panic: vref used where vget required Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *411001 40519 0 0x8000002 0 1 syz-executor 516533 87480 73 0x19100010 0 0 syslogd db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830519f0) at panic+0x1e5 sys/kern/subr_prf.c:198 vref(fffffd805f113b58) at vref+0x109 sys/kern/vfs_subr.c:698 namei(ffff80002a96e538) at namei+0x533 sys/kern/vfs_lookup.c:221 vn_open(ffff80002a96e538,30001,0) at vn_open+0x13f sys/kern/vfs_vnops.c:140 doopenat(ffff8000ffff4f58,ffffff9c,74be3d818480,30000,0,ffff80002a96e6e0) at doopenat+0x31d sys/kern/vfs_syscalls.c:1123 syscall(ffff80002a96e790) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a96e790) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74be3d817f80, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: vref used where vget required ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830519f0) at panic+0x1e5 sys/kern/subr_prf.c:198 vref(fffffd805f113b58) at vref+0x109 sys/kern/vfs_subr.c:698 namei(ffff80002a96e538) at namei+0x533 sys/kern/vfs_lookup.c:221 vn_open(ffff80002a96e538,30001,0) at vn_open+0x13f sys/kern/vfs_vnops.c:140 doopenat(ffff8000ffff4f58,ffffff9c,74be3d818480,30000,0,ffff80002a96e6e0) at doopenat+0x31d sys/kern/vfs_syscalls.c:1123 syscall(ffff80002a96e790) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a96e790) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74be3d817f80, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a96e1d0 rbx 0xffff800029b7cd87 rdx 0 rcx 0xffff8000ffff4f58 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xfac80ca9c33df827 r11 0x6b51a0a6513614f0 r12 0xffff800029b7cb88 r13 0 r14 0 r15 0x1 rip 0xffffffff812682e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a96e1c0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=411001 pid=40519 tcnt=1 stat=onproc flags process=8000002 proc=0 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff47c0,0xffff8000ffff4ce0 process=0xffff8000ffff8490 user=0xffff80002a969000, vmspace=0xfffffd806c530388 estcpu=36, cpticks=1, pctcpu=0.1, user=0, sys=5, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 49206 89050 43081 0 2 0x8000000 syz-executor 49206 114713 43081 0 3 0xc000080 fsleep syz-executor 49206 414535 43081 0 3 0xc000080 fsleep syz-executor 55848 26924 97605 0 2 0x8000000 syz-executor 55848 379200 97605 0 3 0xc000080 fsleep syz-executor 55848 416814 97605 0 3 0xc000080 fsleep syz-executor 26342 424097 72399 0 2 0x8000000 syz-executor 26342 102250 72399 0 3 0xc000080 sbwait syz-executor 14963 225247 38169 0 2 0x8000480 syz-executor 14963 349170 38169 0 3 0xc000080 bell syz-executor 14963 134952 38169 0 3 0xc000080 fsleep syz-executor 20296 508825 88494 0 3 0x8000080 nanoslp syz-executor 20296 232581 88494 0 3 0xc000080 kqsel syz-executor 20296 416733 88494 0 3 0xc000080 ttyout syz-executor 20296 411743 88494 0 3 0xc000080 fsleep syz-executor 88494 75704 96305 0 3 0x8000082 nanoslp syz-executor 43081 373910 96305 0 3 0x8000082 nanoslp syz-executor 38169 124233 96305 0 2 0x8000482 syz-executor 79084 510766 96305 0 3 0x8000082 piperd syz-executor 97605 429555 96305 0 2 0x8000482 syz-executor 72399 422705 96305 0 3 0x8000082 nanoslp syz-executor *40519 411001 96305 0 7 0x8000002 syz-executor 98480 83565 1 0 3 0x18100083 ttyin getty 80263 59201 0 0 3 0x14200 bored sosplice 96305 332115 52147 0 3 0x8000082 wait syz-executor 52147 500712 96750 0 3 0x810008a sigsusp ksh 96750 358087 84273 0 3 0x18000098 kqread sshd-session 84273 156124 60048 0 3 0x18000092 kqread sshd-session 60048 385338 1 0 3 0x18000088 