panic: Caught invalid memory access at ffff8000306e0688 size 8 op 0
Stopped at db_enter+0x17: popq %rbp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*242559 44701 0 0 0x4000000 1 syz-executor
330908 52688 0 0x2 0 0 syz-executor
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff8463f8a3) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
rw_status(ffff8000306e0688) at rw_status+0x27 atomic_load_long sys/sys/atomic.h:213 [inline]
rw_status(ffff8000306e0688) at rw_status+0x27 sys/kern/kern_rwlock.c:517
KQRELE(ffff800001d3b738) at KQRELE+0x77 sys/kern/kern_event.c:246
kqueue_close(ffff800001d3a608,ffff800038f1c7f0) at kqueue_close+0x70 sys/kern/kern_event.c:1957
fdrop(ffff800001d3a608,ffff800038f1c7f0) at fdrop+0x1c3 sys/kern/kern_descrip.c:1281
fd_iterfile(ffff800001d3a608,ffff800038f1c7f0) at fd_iterfile+0x162 sys/kern/kern_descrip.c:222
sysctl_file(ffff80002e2d2b28,4,0,ffff80002e2d2b00,ffff800038f1c7f0) at sysctl_file+0x312f sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(49,ffff80002e2d2b28,4,0,ffff80002e2d2b00,0,4,1ffff00005c5a4dc) at kern_sysctl_dirs+0x265 sys/kern/kern_sysctl.c:415
kern_sysctl(ffff80002e2d2b24,5,0,ffff80002e2d2b00,0,0,ffff80002e2d2d80) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800038f1c7f0,ffff80002e2d2d80,ffff80002e2d2ce0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80002e2d2d80) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002e2d2d80) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc6d566ccbb0, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: Caught invalid memory access at ffff8000306e0688 size 8 op 0
ddb{1}> show kasan
KASAN: invalid read of 8 bytes at 0xffff8000306e0688 from pc 0xffffffff81edc6c7
KASAN: first bad byte at 0xffff8000306e0688 (+0); shadow 0xfd: pool use-after-free (or unallocated item)
KASAN: 0xffff8000306e0688 is 72 bytes inside the 528-byte item [0xffff8000306e0640..0xffff8000306e0850) in pool 'fdescpl'
KASAN: allocated at:
#0 pool_get+0x770 sys/kern/subr_pool.c:834
#1 fdcopy+0x55 fdinit sys/kern/kern_descrip.c:1070 [inline]
#1 fdcopy+0x55 sys/kern/kern_descrip.c:1109
#2 process_new+0x601 sys/kern/kern_fork.c:277
#3 fork1+0x533 sys/kern/kern_fork.c:408
#4 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#4 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#5 Xsyscall+0x128
KASAN: freed at:
#0 pool_put+0x79 sys/kern/subr_pool.c:1019
#1 exit1+0x81e sys/kern/kern_exit.c:217
#2 sys_exit+0x4a
#3 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#4 Xsyscall+0x128
KASAN: pc: rw_status+0x27
KASAN: call trace:
#0 __asan_load8_noabort+0xbd kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
#0 __asan_load8_noabort+0xbd sys/kern/subr_kasan.c:1099
#1 rw_status+0x27 atomic_load_long sys/sys/atomic.h:213 [inline]
#1 rw_status+0x27 sys/kern/kern_rwlock.c:517
#2 KQRELE+0x77 sys/kern/kern_event.c:246
#3 kqueue_close+0x70 sys/kern/kern_event.c:1957
#4 fdrop+0x1c3 sys/kern/kern_descrip.c:1281
#5 fd_iterfile+0x162 sys/kern/kern_descrip.c:222
#6 sysctl_file+0x312f sys/kern/kern_sysctl.c:-1
#7 kern_sysctl_dirs+0x265 sys/kern/kern_sysctl.c:415
#8 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
#9 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#11 Xsyscall+0x128
KASAN: shadow of 0xffff8000306e0580..0xffff8000306e0800 (1 cell = 8 bytes):
0xffff8000306e0580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0xffff8000306e0600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
