panic: kernel diagnostic assertion "len >= 0 && !M_READONLY(m)" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/uipc_mbuf.c", line 1384 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *229569 82370 0 0 0x4000000 0K syz-executor.7 58002 94498 0 0x14000 0x200 1 reaper db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825760e8) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825ea380,ffffffff8255d87a,568,ffffffff8258bfdc) at __assert+0x25 sys/kern/subr_prf.c:161 m_align(fffffd80767bd000,ffffffd7) at m_align+0x1a0 sys/kern/uipc_mbuf.c:1385 bpf_movein(ffff800021448068,ffff800000e11800,ffff800021447dc8,ffff800021447cc8) at bpf_movein+0x25e sys/net/bpf.c:228 bpfwrite(31700,ffff800021448068,1) at bpfwrite+0x169 sys/net/bpf.c:644 spec_write(ffff800021447ec0) at spec_write+0xd4 sys/kern/spec_vnops.c:309 VOP_WRITE(fffffd805b38d7b0,ffff800021448068,1,fffffd807f7d88a0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 vn_write(fffffd806a5af3a0,ffff800021448068,0) at vn_write+0x157 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800027d1ad20,3,ffff800021448068,0,ffff800021448160) at dofilewritev+0x19c sys/kern/sys_generic.c:381 sys_write(ffff800027d1ad20,ffff800021448108,ffff800021448160) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff8000214481d0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000214481d0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2773214dcc0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "len >= 0 && !M_READONLY(m)" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/uipc_mbuf.c", line 1384 ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825760e8) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825ea380,ffffffff8255d87a,568,ffffffff8258bfdc) at __assert+0x25 sys/kern/subr_prf.c:161 m_align(fffffd80767bd000,ffffffd7) at m_align+0x1a0 sys/kern/uipc_mbuf.c:1385 bpf_movein(ffff800021448068,ffff800000e11800,ffff800021447dc8,ffff800021447cc8) at bpf_movein+0x25e sys/net/bpf.c:228 bpfwrite(31700,ffff800021448068,1) at bpfwrite+0x169 sys/net/bpf.c:644 spec_write(ffff800021447ec0) at spec_write+0xd4 sys/kern/spec_vnops.c:309 VOP_WRITE(fffffd805b38d7b0,ffff800021448068,1,fffffd807f7d88a0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 vn_write(fffffd806a5af3a0,ffff800021448068,0) at vn_write+0x157 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800027d1ad20,3,ffff800021448068,0,ffff800021448160) at dofilewritev+0x19c sys/kern/sys_generic.c:381 sys_write(ffff800027d1ad20,ffff800021448108,ffff800021448160) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff8000214481d0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000214481d0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2773214dcc0, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800021447ae0 rbx 0xffffffff82902bff cpu_info_full_primary+0x2bff rdx 0xffff800000bd8c40 rcx 0 rax 0xffff800027d1ad20 r8 0 r9 0x8080808080808080 r10 0xafa2f3ddb7bb3ea6 r11 0x7ac9ebe8dc67f2ae r12 0xffffffff82902a00 cpu_info_full_primary+0x2a00 r13 0 r14 0 r15 0x1 rip 0xffffffff81e72788 