panic: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *270564 95174 0 0 0x4000000 0 syz-executor.7 426778 96306 0 0x14000 0x200 1 reaper db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825a4184) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(ffffffff82a6f1a0,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833 __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 sys/kern/kern_lock.c:142 selwakeup(fffffd806d8e4130) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline] selwakeup(fffffd806d8e4130) at selwakeup+0x16 sys/kern/sys_generic.c:885 sorwakeup(fffffd806d8e4018) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699 rip6_input(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at rip6_input+0x6bc sys/netinet6/raw_ip6.c:224 ip_deliver(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at ip_deliver+0x322 sys/netinet/ip_input.c:657 ip6_input_if(ffff80002e3e0a68,ffff80002e3e0a74,29,0,ffff80000019f2a8) at ip6_input_if+0x920 ipv6_input(ffff80000019f2a8,fffffd806a838e00) at ipv6_input+0x48 sys/netinet6/ip6_input.c:169 if_input_local(ffff80000019f2a8,fffffd806a838e00,18) at if_input_local+0x136 sys/net/if.c:778 ip6_output(fffffd806f333900,ffff800000c0a900,fffffd80631edf28,0,0,fffffd80631edeb0) at ip6_output+0xf57 rip6_output(fffffd806f333900,fffffd806f59e008,ffff80002e3e0dd0,0) at rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 rip6_usrreq(fffffd806f59e008,9,fffffd806f333900,0,0,ffff80002e4187e8) at rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 end trace frame: 0xffff80002e3e0f50, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: acquiring blockable sleep lock with spinlock or critical section held (kernel_lock) &kernel_lock ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825a4184) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(ffffffff82a6f1a0,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833 __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 sys/kern/kern_lock.c:142 selwakeup(fffffd806d8e4130) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline] selwakeup(fffffd806d8e4130) at selwakeup+0x16 sys/kern/sys_generic.c:885 sorwakeup(fffffd806d8e4018) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699 rip6_input(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at rip6_input+0x6bc sys/netinet6/raw_ip6.c:224 ip_deliver(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at ip_deliver+0x322 sys/netinet/ip_input.c:657 ip6_input_if(ffff80002e3e0a68,ffff80002e3e0a74,29,0,ffff80000019f2a8) at ip6_input_if+0x920 ipv6_input(ffff80000019f2a8,fffffd806a838e00) at ipv6_input+0x48 sys/netinet6/ip6_input.c:169 if_input_local(ffff80000019f2a8,fffffd806a838e00,18) at if_input_local+0x136 sys/net/if.c:778 ip6_output(fffffd806f333900,ffff800000c0a900,fffffd80631edf28,0,0,fffffd80631edeb0) at ip6_output+0xf57 rip6_output(fffffd806f333900,fffffd806f59e008,ffff80002e3e0dd0,0) at rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 rip6_usrreq(fffffd806f59e008,9,fffffd806f333900,0,0,ffff80002e4187e8) at rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 sosend(fffffd806f59e008,0,ffff80002e3e1008,0,0,0) at sosend+0x632 sys/kern/uipc_socket.c:582 dofilewritev(ffff80002e4187e8,6,ffff80002e3e1008,0,ffff80002e3e1100) at