>0xffff8000306e0680: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0xffff8000306e0700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0xffff8000306e0780: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff8463f8a3) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
rw_status(ffff8000306e0688) at rw_status+0x27 atomic_load_long sys/sys/atomic.h:213 [inline]
rw_status(ffff8000306e0688) at rw_status+0x27 sys/kern/kern_rwlock.c:517
KQRELE(ffff800001d3b738) at KQRELE+0x77 sys/kern/kern_event.c:246
kqueue_close(ffff800001d3a608,ffff800038f1c7f0) at kqueue_close+0x70 sys/kern/kern_event.c:1957
fdrop(ffff800001d3a608,ffff800038f1c7f0) at fdrop+0x1c3 sys/kern/kern_descrip.c:1281
fd_iterfile(ffff800001d3a608,ffff800038f1c7f0) at fd_iterfile+0x162 sys/kern/kern_descrip.c:222
sysctl_file(ffff80002e2d2b28,4,0,ffff80002e2d2b00,ffff800038f1c7f0) at sysctl_file+0x312f sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(49,ffff80002e2d2b28,4,0,ffff80002e2d2b00,0,4,1ffff00005c5a4dc) at kern_sysctl_dirs+0x265 sys/kern/kern_sysctl.c:415
kern_sysctl(ffff80002e2d2b24,5,0,ffff80002e2d2b00,0,0,ffff80002e2d2d80) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800038f1c7f0,ffff80002e2d2d80,ffff80002e2d2ce0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80002e2d2d80) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002e2d2d80) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc6d566ccbb0, count: -14
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff80002e2d1f70
rbx 0xffff80002e2d1fe0
rdx 0
rcx 0xffff800028fe3ff0
rax 0
r8 0x101010101010101
r9 0x8080808080808080
r10 0xffff80002e2d1d58
r11 0xffffffff82673480 x86_bus_space_io_read_1
r12 0xffffffff8463f8a3 switch.table.get_active_converter_info+0x9dec3
r13 0xffff800028fe4c08
r14 0xffff800028fe4e07
r15 0x1
rip 0xffffffff83963de7 db_enter+0x17
cs 0x8
rflags 0x246
rsp 0xffff80002e2d1f70
ss 0x10
db_enter+0x17: popq %rbp
ddb{1}> show proc
PROC (syz-executor) tid=242559 pid=44701 tcnt=3 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=76, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff800038f1dcb0,0xffff800038f1ca98
process=0xffff8000306e79e0 user=0xffff80002e2c7000, vmspace=0xffff800001c8e5d8
estcpu=26, cpticks=26, pctcpu=0.0, user=0, sys=26, intr=0
ddb{1}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
33091 132252 0 0 3 0x14000 0x280 nfsidl nfsio
84665 167623 0 0 3 0x14000 0x280 nfsidl nfsio
56452 400606 0 0 3 0x14000 0x280 nfsidl nfsio
59961 215040 0 0 3 0x14000 0x280 nfsidl nfsio
8604 504429 0 0 3 0x14000 0x280 nfsidl nfsio
80085 390273 0 0 3 0x14000 0x280 nfsidl nfsio
96376 93596 0 0 3 0x14000 0x280 nfsidl nfsio
71869 310921 0 0 3 0x14000 0x280 nfsidl nfsio
86973 360783 0 0 3 0x14000 0x280 nfsidl nfsio
10934 491338 0 0 3 0x14000 0x280 nfsidl nfsio
19690 462304 0 0 3 0x14000 0x280 nfsidl nfsio
58162 123524 0 0 3 0x14000 0x280 nfsidl nfsio
26921 446749 0 0 3 0x14000 0x280 nfsidl nfsio
94920 100209 0 0 3 0x14000 0x280 nfsidl nfsio
89930 294154 0 0 3 0x14000 0x280 nfsidl nfsio
28002 217151 0 0 3 0x14000 0x280 nfsidl nfsio
49100 261601 0 0 3 0x14000 0x280 nfsidl nfsio
46798 346265 0 0 3 0x14000 0x280 nfsidl nfsio
44821 132217 0 0 3 0x14000 0x280 nfsidl nfsio
69397 398574 0 0 3 0x14000 0x280 nfsidl nfsio
83177 392472 39781 0 2 0 0 syz-executor
83177 25733 39781 0 3 0 0x4000080 fsleep syz-executor
95776 266530 6639 0 2 0 0 syz-executor
44701 332011 85754 0 2 0 0 syz-executor
