panic: pool_do_put: shmpl: double pool_put: 0xfffffd8063af0770 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *278595 21439 32767 0x10 0x4000000 1 syz-executor 239248 508 0 0x2 0 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff83078f74) at panic+0x1e5 sys/kern/subr_prf.c:198 pool_do_put(ffffffff8351a828,fffffd8063af0770) at pool_do_put+0x1be sys/kern/subr_pool.c:841 pool_put(ffffffff8351a828,fffffd8063af0770) at pool_put+0xb3 sys/kern/subr_pool.c:799 shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 syscall(ffff8000371ddb80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff8000371ddb80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb663c9d7400, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: pool_do_put: shmpl: double pool_put: 0xfffffd8063af0770 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff83078f74) at panic+0x1e5 sys/kern/subr_prf.c:198 pool_do_put(ffffffff8351a828,fffffd8063af0770) at pool_do_put+0x1be sys/kern/subr_pool.c:841 pool_put(ffffffff8351a828,fffffd8063af0770) at pool_put+0xb3 sys/kern/subr_pool.c:799 shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 syscall(ffff8000371ddb80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff8000371ddb80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb663c9d7400, count: -7 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff8000371dd8b0 rbx 0xffff800029b7cdbf rdx 0 rcx 0xffff8000372336f8 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd4938c346d2986ed r11 0xc78d1cc80bf3cf3c r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff81caa475 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000371dd8a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=278595 pid=21439 tcnt=3 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800037232cd8,0xffff8000372327d8 process=0xffff8000371cf1f8 user=0xffff8000371d8000, vmspace=0xfffffd806c083aa0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 91450 146004 7334 32767 2 0x10 syz-executor 91450 51429 7334 32767 2 0x4000010 syz-executor 33886 444552 92947 32767 2 0x10 syz-executor 33886 151314 92947 32767 2 0x4000010 syz-executor 85822 261421 1911 32767 2 0x10 syz-executor 85822 183779 1911 32767 3 0x4000090 msgwait syz-executor 68734 139301 13030 32767 2 0x10 syz-executor 21439 163161 78610 32767 2 0x10 syz-executor *21439 278595 78610 32767 7 0x4000010 syz-executor 21439 392769 78610 32767 3 0x4000090 fsleep syz-executor 97525 498690 42948 32767 2 0x10 syz-executor 97525 73997 42948 32767 2 0x4000010 syz-executor 99090 368207 508 0 2 0x2 syz-executor 11933 73457 0 0 3 0x14200 bored sosplice 13030 451494 86181 32767 3 0x90 nanoslp syz-executor 70286 59967 62073 32767 2 0x10 syz-executor 78610 239525 20902 32767 3 0x90 nanoslp syz-executor 42948 474464 78217 32767 3 0x90 nanoslp syz-executor 7334 319552 55603 32767 3 0x90 nanoslp syz-executor 1911 418164 72088 32767 3 0x90 nanoslp syz-executor 92947 456707 96160 32767 3 0x90 nanoslp syz-executor 55603 454172 508 0 3 0x82 wait syz-executor 96160 192438 508 0 3 0x82 wait syz-executor 72088 200084 508 0 3 0x82 wait syz-executor 62073 356961 508 0 3 0x82 wait syz-executor 86181 443451 508 0 3 0x82 wait syz-executor 20902 161885 508 0 3 0x82 wait syz-executor 78217 61699 508 0 3 0x82 wait syz-executor 508 239248 72203 0 7 0x2 syz-executor 72203 358585 18046 0 3 0x10008a sigsusp ksh 18046 37960 5766 0 3 0x98 kqread sshd-session 5766 50693 85100 0 3 0x92 kqread sshd-session 16225 271585 1 0 3 0x100083 ttyin getty 85100 440001 1 0 3 0x88 kqread sshd 73680 443747 39997 73 3 0x1100090 