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800021447ad0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.7) pid=229569 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=83, nice=20 forw=0xffffffffffffffff, list=0xffff8000fffee2a8,0xffff800027d1a010 process=0xffff8000ffffb1e8 user=0xffff800021443000, vmspace=0xfffffd806d33f480 estcpu=33, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 89477 413658 20111 0 2 0 syz-executor.4 88039 67941 99887 0 2 0 syz-executor.1 88039 97161 99887 0 2 0x4000000 syz-executor.1 13308 449440 14485 0 2 0 syz-executor.6 13308 33061 14485 0 3 0x4000080 fsleep syz-executor.6 52344 436207 90204 0 2 0 syz-executor.0 52344 464368 90204 0 3 0x4000080 fsleep syz-executor.0 82370 129759 47907 0 2 0 syz-executor.7 *82370 229569 47907 0 7 0x4000000 syz-executor.7 14485 340263 54179 0 2 0x482 syz-executor.6 90204 143196 54179 0 3 0x82 nanoslp syz-executor.0 31704 333759 54179 0 3 0x82 nanoslp syz-executor.2 45693 7780 54179 0 2 0x2 syz-executor.5 20111 522415 54179 0 3 0x82 nanoslp syz-executor.4 47907 267391 54179 0 3 0x82 nanoslp syz-executor.7 89872 41540 54179 0 2 0x482 syz-executor.3 46123 87221 0 0 3 0x14200 acct acct 50784 500202 0 0 3 0x14200 bored sosplice 25436 174021 0 0 3 0x14280 nfsidl nfsio 4647 218199 0 0 3 0x14280 nfsidl nfsio 67387 3296 0 0 3 0x14280 nfsidl nfsio 9633 372929 0 0 3 0x14280 nfsidl nfsio 18217 375185 0 0 3 0x14280 nfsidl nfsio 37034 378111 0 0 3 0x14280 nfsidl nfsio 39784 50495 0 0 3 0x14280 nfsidl nfsio 88625 439072 0 0 3 0x14280 nfsidl nfsio 59328 182750 0 0 3 0x14280 nfsidl nfsio 16066 254178 0 0 3 0x14280 nfsidl nfsio 87328 309413 0 0 3 0x14280 nfsidl nfsio 51807 396944 0 0 3 0x14280 nfsidl nfsio 65220 401881 0 0 3 0x14280 nfsidl nfsio 64094 450290 0 0 3 0x14280 nfsidl nfsio 43199 379819 0 0 3 0x14280 nfsidl nfsio 25988 161021 0 0 3 0x14280 nfsidl nfsio 9736 98374 0 0 3 0x14280 nfsidl nfsio 26124 210174 0 0 3 0x14280 nfsidl nfsio 25228 194002 0 0 3 0x14280 nfsidl nfsio 27236 37264 0 0 3 0x14280 nfsidl nfsio 99887 55259 54179 0 2 0x482 syz-executor.1 54179 347587 39623 0 2 0x482 syz-fuzzer 54179 516884 39623 0 2 0x4000482 syz-fuzzer 54179 354553 39623 0 3 0x4000082 thrsleep syz-fuzzer 54179 3921 39623 0 3 0x4000082 kqread syz-fuzzer 54179 438685 39623 0 3 0x4000082 thrsleep syz-fuzzer 54179 365697 39623 0 3 0x4000082 thrsleep syz-fuzzer 54179 138809 39623 0 3 0x4000082 thrsleep syz-fuzzer 54179 520653 39623 0 3 0x4000082 thrsleep syz-fuzzer 39623 37263 71182 0 3 0x10008a sigsusp ksh 71182 520736 67803 0 3 0x9a kqread sshd 73985 319666 1 0 3 0x100083 ttyin getty 67803 226641 1 0 3 0x88 kqread sshd 46547 418871 4380 74 3 0x100092 bpf pflogd 4380 399431 1 0 3 0x80 netio pflogd 86236 189178 56401 73 3 0x100090 kqread syslogd 56401 66455 1 0 3 0x100082 netio syslogd 6322 517584 1 0 3 0x100080 kqread resolvd 3543 269645 5077 77 3 0x100092 kqread dhcpleased 44871 94204 5077 77 3 0x100092 kqread dhcpleased 5077 489294 1 0 3 0x80 kqread dhcpleased 90623 518439 0 0 3 0x14200 bored smr 87508 445719 0 0 2 0x14200 zerothread 37423 92920 0 0 3 0x14200 aiodoned aiodoned 59899 463388 0 0 3 0x14200 