panic: Caught invalid memory access at ffff8000018cab70 size 36 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *357207 79347 0 0 0x4000000 0 syz-executor 452814 83128 73 0x1100010 0 1 syslogd db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84632646) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cab70,ffff8000352e7720,24) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff8000352e7de8,1,200000000180,ffff8000352e7dc0) at sysctl_sysvipc+0x397 sys/kern/kern_sysctl.c:2712 kern_sysctl_dirs(33,ffff8000352e7de8,1,200000000180,ffff8000352e7dc0,0,1,1ffff00006a5cf34) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff8000352e7de4,2,200000000180,ffff8000352e7dc0,0,fffa,ffff8000352e8030) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ffdca0,ffff8000352e8030,ffff8000352e7fa0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff8000352e8030) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000352e8030) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ae35ea0fc0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff8000018cab70 size 36 op 1 ddb{0}> show kasan KASAN: invalid write of 36 bytes at 0xffff8000018cab70 from pc 0xffffffff83160567 KASAN: first bad byte at 0xffff8000018cab76 (+6); shadow 0x06: partial granule (out-of-bounds) KASAN: 0xffff8000018cab76 is 6 bytes inside the 16-byte malloc slot [0xffff8000018cab70..0xffff8000018cab80) KASAN: allocated at: #0 malloc+0xda0 sys/kern/kern_malloc.c:446 #1 sysctl_sysvipc+0x377 sys/kern/kern_sysctl.c:-1 #2 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 #3 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 #4 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 #5 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #6 Xsyscall+0x128 KASAN: pc: sysctl_sysvipc+0x397 KASAN: call trace: #0 kasan_memcpy+0x1ca kasan_shadow_check sys/kern/subr_kasan.c:-1 [inline] #0 kasan_memcpy+0x1ca sys/kern/subr_kasan.c:1025 #1 sysctl_sysvipc+0x397 sys/kern/kern_sysctl.c:2712 #2 kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 #3 kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 #4 sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 #5 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #6 Xsyscall+0x128 KASAN: shadow of 0xffff8000018caa00..0xffff8000018cac80 (1 cell = 8 bytes): 0xffff8000018caa00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 0xffff8000018caa80: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 >0xffff8000018cab00: fc 08 fc 08 fc 08 fc 08 fc 08 fc 08 fc 08[06]fb 0xffff8000018cab80: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0xffff8000018cac00: 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84632646) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cab70,ffff8000352e7720,24) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff8000352e7de8,1,200000000180,ffff8000352e7dc0) at sysctl_sysvipc+0x397 sys/kern/kern_sysctl.c:2712 kern_sysctl_dirs(33,ffff8000352e7de8,1,200000000180,ffff8000352e7dc0,0,1,1ffff00006a5cf34) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff8000352e7de4,2,200000000180,ffff8000352e7dc0,0,fffa,ffff8000352e8030) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ffdca0,ffff8000352e8030,ffff8000352e7fa0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff8000352e8030) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000352e8030) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ae35ea0fc0, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000352e7530 rbx 0xffff8000352e75a0 rdx 0 rcx 0xffffffff851e9ff0 cpu_info_full_primary+0x1ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff8000352e7318 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84632646 .str.7+0x9a1c6 r13 0xffffffff851eac08 cpu_info_full_primary+0x2c08 r14 0xffffffff851eae07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff8000352e7530 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=357207 pid=79347 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=81, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffc548,0xffff800045ffd4e8 process=0xffff800045ffa698 user=0xffff8000352dd000, vmspace=0xffff8000017c7d60 