kqread syslogd 39997 101520 1 0 3 0x100082 sbwait syslogd 52987 275097 1 0 3 0x100080 kqread resolvd 69322 265650 51601 77 3 0x100092 kqread dhcpleased 47307 375750 51601 77 3 0x100092 kqread dhcpleased 51601 303510 1 0 3 0x80 kqread dhcpleased 37643 245847 0 0 3 0x14200 bored smr 39269 240504 0 0 2 0x14200 zerothread 29750 253565 0 0 3 0x14200 aiodoned aiodoned 75562 40514 0 0 3 0x14200 syncer update 60900 413034 0 0 3 0x14200 cleaner cleaner 1291 375019 0 0 3 0x14200 reaper reaper 64221 180774 0 0 3 0x14200 pgdaemon pagedaemon 7437 224740 0 0 3 0x14200 bored viomb 25867 373462 0 0 3 0x40014200 acpi0 acpi0 41084 448316 0 0 3 0x40014200 idle1 33721 331794 0 0 3 0x14200 bored softnet3 82342 29942 0 0 3 0x14200 bored softnet2 40486 367735 0 0 3 0x14200 bored softnet1 23254 342745 0 0 3 0x14200 bored softnet0 4157 15689 0 0 3 0x14200 bored systqmp 30705 381222 0 0 3 0x14200 bored systq 80434 429164 0 0 3 0x14200 tmoslp softclockmp 4512 89351 0 0 3 0x40014200 tmoslp softclock 33892 192683 0 0 3 0x40014200 idle0 1 87924 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex shmpl r = 0 (0xffffffff8351a838) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 sys/kern/kern_lock.c:239 #3 pool_put+0x9f sys/kern/subr_pool.c:797 #4 shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] #4 shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 #5 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] #5 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 Process 21439 (syz-executor) thread 0xffff8000372336f8 (278595) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83525790) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 sys/kern/sched_bsd.c:441 #3 sleep_finish+0x278 sys/kern/kern_synch.c:417 #4 rw_enter+0x348 sys/kern/kern_rwlock.c:285 #5 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5257 #6 uvm_unmap+0x81 sys/uvm/uvm_map.c:1792 #7 shm_delete_mapping+0xa0 sys/kern/sysv_shm.c:170 #8 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] #8 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 exclusive mutex shmpl r = 0 (0xffffffff8351a838) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 sys/kern/kern_lock.c:239 #3 pool_put+0x9f sys/kern/subr_pool.c:797 #4 shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] #4 shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 #5 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] #5 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 Process 21439 (syz-executor) thread 0xffff800037233470 (392769) exclusive rwlock futex r = 0 (0xffffffff83494be0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 sys_futex+0x69 sys/kern/sys_futex.c:98 #2 syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] #2 syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 #3 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10183 11045K 11059K 166960K 11264 0 pcb 17 12K 12K 166960K 17 0 rtable 218 6K 7K 166960K 391 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 counters 62 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 32 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1364 86K 86K 166960K 1445 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 11 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 24 89K 125K 166960K 284 0 sigio 0 0K 0K 166960K 3 0 proc 58 79K 115K 166960K 486 0 subproc 101 6K 6K 166960K 166 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 36 0 in_multi 88 6K 7K 166960K 117 0 ether_multi 1 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 353 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 