syncer update 20183 185872 0 0 3 0x14200 cleaner cleaner 94498 58002 0 0 7 0x14200 reaper 84639 243661 0 0 3 0x14200 pgdaemon pagedaemon 30520 178538 0 0 3 0x14200 bored viomb 1065 392869 0 0 3 0x40014200 acpi0 acpi0 17544 521231 0 0 3 0x40014200 idle1 35244 39699 0 0 3 0x14200 bored softnet 91162 439812 0 0 3 0x14200 bored systqmp 36751 419732 0 0 3 0x14200 bored systq 91173 360345 0 0 3 0x40014200 bored softclock 50779 284245 0 0 3 0x40014200 idle0 1 504384 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff82b40288) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 uvm_pmr_freepages+0x10c sys/uvm/uvm_pmemrange.c:1289 #4 pmap_do_remove+0x666 sys/arch/amd64/amd64/pmap.c:1884 #5 uvm_unmap_kill_entry_withlock+0x1af sys/uvm/uvm_map.c:2139 #6 uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] #6 uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 #7 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 #8 reaper+0x18b sys/kern/kern_exit.c:462 #9 proc_trampoline+0x1c Process 82370 (syz-executor.7) thread 0xffff800027d1ad20 (229569) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff82b5bf28) #0 witness_lock+0x44d #1 vn_write+0x42 sys/kern/vfs_vnops.c:399 #2 dofilewritev+0x19c sys/kern/sys_generic.c:381 #3 sys_write+0x83 sys/kern/sys_generic.c:301 #4 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #4 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #5 Xsyscall+0x128 Process 45693 (syz-executor.5) thread 0xffff8000ffff5260 (7780) exclusive rrwlock inode r = 0 (0xfffffd805b2afa38) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vget+0x1d3 sys/kern/vfs_subr.c:677 #6 ufs_ihashget+0x121 sys/ufs/ufs/ufs_ihash.c:119 #7 ffs_vget+0x7c sys/ufs/ffs/ffs_vfsops.c:1318 #8 ufs_lookup+0x13ba sys/ufs/ufs/ufs_lookup.c:487 #9 VOP_LOOKUP+0x58 sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x6e5 sys/kern/vfs_lookup.c:561 #11 namei+0x36a sys/kern/vfs_lookup.c:245 #12 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #13 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #13 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8062fbc5f0) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:461 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:534 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:579 #5 vfs_lookup+0xd1 sys/kern/vfs_lookup.c:413 #6 namei+0x36a sys/kern/vfs_lookup.c:245 #7 dounlinkat+0x99 sys/kern/vfs_syscalls.c:1849 #8 syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] #8 syscall+0x489 sys/arch/amd64/amd64/trap.c:585 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10251 6572K 7773K 78643K 32888 0 pcb 13 14K 16K 78643K 2627 0 rtable 235 18K 19K 78643K 5332 0 ifaddr 104 27K 30K 78643K 2018 0 sysctl 2 0K 0K 78643K 2 0 counters 60 36K 36K 78643K 562 0 ioctlops 0 0K 4K 78643K 7618 0 iov 0 0K 28K 78643K 7527 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1430 89K 90K 78643K 6286 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 100 0 VM map 2 1K 1K 78643K 2 0 sem 11 1K 1K 78643K 12 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 15 53K 82K 78643K 14657 0 sigio 0 0K 0K 