dofilewritev+0x19c sys/kern/sys_generic.c:381 sys_write(ffff80002e4187e8,ffff80002e3e10a8,ffff80002e3e1100) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff80002e3e1170) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff80002e3e1170) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4d8e9136720, count: -19 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002e3e0580 rbx 0xffffffff82987bff cpu_info_full_primary+0x2bff rdx 0 rcx 0 rax 0xffff80002e4187e8 r8 0x101010101010101 r9 0x8080808080808080 r10 0x1126d5c2e6bc0790 r11 0xaf8e3f08a0ca822e r12 0xffffffff82987a00 cpu_info_full_primary+0x2a00 r13 0 r14 0 r15 0x1 rip 0xffffffff815a2d98 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff80002e3e0570 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.7) pid=270564 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=83, nice=20 forw=0xffffffffffffffff, list=0xffff80002e4197a8,0xffffffff82a7b4a0 process=0xffff80002e3cf628 user=0xffff80002e3dc000, vmspace=0xfffffd806a8408b0 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 95174 17393 49970 0 2 0 syz-executor.7 *95174 270564 49970 0 7 0x4000000 syz-executor.7 87603 206045 21325 0 3 0x80 nanoslp syz-executor.2 87603 430532 21325 0 2 0x4000000 syz-executor.2 88120 283419 18330 0 3 0x82 nanoslp syz-executor.3 21325 496125 18330 0 3 0x82 nanoslp syz-executor.2 8316 13481 18330 0 3 0x82 piperd syz-executor.5 49970 123456 18330 0 3 0x82 nanoslp syz-executor.7 89315 83818 18330 0 3 0x82 piperd syz-executor.4 34612 424985 18330 0 3 0x82 nanoslp syz-executor.0 14675 210015 18330 0 3 0x82 piperd syz-executor.6 47961 195273 18330 0 3 0x82 piperd syz-executor.1 92885 501403 0 0 3 0x14280 nfsidl nfsio 38868 157567 0 0 3 0x14280 nfsidl nfsio 32980 415207 0 0 3 0x14280 nfsidl nfsio 63141 38524 0 0 3 0x14280 nfsidl nfsio 62184 337039 0 0 3 0x14280 nfsidl nfsio 21361 81122 0 0 3 0x14280 nfsidl nfsio 90640 133915 0 0 3 0x14280 nfsidl nfsio 86108 17378 0 0 3 0x14280 nfsidl nfsio 98352 304840 0 0 3 0x14280 nfsidl nfsio 72712 161323 0 0 3 0x14280 nfsidl nfsio 10541 233487 0 0 3 0x14280 nfsidl nfsio 57028 176707 0 0 3 0x14280 nfsidl nfsio 67700 304938 0 0 3 0x14280 nfsidl nfsio 46671 40064 0 0 3 0x14280 nfsidl nfsio 928 111575 0 0 3 0x14280 nfsidl nfsio 36280 102798 0 0 3 0x14280 nfsidl nfsio 79876 50452 0 0 3 0x14280 nfsidl nfsio 69754 94086 0 0 3 0x14280 nfsidl nfsio 41279 230504 0 0 3 0x14280 nfsidl nfsio 19370 492103 0 0 3 0x14280 nfsidl nfsio 12053 395909 1 0 3 0x100083 ttyin getty 83030 45810 0 0 3 0x14200 bored sosplice 18330 307382 33713 0 3 0x82 thrsleep syz-fuzzer 18330 356147 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 262042 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 451342 33713 0 2 0x4000082 syz-fuzzer 18330 485669 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 329958 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 259584 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 509507 33713 0 3 0x4000082 thrsleep syz-fuzzer 18330 348978 33713 0 3 0x4000082 thrsleep syz-fuzzer 33713 392507 19482 0 3 0x10008a sigsusp ksh 19482 86092 21850 0 3 0x9a kqread sshd 21850 334120 1 0 3 0x88 kqread sshd 48101 130928 55768 74 3 0x1100092 bpf pflogd 55768 240901 1 0 3 0x80 netio pflogd 10533 305482 29627 73 3 