65K 88K 166960K 3903 0 UVM aobj 12 2K 2K 166960K 13 0 pinsyscall 45 90K 112K 166960K 1290 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 10 0K 2K 166960K 27 0 temp 37 6811K 6874K 166960K 4284 0 kqueue 13 20K 24K 166960K 39 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 51 0 48 1 0 1 1 0 8 0 rtentry 112 114 0 12 4 0 4 4 0 8 0 unpcb 144 238 0 223 4 0 4 4 0 8 3 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpqe 32 5 0 5 1 0 1 1 0 8 1 tcpcb 808 56 0 47 2 0 2 2 0 8 1 arp 120 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 336 165 0 150 2 0 2 2 0 8 0 nd6 136 27 0 3 1 0 1 1 0 8 0 kcovpl 48 12 0 5 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 44 29 0 29 29 0 8 1 art_table 32 459 0 44 4 0 4 4 0 8 0 art_node 16 113 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 1 0 0 1 0 1 1 0 8 0 semapl 112 8 0 1 1 0 1 1 0 8 0 shmpl 112 10 0 1 1 0 1 1 0 8 0 pool(shmpl): free list modified: page 0xfffffd8063af0000; item ordinal 0; addr 0xfffffd8063af0770 (p 0xfffffd8063af0000); offset 0x1c=0xdeadbeee dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1702 0 192 95 0 95 95 0 8 0 ffsino 272 1702 0 192 101 0 101 101 0 8 0 nchpl 144 2061 0 383 63 0 63 63 0 8 0 uvmvnodes 80 1877 0 0 39 0 39 39 0 8 0 vnodes 216 1877 0 0 105 0 105 105 0 8 0 namei 1024 6074 0 6074 2 0 2 2 0 8 2 percpumem 16 46 0 1 1 0 1 1 0 8 0 kstatmem 264 22 0 2 2 0 2 2 0 8 0 scxspl 216 6270 0 6270 10 2 8 8 1 8 8 plimitpl 152 68 0 44 2 0 2 2 0 8 1 sigapl 424 551 0 496 8 0 8 8 0 8 1 futexpl 64 1613 0 1612 1 0 1 1 0 8 0 knotepl 120 63 0 0 2 0 2 2 0 8 0 kqueuepl 216 44 0 35 1 0 1 1 0 8 0 pipepl 320 126 0 99 3 0 3 3 0 8 0 fdescpl 496 532 0 496 7 1 6 6 0 8 0 filepl 152 2063 0 1826 13 0 13 13 0 8 2 lockfpl 104 36 0 34 1 0 1 1 0 8 0 lockfspl 48 15 0 13 1 0 1 1 0 8 0 sessionpl 144 27 0 12 1 0 1 1 0 8 0 pgrppl 48 46 0 23 1 0 1 1 0 8 0 ucredpl 104 222 0 204 1 0 1 1 0 8 0 zombiepl 144 497 0 496 1 0 1 1 0 8 0 processpl 1160 551 0 496 5 0 5 5 0 8 0 procpl 648 743 0 682 7 0 7 7 0 8 0 sockpl 664 523 0 490 9 0 9 9 0 8 5 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 143 0 0 18 0 18 18 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 1165 0 0 73 0 73 73 0 8 0 bufpl 280 2365 0 90 163 0 163 163 0 8 0 anonpl 24 159401 0 156235 33 0 33 33 0 185 10 amapchunkpl 152 13205 0 12681 36 0 36 36 0 158 14 amappl16 200 4254 0 4243 5 2 3 5 0 8 2 amappl15 192 74 0 74 1 1 0 1 0 8 0 amappl14 184 150 0 140 1 0 1 1 0 8 0 amappl13 176 44 0 44 2 2 0 1 0 8 0 amappl12 168 1139 0 1103 2 0 2 2 0 8 0 amappl11 160 50 0 40 1 0 1 1 0 8 0 amappl10 152 17 0 17 2 2 0 1 0 8 0 amappl9 144 130 0 130 1 1 0 1 0 8 0 amappl8 136 22 0 21 1 0 1 1 0 8 0 amappl7 128 97 0 87 1 0 1 1 0 8 0 amappl6 120 158 0 156 1 0 1 1 0 8 0 amappl5 112 128 0 119 1 0 1 1 0 8 0 amappl4 104 312 0 297 1 0 1 1 0 8 0 amappl3 96 2356 0 2258 4 0 4 4 0 8 1 amappl2 88 823 0 739 3 0 3 3 0 8 0 amappl1 80 8088 0 7556 14 0 14 14 0 8 0 amappl 88 3546 0 3363 6 0 6 6 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 12 0 1 1 0 1 1 0 8 0 pool(aobjpl): free list modified: page 0xfffffd80757fe000; item ordinal 0; addr 0xfffffd80757fe8b8 (p 0xfffffd80757fe000); offset 0xc=0xdead410f uaddrrnd 24 532 0 496 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 532 0 496 1 0 1 1 0 8 0 vmmpekpl 168 5793 0 5751 3 0 3 3 0 8 0 vmmpepl 168 41859 0 39928 95 0 95 95 0 357 11 vmsppl 448 531 0 496 5 0 5 5 0 8 0 rwobjpl 56 18036 0 15330 39 0 39 39 0 8 0 pdppl 4096 1071 0 992 115 34 81 97 0 8 2 pvpl 32 12040 0 0 100 2 98 98 0 265 0 pmappl 248 531 0 496 