Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program panic: kernel diagnostic assertion "nlevel >= IPL_NONE" failed: file "/syzkaller/managers/setuid/kernel/sys/arch/amd64/amd64/intr.c", line 699 Stopped at db_enter+0x1c: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 181774 82611 0 0x14000 0x200 1 softnet0 db_enter() at db_enter+0x1c panic(ffffffff8279dc9a) at panic+0x17b __assert(ffffffff82820322,ffffffff8283c727,2bb,ffffffff827a1c2e) at __assert+0x29 splraise(bddd188a) at splraise+0xb4 mtx_enter_try(fffffd806f5760d8) at mtx_enter_try+0x73 mtx_enter(fffffd806f5760d8) at mtx_enter+0x4f knote_remove(ffff800021224020,fffffd806f5760d8,fffffd806f576160,3,0) at knote_remove+0x20d knote_fdclose(ffff800021224020,3) at knote_fdclose+0xae fdfree(ffff800021224020) at fdfree+0xdf exit1(ffff800021224020,0,0,1) at exit1+0x3e4 sys_exit(ffff800021224020,ffff8000212b6f40,ffff8000212b6f90) at sys_exit+0x1a syscall(ffff8000212b7010) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ddce9c03610, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "nlevel >= IPL_NONE" failed: file "/syzkaller/managers/setuid/kernel/sys/arch/amd64/amd64/intr.c", line 699 ddb{0}> trace db_enter() at db_enter+0x1c panic(ffffffff8279dc9a) at panic+0x17b __assert(ffffffff82820322,ffffffff8283c727,2bb,ffffffff827a1c2e) at __assert+0x29 splraise(bddd188a) at splraise+0xb4 mtx_enter_try(fffffd806f5760d8) at mtx_enter_try+0x73 mtx_enter(fffffd806f5760d8) at mtx_enter+0x4f knote_remove(ffff800021224020,fffffd806f5760d8,fffffd806f576160,3,0) at knote_remove+0x20d knote_fdclose(ffff800021224020,3) at knote_fdclose+0xae fdfree(ffff800021224020) at fdfree+0xdf exit1(ffff800021224020,0,0,1) at exit1+0x3e4 sys_exit(ffff800021224020,ffff8000212b6f40,ffff8000212b6f90) at sys_exit+0x1a syscall(ffff8000212b7010) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ddce9c03610, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000212b6b80 rbx 0xffffffff82c20b9f cpu_info_full_primary+0x2b9f rdx 0x3fd rcx 0 rax 0x8f r8 0x101010101010101 r9 0x8080808080808080 r10 0x71f13b3198bebd16 r11 0xaeaff34147ea4b78 r12 0xffffffff82c209a0 cpu_info_full_primary+0x29a0 r13 0 r14 0 r15 0x1 rip 0xffffffff814c2d0c db_enter+0x1c cs 0x8 rflags 0x246 rsp 0xffff8000212b6b70 ss 0x10 db_enter+0x1c: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor2671595043) pid=520868 stat=onproc flags process=1008 proc=2000 pri=0, usrpri=57, nice=20 forw=0xffffffffffffffff, list=0xffff80002120e018,0xffff8000212252c8 process=0xffff80002122ee28 user=0xffff8000212b2000, vmspace=0xfffffd806ffbe930 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 93827 385580 99054 0 2 0 syz-executor2671595043 81027 243170 50044 0 2 0 syz-executor2671595043 81027 287628 50044 0 2 0x4000000 syz-executor2671595043 16430 88674 96460 0 2 0 syz-executor2671595043 16430 59454 96460 0 2 0x4000000 syz-executor2671595043 46176 245491 79759 0 2 0 syz-executor2671595043 46176 160315 79759 0 2 0x4000000 syz-executor2671595043 87364 162022 48338 0 2 0 syz-executor2671595043 56227 429677 8469 0 2 0 syz-executor2671595043 56227 33521 8469 0 2 0x4000000 syz-executor2671595043 10425 162502 35804 0 2 0 syz-executor2671595043 10425 206139 35804 0 3 0x4000080 fsleep syz-executor2671595043 