panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 371197 59427 0 0 0x4000000 0 syz-executor *246494 93615 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834d2f2d) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8350dd6d,ffffffff835097e4,84,ffffffff835634a6) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(cf,21) at rtmap_grow+0x24f rtable_add(ce) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(ce) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(ce,ffff800000c63800) at if_createrdomain+0x40 sys/net/if.c:2046 ifioctl(ffff800001630018,8020699f,ffff80003c422680,ffff80003c3de028) at ifioctl+0x1c52 sys/net/if.c:2395 sys_ioctl(ffff80003c3de028,ffff80003c422860,ffff80003c4227b0) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c422860) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c422860) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf413d855430, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834d2f2d) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8350dd6d,ffffffff835097e4,84,ffffffff835634a6) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(cf,21) at rtmap_grow+0x24f rtable_add(ce) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(ce) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(ce,ffff800000c63800) at if_createrdomain+0x40 sys/net/if.c:2046 ifioctl(ffff800001630018,8020699f,ffff80003c422680,ffff80003c3de028) at ifioctl+0x1c52 sys/net/if.c:2395 sys_ioctl(ffff80003c3de028,ffff80003c422860,ffff80003c4227b0) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c422860) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c422860) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf413d855430, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c422390 rbx 0xffff80002999ee0f rdx 0xffff8000015fd240 rcx 0xffff80003c3de028 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x18de7811551f3c67 r11 0xd83139bea83706d3 r12 0xffff80002999ec10 r13 0 r14 0 r15 0x1 rip 0xffffffff82bd27e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c422380 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=246494 pid=93615 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=62, usrpri=62, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3dfa18,0xffff80003c3de568 process=0xffff80003bbb26e0 user=0xffff80003c41d000, vmspace=0xfffff5006ca455d0 estcpu=12, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 19088 374323 22773 0 2 0x1044 0 syz-executor 59427 320830 8293 0 2 0 0 syz-executor 59427 371197 8293 0 7 0 0x4000000 syz-executor 59427 88549 8293 0 3 0 0x4000080 fsleep syz-executor 59427 462573 8293 0 3 0 0x4000080 fsleep syz-executor 59427 518702 8293 0 2 0 0x4000000 syz-executor 93615 265930 48056 0 2 0 0 syz-executor *93615 246494 48056 0 7 0 0x4000000 syz-executor 93615 44781 48056 0 3 0 0x4000080 fsleep syz-executor 18860 42415 30009 0 2 0x2 0 ifconfig 33101 216052 93347 0 2 0 0 syz-executor 33101 426161 93347 0 3 0 0x4000000 smrbar syz-executor 33101 433527 93347 0 3 0 0x4000080 fsleep syz-executor 33101 412492 93347 0 3 0 0x4000080 fsleep syz-executor 36052 361430 53428 0 2 0 0 syz-executor 36052 451795 53428 0 2 0 0x4000000 syz-executor 36052 133596 53428 0 3 0 0x4000080 fsleep syz-executor 30009 179005 83117 0 3 0x100002 0x88 sigsusp sh 22773 93561 87652 0 3 0x82 0 ppwait syz-executor 53428 61540 87652 0 3 0x2 0x80 nanoslp syz-executor 83117 369773 87652 0 3 0x2 0x80 wait syz-executor 48056 426979 87652 0 3 0x2 0x80 nanoslp syz-executor 8293 33886 87652 0 3 0x2 0x80 nanoslp syz-executor 93347 293172 87652 0 3 0x2 0x80 nanoslp syz-executor 99024 299499 87652 0 2 0x2 0 syz-executor 87652 13074 67363 0 3 0x2 0x80 wait syz-executor 67363 181861 10224 0 3 0x100002 0x88 sigsusp ksh 10224 390809 81793 0 3 0x10 0x88 kqread sshd-session 81793 120244 53595 0 3 