estcpu=31, cpticks=23, pctcpu=0.0, user=0, sys=21, intr=2 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 78776 168292 54018 5 3 0x10 0x80 nanoslp syz-executor 78776 521959 54018 5 2 0x10 0x4000000 syz-executor 78776 323648 54018 5 3 0x10 0x4000080 fsleep syz-executor 39909 365395 73336 0 3 0x2 0 getblk syz-executor 48797 122226 67872 0 3 0 0x80 nanoslp syz-executor 48797 334700 67872 0 3 0 0x4000080 kqpoll syz-executor 48797 138431 67872 0 3 0 0x4000080 fsleep syz-executor 39086 420624 33318 0 2 0 0 syz-executor 39086 420095 33318 0 3 0 0x4000080 fsleep syz-executor 39086 47388 33318 0 3 0 0x4000080 fsleep syz-executor 79347 462657 96011 0 2 0 0 syz-executor *79347 357207 96011 0 7 0 0x4000000 syz-executor 79347 121361 96011 0 3 0 0x4000080 fsleep syz-executor 79347 386645 96011 0 3 0 0x4000080 fsleep syz-executor 57763 10064 73336 0 2 0x10000002 0x880 syz-executor 3263 511434 73336 0 2 0x2 0 syz-executor 96011 443891 73336 0 2 0x2 0xc80 syz-executor 54018 105175 73336 0 3 0x2 0x80 nanoslp syz-executor 33318 130835 73336 0 2 0x2 0xc80 syz-executor 67872 244384 73336 0 2 0x2 0xc80 syz-executor 38438 258686 73336 0 2 0x2 0xc80 syz-executor 73336 416302 14405 0 2 0x2 0 syz-executor 14405 196920 42323 0 3 0x100002 0x88 sigsusp ksh 42323 175350 20917 0 3 0x10 0x88 kqread sshd-session 20917 480183 37592 0 3 0x12 0x80 kqread sshd-session 69853 200410 1 0 3 0x100003 0x80 ttyin getty 37592 31122 1 0 3 0 0x88 kqread sshd 35000 149455 4688 74 3 0x1100012 0x80 bpf pflogd 4688 150381 1 0 3 0 0x80 sbwait pflogd 83128 452814 14653 73 7 0x1100010 0 syslogd 14653 430796 1 0 3 0x100002 0x80 sbwait syslogd 43351 429153 1 0 3 0x100000 0x80 kqread resolvd 29225 104601 85466 77 3 0x100012 0x80 kqread dhcpleased 71441 294778 85466 77 3 0x100012 0x80 kqread dhcpleased 85466 407187 1 0 3 0 0x80 kqread dhcpleased 43469 237836 0 0 2 0x14000 0x40000200 smr 28438 195331 0 0 2 0x14000 0x200 zerothread 11417 115868 0 0 3 0x14000 0x200 aiodoned aiodoned 89206 344416 0 0 3 0x14000 0x200 syncer update 5418 310694 0 0 3 0x14000 0x200 cleaner cleaner 25466 271169 0 0 3 0x14000 0x200 reaper reaper 64940 459646 0 0 3 0x14000 0x200 pgdaemon pagedaemon 3873 479535 0 0 3 0x14000 0x200 bored viomb 50263 158621 0 0 3 0x14000 0x40000200 acpi0 acpi0 32760 215556 0 0 3 0x14000 0x40000200 idle1 74198 88016 0 0 3 0x14000 0x200 bored softnet1 99331 317005 0 0 2 0x14000 0x200 softnet0 75786 192016 0 0 3 0x14000 0x200 smrbar systqmp 93050 386312 0 0 3 0x14000 0x200 bored systq 48553 252816 0 0 2 0x14000 0x200 softclockmp 14568 328813 0 0 3 0x14000 0x40000200 tmoslp softclock 93697 478846 0 0 3 0x14000 0x40000200 idle0 1 222605 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 39909 (syz-executor) thread 0xffff800036ef2028 (365395) exclusive rrwlock inode r = 0 (0xffff800001d1b470) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 ufs_ihashins+0xda sys/ufs/ufs/ufs_ihash.c:146 #5 ffs_vget+0x2e9 sys/ufs/ffs/ffs_vfsops.c:1232 #6 ffs_inode_alloc+0x576 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0x25d sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x1a8 sys/kern/vfs_vops.c:394 #9 domkdirat+0x1f9 sys/kern/vfs_syscalls.c:3063 #10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001751d90) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 vn_lock+0xca sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x1f7 sys/kern/vfs_lookup.c:431 #6 namei+0xe19 sys/kern/vfs_lookup.c:250 #7 domkdirat+0xe1 sys/kern/vfs_syscalls.c:3048 #8 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #9 Xsyscall+0x128 Process 3263 (syz-executor) thread 0xffff800045ffcfa8 (511434) exclusive rrwlock inode r = 0 (0xffff800001d1b7e8) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 ufs_ihashins+0xda sys/ufs/ufs/ufs_ihash.c:146 #5 ffs_vget+0x2e9 sys/ufs/ffs/ffs_vfsops.c:1232 #6 ffs_inode_alloc+0x576 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0x25d sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x1a8 sys/kern/vfs_vops.c:394 #9 domkdirat+0x1f9 sys/kern/vfs_syscalls.c:3063 #10 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xffff800001bedec8) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 