*cpu0: uvm_fault(0xffff8000017c53d8, 0x8, 0, 1) -> e ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace savectx() at savectx+0x9e end of kernel end trace frame: 0xbc33396fb00, count: -1 ddb{1}> show registers rdi 0xffffffff85431260 panicstr rsi 0xffffffff84e83360 __sancov_gen_cov_switch_values.22 rbp 0xffff800039377350 rbx 0 rdx 0 rcx 0xffff800028fe3ff0 rax 0x32 r8 0xffff800039377220 r9 0x1 r10 0 r11 0xffffffff8237d880 x86_bus_space_io_read_1 r12 0 r13 0 r14 0xffff8000342f6d30 r15 0 rip 0xffffffff8449f34e savectx+0x9e cs 0x8 rflags 0x46 rsp 0xffff8000393772d0 ss 0x10 savectx+0x9e: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=477795 pid=56296 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=24, usrpri=86, slppri=24, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000298f27e8,0xffff8000342f6fd8 process=0xffff8000298edcf0 user=0xffff80003936c000, vmspace=0xffff8000017c53d8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 41872 418547 0 0 2 0x14000 0x200 swapper 33289 89641 94407 0 2 0x2 0 ifconfig 94407 135274 74327 0 3 0x100002 0x88 sigsusp sh 56296 493945 47017 0 2 0 0 syz-executor 56296 488521 47017 0 3 0 0x4000080 fsleep syz-executor *56296 477795 47017 0 7 0 0x4000000 syz-executor 56296 414356 47017 0 7 0 0x4000000 syz-executor 33031 492452 19563 0 3 0 0x80 nanoslp syz-executor 33031 390721 19563 0 3 0 0x4000080 piperd syz-executor 33031 289312 19563 0 3 0 0x4000080 fsleep syz-executor 91441 114213 90054 0 3 0x2 0x80 piperd syz-executor 74327 180395 90054 0 3 0x2 0x80 wait syz-executor 47017 72407 90054 0 3 0x2 0x80 nanoslp syz-executor 30872 459955 90054 0 3 0x2 0x80 piperd syz-executor 49519 421173 90054 0 3 0x2 0x80 piperd syz-executor 19563 41043 90054 0 3 0x2 0x80 nanoslp syz-executor 90054 390648 69746 0 3 0x2 0x80 wait syz-executor 69746 502545 30604 0 3 0x100002 0x88 sigsusp ksh 30604 196719 30172 0 3 0x10 0x88 kqread sshd-session 30172 445133 72495 0 3 0x12 0x80 kqread sshd-session 62788 467644 1 0 3 0x100003 0x80 ttyin getty 72495 250755 1 0 3 0 0x88 kqread sshd 85043 264118 71078 74 3 0x1100012 0x80 bpf pflogd 71078 318638 1 0 3 0 0x80 sbwait pflogd 71430 221219 31901 73 3 0x1100010 0x80 kqread syslogd 31901 360776 1 0 3 0x100002 0x80 sbwait syslogd 66945 352647 1 0 3 0x100000 0x80 kqread resolvd 12686 118969 91471 77 3 0x100012 0x80 kqread dhcpleased 52332 493492 91471 77 3 0x100012 0x80 kqread dhcpleased 91471 388884 1 0 3 0 0x80 kqread dhcpleased 21357 235107 0 0 3 0x14000 0x200 bored smr 96870 256017 0 0 2 0x14000 0x200 zerothread 60990 91405 0 0 3 0x14000 0x200 aiodoned aiodoned 65183 497517 0 0 3 0x14000 0x200 syncer update 87759 345499 0 0 3 0x14000 0x200 cleaner cleaner 6531 393385 0 0 3 0x14000 0x200 reaper reaper 15931 510424 0 0 3 0x14000 0x200 pgdaemon pagedaemon 31227 75402 0 0 3 0x14000 0x200 bored viomb 21921 493387 0 0 3 0x14000 0x40000200 acpi0 acpi0 54524 353966 0 0 3 0x14000 0x40000200 idle1 17528 493017 0 0 3 0x14000 0x200 bored softnet1 75767 28352 0 0 3 0x14000 0x200 bored softnet0 3467 242297 0 0 3 0x14000 0x200 bored systqmp 63009 266855 0 0 3 0x14000 0x200 bored systq 7382 6170 0 0 3 0x14000 0x200 tmoslp softclockmp 40032 340192 0 0 3 0x14000 0x40000200 tmoslp softclock 28444 181761 0 0 3 0x14000 0x40000200 idle0 1 109693 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &pr->ps_mtx