kernel: protection fault trap, code=0 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace witness_checkorder(fffffd806f0c5958,9,0) at witness_checkorder+0x1ec sys/kern/subr_witness.c:794 mtx_enter(fffffd806f0c5948) at mtx_enter+0x3e sys/kern/kern_lock.c:265 knote_remove(ffff8000212a3540,fffffd806f0c5948,fffffd806f0c59d0,4,0) at knote_remove+0x20d sys/kern/kern_event.c:1881 knote_fdclose(ffff8000212a3540,4) at knote_fdclose+0xae sys/kern/kern_event.c:1934 fdfree(ffff8000212a3540) at fdfree+0xdf sys/kern/kern_descrip.c:1196 exit1(ffff8000212a3540,0,0,1) at exit1+0x3e4 sys/kern/kern_exit.c:206 sys_exit(ffff8000212a3540,ffff800027bddcd0,ffff800027bddd20) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800027bddda0) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff800027bddda0) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x703e5d048990, count: -9 ddb{1}> show registers rdi 0 rsi 0x20000 acpi_pdirpa+0xbe63 rbp 0xffff800027bdda70 rbx 0xe rdx 0 rcx 0xffff8000212a3540 rax 0xffff800020d58ff0 r8 0x1 r9 0x1 r10 0xacd1ec7304f48816 r11 0xd78794e532df3c19 r12 0 r13 0xfffffd806f0c5958 r14 0xfffeffff00010000 r15 0xffff8000212a3540 rip 0xffffffff81eeff1c witness_checkorder+0x1ec cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800027bdd9c0 ss 0x10 witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> show proc PROC (syz-executor.2) pid=372325 stat=onproc flags process=1018 proc=2000 pri=0, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff8000212682c8,0xffff8000212a2ab0 process=0xffff8000ffff7258 user=0xffff800027bd8000, vmspace=0xfffffd8069a92768 estcpu=32, cpticks=0, pctcpu=0.6 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 24994 135607 27280 32767 2 0x10 syz-executor.1 46269 13659 65575 32767 2 0x10 syz-executor.4 46269 352685 65575 32767 2 0x4000010 syz-executor.4 56175 333960 71412 32767 3 0x90 nanoslp syz-executor.5 56175 461074 71412 32767 3 0x4000090 kqread syz-executor.5 28243 494668 79401 32767 2 0x10 syz-executor.7 28243 516946 79401 32767 3 0x4000090 ttyout syz-executor.7 28243 92831 79401 32767 3 0x4000090 ttyout syz-executor.7 79401 341954 4594 32767 3 0x90 nanoslp syz-executor.7 4594 268127 5767 0 3 0x82 wait syz-executor.7 14127 452660 0 0 3 0x14200 bored sosplice 71412 96585 91414 32767 3 0x90 nanoslp syz-executor.5 89022 84366 44096 32767 2 0x10 syz-executor.3 75323 405543 74086 32767 2 0x10 syz-executor.6 65575 120709 38539 32767 3 0x90 nanoslp syz-executor.4 74086 26087 5767 0 3 0x82 wait syz-executor.6 91414 455125 5767 0 3 0x82 wait syz-executor.5 38539 375336 5767 0 3 0x82 wait syz-executor.4 44096 491843 5767 0 3 0x82 wait syz-executor.3 30132 436622 73467 32767 3 0x90 nanoslp syz-executor.2 27280 55784 75390 32767 2 0x10 syz-executor.1 73467 262658 5767 0 3 0x82 wait syz-executor.2 44815 502451 86466 32767 2 0x10 syz-executor.0 75390 442104 5767 0 3 0x82 wait syz-executor.1 86466 397402 5767 0 3 0x82 wait syz-executor.0 5767 426887 15421 0 3 0x2000082 wait syz-fuzzer 5767 91970 15421 0 3 0x6000082 nanoslp syz-fuzzer 5767 507678 15421 0 3 0x6000082 wait syz-fuzzer 5767 226654 15421 0 3 0x6000082 wait syz-fuzzer 5767 183541 15421 0 3 0x6000082 wait syz-fuzzer 5767 211971 15421 0 3 0x6000082 thrsleep syz-fuzzer 5767 291317 15421 0 3 0x6000082 wait syz-fuzzer 5767 80407 15421 0 3 0x6000082 thrsleep syz-fuzzer 5767 12243 15421 0 3 0x6000082 wait syz-fuzzer 5767 312702 15421 0 3 0x6000082 thrsleep syz-fuzzer 5767 30941 15421 0 3 0x6000082 thrsleep syz-fuzzer 5767 205302 15421 0 3 0x6000082 wait syz-fuzzer 5767 172666 15421 0 7 0x6000002 