78643K 98 0 proc 72 87K 124K 78643K 2210 0 subproc 104 6K 6K 78643K 481 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 508 0 in_multi 92 6K 6K 78643K 612 0 ether_multi 1 0K 0K 78643K 86 0 mrt 1 0K 0K 78643K 34 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 385 1712K 1712K 78643K 385 0 exec 0 0K 2K 78643K 2513 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 525 722K 725K 78643K 188013 0 UVM aobj 131 4K 4K 78643K 142 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 504 0 NDP 16 0K 2K 78643K 347 0 temp 155 4727K 4795K 78643K 152068 0 kqueue 12 18K 24K 78643K 467 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 1660 0 1657 16 15 1 3 0 8 0 rtentry 112 1427 0 1330 4 0 4 4 0 8 0 unpcb 136 6372 0 6357 69 64 5 8 0 8 4 syncache 296 26 0 26 5 5 0 1 0 8 0 tcpqe 32 54 0 54 1 1 0 1 0 8 0 tcpcb 736 3296 0 3290 90 81 9 13 0 8 8 arp 120 91 0 73 1 0 1 1 0 8 0 inpcb 304 13249 0 13241 102 94 8 11 0 8 7 rttmr 72 9 0 9 3 3 0 1 0 8 0 nd6 48 126 0 103 1 0 1 1 0 8 0 pkpcb 40 12 0 12 2 2 0 1 0 8 0 kcovpl 48 37 0 29 1 0 1 1 0 8 0 ppxss 1248 28 0 28 8 8 0 1 0 8 0 pfstscr 40 237 0 237 11 10 1 1 0 8 1 pffrag 232 55 0 54 5 4 1 1 0 482 0 pffrnode 88 55 0 54 5 4 1 1 0 8 0 pffrent 40 345 0 344 5 4 1 1 0 8 0 pfosfp 40 1431 0 1007 5 0 5 5 0 8 0 pfosfpen 112 1431 0 716 21 0 21 21 0 8 0 pfrktable 1344 399 0 393 2 1 1 2 0 8 0 pftag 88 111 0 108 2 1 1 1 0 8 0 pfstitem 24 637 0 635 1 0 1 1 0 8 0 pfstkey 112 5942 0 5940 1 0 1 1 0 8 0 pfstate 320 3522 0 3520 3 2 1 3 0 8 0 pfrule 1360 558 0 515 9 5 4 4 0 8 0 art_heap8 4096 2 0 1 2 1 1 2 0 8 0 art_heap4 256 1993 0 1548 38 9 29 31 0 8 0 art_table 32 1995 0 1549 4 0 4 4 0 8 0 art_node 16 503 0 417 1 0 1 1 0 8 0 sysvmsgpl 40 45 0 5 1 0 1 1 0 8 0 semupl 112 5 0 5 1 1 0 1 0 8 0 semapl 112 9 0 0 1 0 1 1 0 8 0 shmpl 112 139 0 11 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 21551 0 20085 92 0 92 92 0 8 0 ffsino 272 21551 0 20085 99 0 99 99 0 8 0 nchpl 144 42085 0 40458 63 0 63 63 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 224 5926 0 0 349 0 349 349 0 8 0 namei 1024 146524 0 146524 5 4 1 2 0 8 1 percpumem 16 293 0 251 1 0 1 1 0 8 0 vcpupl 2048 183 0 0 23 0 23 23 0 8 0 vmpool 560 265 0 82 14 0 14 14 0 8 0 pfiaddrpl 120 153 0 136 1 0 1 1 0 8 0 scxspl 216 113544 0 113544 26 25 1 5 0 8 1 plimitpl 152 1013 0 998 1 0 1 1 0 8 0 sigapl 424 14923 0 14859 8 0 8 8 0 8 0 futexpl 64 139363 0 139361 2 1 1 1 0 8 0 knotepl 120 356 0 0 10 1 9 10 0 8 0 kqueuepl 216 6180 0 6172 41 36 5 8 0 8 4 pipepl 336 2611 0 2583 71 68 3 13 0 8 0 fdescpl 496 14887 0 14859 5 1 4 5 0 8 0 filepl 152 102170 0 101929 123 105 18 20 0 8 8 lockfpl 104 2911 0 2909 8 7 1 4 0 8 0 lockfspl 48 741 0 739 1 0 1 1 0 8 0 sessionpl 144 53 0 36 1 0 1 1 0 8 0 pgrppl 48 89 0 72 1 0 1 1 0 8 0 ucredpl 96 8204 0 8191 1 0 1 1 0 8 0 zombiepl 144 14859 0 14857 3 2 1 1 0 8 0 processpl 1064 14923 0 14857 5 0 5 5 0 8 0 procpl 672 42820 0 42740 19 11 8 9 0 8 0 srpgc 96 41 0 41 8 8 0 1 0 8 0 sosppl 168 61 0 61 13 13 0 1 0 8 0 sockpl 480 21380 0 21354 338 326 12 28 0 8 8 mcl64k 65536 34 0 0 4 1 3 3 0 8 0 mcl16k 16384 29 0 0 4 2 2 3 0 8 0 mcl12k 