panic: Caught invalid memory access at ffff8000018cabf0 size 36 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *215788 11982 0 0 0x4000000 1 syz-executor 245762 24114 73 0x1100010 0 0K syslogd db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713 sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d242c6bc20, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: Caught invalid memory access at ffff8000018cabf0 size 36 op 1 ddb{1}> show kasan KASAN: invalid write of 36 bytes at 0xffff8000018cabf0 from pc 0xffffffff83484679 KASAN: first bad byte at 0xffff8000018cabf3 (+3); shadow 0x03: partial granule (out-of-bounds) KASAN: 0xffff8000018cabf3 is 3 bytes inside the 16-byte malloc slot [0xffff8000018cabf0..0xffff8000018cac00) KASAN: allocated at: #0 malloc+0xda0 sys/kern/kern_malloc.c:446 #1 sysvipc_infoout+0x18e sys/kern/kern_sysctl.c:2711 #2 sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 #3 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 #4 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 #5 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 #6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #7 Xsyscall+0x128 KASAN: pc: sysvipc_infoout+0x1a9 KASAN: call trace: #0 kasan_memcpy+0x1ca kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline] #0 kasan_memcpy+0x1ca sys/kern/subr_kasan.c:1025 #1 sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713 #2 sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 #3 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 #4 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 #5 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 #6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #7 Xsyscall+0x128 KASAN: shadow of 0xffff8000018caa80..0xffff8000018cad00 (1 cell = 8 bytes): 0xffff8000018caa80: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018cab00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 >0xffff8000018cab80: fc 08 08 fb fc 08 fc 08 fc 08 fc 08 fc 08[03]fb 0xffff8000018cac00: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0xffff8000018cac80: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{1}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713 sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d242c6bc20, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800029a575b0 rbx 0xffff800029a57620 rdx 0 rcx 0xffff800028fe3ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff800029a57398 r11 0xffffffff8263c7e0 x86_bus_space_io_read_1 r12 0xffffffff84634053 .str.5+0x9c553 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff81fd2ec7 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff800029a575b0 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=215788 pid=11982 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=71, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000299e2d18,0xffff8000299e34f0 process=0xffff8000298a4008 user=0xffff800029a4d000, vmspace=0xffff800000d8a000 estcpu=21, cpticks=18, pctcpu=0.11, user=0, sys=18, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 11982 312594 22176 0 3 0 0x80 nanoslp syz-executor *11982 215788 22176 0 7 0 0x4000000 syz-executor 11982 27590 22176 0 3 0 0x4000080 fsleep syz-executor 22176 495284 79898 0 3 0x2 0x80 nanoslp syz-executor 79898 80864 75763 0 3 0x2 0x80 kqread syz-executor 75763 291731 74309 0 3 0x2 0x80 thrsleep syz-execprog 75763 37308 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 38970 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 439110 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 49773 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 521803 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 482010 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 294211 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 183332 74309 0 3 0x2 0x4000080 kqread syz-execprog 75763 259081 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 200416 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 75763 35790 74309 0 3 0x2 0x4000080 thrsleep syz-execprog 74309 293074 50089 0 3 0x100002 0x88 sigsusp ksh 50089 241415 84713 0 3 0x10 0x88 kqread sshd-session 84713 181269 52666 0 3 0x12 0x80 kqread sshd-session 90724 266036 1 0 3 0x100003 0x80 ttyin getty 52666 115549 1 0 3 0 0x88 kqread sshd 43510 255344 50195 74 3 0x1100012 0x80 bpf pflogd 50195 266469 1 0 3 0 0x80 sbwait pflogd 24114 245762 