44701 33487 85754 0 2 0 0x4000000 syz-executor
*44701 242559 85754 0 7 0 0x4000000 syz-executor
9918 220601 19266 0 3 0x2 0x80 piperd syz-executor
39781 343087 19266 0 2 0x2 0 syz-executor
52688 330908 19266 0 7 0x2 0 syz-executor
8760 418503 19266 0 3 0x2 0x80 piperd syz-executor
85754 304900 19266 0 3 0x2 0x80 nanoslp syz-executor
6639 454043 19266 0 3 0x2 0x80 nanoslp syz-executor
19266 237379 10393 0 3 0x2 0x80 wait syz-executor
10393 178103 70965 0 3 0x100002 0x88 sigsusp ksh
70965 403514 11262 0 3 0x10 0x88 kqread sshd-session
11262 131679 46855 0 3 0x12 0x80 kqread sshd-session
68434 95901 1 0 3 0x100003 0x80 ttyin getty
46855 328460 1 0 3 0 0x88 kqread sshd
86184 285247 99970 74 3 0x1100012 0x80 bpf pflogd
99970 62696 1 0 3 0 0x80 sbwait pflogd
67919 46363 18867 73 3 0x1100010 0 biowait syslogd
18867 332555 1 0 3 0x100002 0x80 sbwait syslogd
78277 25024 1 0 3 0x100000 0x80 kqread resolvd
79667 445214 5148 77 3 0x100012 0x80 kqread dhcpleased
79837 53927 5148 77 3 0x100012 0x80 kqread dhcpleased
5148 506593 1 0 3 0 0x80 kqread dhcpleased
75259 304178 0 0 2 0x14000 0x40000200 smr
35147 113899 0 0 2 0x14000 0x200 zerothread
72137 429452 0 0 3 0x14000 0x200 aiodoned aiodoned
14163 457349 0 0 3 0x14000 0x200 syncer update
85075 103638 0 0 3 0x14000 0x200 cleaner cleaner
24518 481481 0 0 3 0x14000 0x200 reaper reaper
82117 296529 0 0 3 0x14000 0x200 pgdaemon pagedaemon
74642 75450 0 0 3 0x14000 0x200 bored viomb
88113 374848 0 0 3 0x14000 0x40000200 acpi0 acpi0
87366 76337 0 0 3 0x14000 0x40000200 idle1
95702 296996 0 0 3 0x14000 0x200 bored softnet1
58332 116941 0 0 3 0x14000 0x200 bored softnet0
26242 280885 0 0 3 0x14000 0x200 bored systqmp
70736 36127 0 0 3 0x14000 0x200 bored systq
76698 224561 0 0 3 0x14000 0x200 tmoslp softclockmp
75993 414002 0 0 3 0x14000 0x40000200 tmoslp softclock
85053 54850 0 0 3 0x14000 0x40000200 idle0
1 150411 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb{1}> show all locks
Process 39781 (syz-executor) thread 0xffff800045ffd4d8 (343087)
exclusive rrwlock inode r = 0 (0xffff800001d2e598)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 vget+0x321 sys/kern/vfs_subr.c:699
#6 ktrwriteraw+0x204 sys/kern/kern_ktrace.c:729
#7 ktrstruct+0x249 ktrwrite2 sys/kern/kern_ktrace.c:-1 [inline]
#7 ktrstruct+0x249 sys/kern/kern_ktrace.c:315
#8 sys_clock_gettime+0x1f1 sys/kern/kern_time.c:179
#9 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#9 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#10 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85df94c0)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 ktrstruct+0x13f sys/kern/kern_ktrace.c:314
#2 sys_clock_gettime+0x1f1 sys/kern/kern_time.c:179
#3 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#3 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#4 Xsyscall+0x128
Process 52688 (syz-executor) thread 0xffff800045ffdca0 (330908)
exclusive rrwlock inode r = 0 (0xffff800001c4e340)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 vget+0x321 sys/kern/vfs_subr.c:699
#6 ufs_ihashget+0x233 sys/ufs/ufs/ufs_ihash.c:98
#7 ffs_vget+0x10b sys/ufs/ffs/ffs_vfsops.c:1203
#8 ufs_lookup+0x1529 sys/ufs/ufs/ufs_lookup.c:478
#9 VOP_LOOKUP+0xda sys/kern/vfs_vops.c:85
#10 vfs_lookup+0xfbd sys/kern/vfs_lookup.c:580
#11 namei+0xe19 sys/kern/vfs_lookup.c:250
#12 dounlinkat+0x102 sys/kern/vfs_syscalls.c:1807
