papanic: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 685 Stopped at db_enter+0x1c: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *334539 51368 32767 0x10 0 1 syz-executor.0 26001 18396 32767 0x10 0 0 syz-executor.1 db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827aa57e) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff828281fe,ffffffff827ecd25,2ad,ffffffff827df7a8) at __assert+0x29 sys/kern/subr_prf.c:157 proc_trampoline_mi() at proc_trampoline_mi+0x221 end trace frame: 0x0, count: 11 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: vop_generic_badop cpu1: kernel diagnostic assertion "!_kernel_lock_held()" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_fork.c", line 685 ddb{1}> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827aa57e) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff828281fe,ffffffff827ecd25,2ad,ffffffff827df7a8) at __assert+0x29 sys/kern/subr_prf.c:157 proc_trampoline_mi() at proc_trampoline_mi+0x221 end trace frame: 0x0, count: -4 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002adf3660 rbx 0xffff800020d49ba7 rdx 0 rcx 0xffff8000212b2558 rax 0xffff800020d48ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x19bee020674c8531 r11 0xd225a3e109889796 r12 0xffff800020d499a8 r13 0 r14 0xffffffff82c519a8 cpu_info_full_primary+0x29a8 r15 0x1 rip 0xffffffff8152babc db_enter+0x1c cs 0x8 rflags 0x246 rsp 0xffff80002adf3650 ss 0x10 db_enter+0x1c: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.0) tid=334539 pid=51368 tcnt=1 stat=onproc flags process=10 proc=0 runpri=82, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 forw=0xffffffffffffffff, list=0xffff8000212b37f0,0xffffffff82ce5ad0 process=0xffff800021283258 user=0xffff80002adee000, vmspace=0xfffffd8066c37030 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND *51368 334539 37851 32767 7 0x10 syz-executor.0 2573 377207 30422 32767 2 0x10 syz-executor.5 31171 49233 37380 32767 2 0x10 syz-executor.4 31171 229241 37380 32767 3 0x4000090 fsleep syz-executor.4 10414 178731 16718 32767 2 0x10 syz-executor.7 10414 266816 16718 32767 2 0x4000010 syz-executor.7 30422 472299 83456 32767 2 0x10 syz-executor.5 83456 102981 14407 0 3 0x82 wait syz-executor.5 57278 359746 44549 32767 2 0x10 syz-executor.2 44549 405388 14407 0 3 0x82 wait syz-executor.2 71893 509239 62310 32767 3 0x10 biowait syz-executor.3 62310 441696 14407 0 3 0x82 wait syz-executor.3 37851 42017 70199 32767 3 0x90 nanoslp syz-executor.0 70199 469997 14407 0 3 0x82 wait syz-executor.0 16718 262553 26284 32767 3 0x90 nanoslp syz-executor.7 26284 95540 14407 0 3 0x82 wait syz-executor.7 18396 26001 22116 32767 7 0x10 syz-executor.1 22116 485696 14407 0 3 0x82 wait syz-executor.1 37380 330881 92995 32767 3 0x90 nanoslp syz-executor.4 92995 192642 14407 0 3 0x82 wait syz-executor.4 70977 513436 0 0 3 0x14200 bored sosplice 15776 224089 97055 32767 2 0x10 syz-executor.6 97055 38609 14407 0 3 0x82 wait syz-executor.6 14407 110312 16553 0 3 0x2000082 thrsleep syz-fuzzer 14407 72587 16553 0 3 0x6000082 nanoslp syz-fuzzer 14407 486809 16553 0 3 0x6000082 thrsleep syz-fuzzer 14407 391500 16553 0 3 0x6000082 thrsleep syz-fuzzer 14407 478020 16553 0 3 0x6000082 thrsleep syz-fuzzer 14407 38475 16553 0 3 0x6000082 wait syz-fuzzer 14407 16929 16553 0 3 0x6000082 wait syz-fuzzer 14407 120932 16553 0 3 0x6000082 thrsleep syz-fuzzer 14407 81974 16553 0 3 0x6000082 wait syz-fuzzer 14407 350075 16553 0 3 0x6000082 thrsleep syz-fuzzer 14407 231812 16553 0 3 