panic: mq notifiers left cpuid = 1 time = 6 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00571ae810 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00571ae970 vpanic() at vpanic+0x257/frame 0xfffffe00571aeb30 panic() at panic+0xb5/frame 0xfffffe00571aec00 mq_proc_exit() at mq_proc_exit+0x1cc/frame 0xfffffe00571aec50 exit1() at exit1+0x62b/frame 0xfffffe00571aecf0 sys_exit() at sys_exit+0x28/frame 0xfffffe00571aed10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe00571aef30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00571aef30 --- syscall (1, FreeBSD ELF64, exit), rip = 0x3a1e9a, rsp = 0x82113ac18, rbp = 0x82113ac20 --- KDB: enter: panic [ thread pid 1273 tid 100726 ] Stopped at kdb_enter+0x6e: movq $0,0x25c3b67(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe0002bf1850 rdx 0 rbx 0xffffffff827be6c0 .str.27 rsp 0xfffffe00571ae950 rbp 0xfffffe00571ae970 rsi 0 rdi 0xffffffff81611af9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0xfffffe00541ab550 r12 0xfffffe00541ab000 r13 0xfffffffffffffffd r14 0xffffffff827be6c0 .str.27 r15 0 rip 0xffffffff815fb62e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c3b67(%rip) db> show proc Process 1273 (syz-executor) at 0xfffffe00541a7000: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 1178 at 0xfffffe00540deac0 ABI: FreeBSD ELF64 flag: 0x10002000 flag2: 0x40000 arguments: ./syz-executor exec reaper: 0xfffffe0007809040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00540a9920 (map 0xfffffe00540a9920) (map.pmap 0xfffffe00540a99c0) (pmap 0xfffffe00540a9a30) threads: 1 100726 Run CPU 1 syz-executor db> ps pid ppid pgrp uid state wmesg wchan cmd 1273 1178 1178 0 RE CPU 1 syz-executor 1272 764 764 0 R (threaded) syz-executor 100728 Run CPU -1 syz-executor 100729 S select 0xfffffe000764d440 syz-executor 1265 1 1178 0 S uwait 0xfffffe006deb6b00 syz-executor 1261 1259 766 0 SV sbwait 0xfffffe005984760c syz-executor 1260 1259 766 0 SV uwait 0xfffffe007b255080 syz-executor 1259 766 766 0 T (threaded) syz-executor 100707 s syz-executor 100708 D ppwait 0xfffffe00541a8520 syz-executor 100711 D ppwait 0xfffffe0054177560 syz-executor 1256 0 0 0 DL mdwait 0xfffffe0058623000 [md5] 1255 1 1178 0 S uwait 0xfffffe00584f4500 syz-executor 1250 1 764 0 S uwait 0xfffffe007b233200 syz-executor 1249 1 764 0 S uwait 0xfffffe00584f4b00 syz-executor 1247 1 764 0 S uwait 0xfffffe00584f1380 syz-executor 1240 1239 1178 0 S uwait 0xfffffe00584f4c00 syz-executor 1239 1 1178 0 SV wait 0xfffffe0054192580 syz-executor 1233 1 764 0 SV uwait 0xfffffe007b232d00 syz-executor 1230 1 1178 0 S uwait 0xfffffe007b232c00 syz-executor 1227 1 764 0 S uwait 0xfffffe0057d8f880 syz-executor 1226 1 766 0 S uwait 0xfffffe00584f2d00 syz-executor 1224 1 1224 0 Ss+ ttyin 0xfffffe0053fdacb0 getty 1223 1 1223 0 Ss+ ttyin 0xfffffe005861d0b0 getty 1222 1 1222 0 Ss+ ttyin 0xfffffe005861d4b0 getty 1221 1 1221 0 Ss+ ttyin 0xfffffe005861d8b0 getty 1220 1 1220 0 Ss+ ttyin 0xfffffe005861dcb0 getty 1219 1 1219 0 Ss+ ttyin 0xfffffe005861e0b0 getty 1218 1 1218 0 Ss+ ttyin 0xfffffe005861e4b0 getty 1217 1 1217 0 Ss+ ttyin 0xfffffe005861e8b0 getty 1216 1 1216 0 Ss+ ttyin 