vn_lock+0xca sys/kern/vfs_vnops.c:576 #5 vfs_lookup+0x1f7 sys/kern/vfs_lookup.c:431 #6 namei+0xe19 sys/kern/vfs_lookup.c:250 #7 domkdirat+0xe1 sys/kern/vfs_syscalls.c:3048 #8 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #9 Xsyscall+0x128 Process 83128 (syslogd) thread 0xffff800029913a00 (452814) exclusive rrwlock inode r = 0 (0xffff8000018a1228) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x53e sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xf0 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0x17e sys/kern/vfs_vops.c:527 #4 vn_lock+0xca sys/kern/vfs_vnops.c:576 #5 sys_fsync+0x200 sys/kern/vfs_syscalls.c:2890 #6 syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 #7 Xsyscall+0x128 Process 75786 (systqmp) thread 0xffff800045ffe000 (192016) shared rwlock systqmp r = 0 (0xffffffff852528b8) #0 witness_lock+0x632 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x632 sys/kern/subr_witness.c:1160 #1 taskq_thread+0x1ba sys/kern/kern_task.c:442 #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11060 12324K 12577K 166960K 12338 0 pcb 17 24K 24K 166960K 30 0 rtable 215 11K 13K 166960K 351 0 pf 32 21K 22K 166960K 47 0 ifaddr 39 11K 12K 166960K 46 0 ifgroup 51 2K 2K 166960K 57 0 sysctl 1 1K 13K 166960K 5 0 counters 68 42K 43K 166960K 72 0 ioctlops 0 0K 4K 166960K 1489 0 iov 0 0K 8K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1367 88K 88K 166960K 1465 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 15 50K 93K 166960K 179 0 sigio 0 0K 0K 166960K 33 0 proc 72 128K 177K 166960K 554 0 subproc 63 7K 10K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 88 6K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 61 425K 425K 166960K 61 0 exec 0 0K 2K 166960K 387 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 220 232K 266K 166960K 3363 0 UVM aobj 5 4K 4K 166960K 6 0 pinsyscall 1064 1731K 1733K 166960K 1340 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 11 0K 2K 166960K 29 0 temp 30 9161K 9172K 166960K 4093 0 kqueue 18 57K 60K 166960K 38 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 31 1 0 1 1 0 8 0 rtentry 176 111 0 12 5 0 5 5 0 8 0 unpcb 144 79 0 53 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 17 0 13 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 101 0 91 2 0 2 2 0 8 1 nd6 152 24 0 3 1 0 1 1 0 8 0 kcovpl 48 9 0 2 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 20 0 0 1 0 1 1 0 8 0 pfstkey 128 20 0 0 1 0 1 1 0 8 0 pfstate 448 20 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 21 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1631 0 162 93 0 93 93 0 8 0 ffsino 296 1632 0 162 114 0 114 114 0 8 0 nchpl 144 1892 0 190 64 0 64 64 0 8 0 vnodes 216 1814 0 0 101 0 101 101 0 8 0 namei 1024 6033 0 6031 1 0 1 1 0 8 0 percpumem 16 52 0 2 1 0 1 1 0 8 0 kstatmem 264 29 0 4 2 0 2 2 0 8 0 scxspl 216 6958 0 6958 3 2 1 2 1 8 1 plimitpl 152 33 0 16 1 0 1 1 0 8 0 sigapl 424 495 0 449 7 0 7 7 0 8 1 knotepl 120 150 0 0 5 0 5 5 0 8 0 kqueuepl 224 45 0 28 1 0 1 1 0 8 0 pipepl 344 142 0 113 3 0 3 3 0 8 0 fdescpl 528 479 0 450 3 0 3 3 0 8 0 filepl 160 2022 0 1801 13 0 13 13 0 8 2 lockfpl 104 18 0 16 1 0 1 1 0 8 0 lockfspl 48 10 0 8 1 0 1 1 0 8 0 sessionpl 144 28 0 19 1 0 1 1 0 8 0 pgrppl 48 39 0 22 1 0 1 1 0 8 0 ucredpl 104 152 0 136 1 0 1 1 0 8 0 zombiepl 144 451 0 449 1 0 1 1 0 8 0 processpl 1232 495 0 449 5 0 5 5 0 8 1 procpl 664 563 0 508 6 0 6 6 0 8 1 sockpl 752 214 0 175 5 0 5 5 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 17 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 132 0 0 8 0 8 8 0 8 0 bufpl 272 2365 0 105 151 0 151 151 0 8 0 anonpl 32 3858 0 0 32 0 32 32 0 222 0 amapchunkpl 152 9507 0 9075 22 1 21 21 0 158 2 amappl16 200 1952 0 1931 5 2 3 5 0 8 1 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 429 0 428 1 0 1 1 0 8 0 amappl13 176 122 0 110 1 0 1 1 0 8 0 amappl12 168 749 0 722 2 0 2 2 0 8 0 amappl11 160 30 0 30 1 1 0 1 0 8 0 amappl10 152 70 0 56 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 1 0 1 0 8 0 amappl8 136 100 0 98 1 0 1 1 0 8 0 amappl7 128 145 0 131 1 0 1 1 0 8 0 amappl6 120 156 0 155 1 0 1 