0x6000082 wait syz-fuzzer 14407 122136 16553 0 3 0x6000082 wait syz-fuzzer 14407 430398 16553 0 3 0x6000082 wait syz-fuzzer 14407 423941 16553 0 3 0x6000082 wait syz-fuzzer 14407 434718 16553 0 3 0x6000082 kqread syz-fuzzer 14407 124118 16553 0 3 0x6000082 wait syz-fuzzer 16553 347623 81193 0 3 0x10008a sigsusp ksh 81193 56141 58299 0 3 0x9a kqread sshd 76619 506063 1 0 3 0x100083 ttyin getty 58299 220815 1 0 3 0x88 kqread sshd 38065 128191 76777 73 3 0x1100090 kqread syslogd 76777 139543 1 0 3 0x100082 netio syslogd 18683 145149 1 0 3 0x100080 kqread resolvd 64610 148109 67633 77 3 0x100092 kqread dhcpleased 70748 105144 67633 77 3 0x100092 kqread dhcpleased 67633 282170 1 0 3 0x80 kqread dhcpleased 54349 437972 0 0 3 0x14200 bored smr 97383 327870 0 0 2 0x14200 zerothread 95368 371081 0 0 3 0x14200 aiodoned aiodoned 25126 168809 0 0 3 0x14200 syncer update 28818 187104 0 0 3 0x14200 cleaner cleaner 83836 203247 0 0 3 0x14200 reaper reaper 81995 391353 0 0 3 0x14200 pgdaemon pagedaemon 14052 453139 0 0 3 0x14200 bored viomb 80134 22944 0 0 3 0x40014200 acpi0 acpi0 9898 347671 0 0 3 0x40014200 idle1 44507 428524 0 0 3 0x14200 bored softnet3 64914 125473 0 0 3 0x14200 bored softnet2 33640 144883 0 0 3 0x14200 bored softnet1 30179 406648 0 0 3 0x14200 bored softnet0 43349 275876 0 0 3 0x14200 bored systqmp 82672 4057 0 0 3 0x14200 bored systq 14049 356293 0 0 3 0x14200 tmoslp softclockmp 11732 12917 0 0 3 0x40014200 tmoslp softclock 58522 364225 0 0 3 0x40014200 idle0 1 80908 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 31171 (syz-executor.4) thread 0xffff8000212b2ff8 (229241) exclusive rwlock amaplk r = 0 (0xfffffd8066988908) #0 witness_lock+0x447 #1 uvm_fault_check+0x41a sys/uvm/uvm_fault.c:782 #2 uvm_fault+0xf2 sys/uvm/uvm_fault.c:600 #3 upageflttrap+0x86 sys/arch/amd64/amd64/trap.c:188 #4 usertrap+0x226 sys/arch/amd64/amd64/trap.c:436 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806be15a20) #0 witness_lock+0x447 #1 uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1785 #2 uvm_fault_check+0x3e sys/uvm/uvm_fault.c:672 #3 uvm_fault+0xf2 sys/uvm/uvm_fault.c:600 #4 upageflttrap+0x86 sys/arch/amd64/amd64/trap.c:188 #5 usertrap+0x226 sys/arch/amd64/amd64/trap.c:436 #6 recall_trap+0x8 Process 57278 (syz-executor.2) thread 0xffff80002125f2b8 (359746) exclusive rrwlock inode r = 0 (0xfffffd8070737f80) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:564 #5 vn_closefile+0xca vn_close sys/kern/vfs_vnops.c:292 [inline] #5 vn_closefile+0xca sys/kern/vfs_vnops.c:609 #6 fdrop+0xcb sys/kern/kern_descrip.c:1274 #7 closef+0x120 sys/kern/kern_descrip.c:1258 #8 syscall+0x606 mi_syscall sys/sys/syscall_mi.h:110 [inline] #8 syscall+0x606 sys/arch/amd64/amd64/trap.c:623 #9 Xsyscall+0x128 Process 71893 (syz-executor.3) thread 0xffff80002125e020 (509239) exclusive rrwlock inode r = 0 (0xfffffd8066ae61b8) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 ufs_ihashins+0x46 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1343 #6 ffs_inode_alloc+0x1c2 sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_mkdir+0xf8 sys/ufs/ufs/ufs_vnops.c:1149 #8 VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388 #9 domkdirat+0x125 sys/kern/vfs_syscalls.c:3073 #10 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #10 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd80685d3e70) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0xd5 sys/kern/vfs_lookup.c:418 #6 namei+0x55a sys/kern/vfs_lookup.c:250 #7 domkdirat+0x79 