panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:941 cpuid = 0 time = 16 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe005701ecf0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe005701ee50 vpanic() at vpanic+0x257/frame 0xfffffe005701f010 panic() at panic+0xb5/frame 0xfffffe005701f0d0 thread_lock_flags_() at thread_lock_flags_+0x52e/frame 0xfffffe005701f1f0 propagate_priority() at propagate_priority+0xdd/frame 0xfffffe005701f240 turnstile_wait() at turnstile_wait+0x663/frame 0xfffffe005701f2b0 __rw_wlock_hard() at __rw_wlock_hard+0x946/frame 0xfffffe005701f430 _rw_wlock_cookie() at _rw_wlock_cookie+0x1ba/frame 0xfffffe005701f4f0 kmem_back_domain() at kmem_back_domain+0x183/frame 0xfffffe005701f5f0 kmem_malloc_domainset() at kmem_malloc_domainset+0x1e7/frame 0xfffffe005701f730 keg_alloc_slab() at keg_alloc_slab+0x1f1/frame 0xfffffe005701f850 zone_import() at zone_import+0x2f9/frame 0xfffffe005701fa30 cache_alloc() at cache_alloc+0x7e5/frame 0xfffffe005701fb00 cache_alloc_retry() at cache_alloc_retry+0x35/frame 0xfffffe005701fb40 bucket_alloc() at bucket_alloc+0x1a4/frame 0xfffffe005701fb90 cache_free() at cache_free+0x32f/frame 0xfffffe005701fc00 uma_zfree_arg() at uma_zfree_arg+0x497/frame 0xfffffe005701fca0 free() at free+0x115/frame 0xfffffe005701fce0 ktr_submitrequest() at ktr_submitrequest+0xcd/frame 0xfffffe005701fd10 amd64_syscall() at amd64_syscall+0xaa9/frame 0xfffffe005701ff30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe005701ff30 --- syscall (477, FreeBSD ELF64, mmap), rip = 0x3a551a, rsp = 0x820e806f8, rbp = 0x820e80740 --- KDB: enter: panic [ thread pid 1344 tid 100811 ] Stopped at kdb_enter+0x6e: movq $0,0x259e0f7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff828086a0 .str.27 rsp 0xfffffe005701ee30 rbp 0xfffffe005701ee50 rsi 0 rdi 0xffffffff81644349 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0xd r12 0xfffffe005414d780 r13 0xfffffffffffffffe r14 0xffffffff828086a0 .str.27 r15 0 rip 0xffffffff8162da9e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x259e0f7(%rip) db>