panic: assertwaitok: non-zero mutex count: 1 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *123302 83087 0 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff3a16) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff834d7750,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd806ef6e6c0,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd806ef6e6c0,20000000,20800000,5,0,0,556e6370180916a5) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4f1468,ffff80003760f430,ffff80003760f380) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff80003760f430) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3be8f17a6b0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: assertwaitok: non-zero mutex count: 1 ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff3a16) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff834d7750,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd806ef6e6c0,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd806ef6e6c0,20000000,20800000,5,0,0,556e6370180916a5) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4f1468,ffff80003760f430,ffff80003760f380) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff80003760f430) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3be8f17a6b0, count: -11 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003760f000 rbx 0 rdx 0 rcx 0 rax 0xffff80002a4f1468 r8 0x101010101010101 r9 0x8080808080808080 r10 0x79bfbccc52fb369c r11 0x87c0c9abdd97b518 r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff82391265 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003760eff0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=123302 pid=83087 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a4f0f58,0xffff80002a4f0038 process=0xffff8000ffff9578 user=0xffff80003760a000, vmspace=0xfffffd806ef6e6c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 83087 455463 33930 0 3 0x90 fsleep syz-executor 83087 426751 33930 0 3 0x4000010 vmmaplk syz-executor *83087 123302 33930 0 7 0x4000010 syz-executor 83087 373335 33930 0 2 0x4000010 syz-executor 76392 167142 51154 0 2 0 syz-executor 35900 103862 34875 0 3 0x80 fsleep syz-executor 35900 474290 34875 0 3 0x4000080 bell syz-executor 229 427391 51453 0 3 0x80 fsleep syz-executor 229 424689 51453 0 3 0x4000080 lockf syz-executor 11137 13147 97247 0 3 0x80 fsleep syz-executor 11137 201223 97247 0 3 0x4000080 sbwait syz-executor 79983 184360 86910 0 3 0x80 fsleep syz-executor 79983 50356 86910 0 3 0x4000080 sbwait syz-executor 69870 141345 0 0 3 0x14200 acct acct 22808 296150 0 0 3 0x14280 nfsidl nfsio 65882 343875 0 0 3 0x14280 nfsidl nfsio 62855 366744 0 0 3 0x14280 nfsidl nfsio 9145 136012 0 0 3 0x14280 nfsidl nfsio 26203 100451 0 0 3 0x14280 nfsidl nfsio 94868 97348 0 0 3 0x14280 nfsidl nfsio 96746 125463 0 0 3 0x14280 nfsidl nfsio 14230 449850 0 0 3 0x14280 nfsidl nfsio 31908 175519 0 0 3 0x14280 nfsidl nfsio 78446 191010 0 0 3 0x14280 nfsidl nfsio 777 318431 0 0 3 0x14280 nfsidl nfsio 43016 386212 0 0 3 0x14280 nfsidl nfsio 44690 370438 0 0 3 0x14280 nfsidl nfsio 78026 458581 0 0 3 0x14280 nfsidl nfsio 30099 81917 0 0 3 0x14280 nfsidl nfsio 85203 500464 0 0 3 0x14280 nfsidl nfsio 99465 378452 0 0 3 0x14280 nfsidl nfsio 73067 112566 0 0 3 0x14280 nfsidl nfsio 47757 491599 0 0 3 0x14280 nfsidl nfsio 70202 100341 0 0 3 0x14280 nfsidl nfsio 33930 82316 84823 0 3 0x82 nanoslp syz-executor 72160 191949 84823 0 3 0x82 wait syz-executor 37576 217522 0 0 3 0x14200 bored sosplice 51453 425073 84823 0 2 0x3 syz-executor 34875 219054 84823 0 3 0x82 nanoslp syz-executor 97247 514652 84823 0 2 0x3 syz-executor 51154 77132 84823 0 2 0x2 syz-executor 89813 453926 84823 0 2 0x2 syz-executor 86910 429049 84823 0 2 0x3 syz-executor 