0x1100090 kqread syslogd 29627 6918 1 0 3 0x100082 netio syslogd 62669 97220 1 0 3 0x100080 kqread resolvd 60781 17758 72658 77 3 0x100092 kqread dhcpleased 77247 344792 72658 77 3 0x100092 kqread dhcpleased 72658 43828 1 0 3 0x80 kqread dhcpleased 90801 187580 0 0 3 0x14200 bored smr 32940 329814 0 0 2 0x14200 zerothread 18625 434087 0 0 3 0x14200 aiodoned aiodoned 58431 84345 0 0 3 0x14200 syncer update 11962 252140 0 0 3 0x14200 cleaner cleaner 96306 426778 0 0 7 0x14200 reaper 13224 503888 0 0 3 0x14200 pgdaemon pagedaemon 6281 374657 0 0 3 0x14200 bored viomb 22326 398865 0 0 3 0x40014200 acpi0 acpi0 52033 519779 0 0 3 0x40014200 idle1 15321 40708 0 0 3 0x14200 bored softnet 32486 247329 0 0 3 0x14200 bored systqmp 24782 231626 0 0 3 0x14200 bored systq 22729 298281 0 0 3 0x40014200 bored softclock 97418 519694 0 0 3 0x40014200 idle0 1 345368 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &table->inpt_mtx r = 0 (0xffffffff82a21700) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 rip6_input+0x28f #4 ip_deliver+0x322 sys/netinet/ip_input.c:657 #5 ip6_input_if+0x920 #6 ipv6_input+0x48 sys/netinet6/ip6_input.c:169 #7 if_input_local+0x136 sys/net/if.c:778 #8 ip6_output+0xf57 #9 rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 #10 rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 #11 sosend+0x632 sys/kern/uipc_socket.c:582 #12 dofilewritev+0x19c sys/kern/sys_generic.c:381 #13 sys_write+0x83 sys/kern/sys_generic.c:301 #14 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #14 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #15 Xsyscall+0x128 CPU 1: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff82b87938) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 uvm_pmr_freepageq+0xcc sys/uvm/uvm_pmemrange.c:1333 #4 amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523 #5 uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1599 #6 uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 #7 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 #8 reaper+0x18b sys/kern/kern_exit.c:457 #9 proc_trampoline+0x1c Process 95174 (syz-executor.7) thread 0xffff80002e4187e8 (270564) exclusive rwlock netlock r = 0 (0xffffffff829bbd70) #0 witness_lock+0x44d #1 solock+0x86 sys/kern/uipc_socket2.c:295 #2 sosend+0x517 sys/kern/uipc_socket.c:570 #3 dofilewritev+0x19c sys/kern/sys_generic.c:381 #4 sys_write+0x83 sys/kern/sys_generic.c:301 #5 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #5 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #6 Xsyscall+0x128 exclusive mutex &table->inpt_mtx r = 0 (0xffffffff82a21700) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 rip6_input+0x28f #4 ip_deliver+0x322 sys/netinet/ip_input.c:657 #5 ip6_input_if+0x920 #6 ipv6_input+0x48 sys/netinet6/ip6_input.c:169 #7 if_input_local+0x136 sys/net/if.c:778 #8 ip6_output+0xf57 #9 rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 #10 rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 #11 sosend+0x632 sys/kern/uipc_socket.c:582 #12 dofilewritev+0x19c sys/kern/sys_generic.c:381 #13 sys_write+0x83 sys/kern/sys_generic.c:301 #14 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #14 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #15 Xsyscall+0x128 Process 96306 (reaper) thread 0xffff8000210f8d20 (426778) uvm_fault(0xfffffd806a8408b0, 0x1, 0, 1) -> e kernel: page fault trap, code=0 Faulted in DDB; continuing... ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10224 6633K 7363K 78643K 20664 0 pcb 18 14K 16K 78643K 238 0 rtable 270 23K 24K 78643K 1506 0 ifaddr 101 23K 23K 78643K 685 0 sysctl 2 0K 0K 78643K 2 0 counters 56 35K 35K 78643K 162 0 ioctlops 0 0K 4K 78643K 7483 0 iov 0 0K 16K 78643K 402 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1405 88K 88K 78643K 3958 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 30 0 VM map 2 1K 1K 78643K 2 0 sem 12 0K 0K 78643K 588 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 12 41K 89K 78643K 5754 0 sigio 0 0K 0K 78643K 119 0 proc 71 87K 124K 78643K 1418 0 subproc 104 6K 6K 78643K 455 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 1 0K 0K 78643K 222 0 in_multi 101 6K 6K 78643K 437 0 ether_multi 2 0K 0K 78643K 6 0 mrt 0 0K 0K 78643K 9 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 241 1076K 1076K 78643K 241 0 exec 0 0K 2K 78643K 2061 0 pfkey data 0 0K 0K 78643K 4 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 372 189K 190K 78643K 73053 0 UVM aobj 131 8K 8K 78643K 137 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 2 0K 0K 78643K 65 0 NDP 12 0K 2K 78643K 140 0 temp 819 6087K 6153K 78643K 119433 0 kqueue 12 18K 24K 78643K 193 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 232 0 229 3 2 1 3 0 8 0 rtentry 112 460 0 354 4 0 4 4 0 8 0 unpcb 136 3126 0 3111 38 37 1 6 0 8 0 syncache 296 16 0 16 5 5 0 1 0 8 0 tcpqe 32 33 0 33 4 4 0 1 0 8 0 tcpcb 736 925 0 919 48 46 2 8 0 8 1 arp 120 79 0 59 1 0 1 1 0 8 0 inpcb 312 2680 0 2666 51 49 2 11 0 8 0 rttmr 72 3 0 3 1 1 0 1 0 8 0 nd6 48 115 0 91 1 0 1 1 0 8 0 pkpcb 40 74 0 74 3 3 0 1 0 8 0 kcovpl 48 35 0 27 1 0 1 1 0 8 0 ppxss 1248 14 0 14 5 5 0 1 0 8 0 pffrag 232 17 0 17 3 2 1 1 0 482 1 pffrnode 88 17 0 17 3 2 1 1 0 8 1 pffrent 40 177 0 177 3 2 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrke_plain 168 2 0 2 1 1 0 1 0 8 0 pfrktable 1344 87 0 71 2 0 2 2 0 8 0 pftag 88 9 0 6 1 0 1 1 0 8 0 pfstitem 24 20 0 18 1 0 1 1 0 8 0 pfstkey 112 20 0 18 1 0 1 1 0 8 0 pfstate 320 20 0 18 2 1 1 2 0 8 0 pfsrctr 152 4 0 4 1 1 0 1 0 8 0 pfrule 1360 245 0 124 13 2 11 11 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1863 0 1403 37 8 29 31 0 8 0 art_table 32 1864 0 1403 4 0 4 4 0 8 0 art_node 16 459 0 365 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 0 1 0 1 1 0 8 0 semapl 112 583 0 573 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 8341 0 6780 98 0 98 98 0 8 0 ffsino 272 8341 0 6780 105 0 105 105 0 8 0 nchpl 144 16030 0 14408 63 0 63 63 0 8 0 rtmask 32 4 0 4 1 1 0 1 0 8 0 uvmvnodes 80 6173 0 0 126 0 126 126 0 8 0 vnodes 224 6173 0 0 364 0 364 364 0 8 0 namei 1024 66009 0 66009 4 3 1 2 0 8 1 percpumem 16 93 0 53 1 0 1 1 0 8 0 vcpupl 2048 6 0 0 1 0 1 1 0 8 0 vmpool 560 15 0 9 3 2 1 1 0 8 0 pfiaddrpl 120 85 0 26 2 0 2 2 0 8 0 scsiplug 72 5 0 5 1 1 0 1 0 8 0 scxspl 216 46206 0 46206 17 16 1 8 0 8 1 plimitpl 152 382 0 367 1 0 1 1 0 8 0 sigapl 424 6021 0 5959 8 0 8 8 0 8 0 futexpl 64 44368 0 44368 1 0 1 1 0 8 1 knotepl 120 382 0 0 7 0 7 7 0 8 0 kqueuepl 216 893 0 885 17 16 1 5 0 8 0 pipepl 336 899 0 871 27 19 8 8 0 8 5 fdescpl 