3 0x14200 bored systqmp 23559 472110 0 0 3 0x14200 bored systq 70115 503234 0 0 3 0x14200 tmoslp softclockmp 87404 355557 0 0 3 0x40014200 tmoslp softclock 68242 334127 0 0 3 0x40014200 idle0 1 506628 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 52177 (softnet0) thread 0xffff8000ffffe288 (427961) shared rwlock softnet0 r = 0 (0xffff80000002c070) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 taskq_thread+0x12a sys/kern/kern_task.c:444 #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10199 11197K 11550K 166960K 11968 0 pcb 17 15K 16K 166960K 161 0 rtable 172 5K 7K 166960K 735 0 pf 35 17K 21K 166960K 89 0 ifaddr 36 5K 7K 166960K 98 0 ifgroup 56 2K 2K 166960K 119 0 sysctl 2 0K 0K 166960K 2 0 counters 64 36K 37K 166960K 98 0 ioctlops 0 0K 4K 166960K 1539 0 iov 0 0K 18K 166960K 36 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1415 89K 89K 166960K 2171 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 62 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 10 33K 97K 166960K 904 0 sigio 0 0K 0K 166960K 10 0 proc 78 115K 140K 166960K 923 0 subproc 88 5K 7K 166960K 452 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 88 0 in_multi 74 5K 7K 166960K 230 0 ether_multi 1 0K 0K 166960K 4 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 591 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 184 55K 87K 166960K 9228 0 UVM aobj 26 4K 4K 166960K 26 0 pinsyscall 36 72K 112K 166960K 2298 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 33 0 NDP 14 0K 2K 166960K 68 0 temp 53 6822K 6949K 166960K 25849 0 kqueue 13 20K 28K 166960K 132 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 89 0 86 1 0 1 1 0 8 0 rtentry 112 238 0 162 4 0 4 4 0 8 1 unpcb 144 801 0 784 11 10 1 6 0 8 0 syncache 336 8 0 8 3 2 1 1 0 8 1 tcpqe 32 4 0 4 3 2 1 1 0 8 1 tcpcb 808 189 0 183 5 4 1 4 0 8 0 arp 120 41 0 27 1 0 1 1 0 8 0 inpcb 336 812 0 801 9 6 3 7 0 8 2 nd6 136 59 0 41 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 kcovpl 48 34 0 28 1 0 1 1 0 8 0 ppxss 1168 3 0 3 3 2 1 1 0 8 1 pffrag 232 8 0 2 1 0 1 1 0 482 0 pffrnode 88 7 0 2 1 0 1 1 0 8 0 pffrent 40 55 0 49 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 74 0 26 1 0 1 1 0 8 0 pfstkey 128 74 0 26 2 0 2 2 0 8 0 pfstate 376 74 0 26 6 1 5 5 0 8 0 pfrule 1344 24 0 17 2 0 2 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 983 0 654 33 9 24 31 0 8 3 art_table 32 985 0 654 4 0 4 4 0 8 1 art_node 16 237 0 169 1 0 1 1 0 8 0 sysvmsgpl 40 9 0 3 1 0 1 1 0 8 0 semapl 112 58 0 48 1 0 1 1 0 8 0 shmpl 112 23 0 0 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 2623 0 1077 97 0 97 97 0 8 0 ffsino 272 2623 0 1077 105 1 104 104 0 8 0 nchpl 144 3619 0 1887 65 0 65 65 0 8 0 uvmvnodes 80 3348 0 0 69 0 69 69 0 8 0 vnodes 216 3348 0 0 186 0 186 186 0 8 0 namei 1024 13477 0 13476 4 3 1 2 0 8 0 percpumem 16 63 0 17 1 0 1 1 0 8 0 kstatmem 264 58 0 34 3 0 3 3 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 10869 0 10869 10 9 1 8 1 8 1 plimitpl 152 167 0 151 1 0 1 1 0 8 0 sigapl 424 1180 0 1115 11 2 9 9 0 8 0 futexpl 64 9162 0 9161 1 0 1 1 0 8 0 knotepl 120 538 0 0 17 1 16 17 0 8 0 kqueuepl 216 183 0 174 1 0 1 1 0 8 0 pipepl 320 248 0 221 3 0 3 3 0 8 0 fdescpl 496 1139 0 1115 6 1 5 6 0 8 1 filepl 152 6217 0 5993 20 9 11 16 0 8 1 lockfpl 104 165 0 163 1 0 1 1 0 8 0 lockfspl 48 68 0 66 1 0 1 1 0 8 0 sessionpl 