84823 523958 11004 0 3 0x82 kqread syz-executor 11004 146043 6074 0 3 0x10008a sigsusp ksh 6074 409592 21606 0 3 0x98 kqread sshd-session 21606 132746 1 0 3 0x92 kqread sshd-session 94336 283172 1 0 3 0x100083 ttyin getty 28556 487782 47295 73 3 0x1100090 kqread syslogd 47295 330986 1 0 3 0x100082 sbwait syslogd 10316 438223 1 0 3 0x100080 kqread resolvd 66905 268852 71156 77 3 0x100092 kqread dhcpleased 60999 520947 71156 77 3 0x100092 kqread dhcpleased 71156 300299 1 0 3 0x80 kqread dhcpleased 52990 413674 0 0 3 0x14200 bored smr 43055 252492 0 0 2 0x14200 zerothread 26171 522093 0 0 3 0x14200 aiodoned aiodoned 84953 101968 0 0 3 0x14200 syncer update 991 115967 0 0 3 0x14200 cleaner cleaner 99415 117684 0 0 3 0x14200 reaper reaper 82057 270253 0 0 3 0x14200 pgdaemon pagedaemon 56932 29565 0 0 3 0x14200 bored viomb 92722 330523 0 0 3 0x40014200 acpi0 acpi0 1379 318089 0 0 3 0x14200 bored softnet3 22080 443551 0 0 3 0x14200 bored softnet2 15743 61525 0 0 3 0x14200 bored softnet1 13265 45694 0 0 3 0x14200 bored softnet0 42517 51127 0 0 3 0x14200 bored systqmp 51696 339307 0 0 3 0x14200 bored systq 66783 51319 0 0 3 0x40014200 tmoslp softclock 94040 406405 0 0 3 0x40014200 idle0 1 360849 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10205 11127K 11711K 166960K 12850 0 pcb 17 16K 18K 166960K 542 0 rtable 181 6K 7K 166960K 789 0 pf 35 14K 22K 166960K 120 0 ifaddr 36 6K 7K 166960K 106 0 ifgroup 50 2K 2K 166960K 145 0 sysctl 4 1K 3K 166960K 6 0 counters 30 17K 17K 166960K 53 0 ioctlops 0 0K 8K 166960K 400 0 iov 0 0K 16K 166960K 260 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1426 90K 90K 166960K 2350 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 13K 166960K 34 0 VM map 2 1K 1K 166960K 2 0 sem 17 10K 10K 166960K 51 0 dirhash 12 2K 2K 166960K 36 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 17 61K 97K 166960K 1490 0 sigio 0 0K 0K 166960K 79 0 proc 60 59K 124K 166960K 821 0 subproc 104 6K 6K 166960K 208 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 263 0 in_multi 69 5K 7K 166960K 258 0 ether_multi 1 0K 0K 166960K 5 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 235 1049K 1049K 166960K 235 0 exec 0 0K 1K 166960K 640 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 208 71K 90K 166960K 14865 0 UVM aobj 49 2K 4K 166960K 55 0 pinsyscall 36 72K 104K 166960K 2725 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 74 0 NDP 11 0K 1K 166960K 74 0 temp 78 6817K 6883K 166960K 79039 0 kqueue 13 20K 30K 166960K 236 0 SYN cache 2 2352K 2360K 166960K 3 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 243 0 239 2 0 2 2 0 8 1 rtentry 112 251 0 172 4 0 4 4 0 8 0 unpcb 144 1214 0 1193 12 6 6 6 0 8 5 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpqe 32 9 0 9 2 1 1 1 0 8 1 tcpcb 808 562 0 555 21 13 8 8 0 8 7 arp 88 44 0 28 1 0 1 1 0 8 0 ipq 40 9 0 8 1 0 1 1 0 8 0 ipqe 40 61 0 60 1 0 1 1 0 8 0 inpcb 336 2164 0 2152 31 23 8 18 0 8 6 nd6 104 54 0 39 1 0 1 1 0 8 0 pkpcb 40 11 0 11 3 2 1 1 0 8 1 kcovpl 48 16 0 8 1 0 1 1 0 8 0 ppxss 1072 4 0 4 2 1 1 1 0 8 1 pfstscr 40 4 0 4 2 1 1 1 0 8 1 pfrktable 1344 3 0 2 2 1 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 2 0 2 1 1 0 1 0 8 0 pfstitem 24 8 0 4 1 0 1 1 0 8 0 pfstkey 128 13 0 5 1 0 1 1 0 8 0 pfstate 344 8 0 6 1 0 1 1 0 8 0 pfrule 1344 15 0 12 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1083 0 750 31 3 28 29 0 8 5 art_table 32 1085 0 750 4 0 4 4 0 8 0 art_node 16 245 0 177 1 0 1 1 0 8 0 sysvmsgpl 40 15 0 7 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 46 0 31 1 0 1 1 0 8 0 shmpl 112 52 0 6 2 0 2 2 0 8 0 dirhash 1024 33 0 16 3 0 3 3 0 8 0 dino2pl 256 3752 0 2243 95 0 95 95 0 8 0 ffsino 240 3752 0 2243 90 0 90 90 0 8 0 nchpl 144 5792 0 4101 64 