uvm_fault(0xfffffd80695a6c10, 0x8, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0x266: movl 0x8(%r15),%r12d TID PID UID PRFLAGS PFLAGS CPU COMMAND 350882 29250 0 0 0 0 syz-executor *195936 58105 60928 0x1010 0x4080000 1K syz-executor witness_checkorder(ffff8000015e5818,9,0) at witness_checkorder+0x266 sys/kern/subr_witness.c:794 mtx_enter(ffff8000015e5808) at mtx_enter+0x47 sys/kern/kern_lock.c:238 klist_mutex_lock(ffff8000015e5808) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352 klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline] klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283 bpfsdetach(ffff800001597640) at bpfsdetach+0x12f sys/net/bpf.c:1800 bpfdetach(ffff8000015af000) at bpfdetach+0xa6 if_detach(ffff8000015af000) at if_detach+0x14f sys/net/if.c:1195 tun_clone_destroy(ffff8000015af000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339 if_clone_destroy(ffff80002f7be1f0) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000015ff9f0,80206979,ffff80002f7be1f0,ffff800030982020) at ifioctl+0x5c5 sys_ioctl(ffff800030982020,ffff80002f7be3d0,ffff80002f7be320) at sys_ioctl+0x67c syscall(ffff80002f7be3d0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002f7be3d0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x939fe6f1360, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd80695a6c10, 0x8, 0, 1) -> e ddb{1}> trace witness_checkorder(ffff8000015e5818,9,0) at witness_checkorder+0x266 sys/kern/subr_witness.c:794 mtx_enter(ffff8000015e5808) at mtx_enter+0x47 sys/kern/kern_lock.c:238 klist_mutex_lock(ffff8000015e5808) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352 klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline] klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283 bpfsdetach(ffff800001597640) at bpfsdetach+0x12f sys/net/bpf.c:1800 bpfdetach(ffff8000015af000) at bpfdetach+0xa6 if_detach(ffff8000015af000) at if_detach+0x14f sys/net/if.c:1195 tun_clone_destroy(ffff8000015af000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339 if_clone_destroy(ffff80002f7be1f0) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000015ff9f0,80206979,ffff80002f7be1f0,ffff800030982020) at ifioctl+0x5c5 sys_ioctl(ffff800030982020,ffff80002f7be3d0,ffff80002f7be320) at sys_ioctl+0x67c syscall(ffff80002f7be3d0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002f7be3d0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x939fe6f1360, count: -13 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe71 rbp 0xffff80002f7bdeb0 rbx 0 rdx 0 rcx 0xffff800030982020 rax 0xffff800029b7bff0 r8 0x44b82fa09b5a53 r9 0x1 r10 0x3535bac610e207c r11 0x4f5b740ae7ba8fb1 r12 0 r13 0xdeafbeaddeafbead r14 0xffff8000015e5818 r15 0 rip 0xffffffff825a4466 witness_checkorder+0x266 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002f7bde00 ss 0 witness_checkorder+0x266: movl 0x8(%r15),%r12d ddb{1}> show proc PROC (syz-executor) tid=195936 pid=58105 tcnt=2 stat=onproc flags process=1010 proc=4080000 runpri=32, usrpri=85, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000309822a8 scnt=1 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003098e7c8,0xffff80003098fc18 process=0xffff800029fe8da0 user=0xffff80002f7b9000, vmspace=0xfffffd80695a6c10 estcpu=35, cpticks=1, pctcpu=0.1, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16072 250372 7628 0 2 0 syz-executor 16367 26738 50651 0 2 0 syz-executor 16367 443920 50651 0 3 0x4000080 fsleep syz-executor 18120 61983 74139 60928 2 0x10 syz-executor 18120 11468 74139 60928 2 0x4000010 syz-executor 18120 521980 74139 60928 3 0x4000010 inode syz-executor 18120 399032 74139 60928 2 0x4000010 syz-executor 19055 494924 88787 0 3 0x80 nanoslp syz-executor 19055 83208 