panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 81125 35352 0 0 0x4000000 0K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff833962ae) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833d23e4,ffffffff833d1fcc,84,ffffffff8342cf2e) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(16,ffff800000afd800) at if_createrdomain+0x40 sys/net/if.c:1974 ifioctl(ffff800010fd6ed8,8020699f,ffff80003c415630,ffff8000333f9250) at ifioctl+0x1b40 sys/net/if.c:2323 sys_ioctl(ffff8000333f9250,ffff80003c415810,ffff80003c415760) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c415810) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c415810) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12ff900f7a0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff833962ae) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833d23e4,ffffffff833d1fcc,84,ffffffff8342cf2e) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(16,ffff800000afd800) at if_createrdomain+0x40 sys/net/if.c:1974 ifioctl(ffff800010fd6ed8,8020699f,ffff80003c415630,ffff8000333f9250) at ifioctl+0x1b40 sys/net/if.c:2323 sys_ioctl(ffff8000333f9250,ffff80003c415810,ffff80003c415760) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c415810) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c415810) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12ff900f7a0, count: -10 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c415340 rbx 0xffffffff83828ddf cpu_info_full_primary+0x2ddf rdx 0 rcx 0xffff8000333f9250 rax 0xffffffff83827ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xc825654420c9ad57 r11 0xd5cbac497cf0f906 r12 0xffffffff83828be0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff810a1865 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c415330 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=81125 pid=35352 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffee018,0xffffffff8389d358 process=0xffff80003c4244f0 user=0xffff80003c410000, vmspace=0xfffffd80693df3f8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 78204 254533 88615 0 2 0 syz-executor 15589 31717 81568 0 2 0 syz-executor 15589 334800 81568 0 3 0x4000080 fsleep syz-executor 46822 84463 37088 0 2 0 syz-executor 46822 422193 37088 0 3 0x4000080 fsleep syz-executor 35352 425019 31345 0 2 0 syz-executor 35352 27732 31345 0 2 0x4000000 syz-executor *35352 81125 31345 0 7 0x4000000 syz-executor 92256 154793 90139 0 2 0 syz-executor 92256 349275 90139 0 3 0x4000080 fsleep syz-executor 92256 152624 90139 0 3 0x4000080 fsleep syz-executor 64677 477764 9842 0 3 0x3000 suspend syz-executor 64677 521351 9842 0 2 0x4081000 syz-executor 64677 428685 9842 0 3 0x4081000 inode syz-executor 90139 263624 80779 0 3 0x82 nanoslp syz-executor 32210 332316 80779 0 2 0xc82 syz-executor 81568 227336 80779 0 3 0x82 nanoslp syz-executor 31345 283920 80779 0 3 0x82 nanoslp syz-executor 9842 88506 80779 0 2 0xc82 syz-executor 93958 10354 80779 0 2 0x2 syz-executor 37088 147996 80779 0 2 0xc82 syz-executor 88615 378324 80779 0 2 0xc82 syz-executor 80779 155759 7065 0 3 0x82 kqread syz-executor 7065 392317 52278 0 3 0x10008a sigsusp ksh 52278 278289 35323 0 3 0x98 kqread sshd-session 35323 164117 61320 0 3 0x92 kqread sshd-session 56746 287685 1 0 3 0x100083 ttyin getty 61320 28581 1 0 3 0x88 kqread sshd 97222 247612 69672 74 3 0x1100092 bpf pflogd 69672 235656 1 0 3 0x80 sbwait pflogd 54433 382046 74398 73 3 0x1100090 kqread syslogd 74398 453771 1 0 3 0x100082 sbwait syslogd 82663 474200 1 0 3 0x100080 kqread resolvd 90762 315353 22972 77 3 0x100092 kqread dhcpleased 78625 321218 22972 77 3 0x100092 kqread