panic: Caught invalid memory access at ffff800001e0b3b0 size 104 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *247662 97910 0 0 0x4000000 0K syz-executor 230254 53421 0 0x2 0x1 1 syz-executor db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff8463360e) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff800001e0b3b0,ffff800001e00478,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0) at sysctl_sysvipc+0x422 sys/kern/kern_sysctl.c:2777 kern_sysctl_dirs(33,ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0,0,1,1ffff00007779034) at kern_sysctl_dirs+0x407 sys/kern/kern_sysctl.c:445 kern_sysctl(ffff80003bbc85e4,2,200000000040,ffff80003bbc85c0,0,0,ffff80003bbc8830) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ff6a80,ffff80003bbc8830,ffff80003bbc87a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff80003bbc8830) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003bbc8830) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x121383af180, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff800001e0b3b0 size 104 op 1 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff8463360e) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff800001e0b3b0,ffff800001e00478,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0) at sysctl_sysvipc+0x422 sys/kern/kern_sysctl.c:2777 kern_sysctl_dirs(33,ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0,0,1,1ffff00007779034) at kern_sysctl_dirs+0x407 sys/kern/kern_sysctl.c:445 kern_sysctl(ffff80003bbc85e4,2,200000000040,ffff80003bbc85c0,0,0,ffff80003bbc8830) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ff6a80,ffff80003bbc8830,ffff80003bbc87a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff80003bbc8830) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003bbc8830) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x121383af180, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bbc7df0 rbx 0xffff80003bbc7e60 rdx 0 rcx 0xffffffff84f6aff0 cpu_info_full_primary+0x1ff0 rax 0xffff800000168e00 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003bbc7bd8 r11 0xffffffff82eaa450 x86_bus_space_io_read_1 r12 0xffffffff8463360e .str.31+0x9cb8e r13 0xffffffff84f6bc08 cpu_info_full_primary+0x2c08 r14 0xffffffff84f6be07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff8309ec97 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bbc7df0 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=247662 pid=97910 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ff7248,0xffff800045ff67f8 process=0xffff80003b340e90 user=0xffff80003bbbd000, vmspace=0xffff800001c3f200 estcpu=36, cpticks=21, pctcpu=0.0, user=0, sys=21, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 97910 330294 52960 0 2 0 syz-executor *97910 247662 52960 0 7 0x4000000 syz-executor 88296 133138 76882 0 2 0xc80 syz-executor 88296 80753 76882 0 3 0x4000080 fsleep syz-executor 88296 19894 76882 0 3 0x4000080 sbwait syz-executor 88296 462815 76882 0 3 0x4000080 fsleep syz-executor 40837 417463 85487 0 2 0x10 syz-executor 40837 151178 85487 0 2 0x4000c90 syz-executor 49472 169626 53421 0 2 0x1 syz-executor 49472 412660 53421 0 3 0x4000081 fsleep syz-executor 49472 245175 53421 0 3 0x4000081 fsleep syz-executor 22960 262200 91476 0 2 0xc80 syz-executor 22960 442874 91476 0 3 0x4000080 fsleep syz-executor 22960 489263 91476 0 3 0x4000080 fsleep syz-executor 30194 98301 64849 0 2 0x1000c80 syz-executor 30194 216610 64849 0 3 0x5000080 sbwait syz-executor 30194 381078 64849 0 3 0x5000080 fsleep syz-executor 71821 265842 0 0 3 0x14200 acct acct 53421 230254 93130 0 7 0x3 syz-executor 52960 166274 93130 0 2 0xc82 syz-executor 64849 246362 