syz-fuzzer 5767 92863 15421 0 2 0x6000082 syz-fuzzer 5767 517573 15421 0 3 0x6000082 wait syz-fuzzer 5767 236499 15421 0 2 0x6000082 syz-fuzzer 15421 219142 55674 0 3 0x10008a sigsusp ksh 55674 505830 19929 0 2 0x9a sshd 85580 37145 1 0 3 0x100083 ttyin getty 19929 493261 1 0 3 0x88 kqread sshd 97047 340126 61218 73 3 0x1100090 kqread syslogd 61218 354785 1 0 3 0x100082 netio syslogd 88537 170349 1 0 3 0x100080 kqread resolvd 32872 402780 12970 77 3 0x100092 kqread dhcpleased 45605 173414 12970 77 3 0x100092 kqread dhcpleased 12970 100478 1 0 3 0x80 kqread dhcpleased 86078 183566 0 0 3 0x14200 bored smr 14730 100652 0 0 2 0x14200 zerothread 58359 204118 0 0 3 0x14200 aiodoned aiodoned 33204 430990 0 0 3 0x14200 syncer update 36277 275103 0 0 3 0x14200 cleaner cleaner 54605 332867 0 0 2 0x14200 reaper 39791 479004 0 0 3 0x14200 pgdaemon pagedaemon 65652 116013 0 0 3 0x14200 bored viomb 64878 374407 0 0 3 0x40014200 acpi0 acpi0 87429 461076 0 0 3 0x40014200 idle1 83356 419415 0 0 3 0x14200 bored softnet3 14676 311218 0 0 3 0x14200 bored softnet2 5753 117084 0 0 3 0x14200 bored softnet1 58670 61716 0 0 3 0x14200 bored softnet0 66464 288206 0 0 3 0x14200 bored systqmp 26491 448725 0 0 3 0x14200 bored systq 82266 337632 0 0 3 0x40014200 bored softclock 12086 45784 0 0 3 0x40014200 idle0 1 410158 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10188 6409K 6420K 78643K 11272 0 pcb 13 10K 12K 78643K 15 0 rtable 242 6K 7K 78643K 457 0 pf 29 8K 8K 78643K 33 0 ifaddr 44 15K 15K 78643K 54 0 ifgroup 50 2K 2K 78643K 58 0 sysctl 2 0K 0K 78643K 2 0 counters 60 35K 35K 78643K 64 0 ioctlops 0 0K 2K 78643K 185 0 iov 0 0K 16K 78643K 353 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1278 80K 80K 78643K 1500 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 29 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 195 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 23 85K 125K 78643K 2188 0 sigio 0 0K 0K 78643K 80 0 proc 56 78K 127K 78643K 650 0 subproc 104 6K 6K 78643K 130 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 188 0 in_multi 99 7K 7K 78643K 140 0 ether_multi 1 0K 0K 78643K 5 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 67 307K 307K 78643K 67 0 exec 0 0K 1K 78643K 836 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 369 89K 95K 78643K 23559 0 UVM aobj 131 4K 4K 78643K 131 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 76 0 NDP 11 0K 2K 78643K 33 0 temp 75 5920K 6041K 78643K 8932 0 kqueue 13 20K 24K 78643K 220 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 75 0 72 1 0 1 1 0 8 0 rtentry 112 140 0 26 4 0 4 4 0 8 0 unpcb 144 4739 0 4526 36 27 9 11 0 8 1 syncache 304 35 0 35 5 4 1 1 0 8 1 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 323 0 323 6 5 1 1 0 8 1 tcpcb 808 738 0 714 27 19 8 8 0 8 5 arp 120 23 0 4 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 4 0 4 1 1 0 1 0 8 0 inpcb 368 1735 0 1708 51 44 7 14 0 8 4 nd6 136 36 0 9 1 0 1 1 0 8 0 kcovpl 48 10 0 2 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 550 0 90 29 0 29 29 0 8 0 art_table 32 551 0 90 4 0 4 4 0 8 0 art_node 16 139 0 35 1 0 1 1 0 8 0 sysvmsgpl 40 46 0 6 1 0 1 1 0 8 0 semapl 112 193 0 183 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 4088 0 2642 91 0 91 91 0 8 0 ffsino 272 4088 0 2642 97 0 97 97 0 8 0 nchpl 144 7181 0 5541 63 0 63 63 0 8 0 uvmvnodes 80 4227 0 0 87 0 87 87 0 8 0 vnodes 216 4227 0 0 235 0 235 235 0 8 0 namei 1024 25049 0 25049 3 2 1 2 0 8 1 percpumem 16 45 0 2 1 0 1 1 0 8 0 kstatmem 264 26 0 4 2 0 2 2 0 8 0 scxspl 216 25568 0 25568 19 18 1 8 1 