#13 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#13 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#14 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xffff800001c03210)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 vfs_lookup+0x1f7 sys/kern/vfs_lookup.c:431
#6 namei+0xe19 sys/kern/vfs_lookup.c:250
#7 dounlinkat+0x102 sys/kern/vfs_syscalls.c:1807
#8 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#8 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#9 Xsyscall+0x128
Process 67919 (syslogd) thread 0xffff8000298f5a00 (46363)
exclusive rrwlock inode r = 0 (0xffff8000018b9b68)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320
#2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621
#3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527
#4 vn_lock+0xca sys/kern/vfs_vnops.c:576
#5 sys_fsync+0x200 sys/kern/vfs_syscalls.c:2890
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
#7 Xsyscall+0x128
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11054 12243K 12244K 166960K 12148 0
pcb 17 24K 24K 166960K 23 0
rtable 237 12K 13K 166960K 351 0
pf 34 22K 26K 166960K 47 0
ifaddr 43 12K 12K 166960K 45 0
ifgroup 55 2K 2K 166960K 55 0
sysctl 3 1K 13K 166960K 7 0
counters 70 42K 42K 166960K 70 0
ioctlops 0 0K 4K 166960K 1484 0
iov 0 0K 16K 166960K 4 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1290 83K 83K 166960K 1369 0
UFS quota 1 36K 36K 166960K 1 0
UFS mount 5 44K 44K 166960K 5 0
shm 2 2K 2K 166960K 2 0
VM map 2 1K 1K 166960K 2 0
sem 4 0K 0K 166960K 4 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 12 41K 97K 166960K 151 0
proc 69 128K 177K 166960K 551 0
subproc 63 7K 9K 166960K 72 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 20K 20K 166960K 1 0
in_multi 99 7K 7K 166960K 99 0
ether_multi 1 0K 0K 166960K 1 0
mrt 0 0K 0K 166960K 2 0
ISOFS mount 1 36K 36K 166960K 1 0
MSDOSFS mount 1 20K 20K 166960K 1 0
ttys 43 303K 303K 166960K 43 0
exec 0 0K 2K 166960K 383 0
fusefs mount 1 36K 36K 166960K 1 0
tdb 3 1K 1K 166960K 3 0
VM swap 14 124K 124K 166960K 15 0
UVM amap 188 218K 254K 166960K 3262 0
UVM aobj 3 4K 4K 166960K 3 0
pinsyscall 1061 1712K 1728K 166960K 1307 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
NDP 19 1K 2K 166960K 28 0
temp 30 9166K 9178K 166960K 3874 0
kqueue 14 44K 62K 166960K 32 0
SYN cache 2 16K 16K 166960K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 33 0 30 1 0 1 1 0 8 0
rtentry 176 111 0 1 5 0 5 5 0 8 0
unpcb 144 55 0 38 1 0 1 1 0 8 0
syncache 336 4 0 4 2 1 1 1 0 8 1
tcpcb 736 10 0 6 1 0 1 1 0 8 0
arp 136 18 0 0 1 0 1 1 0 8 0
inpcb 328 80 0 73 2 0 2 2 0 8 1
nd6 152 24 0 0 1 0 1 1 0 8 0
kcovpl 48 8 0 1 1 0 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 21 0 0 1 0 1 1 0 8 0
pfstkey 128 21 0 0 1 0 1 1 0 8 0
pfstate 448 21 0 0 3 0 3 3 0 8 0
pfrule 1360 22 0 17 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 453 0 0 29 0 29 29 0 8 0
art_table 40 454 0 0 5 0 5 5 0 8 0
art_node 32 111 0 11 1 0 1 1 0 8 0
semapl 72 2 0 0 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1590 0 120 93 0 93 93 0 8 0
ffsino 296 1590 0 120 114 0 114 114 0 8 0
nchpl 144 1803 0 106 64 0 64 64 0 8 0
vnodes 216 1682 0 0 94 0 94 94 0 8 0
namei 1024 6334 0 6334 5 1 4 4 0 8 4
percpumem 16 51 0 0 1 0 1 1 0 8 0
kstatmem 264 27 0 0 2 0 2 2 0 8 0
scxspl 216 6917 0 6916 5 3 2 3 1 8 1
plimitpl 152 32 0 15 1 0 1 1 0 8 0
sigapl 424 488 0 425 8 0 8 8 0 8 0
knotepl 120 165 0 0 5 0 5 5 0 8 0
kqueuepl 224 196 0 185 11 0 11 11 0 8 8
pipepl 344 128 0 101 3 0 3 3 0 8 0
fdescpl 528 452 0 426 3 0 3 3 0 8 0
