panic: assertwaitok: non-zero mutex count: 1 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *367227 16370 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff910f) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff83557db0,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd80711822b8,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd80711822b8,20000000,20800000,5,0,0,111f52d39b3f98) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4a2528,ffff800037631da0,ffff800037631cf0) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff800037631da0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x19d0f505ff0, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: assertwaitok: non-zero mutex count: 1 ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff910f) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff83557db0,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd80711822b8,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd80711822b8,20000000,20800000,5,0,0,111f52d39b3f98) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4a2528,ffff800037631da0,ffff800037631cf0) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff800037631da0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x19d0f505ff0, count: -11 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800037631970 rbx 0 rdx 0 rcx 0 rax 0xffff80002a4a2528 r8 0x101010101010101 r9 0x8080808080808080 r10 0xeaf2ac74273f940d r11 0x898e39fbdfcdcc6d r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff8152d955 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800037631960 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=367227 pid=16370 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a4a3bf0,0xffff80003763b990 process=0xffff8000327f5580 user=0xffff80003762c000, vmspace=0xfffffd80711822b8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 16370 458673 13365 0 2 0 syz-executor *16370 367227 13365 0 7 0x4000000 syz-executor 16370 31026 13365 0 3 0x4000000 vmmaplk syz-executor 95545 406602 14760 0 2 0 syz-executor 95545 329760 14760 0 3 0x4000080 fsleep syz-executor 95545 389353 14760 0 3 0x4000080 kqread syz-executor 13607 329294 52827 0 2 0 syz-executor 760 377048 54649 0 2 0 syz-executor 760 381869 54649 0 3 0x4000080 fsleep syz-executor 760 45513 54649 0 3 0x4000000 vmmaplk syz-executor 760 178549 54649 0 3 0x4000000 vmmaplk syz-executor 58161 506027 95454 0 3 0 vmmaplk syz-executor 58161 459765 95454 0 2 0x4000000 syz-executor 87716 65126 47656 0 2 0 syz-executor 87716 271955 47656 0 3 0x4000080 fsleep syz-executor 87716 254380 47656 0 2 0x4000000 syz-executor 78694 313026 13050 0 2 0 syz-executor 78694 102229 13050 0 3 0x4000080 fsleep syz-executor 29124 512136 0 0 3 0x14200 acct acct 54649 318151 48264 0 3 0x82 nanoslp syz-executor 47656 221629 48264 0 3 0x82 nanoslp syz-executor 27364 266078 1 0 3 0x100083 ttyin getty 13050 520980 48264 0 3 0x82 nanoslp syz-executor 41567 78200 0 0 3 0x14200 bored sosplice 52827 258257 48264 0 3 0x82 nanoslp syz-executor 13365 331276 48264 0 3 0x82 nanoslp syz-executor 16622 128780 48264 0 2 0x2 syz-executor 14760 363590 48264 0 3 0x82 nanoslp syz-executor 95454 110535 48264 0 3 0x82 nanoslp syz-executor 48264 401627 6732 0 3 0x82 kqread syz-executor 6732 129835 93346 0 3 0x10008a sigsusp ksh 93346 472015 89522 0 3 0x98 kqread sshd-session 89522 232673 12219 0 3 0x92 kqread sshd-session 12219 139288 1 0 3 0x88 kqread sshd 87589 400816 78501 73 3 0x1100090 kqread syslogd 78501 37288 1 0 3 0x100082 sbwait syslogd 21577 499323 1 0 3 0x100080 kqread resolvd 7570 309262 72526 77 3 0x100092 kqread dhcpleased 