[ci-openbsd-kasan], missing on: [ci-openbsd-main ci-openbsd-multicore ci-openbsd-setuid]
panic: Caught invalid memory access at ffff8000018cabf0 size 36 op 1
Stopped at db_enter+0x17: popq %rbp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
*215788 11982 0 0 0x4000000 1 syz-executor
245762 24114 73 0x1100010 0 0K syslogd
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec
sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713
sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3d242c6bc20, count: 5
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: Caught invalid memory access at ffff8000018cabf0 size 36 op 1
ddb{1}> show kasan
KASAN: invalid write of 36 bytes at 0xffff8000018cabf0 from pc 0xffffffff83484679
KASAN: first bad byte at 0xffff8000018cabf3 (+3); shadow 0x03: partial granule (out-of-bounds)
KASAN: 0xffff8000018cabf3 is 3 bytes inside the 16-byte malloc slot [0xffff8000018cabf0..0xffff8000018cac00)
KASAN: allocated at:
#0 malloc+0xda0 sys/kern/kern_malloc.c:446
#1 sysvipc_infoout+0x18e sys/kern/kern_sysctl.c:2711
#2 sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
#3 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
#4 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
#5 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
#7 Xsyscall+0x128
KASAN: pc: sysvipc_infoout+0x1a9
KASAN: call trace:
#0 kasan_memcpy+0x1ca kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline]
#0 kasan_memcpy+0x1ca sys/kern/subr_kasan.c:1025
#1 sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713
#2 sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
#3 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
#4 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
#5 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
#6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
#7 Xsyscall+0x128
KASAN: shadow of 0xffff8000018caa80..0xffff8000018cad00 (1 cell = 8 bytes):
0xffff8000018caa80: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
0xffff8000018cab00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08
>0xffff8000018cab80: fc 08 08 fb fc 08 fc 08 fc 08 fc 08 fc 08[03]fb
0xffff8000018cac00: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08
0xffff8000018cac80: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08
KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec
sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713
sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3d242c6bc20, count: -10
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff800029a575b0
rbx 0xffff800029a57620
rdx 0
rcx 0xffff800028fe3ff0
rax 0
r8 0x101010101010101
r9 0x8080808080808080
r10 0xffff800029a57398
r11 0xffffffff8263c7e0 x86_bus_space_io_read_1
r12 0xffffffff84634053 .str.5+0x9c553
r13 0xffff800028fe4c08
r14 0xffff800028fe4e07
r15 0x1
rip 0xffffffff81fd2ec7 db_enter+0x17
cs 0x8
rflags 0x246
rsp 0xffff800029a575b0
ss 0x10
db_enter+0x17: popq %rbp
ddb{1}> show proc
PROC (syz-executor) tid=215788 pid=11982 tcnt=3 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=71, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff8000299e2d18,0xffff8000299e34f0
process=0xffff8000298a4008 user=0xffff800029a4d000, vmspace=0xffff800000d8a000
estcpu=21, cpticks=18, pctcpu=0.11, user=0, sys=18, intr=0
ddb{1}> ps
PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND
11982 312594 22176 0 3 0 0x80 nanoslp syz-executor
*11982 215788 22176 0 7 0 0x4000000 syz-executor