17450 73 7 0x1100010 0 syslogd 17450 49993 1 0 3 0x100002 0x80 sbwait syslogd 28571 234852 1 0 3 0x100000 0x80 kqread resolvd 82809 246450 39805 77 3 0x100012 0x80 kqread dhcpleased 24223 131363 39805 77 3 0x100012 0x80 kqread dhcpleased 39805 211543 1 0 3 0 0x80 kqread dhcpleased 19243 5163 0 0 2 0x14000 0x40000200 smr 75974 174292 0 0 3 0x14000 0x200 pgzero zerothread 93057 50408 0 0 3 0x14000 0x200 aiodoned aiodoned 5120 128653 0 0 3 0x14000 0x200 syncer update 25073 289280 0 0 3 0x14000 0x200 cleaner cleaner 57420 263917 0 0 3 0x14000 0x200 reaper reaper 21606 480813 0 0 3 0x14000 0x200 pgdaemon pagedaemon 11150 349048 0 0 3 0x14000 0x200 bored viomb 23036 337904 0 0 3 0x14000 0x40000200 acpi0 acpi0 49123 424022 0 0 3 0x14000 0x40000200 idle1 62161 156795 0 0 3 0x14000 0x200 bored softnet1 45135 224385 0 0 3 0x14000 0x200 bored softnet0 46643 236931 0 0 3 0x14000 0x200 smrbar systqmp 69484 246128 0 0 3 0x14000 0x200 bored systq 35040 164881 0 0 3 0x14000 0x200 tmoslp softclockmp 9910 9901 0 0 3 0x14000 0x40000200 tmoslp softclock 94221 235980 0 0 3 0x14000 0x40000200 idle0 1 229475 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 24114 (syslogd) thread 0xffff800029913a00 (245762) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff85df2400) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 syscall+0x1048 mi_syscall sys/sys/syscall_mi.h:175 [inline] #1 syscall+0x1048 sys/arch/amd64/amd64/trap.c:783 #2 Xsyscall+0x128 Process 46643 (systqmp) thread 0xffff800045ffe298 (236931) shared rwlock systqmp r = 0 (0xffffffff85368d18) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x1ba sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11029 12226K 12226K 166960K 12123 0 pcb 17 24K 24K 166960K 17 0 rtable 83 4K 4K 166960K 171 0 pf 20 18K 20K 166960K 34 0 ifaddr 15 3K 3K 166960K 19 0 ifgroup 27 1K 1K 166960K 32 0 sysctl 1 1K 13K 166960K 5 0 counters 56 39K 39K 166960K 58 0 ioctlops 0 0K 4K 166960K 1477 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1226 79K 79K 166960K 1315 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 4 9K 13K 166960K 108 0 proc 70 128K 144K 166960K 384 0 subproc 0 0K 1K 166960K 30 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 22 1K 1K 166960K 33 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 25 182K 182K 166960K 25 0 exec 0 0K 2K 166960K 352 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 208 150K 307K 166960K 3584 0 UVM aobj 3 4K 4K 166960K 3 0 pinsyscall 1055 1722K 1727K 166960K 1263 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 7 0K 0K 166960K 10 0 temp 2 9160K 9172K 166960K 4927 0 kqueue 14 44K 44K 166960K 40 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 21 0 18 1 0 1 1 0 8 0 rtentry 176 45 0 12 2 0 2 2 0 8 0 unpcb 144 65 0 46 1 0 1 1 0 8 0 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpqe 32 31 0 31 1 1 0 1 0 8 0 tcpcb 736 16 0 10 1 0 1 1 0 8 0 arp 136 6 0 2 1 0 1 1 0 8 0 inpcb 328 49 0 40 1 0 1 1 0 8 0 nd6 152 6 0 3 1 0 1 1 0 8 0 kcovpl 48 4 0 4 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 14 0 0 1 0 1 1 0 8 0 pfstkey 128 14 0 0 1 0 1 1 0 8 0 pfstate 448 14 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 193 0 48 10 0 10 10 0 8 0 art_table 40 194 0 48 2 0 2 2 0 8 0 art_node 32 45 0 14 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1590 0 113 93 0 93 93 0 8 0 ffsino 296 1590 0 113 114 0 114 114 0 8 0 nchpl 144 1840 0 84 66 0 66 66 0 8 0 vnodes 216 1634 0 0 91 0 91 91 0 8 0 namei 1024 5889 0 5889 2 0 2 2 0 8 2 percpumem 16 45 0 1 1 0 1 1 0 8 0 kstatmem 264 15 0 2 1 0 1 1 0 8 0 scxspl 216 11700 0 11700 5 3 2 3 1 8 2 plimitpl 152 55 0 44 1 0 1 1 0 8 0 sigapl 424 436 0 401 6 0 6 6 0 8 2 knotepl 120 65 0 0 2 0 2 2 0 8 0 kqueuepl 224 36 0 26 1 0 1 1 0 8 0 pipepl 344 185 0 178 2 0 2 2 0 8 1 fdescpl 528 420 0 401 3 0 3 3 0 8 1 filepl 160 1870 0 1790 4 0 4 4 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 38 0 29 1 0 1 1 0 8 0 pgrppl 48 54 0 44 1 0 1 1 0 8 0 ucredpl 104 141 0 128 1 0 1 1 0 8 0 zombiepl 144 401 0 401 1 0 1 1 0 8 1 processpl 1232 436 0 401 4 0 4 4 0 8 1 procpl 664 462 0 414 5 0 5 5 0 8 0 sockpl 752 135 0 104 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 170 0 0 22 0 22 22 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 11 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 170 0 0 11 0 11 11 0 8 0 bufpl 272 7266 0 225 470 0 470 470 0 8 0 anonpl 32 11160 0 0 91 