r = 0 (0xffffffff85d371f8) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 mtx_enter+0x683 sys/kern/kern_lock.c:487 #2 knote_processfork+0x666 sys/kern/kern_event.c:-1 #3 fork1+0x1225 sys/kern/kern_fork.c:511 #4 kthread_create+0xa8 sys/kern/kern_kthread.c:61 #5 nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702 #6 nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894 #7 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 #8 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791 #9 Xsyscall+0x128 CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff85e26e90) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 mtx_enter+0x683 sys/kern/kern_lock.c:487 #2 sleep_setup+0x12e sys/kern/kern_synch.c:304 #3 sys_futex+0x62f futex_wait sys/kern/sys_futex.c:306 [inline] #3 sys_futex+0x62f sys/kern/sys_futex.c:155 #4 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791 #5 Xsyscall+0x128 Process 56296 (syz-executor) thread 0xffff8000342f6568 (414356) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff85cda380) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 sysctl_vslock+0x72 sys/kern/kern_sysctl.c:197 #2 sys_sysctl+0x460 sys/kern/kern_sysctl.c:304 #3 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #3 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791 #4 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff85073238) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 sysctl_vslock+0x37 sys/kern/kern_sysctl.c:192 #3 sys_sysctl+0x460 sys/kern/kern_sysctl.c:304 #4 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0x1089 sys/arch/amd64/amd64/trap.c:791 #5 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11071 12271K 12430K 166960K 12689 0 pcb 17 28K 30K 166960K 64 0 rtable 232 20K 20K 166960K 3236 0 pf 36 22K 23K 166960K 357 0 ifaddr 42 13K 14K 166960K 440 0 ifgroup 59 2K 2K 166960K 468 0 sysctl 4 1K 13K 166960K 9 0 counters 72 43K 43K 166960K 276 0 ioctlops 0 0K 4K 166960K 1741 0 iov 0 0K 24K 166960K 38 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1327 85K 86K 166960K 2725 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 328K 332K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 15 0K 0K 166960K 15 0 dirhash 15 2K 2K 166960K 15 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 14 49K 93K 166960K 1981 0 sigio 0 0K 0K 166960K 67 0 proc 80 145K 210K 166960K 3326 0 subproc 72 9K 9K 166960K 936 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 10 0 in_multi 89 6K 7K 166960K 1146 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 47 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 73 506K 506K 166960K 73 0 exec 0 0K 2K 166960K 1673 0 fusefs mount 1 36K 36K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 194 231K 268K 166960K 14938 0 UVM aobj 14 4K 4K 166960K 16 0 pinsyscall 1063 1777K 1811K 166960K 5622 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 19 0K 2K 166960K 321 0 temp 35 9162K 9202K 166960K 23019 0 kqueue 14 41K 52K 166960K 102 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 224 0 221 1 0 1 1 0 8 0 rtentry 176 1165 0 1061 7 2 5 6 0 8 0 unpcb 144 818 0 800 3 1 2 2 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpcb 736 63 0 58 4 3 1 4 0 8 0 arp 136 210 0 193 1 0 1 1 0 8 0 inpcb 328 814 0 805 9 7 2 7 0 8 1 nd6 152 312 0 289 1 0 1 1 0 8 0 