11982 27590 22176 0 3 0 0x4000080 fsleep syz-executor
22176 495284 79898 0 3 0x2 0x80 nanoslp syz-executor
79898 80864 75763 0 3 0x2 0x80 kqread syz-executor
75763 291731 74309 0 3 0x2 0x80 thrsleep syz-execprog
75763 37308 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 38970 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 439110 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 49773 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 521803 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 482010 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 294211 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 183332 74309 0 3 0x2 0x4000080 kqread syz-execprog
75763 259081 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 200416 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
75763 35790 74309 0 3 0x2 0x4000080 thrsleep syz-execprog
74309 293074 50089 0 3 0x100002 0x88 sigsusp ksh
50089 241415 84713 0 3 0x10 0x88 kqread sshd-session
84713 181269 52666 0 3 0x12 0x80 kqread sshd-session
90724 266036 1 0 3 0x100003 0x80 ttyin getty
52666 115549 1 0 3 0 0x88 kqread sshd
43510 255344 50195 74 3 0x1100012 0x80 bpf pflogd
50195 266469 1 0 3 0 0x80 sbwait pflogd
24114 245762 17450 73 7 0x1100010 0 syslogd
17450 49993 1 0 3 0x100002 0x80 sbwait syslogd
28571 234852 1 0 3 0x100000 0x80 kqread resolvd
82809 246450 39805 77 3 0x100012 0x80 kqread dhcpleased
24223 131363 39805 77 3 0x100012 0x80 kqread dhcpleased
39805 211543 1 0 3 0 0x80 kqread dhcpleased
19243 5163 0 0 2 0x14000 0x40000200 smr
75974 174292 0 0 3 0x14000 0x200 pgzero zerothread
93057 50408 0 0 3 0x14000 0x200 aiodoned aiodoned
5120 128653 0 0 3 0x14000 0x200 syncer update
25073 289280 0 0 3 0x14000 0x200 cleaner cleaner
57420 263917 0 0 3 0x14000 0x200 reaper reaper
21606 480813 0 0 3 0x14000 0x200 pgdaemon pagedaemon
11150 349048 0 0 3 0x14000 0x200 bored viomb
23036 337904 0 0 3 0x14000 0x40000200 acpi0 acpi0
49123 424022 0 0 3 0x14000 0x40000200 idle1
62161 156795 0 0 3 0x14000 0x200 bored softnet1
45135 224385 0 0 3 0x14000 0x200 bored softnet0
46643 236931 0 0 3 0x14000 0x200 smrbar systqmp
69484 246128 0 0 3 0x14000 0x200 bored systq
35040 164881 0 0 3 0x14000 0x200 tmoslp softclockmp
9910 9901 0 0 3 0x14000 0x40000200 tmoslp softclock
94221 235980 0 0 3 0x14000 0x40000200 idle0
1 229475 0 0 3 0x2 0x80 wait init
0 0 -1 0 3 0x10000 0x200 scheduler swapper
ddb{1}> show all locks
Process 24114 (syslogd) thread 0xffff800029913a00 (245762)
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85df2400)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline]
#1 syscall+0x1048 sys/arch/amd64/amd64/trap.c:783
#2 Xsyscall+0x128
Process 46643 (systqmp) thread 0xffff800045ffe298 (236931)
shared rwlock systqmp r = 0 (0xffffffff85368d18)
#0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x632 sys/kern/subr_witness.c:1160
#1 taskq_thread+0x1ba sys/kern/kern_task.c:442
#2 proc_trampoline+0x10
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11029 12226K 12226K 166960K 12123 0
pcb 17 24K 24K 166960K 17 0
rtable 83 4K 4K 166960K 171 0
pf 20 18K 20K 166960K 34 0
ifaddr 15 3K 3K 166960K 19 0
ifgroup 27 1K 1K 166960K 32 0
sysctl 1 1K 13K 166960K 5 0
counters 56 39K 39K 166960K 58 0
ioctlops 0 0K 4K 166960K 1477 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1226 79K 79K 166960K 1315 0
UFS quota 1 36K 36K 166960K 1 0
UFS mount 5 44K 44K 166960K 5 0
shm 2 2K 2K 166960K 2 0