sys/kern/vfs_syscalls.c:3058 #8 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #8 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #9 Xsyscall+0x128 Process 18396 (syz-executor.1) thread 0xffff80002125e2c8 (26001) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82ce5260) #0 witness_lock+0x447 #1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 #2 mi_switch+0x46d sys/kern/sched_bsd.c:470 #3 sleep_finish+0x19b sys/kern/kern_synch.c:414 #4 biowait+0x91 sys/kern/vfs_bio.c:1278 #5 bwrite+0x21c sys/kern/vfs_bio.c:769 #6 ffs_update+0x281 sys/ufs/ffs/ffs_inode.c:113 #7 ufs_mkdir+0x672 sys/ufs/ufs/ufs_vnops.c:1219 #8 VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388 #9 domkdirat+0x125 sys/kern/vfs_syscalls.c:3073 #10 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #10 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8066ae60a8) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:564 #5 vget+0x200 sys/kern/vfs_subr.c:676 #6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1314 #8 ffs_inode_alloc+0x1c2 sys/ufs/ffs/ffs_alloc.c:394 #9 ufs_mkdir+0xf8 sys/ufs/ufs/ufs_vnops.c:1149 #10 VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388 #11 domkdirat+0x125 sys/kern/vfs_syscalls.c:3073 #12 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #12 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #13 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd807864db38) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0xd5 sys/kern/vfs_lookup.c:418 #6 namei+0x55a sys/kern/vfs_lookup.c:250 #7 domkdirat+0x79 sys/kern/vfs_syscalls.c:3058 #8 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #8 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #9 Xsyscall+0x128 Process 15776 (syz-executor.6) thread 0xffff8000212b2aa8 (224089) exclusive rrwlock inode r = 0 (0xfffffd8066ae6a38) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 ufs_ihashins+0x46 sys/ufs/ufs/ufs_ihash.c:140 #5 ffs_vget+0x141 sys/ufs/ffs/ffs_vfsops.c:1343 #6 ffs_inode_alloc+0x1c2 sys/ufs/ffs/ffs_alloc.c:394 #7 ufs_mkdir+0xf8 sys/ufs/ufs/ufs_vnops.c:1149 #8 VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388 #9 domkdirat+0x125 sys/kern/vfs_syscalls.c:3073 #10 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #10 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806a80da38) #0 witness_lock+0x447 #1 rw_enter+0x3c8 sys/kern/kern_rwlock.c:309 #2 rrw_enter+0x8c sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0x8b sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:564 #5 vfs_lookup+0xd5 sys/kern/vfs_lookup.c:418 #6 namei+0x55a sys/kern/vfs_lookup.c:250 #7 domkdirat+0x79 sys/kern/vfs_syscalls.c:3058 #8 syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] #8 syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10214 6412K 6420K 78643K 11423 0 pcb 13 16K 20K 78643K 19 0 rtable 240 6K 7K 78643K 2223 0 pf 29 8K 8K 78643K 115 0 ifaddr 44 15K 16K 78643K 222 0 ifgroup 50 2K 2K 78643K 222 0 sysctl 4 1K 1K 78643K 4 0 counters 60 35K 35K 78643K 146 0 ioctlops 0 0K 2K 78643K 238 0 iov 0 0K 24K 78643K 1458 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1279 80K 80K 78643K 4389 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 256 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 1K 78643K 669 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 22 81K 113K 78643K 15424 0 sigio 0 0K 0K 78643K 2434 0 proc 56 78K 115K 78643K 2453 0 subproc 104 6K 6K 78643K 663 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 537 0 in_multi 