pkpcb 40 2 0 2 2 2 0 1 0 8 0 kcovpl 48 104 0 96 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 1 0 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 2 2 1 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pftag 88 4 0 1 2 1 1 1 0 8 0 pfqueue 320 1 0 1 1 1 0 1 0 8 0 pfstitem 24 77 0 35 1 0 1 1 0 8 0 pfstkey 128 77 0 35 2 0 2 2 0 8 0 pfstate 448 77 0 35 5 0 5 5 0 8 0 pfrule 1360 61 0 56 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 4688 0 4264 36 9 27 29 0 8 0 art_table 40 4689 0 4264 5 0 5 5 0 8 0 art_node 32 1165 0 1070 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 2 1 0 1 1 0 8 0 semupl 112 3 0 3 2 2 0 1 0 8 0 semapl 72 13 0 0 1 0 1 1 0 8 0 shmpl 112 13 0 2 1 0 1 1 0 8 0 dirhash 1024 19 0 0 3 0 3 3 0 8 0 dino2pl 256 2378 0 685 106 0 106 106 0 8 0 ffsino 296 2378 0 685 131 0 131 131 0 8 0 nchpl 144 3174 0 1078 78 0 78 78 0 8 0 vnodes 216 3696 0 0 206 0 206 206 0 8 0 namei 1024 26282 0 26282 4 3 1 3 0 8 1 percpumem 16 154 0 102 1 0 1 1 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 kstatmem 264 235 0 204 4 1 3 3 0 8 0 scxspl 216 10611 0 10611 6 5 1 3 1 8 1 plimitpl 152 219 0 202 1 0 1 1 0 8 0 sigapl 424 2108 0 2063 9 3 6 7 0 8 0 knotepl 120 194 0 0 6 0 6 6 0 8 0 kqueuepl 224 127 0 117 1 0 1 1 0 8 0 pipepl 344 638 0 610 18 12 6 9 0 8 3 fdescpl 528 2091 0 2063 3 0 3 3 0 8 0 filepl 160 9248 0 9033 19 6 13 15 0 8 2 lockfpl 104 150 0 148 1 0 1 1 0 8 0 lockfspl 48 74 0 72 1 0 1 1 0 8 0 sessionpl 144 140 0 131 1 0 1 1 0 8 0 pgrppl 48 250 0 233 1 0 1 1 0 8 0 ucredpl 104 531 0 518 1 0 1 1 0 8 0 zombiepl 144 2065 0 2063 1 0 1 1 0 8 0 processpl 1232 2108 0 2063 6 1 5 5 0 8 0 procpl 664 3031 0 2981 8 2 6 6 0 8 1 sosppl 176 18 0 18 2 1 1 1 0 8 1 sockpl 752 1870 0 1840 12 6 6 11 0 8 2 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k128 9344 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 1 15 16 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 41 0 0 4 0 4 4 0 8 0 mextrefs 64 33 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 244 0 0 15 0 15 15 0 8 0 bufpl 272 3209 0 108 207 0 207 207 0 8 0 anonpl 32 7410 0 0 60 0 60 60 0 222 0 amapchunkpl 152 39960 0 39607 23 2 21 21 0 158 3 amappl16 200 2957 0 2941 24 21 3 14 0 8 0 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 1578 0 1576 1 0 1 1 0 8 0 amappl13 176 350 0 338 1 0 1 1 0 8 0 amappl12 168 2732 0 2706 2 0 2 2 0 8 0 amappl11 160 9 0 9 2 2 0 1 0 8 0 amappl10 152 83 0 68 1 0 1 1 0 8 0 amappl9 144 268 0 268 2 1 1 1 0 8 1 amappl8 136 487 0 482 1 0 1 1 0 8 0 amappl7 128 340 0 327 1 0 1 1 0 8 0 amappl6 120 1122 0 1119 1 0 1 1 0 8 0 amappl5 112 119 0 107 1 0 1 1 0 8 0 amappl4 104 582 0 562 1 0 1 1 0 8 0 amappl3 96 7601 0 7530 3 0 3 3 0 8 0 amappl2 88 1849 0 1774 2 0 2 2 0 8 0 amappl1 80 24382 0 23787 18 3 15 15 0 8 1 amappl 88 12534 0 12410 4 0 4 4 0 92 0 uvmvnodes 80 104 0 0 3 0 3 3 0 8 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 15 0 2 1 0 1 1 0 8 0 uaddrrnd 24 2091 0 2063 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2091 0 2063 1 0 1 1 0 8 0 vmmpekpl 168 18303 0 18260 3 0 3 3 0 8 0 vmmpepl 168 141582 0 139901 99 12 87 94 0 357 4 vmsppl 488 2090 0 2063 5 0 5 5 0 8 0 rwobjpl 80 40774 0 39763 28 4 24 27 0 8 0 pdppl 4096 4190 0 4126 258 178 80 86 0 8 16 pvpl 32 12678 0 0 105 2 103 103 0 265 0 pmappl 256 2090 0 2063 3 0 