[Žä۫Шù‘–Õâ-¨–û7ü>âüåÉ"ÈÒ@ [Žä۫Шù‘–Õâ-¨–û7ü>âüåÉ"ÈÒ@ panic: pool_do_put: mbufpl: double pool_put: 0xffffff007f146500 Stopped at db_enter+0xa: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *164343 54079 0 0 0x4000000 0 syz-executor1 db_enter() at db_enter+0xa panic() at panic+0x147 pool_do_put(ffffff007f146500,ffffffff81eb1f18) at pool_do_put+0x2e2 pool_put(6f2d25ed29eb539,ffffff007f146500) at pool_put+0x37 m_free(ffffff007f146500) at m_free+0x12c m_freem(16) at m_freem+0x2d soreceive(0,ffffff006f2ea300,ffff800021154940,1bf,ffff8000211549d0,ffff8000211548e0) at soreceive+0x1131 recvit(ffff800021154a00,ffff800021154b08,ffff800021154af0,ffff8000210817b8,0) at recvit+0x28c sys_recvmsg(ffff800021154b90,ffff8000210817b8,ffff80002105ffd0) at sys_recvmsg+0x120 syscall(0) at syscall+0x3e4 Xsyscall(6,0,ffffffffffffffbf,0,3,bc888894010) at Xsyscall+0x128 end of kernel end trace frame: 0xbcb4121da00, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> show panic pool_do_put: mbufpl: double pool_put: 0xffffff007f146500 ddb> trace db_enter() at db_enter+0xa panic() at panic+0x147 pool_do_put(ffffff007f146500,ffffffff81eb1f18) at pool_do_put+0x2e2 pool_put(6f2d25ed29eb539,ffffff007f146500) at pool_put+0x37 m_free(ffffff007f146500) at m_free+0x12c m_freem(16) at m_freem+0x2d soreceive(0,ffffff006f2ea300,ffff800021154940,1bf,ffff8000211549d0,ffff8000211548e0) at soreceive+0x1131 recvit(ffff800021154a00,ffff800021154b08,ffff800021154af0,ffff8000210817b8,0) at recvit+0x28c sys_recvmsg(ffff800021154b90,ffff8000210817b8,ffff80002105ffd0) at sys_recvmsg+0x120 syscall(0) at syscall+0x3e4 Xsyscall(6,0,ffffffffffffffbf,0,3,bc888894010) at Xsyscall+0x128 end of kernel end trace frame: 0xbcb4121da00, count: -11 ddb> show registers rdi 0xffffffff81dfc450 kprintf_mutex rsi 0xffffffff8111f559 db_enter+0x9 rbp 0xffff800021154660 rbx 0xffff800021154700 rdx 0xffff800000acb000 rcx 0x1d2c __ALIGN_SIZE+0xd2c rax 0xffff800000acb000 r8 0xffff800021154630 r9 0x8080808080808080 r10 0x6f2d25ed29eb539 r11 0xffffffff818f3fa0 x86_bus_space_io_read_1 r12 0x3000000008 r13 0xffff800021154670 r14 0x100 r15 0xffffffff81c3c816 cy_pio_rec+0x7252 rip 0xffffffff8111f55a db_enter+0xa cs 0x8 rflags 0x202 rsp 0xffff800021154660 ss 0x10 db_enter+0xa: popq %rbp ddb> show proc PROC (syz-executor1) pid=164343 stat=onproc flags process=0 proc=4000000 pri=83, usrpri=83, nice=20 forw=0xffffffffffffffff, list=0xffff8000210810b0,0xffffffff81e8ea18 process=0xffff80002105ffd0 user=0xffff80002114f000, vmspace=0xffffff007f12b948 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 54079 47542 5987 0 2 0 syz-executor1 *54079 164343 5987 0 7 0x4000000 syz-executor1 48689 143772 1 0 3 0x100083 ttyin getty 63292 321174 0 0 3 0x14200 bored sosplice 26765 507742 78624 0 3 0x2 biowait syz-executor0 5987 31737 78624 0 3 0x82 nanosleep syz-executor1 78624 91314 87915 0 3 0x82 thrsleep syz-fuzzer 78624 23027 87915 0 3 0x4000082 nanosleep syz-fuzzer 78624 427554 87915 0 3 0x4000082 thrsleep syz-fuzzer 78624 70861 87915 0 3 0x4000082 thrsleep syz-fuzzer 78624 521535 87915 0 3 0x4000082 kqread syz-fuzzer 78624 54109 87915 0 3 0x4000082 thrsleep syz-fuzzer 78624 383120 87915 0 3 0x4000082 thrsleep syz-fuzzer 87915 254078 5039 0 3 0x10008a pause ksh 5039 252469 79073 0 3 0x92 select sshd 79073 177239 1 0 3 0x80 select sshd 88559 201400 18061 73 3 0x100090 kqread syslogd 18061 471177 1 0 3 0x100082 netio syslogd 50876 192685 1 77 3 0x100090 poll dhclient 11106 104618 1 0 3 0x80 poll dhclient 9242 94804 0 0 2 0x14200 zerothread 42491 281550 0 0 3 0x14200 aiodoned aiodoned 58214 489416 0 0 3 0x14200 syncer update 71677 71349 0 0 3 0x14200 cleaner cleaner 43769 46096 0 0 3 0x14200 reaper reaper 75768 19017 0 0 3 0x14200 pgdaemon pagedaemon 63187 452422 0 0 3 0x14200 bored crynlk 1858 196521 0 0 3 0x14200 bored crypto 29280 398461 0 0 3 0x40014200 acpi0 acpi0 80181 511008 0 0 3 0x14200 bored softnet 49563 5041 0 0 3 0x14200 bored systqmp 97813 375304 0 0 3 0x14200 bored systq 79453 332303 0 0 3 0x40014200 bored softclock 89305 90394 0 0 3 0x40014200 idle0 1 263191 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper