panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *123877 48820 0 0 0x4000000 1 syz-executor 162847 48820 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834487e9) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83488965,ffffffff8349a864,3bb,ffffffff834c36e7) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c4e2f10,ffffffff834444ec) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(205b9a,ffff80003c4e2f08) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(205b9a,2,2000,ffff80002a2422a8) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80003c4deee0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80763d0ea0,2,fffffd80097fd478,ffff80002a2422a8) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805f5c5da0,ffff80002a2422a8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd805f5c5da0,ffff80002a2422a8) at closef+0x192 sys/kern/kern_descrip.c:1265 syscall(ffff80003c4df140) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4df140) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf980b5ddeb0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834487e9) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83488965,ffffffff8349a864,3bb,ffffffff834c36e7) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c4e2f10,ffffffff834444ec) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(205b9a,ffff80003c4e2f08) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(205b9a,2,2000,ffff80002a2422a8) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80003c4deee0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80763d0ea0,2,fffffd80097fd478,ffff80002a2422a8) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805f5c5da0,ffff80002a2422a8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd805f5c5da0,ffff80002a2422a8) at closef+0x192 sys/kern/kern_descrip.c:1265 syscall(ffff80003c4df140) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4df140) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf980b5ddeb0, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4decb0 rbx 0xffff8000299bee07 rdx 0 rcx 0xffff80002a2422a8 rax 0xffff8000299bdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd953c19d71e43f28 r11 0xa5680311d25d77a1 r12 0xffff8000299bec08 r13 0 r14 0 r15 0x1 rip 0xffffffff8282b645 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4deca0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=123877 pid=48820 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000347be800,0xffff80002a242d18 process=0xffff80003c48c028 user=0xffff80003c4da000, vmspace=0xfffffd80713319a0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 48820 406578 7588 0 3 0 vmmaplk syz-executor 48820 343973 7588 0 3 0x4000000 smrbar syz-executor *48820 123877 7588 0 7 0x4000000 syz-executor 48820 162847 7588 0 7 0x4000000 syz-executor 67464 210685 94096 0 2 0 syz-executor 67464 63425 94096 0 3 0x4000080 sbwait syz-executor 74861 28027 30976 0 2 0 syz-executor 74861 91377 30976 0 3 0x4000080 fsleep syz-executor 74861 127608 30976 0 3 0x4000080 fsleep syz-executor 25935 268638 91762 0 2 0 syz-executor 25935 381038 91762 0 3 0x4000080 piperd syz-executor 25935 505407 91762 0 3 0x4000080 fsleep syz-executor 7898 78969 79044 60929 3 0x3010 suspend syz-executor 7898 89749 79044 60929 3 0x4081010 biowait syz-executor 30976 246304 84044 0 3 0x82 nanoslp syz-executor 91762 421497 84044 0 3 0x82 nanoslp syz-executor 99566 12715 56484 0 3 0x3000 suspend syz-executor 99566 362890 56484 0 3 0x4081000 biowait syz-executor 99566 105808 56484 0 3 0x4081000 inode syz-executor 99566 438360 56484 0 3 0x4081000 inode syz-executor 56484 36908 84044 0 3 0x82 wait syz-executor 96998 333488 9154 27 3 0x1100092 kqread sshd-auth 9154 386554 43316 0 3 0x82 kqread sshd-session 3123 278169 0 0 3 0x14280 nfsidl nfsio 4689 23727 0 0 3 0x14280 nfsidl nfsio 54287 177322 0 0 3 0x14280 nfsidl nfsio 35627 7514 0 0 3 0x14280 nfsidl nfsio 35499 137468 0 0 3 0x14280 nfsidl nfsio 97027 473806 0 0 3 0x14280 nfsidl nfsio 83541 229426 0 0 3 0x14280 nfsidl nfsio 71898 240162 0 0 3 0x14280 nfsidl nfsio 53165 343805 0 0 3 0x14280 nfsidl nfsio 24565 298786 0 0 3 0x14280 nfsidl nfsio 24216 407659 0 0 3 0x14280 nfsidl nfsio 86165 471589 0 0 3 0x14280 nfsidl nfsio 79123 145957 0 0 3 0x14280 nfsidl nfsio 23242 55620 0 0 3 0x14280 nfsidl nfsio 66237 472976 0 0 3 0x14280 nfsidl nfsio 97699 219939 0 0 3 0x14280 nfsidl nfsio 72965 246126 0 0 3 0x14280 nfsidl nfsio 70488 522441 0 0 3 0x14280 nfsidl nfsio 38509 175507 0 0 3 0x14280 nfsidl nfsio 52504 150561 0 0 3 0x14280 nfsidl nfsio 33942 145727 84044 0 3 0x82 wait syz-executor 79044 139918 84044 0 3 0x82 nanoslp syz-executor 94096 156322 84044 0 3 0x82 nanoslp syz-executor 35442 84172 84044 0 3 0x2 biowait syz-executor 7588 328964 84044 0 3 0x82 nanoslp syz-executor 84044 362235 25929 0 3 0x82 kqread syz-executor 25929 272295 51711 0 3 0x10008a sigsusp ksh 51711 16439 46797 0 3 0x98 kqread sshd-session 46797 291892 43316 0 3 0x92 kqread sshd-session 58599 170479 1 0 3 0x100083 ttyopn getty 43316 390148 1 0 3 0x88 kqread sshd 28756 212599 66755 74 3 0x1100092 bpf pflogd 66755 489591 1 0 3 0x80 sbwait pflogd 66878 132122 56955 73 3 0x1100090 kqread syslogd 56955 286486 1 0 3 0x100082 sbwait syslogd 19206 444341 1 0 3 0x100080 kqread resolvd 80344 10372 69493 77 3 0x100092 kqread dhcpleased 30324 397379 69493 77 3 0x100092 kqread dhcpleased 69493 44574 1 0 3 0x80 kqread dhcpleased 69696 372273 0 0 3 0x14200 bored smr 36570 265268 0 0 3 0x14200 pgzero zerothread 31897 312478 0 0 3 0x14200 aiodoned aiodoned 84368 294712 0 0 3 0x14200 syncer update 99417 279635 0 0 3 0x14200 cleaner cleaner 73492 230246 0 0 3 0x14200 reaper reaper 96503 395417 0 0 3 0x14200 pgdaemon pagedaemon 16030 178730 0 0 3 0x14200 bored viomb 67251 238666 0 0 3 0x40014200 acpi0 acpi0 71980 396192 0 0 3 0x40014200 idle1 75114 416770 0 0 3 0x14200 bored softnet1 24444 147130 0 0 3 0x14200 bored softnet0 51255 393793 0 0 3 0x14200 bored systqmp 84812 29627 0 0 3 0x14200 bored systq 27839 38622 0 0 3 0x14200 tmoslp softclockmp 92578 415858 0 0 3 0x40014200 tmoslp softclock 58957 163871 0 0 3 0x40014200 idle0 1 12626 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 48820 (syz-executor) thread 0xffff8000347bfcc0 (406578) Process 48820 (syz-executor) thread 0xffff80002a2422a8 (123877) Process 7898 (syz-executor) thread 0xffff8000347bf790 (89749) Process 99566 (syz-executor) thread 0xffff8000333b6fb8 (362890) Process 99566 (syz-executor) thread 0xffff8000333b7cb0 (105808) Process 35442 (syz-executor) thread 0xffff80002a243c98 (84172) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11080 12087K 12359K 166960K 13670 0 pcb 17 15K 16K 166960K 197 0 rtable 162 7K 9K 166960K 567 0 pf 36 18K 81K 166960K 116 0 ifaddr 33 5K 7K 166960K 93 0 ifgroup 59 2K 2K 166960K 145 0 sysctl 3 1K 9K 166960K 21 0 counters 72 37K 38K 166960K 160 0 ioctlops 0 0K 4K 166960K 1685 0 iov 1 8K 16K 166960K 51 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1351 85K 86K 166960K 2138 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 102 0 dirhash 12 2K 2K 166960K 30 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 960 0 sigio 0 0K 0K 166960K 21 0 proc 72 115K 164K 166960K 711 0 subproc 72 4K 4K 166960K 101 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 113 0 in_multi 48 3K 7K 166960K 155 0 ether_multi 1 0K 0K 166960K 6 0 mrt 2 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 726 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 269 176K 205K 166960K 10674 0 UVM aobj 19 10K 10K 166960K 21 0 pinsyscall 46 92K 102K 166960K 2205 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 104 0 NDP 12 0K 2K 166960K 66 0 temp 64 9081K 9151K 166960K 34184 0 kqueue 16 26K 34K 166960K 216 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 99 0 