kernel: protection fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace witness_checkorder(fffffd80795270e8,9,0) at witness_checkorder+0x1ec sys/kern/subr_witness.c:794 mtx_enter(fffffd80795270d8) at mtx_enter+0x3e sys/kern/kern_lock.c:265 knote_remove(ffff800021268000,fffffd80795270d8,fffffd8079527160,3,0) at knote_remove+0x20d sys/kern/kern_event.c:1881 knote_fdclose(ffff800021268000,3) at knote_fdclose+0xae sys/kern/kern_event.c:1934 fdfree(ffff800021268000) at fdfree+0xdf sys/kern/kern_descrip.c:1196 exit1(ffff800021268000,0,0,1) at exit1+0x3e4 sys/kern/kern_exit.c:206 sys_exit(ffff800021268000,ffff80002634d4b0,ffff80002634d500) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002634d580) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff80002634d580) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a29a6ef2ee0, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff80002634d250 rbx 0xe rdx 0 rcx 0xffff800021268000 rax 0xffff800020d58ff0 r8 0x1 r9 0x1 r10 0x4eb2c8197205cda0 r11 0x2e4a64b2934e8479 r12 0 r13 0xfffffd80795270e8 r14 0x436011ab436111ab r15 0xffff800021268000 rip 0xffffffff8167002c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002634d1a0 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor.2) pid=423070 stat=onproc flags process=1018 proc=2000 pri=0, usrpri=76, nice=20 forw=0xffffffffffffffff, list=0xffff800021281aa0,0xffff8000212742c0 process=0xffff80002afeea00 user=0xffff800026348000, vmspace=0xfffffd8069cd9cc8 estcpu=36, cpticks=2, pctcpu=0.0 user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 9131 512830 11072 32767 2 0x10 syz-executor.5 9131 431732 11072 32767 7 0x4000010 syz-executor.5 43984 402222 47369 32767 2 0x10 syz-executor.7 58849 334395 49297 32767 2 0x10 syz-executor.3 58849 27785 49297 32767 3 0x4000090 fsleep syz-executor.3 58849 364880 49297 32767 2 0x4000010 syz-executor.3 58849 364738 49297 32767 2 0x4000010 syz-executor.3 76189 518150 40276 32767 3 0x90 nanoslp syz-executor.0 76189 335150 40276 32767 3 0x4000090 netcon syz-executor.0 76189 217877 40276 32767 3 0x4000090 fsleep syz-executor.0 48276 434648 0 0 3 0x14200 bored sosplice 47369 118077 21179 32767 3 0x90 nanoslp syz-executor.7 7033 165649 95069 32767 2 0x10 syz-executor.6 21179 293297 61282 0 3 0x82 wait syz-executor.7 95069 465202 61282 0 3 0x82 wait syz-executor.6 11072 304221 70201 32767 3 0x90 nanoslp syz-executor.5 21450 486587 81228 32767 3 0x90 nanoslp syz-executor.2 70201 475750 61282 0 3 0x82 wait syz-executor.5 17308 12279 35350 32767 2 0x10 syz-executor.4 22720 47113 70331 32767 2 0x10 syz-executor.1 35350 264243 61282 0 3 0x82 wait syz-executor.4 70331 413470 61282 0 3 0x82 wait syz-executor.1 49297 208378 66386 32767 3 0x90 nanoslp syz-executor.3 81228 248344 61282 0 3 0x82 wait syz-executor.2 66386 421712 61282 0 3 0x82 wait syz-executor.3 40276 54859 93258 32767 2 0x10 syz-executor.0 93258 187733 61282 0 3 0x82 wait syz-executor.0 61282 371130 11963 0 3 0x2000082 wait syz-fuzzer 61282 89994 11963 0 3 0x6000082 nanoslp syz-fuzzer 61282 319259 11963 0 3 0x6000082 thrsleep syz-fuzzer 61282 418868 11963 0 3 0x6000082 wait syz-fuzzer 61282 431874 11963 0 3 0x6000082 wait syz-fuzzer 61282 184755 11963 0 3 0x6000082 thrsleep syz-fuzzer 61282 252318 11963 0 3 0x6000082 wait syz-fuzzer 61282 72613 11963 0 3 0x6000082 wait syz-fuzzer 61282 66314 11963 0 3 0x6000082 wait syz-fuzzer 61282 390861 11963 0 3 0x6000082 wait syz-fuzzer 61282 471577 11963 0 3 0x6000082 thrsleep syz-fuzzer 61282 260378 11963 0 3 0x6000082 thrsleep syz-fuzzer 61282 3783 11963 0 