panic: pool_do_get: shmpl free list modified: page 0xfffffd807bfea000; item addr 0xfffffd807bfeaa38; offset 0x2c=0xdead410f Starting stack trace... panic(ffffffff830649de) at panic+0x1d0 sys/kern/subr_prf.c:229 pool_do_get(ffffffff835bb610,1,ffff800036fdd4d8) at pool_do_get+0x5e6 pool_get(ffffffff835bb610,1) at pool_get+0x141 shmget_allocate_segment(ffff80002e5842e8,ffff800036fdd730,4,ffff800036fdd680) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80002e5842e8,ffff800036fdd730,ffff800036fdd680) at sys_shmget+0x1b2 sys/kern/sysv_shm.c:480 syscall(ffff800036fdd730) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff800036fdd730) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa60d7e7f660, count: 250 End of stack trace. syncing disks...panic: kernel diagnostic assertion "rw_write_held(uobj->vmobjlock)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_vnode.c", line 611 Starting stack trace... panic(ffffffff830e7e1e) at panic+0x1d0 sys/kern/subr_prf.c:229 __assert(ffffffff8309988b,ffffffff82fda117,263,ffffffff83018c96) at __assert+0x29 uvn_flush(fffffd807a6147a0,0,0,31) at uvn_flush+0xdfd sys/uvm/uvm_vnode.c:754 uvm_vnp_sync(ffff800000a5e000) at uvm_vnp_sync+0x1e7 sys/uvm/uvm_vnode.c:1542 sys_sync(ffff80002e5842e8,0,0) at sys_sync+0xd4 sys/kern/vfs_syscalls.c:536 vfs_syncwait(ffff80002e5842e8,1) at vfs_syncwait+0x44 vfs_shutdown(ffff80002e5842e8) at vfs_shutdown+0x97 sys/kern/vfs_subr.c:1791 boot(100) at boot+0x15c sys/arch/amd64/amd64/machdep.c:907 reboot(100) at reboot+0xb1 panic(ffffffff830649de) at panic+0x1f9 sys/kern/subr_prf.c:231 pool_do_get(ffffffff835bb610,1,ffff800036fdd4d8) at pool_do_get+0x5e6 pool_get(ffffffff835bb610,1) at pool_get+0x141 shmget_allocate_segment(ffff80002e5842e8,ffff800036fdd730,4,ffff800036fdd680) at shmget_allocate_segment+0x1a7 sys_shmget(ffff80002e5842e8,ffff800036fdd730,ffff800036fdd680) at sys_shmget+0x1b2 sys/kern/sysv_shm.c:480 syscall(ffff800036fdd730) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff800036fdd730) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa60d7e7f660, count: 241 End of stack trace. dump to dev 4,1 not possible rebooting... SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000080000000 = 2048 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID 0d5ef51b-0062-dd1a-a10b-15f17b148763 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f27c0: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Sending Seabios boot VM event. Booting from Hard Disk 0... >> OpenBSD/amd64 BOOT 3.67 boot> set $lines = 0 set: syntax error boot> set $maxwidth = 0 set: syntax error boot> show panic boot: illegal argument panic boot> trace boot> show registers boot> show proc boot> ps boot> show all locks boot> show malloc boot> show all pools boot> machine ddbcpu 0 machine: syntax error boot> trace boot> machine ddbcpu 1 machine: syntax error boot> trace