96 1 0 1 1 0 8 0 rtentry 176 170 0 111 6 0 6 6 0 8 0 unpcb 144 573 0 545 6 2 4 6 0 8 2 syncache 336 6 0 6 2 2 0 1 0 8 0 tcpcb 736 271 0 263 8 6 2 7 0 8 1 arp 136 33 0 21 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 5 0 3 1 0 1 1 0 8 0 inpcb 328 1168 0 1123 12 8 4 7 0 8 0 ip6q 72 3 0 0 1 0 1 1 0 8 0 ip6af 40 3 0 0 1 0 1 1 0 8 0 nd6 152 37 0 24 1 0 1 1 0 8 0 pkpcb 40 5 0 5 2 2 0 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1192 35 0 34 2 1 1 1 0 8 0 pppxif 1504 3 0 2 2 1 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 28 0 15 1 0 1 1 0 8 0 pfstkey 128 28 0 15 1 0 1 1 0 8 0 pfstate 448 28 0 15 4 0 4 4 0 8 0 pfrule 1360 23 0 18 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 665 0 437 29 8 21 29 0 8 6 art_table 40 667 0 437 5 0 5 5 0 8 2 art_node 32 169 0 118 1 0 1 1 0 8 0 sysvmsgpl 40 10 0 6 2 1 1 1 0 8 0 semapl 112 98 0 88 1 0 1 1 0 8 0 shmpl 112 16 0 2 1 0 1 1 0 8 0 dirhash 1024 29 0 12 3 0 3 3 0 8 0 dino2pl 256 3150 0 1688 93 0 93 93 0 8 0 ffsino 296 3150 0 1688 114 0 114 114 0 8 0 nchpl 144 4482 0 2766 64 0 64 64 0 8 0 rtmask 32 5 0 5 1 1 0 1 0 8 0 vnodes 216 3693 0 0 206 0 206 206 0 8 0 namei 1024 15685 0 15681 7 3 4 4 0 8 3 percpumem 16 95 0 44 1 0 1 1 0 8 0 vcpupl 3968 2 0 0 1 0 1 1 0 8 0 vmpool 848 2 0 0 1 0 1 1 0 8 0 kstatmem 264 90 0 62 4 1 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 4 0 4 2 2 0 1 0 8 0 scxspl 216 34899 0 34896 8 7 1 8 1 8 0 plimitpl 152 287 0 267 1 0 1 1 0 8 0 sigapl 424 1294 0 1225 9 0 9 9 0 8 0 knotepl 120 361 0 0 11 0 11 11 0 8 0 kqueuepl 224 337 0 321 2 0 2 2 0 8 0 pipepl 344 254 0 224 6 3 3 6 0 8 0 fdescpl 528 1256 0 1223 3 0 3 3 0 8 0 filepl 160 7948 0 7639 20 6 14 16 0 8 1 lockfpl 104 287 0 285 1 0 1 1 0 8 0 lockfspl 48 134 0 132 1 0 1 1 0 8 0 sessionpl 144 28 0 18 1 0 1 1 0 8 0 pgrppl 48 53 0 35 1 0 1 1 0 8 0 ucredpl 104 1413 0 1398 1 0 1 1 0 8 0 zombiepl 144 1497 0 1494 1 0 1 1 0 8 0 processpl 1232 1294 0 1225 6 0 6 6 0 8 0 procpl 664 2671 0 2590 8 0 8 8 0 8 0 sosppl 176 11 0 11 2 1 1 1 0 8 1 sockpl 752 1861 0 1785 23 12 11 17 0 8 3 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 1180 0 0 74 0 74 74 0 8 0 bufpl 280 14562 0 8432 439 0 439 439 0 8 0 anonpl 32 11823 0 0 96 0 96 96 0 246 0 amapchunkpl 152 35593 0 35043 43 12 31 33 0 158 7 amappl16 200 5247 0 5063 45 30 15 27 0 8 5 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 496 0 495 1 0 1 1 0 8 0 amappl13 176 131 0 117 1 0 1 1 0 8 0 amappl12 168 1524 0 1492 2 0 2 2 0 8 0 amappl11 160 17 0 16 2 1 1 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 269 0 269 1 1 0 1 0 8 0 amappl8 136 116 0 114 1 0 1 1 0 8 0 amappl7 128 183 0 168 1 0 1 1 0 8 0 amappl6 120 196 0 194 1 0 1 1 0 8 0 amappl5 112 102 0 90 1 0 1 1 0 8 0 amappl4 104 332 0 313 1 0 1 1 0 8 0 amappl3 96 6167 0 6057 4 0 4 4 0 8 0 amappl2 88 1400 0 1312 3 0 3 3 0 8 0 amappl1 80 14174 0 13393 20 3 17 20 0 8 0 amappl 88 9726 0 9541 5 0 5 5 0 92 0 uvmvnodes 80 131 0 0 3 0 3 3 0 8 0 dma65536 65536 2 0 2 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 255 0 255 3 3 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 20 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1256 0 1223 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1256 0 1223 1 0 1 1 0 8 0 vmmpekpl 168 12518 0 12466 3 0 3 3 0 8 0 vmmpepl 168 89022 0 86649 126 12 114 116 0 357 8 vmsppl 488 1255 0 1223 5 0 5 5 0 8 0 rwobjpl 80 27366 0 25902 37 3 34 35 0 8 0 pdppl 4096 2523 0 2448 120 39 81 85 0 8 6 pvpl 32 22126 0 0 180 1 179 179 0 265 0 pmappl 256 1257 0 1223 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 374 0 64 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8393cff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa1380) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83aa1380) at __mp_lock+0x192 sys/kern/kern_lock.c:173 intr_handler(ffff80002a2ce4d0,ffff8000002a3480) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d