dhcpleased 22972 157105 1 0 3 0x80 kqread dhcpleased 5241 384964 0 0 3 0x14200 bored smr 53929 430179 0 0 2 0x14200 zerothread 39913 157468 0 0 3 0x14200 aiodoned aiodoned 72687 389878 0 0 3 0x14200 syncer update 96556 94487 0 0 3 0x14200 cleaner cleaner 27864 496167 0 0 2 0x14200 reaper 37665 141592 0 0 3 0x14200 pgdaemon pagedaemon 70334 74804 0 0 3 0x14200 bored viomb 76918 57604 0 0 3 0x40014200 acpi0 acpi0 3462 236101 0 0 3 0x40014200 idle1 59502 317452 0 0 3 0x14200 bored softnet1 81060 241921 0 0 3 0x14200 bored softnet0 424 8529 0 0 3 0x14200 bored systqmp 19457 282563 0 0 3 0x14200 bored systq 70116 443966 0 0 3 0x14200 tmoslp softclockmp 44791 213391 0 0 3 0x40014200 tmoslp softclock 64036 96505 0 0 3 0x40014200 idle0 1 307874 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd800883f368) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 mtx_enter_try+0x1ad sys/kern/kern_lock.c:311 #2 mtx_enter+0x62 sys/kern/kern_lock.c:261 #3 pmap_remove_ptes+0x29f pmap_remove_pv sys/arch/amd64/amd64/pmap.c:-1 [inline] #3 pmap_remove_ptes+0x29f sys/arch/amd64/amd64/pmap.c:1711 #4 pmap_do_remove+0x589 sys/arch/amd64/amd64/pmap.c:1920 #5 uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1863 #6 uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline] #6 uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486 #7 exit1+0x6fc sys/kern/kern_exit.c:260 #8 sys_exit+0x1a sys/kern/kern_exit.c:-1 #9 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xb17 sys/arch/amd64/amd64/trap.c:765 #10 Xsyscall+0x128 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c186610) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 mtx_enter_try+0x1ad sys/kern/kern_lock.c:311 #2 mtx_enter+0x62 sys/kern/kern_lock.c:261 #3 pmap_do_remove+0xa9 rcr3 sys/arch/amd64/compile/SYZKALLER/obj/machine/cpufunc.h:139 [inline] #3 pmap_do_remove+0xa9 pmap_map_ptes sys/arch/amd64/amd64/pmap.c:437 [inline] #3 pmap_do_remove+0xa9 sys/arch/amd64/amd64/pmap.c:1824 #4 uvm_unmap_kill_entry_withlock+0x269 sys/uvm/uvm_map.c:1863 #5 uvm_map_teardown+0x117 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:-1 [inline] #5 uvm_map_teardown+0x117 sys/uvm/uvm_map.c:2486 #6 exit1+0x6fc sys/kern/kern_exit.c:260 #7 sys_exit+0x1a sys/kern/kern_exit.c:-1 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:765 #9 Xsyscall+0x128 Process 15589 (syz-executor) thread 0xffff8000333f9a18 (31717) exclusive rwlock vmmaplk r = 0 (0xfffffd80693df8c8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5171 #3 uvm_map_protect+0xe0 sys/uvm/uvm_map.c:3064 #4 sys_mprotect+0x351 sys/uvm/uvm_mmap.c:590 #5 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 #6 Xsyscall+0x128 Process 35352 (syz-executor) thread 0xffff8000333f9250 (81125) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff838dec58) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 #2 malloc+0xe3 sys/kern/kern_malloc.c:174 #3 rtmap_grow+0xb2 sys/net/rtable.c:127 #4 rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] #4 rtable_add+0x2d9 sys/net/rtable.c:223 #5 if_createrdomain+0x40 sys/net/if.c:1974 #6 ifioctl+0x1b40 sys/net/if.c:2323 #7 sys_ioctl+0x674 sys/kern/sys_generic.c:-1 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 #9 Xsyscall+0x128 Process 64677 (syz-executor) thread 0xffff800035808d18 (521351) exclusive rrwlock inode r = 0 (0xfffffd806a3f7210) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vn_write+0x18f sys/kern/vfs_vnops.c:405 #6 dofilewritev+0x242 sys/kern/sys_generic.c:380 #7 sys_write+0xa2 sys/kern/sys_generic.c:300 #8 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 #9 Xsyscall+0x128 Process 64677 (syz-executor) thread 0xffff800035808a80 (428685) exclusive rrwlock inode r = 0 (0xfffffd806a3f7900) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1 #6 namei+0x7ca sys/kern/vfs_lookup.c:250 #7 vn_open+0x15a sys/kern/vfs_vnops.c:140 #8 doopenat+0x35b sys/kern/vfs_syscalls.c:1138 #9 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 #10 Xsyscall+0x128 Process 27864 (reaper) thread 0xffff8000ffffdc90 (496167) exclusive rwlock kmmaplk r = 0 (0xffffffff839f1d50) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5171 #3 uvm_unmap+0x7d sys/uvm/uvm_map.c:1792 #4 km_free+0x87 sys/uvm/uvm_km.c:831 #5 uvm_uarea_free+0x4f sys/uvm/uvm_glue.c:304 #6 reaper+0x1aa sys/kern/kern_exit.c:493 #7 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10196 11047K 11200K 166960K 11580 0 pcb 19 13K 13K 166960K 85 0 rtable 204 8K 8K 166960K 443 0 pf 32 17K 21K 166960K 91 0 ifaddr 39 6K 7K 166960K 73 0 ifgroup 51 2K 2K 166960K 106 0 sysctl 1 1K 9K 166960K 6 0 counters 66 36K 37K 166960K 118 0 ioctlops 0 0K 4K 166960K 1539 0 iov 0 0K 14K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1368 86K 87K 166960K 1636 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 110 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 93K 166960K 476 0 sigio 0 0K 0K 166960K 8 0 proc 72 115K 196K 166960K 616 0 subproc 72 4K 4K 166960K 82 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 47 0 in_multi 87 6K 7K 166960K 139 0 ether_multi 1 0K 0K 166960K 7 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 475 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 229 160K 169K 166960K 6255 0 UVM aobj 10 2K 4K 166960K 12 0 pinsyscall 41 82K 105K 166960K 1626 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 11 0K 2K 166960K 47 0 temp 47 8652K 8727K 166960K 18247 0 kqueue 13 20K 28K 166960K 88 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 56 0 53 1 0 1 1 0 8 0 rtentry 176 132 0 47 6 0 6 6 0 8 0 unpcb 144 447 0 429 4 2 2 4 0 8 1 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 102 0 98 2 1 1 2 0 8 0 arp 136 21 0 7 1 0 1 1 0 8 0 inpcb 328 413 0 404 6 4 2 4 0 8 1 nd6 152 27 0 6 1 0 1 1 0 8 0 pkpcb 40 4 0 4 3 2 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 18 0 18 2 1 1 1 0 8 1 pppxif 1504 3 0 3 1 1 0 1 0 8 0 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 35 0 0 1 0 1 1 0 8 0 pfstkey 128 35 0 0 2 0 2 2 0 8 0 pfstate 384 35 0 0 4 0 4 4 0 8 0 pfrule 1344 23 0 17 2 1 1 2 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 623 0 250 31 2 29 29 0 8 2 art_table 40 624 0 250 5 0 5 5 0 8 0 art_node 32 132 0 57 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 1 0 1 0 8 0 semapl 112 75 0 69 1 0 1 1 0 8 0 shmpl 112 9 0 2 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2187 0 673 96 0 96 96 0 8 0 ffsino 296 2187 0 673 118 0 118 118 0 8 0 nchpl 144 2818 0 1118 64 0 64 64 0 8 0 rtmask 32 3 0 3 1 1 0 1 0 8 0 vnodes 216 2433 0 0 136 0 136 136 0 8 0 namei 1024 9115 0 9114 1 0 1 1 0 8 0 percpumem 16 74 0 26 1 0 1 1 0 8 0 kstatmem 264 60 0 36 3 1 2 3 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 12853 0 12853 11 9 2 8 1 8 2 plimitpl 152 108 0 90 1 0 1 1 0 8 0 sigapl 424 782 0 735 7 1 6 7 0 8 0 knotepl 120 311 0 0 10 0 10 10 0 8 0 kqueuepl 224 226 0 216 7 6 1 5 0 8 0 pipepl 344 159 0 130 4 1 3 4 0 8 0 fdescpl 528 766 0 736 3 0 3 3 0 8 0 filepl 160 3941 0 3718 14 3 11 13 0 8 0 lockfpl 104 108 0 105 1 0 1 1 0 8 0 lockfspl 48 50 0 47 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 35 0 18 1 0 1 1 0 8 0 ucredpl 104 404 0 390 1 0 1 1 0 8 0 zombiepl 144 861 0 859 1 0 1 1 0 8 0 processpl 1232 782 0 735 5 0 5 5 0 8 0 procpl 664 1411 0 1355 