144 54 0 45 1 0 1 1 0 8 0 pgrppl 48 165 0 149 1 0 1 1 0 8 0 ucredpl 104 798 0 785 1 0 1 1 0 8 0 zombiepl 144 1210 0 1209 2 1 1 1 0 8 0 processpl 1160 1180 0 1115 6 0 6 6 0 8 0 procpl 648 2139 0 2072 9 1 8 8 0 8 0 srpgc 96 6 0 6 1 1 0 1 0 8 0 sosppl 168 4 0 4 1 1 0 1 0 8 0 sockpl 664 1717 0 1686 24 19 5 14 0 8 2 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 157 0 0 20 0 20 20 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 19 0 0 1 0 1 1 0 8 0 mbufpl 256 1154 0 0 72 0 72 72 0 8 0 bufpl 280 3439 0 105 239 0 239 239 0 8 0 anonpl 24 216662 0 213574 62 6 56 60 0 185 25 amapchunkpl 152 30143 0 29798 37 12 25 30 0 158 8 amappl16 200 5247 0 5239 22 14 8 15 0 8 6 amappl15 192 29 0 29 1 1 0 1 0 8 0 amappl14 184 152 0 139 1 0 1 1 0 8 0 amappl13 176 10 0 10 2 2 0 1 0 8 0 amappl12 168 1985 0 1960 4 1 3 3 0 8 1 amappl11 160 52 0 38 1 0 1 1 0 8 0 amappl10 152 21 0 21 2 2 0 1 0 8 0 amappl9 144 155 0 155 1 1 0 1 0 8 0 amappl8 136 38 0 35 1 0 1 1 0 8 0 amappl7 128 138 0 125 1 0 1 1 0 8 0 amappl6 120 277 0 276 1 0 1 1 0 8 0 amappl5 112 186 0 174 1 0 1 1 0 8 0 amappl4 104 388 0 371 1 0 1 1 0 8 0 amappl3 96 5466 0 5399 3 0 3 3 0 8 0 amappl2 88 1485 0 1407 3 0 3 3 0 8 0 amappl1 80 11767 0 11215 16 2 14 15 0 8 0 amappl 88 8691 0 8566 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 25 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1139 0 1114 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1139 0 1114 1 0 1 1 0 8 0 vmmpekpl 168 11508 0 11458 4 0 4 4 0 8 0 vmmpepl 168 79531 0 77990 103 6 97 101 0 357 14 vmsppl 448 1138 0 1114 6 2 4 5 0 8 0 rwobjpl 56 28937 0 24713 61 1 60 60 0 8 0 pdppl 4096 2285 0 2228 119 52 67 87 0 8 10 pvpl 32 18497 0 0 150 1 149 149 0 265 0 pmappl 248 1138 0 1114 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 493 0 87 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 witness_checkorder(ffff800001366028,9,0) at witness_checkorder+0x1b4 rw_enter_write(ffff800001366018) at rw_enter_write+0x7a sys/kern/kern_rwlock.c:128 unveil_delete_names(ffff800001366000) at unveil_delete_names+0x3d sys/kern/kern_unveil.c:102 unveil_destroy(ffff800037298910) at unveil_destroy+0xbd sys/kern/kern_unveil.c:183 exit1(ffff800037199978,0,0,1) at exit1+0x60f sys/kern/kern_exit.c:233 sys_exit(ffff800037199978,ffff80002a5462f0,ffff80002a546240) at sys_exit+0x1a syscall(ffff80002a5462f0) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a5462f0) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72e0fb431d60, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff800029b7bff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a kd_curproc sys/dev/kcov.c:580 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x1a sys/dev/kcov.c:153 __mp_lock(ffffffff835a0960) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff835a0960) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144 ktrgenio(ffff8000ffffca30,4,0,ffff800000b4cd70,1a) at ktrgenio+0x238 sys/kern/kern_ktrace.c:258 dofilereadv(ffff8000ffffca30,4,ffff80002a056318,0,ffff80002a0563d0) at dofilereadv+0x42f sys/kern/sys_generic.c:268 sys_read(ffff8000ffffca30,ffff80002a056480,ffff80002a0563d0) at sys_read+0xa2 sys/kern/sys_generic.c:172 syscall(ffff80002a056480) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a056480) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7cbc5b58d8e0, count: -10