0xfffffe005861ecb0 getty 1207 1 1178 0 SV select 0xfffffe0057e03940 syz-executor 1203 1 766 0 S uwait 0xfffffe00584f4780 syz-executor 1192 1 1178 0 S uwait 0xfffffe0077ec8280 syz-executor 1187 1 764 0 SV uwait 0xfffffe007b233500 syz-executor 1178 762 1178 0 S nanslp 0xffffffff83ba0341 syz-executor 1175 1 764 0 S uwait 0xfffffe0057cfc580 syz-executor 1169 1 766 0 S uwait 0xfffffe007b233300 syz-executor 1159 0 0 0 DL mdwait 0xfffffe006e496000 [md4] 1157 1 766 0 S uwait 0xfffffe006deb9980 syz-executor 1154 1 764 0 SV uwait 0xfffffe0077ec8380 syz-executor 1144 1 764 0 S uwait 0xfffffe006deb9b00 syz-executor 1134 1 766 0 S uwait 0xfffffe006deb8580 syz-executor 1131 1 766 0 S uwait 0xfffffe0077ec9a80 syz-executor 1129 1 764 0 SV uwait 0xfffffe006deb6c80 syz-executor 1124 1 766 0 S uwait 0xfffffe007b255880 syz-executor 1118 1 764 0 S uwait 0xfffffe0077ec8b80 syz-executor 1116 1 764 0 S uwait 0xfffffe006deb9900 syz-executor 1115 1 764 0 S uwait 0xfffffe006deb9000 syz-executor 1113 1 766 0 SV uwait 0xfffffe006deb6680 syz-executor 1107 1 764 0 S uwait 0xfffffe0077ec8980 syz-executor 1106 1 764 0 S uwait 0xfffffe0057d92d80 syz-executor 1100 1 766 0 S uwait 0xfffffe006deb8400 syz-executor 1095 1 766 0 S uwait 0xfffffe006deb8480 syz-executor 1088 1 764 0 S uwait 0xfffffe006deb6780 syz-executor 1087 1 764 0 S uwait 0xfffffe00584f1400 syz-executor 1086 1 766 0 S uwait 0xfffffe00584f2100 syz-executor 1082 0 0 0 DL mdwait 0xfffffe0053e1b000 [md3] 1081 0 0 0 DL mdwait 0xfffffe007a905000 [md2] 1078 1 1077 0 S uwait 0xfffffe006deb7f00 syz-executor 1072 1 764 0 SV uwait 0xfffffe006deb6980 syz-executor 1067 1 766 0 S uwait 0xfffffe00584f2080 syz-executor 1058 1 764 0 S uwait 0xfffffe006deb9480 syz-executor 1056 1 766 0 S uwait 0xfffffe00584f1d80 syz-executor 1047 1 766 0 S uwait 0xfffffe0077ec9c80 syz-executor 1045 1 764 0 SV uwait 0xfffffe00584f1780 syz-executor 1042 1 766 0 SV uwait 0xfffffe00584f1300 syz-executor 1041 1 766 0 SV uwait 0xfffffe00584f2800 syz-executor 1038 1 764 0 S uwait 0xfffffe00584f1600 syz-executor 1032 1 764 0 S uwait 0xfffffe006deb7180 syz-executor 1025 1 1023 0 S uwait 0xfffffe0077ec9b80 syz-executor 1018 1 764 0 S uwait 0xfffffe006deb9d00 syz-executor 1015 1 766 0 S uwait 0xfffffe0077ec9980 syz-executor 1013 1 766 0 S uwait 0xfffffe006deb9280 syz-executor 1009 1 765 0 T (threaded) syz-executor 100260 s syz-executor 100374 s syz-executor 100376 D reapst 0xfffffe005700aa08 syz-executor 100383 s syz-executor 994 0 0 0 DL mdwait 0xfffffe007a906000 [md1] 975 1 766 0 S uwait 0xfffffe006deb7480 syz-executor 968 1 766 0 S uwait 0xfffffe0057cfcc00 syz-executor 967 0 0 0 DL (threaded) [KTLS] 100099 D - 0xfffffe0007a76300 [thr_0] 100249 D - 0xfffffe0007a76380 [thr_1] 100250 D - 0xffffffff83cb1c28 [reclaim_0] 966 962 962 0 TL tun_con 0xfffffe006def7528 ifconfig 965 1 766 0 S uwait 0xfffffe0057d8f080 syz-executor 963 1 765 0 S uwait 0xfffffe0057d8fa80 syz-executor 962 762 962 0 S wait 0xfffffe0007809b00 syz-executor 960 0 0 0 DL mdwait 0xfffffe006e495000 [md0] 951 1 766 0 S uwait 0xfffffe0057d8f680 syz-executor 948 1 766 0 S uwait 0xfffffe0057cfce00 syz-executor 947 1 763 0 SV uwait 