88787 0 3 0x4000080 ttyin syz-executor 19055 472439 88787 0 3 0x4000000 inode syz-executor 19055 507899 88787 0 3 0x4000080 fsleep syz-executor 29250 350882 54080 0 7 0 syz-executor 29250 438149 54080 0 2 0x4000000 syz-executor 29250 344116 54080 0 3 0x4000080 fsleep syz-executor 58105 210024 64095 60928 3 0x3010 suspend syz-executor *58105 195936 64095 60928 7 0x4081010 syz-executor 50651 23516 19019 0 3 0x82 nanoslp syz-executor 74139 79164 19019 0 3 0x82 nanoslp syz-executor 88787 352126 19019 0 3 0x82 nanoslp syz-executor 22135 522039 19019 0 3 0x82 nanoslp syz-executor 6928 392235 19019 0 3 0x82 nanoslp syz-executor 7628 63391 19019 0 3 0x82 nanoslp syz-executor 54080 30430 19019 0 3 0x82 nanoslp syz-executor 64095 263022 19019 0 3 0x82 nanoslp syz-executor 86504 372374 0 0 3 0x14200 bored sosplice 19019 501502 92620 0 3 0x82 kqread syz-executor 92620 79813 59948 0 3 0x10008a sigsusp ksh 59948 188546 53898 0 3 0x98 kqread sshd-session 53898 187488 61706 0 3 0x92 kqread sshd-session 74404 506865 1 0 3 0x100083 ttyin getty 61706 355728 1 0 3 0x88 kqread sshd 39793 443751 67987 74 3 0x1100092 bpf pflogd 67987 214121 1 0 3 0x80 sbwait pflogd 52817 282389 36403 73 3 0x1100090 kqread syslogd 36403 352459 1 0 3 0x100082 sbwait syslogd 43089 45431 1 0 3 0x100080 kqread resolvd 26499 435906 53961 77 3 0x100092 kqread dhcpleased 65601 149362 53961 77 3 0x100092 kqread dhcpleased 53961 391159 1 0 3 0x80 kqread dhcpleased 44600 70451 0 0 3 0x14200 bored smr 17854 111313 0 0 2 0x14200 zerothread 87740 489338 0 0 3 0x14200 aiodoned aiodoned 55972 355043 0 0 3 0x14200 syncer update 57489 86875 0 0 3 0x14200 cleaner cleaner 67699 278655 0 0 3 0x14200 kmmaplk reaper 92105 261962 0 0 3 0x14200 pgdaemon pagedaemon 81702 343237 0 0 3 0x14200 bored viomb 24407 313261 0 0 3 0x40014200 acpi0 acpi0 24547 4273 0 0 3 0x40014200 idle1 38262 216443 0 0 3 0x14200 bored softnet3 13685 237445 0 0 3 0x14200 bored softnet2 37229 306128 0 0 3 0x14200 bored softnet1 10525 184153 0 0 3 0x14200 bored softnet0 33101 513297 0 0 3 0x14200 bored systqmp 13512 107374 0 0 3 0x14200 bored systq 97 103511 0 0 3 0x14200 tmoslp softclockmp 58996 158192 0 0 3 0x40014200 tmoslp softclock 69985 176848 0 0 3 0x40014200 idle0 1 36643 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 16072 (syz-executor) thread 0xffff800030982530 (250372) exclusive rwlock vmmaplk r = 0 (0xfffffd80695a6b48) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 vm_map_lock_ln+0x143 sys/uvm/uvm_map.c:5252 #3 uvmfault_lookup+0xe8 sys/uvm/uvm_fault.c:1779 #4 uvm_fault_check+0x83e uvmfault_amapcopy sys/uvm/uvm_fault.c:236 [inline] #4 uvm_fault_check+0x83e sys/uvm/uvm_fault.c:710 #5 uvm_fault+0x112 sys/uvm/uvm_fault.c:600 #6 upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188 #7 usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436 #8 recall_trap+0x8 Process 18120 (syz-executor) thread 0xffff8000309836e8 (11468) exclusive rrwlock inode r = 0 (0xfffffd806eecc1b0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vget+0x2bd sys/kern/vfs_subr.c:676 #6 checkalias+0x126 sys/kern/vfs_subr.c:574 #7 ffs_vinit+0x13d #8 ffs_vget+0x429 sys/ufs/ffs/ffs_vfsops.c:1283 #9 ufs_lookup+0x16bc sys/ufs/ufs/ufs_lookup.c:573 #10 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #11 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566 #12 namei+0x7aa sys/kern/vfs_lookup.c:250 #13 vn_open+0x13f sys/kern/vfs_vnops.c:140 #14 doopenat+0x31d sys/kern/vfs_syscalls.c:1123 #15 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #15 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #16 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806bad5700) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:169 