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 455 0 36 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83420ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83525588) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff83525588) at __mp_lock+0x199 sys/kern/kern_lock.c:144 intr_handler(ffff80002a074260,ffff800000079e00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __sanitizer_cov_trace_const_cmp4(fffffd807e4230d8,fffffd807e4230d8) at __sanitizer_cov_trace_const_cmp4+0xb sys/dev/kcov.c:234 kqueue_sleep(fffffd807e4230d8,ffff80002a074858) at kqueue_sleep+0x12b sys/kern/kern_event.c:1454 kqueue_scan(ffff80002a074620,8,ffff80002a074520,ffff80002a074858,ffff800029fd9958,ffff80002a0747cc) at kqueue_scan+0x21e sys/kern/kern_event.c:1509 dopselect(ffff800029fd9958,35,6ff3fe717130,0,0,ffff80002a074858,a30a0ca18c5ceb5a,ffff800029fd9958) at dopselect+0x5eb sys/kern/sys_generic.c:694 sys_pselect(ffff800029fd9958,ffff80002a0749a0,ffff80002a0748f0) at sys_pselect+0x263 sys/kern/sys_generic.c:592 syscall(ffff80002a0749a0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a0749a0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6ff3fe7170e0, count: 2 ddb{0}> trace x86_ipi_db(ffffffff83420ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83525588) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff83525588) at __mp_lock+0x199 sys/kern/kern_lock.c:144 intr_handler(ffff80002a074260,ffff800000079e00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge25_untramp() at Xintr_ioapic_edge25_untramp+0x18f __sanitizer_cov_trace_const_cmp4(fffffd807e4230d8,fffffd807e4230d8) at __sanitizer_cov_trace_const_cmp4+0xb sys/dev/kcov.c:234 kqueue_sleep(fffffd807e4230d8,ffff80002a074858) at kqueue_sleep+0x12b sys/kern/kern_event.c:1454 kqueue_scan(ffff80002a074620,8,ffff80002a074520,ffff80002a074858,ffff800029fd9958,ffff80002a0747cc) at kqueue_scan+0x21e sys/kern/kern_event.c:1509 dopselect(ffff800029fd9958,35,6ff3fe717130,0,0,ffff80002a074858,a30a0ca18c5ceb5a,ffff800029fd9958) at dopselect+0x5eb sys/kern/sys_generic.c:694 sys_pselect(ffff800029fd9958,ffff80002a0749a0,ffff80002a0748f0) at sys_pselect+0x263 sys/kern/sys_generic.c:592 syscall(ffff80002a0749a0) at syscall+0xbb6 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff80002a0749a0) at syscall+0xbb6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6ff3fe7170e0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff83078f74) at panic+0x1e5 sys/kern/subr_prf.c:198 pool_do_put(ffffffff8351a828,fffffd8063af0770) at pool_do_put+0x1be sys/kern/subr_pool.c:841 pool_put(ffffffff8351a828,fffffd8063af0770) at pool_put+0xb3 sys/kern/subr_pool.c:799 shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 syscall(ffff8000371ddb80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff8000371ddb80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb663c9d7400, count: 8 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff83078f74) at panic+0x1e5 sys/kern/subr_prf.c:198 pool_do_put(ffffffff8351a828,fffffd8063af0770) at pool_do_put+0x1be sys/kern/subr_pool.c:841 pool_put(ffffffff8351a828,fffffd8063af0770) at pool_put+0xb3 sys/kern/subr_pool.c:799 shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac shm_deallocate_segment sys/kern/sysv_shm.c:153 [inline] shm_delete_mapping(fffffd806c083aa0,ffff800001298008) at shm_delete_mapping+0x1ac sys/kern/sysv_shm.c:174 syscall(ffff8000371ddb80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:178 [inline] syscall(ffff8000371ddb80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb663c9d7400, count: -7