99 7K 7K 78643K 685 0 ether_multi 1 0K 0K 78643K 30 0 mrt 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 223 996K 996K 78643K 223 0 exec 0 0K 1K 78643K 2725 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 405 91K 106K 78643K 152065 0 UVM aobj 131 4K 4K 78643K 131 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 482 0 NDP 11 0K 2K 78643K 156 0 temp 74 5920K 6048K 78643K 43982 0 kqueue 12 18K 30K 78643K 1306 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 895 0 892 11 10 1 3 0 8 0 rtentry 112 605 0 492 4 0 4 4 0 8 0 unpcb 144 10626 0 10613 106 104 2 10 0 8 1 syncache 304 159 0 159 22 21 1 1 0 8 1 tcpqe 32 285 0 285 17 17 0 1 0 8 0 tcpcb 808 16220 0 16158 186 169 17 28 0 8 6 arp 120 106 0 88 1 0 1 1 0 8 0 ipq 40 25 0 25 9 9 0 1 0 8 0 ipqe 40 124 0 124 9 9 0 1 0 8 0 inpcb 368 22879 0 22814 158 140 18 22 0 8 6 nd6 136 172 0 145 2 1 1 2 0 8 0 kcovpl 48 51 0 43 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2410 0 1947 33 4 29 30 0 8 0 art_table 32 2411 0 1947 4 0 4 4 0 8 0 art_node 16 604 0 501 1 0 1 1 0 8 0 semupl 112 7 0 7 1 1 0 1 0 8 0 semapl 112 660 0 650 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 21964 0 20499 93 0 93 93 0 8 0 ffsino 272 21964 0 20499 99 0 99 99 0 8 0 nchpl 144 42246 0 40608 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 137706 0 137703 5 4 1 2 0 8 0 percpumem 16 86 0 43 1 0 1 1 0 8 0 kstatmem 264 108 0 86 2 0 2 2 0 8 0 scxspl 216 128995 0 128994 40 38 2 8 1 8 1 plimitpl 152 3011 0 2988 19 18 1 2 0 8 0 sigapl 424 15637 0 15585 7 0 7 7 0 8 0 futexpl 64 135314 0 135313 2 1 1 1 0 8 0 knotepl 120 1032 0 0 18 0 18 18 0 8 0 kqueuepl 216 3053 0 3045 52 51 1 8 0 8 0 pipepl 320 5457 0 5429 116 113 3 13 0 8 0 fdescpl 496 15618 0 15585 7 2 5 6 0 8 0 filepl 152 105470 0 105236 170 154 16 24 0 8 6 lockfpl 104 2244 0 2242 3 2 1 2 0 8 0 lockfspl 48 595 0 593 1 0 1 1 0 8 0 sessionpl 144 66 0 50 1 0 1 1 0 8 0 pgrppl 48 429 0 413 1 0 1 1 0 8 0 ucredpl 104 13983 0 13965 1 0 1 1 0 8 0 zombiepl 144 15585 0 15585 1 0 1 1 0 8 1 processpl 1072 15637 0 15585 5 1 4 5 0 8 0 procpl 680 42230 0 42161 20 12 8 8 0 8 1 sosppl 168 219 0 219 12 11 1 1 0 8 1 sockpl 488 35145 0 35064 523 503 20 42 0 8 6 mcl64k 65536 28 0 0 4 1 3 3 0 8 0 mcl16k 16384 25 0 0 4 1 3 3 0 8 0 mcl12k 12288 17 0 0 2 0 2 2 0 8 0 mcl9k 9216 18 0 0 2 0 2 2 0 8 0 mcl8k 8192 41 0 0 5 2 3 3 0 8 0 mcl4k 4096 49 0 0 5 1 4 4 0 8 0 mcl2k2 2112 27 0 0 2 1 1 2 0 8 0 mcl2k 2048 388 0 0 38 12 26 38 0 8 2 mtagpl 96 12 0 0 1 0 1 1 0 8 0 mbufpl 256 1513 0 0 78 0 78 78 0 8 0 bufpl 288 29539 0 23218 452 0 452 452 0 8 0 anonpl 24 1545383 0 1534546 198 113 85 98 0 186 0 amapchunkpl 152 479630 0 478866 133 91 42 52 0 158 6 amappl16 200 29766 0 29446 144 120 24 30 0 8 5 amappl15 192 31 0 31 3 3 0 1 0 8 0 amappl14 184 287 0 275 2 1 1 2 0 8 0 amappl13 176 52 0 52 9 9 0 1 0 8 0 amappl12 168 17006 0 16964 3 0 3 3 0 8 0 amappl11 160 51 0 39 1 0 1 1 0 8 0 amappl10 152 95 0 81 1 0 1 1 0 8 0 amappl9 144 270 0 270 8 8 0 1 0 8 0 amappl8 136 873 0 706 6 0 6 6 0 8 0 amappl7 128 317 0 292 2 0 2 2 0 8 0 amappl6 120 1008 0 994 1 0 1 1 0 8 0 amappl5 112 412 0 404 1 0 1 1 0 8 0 amappl4 104 1115 0 1080 6 4 2 2 0 8 0 amappl3 96 93291 0 93211 15 11 4 4 0 8 1 amappl2 88 16841 0 16758 3 1 2 3 0 8 0 amappl1 80 65411 0 64887 22 9 13 22 0 8 0 amappl 88 150695 0 150468 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 15618 0 15585 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 15618 0 15585 1 0 1 1 0 8 0 vmmpekpl 168 130295 0 130228 4 0 4 4 0 8 0 vmmpepl 