48176 41965 72526 77 3 0x100092 kqread dhcpleased 72526 218408 1 0 3 0x80 kqread dhcpleased 21660 271976 0 0 3 0x14200 bored smr 27114 19783 0 0 2 0x14200 zerothread 73732 466696 0 0 3 0x14200 aiodoned aiodoned 74849 386094 0 0 3 0x14200 syncer update 47381 220616 0 0 3 0x14200 cleaner cleaner 85776 280900 0 0 3 0x14200 reaper reaper 50120 509949 0 0 3 0x14200 pgdaemon pagedaemon 93964 450738 0 0 3 0x14200 bored viomb 56165 476811 0 0 3 0x40014200 acpi0 acpi0 80733 485346 0 0 3 0x14200 bored softnet3 26744 3064 0 0 3 0x14200 bored softnet2 85295 166404 0 0 3 0x14200 bored softnet1 54397 346085 0 0 3 0x14200 bored softnet0 11080 175980 0 0 3 0x14200 bored systqmp 93890 183955 0 0 3 0x14200 bored systq 93373 77024 0 0 3 0x40014200 tmoslp softclock 51218 306202 0 0 3 0x40014200 idle0 1 387175 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10208 11072K 11519K 166960K 16198 0 pcb 18 18K 20K 166960K 1045 0 rtable 116 12K 13K 166960K 898 0 pf 32 13K 14K 166960K 124 0 ifaddr 28 4K 7K 166960K 121 0 ifgroup 53 2K 2K 166960K 185 0 sysctl 3 0K 0K 166960K 11 0 counters 30 17K 17K 166960K 70 0 ioctlops 0 0K 4K 166960K 399 0 iov 0 0K 28K 166960K 438 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1541 97K 97K 166960K 4126 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 10K 166960K 79 0 VM map 2 1K 1K 166960K 2 0 sem 28 20K 21K 166960K 122 0 dirhash 12 2K 2K 166960K 87 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 17 61K 97K 166960K 4578 0 sigio 0 0K 0K 166960K 170 0 proc 61 59K 124K 166960K 904 0 subproc 104 6K 8K 166960K 186 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 622 0 in_multi 54 3K 7K 166960K 340 0 ether_multi 1 0K 0K 166960K 61 0 mrt 1 0K 0K 166960K 12 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 229 1023K 1023K 166960K 229 0 exec 0 0K 1K 166960K 1479 0 pfkey data 0 0K 4K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 229 73K 88K 166960K 42006 0 UVM aobj 84 7K 7K 166960K 93 0 pinsyscall 38 76K 100K 166960K 5687 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 219 0 NDP 11 0K 2K 166960K 84 0 temp 78 6817K 6944K 166960K 129316 0 kqueue 14 22K 32K 166960K 715 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 379 0 376 2 1 1 2 0 8 0 rtentry 112 268 0 224 4 0 4 4 0 8 0 unpcb 144 4316 0 4300 11 10 1 6 0 8 0 syncache 336 8 0 8 1 1 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 808 1594 0 1588 19 14 5 8 0 8 4 arp 88 37 0 32 1 0 1 1 0 8 0 ipq 40 16 0 15 1 0 1 1 0 8 0 ipqe 40 154 0 153 1 0 1 1 0 8 0 inpcb 336 5056 0 5032 26 16 10 10 0 8 7 nd6 104 54 0 42 1 0 1 1 0 8 0 pkpcb 40 57 0 57 2 2 0 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 ppxss 1072 18 0 18 2 2 0 1 0 8 0 pfstscr 40 1 0 1 1 1 0 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 2 1 1 0 1 0 8 0 pfstate 344 1 0 1 1 1 0 1 0 8 0 pfrule 1344 2 0 2 1 1 0 1 0 8 0 art_heap8 4096 4 0 2 3 1 2 3 0 8 0 art_heap4 256 1057 0 761 32 13 19 29 0 8 0 art_table 32 1061 0 763 4 0 4 4 0 8 0 art_node 16 228 0 189 1 0 1 1 0 8 0 sysvmsgpl 40 15 0 14 1 0 1 1 0 8 0 semupl 112 4 0 4 2 2 0 1 0 8 0 semapl 112 113 0 87 1 0 1 1 0 8 0 shmpl 112 90 0 9 4 1 3 3 0 8 0 dirhash 1024 69 0 52 3 0 3 3 0 8 0 dino2pl 256 9048 0 7551 95 0 95 95 0 8 0 ffsino 240 9048 0 7551 89 0 89 89 0 8 0 nchpl 144 15552 0 13871 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 50147 0 50147 5 3 2 2 0 8 2 kstatmem 264 102 0 80 2 0 2 2 0 8 0 scsiplug 72 4 0 4 2 2 0 1 0 8 0 scxspl 216 47782 0 47782 10 9 1 8 1 8 1 plimitpl 152 1098 0 1082 1 0 1 1 0 8 0 sigapl 424 4881 0 4834 8 1 7 8 0 8 0 futexpl 64 59846 0 59842 1 0 1 1 0 8 0 knotepl 120 193990 0 193941 36 26 10 17 0 