0x12 0x80 kqread sshd-session 960 511725 1 0 3 0x100003 0x80 ttyin getty 53595 28778 1 0 3 0 0x88 kqread sshd 57119 347520 17748 74 3 0x1100012 0x80 bpf pflogd 17748 194928 1 0 3 0 0x80 sbwait pflogd 62244 520583 74881 73 3 0x1100010 0x80 kqread syslogd 74881 329735 1 0 3 0x100002 0x80 sbwait syslogd 43810 23089 1 0 3 0x100000 0x80 kqread resolvd 1857 206507 38860 77 3 0x100012 0x80 kqread dhcpleased 66830 235789 38860 77 3 0x100012 0x80 kqread dhcpleased 38860 227569 1 0 3 0 0x80 kqread dhcpleased 57028 285474 0 0 3 0x14000 0x200 bored smr 95938 322100 0 0 2 0x14000 0x200 zerothread 63969 98152 0 0 3 0x14000 0x200 aiodoned aiodoned 76947 390111 0 0 3 0x14000 0x200 syncer update 92490 389682 0 0 3 0x14000 0x200 cleaner cleaner 16139 455419 0 0 3 0x14000 0x200 reaper reaper 98907 309233 0 0 3 0x14000 0x200 pgdaemon pagedaemon 2864 319467 0 0 3 0x14000 0x200 bored viomb 49161 367505 0 0 3 0x14000 0x40000200 acpi0 acpi0 43276 292684 0 0 3 0x14000 0x40000200 idle1 53180 433652 0 0 3 0x14000 0x200 bored softnet1 41362 331497 0 0 3 0x14000 0x200 bored softnet0 56179 164303 0 0 3 0x14000 0x200 bored systqmp 76332 116631 0 0 3 0x14000 0x200 bored systq 60157 363129 0 0 3 0x14000 0x200 tmoslp softclockmp 28657 434727 0 0 3 0x14000 0x40000200 tmoslp softclock 70061 245310 0 0 3 0x14000 0x40000200 idle0 1 267946 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 19088 (syz-executor) thread 0xffff800045fe9ca8 (374323) exclusive rwlock vmmaplk r = 0 (0xfffff5006c855e78) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880 #3 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693 #4 uvm_fault+0x106 sys/uvm/uvm_fault.c:627 #5 kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285 #6 kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532 #7 alltraps_kern_meltdown+0x7b #8 copyout+0x64 #9 exec_process_vmcmds+0xef sys/kern/exec_subr.c:139 #10 sys_execve+0xeac sys/kern/kern_exec.c:535 #11 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xb17 sys/arch/amd64/amd64/trap.c:791 #12 Xsyscall+0x128 Process 59427 (syz-executor) thread 0xffff80003c3dea88 (371197) exclusive rwlock sbufsnd r = 0 (0xffff800001631980) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 sblock+0xb6 sys/kern/uipc_socket2.c:536 #3 sosend+0x2e9 sys/kern/uipc_socket.c:639 #4 sendit+0x5a5 sys/kern/uipc_syscalls.c:785 #5 sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 #6 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #7 Xsyscall+0x128 Process 93615 (syz-executor) thread 0xffff80003c3de028 (246494) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff83ac6800) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 #2 malloc+0xe3 sys/kern/kern_malloc.c:175 #3 rtmap_grow+0xb2 sys/net/rtable.c:127 #4 rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] #4 rtable_add+0x2d9 sys/net/rtable.c:223 #5 if_createrdomain+0x40 sys/net/if.c:2046 #6 ifioctl+0x1c52 sys/net/if.c:2395 #7 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 Process 18860 (ifconfig) thread 0xffff80002a24a548 (42415) exclusive rwlock vmmaplk r = 0 (0xfffff5006ca458b8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880 #3 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693 #4 uvm_fault+0x106 sys/uvm/uvm_fault.c:627 #5 kpageflttrap+0x2f4 sys/arch/amd64/amd64/trap.c:285 #6 kerntrap+0x19d sys/arch/amd64/amd64/trap.c:532 #7 alltraps_kern_meltdown+0x7b #8 copyout+0x64 #9 ffs_read+0x3f2 sys/ufs/ffs/ffs_vnops.c:254 #10 VOP_READ+0x101 sys/kern/vfs_vops.c:227 #11 vn_read+0x17b sys/kern/vfs_vnops.c:375 #12 dofilereadv+0x25a sys/kern/sys_generic.c:252 #13 sys_read+0xa2 sys/kern/sys_generic.c:172 #14 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #14 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #15 