filepl 160 1819 0 1623 17 0 17 17 0 8 7
lockfpl 104 6 0 4 1 0 1 1 0 8 0
lockfspl 48 4 0 2 1 0 1 1 0 8 0
sessionpl 144 25 0 16 1 0 1 1 0 8 0
pgrppl 48 33 0 16 1 0 1 1 0 8 0
ucredpl 104 106 0 92 1 0 1 1 0 8 0
zombiepl 144 427 0 425 1 0 1 1 0 8 0
processpl 1232 488 0 425 6 0 6 6 0 8 0
procpl 664 523 0 457 7 0 7 7 0 8 0
sockpl 752 168 0 141 5 0 5 5 0 8 2
mcl64k 65536 1 0 0 1 0 1 1 0 8 0
mcl16k 16384 1 0 0 1 0 1 1 0 8 0
mcl9k128 9344 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 115 0 0 15 0 15 15 0 8 0
mcl2k 2048 20 0 0 3 0 3 3 0 8 0
mextrefs 64 23 0 0 1 0 1 1 0 8 0
mtagpl 96 1 0 0 1 0 1 1 0 8 0
mbufpl 256 143 0 0 9 0 9 9 0 8 0
bufpl 272 2387 0 107 152 0 152 152 0 8 0
anonpl 32 3783 0 0 31 0 31 31 0 222 0
amapchunkpl 152 8730 0 8383 21 0 21 21 0 158 1
amappl16 200 1697 0 1680 5 1 4 5 0 8 2
amappl15 192 41 0 41 1 1 0 1 0 8 0
amappl14 184 436 0 435 1 0 1 1 0 8 0
amappl13 176 122 0 110 1 0 1 1 0 8 0
amappl12 168 704 0 679 2 0 2 2 0 8 0
amappl11 160 3 0 3 1 1 0 1 0 8 0
amappl10 152 73 0 59 1 0 1 1 0 8 0
amappl9 144 273 0 273 1 0 1 1 0 8 1
amappl8 136 100 0 98 1 0 1 1 0 8 0
amappl7 128 148 0 135 1 0 1 1 0 8 0
amappl6 120 158 0 156 1 0 1 1 0 8 0
amappl5 112 101 0 91 1 0 1 1 0 8 0
amappl4 104 294 0 273 1 0 1 1 0 8 0
amappl3 96 1541 0 1473 3 0 3 3 0 8 0
amappl2 88 567 0 496 2 0 2 2 0 8 0
amappl1 80 10538 0 9947 16 0 16 16 0 8 3
amappl 88 2533 0 2415 4 0 4 4 0 92 0
uvmvnodes 80 99 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 2 0 0 1 0 1 1 0 8 0
uaddrrnd 24 452 0 426 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 452 0 426 1 0 1 1 0 8 0
vmmpekpl 168 5824 0 5775 3 0 3 3 0 8 0
vmmpepl 168 38527 0 36881 88 0 88 88 0 357 4
vmsppl 488 451 0 426 5 0 5 5 0 8 1
rwobjpl 80 14614 0 13654 27 1 26 26 0 8 3
pdppl 4096 912 0 852 98 12 86 88 0 8 26
pvpl 32 10255 0 0 83 0 83 83 0 265 0
pmappl 256 451 0 426 3 0 3 3 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 120 425 0 17 13 0 13 13 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x19: leave
x86_ipi_db(ffffffff85032ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 sys/kern/kern_lock.c:173
intr_handler(ffff800029a5a3d0,ffff800000169680) at intr_handler+0x113 sys/arch/amd64/amd64/intr.c:560
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 sys/kern/kern_lock.c:173
__mp_acquire_count(ffffffff85df8cc0,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:-1
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 sys/kern/kern_synch.c:369
biowait(ffff800001bf9bb8) at biowait+0xe6 sys/kern/vfs_bio.c:1110
bwrite(ffff800001bf9bb8) at bwrite+0x4e1 sys/kern/vfs_bio.c:625
ufs_dirremove(ffff800001bed010,ffff800001c4e2a0,800c,1) at ufs_dirremove+0x4b5 sys/ufs/ufs/ufs_lookup.c:919
ufs_rmdir(ffff800029a5a900) at ufs_rmdir+0x437 sys/ufs/ufs/ufs_vnops.c:1248
VOP_RMDIR(ffff800001bed010,ffff800001c8b1e8,ffff800029a5aa60) at VOP_RMDIR+0x290 sys/kern/vfs_vops.c:413
end trace frame: 0xffff800029a5ab70, count: 0
ddb{0}> trace
x86_ipi_db(ffffffff85032ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 sys/kern/kern_lock.c:173
intr_handler(ffff800029a5a3d0,ffff800000169680) at intr_handler+0x113 sys/arch/amd64/amd64/intr.c:560
Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff85df8cc0) at __mp_lock+0x272 sys/kern/kern_lock.c:173
__mp_acquire_count(ffffffff85df8cc0,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:-1
sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 sys/kern/kern_synch.c:369
