login: witness: exclusive lock of (rwlock) vmmaplk while share locked panic: share->excl Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 84959 87826 32767 0x10 0 0 syz-executor.0 * 59651 89793 32767 0x10 0x4000000 1K syz-executor.7 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff8257690f) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd witness_debugger sys/kern/subr_witness.c:2505 [inline] witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd sys/kern/subr_witness.c:772 rw_enter(fffffd8068dd18c0,21) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250 vm_map_lock_ln(fffffd8068dd18b8,41c,ffff80002c977000) at vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5466 uvm_map_extract(fffffd8068dd18b8,7f7ffffcd000,1000,ffff8000294d1a70,0) at uvm_map_extract+0x173 sys/uvm/uvm_map.c:4530 uvm_io(fffffd8068dd18b8,ffff8000294d1b08,0) at uvm_io+0x127 sys/uvm/uvm_io.c:100 sysctl_proc_args(ffff8000294d1f58,2,20000080,ffff8000294d1f88,ffff800023a6cd28) at sysctl_proc_args+0x24b sys/kern/kern_sysctl.c:1790 kern_sysctl(ffff8000294d1f54,3,20000080,ffff8000294d1f88,0,0,77d4a3fea4cf493b) at kern_sysctl+0xfd sys/kern/kern_sysctl.c:449 sys_sysctl(ffff800023a6cd28,ffff8000294d1ff8,ffff8000294d2050) at sys_sysctl+0x209 sys/kern/kern_sysctl.c:249 syscall(ffff8000294d20c0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294d20c0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22453d4ba90, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: share->excl ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff8257690f) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd witness_debugger sys/kern/subr_witness.c:2505 [inline] witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd sys/kern/subr_witness.c:772 rw_enter(fffffd8068dd18c0,21) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250 vm_map_lock_ln(fffffd8068dd18b8,41c,ffff80002c977000) at vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5466 uvm_map_extract(fffffd8068dd18b8,7f7ffffcd000,1000,ffff8000294d1a70,0) at uvm_map_extract+0x173 sys/uvm/uvm_map.c:4530 uvm_io(fffffd8068dd18b8,ffff8000294d1b08,0) at uvm_io+0x127 sys/uvm/uvm_io.c:100 sysctl_proc_args(ffff8000294d1f58,2,20000080,ffff8000294d1f88,ffff800023a6cd28) at sysctl_proc_args+0x24b sys/kern/kern_sysctl.c:1790 kern_sysctl(ffff8000294d1f54,3,20000080,ffff8000294d1f88,0,0,77d4a3fea4cf493b) at kern_sysctl+0xfd sys/kern/kern_sysctl.c:449 sys_sysctl(ffff800023a6cd28,ffff8000294d1ff8,ffff8000294d2050) at sys_sysctl+0x209 sys/kern/kern_sysctl.c:249 syscall(ffff8000294d20c0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294d20c0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22453d4ba90, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000294d16d0 rbx 0xffff800020ce9bff rdx 0xffff800000bf5a00 rcx 0 rax 0xffff800023a6cd28 r8 0x101010101010101 r9 0x8080808080808080 r10 0x95a1fe4f1917c11f r11 0xd775474cabe466b9 r12 0xffff800020ce9a00 r13 0 r14 0 r15 0x1 rip 0xffffffff8138d658 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000294d16c0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.7) pid=59651 stat=onproc flags process=10 proc=4000000 pri=32, usrpri=57, nice=20 forw=0xffffffffffffffff, list=0xffff800023a6cfc8,0xffff800023a6c558 process=0xffff8000fffee160 user=0xffff8000294cd000, vmspace=0xfffffd8068dd18b8 estcpu=29, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 75691 458159 92653 32767 2 0x10 syz-executor.5 87826 84959 89128 32767 7 0x10 syz-executor.0 4892 333040 88938 32767 2 0x10 syz-executor.3 4892 330234 88938 32767 3 0x4000090 fsleep syz-executor.3 89793 17969 43029 32767 2 0x10 syz-executor.7 *89793 59651 43029 32767 7 0x4000010 syz-executor.7 80794 501991 50551 32767 2 0x10 syz-executor.1 80794 14835 50551 32767 3 0x4000090 fsleep syz-executor.1 4238 351730 17499 32767 2 0x10 