93130 0 2 0xc82 syz-executor 76882 200627 93130 0 2 0xc82 syz-executor 70032 271776 93130 0 2 0xc82 syz-executor 85487 227212 93130 0 2 0xc82 syz-executor 91476 352500 93130 0 2 0xc82 syz-executor 93130 253943 89338 0 3 0x82 wait syz-executor 89338 299807 46818 0 3 0x10008a sigsusp ksh 46818 55834 60884 0 3 0x98 kqread sshd-session 60884 398756 71967 0 3 0x92 kqread sshd-session 19714 24707 1 0 3 0x100083 ttyin getty 71967 9966 1 0 3 0x88 kqread sshd 43008 432176 45635 74 3 0x1100092 bpf pflogd 45635 78579 1 0 3 0x80 sbwait pflogd 68384 328611 59977 73 2 0x1100090 syslogd 59977 459961 1 0 3 0x100082 sbwait syslogd 15671 470033 1 0 3 0x100080 kqread resolvd 43058 35138 69693 77 3 0x100092 kqread dhcpleased 355 177377 69693 77 3 0x100092 kqread dhcpleased 69693 207552 1 0 3 0x80 kqread dhcpleased 70562 367924 0 0 2 0x14200 smr 31990 120145 0 0 2 0x14200 zerothread 58317 59248 0 0 3 0x14200 aiodoned aiodoned 84496 244856 0 0 3 0x14200 syncer update 6574 128049 0 0 3 0x14200 cleaner cleaner 67053 255708 0 0 3 0x14200 reaper reaper 70943 387889 0 0 3 0x14200 pgdaemon pagedaemon 97114 221039 0 0 3 0x14200 bored viomb 33618 12461 0 0 3 0x40014200 acpi0 acpi0 62154 59344 0 0 3 0x40014200 idle1 96292 68344 0 0 3 0x14200 bored softnet1 49501 45324 0 0 3 0x14200 bored softnet0 55341 195115 0 0 3 0x14200 bored systqmp 31323 361130 0 0 3 0x14200 bored systq 34594 271206 0 0 2 0x14200 softclockmp 10195 427057 0 0 3 0x40014200 tmoslp softclock 83917 222808 0 0 3 0x40014200 idle0 1 7817 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11059 12248K 12325K 166960K 12197 0 pcb 20 24K 24K 166960K 35 0 rtable 239 12K 13K 166960K 353 0 pf 34 22K 1051K 166960K 54 0 ifaddr 43 12K 12K 166960K 48 0 ifgroup 55 2K 2K 166960K 69 0 sysctl 2 1K 13K 166960K 6 0 counters 70 42K 43K 166960K 76 0 ioctlops 0 0K 4K 166960K 1491 0 iov 0 0K 16K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1299 84K 84K 166960K 1430 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 10K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 13 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 218 0 sigio 0 0K 0K 166960K 1 0 proc 76 160K 177K 166960K 562 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 49 344K 344K 166960K 49 0 exec 0 0K 2K 166960K 386 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 239 245K 280K 166960K 3903 0 UVM aobj 131 8K 8K 166960K 131 0 pinsyscall 1066 1752K 1754K 166960K 1377 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 12 0K 2K 166960K 31 0 temp 39 9179K 9182K 166960K 4093 0 kqueue 17 56K 56K 166960K 43 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 31 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 235 0 212 6 0 6 6 0 8 5 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 85 0 80 7 0 7 7 0 8 6 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 173 0 161 7 0 7 7 0 8 6 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 25 0 0 1 0 1 1 0 8 0 pfstkey 128 25 0 0 1 0 1 1 0 8 0 pfstate 448 25 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 40 454 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 72 10 0 0 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1732 0 255 93 0 93 93 0 8 0 ffsino 296 1732 0 255 114 0 114 114 0 8 0 nchpl 144 2055 0 345 64 0 64 64 0 8 0 vnodes 216 1849 0 0 103 0 103 103 0 8 0 namei 1024 6700 0 6700 1 0 1 1 0 8 1 percpumem 16 54 0 3 1 0 1 1 0 8 0 kstatmem 264 33 0 6 2 0 2 2 0 8 0 scxspl 216 7712 0 7712 11 3 8 8 1 8 8 plimitpl 152 35 0 17 1 0 1 1 0 8 0 sigapl 424 539 0 491 7 0 7 7 0 8 1 knotepl 120 70 0 0 3 0 3 3 0 8 0 kqueuepl 224 55 0 40 1 0 1 1 0 8 0 pipepl 344 178 0 150 6 0 6 6 0 8 3 fdescpl 528 520 0 489 3 0 