uvm_fault(0xfffffd806ea435c8, 0x48, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0xb5: movl 0x20(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND witness_checkorder(28,9,0) at witness_checkorder+0xb5 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x95 sys/kern/kern_lock.c:406 clockintr_unbind(ffff800001688730,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001696000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:589 dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 sys/dev/dt/dt_dev.c:239 spec_close(ffff800034fcb260) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8061993a30,1,fffffd80097fd750,ffff8000397b9790) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 --db_more-- vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] --db_more-- vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 --db_more-- fdrop(fffffd806c81b038,ffff8000397b9790) at fdrop+0x121 sys/kern/kern_descrip.c:1281 --db_more-- closef(fffffd806c81b038,ffff8000397b9790) at closef+0x192 sys/kern/kern_descrip.c:1265 --db_more-- fdfree(ffff8000397b9790) at fdfree+0x116 sys/kern/kern_descrip.c:1196 --db_more-- exit1(ffff8000397b9790,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff8000397b9790,ffff800034fcb5d0,ffff800034fcb520) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff800034fcb5d0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800034fcb5d0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 end trace frame: 0xffff800034fcb650, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> $lines = 0 ? ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806ea435c8, 0x48, 0, 1) -> e ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xb5 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x95 sys/kern/kern_lock.c:406 clockintr_unbind(ffff800001688730,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001696000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:589 dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 sys/dev/dt/dt_dev.c:239 spec_close(ffff800034fcb260) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8061993a30,1,fffffd80097fd750,ffff8000397b9790) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806c81b038,ffff8000397b9790) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c81b038,ffff8000397b9790) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000397b9790) at fdfree+0x116 sys/kern/kern_descrip.c:1196 --db_more-- exit1(ffff8000397b9790,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 --db_more-- sys_exit(ffff8000397b9790,ffff800034fcb5d0,ffff800034fcb520) at sys_exit+0x1a sys/kern/kern_exit.c:-1 --db_more-- syscall(ffff800034fcb5d0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] --db_more-- syscall(ffff800034fcb5d0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:783 --db_more-- Xsyscall() at Xsyscall+0x128 --db_more-- end of kernel end trace frame: 0x70c1478442a0, count: -15 ddb{1}> registers No such command ddb{1}> show proc PROC (syz-executor) tid=143170 pid=97156 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000397b9790 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003b7ca028,0xffffffff83a379f8 process=0xffff8000ffff1820 user=0xffff800034fc6000, vmspace=0xfffffd806ea435c8 estcpu=36, cpticks=7, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 29815 424282 54861 0 3 0x80 nanoslp syz-executor 29815 201114 54861 0 3 0x4000080 kqread syz-executor 29815 399069 54861 0 3 0x4000080 fsleep syz-executor 25687 422152 17832 0 3 0x80 nanoslp syz-executor 25687 321133 17832 0 3 0x4000080 kqsel syz-executor 25687 448673 17832 0 3 0x4000080 fsleep syz-executor 42763 153577 78377 0 3 0x80 nanoslp syz-executor 42763 339651 78377 0 3 0x4000080 netacc syz-executor 42763 62109 78377 0 3 0x4000080 netacc syz-executor 42763 200429 78377 0 3 0x4000080 fsleep syz-executor --db_more--  22267 104815 13788 0 3 0x80 nanoslp syz-executor --db_more--  22267 241565 13788 0 3 0x4000080 pipewr syz-executor --db_more--  22267 471736 13788 0 3 0x4000080 piperd syz-executor --db_more--  75870 268803 65514 0 3 0x80 nanoslp syz-executor --db_more--  75870 307193 65514 0 3 0x4000080 kqsel syz-executor 75870 453722 65514 0 3 0x4000080 fsleep syz-executor 98943 237838 0 0 3 0x14200 acct acct 11268 402378 12202 0 3 0x82 nanoslp syz-executor 90995 367052 1 0 3 0x100083 ttyin getty 76434 300513 0 0 3 0x14280 nfsidl nfsio 14762 110766 0 0 3 0x14280 nfsidl nfsio 65267 223981 0 0 3 0x14280 nfsidl nfsio 85083 434440 0 0 3 0x14280 nfsidl nfsio 56585 83632 0 0 3 0x14280 nfsidl nfsio 13728 323794 0 0 3 0x14280 nfsidl nfsio 