syz-executor.6 10712 113725 0 0 3 0x14200 bored sosplice 43029 15821 66727 32767 3 0x90 nanoslp syz-executor.7 66727 498881 2342 0 3 0x82 wait syz-executor.7 92653 378873 75815 32767 3 0x90 nanoslp syz-executor.5 17499 165410 5731 32767 3 0x90 nanoslp syz-executor.6 5731 469266 2342 0 3 0x82 wait syz-executor.6 75815 149820 2342 0 3 0x82 wait syz-executor.5 4459 163472 75889 32767 3 0x10 biowait syz-executor.2 50551 8396 4861 32767 3 0x90 nanoslp syz-executor.1 3905 136628 41319 32767 3 0x90 nanoslp syz-executor.4 88938 160317 77719 32767 3 0x90 nanoslp syz-executor.3 41319 494512 2342 0 3 0x82 wait syz-executor.4 77719 393366 2342 0 3 0x82 wait syz-executor.3 89128 155744 99767 32767 3 0x90 nanoslp syz-executor.0 75889 426749 2342 0 3 0x82 wait syz-executor.2 4861 74988 2342 0 3 0x82 wait syz-executor.1 99767 361056 2342 0 3 0x82 wait syz-executor.0 2342 446701 32399 0 3 0x82 kqread syz-fuzzer 2342 312192 32399 0 3 0x4000082 nanoslp syz-fuzzer 2342 183083 32399 0 3 0x4000082 thrsleep syz-fuzzer 2342 178669 32399 0 3 0x4000082 thrsleep syz-fuzzer 2342 363640 32399 0 3 0x4000082 nanoslp syz-fuzzer 2342 258752 32399 0 3 0x4000082 thrsleep syz-fuzzer 2342 241000 32399 0 3 0x4000082 thrsleep syz-fuzzer 2342 18260 32399 0 3 0x4000082 thrsleep syz-fuzzer 32399 334320 71081 0 3 0x10008a sigsusp ksh 71081 62442 64563 0 3 0x9a kqread sshd 96800 97628 1 0 3 0x100083 ttyin getty 64563 91335 1 0 3 0x88 kqread sshd 9376 429055 92232 73 3 0x1100090 kqread syslogd 92232 316164 1 0 3 0x100082 netio syslogd 41489 330093 1 0 3 0x100080 kqread resolvd 10770 234545 83600 77 3 0x100092 kqread dhcpleased 50651 454929 83600 77 3 0x100092 kqread dhcpleased 83600 137443 1 0 3 0x80 kqread dhcpleased 45779 115074 0 0 3 0x14200 bored smr 19177 72419 0 0 2 0x14200 zerothread 52521 280457 0 0 3 0x14200 aiodoned aiodoned 84928 350748 0 0 3 0x14200 syncer update 96005 124105 0 0 3 0x14200 cleaner cleaner 13411 212174 0 0 3 0x14200 reaper reaper 95597 317195 0 0 3 0x14200 pgdaemon pagedaemon 28734 44176 0 0 3 0x14200 bored viomb 44716 400162 0 0 3 0x40014200 acpi0 acpi0 51204 346585 0 0 3 0x40014200 idle1 46666 114963 0 0 3 0x14200 bored softnet 52234 246860 0 0 3 0x14200 bored systqmp 98574 171348 0 0 3 0x14200 bored systq 32253 453804 0 0 3 0x40014200 bored softclock 56566 171542 0 0 3 0x40014200 idle0 1 92494 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 89793 (syz-executor.7) thread 0xffff800023a6cd28 (59651) shared rwlock vmmaplk r = 0 (0xfffffd8068dd18d0) #0 witness_lock+0x44d #1 uvm_vslock+0xc8 sys/uvm/uvm_glue.c:129 #2 sys_sysctl+0x2d8 sys/kern/kern_sysctl.c:240 #3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff82941f10) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 sys_sysctl+0x1b3 sys/kern/kern_sysctl.c:233 #3 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #3 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #4 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff829de988) #0 witness_lock+0x44d #1 syscall+0x3ef mi_syscall sys/sys/syscall_mi.h:93 [inline] #1 syscall+0x3ef sys/arch/amd64/amd64/trap.c:585 #2 Xsyscall+0x128 Process 4459 (syz-executor.2) thread 0xffff800023a6d508 (163472) exclusive rrwlock inode r = 0 (0xfffffd80696561b8) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vget+0x1d3 sys/kern/vfs_subr.c:677 #6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1318 #8 ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487 #9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561 #11 namei+0x36a sys/kern/vfs_lookup.c:245 #12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1850 #13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80691c41a8) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1850 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10172 6407K 6419K 78643K 11262 0 pcb 13 8K 8K 78643K 13 0 