0 64 64 0 8 0 uvmvnodes 80 4511 0 0 93 0 93 93 0 8 0 vnodes 216 4511 0 0 251 0 251 251 0 8 0 namei 1024 19767 0 19767 5 3 2 2 0 8 2 kstatmem 264 68 0 46 2 0 2 2 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 6 0 6 2 1 1 1 0 8 1 scxspl 216 38883 0 38883 15 7 8 8 1 8 8 plimitpl 152 368 0 352 1 0 1 1 0 8 0 sigapl 424 1779 0 1713 9 1 8 8 0 8 0 futexpl 64 19547 0 19542 1 0 1 1 0 8 0 knotepl 120 49693 0 49643 38 27 11 17 0 8 8 kqueuepl 184 347 0 338 1 0 1 1 0 8 0 pipepl 288 262 0 235 5 2 3 5 0 8 0 fdescpl 432 1738 0 1710 5 1 4 5 0 8 0 filepl 120 10974 0 10723 22 8 14 14 0 8 5 lockfpl 104 462 0 458 1 0 1 1 0 8 0 lockfspl 48 161 0 158 1 0 1 1 0 8 0 sessionpl 144 31 0 24 1 0 1 1 0 8 0 pgrppl 48 96 0 81 1 0 1 1 0 8 0 ucredpl 104 1557 0 1545 1 0 1 1 0 8 0 zombiepl 144 2163 0 2162 1 0 1 1 0 8 0 processpl 1096 1779 0 1713 5 0 5 5 0 8 0 procpl 648 3768 0 3694 8 0 8 8 0 8 1 sosppl 168 7 0 7 2 1 1 1 0 8 1 sockpl 504 3721 0 3684 64 51 13 29 0 8 8 mcl64k 65536 45 0 45 2 1 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k 9216 2 0 2 2 1 1 1 0 8 1 mcl8k 8192 21 0 21 3 2 1 1 0 8 1 mcl4k 4096 4427 0 4375 17 9 8 16 0 8 1 mcl2k2 2112 1 0 1 1 1 0 1 0 8 0 mcl2k 2048 1644 0 1640 8 2 6 6 0 8 5 mtagpl 96 67 0 55 1 0 1 1 0 8 0 mbufpl 256 18402 0 18246 29 7 22 22 0 8 3 bufpl 280 10469 0 3708 484 0 484 484 0 8 0 anonpl 24 325813 0 322802 127 48 79 79 0 187 49 amapchunkpl 152 51130 0 50679 57 17 40 40 0 158 19 amappl16 200 6997 0 6965 39 28 11 15 0 8 8 amappl15 192 14 0 13 1 0 1 1 0 8 0 amappl14 184 129 0 120 1 0 1 1 0 8 0 amappl13 176 10 0 10 1 1 0 1 0 8 0 amappl12 168 2477 0 2450 3 1 2 3 0 8 0 amappl11 160 49 0 39 1 0 1 1 0 8 0 amappl10 152 28 0 28 1 1 0 1 0 8 0 amappl9 144 130 0 130 1 1 0 1 0 8 0 amappl8 136 24 0 23 1 0 1 1 0 8 0 amappl7 128 115 0 106 1 0 1 1 0 8 0 amappl6 120 250 0 248 1 0 1 1 0 8 0 amappl5 112 158 0 149 1 0 1 1 0 8 0 amappl4 104 311 0 301 1 0 1 1 0 8 0 amappl3 96 10345 0 10245 5 2 3 4 0 8 0 amappl2 88 767 0 712 2 0 2 2 0 8 0 amappl1 80 12045 0 11616 16 4 12 14 0 8 0 amappl 88 14335 0 14176 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 1 0 1 0 8 0 dma128 128 255 0 255 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 54 0 6 1 0 1 1 0 8 0 uaddrrnd 24 1738 0 1710 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1738 0 1710 1 0 1 1 0 8 0 vmmpekpl 168 13739 0 13681 3 0 3 3 0 8 0 vmmpepl 168 111100 0 109509 99 11 88 88 0 357 13 vmsppl 344 1737 0 1710 4 1 3 4 0 8 0 rwobjpl 24 36202 0 30899 32 0 32 32 0 8 0 pdppl 4096 3482 0 3420 114 48 66 82 0 8 4 pvpl 32 986793 0 977734 593 236 357 357 0 265 262 pmappl 216 1737 0 1710 3 1 2 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 527 0 167 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff3a16) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff834d7750,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd806ef6e6c0,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd806ef6e6c0,20000000,20800000,5,0,0,556e6370180916a5) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4f1468,ffff80003760f430,ffff80003760f380) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff80003760f430) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3be8f17a6b0, count: -11 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff3a16) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff834d7750,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd806ef6e6c0,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd806ef6e6c0,20000000,20800000,5,0,0,556e6370180916a5) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4f1468,ffff80003760f430,ffff80003760f380) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff80003760f430) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3be8f17a6b0, count: -11