biowait(ffff800001bf9bb8) at biowait+0xe6 sys/kern/vfs_bio.c:1110
bwrite(ffff800001bf9bb8) at bwrite+0x4e1 sys/kern/vfs_bio.c:625
ufs_dirremove(ffff800001bed010,ffff800001c4e2a0,800c,1) at ufs_dirremove+0x4b5 sys/ufs/ufs/ufs_lookup.c:919
ufs_rmdir(ffff800029a5a900) at ufs_rmdir+0x437 sys/ufs/ufs/ufs_vnops.c:1248
VOP_RMDIR(ffff800001bed010,ffff800001c8b1e8,ffff800029a5aa60) at VOP_RMDIR+0x290 sys/kern/vfs_vops.c:413
dounlinkat(ffff800045ffdca0,ffffff9c,76681bfc25e0,8) at dounlinkat+0x2fe sys/kern/vfs_syscalls.c:-1
syscall(ffff800029a5ad00) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029a5ad00) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x76681bfc25d0, count: -17
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x17: popq %rbp
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff8463f8a3) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
rw_status(ffff8000306e0688) at rw_status+0x27 atomic_load_long sys/sys/atomic.h:213 [inline]
rw_status(ffff8000306e0688) at rw_status+0x27 sys/kern/kern_rwlock.c:517
KQRELE(ffff800001d3b738) at KQRELE+0x77 sys/kern/kern_event.c:246
kqueue_close(ffff800001d3a608,ffff800038f1c7f0) at kqueue_close+0x70 sys/kern/kern_event.c:1957
fdrop(ffff800001d3a608,ffff800038f1c7f0) at fdrop+0x1c3 sys/kern/kern_descrip.c:1281
fd_iterfile(ffff800001d3a608,ffff800038f1c7f0) at fd_iterfile+0x162 sys/kern/kern_descrip.c:222
sysctl_file(ffff80002e2d2b28,4,0,ffff80002e2d2b00,ffff800038f1c7f0) at sysctl_file+0x312f sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(49,ffff80002e2d2b28,4,0,ffff80002e2d2b00,0,4,1ffff00005c5a4dc) at kern_sysctl_dirs+0x265 sys/kern/kern_sysctl.c:415
kern_sysctl(ffff80002e2d2b24,5,0,ffff80002e2d2b00,0,0,ffff80002e2d2d80) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800038f1c7f0,ffff80002e2d2d80,ffff80002e2d2ce0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80002e2d2d80) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002e2d2d80) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc6d566ccbb0, count: 1
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff8463f8a3) at panic+0x270 sys/kern/subr_prf.c:198
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
__asan_load8_noabort(ffff8000306e0688) at __asan_load8_noabort+0xde sys/kern/subr_kasan.c:1099
rw_status(ffff8000306e0688) at rw_status+0x27 atomic_load_long sys/sys/atomic.h:213 [inline]
rw_status(ffff8000306e0688) at rw_status+0x27 sys/kern/kern_rwlock.c:517
KQRELE(ffff800001d3b738) at KQRELE+0x77 sys/kern/kern_event.c:246
kqueue_close(ffff800001d3a608,ffff800038f1c7f0) at kqueue_close+0x70 sys/kern/kern_event.c:1957
fdrop(ffff800001d3a608,ffff800038f1c7f0) at fdrop+0x1c3 sys/kern/kern_descrip.c:1281
fd_iterfile(ffff800001d3a608,ffff800038f1c7f0) at fd_iterfile+0x162 sys/kern/kern_descrip.c:222
sysctl_file(ffff80002e2d2b28,4,0,ffff80002e2d2b00,ffff800038f1c7f0) at sysctl_file+0x312f sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(49,ffff80002e2d2b28,4,0,ffff80002e2d2b00,0,4,1ffff00005c5a4dc) at kern_sysctl_dirs+0x265 sys/kern/kern_sysctl.c:415
kern_sysctl(ffff80002e2d2b24,5,0,ffff80002e2d2b00,0,0,ffff80002e2d2d80) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff800038f1c7f0,ffff80002e2d2d80,ffff80002e2d2ce0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff80002e2d2d80) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80002e2d2d80) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xc6d566ccbb0, count: -14