496 5986 0 5961 5 1 4 5 0 8 0 filepl 152 40021 0 39775 61 46 15 20 0 8 5 lockfpl 104 1280 0 1276 4 3 1 2 0 8 0 lockfspl 48 340 0 337 1 0 1 1 0 8 0 sessionpl 144 55 0 38 1 0 1 1 0 8 0 pgrppl 48 55 0 38 1 0 1 1 0 8 0 ucredpl 96 3668 0 3656 1 0 1 1 0 8 0 zombiepl 144 5961 0 5959 1 0 1 1 0 8 0 processpl 1064 6021 0 5959 5 0 5 5 0 8 0 procpl 672 16253 0 16178 23 14 9 9 0 8 0 srpgc 96 6 0 6 2 2 0 1 0 8 0 sosppl 168 30 0 30 5 5 0 1 0 8 0 sockpl 480 6179 0 6148 175 167 8 29 0 8 4 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 13 0 0 2 0 2 2 0 8 0 mcl12k 12288 25 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 33 0 0 5 2 3 3 0 8 0 mcl2k2 2112 7 0 0 1 0 1 1 0 8 0 mcl2k 2048 258 0 0 29 3 26 29 0 8 0 mtagpl 96 459 0 0 11 0 11 11 0 8 0 mbufpl 256 717 0 0 42 0 42 42 0 8 0 bufpl 288 14129 0 7793 453 0 453 453 0 8 0 anonpl 24 2249254 0 2230265 249 63 186 197 0 186 10 amapchunkpl 152 176168 0 175318 61 24 37 39 0 158 0 amappl16 200 52134 0 51541 282 219 63 78 0 8 19 amappl15 192 1167 0 1160 1 0 1 1 0 8 0 amappl14 184 430 0 427 1 0 1 1 0 8 0 amappl13 176 1356 0 1353 1 0 1 1 0 8 0 amappl12 168 580 0 579 2 1 1 1 0 8 0 amappl11 160 1376 0 1360 1 0 1 1 0 8 0 amappl10 152 380 0 372 1 0 1 1 0 8 0 amappl9 144 632 0 628 1 0 1 1 0 8 0 amappl8 136 1804 0 1715 5 1 4 4 0 8 0 amappl7 128 900 0 886 1 0 1 1 0 8 0 amappl6 120 464 0 434 2 1 1 2 0 8 0 amappl5 112 4965 0 4946 1 0 1 1 0 8 0 amappl4 104 3583 0 3547 4 2 2 2 0 8 0 amappl3 96 1416 0 1404 1 0 1 1 0 8 0 amappl2 88 2139 0 2089 3 1 2 3 0 8 0 amappl1 80 110648 0 110093 19 5 14 19 0 8 0 amappl 88 72081 0 71831 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 6001 0 5969 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 6001 0 5969 1 0 1 1 0 8 0 vmmpekpl 168 46945 0 46884 4 0 4 4 0 8 0 vmmpepl 168 587312 0 584866 224 80 144 165 0 357 8 vmsppl 368 6000 0 5968 5 1 4 4 0 8 0 rwobjpl 56 174589 0 166685 139 18 121 125 0 8 2 pdppl 4096 12009 0 11942 362 287 75 81 0 8 8 pvpl 32 3517866 0 3496115 419 126 293 304 0 265 26 pmappl 248 6000 0 5968 4 1 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 1295 0 422 26 0 26 26 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825a4184) at panic+0x177 sys/kern/subr_prf.c:202 witness_checkorder(ffffffff82a6f1a0,9,0) at witness_checkorder+0x116d sys/kern/subr_witness.c:833 __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 read_rflags machine/cpufunc.h:195 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 intr_disable machine/cpufunc.h:216 [inline] __mp_lock(ffffffff82a6ef98) at __mp_lock+0xa1 sys/kern/kern_lock.c:142 selwakeup(fffffd806d8e4130) at selwakeup+0x16 klist_empty sys/sys/event.h:361 [inline] selwakeup(fffffd806d8e4130) at selwakeup+0x16 sys/kern/sys_generic.c:885 sorwakeup(fffffd806d8e4018) at sorwakeup+0xc9 sys/kern/uipc_socket.c:1699 rip6_input(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at rip6_input+0x6bc sys/netinet6/raw_ip6.c:224 ip_deliver(ffff80002e3e0a68,ffff80002e3e0a74,85,18) at ip_deliver+0x322 sys/netinet/ip_input.c:657 ip6_input_if(ffff80002e3e0a68,ffff80002e3e0a74,29,0,ffff80000019f2a8) at ip6_input_if+0x920 ipv6_input(ffff80000019f2a8,fffffd806a838e00) at ipv6_input+0x48 sys/netinet6/ip6_input.c:169 if_input_local(ffff80000019f2a8,fffffd806a838e00,18) at