pool_cache_get(ffffffff83ab1a58) at pool_cache_get+0x344 sys/kern/subr_pool.c:1924 pool_get(ffffffff83ab1a58,2) at pool_get+0xd6 sys/kern/subr_pool.c:-1 uvm_analloc() at uvm_analloc+0x36 sys/uvm/uvm_anon.c:71 uvmfault_promote(ffff80002a2ce9b0,ffffffffffffffff,ffff80002a2ce810,ffff80002a2ce820) at uvmfault_promote+0x103 sys/uvm/uvm_fault.c:-1 uvm_fault_lower(ffff80002a2ce9b0,ffff80002a2ce9e8,ffff80002a2ce930) at uvm_fault_lower+0x768 sys/uvm/uvm_fault.c:1427 uvm_fault(fffffd80713319a0,f985973b000,0,1) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1 upageflttrap(ffff80002a2ceb50,f985973b368) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 end trace frame: 0xffff80002a2ceb40, count: 0 ddb{0}> trace x86_ipi_db(ffffffff8393cff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83aa1380) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff83aa1380) at __mp_lock+0x192 sys/kern/kern_lock.c:173 intr_handler(ffff80002a2ce4d0,ffff8000002a3480) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:560 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d pool_cache_get(ffffffff83ab1a58) at pool_cache_get+0x344 sys/kern/subr_pool.c:1924 pool_get(ffffffff83ab1a58,2) at pool_get+0xd6 sys/kern/subr_pool.c:-1 uvm_analloc() at uvm_analloc+0x36 sys/uvm/uvm_anon.c:71 uvmfault_promote(ffff80002a2ce9b0,ffffffffffffffff,ffff80002a2ce810,ffff80002a2ce820) at uvmfault_promote+0x103 sys/uvm/uvm_fault.c:-1 uvm_fault_lower(ffff80002a2ce9b0,ffff80002a2ce9e8,ffff80002a2ce930) at uvm_fault_lower+0x768 sys/uvm/uvm_fault.c:1427 uvm_fault(fffffd80713319a0,f985973b000,0,1) at uvm_fault+0x274 sys/uvm/uvm_fault.c:-1 upageflttrap(ffff80002a2ceb50,f985973b368) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80002a2ceb50) at usertrap+0x430 sys/arch/amd64/amd64/trap.c:640 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xf98350d63b0, count: -16 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834487e9) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83488965,ffffffff8349a864,3bb,ffffffff834c36e7) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c4e2f10,ffffffff834444ec) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(205b9a,ffff80003c4e2f08) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(205b9a,2,2000,ffff80002a2422a8) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80003c4deee0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80763d0ea0,2,fffffd80097fd478,ffff80002a2422a8) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805f5c5da0,ffff80002a2422a8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd805f5c5da0,ffff80002a2422a8) at closef+0x192 sys/kern/kern_descrip.c:1265 syscall(ffff80003c4df140) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4df140) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf980b5ddeb0, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff834487e9) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff83488965,ffffffff8349a864,3bb,ffffffff834c36e7) at __assert+0x29 sys/kern/subr_prf.c:-1 refcnt_finalize(ffff80003c4e2f10,ffffffff834444ec) at refcnt_finalize+0x1db sys/kern/kern_synch.c:956 pppx_if_destroy(205b9a,ffff80003c4e2f08) at pppx_if_destroy+0x3d sys/net/if_pppx.c:794 pppxclose(205b9a,2,2000,ffff80002a2422a8) at pppxclose+0xa0 sys/net/if_pppx.c:541 spec_close(ffff80003c4deee0) at spec_close+0x417 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd80763d0ea0,2,fffffd80097fd478,ffff80002a2422a8) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805f5c5da0,ffff80002a2422a8) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805f5c5da0,ffff80002a2422a8) at fdrop+0x121 sys/kern/kern_descrip.c:1281 closef(fffffd805f5c5da0,ffff80002a2422a8) at closef+0x192 sys/kern/kern_descrip.c:1265 syscall(ffff80003c4df140) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4df140) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf980b5ddeb0, count: -13