kqread sshd 99953 110807 68688 74 3 0x19100092 bpf pflogd 68688 490973 1 0 3 0x18000080 sbwait pflogd 87480 516533 64944 73 7 0x19100010 syslogd 64944 444514 1 0 3 0x18100082 sbwait syslogd 5617 492243 1 0 3 0x18100080 kqread resolvd 1474 109530 79417 77 3 0x18100092 kqread dhcpleased 78081 481974 79417 77 3 0x18100092 kqread dhcpleased 79417 459968 1 0 3 0x18000080 kqread dhcpleased 84723 259238 0 0 3 0x14200 bored smr 5577 75938 0 0 2 0x14200 zerothread 72727 464423 0 0 3 0x14200 aiodoned aiodoned 23636 170159 0 0 3 0x14200 syncer update 7924 4173 0 0 3 0x14200 cleaner cleaner 73910 490402 0 0 3 0x14200 reaper reaper 95245 477394 0 0 3 0x14200 pgdaemon pagedaemon 21614 164613 0 0 3 0x14200 bored viomb 87012 164004 0 0 3 0x40014200 acpi0 acpi0 23864 300797 0 0 3 0x40014200 idle1 26301 131257 0 0 3 0x14200 bored softnet3 9310 79406 0 0 3 0x14200 bored softnet2 36614 159997 0 0 3 0x14200 bored softnet1 50186 465625 0 0 3 0x14200 bored softnet0 34092 49487 0 0 3 0x14200 bored systqmp 375 28684 0 0 3 0x14200 bored systq 69294 437071 0 0 3 0x14200 tmoslp softclockmp 88140 8784 0 0 3 0x40014200 tmoslp softclock 40966 203745 0 0 3 0x40014200 idle0 1 5262 0 0 3 0x8000082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 49206 (syz-executor) thread 0xffff8000ffffc010 (89050) shared rwlock vmmaplk r = 0 (0xfffffd80092f20f0) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1785 #2 uvm_fault_check+0x47 sys/uvm/uvm_fault.c:672 #3 uvm_fault+0x112 sys/uvm/uvm_fault.c:600 #4 upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:188 #5 usertrap+0x2d8 sys/arch/amd64/amd64/trap.c:436 #6 recall_trap+0x8 Process 40519 (syz-executor) thread 0xffff8000ffff4f58 (411001) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835c5630) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 syscall+0xad6 mi_syscall sys/sys/syscall_mi.h:179 [inline] #1 syscall+0xad6 sys/arch/amd64/amd64/trap.c:577 #2 Xsyscall+0x128 Process 87480 (syslogd) thread 0xffff8000ffffd450 (516533) exclusive rrwlock inode r = 0 (0xfffffd806e4ab2c0) #0 witness_lock+0x5b8 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5b8 sys/kern/subr_witness.c:1151 #1 rw_enter+0x41b sys/kern/kern_rwlock.c:309 #2 rrw_enter+0xbe sys/kern/kern_rwlock.c:464 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:564 #5 sys_fsync+0x152 sys/kern/vfs_syscalls.c:2927 #6 syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] #6 syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10233 10310K 10609K 166960K 12836 0 pcb 18 15K 16K 166960K 279 0 rtable 231 17K 19K 166960K 1925 0 pf 40 18K 22K 166960K 501 0 ifaddr 43 8K 8K 166960K 256 0 ifgroup 59 2K 2K 166960K 298 0 sysctl 1 0K 0K 166960K 1 0 counters 66 36K 37K 166960K 190 0 ioctlops 0 0K 4K 166960K 1833 0 iov 1 2K 16K 166960K 85 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1499 94K 94K 166960K 2904 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 25 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 149 0 dirhash 12 2K 3K 166960K 60 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 15 53K 89K 166960K 1535 0 sigio 0 0K 0K 166960K 19 0 proc 70 91K 140K 166960K 1915 0 subproc 104 6K 7K 166960K 728 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 138 0 in_multi 96 7K 7K 166960K 639 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 1149 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 228 76K 95K 166960K 13467 0 UVM aobj 71 5K 5K 166960K 72 0 pinsyscall 40 80K 103K 166960K 3864 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 42 0 NDP 13 0K 1K 166960K 185 0 temp 