rtable 242 7K 7K 78643K 367 0 ifaddr 81 16K 16K 78643K 82 0 counters 56 35K 35K 78643K 56 0 ioctlops 0 0K 2K 78643K 33 0 iov 0 0K 12K 78643K 14 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1270 79K 79K 78643K 1286 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 27 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 24 89K 117K 78643K 451 0 sigio 0 0K 0K 78643K 2 0 proc 56 74K 99K 78643K 465 0 subproc 104 6K 6K 78643K 104 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 45 0 in_multi 99 6K 6K 78643K 108 0 ether_multi 1 0K 0K 78643K 2 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 49 228K 228K 78643K 49 0 exec 0 0K 2K 78643K 631 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 292 80K 81K 78643K 6773 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 23 0 NDP 11 0K 2K 78643K 27 0 temp 103 4705K 4765K 78643K 4882 0 kqueue 12 18K 24K 78643K 46 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 46 0 43 1 0 1 1 0 8 0 rtentry 112 114 0 2 4 0 4 4 0 8 0 unpcb 136 95 0 80 1 0 1 1 0 8 0 syncache 296 16 0 16 2 1 1 1 0 8 1 tcpqe 32 268 0 268 1 0 1 1 0 8 1 tcpcb 736 103 0 90 4 0 4 4 0 8 1 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 304 259 0 243 3 0 3 3 0 8 1 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 48 27 0 1 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 490 0 1 31 0 31 31 0 8 0 art_table 32 491 0 1 4 0 4 4 0 8 0 art_node 16 113 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 21 0 9 1 0 1 1 0 8 0 semupl 112 8 0 8 1 0 1 1 0 8 1 semapl 112 13 0 3 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1837 0 409 90 0 90 90 0 8 0 ffsino 272 1837 0 409 96 0 96 96 0 8 0 nchpl 144 2453 0 794 62 0 62 62 0 8 0 uvmvnodes 80 1950 0 0 40 0 40 40 0 8 0 vnodes 224 1950 0 0 115 0 115 115 0 8 0 namei 1024 7476 0 7476 2 1 1 2 0 8 1 percpumem 16 40 0 0 1 0 1 1 0 8 0 scxspl 216 7628 0 7625 9 1 8 8 0 8 7 plimitpl 152 44 0 22 1 0 1 1 0 8 0 sigapl 424 734 0 683 7 0 7 7 0 8 0 futexpl 64 1840 0 1838 1 0 1 1 0 8 0 knotepl 120 152 0 0 5 0 5 5 0 8 0 kqueuepl 216 59 0 51 1 0 1 1 0 8 0 pipepl 336 151 0 123 3 0 3 3 0 8 0 fdescpl 496 719 0 684 7 1 6 6 0 8 0 filepl 152 2396 0 2158 11 1 10 10 0 8 0 lockfpl 104 55 0 53 1 0 1 1 0 8 0 lockfspl 48 22 0 20 1 0 1 1 0 8 0 sessionpl 144 23 0 7 1 0 1 1 0 8 0 pgrppl 48 26 0 10 1 0 1 1 0 8 0 ucredpl 96 229 0 211 1 0 1 1 0 8 0 zombiepl 144 684 0 683 1 0 1 1 0 8 0 processpl 1064 734 0 683 5 1 4 4 0 8 0 procpl 672 1101 0 1040 6 0 6 6 0 8 0 sosppl 168 7 0 6 1 0 1 1 0 8 0 sockpl 480 401 0 367 6 0 6 6 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 6 0 0 1 0 1 1 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 170 0 0 21 0 21 21 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 358 0 0 22 0 22 22 0 8 0 bufpl 288 3973 0 137 274 0 274 274 0 8 0 anonpl 24 152454 0 140448 102 3 99 101 0 186 18 amapchunkpl 152 15428 0 14719 33 1 32 32 0 158 1 amappl16 200 1669 0 1369 28 3 25 28 0 8 6 amappl15 192 176 0 169 1 0 1 1 0 8 0 amappl14 184 112 0 104 1 0 1 1 0 8 0 amappl13 176 80 0 78 1 0 1 1 0 8 0 amappl12 168 31 0 26 1 0 1 1 0 8 0 amappl11 160 155 0 141 1 0 1 1 0 8 0 amappl10 152 37 0 34 1 0 1 1 0 8 0 amappl9 144 516 0 511 1 0 1 1 0 8 0 amappl8 136 594 0 556 2 0 2 2 0 8 0 amappl7 128 166 0 152 1 0 1 1 0 8 0 amappl6 120 251 0 229 2 1 1 2 0 8 0 amappl5 112 424 0 403 1 0 1 1 0 8 0 amappl4 104 990 0 956 2 0 2 2 0 8 0 amappl3 96 173 0 162 1 0 1 1 0 8 0 amappl2 88 507 0 467 3 1 2 3 0 8 0 amappl1 80 15555 0 14936 18 3 15 18 0 8 0 amappl 88 6353 0 6118 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 719 0 684 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 719 0 684 1 0 1 1 0 8 0 vmmpekpl 168 9336 0 9291 3 0 3 3 0 8 0 vmmpepl 168 67368 0 64903 126 2 124 126 0 357 15 vmsppl 368 718 0 684 4 0 4 4 0 8 0 rwobjpl 56 18780 0 15636 46 0 46 46 0 8 0 pdppl 4096 1445 0 1368 111 