panic: pool_p_free: sockpl free list modified: page 0xfffffd8062e0d000; item addr 0xfffffd8062e0d939; offset 0x0=0x615b0c63547f769 Stopped at db_enter+0x1c: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 46759 40817 0 0x14000 0x200 0 systqmp db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827ecb95) at panic+0x165 sys/kern/subr_prf.c:198 pool_p_free(ffffffff82cad258,fffffd8062e0df90) at pool_p_free+0x1d3 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82b5f5c0) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: pool_p_free: sockpl free list modified: page 0xfffffd8062e0d000; item addr 0xfffffd8062e0d939; offset 0x0=0x615b0c63547f769 ddb> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827ecb95) at panic+0x165 sys/kern/subr_prf.c:198 pool_p_free(ffffffff82cad258,fffffd8062e0df90) at pool_p_free+0x1d3 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82b5f5c0) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -5 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800021600210 rbx 0x15b0c63547f76960 rdx 0 rcx 0 rax 0xffff8000ffffeae0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x5d61cabdc6008987 r11 0xcaef1505c07d7f7b r12 0 r13 0x615b0c63547f769 r14 0 r15 0x1 rip 0xffffffff8155808c db_enter+0x1c cs 0x8 rflags 0x246 rsp 0xffff800021600200 ss 0x10 db_enter+0x1c: addq $0x8,%rsp ddb> show proc PROC (systqmp) pid=46759 stat=onproc flags process=14000 proc=200 pri=32, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffffed98,0xffff8000ffffe838 process=0xffff8000ffffc3f0 user=0xffff8000215fb000, vmspace=0xffffffff82ceb460 estcpu=0, cpticks=2, pctcpu=0.0 user=0, sys=2, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 24457 476385 31351 0 3 0x3000 suspend syz-executor.6 24457 492342 31351 0 3 0x4081001 kernel: protection fault trap, code=0 Faulted in DDB; continuing... ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10174 6430K 18783K 78643K 15966 0 pcb 13 22K 26K 78643K 3858 0 rtable 240 17K 17K 78643K 2641 0 ifaddr 84 24K 25K 78643K 985 0 sysctl 3 1K 2K 78643K 11 0 counters 28 17K 17K 78643K 425 0 ioctlops 0 0K 4K 78643K 873 0 iov 0 0K 24K 78643K 1306 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1467 92K 92K 78643K 6715 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 59 0 VM map 2 1K 1K 78643K 2 0 sem 22 3K 5K 78643K 1403 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 11 37K 69K 78643K 9820 0 sigio 0 0K 0K 78643K 142 0 proc 59 43K 75K 78643K 2106 0 subproc 104 6K 6K 78643K 650 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 949 0 in_multi 103 6K 7K 78643K 828 0 ether_multi 1 0K 0K 78643K 54 0 mrt 1 0K 0K 78643K 32 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 85 387K 387K 78643K 85 0 exec 0 0K 1K 78643K 2071 0 pfkey data 0 0K 0K 78643K 147 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 329 93K 109K 78643K 91024 0 UVM aobj 131 4K 4K 78643K 131 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 302 0 NDP 13 0K 1K 78643K 333 0 temp 134 5854K 14046K 78643K 147335 0 kqueue 6 10K 27K 78643K 1110 0 SYN cache 2 16K 16K 78643K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 947 0 946 9 8 1 3 0 8 0 rtentry 112 792 0 688 5 2 3 4 0 8 0 unpcb 144 18794 0 18788 123 122 1 11 0 8 0 syncache 296 44 0 44 13 13 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 68 0 68 6 6 0 1 0 8 0 tcpcb 776 10948 0 10944 225 224 1 21 0 8 0 arp 88 124 0 106 1 0 1 1 0 8 0 ipq 40 7 0 7 2 2 0 1 0 8 0 ipqe 40 34 0 34 2 2 0 1 0 8 0 inpcb 336 19455 0 19451 178 177 1 17 0 8 0 nd6 104 170 0 145 1 0 1 1 0 8 0 pkpcb 40 67 0 67 8 8 0 1 0 8 0 kcovpl 48 50 0 42 1 0 1 1 0 8 0 ppxss 1160 244 0 244 15 15 0 1 0 8 0 pppxif 1360 173 0 173 10 10 0 1 0 8 0 pfstscr 40 78 0 74 1 0 1 1 0 8 0 pfanchor 1288 728 12 216 43 0 43 43 0 8 0 pfstitem 24 18 0 10 1 0 1 1 0 8 0 pfstkey 128 156 0 142 1 0 1 1 0 8 0 pfstate 352 78 0 74 1 0 1 