1 0 8 0 amappl5 112 127 0 117 1 0 1 1 0 8 0 amappl4 104 302 0 279 1 0 1 1 0 8 0 amappl3 96 1747 0 1646 3 0 3 3 0 8 0 amappl2 88 540 0 480 2 0 2 2 0 8 0 amappl1 80 10668 0 10065 16 0 16 16 0 8 2 amappl 88 2636 0 2486 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 1 1 0 1 1 0 8 0 uaddrrnd 24 479 0 450 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 479 0 450 1 0 1 1 0 8 0 vmmpekpl 168 5988 0 5945 2 0 2 2 0 8 0 vmmpepl 168 40223 0 38426 88 0 88 88 0 357 3 vmsppl 488 478 0 450 5 0 5 5 0 8 1 rwobjpl 80 15107 0 14103 25 0 25 25 0 8 1 pdppl 4096 966 0 900 100 26 74 86 0 8 8 pvpl 32 10389 0 0 84 0 84 84 0 265 0 pmappl 256 478 0 450 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 421 0 30 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 sys/arch/amd64/amd64/db_interface.c:457 panic(ffffffff84632646) at panic+0x270 sys/kern/subr_prf.c:198 kasan_memcpy(ffff8000018cab70,ffff8000352e7720,24) at kasan_memcpy+0x1ec sysctl_sysvipc(ffff8000352e7de8,1,200000000180,ffff8000352e7dc0) at sysctl_sysvipc+0x397 sys/kern/kern_sysctl.c:2712 kern_sysctl_dirs(33,ffff8000352e7de8,1,200000000180,ffff8000352e7dc0,0,1,1ffff00006a5cf34) at kern_sysctl_dirs+0x30f sys/kern/kern_sysctl.c:429 kern_sysctl(ffff8000352e7de4,2,200000000180,ffff8000352e7dc0,0,fffa,ffff8000352e8030) at kern_sysctl+0x1ce sys/kern/kern_sysctl.c:529 sys_sysctl(ffff800045ffdca0,ffff8000352e8030,ffff8000352e7fa0) at sys_sysctl+0x54f sys/kern/kern_sysctl.c:309 syscall(ffff8000352e8030) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000352e8030) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ae35ea0fc0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __asan_load4_noabort(ffffffff85d52378) at __asan_load4_noabort+0x14 kasan_shadow_check sys/kern/subr_kasan.c:972 [inline] __asan_load4_noabort(ffffffff85d52378) at __asan_load4_noabort+0x14 sys/kern/subr_kasan.c:1098 __mp_lock(ffffffff85d51b80) at __mp_lock+0x27a __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x27a sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff85d51b80,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:-1 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 sys/kern/kern_synch.c:373 vwaitforio(ffff80000189c488,0,ffffffff84aea640,ffffffffffffffff) at vwaitforio+0xf3 sys/kern/vfs_subr.c:-1 ffs_fsync(ffff8000299942e0) at ffs_fsync+0x42a sys/ufs/ffs/ffs_vnops.c:476 VOP_FSYNC(ffff80000189c488,ffff800000119af8,1,ffff800029913a00) at VOP_FSYNC+0x1bb sys/kern/vfs_vops.c:311 sys_fsync(ffff800029913a00,ffff800029994570,ffff8000299944e0) at sys_fsync+0x232 sys/kern/vfs_syscalls.c:2890 syscall(ffff800029994570) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029994570) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ec7b8904bc0, count: 2 ddb{1}> trace x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 sys/arch/amd64/amd64/db_interface.c:412 x86_ipi_handler() at x86_ipi_handler+0x112 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __asan_load4_noabort(ffffffff85d52378) at __asan_load4_noabort+0x14 kasan_shadow_check sys/kern/subr_kasan.c:972 [inline] __asan_load4_noabort(ffffffff85d52378) at __asan_load4_noabort+0x14 sys/kern/subr_kasan.c:1098 __mp_lock(ffffffff85d51b80) at __mp_lock+0x27a __mp_lock_spin sys/kern/kern_lock.c:142 [inline] __mp_lock(ffffffff85d51b80) at __mp_lock+0x27a sys/kern/kern_lock.c:173 __mp_acquire_count(ffffffff85d51b80,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:-1 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x423 sys/kern/kern_synch.c:373 vwaitforio(ffff80000189c488,0,ffffffff84aea640,ffffffffffffffff) at vwaitforio+0xf3 sys/kern/vfs_subr.c:-1 ffs_fsync(ffff8000299942e0) at ffs_fsync+0x42a sys/ufs/ffs/ffs_vnops.c:476 VOP_FSYNC(ffff80000189c488,ffff800000119af8,1,ffff800029913a00) at VOP_FSYNC+0x1bb sys/kern/vfs_vops.c:311 sys_fsync(ffff800029913a00,ffff800029994570,ffff8000299944e0) at sys_fsync+0x232 sys/kern/vfs_syscalls.c:2890 syscall(ffff800029994570) at syscall+0x1089 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff800029994570) at syscall+0x1089 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7ec7b8904bc0, count: -13