VM map 2 1K 1K 166960K 2 0
sem 2 0K 0K 166960K 2 0
dirhash 12 2K 2K 166960K 12 0
ACPI 1734 201K 292K 166960K 11964 0
file desc 4 9K 13K 166960K 108 0
proc 70 128K 144K 166960K 384 0
subproc 0 0K 1K 166960K 30 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 20K 20K 166960K 1 0
in_multi 22 1K 1K 166960K 33 0
ether_multi 1 0K 0K 166960K 1 0
mrt 0 0K 0K 166960K 1 0
ISOFS mount 1 36K 36K 166960K 1 0
MSDOSFS mount 1 20K 20K 166960K 1 0
ttys 25 182K 182K 166960K 25 0
exec 0 0K 2K 166960K 352 0
fusefs mount 1 36K 36K 166960K 1 0
tdb 3 1K 1K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 208 150K 307K 166960K 3584 0
UVM aobj 3 4K 4K 166960K 3 0
pinsyscall 1055 1722K 1727K 166960K 1263 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
NDP 7 0K 0K 166960K 10 0
temp 2 9160K 9172K 166960K 4927 0
kqueue 14 44K 44K 166960K 40 0
SYN cache 2 16K 16K 166960K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 28 0 0 1 0 1 1 0 8 0
rtpcb 120 21 0 18 1 0 1 1 0 8 0
rtentry 176 45 0 12 2 0 2 2 0 8 0
unpcb 144 65 0 46 1 0 1 1 0 8 0
syncache 336 9 0 9 1 0 1 1 0 8 1
tcpqe 32 31 0 31 1 1 0 1 0 8 0
tcpcb 736 16 0 10 1 0 1 1 0 8 0
arp 136 6 0 2 1 0 1 1 0 8 0
inpcb 328 49 0 40 1 0 1 1 0 8 0
nd6 152 6 0 3 1 0 1 1 0 8 0
kcovpl 48 4 0 4 1 0 1 1 0 8 1
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 14 0 0 1 0 1 1 0 8 0
pfstkey 128 14 0 0 1 0 1 1 0 8 0
pfstate 448 14 0 0 2 0 2 2 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 193 0 48 10 0 10 10 0 8 0
art_table 40 194 0 48 2 0 2 2 0 8 0
art_node 32 45 0 14 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1590 0 113 93 0 93 93 0 8 0
ffsino 296 1590 0 113 114 0 114 114 0 8 0
nchpl 144 1840 0 84 66 0 66 66 0 8 0
vnodes 216 1634 0 0 91 0 91 91 0 8 0
namei 1024 5889 0 5889 2 0 2 2 0 8 2
percpumem 16 45 0 1 1 0 1 1 0 8 0
kstatmem 264 15 0 2 1 0 1 1 0 8 0
scxspl 216 11700 0 11700 5 3 2 3 1 8 2
plimitpl 152 55 0 44 1 0 1 1 0 8 0
sigapl 424 436 0 401 6 0 6 6 0 8 2
knotepl 120 65 0 0 2 0 2 2 0 8 0
kqueuepl 224 36 0 26 1 0 1 1 0 8 0
pipepl 344 185 0 178 2 0 2 2 0 8 1
fdescpl 528 420 0 401 3 0 3 3 0 8 1
filepl 160 1870 0 1790 4 0 4 4 0 8 0
lockfpl 104 6 0 4 1 0 1 1 0 8 0
lockfspl 48 4 0 2 1 0 1 1 0 8 0
sessionpl 144 38 0 29 1 0 1 1 0 8 0
pgrppl 48 54 0 44 1 0 1 1 0 8 0
ucredpl 104 141 0 128 1 0 1 1 0 8 0
zombiepl 144 401 0 401 1 0 1 1 0 8 1
processpl 1232 436 0 401 4 0 4 4 0 8 1
procpl 664 462 0 414 5 0 5 5 0 8 0
sockpl 752 135 0 104 4 0 4 4 0 8 0
mcl64k 65536 2 0 0 1 0 1 1 0 8 0
mcl16k 16384 2 0 0 1 0 1 1 0 8 0
mcl12k 12288 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 170 0 0 22 0 22 22 0 8 0
mcl2k 2048 17 0 0 3 0 3 3 0 8 0
mextrefs 64 11 0 0 1 0 1 1 0 8 0
mtagpl 96 3 0 0 1 0 1 1 0 8 0
mbufpl 256 170 0 0 11 0 11 11 0 8 0
bufpl 272 7266 0 225 470 0 470 470 0 8 0
anonpl 32 11160 0 0 91 1 90 90 0 222 0
amapchunkpl 152 11270 0 10793 34 1 33 33 0 158 12
amappl16 200 3925 0 3790 9 0 9 9 0 8 1
amappl15 192 13 0 13 2 2 0 1 0 8 0
amappl14 184 374 0 372 1 0 1 1 0 8 0
amappl13 176 183 0 170 3 1 2 3 0 8 1
amappl12 168 687 0 667 2 0 2 2 0 8 0
amappl11 160 14 0 14 1 1 0 1 0 8 0
amappl10 152 96 0 81 2 0 2 2 0 8 1
amappl9 144 1792 0 1792 2 1 1 1 0 8 1
amappl8 136 147 0 117 2 0 2 2 0 8 0
amappl7 128 202 0 183 2 0 2 2 0 8 0
amappl6 120 132 0 129 1 0 1 1 0 8 0
amappl5 112 274 0 263 1 0 1 1 0 8 0
amappl4 104 384 0 362 2 0 2 2 0 8 1
amappl3 96 1459 0 1403 3 0 3 3 0 8 1
amappl2 88 804 0 739 5 0 5 5 0 8 3
amappl1 80 15493 0 14923 25 4 21 24 0 8 8
amappl 88 2704 0 2581 5 0 5 5 0 92 1