1 90 90 0 222 0 amapchunkpl 152 11270 0 10793 34 1 33 33 0 158 12 amappl16 200 3925 0 3790 9 0 9 9 0 8 1 amappl15 192 13 0 13 2 2 0 1 0 8 0 amappl14 184 374 0 372 1 0 1 1 0 8 0 amappl13 176 183 0 170 3 1 2 3 0 8 1 amappl12 168 687 0 667 2 0 2 2 0 8 0 amappl11 160 14 0 14 1 1 0 1 0 8 0 amappl10 152 96 0 81 2 0 2 2 0 8 1 amappl9 144 1792 0 1792 2 1 1 1 0 8 1 amappl8 136 147 0 117 2 0 2 2 0 8 0 amappl7 128 202 0 183 2 0 2 2 0 8 0 amappl6 120 132 0 129 1 0 1 1 0 8 0 amappl5 112 274 0 263 1 0 1 1 0 8 0 amappl4 104 384 0 362 2 0 2 2 0 8 1 amappl3 96 1459 0 1403 3 0 3 3 0 8 1 amappl2 88 804 0 739 5 0 5 5 0 8 3 amappl1 80 15493 0 14923 25 4 21 24 0 8 8 amappl 88 2704 0 2581 5 0 5 5 0 92 1 uvmvnodes 80 88 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 420 0 401 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 420 0 401 1 0 1 1 0 8 0 vmmpekpl 168 9328 0 9301 2 0 2 2 0 8 0 vmmpepl 168 54103 0 52502 131 1 130 130 0 357 59 vmsppl 488 419 0 401 4 0 4 4 0 8 1 rwobjpl 80 23065 0 22008 41 7 34 41 0 8 8 pdppl 4096 849 0 802 77 26 51 69 0 8 4 pvpl 32 58552 0 0 475 2 473 473 0 265 0 pmappl 256 419 0 401 2 0 2 2 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 706 0 29 21 0 21 21 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff850aeff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 check_copyin sys/kern/kern_subr.c:-1 [inline] uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 copyin sys/kern/kern_subr.c:101 [inline] uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 sys/kern/kern_subr.c:143 ffs_write(ffff800029997b80) at ffs_write+0xcb4 sys/ufs/ffs/ffs_vnops.c:359 VOP_WRITE(ffff8000018a23b0,ffff800029997e40,3,ffff800000119a28) at VOP_WRITE+0x1a8 sys/kern/vfs_vops.c:245 vn_write(ffff8000016a8c80,ffff800029997e40,0) at vn_write+0x295 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800029913a00,e,ffff800029997e40,0,ffff800029998000) at dofilewritev+0x3ef sys/kern/sys_generic.c:384 sys_writev(ffff800029913a00,ffff800029998090,ffff800029998000) at sys_writev+0x168 sys/kern/sys_generic.c:327 syscall(ffff800029998090) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029998090) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70abb72ce260, count: 4 ddb{0}> trace x86_ipi_db(ffffffff850aeff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 check_copyin sys/kern/kern_subr.c:-1 [inline] uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 copyin sys/kern/kern_subr.c:101 [inline] uiomove(ffff800014642f10,24,ffff800029997e40) at uiomove+0x5f5 sys/kern/kern_subr.c:143 ffs_write(ffff800029997b80) at ffs_write+0xcb4 sys/ufs/ffs/ffs_vnops.c:359 VOP_WRITE(ffff8000018a23b0,ffff800029997e40,3,ffff800000119a28) at VOP_WRITE+0x1a8 sys/kern/vfs_vops.c:245 vn_write(ffff8000016a8c80,ffff800029997e40,0) at vn_write+0x295 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800029913a00,e,ffff800029997e40,0,ffff800029998000) at dofilewritev+0x3ef sys/kern/sys_generic.c:384 sys_writev(ffff800029913a00,ffff800029998090,ffff800029998000) at sys_writev+0x168 sys/kern/sys_generic.c:327 syscall(ffff800029998090) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029998090) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70abb72ce260, count: -11 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x17: popq %rbp db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713 sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d242c6bc20, count: 5 ddb{1}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84634053) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cabf0,ffff800029a57820,24) at kasan_memcpy+0x1ec sysvipc_infoout(200000000180,ffff800029a57ec0,ffff800029a57820,24,28,70,1ffff0000534af00,dfff908000000000) at sysvipc_infoout+0x1a9 sys/kern/kern_sysctl.c:2713 sysctl_sysvipc(ffff800029a57ee8,1,200000000180,ffff800029a57ec0) at sysctl_sysvipc+0x224 sys/kern/kern_sysctl.c:-1 kern_sysctl_dirs(33,ffff800029a57ee8,1,200000000180,ffff800029a57ec0,0,1,1ffff0000534af54) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff800029a57ee4,2,200000000180,ffff800029a57ec0,0,fffa,ffff800029a58140) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff8000299e2a80,ffff800029a58140,ffff800029a580a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff800029a58140) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029a58140) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3d242c6bc20, count: -10