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffff5007f005c80) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xbd sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:576 #5 vn_read+0x6c sys/kern/vfs_vnops.c:359 #6 dofilereadv+0x25a sys/kern/sys_generic.c:252 #7 sys_read+0xa2 sys/kern/sys_generic.c:172 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11061 12160K 12160K 166960K 12167 0 pcb 19 12K 12K 166960K 21 0 rtable 209 8K 8K 166960K 317 0 pf 36 17K 18K 166960K 51 0 ifaddr 39 6K 6K 166960K 43 0 ifgroup 57 2K 2K 166960K 61 0 sysctl 1 1K 9K 166960K 5 0 counters 72 37K 37K 166960K 76 0 ioctlops 0 0K 4K 166960K 1481 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1295 81K 81K 166960K 1367 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 93K 166960K 125 0 proc 76 131K 147K 166960K 537 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 75 5K 5K 166960K 75 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 1 0K 1K 166960K 380 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 225 169K 175K 166960K 3082 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 43 86K 104K 166960K 1285 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 4 0 NDP 24 1K 1K 166960K 26 0 temp 36 9124K 9126K 166960K 3501 0 kqueue 16 22K 22K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 31 1 0 1 1 0 8 0 rtentry 176 93 0 1 5 0 5 5 0 8 0 unpcb 144 39 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 9 0 4 1 0 1 1 0 8 0 arp 136 17 0 0 1 0 1 1 0 8 0 inpcb 328 69 0 58 1 0 1 1 0 8 0 nd6 152 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 3 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 128 20 0 0 1 0 1 1 0 8 0 pfstate 448 20 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 355 0 0 23 0 23 23 0 8 0 art_table 40 356 0 0 4 0 4 4 0 8 0 art_node 32 93 0 8 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 120 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1568 0 99 92 0 92 92 0 8 0 ffsino 296 1568 0 99 114 0 114 114 0 8 0 nchpl 144 1759 0 55 64 0 64 64 0 8 0 vnodes 216 1660 0 0 93 0 93 93 0 8 0 namei 1024 6119 0 6116 4 3 1 3 0 8 0 percpumem 16 54 0 2 1 0 1 1 0 8 0 kstatmem 264 33 0 4 3 0 3 3 0 8 0 scxspl 216 6093 0 6093 4 3 1 3 1 8 1 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 451 0 404 7 1 6 7 0 8 0 knotepl 120 58 0 0 2 0 2 2 0 8 0 kqueuepl 224 23 0 12 1 0 1 1 0 8 0 pipepl 344 129 0 102 3 0 3 3 0 8 0 fdescpl 528 435 0 404 3 0 3 3 0 8 0 filepl 160 1588 0 1368 10 0 10 10 0 8 0 lockfpl 104 7 0 4 1 0 1 1 0 8 0 lockfspl 48 5 0 2 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 94 0 81 1 0 1 1 0 8 0 zombiepl 144 413 0 412 2 1 1 1 0 8 0 processpl 1240 451 0 404 5 0 5 5 0 8 0 procpl 664 473 0 415 6 0 6 6 0 8 0 sockpl 752 143 0 111 4 0 4 4 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 13 0 0 2 0 2 2 0 8 0 mextrefs 64 13 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 167 0 0 11 0 11 11 0 8 0 bufpl 272 2271 0 105 145 0 145 145 0 8 0 anonpl 32 3677 0 0 30 0 30 30 0 247 0 amapchunkpl 152 8107 0 7661 20 0 20 20 0 158 1 amappl16 200 1441 0 1430 5 4 1 5 0 8 0 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 430 0 428 1 0 1 1 0 8 0 amappl13 176 161 0 149 1 0 1 1 0 8 0 amappl12 168 715 0 686 2 0 2 2 0 8 0 amappl11 160 8 0 7 1 0 1 1 0 8 0 amappl10 152 62 0 48 1 0 1 1 0 8 0 amappl9 144 277 0 277 1 1 0 1 0 8 0 amappl8 136 120 0 118 1 0 1 1 0 8 0 amappl7 128 150 0 137 1 0 1 1 0 8 0 amappl6 120 152 0 147 1 0 1 1 0 8 0 amappl5 112 99 0 89 1 0 1 1 0 8 0 amappl4 104 295 0 274 1 0 1 1 0 8 0 amappl3 96 1475 0 1387 3 0 3 3 0 8 0 amappl2 88 564 0 491 2 0 2 2 0 8 0 amappl1 80 10360 0 9756 14 0 14 14 0 8 0 amappl 88 2359 0 2209 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 435 0 404 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 435 0 404 1 0 1 1 0 8 0 vmmpekpl 168 5704 0 5664 2 0 2 2 0 8 0 vmmpepl 168 37401 0 35596 