73 6815K 6881K 166960K 38245 0 kqueue 13 20K 29K 166960K 140 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 178 0 175 1 0 1 1 0 8 0 rtentry 112 646 0 547 4 0 4 4 0 8 0 unpcb 144 931 0 911 15 11 4 6 0 8 3 syncache 336 6 0 6 3 3 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 808 210 0 206 2 1 1 2 0 8 0 arp 120 117 0 99 1 0 1 1 0 8 0 inpcb 336 1426 0 1416 24 17 7 7 0 8 5 nd6 136 172 0 148 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 1 1 1 0 8 1 kcovpl 48 56 0 48 1 0 1 1 0 8 0 ppxss 1168 9 0 9 4 4 0 1 0 8 0 pfstscr 40 2 0 1 1 0 1 1 0 8 0 pffrag 232 6 0 4 1 0 1 1 0 482 0 pffrnode 88 6 0 4 1 0 1 1 0 8 0 pffrent 40 41 0 39 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 43 0 37 1 0 1 1 0 8 0 pfanchor 1288 7 0 5 1 0 1 1 0 8 0 pftag 88 8 0 7 1 0 1 1 0 8 0 pfqueue 264 1 0 1 1 1 0 1 0 8 0 pfstitem 24 91 0 59 1 0 1 1 0 8 0 pfstkey 128 93 0 61 2 0 2 2 0 8 0 pfstate 376 91 0 60 4 0 4 4 0 8 0 pfrule 1344 100 0 28 7 1 6 6 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 2553 0 2139 36 7 29 29 0 8 1 art_table 32 2554 0 2139 4 0 4 4 0 8 0 art_node 16 643 0 554 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 10 1 0 1 1 0 8 0 semapl 112 147 0 137 1 0 1 1 0 8 0 shmpl 112 69 0 1 2 0 2 2 0 8 0 dirhash 1024 49 0 32 3 0 3 3 0 8 0 dino2pl 256 3034 0 1434 101 0 101 101 0 8 0 ffsino 272 3034 0 1434 107 0 107 107 0 8 0 nchpl 144 4337 0 2588 65 0 65 65 0 8 0 uvmvnodes 80 4430 0 0 91 0 91 91 0 8 0 vnodes 216 4430 0 0 247 0 247 247 0 8 0 vnodes: pool(0xffffffff834f66d0:vnodes): page inconsistency: page 0x0; at page head addr 0xfffffd805f113f90 (p 0xfffffd805f113000) namei 1024 20578 0 20577 8 6 2 2 0 8 1 percpumem 16 109 0 62 1 0 1 1 0 8 0 vcpupl 3904 3 0 1 1 0 1 1 0 8 0 vmpool 696 8 0 6 2 1 1 1 0 8 0 pfiaddrpl 120 138 0 7 4 0 4 4 0 8 0 kstatmem 264 150 0 124 3 1 2 3 0 8 0 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 28722 0 28721 13 12 1 8 1 8 0 plimitpl 152 258 0 240 1 0 1 1 0 8 0 sigapl 424 1751 0 1703 10 3 7 7 0 8 1 futexpl 64 13414 0 13408 6 5 1 1 0 8 0 knotepl 120 602 0 0 18 0 18 18 0 8 0 kqueuepl 216 428 0 417 9 4 5 5 0 8 4 pipepl 320 405 0 378 3 0 3 3 0 8 0 fdescpl 496 1730 0 1701 7 2 5 5 0 8 0 filepl 152 10694 0 10439 40 20 20 21 0 8 8 lockfpl 104 314 0 312 1 0 1 1 0 8 0 lockfspl 48 134 0 132 1 0 1 1 0 8 0 sessionpl 144 71 0 62 1 0 1 1 0 8 0 pgrppl 48 136 0 119 1 0 1 1 0 8 0 ucredpl 104 1426 0 1413 1 0 1 1 0 8 0 zombiepl 144 1704 0 1703 1 0 1 1 0 8 0 processpl 1152 1751 0 1703 5 1 4 5 0 8 0 procpl 648 3116 0 3058 9 3 6 7 0 8 0 srpgc 96 8 0 8 3 3 0 1 0 8 0 sosppl 168 1 0 1 1 1 0 1 0 8 0 sockpl 664 2579 0 2546 45 34 11 20 0 8 7 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 5 0 0 1 0 1 1 0 8 0 mcl2k 2048 244 0 0 30 1 29 30 0 8 0 mtagpl 96 17 0 0 1 0 1 1 0 8 0 mbufpl 256 422 0 0 24 0 24 24 0 8 0 bufpl 280 7427 0 1255 441 0 441 441 0 8 0 anonpl 24 288625 0 285135 58 7 51 52 0 185 20 amapchunkpl 152 42052 0 41593 43 11 32 32 0 158 11 amappl16 200 5670 0 5648 21 14 7 7 0 8 4 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 219 0 207 1 0 1 1 0 8 0 amappl13 176 80 0 80 1 1 0 1 0 8 0 amappl12 168 3142 0 3113 3 1 2 2 0 8 0 amappl11 160 58 0 44 1 0 1 1 0 8 0 amappl10 152 17 0 17 1 1 0 1 0 8 0 amappl9 144 135 0 134 1 0 1 1 0 8 0 amappl8 136 26 0 23 1 0 1 1 0 8 0 amappl7 128 272 0 260 1 0 1 1 0 8 0 amappl6 120 638 0 636 1 0 1 1 0 8 0 amappl5 112 324 0 313 1 0 1 1 0 8 0 amappl4 104 474 0 451 1 0 1 1 0 8 0 amappl3 96 8330 0 8224 6 2 4 4 0 8 0 amappl2 88 1299 0 1234 2 0 2 2 0 8 0 amappl1 80 14989 0 14418 14 1 13 14 0 8 0 amappl 88 12688 0 12525 