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230 #6 ufs_lookup+0x16bc sys/ufs/ufs/ufs_lookup.c:573 #7 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #8 vfs_lookup+0x8fa sys/kern/vfs_lookup.c:566 #9 namei+0x7aa sys/kern/vfs_lookup.c:250 #10 vn_open+0x13f sys/kern/vfs_vnops.c:140 #11 doopenat+0x31d sys/kern/vfs_syscalls.c:1123 #12 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #12 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8070c88a30) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 vn_open+0x13f sys/kern/vfs_vnops.c:140 #8 doopenat+0x31d sys/kern/vfs_syscalls.c:1123 #9 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #9 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #10 Xsyscall+0x128 Process 18120 (syz-executor) thread 0xffff80002a03f6e0 (399032) exclusive rwlock futex r = 0 (0xffffffff8345a0b0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 sys_futex+0x69 sys/kern/sys_futex.c:98 #2 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #2 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #3 Xsyscall+0x128 Process 19055 (syz-executor) thread 0xffff80002a03f458 (83208) exclusive rrwlock inode r = 0 (0xfffffd8070c882c0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 spec_open+0x302 sys/kern/spec_vnops.c:151 #6 VOP_OPEN+0x8b sys/kern/vfs_vops.c:138 #7 vn_open+0x708 sys/kern/vfs_vnops.c:177 #8 vndioctl+0xcb1 sys/dev/vnd.c:457 #9 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #10 vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525 #11 sys_ioctl+0x67c #12 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #12 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #13 Xsyscall+0x128 Process 19055 (syz-executor) thread 0xffff800030983970 (472439) exclusive rrwlock inode r = 0 (0xfffffd806db77e70) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 vn_open+0x13f sys/kern/vfs_vnops.c:140 #8 vndioctl+0xcb1 sys/dev/vnd.c:457 #9 VOP_IOCTL+0xac sys/kern/vfs_vops.c:264 #10 vn_ioctl+0xf6 sys/kern/vfs_vnops.c:525 #11 sys_ioctl+0x67c #12 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #12 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #13 Xsyscall+0x128 Process 58105 (syz-executor) thread 0xffff800030982020 (195936) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835c21a8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 __mp_acquire_count+0x58 #2 mi_switch+0x658 sys/kern/sched_bsd.c:460 #3 sleep_finish+0x219 sys/kern/kern_synch.c:416 #4 rw_enter+0x348 sys/kern/kern_rwlock.c:285 #5 lf_purgelocks+0x2f sys/kern/vfs_lockf.c:731 #6 vgonel+0x497 sys/kern/vfs_subr.c:1206 #7 vop_generic_revoke+0x3e6 sys/kern/vfs_default.c:128 #8 VOP_REVOKE+0x65 sys/kern/vfs_vops.c:291 #9 vdevgone+0x17b #10 bpfsdetach+0x117 sys/net/bpf.c:1802 #11 bpfdetach+0xa6 #12 if_detach+0x14f sys/net/if.c:1195 #13 tun_clone_destroy+0x2d6 sys/net/if_tun.c:339 #14 if_clone_destroy+0x1d7 sys/net/if.c:1384 #15 ifioctl+0x5c5 #16 sys_ioctl+0x67c #17 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #17 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #18 Xsyscall+0x128 exclusive rwlock clonelk r = 0 (0xffffffff8348ddb0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 if_clone_destroy+0x67 #2 ifioctl+0x5c5 #3 sys_ioctl+0x67c #4 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #4 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #5 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10201 14261K 14769K 166960K 12198 0 pcb 19 12K 12K 166960K 101 0 rtable 212 6K 7K 166960K 1333 0 pf 35 17K 21K 166960K 185 0 ifaddr 42 7K 7K 166960K 190 0 ifgroup 55 2K 2K 166960K 231 0 sysctl 3 0K 0K 166960K 3 0 counters 64 36K 36K 166960K 158 0 ioctlops 0 0K 4K 166960K 1554 0 iov 0 0K 12K 166960K 113 