168 917105 0 914717 246 119 127 128 0 357 3 vmsppl 464 15617 0 15585 7 1 6 6 0 8 0 rwobjpl 56 227553 0 220071 123 14 109 109 0 8 0 pdppl 4096 31244 0 31170 578 496 82 92 0 8 8 pvpl 32 4392981 0 4376165 506 340 166 357 0 265 3 pmappl 248 15617 0 15585 4 1 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1765 0 844 27 0 27 27 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffffffff82c50ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x29 kd_curproc sys/dev/kcov.c:589 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x29 sys/dev/kcov.c:158 __mp_lock(ffffffff82ce5058) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82ce5058) at __mp_lock+0x133 sys/kern/kern_lock.c:147 intr_handler(ffff800027b49360,ffff80000007bd80) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d cnputc(61) at cnputc+0x4f sys/dev/cons.c:218 db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155 kprintf() at kprintf+0x6bc sys/kern/subr_prf.c:724 db_printf(ffffffff8282cffc) at db_printf+0x89 sys/kern/subr_prf.c:498 panic(ffffffff8279cc7c) at panic+0xdb sys/kern/subr_prf.c:216 vop_generic_badop(ffff800027b49788) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133 end trace frame: 0xffff800027b497d0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff82c50ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x29 kd_curproc sys/dev/kcov.c:589 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x29 sys/dev/kcov.c:158 __mp_lock(ffffffff82ce5058) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82ce5058) at __mp_lock+0x133 sys/kern/kern_lock.c:147 intr_handler(ffff800027b49360,ffff80000007bd80) at intr_handler+0x62 sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d cnputc(61) at cnputc+0x4f sys/dev/cons.c:218 db_putchar(61) at db_putchar+0x3fc sys/ddb/db_output.c:155 kprintf() at kprintf+0x6bc sys/kern/subr_prf.c:724 db_printf(ffffffff8282cffc) at db_printf+0x89 sys/kern/subr_prf.c:498 panic(ffffffff8279cc7c) at panic+0xdb sys/kern/subr_prf.c:216 vop_generic_badop(ffff800027b49788) at vop_generic_badop+0x1f sys/kern/vfs_default.c:133 VOP_STRATEGY(fffffd8070c90368,fffffd80697a7138) at VOP_STRATEGY+0x9f sys/kern/vfs_vops.c:628 bwrite(fffffd80697a7138) at bwrite+0x1f1 sys/kern/vfs_bio.c:760 VOP_BWRITE(fffffd80697a7138) at VOP_BWRITE+0x4e sys/kern/vfs_vops.c:640 ufs_mkdir(ffff800027b49a20) at ufs_mkdir+0x6c4 sys/ufs/ufs/ufs_vnops.c:1235 VOP_MKDIR(fffffd807089ee60,ffff800027b49b80,ffff800027b49bb0,ffff800027b49ab0) at VOP_MKDIR+0xc3 sys/kern/vfs_vops.c:388 domkdirat(ffff80002125e2c8,ffffff9c,7c1ff979c820,1ff) at domkdirat+0x125 sys/kern/vfs_syscalls.c:3073 syscall(ffff800027b49d30) at syscall+0x5e2 mi_syscall sys/sys/syscall_mi.h:110 [inline] syscall(ffff800027b49d30) at syscall+0x5e2 sys/arch/amd64/amd64/trap.c:623 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c1ff979c890, count: -22 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x1c: addq $0x8,%rsp db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827aa57e) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff828281fe,ffffffff827ecd25,2ad,ffffffff827df7a8) at __assert+0x29 sys/kern/subr_prf.c:157 proc_trampoline_mi() at proc_trampoline_mi+0x221 end trace frame: 0x0, count: 11 ddb{1}> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827aa57e) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff828281fe,ffffffff827ecd25,2ad,ffffffff827df7a8) at __assert+0x29 sys/kern/subr_prf.c:157 proc_trampoline_mi() at proc_trampoline_mi+0x221 end trace frame: 0x0, count: -4