1 0 8 0 rttmr 136 8 0 8 3 3 0 1 0 8 0 art_heap8 4096 9 0 8 8 7 1 3 0 8 0 art_heap4 256 3478 0 3020 60 31 29 30 0 8 0 art_table 32 3487 0 3028 4 0 4 4 0 8 0 art_node 16 770 0 679 1 0 1 1 0 8 0 sysvmsgpl 40 46 0 6 1 0 1 1 0 8 0 semupl 112 6 0 6 1 1 0 1 0 8 0 semapl 112 1397 0 1377 1 0 1 1 0 8 0 shmpl 112 128 0 0 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 13214 0 11734 93 0 93 93 0 8 0 ffsino 240 13214 0 11734 88 0 88 88 0 8 0 nchpl 144 27418 0 26902 63 42 21 63 0 8 0 rtmask 32 10 0 10 4 4 0 1 0 8 0 uvmvnodes 80 6018 0 0 123 0 123 123 0 8 0 vnodes 216 6018 0 0 335 0 335 335 0 8 0 namei 1024 118824 0 118824 9 9 0 3 0 8 0 kstatmem 264 440 0 414 4 2 2 3 0 8 0 scsiplug 72 19 0 19 4 4 0 1 0 8 0 scxspl 216 86677 0 86677 27 26 1 8 0 8 1 plimitpl 152 1586 0 1572 1 0 1 1 0 8 0 sigapl 424 10037 0 9986 7 0 7 7 0 8 0 futexpl 64 116858 0 116858 5 5 0 1 0 8 0 knotepl 120 400005 0 399941 105 102 3 16 0 8 0 kqueuepl 184 2465 0 2460 27 26 1 4 0 8 0 pipepl 288 2391 0 2363 52 49 3 7 0 8 0 fdescpl 432 10009 0 9990 4 0 4 4 0 8 0 filepl 120 96773 0 96557 128 120 8 20 0 8 0 lockfpl 104 1878 0 1877 5 4 1 2 0 8 0 lockfspl 48 525 0 524 1 0 1 1 0 8 0 sessionpl 144 65 0 50 1 0 1 1 0 8 0 pgrppl 48 174 0 159 1 0 1 1 0 8 0 ucredpl 104 12828 0 12820 1 0 1 1 0 8 0 zombiepl 144 9992 0 9986 2 1 1 1 0 8 0 processpl 1008 10037 0 9986 10 3 7 8 0 8 0 procpl 696 24208 0 24143 14 6 8 8 0 8 0 sosppl 168 114 0 114 13 13 0 1 0 8 0 sockpl 456 39265 0 39254 889 887 2 41 0 8 0 mcl64k 65536 345 0 345 23 23 0 1 0 8 0 mcl16k 16384 195 0 195 25 25 0 1 0 8 0 mcl12k 12288 335 0 335 21 21 0 1 0 8 0 mcl9k 9216 127 0 127 22 22 0 1 0 8 0 mcl8k 8192 640 0 640 19 19 0 1 0 8 0 mcl4k 4096 1697 0 1697 12 12 0 1 0 8 0 mcl2k2 2112 102 0 102 20 20 0 1 0 8 0 mcl2k 2048 93349 0 93306 42 35 7 31 0 8 0 mtagpl 96 153 0 153 8 8 0 3 0 8 0 mbufpl 256 573439 0 573308 802 789 13 220 0 8 0 bufpl 288 20066 0 13675 457 0 457 457 0 8 0 anonpl 24 1156016 0 1141280 247 140 107 168 0 188 0 amapchunkpl 152 296381 0 295616 159 121 38 66 0 158 0 amappl16 200 23083 0 22646 111 86 25 37 0 8 0 amappl15 192 12 0 12 1 1 0 1 0 8 0 amappl14 184 286 0 277 2 1 1 2 0 8 0 amappl13 176 20 0 19 1 0 1 1 0 8 0 amappl12 168 11298 0 11277 2 0 2 2 0 8 0 amappl11 160 56 0 51 1 0 1 1 0 8 0 amappl10 152 72 0 63 2 1 1 1 0 8 0 amappl9 144 258 0 258 5 5 0 2 0 8 0 amappl8 136 431 0 335 4 0 4 4 0 8 0 amappl7 128 91 0 73 1 0 1 1 0 8 0 amappl6 120 576 0 560 2 1 1 2 0 8 0 amappl5 112 438 0 435 1 0 1 1 0 8 0 amappl4 104 1229 0 1197 2 0 2 2 0 8 0 amappl3 96 56682 0 56629 3 0 3 3 0 8 0 amappl2 88 10685 0 10641 4 2 2 3 0 8 0 amappl1 80 47237 0 46839 22 11 11 22 0 8 0 amappl 88 89945 0 89753 7 1 6 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 130 0 0 3 0 3 3 0 8 0 uaddrrnd 24 10009 0 9990 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 10009 0 9990 1 0 1 1 0 8 0 vmmpekpl 168 73942 0 73892 4 1 3 4 0 8 0 vmmpepl 168 613020 0 611222 287 177 110 131 0 357 0 vmsppl 360 10008 0 9990 3 0 3 3 0 8 0 rwobjpl 24 149790 0 142344 50 3 47 47 0 8 0 pdppl 4096 20024 0 19980 562 518 44 66 0 8 0 pvpl 32 3063119 0 3043845 583 379 204 360 0 265 25 pmappl 216 10008 0 9990 2 0 2 2 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 2446 0 1706 28 4 24 28 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827ecb95) at panic+0x165 sys/kern/subr_prf.c:198 pool_p_free(ffffffff82cad258,fffffd8062e0df90) at pool_p_free+0x1d3 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82b5f5c0) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -5 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff827ecb95) at panic+0x165 sys/kern/subr_prf.c:198 pool_p_free(ffffffff82cad258,fffffd8062e0df90) at pool_p_free+0x1d3 pool_gc_pages(0) at pool_gc_pages+0x215 sys/kern/subr_pool.c:1583 taskq_thread(ffffffff82b5f5c0) at taskq_thread+0x9b sys/kern/kern_task.c:449 end trace frame: 0x0, count: -5