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1442 91K 91K 166960K 2304 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 15 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 96 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1690 195K 286K 166960K 12418 0 file desc 17 61K 89K 166960K 1153 0 sigio 0 0K 0K 166960K 21 0 proc 73 91K 128K 166960K 1455 0 subproc 104 6K 7K 166960K 508 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 341 0 in_multi 98 7K 7K 166960K 459 0 ether_multi 1 0K 0K 166960K 7 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 822 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 258 73K 92K 166960K 10809 0 UVM aobj 81 5K 5K 166960K 81 0 pinsyscall 42 84K 102K 166960K 3034 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 28 0 NDP 12 0K 1K 166960K 138 0 temp 51 6818K 7072K 166960K 42584 0 kqueue 13 20K 28K 166960K 125 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 168 0 165 2 0 2 2 0 8 1 rtentry 112 461 0 365 4 0 4 4 0 8 0 unpcb 144 507 0 489 5 4 1 4 0 8 0 syncache 336 6 0 6 3 3 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 808 169 0 164 4 3 1 2 0 8 0 arp 120 84 0 68 1 0 1 1 0 8 0 inpcb 336 915 0 905 19 15 4 7 0 8 3 nd6 136 117 0 93 1 0 1 1 0 8 0 pkpcb 40 8 0 8 4 4 0 1 0 8 0 kcovpl 48 39 0 31 1 0 1 1 0 8 0 ppxss 1168 9 0 9 3 2 1 1 0 8 1 pfstscr 40 1 0 1 1 1 0 1 0 8 0 pffrag 232 3 0 2 2 1 1 1 0 482 0 pffrnode 88 3 0 2 2 1 1 1 0 8 0 pffrent 40 48 0 47 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 5 0 0 1 0 1 1 0 8 0 pfstitem 24 94 0 65 1 0 1 1 0 8 0 pfstkey 128 96 0 67 2 0 2 2 0 8 0 pfstate 376 95 0 66 5 1 4 4 0 8 0 pfrule 1344 25 0 20 2 0 2 2 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1854 0 1411 35 7 28 29 0 8 0 art_table 32 1856 0 1411 4 0 4 4 0 8 0 art_node 16 459 0 374 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 3 2 1 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 94 0 84 1 0 1 1 0 8 0 shmpl 112 78 0 0 3 0 3 3 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2643 0 1075 98 0 98 98 0 8 0 ffsino 272 2643 0 1075 105 0 105 105 0 8 0 nchpl 144 3650 0 1912 65 0 65 65 0 8 0 uvmvnodes 80 3499 0 0 72 0 72 72 0 8 0 vnodes 216 3499 0 0 195 0 195 195 0 8 0 namei 1024 15454 0 15450 10 9 1 7 0 8 0 percpumem 16 93 0 47 1 0 1 1 0 8 0 kstatmem 264 118 0 94 2 0 2 2 0 8 0 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 25709 0 25709 11 10 1 8 1 8 1 plimitpl 152 211 0 194 1 0 1 1 0 8 0 sigapl 424 1393 0 1342 7 0 7 7 0 8 0 futexpl 64 9222 0 9218 5 4 1 1 0 8 0 knotepl 120 369 0 0 9 0 9 9 0 8 0 kqueuepl 216 281 0 272 5 4 1 5 0 8 0 pipepl 320 309 0 281 6 3 3 6 0 8 0 fdescpl 496 1374 0 1343 5 0 5 5 0 8 0 filepl 152 7283 0 7030 27 13 14 15 0 8 1 lockfpl 104 526 0 524 3 1 2 2 0 8 1 lockfspl 48 146 0 144 1 0 1 1 0 8 0 sessionpl 144 56 0 47 1 0 1 1 0 8 0 pgrppl 48 102 0 85 1 0 1 1 0 8 0 ucredpl 104 885 0 868 1 0 1 1 0 8 0 zombiepl 144 1711 0 1708 2 1 1 1 0 8 0 processpl 1160 1393 0 1342 5 1 4 5 0 8 0 procpl 648 2473 0 2411 7 0 7 7 0 8 0 srpgc 96 8 0 8 3 2 1 1 0 8 1 sosppl 168 3 0 3 2 2 0 1 0 8 0 sockpl 664 1606 0 1575 24 18 6 9 0 8 2 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 223 0 0 28 0 28 28 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 484 0 0 26 0 26 26 0 8 0 bufpl 280 7311 0 1137 442 0 442 442 0 8 0 anonpl 24 255050 0 251457 114 46 68 72 0 185 39 amapchunkpl 152 34750 0 34184 52 22 30 34 0 158 8 amappl16 200 5064 0 5041 20 14 6 15 0 8 3 amappl15 192 13 0 13 2 2 0 1 0 8 0 amappl14 184 182 0 170 1 0 1 1 0 8 0 amappl13 176 29 0 29 1 1 0 1 0 8 0 amappl12 168 2546 0 2514 3 1 2 2 0 8 0 amappl11 160 55 0 41 1 0 1 1 0 8 0 amappl10 152 9 0 8 2 1 1 1 0 8 0 amappl9 144 227 0 227 1 1 0 1 0 8 0 amappl8 136 31 0 28 1 0 1 1 0 8 0 amappl7 128 172 0 160 1 0 1 1 0 8 0 