86 2 84 85 0 357 1 vmsppl 488 434 0 404 5 0 5 5 0 8 0 rwobjpl 80 14110 0 13090 23 0 23 23 0 8 0 pdppl 4096 877 0 808 103 28 75 85 0 8 6 pvpl 32 9052 0 0 74 1 73 73 0 265 0 pmappl 256 434 0 404 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 413 0 35 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8396eff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 sys/kern/kern_lock.c:173 softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff83ac6000,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 malloc(30,5,9) at malloc+0xe3 sys/kern/kern_malloc.c:175 rtmap_grow(6,2) at rtmap_grow+0xb2 sys/net/rtable.c:127 rtable_add(5) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(5) at rtable_add+0x2d9 sys/net/rtable.c:223 route_output(fffff5006f4cb000,ffff800001631798) at route_output+0x532 sys/net/rtsock.c:767 route_send(ffff800001631798,fffff5006f4cb000,0,0) at route_send+0xd7 sys/net/rtsock.c:322 end trace frame: 0xffff80003a7a2bb0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff8396eff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 sys/kern/kern_lock.c:173 softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83ac6000) at __mp_lock+0x192 sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff83ac6000,1) at __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 malloc(30,5,9) at malloc+0xe3 sys/kern/kern_malloc.c:175 rtmap_grow(6,2) at rtmap_grow+0xb2 sys/net/rtable.c:127 rtable_add(5) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(5) at rtable_add+0x2d9 sys/net/rtable.c:223 route_output(fffff5006f4cb000,ffff800001631798) at route_output+0x532 sys/net/rtsock.c:767 route_send(ffff800001631798,fffff5006f4cb000,0,0) at route_send+0xd7 sys/net/rtsock.c:322 sosend(ffff800001631798,0,ffff80003a7a2bc8,0,0,0) at sosend+0x804 sys/kern/uipc_socket.c:-1 sendit(ffff80003c3dea88,5,ffff80003a7a2cc0,0,ffff80003a7a2d70) at sendit+0x5a5 sys/kern/uipc_syscalls.c:785 sys_sendto(ffff80003c3dea88,ffff80003a7a2e20,ffff80003a7a2d70) at sys_sendto+0x8d sys/kern/uipc_syscalls.c:563 syscall(ffff80003a7a2e20) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003a7a2e20) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbff07b94e70, count: -19 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834d2f2d) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8350dd6d,ffffffff835097e4,84,ffffffff835634a6) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(cf,21) at rtmap_grow+0x24f rtable_add(ce) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(ce) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(ce,ffff800000c63800) at if_createrdomain+0x40 sys/net/if.c:2046 ifioctl(ffff800001630018,8020699f,ffff80003c422680,ffff80003c3de028) at ifioctl+0x1c52 sys/net/if.c:2395 sys_ioctl(ffff80003c3de028,ffff80003c422860,ffff80003c4227b0) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c422860) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c422860) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf413d855430, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834d2f2d) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff8350dd6d,ffffffff835097e4,84,ffffffff835634a6) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(cf,21) at rtmap_grow+0x24f rtable_add(ce) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(ce) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(ce,ffff800000c63800) at if_createrdomain+0x40 sys/net/if.c:2046 ifioctl(ffff800001630018,8020699f,ffff80003c422680,ffff80003c3de028) at ifioctl+0x1c52 sys/net/if.c:2395 sys_ioctl(ffff80003c3de028,ffff80003c422860,ffff80003c4227b0) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c422860) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c422860) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf413d855430, count: -10