3 0x6000082 wait syz-fuzzer 61282 475888 11963 0 2 0x6000082 syz-fuzzer 61282 110449 11963 0 2 0x6000082 syz-fuzzer 11963 414782 15950 0 3 0x10008a sigsusp ksh 15950 146487 50276 0 3 0x9a kqread sshd 41101 119144 1 0 3 0x100083 ttyin getty 50276 204386 1 0 3 0x88 kqread sshd 39740 5326 86303 73 3 0x1100090 kqread syslogd 86303 310794 1 0 3 0x100082 netio syslogd 96904 421247 1 0 3 0x100080 kqread resolvd 73538 136284 59021 77 3 0x100092 kqread dhcpleased 94124 454589 59021 77 3 0x100092 kqread dhcpleased 59021 422431 1 0 3 0x80 kqread dhcpleased 87939 326793 0 0 3 0x14200 bored smr 57314 459961 0 0 2 0x14200 zerothread 3316 100255 0 0 3 0x14200 aiodoned aiodoned 71630 459668 0 0 3 0x14200 syncer update 79678 237491 0 0 3 0x14200 cleaner cleaner 55835 328582 0 0 2 0x14200 reaper 37504 247781 0 0 3 0x14200 pgdaemon pagedaemon 11244 432409 0 0 3 0x14200 bored viomb 81234 457953 0 0 3 0x40014200 acpi0 acpi0 76195 436615 0 0 3 0x40014200 idle1 63961 419784 0 0 3 0x14200 bored softnet3 61407 438017 0 0 3 0x14200 bored softnet2 99616 104813 0 0 3 0x14200 bored softnet1 27646 482131 0 0 3 0x14200 bored softnet0 23620 136634 0 0 3 0x14200 bored systqmp 24495 524281 0 0 3 0x14200 bored systq 63615 298226 0 0 3 0x40014200 bored softclock 58590 394782 0 0 3 0x40014200 idle0 1 557 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10186 6409K 6420K 78643K 11264 0 pcb 13 10K 12K 78643K 15 0 rtable 242 6K 7K 78643K 377 0 pf 29 8K 8K 78643K 29 0 ifaddr 44 15K 15K 78643K 46 0 ifgroup 50 2K 2K 78643K 50 0 counters 60 35K 35K 78643K 60 0 ioctlops 0 0K 2K 78643K 98 0 iov 0 0K 2K 78643K 66 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1278 80K 80K 78643K 1397 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 25 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 22 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 23 85K 121K 78643K 1187 0 sigio 0 0K 0K 78643K 24 0 proc 56 78K 127K 78643K 509 0 subproc 104 6K 6K 78643K 104 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 83 0 in_multi 99 7K 7K 78643K 107 0 ether_multi 1 0K 0K 78643K 3 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 55 254K 254K 78643K 55 0 exec 0 0K 1K 78643K 449 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 336 84K 85K 78643K 13916 0 UVM aobj 98 3K 3K 78643K 100 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 39 0 NDP 11 0K 2K 78643K 27 0 temp 74 5920K 6000K 78643K 6463 0 kqueue 12 18K 22K 78643K 109 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 88 0 85 2 1 1 2 0 8 0 rtentry 112 115 0 1 4 0 4 4 0 8 0 unpcb 144 979 0 966 6 5 1 6 0 8 0 syncache 304 19 0 19 3 3 0 1 0 8 0 tcpqe 32 191 0 191 2 2 0 1 0 8 0 tcpcb 808 1244 0 1232 25 21 4 14 0 8 2 arp 120 18 0 0 1 0 1 1 0 8 0 ipq 40 4 0 4 1 1 0 1 0 8 0 ipqe 40 16 0 16 1 1 0 1 0 8 0 inpcb 368 1494 0 1475 22 17 5 13 0 8 3 nd6 136 28 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 460 0 0 29 0 29 29 0 8 0 art_table 32 461 0 0 4 0 4 4 0 8 0 art_node 16 114 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 2 1 0 1 1 0 8 0 semapl 112 15 0 5 1 0 1 1 0 8 0 shmpl 112 97 0 2 3 0 3 3 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2764 0 1326 91 0 91 91 0 8 0 ffsino 272 2764 0 1326 97 0 97 97 0 8 0 nchpl 144 4400 0 2721 63 0 63 63 0 8 0 uvmvnodes 80 2877 0 0 59 0 59 59 0 8 0 vnodes 216 2877 0 0 160 0 160 160 0 8 0 namei 1024 14339 0 14339 3 2 1 2 0 8 1 percpumem 16 43 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 14258 0 14258 11 10 1 8 1 8 1 plimitpl 152 188 0 165 2 1 1 2 0 8 0 sigapl 424 1483 0 1431 8 1 7 7 0 8 0 futexpl 64 9007 