0xfffffe006deb7a00 syz-executor 946 1 764 0 S uwait 0xfffffe006deb8280 syz-executor 943 1 763 0 S uwait 0xfffffe0057cfcf00 syz-executor 941 1 764 0 S uwait 0xfffffe0057d8f280 syz-executor 931 1 764 0 S uwait 0xfffffe006deb6e00 syz-executor 928 1 764 0 S uwait 0xfffffe00584f1c80 syz-executor 918 1 766 0 S uwait 0xfffffe006deb8e00 syz-executor 917 1 766 0 S uwait 0xfffffe00584f1980 syz-executor 914 1 764 0 S umtxn 0xfffffe00584f3080 syz-executor 908 1 766 0 S uwait 0xfffffe0057d8f980 syz-executor 877 1 766 0 S uwait 0xfffffe006deb7c00 syz-executor 869 1 763 0 S uwait 0xfffffe006deb6f00 syz-executor 866 1 763 0 S uwait 0xfffffe006deb7900 syz-executor 852 1 764 0 S uwait 0xfffffe006deb7b00 syz-executor 844 1 764 0 S uwait 0xfffffe006deb8700 syz-executor 833 1 764 60928 S uwait 0xfffffe006deb8080 syz-executor 821 0 0 0 DL aiordy 0xfffffe00540cc5c0 [aiod4] 820 0 0 0 DL aiordy 0xfffffe00541035a0 [aiod3] 819 0 0 0 DL aiordy 0xfffffe0054103b00 [aiod2] 817 0 0 0 DL aiordy 0xfffffe00540cc060 [aiod1] 815 0 0 0 DL (threaded) [so_splice] 100126 D - 0xfffffe006dddb900 [thr_0] 100127 D - 0xfffffe006dddb940 [thr_1] 766 762 766 0 S nanslp 0xffffffff83ba0340 syz-executor 764 762 764 0 S nanslp 0xffffffff83ba0341 syz-executor 762 760 760 0 S select 0xfffffe0057e01340 syz-executor 760 1 760 0 Ss sigsusp 0xfffffe00540e1670 csh 16 0 0 0 DL syncer 0xffffffff83cbde20 [syncer] 15 0 0 0 DL vlruwt 0xfffffe0054002560 [vnlru] 14 0 0 0 DL (threaded) [bufdaemon] 100079 D psleep 0xffffffff83cbc360 [bufdaemon] 100082 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100092 D sdflush 0xfffffe00596378e8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d072c0 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100077 D psleep 0xffffffff83ced388 [dom0] 100080 D launds 0xffffffff83ced394 [laundry: dom0] 100081 D umarcl 0xffffffff81ddd9b0 [uma] 7 0 0 0 DL - 0xffffffff83918cd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843d89e0 [pf purge] 5 0 0 0 DL waiting 0xffffffff846d5700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100045 D - 0xffffffff838e3340 [doneq0] 100046 D - 0xffffffff838e32c0 [async] 100075 D - 0xffffffff838e3140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100042 D crypto_ 0xffffffff83ce8c40 [crypto] 100043 D crypto_ 0xfffffe0053ed8730 [crypto returns 0] 100044 D crypto_ 0xfffffe0053ed8780 [crypto returns 1] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b48d00 [g_event] 100038 D - 0xffffffff83b48d20 [g_up] 100039 D - 0xffffffff83b48d40 [g_down] 2 0 0 0 WL (threaded) [clock] 100031 I [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100047 I [irq24: virtio_pci0] 100048 I [irq25: virtio_pci0] 100049 I [irq26: virtio_pci0] 100050 I [irq27: virtio_pci0] 100051 I [irq28: virtio_pci1] 100052 I [irq29: virtio_pci1] 100053 I [irq30: virtio_pci1] 100054 I [irq31: virtio_pci1] 100055 I [irq32: virtio_pci1] 100060 I [irq10: virtio_pci2] 100062 I [irq1: atkbd0] 100063 I [irq12: psm0] 100064 I [swi0: uart uart++] 100068 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0007809040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce96e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c35ff0 [swapper] 100005 D - 0xfffffe00083fc000 [softirq_0] 100006 D - 0xfffffe00083fbe00 [softirq_1] 100007 D - 0xfffffe00083fbd00 [if_io_tqg_0] 100008 D - 0xfffffe00083fbc00 [if_io_tqg_1] 100009 D - 0xfffffe00083fbb00 [if_config_tqg_0] 100010 D - 0xfffffe00083fba00 [kqueue_ctx taskq] 100011 D - 0xfffffe00083fb900 [jail_remove taskq] 100012 D - 0xfffffe00083fb800 [bus taskq] 100015 s [thread taskq] 100017 D - 0xfffffe00083fb300 [aiod_kick taskq] 100018 D - 0xfffffe00083fb200 [deferred_unmount ta] 100019 D - 0xfffffe00083fb100 [inm_free taskq] 100020 D - 0xfffffe00083fb000 [in6m_free taskq] 100021 D - 0xfffffe00083fae00 [linuxkpi_irq_wq] 100022 D - 0xfffffe00083fad00 [linuxkpi_short_wq_0] 100023 D - 0xfffffe00083fad00 [linuxkpi_short_wq_1] 100024 D - 0xfffffe00083fad00 [linuxkpi_short_wq_2] 100025 D - 0xfffffe00083fad00 [linuxkpi_short_wq_3] 100026 D - 0xfffffe00083fac00 [linuxkpi_long_wq_0] 100027 D - 0xfffffe00083fac00 [linuxkpi_long_wq_1] 100028 D - 0xfffffe00083fac00 [linuxkpi_long_wq_2] 100029 D - 0xfffffe00083fac00 [linuxkpi_long_wq_3] 100036 D - 0xfffffe00083fab00 [firmware taskq] 100040 D - 0xfffffe00083faa00 [crypto_0] 100041 D - 0xfffffe00083faa00 [crypto_1] 100056 D - 0xfffffe00083fa800 [vtnet0 rxq 0] 100057 D - 0xfffffe00083fa700 [vtnet0 txq 0] 100058 D - 0xfffffe00083fa600 [vtnet0 rxq 1] 100059 D - 0xfffffe00083fa500 [vtnet0 txq 1] 100061 D vtbslp 0xfffffe0057e03c80 [virtio_balloon] 100065 D - 0xffffffff827c3aa0 [deadlkres] 100069 D - 0xfffffe00593e5300 [acpi_task_0] 100070 D - 0xfffffe00593e5300 [acpi_task_1] 100071 D - 0xfffffe00593e5300 [acpi_task_2] 100073 D - 0xfffffe00083fc100 [mca taskq] 100074 D - 0xfffffe00083fa900 [CAM taskq] 100076 D - 0xfffffe00083fa000 [ipsec_offload] 100264 D - 0xfffffe00083f9e00 [system_taskq_0] 100265 D - 0xfffffe00083f9e00 [system_taskq_1] 100266 D - 0xfffffe00083f9500 [system_delay_taskq_] 100267 D - 0xfffffe00083f9500 [system_delay_taskq_] 100268 D - 0xfffffe00083f9a00 [zvol_tq-0_0] 100269 D - 0xfffffe00083f9a00 [zvol_tq-0_1] 100270 D - 0xfffffe00083f9a00 [zvol_tq-0_2] 100271 D - 0xfffffe00083f9a00 [zvol_tq-0_3] 100272 D - 0xfffffe00083f9a00 [zvol_tq-0_4] 100273 D - 0xfffffe00083f9a00 [zvol_tq-0_5] 100274 D - 0xfffffe00083f9a00 [zvol_tq-0_6] 100275 D - 0xfffffe00083f9a00 [zvol_tq-0_7] 100276 D - 0xfffffe00083f9a00 [zvol_tq-0_8] 100277 D - 0xfffffe00083f9a00 [zvol_tq-0_9] 100278 D - 0xfffffe00083f9a00 [zvol_tq-0_10] 100279 D - 0xfffffe00083f9a00 [zvol_tq-0_11] 100280 D - 0xfffffe00083f9a00 [zvol_tq-0_12] 100281 D - 0xfffffe00083f9a00 [zvol_tq-0_13] 100282 D - 0xfffffe00083f9a00 [zvol_tq-0_14] 100283 D - 0xfffffe00083f9a00 [zvol_tq-0_15] 100284 D - 0xfffffe00083f9a00 [zvol_tq-0_16] 100285 D - 0xfffffe00083f9a00 [zvol_tq-0_17] 100286 D - 0xfffffe00083f9a00 [zvol_tq-0_18] 100287 D - 0xfffffe00083f9a00 [zvol_tq-0_19] 100288 D - 0xfffffe00083f9a00 [zvol_tq-0_20] 100289 D - 0xfffffe00083f9a00 [zvol_tq-0_21] 100290 D - 0xfffffe00083f9a00 [zvol_tq-0_22] 100291 D - 0xfffffe00083f9a00 [zvol_tq-0_23] 100292 D - 0xfffffe00083f9a00 [zvol_tq-0_24] 100293 D - 0xfffffe00083f9a00 [zvol_tq-0_25] 100294 D - 0xfffffe00083f9a00 [zvol_tq-0_26] 100295