uvmvnodes 80 88 0 0 2 0 2 2 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 2 0 0 1 0 1 1 0 8 0
uaddrrnd 24 420 0 401 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 420 0 401 1 0 1 1 0 8 0
vmmpekpl 168 9328 0 9301 2 0 2 2 0 8 0
vmmpepl 168 54103 0 52502 131 1 130 130 0 357 59
vmsppl 488 419 0 401 4 0 4 4 0 8 1
rwobjpl 80 23065 0 22008 41 7 34 41 0 8 8
pdppl 4096 849 0 802 77 26 51 69 0 8 4
pvpl 32 58552 0 0 475 2 473 473 0 265 0
pmappl 256 419 0 401 2 0 2 2 0 8 0
extentpl 40 46 0 28 1 0 1 1 0 8 0
phpool 120 706 0 29 21 0 21 21 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x19: leave
x86_ipi_db(ffffffff850aeff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 check_copyin sys/kern/kern_subr.c:-1 [inline]
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 copyin sys/kern/kern_subr.c:101 [inline]
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 sys/kern/kern_subr.c:143
ffs_write(ffff800029997b80) at ffs_write+0xcb4 sys/ufs/ffs/ffs_vnops.c:359
VOP_WRITE(ffff8000018a23b0,ffff800029997e40,3,ffff800000119a28) at VOP_WRITE+0x1a8 sys/kern/vfs_vops.c:245
vn_write(ffff8000016a8c80,ffff800029997e40,0) at vn_write+0x295 sys/kern/vfs_vnops.c:414
dofilewritev(ffff800029913a00,e,ffff800029997e40,0,ffff800029998000) at dofilewritev+0x3ef sys/kern/sys_generic.c:384
sys_writev(ffff800029913a00,ffff800029998090,ffff800029998000) at sys_writev+0x168 sys/kern/sys_generic.c:327
syscall(ffff800029998090) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029998090) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70abb72ce260, count: 4
ddb{0}> trace
x86_ipi_db(ffffffff850aeff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412
x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 check_copyin sys/kern/kern_subr.c:-1 [inline]
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 copyin sys/kern/kern_subr.c:101 [inline]
uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 sys/kern/kern_subr.c:143
ffs_write(ffff800029997b80) at ffs_write+0xcb4 sys/ufs/ffs/ffs_vnops.c:359
VOP_WRITE(ffff8000018a23b0,ffff800029997e40,3,ffff800000119a28) at VOP_WRITE+0x1a8 sys/kern/vfs_vops.c:245
vn_write(ffff8000016a8c80,ffff800029997e40,0) at vn_write+0x295 sys/kern/vfs_vnops.c:414
dofilewritev(ffff800029913a00,e,ffff800029997e40,0,ffff800029998000) at dofilewritev+0x3ef sys/kern/sys_generic.c:384
sys_writev(ffff800029913a00,ffff800029998090,ffff800029998000) at sys_writev+0x168 sys/kern/sys_generic.c:327
syscall(ffff800029998090) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029998090) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x70abb72ce260, count: -11
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x17: popq %rbp
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec
sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713
sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3d242c6bc20, count: 5
ddb{1}> trace
db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457
panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198
kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec
sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713
sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1
kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429
kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529
sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309
syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x3d242c6bc20, count: -10