35804 282305 91289 0 3 0x80 nanoslp syz-executor2671595043 50044 128169 91289 0 3 0x80 nanoslp syz-executor2671595043 99054 224457 91289 0 2 0 syz-executor2671595043 8469 116724 91289 0 2 0 syz-executor2671595043 96460 314766 91289 0 3 0x80 nanoslp syz-executor2671595043 79759 128828 91289 0 2 0 syz-executor2671595043 67879 375579 91289 0 3 0x80 nanoslp syz-executor2671595043 48338 73442 91289 0 3 0x80 nanoslp syz-executor2671595043 91289 162350 90673 0 3 0x82 nanoslp syz-executor2671595043 90673 5348 31352 0 3 0x10008a sigsusp ksh 31352 93169 49718 0 3 0x9a kqread sshd 25361 77213 1 0 3 0x100083 ttyin getty 49718 333886 1 0 3 0x88 kqread sshd 64331 225304 63938 73 3 0x1100090 kqread syslogd 63938 26774 1 0 3 0x100082 netio syslogd 74270 152397 1 0 3 0x100080 kqread resolvd 91319 243517 8267 77 3 0x100092 kqread dhcpleased 97656 380143 8267 77 3 0x100092 kqread dhcpleased 8267 250925 1 0 3 0x80 kqread dhcpleased 27377 450208 0 0 3 0x14200 bored smr 71470 11616 0 0 2 0x14200 zerothread 93873 343269 0 0 3 0x14200 aiodoned aiodoned 18421 143447 0 0 3 0x14200 syncer update 39781 205717 0 0 3 0x14200 cleaner cleaner 69101 488611 0 0 2 0x14200 reaper 89096 295008 0 0 3 0x14200 pgdaemon pagedaemon 15439 20133 0 0 3 0x14200 bored viomb 43873 42250 0 0 3 0x40014200 acpi0 acpi0 57918 244005 0 0 3 0x40014200 idle1 38222 229032 0 0 3 0x14200 bored softnet3 57875 277050 0 0 3 0x14200 bored softnet2 65434 268857 0 0 3 0x14200 bored softnet1 82611 181774 0 0 7 0x14200 softnet0 73441 433567 0 0 3 0x14200 bored systqmp 40935 501825 0 0 3 0x14200 bored systq 18085 242464 0 0 3 0x40014200 bored softclock 58 463906 0 0 3 0x40014200 idle0 1 460126 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 82611 (softnet0) thread 0xffff8000211687f8 (181774) exclusive rwlock netlock r = 0 (0xffffffff82b88c40) #0 witness_lock+0x447 #1 if_netisr+0x1f #2 taskq_thread+0xe5 #3 proc_trampoline+0x1c shared rwlock softnet0 r = 0 (0xffff80000002d070) #0 witness_lock+0x447 #1 taskq_thread+0xca #2 proc_trampoline+0x1c ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10156 6389K 6420K 78643K 11234 0 pcb 13 8K 8K 78643K 13 0 rtable 58 1K 2K 78643K 112 0 pf 12 6K 6K 78643K 12 0 ifaddr 12 9K 9K 78643K 12 0 ifgroup 17 1K 1K 78643K 17 0 counters 44 33K 33K 78643K 44 0 ioctlops 0 0K 2K 78643K 21 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1174 73K 74K 78643K 1187 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 2 0K 0K 78643K 2 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 1 0K 0K 78643K 1 0 proc 55 78K 79K 78643K 246 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 11 0K 0K 78643K 11 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 25 122K 122K 78643K 25 0 exec 0 0K 1K 78643K 246 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 133 7K 7K 78643K 3421 0 UVM aobj 3 2K 2K 78643K 3 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 3 0K 0K 78643K 3 0 temp 1 5904K 5968K 78643K 2869 0 kqueue 11 16K 22K 78643K 178 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 21 0 18 1 0 1 1 0 8 0 rtentry 112 23 0 1 1 0 1 1 0 8 0 unpcb 144 33 0 20 1 0 1 1 0 8 0 syncache 304 5 0 5 1 0 1 1 0 8 1 tcpqe 32 229 0 229 1 0 1 1 0 8 1 tcpcb 808 8 0 5 1 0 1 1 0 8 0 arp 120 2 0 0 1 0 1 1 0 8 0 inpcb 368 182 0 