3 3 0 8 0 filepl 160 2702 0 2469 18 0 18 18 0 8 7 lockfpl 104 113 0 110 1 0 1 1 0 8 0 lockfspl 48 23 0 20 1 0 1 1 0 8 0 sessionpl 144 29 0 19 1 0 1 1 0 8 0 pgrppl 48 37 0 19 1 0 1 1 0 8 0 ucredpl 104 269 0 254 1 0 1 1 0 8 0 zombiepl 144 493 0 491 1 0 1 1 0 8 0 processpl 1232 539 0 491 5 0 5 5 0 8 0 procpl 664 707 0 648 6 0 6 6 0 8 0 sockpl 752 442 0 404 24 1 23 24 0 8 19 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 218 0 0 14 0 14 14 0 8 0 bufpl 272 2555 0 106 164 0 164 164 0 8 0 anonpl 32 7643 0 0 62 0 62 62 0 222 0 amapchunkpl 152 11104 0 10604 22 0 22 22 0 158 1 amappl16 200 2210 0 2182 17 4 13 15 0 8 8 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 431 0 430 1 0 1 1 0 8 0 amappl13 176 123 0 110 1 0 1 1 0 8 0 amappl12 168 769 0 739 2 0 2 2 0 8 0 amappl11 160 14 0 14 1 1 0 1 0 8 0 amappl10 152 64 0 50 1 0 1 1 0 8 0 amappl9 144 270 0 270 1 1 0 1 0 8 0 amappl8 136 113 0 111 1 0 1 1 0 8 0 amappl7 128 147 0 134 1 0 1 1 0 8 0 amappl6 120 159 0 157 1 0 1 1 0 8 0 amappl5 112 106 0 96 1 0 1 1 0 8 0 amappl4 104 292 0 273 1 0 1 1 0 8 0 amappl3 96 2042 0 1926 4 0 4 4 0 8 0 amappl2 88 544 0 484 2 0 2 2 0 8 0 amappl1 80 10583 0 9977 16 0 16 16 0 8 3 amappl 88 3164 0 2998 5 0 5 5 0 92 0 uvmvnodes 80 103 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 520 0 489 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 520 0 489 1 0 1 1 0 8 0 vmmpekpl 168 6506 0 6468 2 0 2 2 0 8 0 vmmpepl 168 42690 0 40765 97 0 97 97 0 357 10 vmsppl 488 519 0 489 5 0 5 5 0 8 1 rwobjpl 80 15853 0 14685 27 0 27 27 0 8 1 pdppl 4096 1049 0 978 105 32 73 89 0 8 2 pvpl 32 15215 0 0 124 1 123 123 0 265 0 pmappl 256 519 0 489 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 449 0 37 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff8463360e) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff800001e0b3b0,ffff800001e00478,68) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0) at sysctl_sysvipc+0x422 sys/kern/kern_sysctl.c:2777 kern_sysctl_dirs(33,ffff80003bbc85e8,1,200000000040,ffff80003bbc85c0,0,1,1ffff00007779034) at kern_sysctl_dirs+0x407 sys/kern/kern_sysctl.c:445 kern_sysctl(ffff80003bbc85e4,2,200000000040,ffff80003bbc85c0,0,0,ffff80003bbc8830) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ff6a80,ffff80003bbc8830,ffff80003bbc87a0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff80003bbc8830) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003bbc8830) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x121383af180, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __asan_load4_noabort(ffffffff854278c0) at __asan_load4_noabort ktrsysret(ffff800029942fa8,5b,0,ffff800029ad83e0) at ktrsysret+0x14d ktrwrite2 sys/kern/kern_ktrace.c:-1 [inline] ktrsysret(ffff800029942fa8,5b,0,ffff800029ad83e0) at ktrsysret+0x14d sys/kern/kern_ktrace.c:209 syscall(ffff800029ad8470) at syscall+0x473 mi_syscall_return sys/sys/syscall_mi.h:204 [inline] syscall(ffff800029ad8470) at syscall+0x473 sys/arch/amd64/amd64/trap.c:804 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x738c98f2c530, count: 8 ddb{1}> trace x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __asan_load4_noabort(ffffffff854278c0) at __asan_load4_noabort ktrsysret(ffff800029942fa8,5b,0,ffff800029ad83e0) at ktrsysret+0x14d ktrwrite2 sys/kern/kern_ktrace.c:-1 [inline] ktrsysret(ffff800029942fa8,5b,0,ffff800029ad83e0) at ktrsysret+0x14d sys/kern/kern_ktrace.c:209 syscall(ffff800029ad8470) at syscall+0x473 mi_syscall_return sys/sys/syscall_mi.h:204 [inline] syscall(ffff800029ad8470) at syscall+0x473 sys/arch/amd64/amd64/trap.c:804 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x738c98f2c530, count: -7