8 7 kqueuepl 184 1311 0 1300 7 6 1 4 0 8 0 pipepl 288 575 0 548 3 0 3 3 0 8 0 fdescpl 432 4838 0 4809 5 1 4 5 0 8 0 filepl 120 30526 0 30276 20 9 11 14 0 8 2 lockfpl 104 1010 0 1007 1 0 1 1 0 8 0 lockfspl 48 439 0 436 1 0 1 1 0 8 0 sessionpl 144 26 0 18 1 0 1 1 0 8 0 pgrppl 48 157 0 141 1 0 1 1 0 8 0 ucredpl 104 4362 0 4350 1 0 1 1 0 8 0 zombiepl 144 4987 0 4987 3 2 1 1 0 8 1 processpl 1096 4881 0 4834 5 1 4 5 0 8 0 procpl 648 10906 0 10847 7 1 6 7 0 8 0 sosppl 168 39 0 39 3 2 1 1 0 8 1 sockpl 504 10071 0 10028 87 73 14 31 0 8 7 mcl64k 65536 182 0 182 3 2 1 1 0 8 1 mcl16k 16384 129 0 129 3 2 1 1 0 8 1 mcl12k 12288 39 0 39 3 2 1 1 0 8 1 mcl9k 9216 13 0 13 2 2 0 1 0 8 0 mcl8k 8192 257 0 257 3 2 1 1 0 8 1 mcl4k 4096 9723 0 9670 16 8 8 16 0 8 0 mcl2k2 2112 11 0 11 3 2 1 1 0 8 1 mcl2k 2048 4388 0 4385 4 3 1 3 0 8 0 mtagpl 96 170 0 88 3 0 3 3 0 8 0 mbufpl 256 53416 0 53250 28 14 14 22 0 8 0 bufpl 280 13475 0 7228 447 0 447 447 0 8 0 anonpl 24 571615 0 568123 87 52 35 67 0 187 2 amapchunkpl 152 148177 0 147586 54 28 26 36 0 158 2 amappl16 200 11134 0 11100 62 59 3 20 0 8 0 amappl15 192 14 0 13 1 0 1 1 0 8 0 amappl14 184 116 0 106 1 0 1 1 0 8 0 amappl13 176 22 0 22 1 1 0 1 0 8 0 amappl12 168 5503 0 5474 3 1 2 3 0 8 0 amappl11 160 48 0 38 1 0 1 1 0 8 0 amappl10 152 12 0 12 2 2 0 1 0 8 0 amappl9 144 120 0 119 1 0 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 105 0 94 1 0 1 1 0 8 0 amappl6 120 194 0 192 1 0 1 1 0 8 0 amappl5 112 137 0 128 1 0 1 1 0 8 0 amappl4 104 322 0 307 1 0 1 1 0 8 0 amappl3 96 26131 0 26033 3 0 3 3 0 8 0 amappl2 88 5138 0 5061 2 0 2 2 0 8 0 amappl1 80 20919 0 20403 14 2 12 13 0 8 0 amappl 88 41255 0 41081 5 0 5 5 0 92 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 3 0 3 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 263 0 263 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 92 0 9 2 0 2 2 0 8 0 uaddrrnd 24 4838 0 4809 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4838 0 4809 1 0 1 1 0 8 0 vmmpekpl 168 32323 0 32281 3 0 3 3 0 8 0 vmmpepl 168 283107 0 281345 105 25 80 93 0 357 0 vmsppl 344 4837 0 4809 4 1 3 4 0 8 0 rwobjpl 24 69425 0 62549 45 2 43 44 0 8 0 pdppl 4096 9683 0 9618 143 76 67 83 0 8 2 pvpl 32 1880487 0 1871472 179 78 101 143 0 265 6 pmappl 216 4837 0 4809 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 568 0 232 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff910f) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff83557db0,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd80711822b8,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd80711822b8,20000000,20800000,5,0,0,111f52d39b3f98) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4a2528,ffff800037631da0,ffff800037631cf0) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff800037631da0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x19d0f505ff0, count: -11 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff82ff910f) at panic+0x1cf sys/kern/subr_prf.c:198 assertwaitok() at assertwaitok+0x16f sys/kern/subr_xxx.c:163 mi_switch() at mi_switch+0x2b6 sys/kern/sched_bsd.c:412 yield() at yield+0x61 sys/kern/sched_bsd.c:320 pool_get(ffffffff83557db0,1) at pool_get+0x1e9 sys/kern/subr_pool.c:589 uvm_mapent_alloc(fffffd80711822b8,0) at uvm_mapent_alloc+0x35a uvm_map_protect(fffffd80711822b8,20000000,20800000,5,0,0,111f52d39b3f98) at uvm_map_protect+0x888 sys/uvm/uvm_map.c:3138 sys_mprotect(ffff80002a4a2528,ffff800037631da0,ffff800037631cf0) at sys_mprotect+0x34c sys/uvm/uvm_mmap.c:585 syscall(ffff800037631da0) at syscall+0x97e sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x19d0f505ff0, count: -11