amappl6 120 472 0 471 1 0 1 1 0 8 0 amappl5 112 260 0 248 1 0 1 1 0 8 0 amappl4 104 404 0 384 1 0 1 1 0 8 0 amappl3 96 6670 0 6542 5 1 4 4 0 8 0 amappl2 88 1130 0 1061 2 0 2 2 0 8 0 amappl1 80 13160 0 12598 15 1 14 15 0 8 0 amappl 88 10143 0 9948 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 80 0 0 2 0 2 2 0 8 0 uaddrrnd 24 1374 0 1342 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1374 0 1342 1 0 1 1 0 8 0 vmmpekpl 168 13156 0 13107 3 0 3 3 0 8 0 vmmpepl 168 92141 0 90219 101 9 92 96 0 357 7 vmsppl 440 1373 0 1342 6 2 4 5 0 8 0 rwobjpl 56 32693 0 28161 66 2 64 64 0 8 0 pdppl 4096 2755 0 2684 143 70 73 83 0 8 2 pvpl 32 28146 0 0 227 0 227 227 0 265 0 pmappl 248 1373 0 1342 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 486 0 111 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff834e3ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835c1fa0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff835c1fa0) at __mp_lock+0x192 sys/kern/kern_lock.c:144 softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x729824558f60, count: 9 ddb{0}> trace x86_ipi_db(ffffffff834e3ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835c1fa0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff835c1fa0) at __mp_lock+0x192 sys/kern/kern_lock.c:144 softintr_dispatch(0) at softintr_dispatch+0x5b sys/arch/amd64/amd64/softintr.c:88 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x729824558f60, count: -6 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x266: movl 0x8(%r15),%r12d witness_checkorder(ffff8000015e5818,9,0) at witness_checkorder+0x266 sys/kern/subr_witness.c:794 mtx_enter(ffff8000015e5808) at mtx_enter+0x47 sys/kern/kern_lock.c:238 klist_mutex_lock(ffff8000015e5808) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352 klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline] klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283 bpfsdetach(ffff800001597640) at bpfsdetach+0x12f sys/net/bpf.c:1800 bpfdetach(ffff8000015af000) at bpfdetach+0xa6 if_detach(ffff8000015af000) at if_detach+0x14f sys/net/if.c:1195 tun_clone_destroy(ffff8000015af000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339 if_clone_destroy(ffff80002f7be1f0) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000015ff9f0,80206979,ffff80002f7be1f0,ffff800030982020) at ifioctl+0x5c5 sys_ioctl(ffff800030982020,ffff80002f7be3d0,ffff80002f7be320) at sys_ioctl+0x67c syscall(ffff80002f7be3d0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002f7be3d0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x939fe6f1360, count: 2 ddb{1}> trace witness_checkorder(ffff8000015e5818,9,0) at witness_checkorder+0x266 sys/kern/subr_witness.c:794 mtx_enter(ffff8000015e5808) at mtx_enter+0x47 sys/kern/kern_lock.c:238 klist_mutex_lock(ffff8000015e5808) at klist_mutex_lock+0x32 sys/kern/kern_event.c:2352 klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef klist_lock sys/kern/kern_event.c:2317 [inline] klist_invalidate(ffff8000015e58c8) at klist_invalidate+0xef sys/kern/kern_event.c:2283 bpfsdetach(ffff800001597640) at bpfsdetach+0x12f sys/net/bpf.c:1800 bpfdetach(ffff8000015af000) at bpfdetach+0xa6 if_detach(ffff8000015af000) at if_detach+0x14f sys/net/if.c:1195 tun_clone_destroy(ffff8000015af000) at tun_clone_destroy+0x2d6 sys/net/if_tun.c:339 if_clone_destroy(ffff80002f7be1f0) at if_clone_destroy+0x1d7 sys/net/if.c:1384 ifioctl(ffff8000015ff9f0,80206979,ffff80002f7be1f0,ffff800030982020) at ifioctl+0x5c5 sys_ioctl(ffff800030982020,ffff80002f7be3d0,ffff80002f7be320) at sys_ioctl+0x67c syscall(ffff80002f7be3d0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002f7be3d0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x939fe6f1360, count: -13