84999 300962 0 0 3 0x14280 nfsidl nfsio --db_more--  52703 413115 0 0 3 0x14280 nfsidl nfsio --db_more--  99917 381626 0 0 3 0x14280 nfsidl nfsio --db_more--  3401 209324 0 0 3 0x14280 nfsidl nfsio --db_more--  71926 61553 0 0 3 0x14280 nfsidl nfsio 20309 293859 0 0 3 0x14280 nfsidl nfsio 27261 523423 0 0 3 0x14280 nfsidl nfsio 4495 125417 0 0 3 0x14280 nfsidl nfsio 54949 113156 0 0 3 0x14280 nfsidl nfsio 38537 106872 0 0 3 0x14280 nfsidl nfsio 92044 315646 0 0 3 0x14280 nfsidl nfsio 24550 277196 0 0 3 0x14280 nfsidl nfsio 99238 343953 0 0 3 0x14280 nfsidl nfsio 40059 11545 0 0 3 0x14280 nfsidl nfsio 17832 174326 12202 0 3 0x82 nanoslp syz-executor 54861 12714 12202 0 3 0x82 nanoslp syz-executor --db_more--  48925 260483 12202 0 3 0x82 nanoslp syz-executor --db_more--  78377 127929 12202 0 3 0x82 nanoslp syz-executor --db_more-- ddb{1}> ks No such command ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11108 12231K 13947K 166960K 14226 0 pcb 17 14K 16K 166960K 690 0 rtable 236 12K 12K 166960K 702 0 pf 40 18K 82K 166960K 228 0 ifaddr 42 7K 8K 166960K 161 0 ifgroup 63 2K 3K 166960K 305 0 sysctl 4 1K 9K 166960K 67 0 counters 74 37K 38K 166960K 432 0 ioctlops 0 0K 4K 166960K 1923 0 iov 0 0K 24K 166960K 171 0 --db_more--  mount 1 1K 1K 166960K 1 0 --db_more--  log 0 0K 0K 166960K 4 0 --db_more--  vnodes 1449 91K 92K 166960K 2990 0 --db_more--  UFS quota 1 32K 32K 166960K 1 0 --db_more--  UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 21 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 81 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 236K 166960K 1830 0 sigio 1 0K 0K 166960K 96 0 proc 73 115K 164K 166960K 817 0 subproc 72 4K 4K 166960K 108 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 --db_more--  ip_moptions 2 0K 0K 166960K 272 0 --db_more--  in_multi 83 6K 7K 166960K 227 0 --db_more--  ether_multi 1 0K 0K 166960K 23 0 --db_more--  mrt 1 0K 0K 166960K 32 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 109 493K 493K 166960K 109 0 exec 0 0K 1K 166960K 741 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 6 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 267 176K 193K 166960K 18392 0 UVM aobj 54 24K 24K 166960K 59 0 pinsyscall 43 86K 98K 166960K 3092 0 --db_more--  memdesc 1 4K 4K 166960K 1 0 --db_more--  crypto data 1 1K 1K 166960K 1 0 --db_more--  ip6_options 1 0K 0K 166960K 138 0 --db_more--  NDP 15 0K 2K 166960K 112 0 --db_more--  temp 81 9088K 9160K 166960K 80691 0 --db_more--  kqueue 15 24K 30K 166960K 348 0 --db_more--  SYN cache 2 16K 16K 166960K 2 0 ddb{1}> achine ddbcpu 0 No such command ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xb5 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x95 sys/kern/kern_lock.c:406 clockintr_unbind(ffff800001688730,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001696000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:589 dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 sys/dev/dt/dt_dev.c:239 spec_close(ffff800034fcb260) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8061993a30,1,fffffd80097fd750,ffff8000397b9790) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806c81b038,ffff8000397b9790) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c81b038,ffff8000397b9790) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000397b9790) at fdfree+0x116 sys/kern/kern_descrip.c:1196 --db_more-- exit1(ffff8000397b9790,b,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 --db_more-- sys_exit(ffff8000397b9790,ffff800034fcb5d0,ffff800034fcb520) at sys_exit+0x1a sys/kern/kern_exit.c:-1 --db_more-- ddb{1}> hine ddbcpu 1 No such command ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xb5 sys/kern/subr_witness.c:779 mtx_enter(18) at mtx_enter+0x95 sys/kern/kern_lock.c:406 clockintr_unbind(ffff800001688730,1) at clockintr_unbind+0x56 sys/kern/kern_clockintr.c:375 dt_ioctl_record_stop(ffff800001696000) at dt_ioctl_record_stop+0xbc sys/dev/dt/dt_dev.c:589 dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,1,2000,ffff8000397b9790) at dtclose+0x109 sys/dev/dt/dt_dev.c:239 spec_close(ffff800034fcb260) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd8061993a30,1,fffffd80097fd750,ffff8000397b9790) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd806c81b038,ffff8000397b9790) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd806c81b038,ffff8000397b9790) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd806c81b038,ffff8000397b9790) at closef+0x192 sys/kern/kern_descrip.c:1265 fdfree(ffff8000397b9790) at fdfree+0x116 sys/kern/kern_descrip.c:1196