174 2 0 2 2 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 97 0 0 7 0 7 7 0 8 0 art_table 32 98 0 0 1 0 1 1 0 8 0 art_node 16 22 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1422 0 37 87 0 87 87 0 8 0 ffsino 272 1422 0 37 93 0 93 93 0 8 0 nchpl 144 1606 0 47 58 0 58 58 0 8 0 uvmvnodes 80 1431 0 0 30 0 30 30 0 8 0 vnodes 216 1431 0 0 80 0 80 80 0 8 0 namei 1024 4271 0 4271 2 1 1 1 0 8 1 percpumem 16 35 0 0 1 0 1 1 0 8 0 kstatmem 264 6 0 0 1 0 1 1 0 8 0 scxspl 216 4792 0 4792 4 2 2 2 1 8 2 plimitpl 152 16 0 10 1 0 1 1 0 8 0 sigapl 424 482 0 436 6 0 6 6 0 8 0 futexpl 64 390 0 389 1 0 1 1 0 8 0 knotepl 120 50 0 0 2 0 2 2 0 8 0 kqueuepl 216 178 0 171 1 0 1 1 0 8 0 pipepl 320 88 0 85 2 1 1 1 0 8 0 fdescpl 496 465 0 436 5 1 4 4 0 8 0 filepl 152 1288 0 1233 3 0 3 3 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 17 0 9 1 0 1 1 0 8 0 pgrppl 48 17 0 9 1 0 1 1 0 8 0 ucredpl 104 66 0 56 1 0 1 1 0 8 0 zombiepl 144 437 0 436 2 1 1 1 0 8 0 processpl 1072 482 0 436 4 0 4 4 0 8 0 procpl 680 646 0 594 5 0 5 5 0 8 0 sockpl 488 236 0 212 4 0 4 4 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 4 0 0 1 0 1 1 0 8 0 mcl2k 2048 247 0 0 31 0 31 31 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 256 0 0 16 0 16 16 0 8 0 bufpl 288 2475 0 88 171 0 171 171 0 8 0 anonpl 24 174286 0 172198 26 3 23 24 0 186 10 amapchunkpl 152 11723 0 11456 14 1 13 13 0 158 2 amappl16 200 4892 0 4890 5 1 4 5 0 8 3 amappl15 192 13 0 13 1 1 0 1 0 8 0 amappl14 184 104 0 95 1 0 1 1 0 8 0 amappl13 176 11 0 11 1 1 0 1 0 8 0 amappl12 168 959 0 939 1 0 1 1 0 8 0 amappl11 160 51 0 41 1 0 1 1 0 8 0 amappl10 152 12 0 12 1 0 1 1 0 8 1 amappl9 144 156 0 156 2 1 1 1 0 8 1 amappl8 136 31 0 29 1 0 1 1 0 8 0 amappl7 128 183 0 166 1 0 1 1 0 8 0 amappl6 120 142 0 129 1 0 1 1 0 8 0 amappl5 112 106 0 98 1 0 1 1 0 8 0 amappl4 104 415 0 385 1 0 1 1 0 8 0 amappl3 96 3324 0 3262 2 0 2 2 0 8 0 amappl2 88 461 0 419 3 1 2 2 0 8 0 amappl1 80 9792 0 9326 12 1 11 11 0 8 0 amappl 88 3148 0 3053 3 0 3 3 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 466 0 437 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 466 0 437 1 0 1 1 0 8 0 vmmpekpl 168 7649 0 7630 2 0 2 2 0 8 0 vmmpepl 168 39640 0 38280 62 2 60 60 0 357 0 vmsppl 464 465 0 437 5 1 4 4 0 8 0 rwobjpl 56 19810 0 17715 31 1 30 31 0 8 0 pdppl 4096 940 0 874 82 16 66 66 0 8 0 pvpl 32 279320 0 274311 54 3 51 52 0 265 10 pmappl 248 465 0 437 3 1 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 506 0 19 14 0 14 14 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x1c panic(ffffffff8279dc9a) at panic+0x17b __assert(ffffffff82820322,ffffffff8283c727,2bb,ffffffff827a1c2e) at __assert+0x29 splraise(bddd188a) at splraise+0xb4 mtx_enter_try(fffffd806f5760d8) at mtx_enter_try+0x73 mtx_enter(fffffd806f5760d8) at mtx_enter+0x4f knote_remove(ffff800021224020,fffffd806f5760d8,fffffd806f576160,3,0) at knote_remove+0x20d knote_fdclose(ffff800021224020,3) at knote_fdclose+0xae fdfree(ffff800021224020) at fdfree+0xdf exit1(ffff800021224020,0,0,1) at exit1+0x3e4 sys_exit(ffff800021224020,ffff8000212b6f40,ffff8000212b6f90) at sys_exit+0x1a syscall(ffff8000212b7010) at syscall+0x5e2 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ddce9c03610, count: -13 ddb{0}> machine ddbcpu 1