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 71 0 1 2 0 2 2 0 8 0 uaddrrnd 24 1738 0 1707 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1738 0 1707 1 0 1 1 0 8 0 vmmpekpl 168 16758 0 16699 4 0 4 4 0 8 0 vmmpepl 168 112910 0 111120 97 9 88 90 0 357 2 vmsppl 440 1737 0 1707 6 2 4 5 0 8 0 rwobjpl 56 38975 0 33545 78 0 78 78 0 8 0 pdppl 4096 3483 0 3416 165 92 73 83 0 8 6 pvpl 32 28561 0 0 232 2 230 230 0 265 0 pmappl 248 1737 0 1707 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 515 0 133 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8344eff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158 __mp_lock(ffffffff835c5428) at __mp_lock+0x1c __mp_acquire_count(ffffffff835c5428,1) at __mp_acquire_count+0x58 tsleep(fffffd806f4e3698,11,ffffffff83077019,0) at tsleep+0x211 biowait(fffffd806f4e3698) at biowait+0xc1 sys/kern/vfs_bio.c:1254 bwrite(fffffd806f4e3698) at bwrite+0x2e2 sys/kern/vfs_bio.c:766 ffs_update(fffffd806e4ab228,1) at ffs_update+0x34c sys/ufs/ffs/ffs_inode.c:111 VOP_FSYNC(fffffd806e264998,fffffd807f7d3a28,1,ffff8000ffffd450) at VOP_FSYNC+0x108 sys/kern/vfs_vops.c:311 sys_fsync(ffff8000ffffd450,ffff80002a069f80,ffff80002a069ed0) at sys_fsync+0x16f sys/kern/vfs_syscalls.c:2927 syscall(ffff80002a069f80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a069f80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7152293f0d20, count: 1 ddb{0}> trace x86_ipi_db(ffffffff8344eff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c kd_curproc sys/dev/kcov.c:589 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c sys/dev/kcov.c:158 __mp_lock(ffffffff835c5428) at __mp_lock+0x1c __mp_acquire_count(ffffffff835c5428,1) at __mp_acquire_count+0x58 tsleep(fffffd806f4e3698,11,ffffffff83077019,0) at tsleep+0x211 biowait(fffffd806f4e3698) at biowait+0xc1 sys/kern/vfs_bio.c:1254 bwrite(fffffd806f4e3698) at bwrite+0x2e2 sys/kern/vfs_bio.c:766 ffs_update(fffffd806e4ab228,1) at ffs_update+0x34c sys/ufs/ffs/ffs_inode.c:111 VOP_FSYNC(fffffd806e264998,fffffd807f7d3a28,1,ffff8000ffffd450) at VOP_FSYNC+0x108 sys/kern/vfs_vops.c:311 sys_fsync(ffff8000ffffd450,ffff80002a069f80,ffff80002a069ed0) at sys_fsync+0x16f sys/kern/vfs_syscalls.c:2927 syscall(ffff80002a069f80) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a069f80) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7152293f0d20, count: -14 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830519f0) at panic+0x1e5 sys/kern/subr_prf.c:198 vref(fffffd805f113b58) at vref+0x109 sys/kern/vfs_subr.c:698 namei(ffff80002a96e538) at namei+0x533 sys/kern/vfs_lookup.c:221 vn_open(ffff80002a96e538,30001,0) at vn_open+0x13f sys/kern/vfs_vnops.c:140 doopenat(ffff8000ffff4f58,ffffff9c,74be3d818480,30000,0,ffff80002a96e6e0) at doopenat+0x31d sys/kern/vfs_syscalls.c:1123 syscall(ffff80002a96e790) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a96e790) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74be3d817f80, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff830519f0) at panic+0x1e5 sys/kern/subr_prf.c:198 vref(fffffd805f113b58) at vref+0x109 sys/kern/vfs_subr.c:698 namei(ffff80002a96e538) at namei+0x533 sys/kern/vfs_lookup.c:221 vn_open(ffff80002a96e538,30001,0) at vn_open+0x13f sys/kern/vfs_vnops.c:140 doopenat(ffff8000ffff4f58,ffffff9c,74be3d818480,30000,0,ffff80002a96e6e0) at doopenat+0x31d sys/kern/vfs_syscalls.c:1123 syscall(ffff80002a96e790) at syscall+0xaf8 mi_syscall sys/sys/syscall_mi.h:179 [inline] syscall(ffff80002a96e790) at syscall+0xaf8 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74be3d817f80, count: -8