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 672 0 199 15 0 15 15 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff84f15ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 sys/arch/amd64/amd64/bus_space.c:689 acpitimer_delay(1) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline] acpitimer_delay(1) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:120 comcnputc(800,20) at comcnputc+0x162 sys/dev/ic/com.c:1264 cnputc(20) at cnputc+0xaf sys/dev/cons.c:218 db_putchar(66) at db_putchar+0x126 db_force_whitespace sys/ddb/db_output.c:102 [inline] db_putchar(66) at db_putchar+0x126 sys/ddb/db_output.c:153 kprintf() at kprintf+0x2aad sys/kern/subr_prf.c:1065 db_printf(ffffffff84c97900) at db_printf+0x102 sys/kern/subr_prf.c:-1 db_ktrap(6,0,ffff800029a063d0) at db_ktrap+0x1ea db_printtrap sys/arch/amd64/amd64/db_interface.c:103 [inline] db_ktrap(6,0,ffff800029a063d0) at db_ktrap+0x1ea sys/arch/amd64/amd64/db_interface.c:128 kerntrap(ffff800029a063d0) at kerntrap+0x26d sys/arch/amd64/amd64/trap.c:523 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b knote_processfork(ffffffff85d370e0,a390) at knote_processfork+0x287 sys/kern/kern_event.c:2246 end trace frame: 0xffff800029a06710, count: 0 ddb{0}> trace x86_ipi_db(ffffffff84f15ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x29 sys/arch/amd64/amd64/bus_space.c:689 acpitimer_delay(1) at acpitimer_delay+0x14e acpitimer_read sys/dev/acpi/acpitimer.c:146 [inline] acpitimer_delay(1) at acpitimer_delay+0x14e sys/dev/acpi/acpitimer.c:120 comcnputc(800,20) at comcnputc+0x162 sys/dev/ic/com.c:1264 cnputc(20) at cnputc+0xaf sys/dev/cons.c:218 db_putchar(66) at db_putchar+0x126 db_force_whitespace sys/ddb/db_output.c:102 [inline] db_putchar(66) at db_putchar+0x126 sys/ddb/db_output.c:153 kprintf() at kprintf+0x2aad sys/kern/subr_prf.c:1065 db_printf(ffffffff84c97900) at db_printf+0x102 sys/kern/subr_prf.c:-1 db_ktrap(6,0,ffff800029a063d0) at db_ktrap+0x1ea db_printtrap sys/arch/amd64/amd64/db_interface.c:103 [inline] db_ktrap(6,0,ffff800029a063d0) at db_ktrap+0x1ea sys/arch/amd64/amd64/db_interface.c:128 kerntrap(ffff800029a063d0) at kerntrap+0x26d sys/arch/amd64/amd64/trap.c:523 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b knote_processfork(ffffffff85d370e0,a390) at knote_processfork+0x287 sys/kern/kern_event.c:2246 fork1(ffffffff85d36d80,f0,ffffffff830a12e0,0,0,ffff800029a06760) at fork1+0x1225 sys/kern/kern_fork.c:511 kthread_create(ffffffff830a12e0,0,0,ffffffff84b844a0) at kthread_create+0xa8 sys/kern/kern_kthread.c:61 nfs_getset_niothreads(1) at nfs_getset_niothreads+0xe7 sys/nfs/nfs_syscalls.c:702 nfs_sysctl(ffff800029a06968,1,0,ffff800029a06940,200000000200,0,ffff800029a06bc0) at nfs_sysctl+0x102 sys/nfs/nfs_vfsops.c:894 sys_sysctl(ffff8000342f6568,ffff800029a06bc0,ffff800029a06b20) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff800029a06bc0) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029a06bc0) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:791 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbc2d741e500, count: -21 ddb{0}> machine ddbcpu 1 Stopped at savectx+0x9e: movl $0,%gs:0x688 savectx() at savectx+0x9e end of kernel end trace frame: 0xbc33396fb00, count: 14 ddb{1}> trace savectx() at savectx+0x9e end of kernel end trace frame: 0xbc33396fb00, count: -1