30 81 91 0 8 4 pvpl 32 394139 0 377113 259 7 252 259 0 265 103 pmappl 248 718 0 684 4 1 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 669 0 33 19 0 19 19 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff829baff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff829de780) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829de780) at __mp_lock+0x129 sys/kern/kern_lock.c:147 intr_handler(ffff8000288aab30,ffff80000004ad00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff829de780) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829de780) at __mp_lock+0x133 sys/kern/kern_lock.c:147 syscall(ffff8000288aad10) at syscall+0x3ef mi_syscall sys/sys/syscall_mi.h:93 [inline] syscall(ffff8000288aad10) at syscall+0x3ef sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffcd510, count: 5 ddb{0}> trace x86_ipi_db(ffffffff829baff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff829de780) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829de780) at __mp_lock+0x129 sys/kern/kern_lock.c:147 intr_handler(ffff8000288aab30,ffff80000004ad00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff829de780) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829de780) at __mp_lock+0x133 sys/kern/kern_lock.c:147 syscall(ffff8000288aad10) at syscall+0x3ef mi_syscall sys/sys/syscall_mi.h:93 [inline] syscall(ffff8000288aad10) at syscall+0x3ef sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffcd510, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff8257690f) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd witness_debugger sys/kern/subr_witness.c:2505 [inline] witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd sys/kern/subr_witness.c:772 rw_enter(fffffd8068dd18c0,21) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250 vm_map_lock_ln(fffffd8068dd18b8,41c,ffff80002c977000) at vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5466 uvm_map_extract(fffffd8068dd18b8,7f7ffffcd000,1000,ffff8000294d1a70,0) at uvm_map_extract+0x173 sys/uvm/uvm_map.c:4530 uvm_io(fffffd8068dd18b8,ffff8000294d1b08,0) at uvm_io+0x127 sys/uvm/uvm_io.c:100 sysctl_proc_args(ffff8000294d1f58,2,20000080,ffff8000294d1f88,ffff800023a6cd28) at sysctl_proc_args+0x24b sys/kern/kern_sysctl.c:1790 kern_sysctl(ffff8000294d1f54,3,20000080,ffff8000294d1f88,0,0,77d4a3fea4cf493b) at kern_sysctl+0xfd sys/kern/kern_sysctl.c:449 sys_sysctl(ffff800023a6cd28,ffff8000294d1ff8,ffff8000294d2050) at sys_sysctl+0x209 sys/kern/kern_sysctl.c:249 syscall(ffff8000294d20c0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294d20c0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22453d4ba90, count: 3 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff8257690f) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd witness_debugger sys/kern/subr_witness.c:2505 [inline] witness_checkorder(fffffd8068dd18d0,9,0) at witness_checkorder+0x11bd sys/kern/subr_witness.c:772 rw_enter(fffffd8068dd18c0,21) at rw_enter+0xd1 sys/kern/kern_rwlock.c:250 vm_map_lock_ln(fffffd8068dd18b8,41c,ffff80002c977000) at vm_map_lock_ln+0xda sys/uvm/uvm_map.c:5466 uvm_map_extract(fffffd8068dd18b8,7f7ffffcd000,1000,ffff8000294d1a70,0) at uvm_map_extract+0x173 sys/uvm/uvm_map.c:4530 uvm_io(fffffd8068dd18b8,ffff8000294d1b08,0) at uvm_io+0x127 sys/uvm/uvm_io.c:100 sysctl_proc_args(ffff8000294d1f58,2,20000080,ffff8000294d1f88,ffff800023a6cd28) at sysctl_proc_args+0x24b sys/kern/kern_sysctl.c:1790 kern_sysctl(ffff8000294d1f54,3,20000080,ffff8000294d1f88,0,0,77d4a3fea4cf493b) at kern_sysctl+0xfd sys/kern/kern_sysctl.c:449 sys_sysctl(ffff800023a6cd28,ffff8000294d1ff8,ffff8000294d2050) at sys_sysctl+0x209 sys/kern/kern_sysctl.c:249 syscall(ffff8000294d20c0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000294d20c0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x22453d4ba90, count: -12