if_input_local+0x136 sys/net/if.c:778 ip6_output(fffffd806f333900,ffff800000c0a900,fffffd80631edf28,0,0,fffffd80631edeb0) at ip6_output+0xf57 rip6_output(fffffd806f333900,fffffd806f59e008,ffff80002e3e0dd0,0) at rip6_output+0x4ad sys/netinet6/raw_ip6.c:490 rip6_usrreq(fffffd806f59e008,9,fffffd806f333900,0,0,ffff80002e4187e8) at rip6_usrreq+0x5d3 sys/netinet6/raw_ip6.c:679 sosend(fffffd806f59e008,0,ffff80002e3e1008,0,0,0) at sosend+0x632 sys/kern/uipc_socket.c:582 dofilewritev(ffff80002e4187e8,6,ffff80002e3e1008,0,ffff80002e3e1100) at dofilewritev+0x19c sys/kern/sys_generic.c:381 sys_write(ffff80002e4187e8,ffff80002e3e10a8,ffff80002e3e1100) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff80002e3e1170) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff80002e3e1170) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4d8e9136720, count: -19 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 _rb_nfind(ffffffff828d7198,fffffd8003711000,fffffd80080755e0) at _rb_nfind+0x58 sys/kern/subr_tree.c:473 uvm_pmr_pnaddr(fffffd8003711000,fffffd80080755e0,ffff800021134f00,ffff800021134f08) at uvm_pmr_pnaddr+0x57 sys/uvm/uvm_pmemrange.c:301 uvm_pmr_insert_addr(fffffd8003711000,fffffd80080755e0,0) at uvm_pmr_insert_addr+0x73 sys/uvm/uvm_pmemrange.c:415 uvm_pmr_remove_1strange(ffff800021135088,0,0,0) at uvm_pmr_remove_1strange+0x635 uvm_pmr_insert sys/uvm/uvm_pmemrange.c:478 [inline] uvm_pmr_remove_1strange(ffff800021135088,0,0,0) at uvm_pmr_remove_1strange+0x635 sys/uvm/uvm_pmemrange.c:696 uvm_pmr_freepageq(ffff800021135088) at uvm_pmr_freepageq+0x126 sys/uvm/uvm_pmemrange.c:1345 amap_wipeout(fffffd805b6435b8) at amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523 uvm_unmap_detach(ffff800021135150,1) at uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1599 uvm_map_teardown(fffffd80637cbd10) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 uvmspace_free(fffffd80637cbd10) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 reaper(ffff8000210f8d20) at reaper+0x18b sys/kern/kern_exit.c:457 end trace frame: 0x0, count: 2 ddb{1}> trace x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 _rb_nfind(ffffffff828d7198,fffffd8003711000,fffffd80080755e0) at _rb_nfind+0x58 sys/kern/subr_tree.c:473 uvm_pmr_pnaddr(fffffd8003711000,fffffd80080755e0,ffff800021134f00,ffff800021134f08) at uvm_pmr_pnaddr+0x57 sys/uvm/uvm_pmemrange.c:301 uvm_pmr_insert_addr(fffffd8003711000,fffffd80080755e0,0) at uvm_pmr_insert_addr+0x73 sys/uvm/uvm_pmemrange.c:415 uvm_pmr_remove_1strange(ffff800021135088,0,0,0) at uvm_pmr_remove_1strange+0x635 uvm_pmr_insert sys/uvm/uvm_pmemrange.c:478 [inline] uvm_pmr_remove_1strange(ffff800021135088,0,0,0) at uvm_pmr_remove_1strange+0x635 sys/uvm/uvm_pmemrange.c:696 uvm_pmr_freepageq(ffff800021135088) at uvm_pmr_freepageq+0x126 sys/uvm/uvm_pmemrange.c:1345 amap_wipeout(fffffd805b6435b8) at amap_wipeout+0x1ff sys/uvm/uvm_amap.c:523 uvm_unmap_detach(ffff800021135150,1) at uvm_unmap_detach+0x7d sys/uvm/uvm_map.c:1599 uvm_map_teardown(fffffd80637cbd10) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 uvmspace_free(fffffd80637cbd10) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 reaper(ffff8000210f8d20) at reaper+0x18b sys/kern/kern_exit.c:457 end trace frame: 0x0, count: -13