0 9005 1 0 1 1 0 8 0 knotepl 120 285 0 0 9 0 9 9 0 8 0 kqueuepl 216 277 0 269 9 8 1 5 0 8 0 pipepl 320 234 0 206 3 0 3 3 0 8 0 fdescpl 496 1465 0 1431 6 0 6 6 0 8 0 filepl 152 8244 0 7997 20 8 12 19 0 8 2 lockfpl 104 180 0 178 1 0 1 1 0 8 0 lockfspl 48 77 0 75 1 0 1 1 0 8 0 sessionpl 144 23 0 7 1 0 1 1 0 8 0 pgrppl 48 32 0 16 1 0 1 1 0 8 0 ucredpl 104 792 0 774 1 0 1 1 0 8 0 zombiepl 144 1432 0 1431 1 0 1 1 0 8 0 processpl 1072 1483 0 1431 5 0 5 5 0 8 0 procpl 680 3497 0 3424 10 2 8 8 0 8 1 sosppl 168 15 0 15 2 2 0 1 0 8 0 sockpl 488 2611 0 2576 72 63 9 29 0 8 4 mcl64k 65536 11 0 0 2 0 2 2 0 8 0 mcl16k 16384 10 0 0 2 0 2 2 0 8 0 mcl12k 12288 9 0 0 1 0 1 1 0 8 0 mcl9k 9216 5 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 15 0 0 2 0 2 2 0 8 0 mcl2k2 2112 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 242 0 0 31 0 31 31 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 966 0 0 59 0 59 59 0 8 0 bufpl 288 5783 0 145 403 0 403 403 0 8 0 anonpl 24 291873 0 281080 94 12 82 91 0 186 8 amapchunkpl 152 44445 0 43579 42 3 39 40 0 158 4 amappl16 200 7884 0 7619 27 12 15 27 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 164 0 151 2 1 1 2 0 8 0 amappl13 176 11 0 11 1 1 0 1 0 8 0 amappl12 168 2094 0 2059 3 1 2 2 0 8 0 amappl11 160 52 0 42 1 0 1 1 0 8 0 amappl10 152 29 0 19 1 0 1 1 0 8 0 amappl9 144 187 0 186 1 0 1 1 0 8 0 amappl8 136 248 0 183 3 0 3 3 0 8 0 amappl7 128 68 0 55 2 1 1 2 0 8 0 amappl6 120 227 0 211 2 1 1 2 0 8 0 amappl5 112 183 0 174 1 0 1 1 0 8 0 amappl4 104 543 0 503 3 1 2 3 0 8 0 amappl3 96 9204 0 9116 3 0 3 3 0 8 0 amappl2 88 1733 0 1664 3 1 2 3 0 8 0 amappl1 80 13504 0 12978 22 9 13 22 0 8 0 amappl 88 13380 0 13146 7 0 7 7 0 92 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 99 0 2 2 0 2 2 0 8 0 uaddrrnd 24 1466 0 1432 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1466 0 1432 1 0 1 1 0 8 0 vmmpekpl 168 15791 0 15730 4 0 4 4 0 8 0 vmmpepl 168 106647 0 104385 125 18 107 116 0 357 2 vmsppl 464 1465 0 1432 6 1 5 6 0 8 0 rwobjpl 56 37208 0 32969 63 2 61 61 0 8 0 pdppl 4096 2940 0 2864 136 54 82 94 0 8 6 pvpl 32 663868 0 647199 361 66 295 360 0 265 152 pmappl 248 1465 0 1432 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 920 0 98 24 0 24 24 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82bafff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82c532e8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82c532e8) at __mp_lock+0x122 sys/kern/kern_lock.c:147 intr_handler(ffff80002e4153d0,ffff80000027b500) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __mp_lock(ffffffff82c532e8) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82c532e8) at __mp_lock+0x122 sys/kern/kern_lock.c:147 end trace frame: 0x0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> trace witness_checkorder(fffffd80795270e8,9,0) at witness_checkorder+0x1ec sys/kern/subr_witness.c:794 mtx_enter(fffffd80795270d8) at mtx_enter+0x3e sys/kern/kern_lock.c:265 knote_remove(ffff800021268000,fffffd80795270d8,fffffd8079527160,3,0) at knote_remove+0x20d sys/kern/kern_event.c:1881 knote_fdclose(ffff800021268000,3) at knote_fdclose+0xae sys/kern/kern_event.c:1934 fdfree(ffff800021268000) at fdfree+0xdf sys/kern/kern_descrip.c:1196 exit1(ffff800021268000,0,0,1) at exit1+0x3e4 sys/kern/kern_exit.c:206 sys_exit(ffff800021268000,ffff80002634d4b0,ffff80002634d500) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff80002634d580) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff80002634d580) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7a29a6ef2ee0, count: -9