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 927 0 897 14 9 5 11 0 8 1 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 124 0 0 16 1 15 16 0 8 0 mcl2k 2048 26 0 0 4 0 4 4 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 1464 0 0 92 0 92 92 0 8 0 bufpl 280 4779 0 136 332 0 332 332 0 8 0 anonpl 32 7600 0 0 62 0 62 62 0 246 0 amapchunkpl 152 19462 0 19018 30 3 27 27 0 158 5 amappl16 200 3461 0 3265 28 17 11 15 0 8 0 amappl15 192 52 0 52 1 1 0 1 0 8 0 amappl14 184 7 0 7 1 1 0 1 0 8 0 amappl13 176 437 0 436 1 0 1 1 0 8 0 amappl12 168 1129 0 1088 3 0 3 3 0 8 0 amappl11 160 10 0 10 2 2 0 1 0 8 0 amappl10 152 46 0 32 1 0 1 1 0 8 0 amappl9 144 248 0 248 1 1 0 1 0 8 0 amappl8 136 32 0 30 1 0 1 1 0 8 0 amappl7 128 127 0 126 1 0 1 1 0 8 0 amappl6 120 289 0 276 1 0 1 1 0 8 0 amappl5 112 92 0 82 1 0 1 1 0 8 0 amappl4 104 416 0 385 1 0 1 1 0 8 0 amappl3 96 3413 0 3331 4 1 3 3 0 8 0 amappl2 88 870 0 792 2 0 2 2 0 8 0 amappl1 80 10472 0 9893 16 3 13 15 0 8 0 amappl 88 5453 0 5302 5 0 5 5 0 92 0 uvmvnodes 80 2433 0 0 50 0 50 50 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 255 0 255 3 2 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 2 1 0 1 1 0 8 0 uaddrrnd 24 766 0 736 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 766 0 736 1 0 1 1 0 8 0 vmmpekpl 168 8010 0 7964 3 0 3 3 0 8 0 vmmpepl 168 56755 0 54743 105 13 92 98 0 357 0 vmsppl 488 765 0 735 6 1 5 5 0 8 0 rwobjpl 80 21124 0 17613 72 0 72 72 0 8 0 pdppl 4096 1539 0 1470 99 26 73 85 0 8 4 pvpl 32 15094 0 0 122 0 122 122 0 265 0 pmappl 256 765 0 735 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 357 0 36 10 0 10 10 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff833962ae) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833d23e4,ffffffff833d1fcc,84,ffffffff8342cf2e) at __assert+0x29 sys/kern/subr_prf.c:-1 rtmap_grow(17,21) at rtmap_grow+0x24f rtable_add(16) at rtable_add+0x2d9 rtable_alloc sys/net/rtable.c:370 [inline] rtable_add(16) at rtable_add+0x2d9 sys/net/rtable.c:223 if_createrdomain(16,ffff800000afd800) at if_createrdomain+0x40 sys/net/if.c:1974 ifioctl(ffff800010fd6ed8,8020699f,ffff80003c415630,ffff8000333f9250) at ifioctl+0x1b40 sys/net/if.c:2323 sys_ioctl(ffff8000333f9250,ffff80003c415810,ffff80003c415760) at sys_ioctl+0x674 sys/kern/sys_generic.c:-1 syscall(ffff80003c415810) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c415810) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x12ff900f7a0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153 __mp_lock(ffffffff838dea50) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838dea50) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165 exit1(ffff8000fffeea78,0,0,1) at exit1+0x701 sys/kern/kern_exit.c:260 sys_exit(ffff8000fffeea78,ffff80002a7d5a40,ffff80002a7d5990) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a7d5a40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a7d5a40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c91ecdb01f0, count: 6 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:584 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:153 __mp_lock(ffffffff838dea50) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838dea50) at __mp_lock+0x1a3 sys/kern/kern_lock.c:165 exit1(ffff8000fffeea78,0,0,1) at exit1+0x701 sys/kern/kern_exit.c:260 sys_exit(ffff8000fffeea78,ffff80002a7d5a40,ffff80002a7d5990) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff80002a7d5a40) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a7d5a40) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:765 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c91ecdb01f0, count: -9