8 1 plimitpl 152 621 0 597 6 5 1 2 0 8 0 sigapl 424 2477 0 2425 7 0 7 7 0 8 0 futexpl 64 16580 0 16580 1 0 1 1 0 8 1 knotepl 120 208 0 0 6 0 6 6 0 8 0 kqueuepl 216 683 0 674 14 13 1 5 0 8 0 pipepl 320 393 0 365 8 5 3 8 0 8 0 fdescpl 496 2459 0 2425 7 2 5 6 0 8 0 filepl 152 17132 0 16692 48 30 18 20 0 8 0 lockfpl 104 1008 0 1006 1 0 1 1 0 8 0 lockfspl 48 118 0 116 1 0 1 1 0 8 0 sessionpl 144 25 0 9 1 0 1 1 0 8 0 pgrppl 48 28 0 12 1 0 1 1 0 8 0 ucredpl 104 1431 0 1413 1 0 1 1 0 8 0 zombiepl 144 2426 0 2425 1 0 1 1 0 8 0 processpl 1072 2477 0 2425 5 1 4 5 0 8 0 procpl 680 6201 0 6129 14 6 8 8 0 8 1 sosppl 168 50 0 50 5 4 1 1 0 8 1 sockpl 488 6588 0 6344 187 155 32 37 0 8 1 mcl64k 65536 16 0 0 2 0 2 2 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 10 0 0 1 0 1 1 0 8 0 mcl9k 9216 6 0 0 1 0 1 1 0 8 0 mcl8k 8192 11 0 0 2 0 2 2 0 8 0 mcl4k 4096 14 0 0 2 0 2 2 0 8 0 mcl2k2 2112 5 0 0 1 0 1 1 0 8 0 mcl2k 2048 261 0 0 33 0 33 33 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 1921 0 0 112 1 111 111 0 8 0 bufpl 288 7236 0 910 452 0 452 452 0 8 0 anonpl 24 403890 0 392833 132 41 91 120 0 186 7 amapchunkpl 152 75914 0 75053 62 23 39 46 0 158 1 amappl16 200 9714 0 9410 37 18 19 29 0 8 0 amappl15 192 19 0 19 1 1 0 1 0 8 0 amappl14 184 163 0 150 2 1 1 2 0 8 0 amappl13 176 14 0 14 1 1 0 1 0 8 0 amappl12 168 3102 0 3069 2 0 2 2 0 8 0 amappl11 160 48 0 37 1 0 1 1 0 8 0 amappl10 152 28 0 15 1 0 1 1 0 8 0 amappl9 144 250 0 249 1 0 1 1 0 8 0 amappl8 136 300 0 214 4 0 4 4 0 8 0 amappl7 128 82 0 68 2 0 2 2 0 8 0 amappl6 120 283 0 261 2 1 1 2 0 8 0 amappl5 112 225 0 216 1 0 1 1 0 8 0 amappl4 104 595 0 555 2 0 2 2 0 8 0 amappl3 96 14956 0 14863 4 1 3 3 0 8 0 amappl2 88 2786 0 2712 3 1 2 3 0 8 0 amappl1 80 16949 0 16421 22 9 13 22 0 8 0 amappl 88 22974 0 22730 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 2459 0 2425 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2459 0 2425 1 0 1 1 0 8 0 vmmpekpl 168 22868 0 22811 3 0 3 3 0 8 0 vmmpepl 168 162937 0 160588 152 41 111 120 0 357 1 vmsppl 464 2458 0 2425 7 2 5 6 0 8 0 rwobjpl 56 51553 0 45849 84 3 81 81 0 8 0 pdppl 4096 4926 0 4850 178 96 82 96 0 8 6 pvpl 32 954740 0 937756 382 168 214 361 0 265 56 pmappl 248 2458 0 2425 4 1 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1103 0 170 27 0 27 27 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff82bfcff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82d48c68) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82d48c68) at __mp_lock+0x129 sys/kern/kern_lock.c:147 intr_handler(ffff800026125e70,ffff80000027b500) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f end of kernel end trace frame: 0xc00015d758, count: -6 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0x1ec: movl 0x8(%r14),%ebx ddb{1}> trace witness_checkorder(fffffd806f0c5958,9,0) at witness_checkorder+0x1ec sys/kern/subr_witness.c:794 mtx_enter(fffffd806f0c5948) at mtx_enter+0x3e sys/kern/kern_lock.c:265 knote_remove(ffff8000212a3540,fffffd806f0c5948,fffffd806f0c59d0,4,0) at knote_remove+0x20d sys/kern/kern_event.c:1881 knote_fdclose(ffff8000212a3540,4) at knote_fdclose+0xae sys/kern/kern_event.c:1934 fdfree(ffff8000212a3540) at fdfree+0xdf sys/kern/kern_descrip.c:1196 exit1(ffff8000212a3540,0,0,1) at exit1+0x3e4 sys/kern/kern_exit.c:206 sys_exit(ffff8000212a3540,ffff800027bddcd0,ffff800027bddd20) at sys_exit+0x1a sys/kern/kern_exit.c:89 syscall(ffff800027bddda0) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff800027bddda0) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x703e5d048990, count: -9