12288 41 0 0 2 0 2 2 0 8 0 mcl9k 9216 17 0 0 2 0 2 2 0 8 0 mcl8k 8192 33 0 0 5 2 3 3 0 8 0 mcl4k 4096 33 0 0 3 0 3 3 0 8 0 mcl2k2 2112 14 0 0 1 0 1 1 0 8 0 mcl2k 2048 320 0 0 23 4 19 23 0 8 0 mtagpl 96 712 0 0 11 0 11 11 0 8 0 mbufpl 256 1366 0 0 69 0 69 69 0 8 0 bufpl 288 25255 0 18919 453 0 453 453 0 8 0 anonpl 24 4193021 0 4172531 239 105 134 153 0 186 0 amapchunkpl 152 459024 0 458178 82 44 38 47 0 158 1 amappl16 200 40319 0 39634 115 77 38 51 0 8 0 amappl15 192 5703 0 5694 1 0 1 1 0 8 0 amappl14 184 2974 0 2969 2 1 1 1 0 8 0 amappl13 176 1927 0 1925 1 0 1 1 0 8 0 amappl12 168 1840 0 1834 1 0 1 1 0 8 0 amappl11 160 1544 0 1529 1 0 1 1 0 8 0 amappl10 152 2535 0 2528 1 0 1 1 0 8 0 amappl9 144 1660 0 1655 1 0 1 1 0 8 0 amappl8 136 1484 0 1341 5 0 5 5 0 8 0 amappl7 128 260 0 246 1 0 1 1 0 8 0 amappl6 120 1510 0 1477 4 2 2 2 0 8 0 amappl5 112 12116 0 12092 1 0 1 1 0 8 0 amappl4 104 6617 0 6574 3 1 2 2 0 8 0 amappl3 96 3766 0 3753 1 0 1 1 0 8 0 amappl2 88 3935 0 3878 3 1 2 3 0 8 0 amappl1 80 271552 0 270969 23 9 14 19 0 8 0 amappl 88 186833 0 186528 12 4 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 141 0 11 3 0 3 3 0 8 0 uaddrrnd 24 15152 0 14940 2 0 2 2 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 15152 0 14940 2 0 2 2 0 8 0 vmmpekpl 168 111194 0 111112 5 1 4 4 0 8 0 vmmpepl 168 1349290 0 1346185 308 163 145 174 0 357 2 vmsppl 368 15151 0 14939 21 1 20 20 0 8 0 rwobjpl 56 333839 0 325970 121 8 113 115 0 8 0 pdppl 4096 30311 0 30061 632 380 252 253 0 8 2 pvpl 32 6858206 0 6834117 428 223 205 248 0 265 0 pmappl 248 15151 0 14939 15 1 14 14 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 1649 0 560 32 0 32 32 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:440 panic(ffffffff825760e8) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff825ea380,ffffffff8255d87a,568,ffffffff8258bfdc) at __assert+0x25 sys/kern/subr_prf.c:161 m_align(fffffd80767bd000,ffffffd7) at m_align+0x1a0 sys/kern/uipc_mbuf.c:1385 bpf_movein(ffff800021448068,ffff800000e11800,ffff800021447dc8,ffff800021447cc8) at bpf_movein+0x25e sys/net/bpf.c:228 bpfwrite(31700,ffff800021448068,1) at bpfwrite+0x169 sys/net/bpf.c:644 spec_write(ffff800021447ec0) at spec_write+0xd4 sys/kern/spec_vnops.c:309 VOP_WRITE(fffffd805b38d7b0,ffff800021448068,1,fffffd807f7d88a0) at VOP_WRITE+0xbf sys/kern/vfs_vops.c:245 vn_write(fffffd806a5af3a0,ffff800021448068,0) at vn_write+0x157 sys/kern/vfs_vnops.c:414 dofilewritev(ffff800027d1ad20,3,ffff800021448068,0,ffff800021448160) at dofilewritev+0x19c sys/kern/sys_generic.c:381 sys_write(ffff800027d1ad20,ffff800021448108,ffff800021448160) at sys_write+0x83 sys/kern/sys_generic.c:301 syscall(ffff8000214481d0) at syscall+0x489 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff8000214481d0) at syscall+0x489 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x2773214dcc0, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff82b5bd20) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82b5bd20) at __mp_lock+0x133 sys/kern/kern_lock.c:147 uvm_unmap_detach(ffff800021135a10,1) at uvm_unmap_detach+0x113 sys/uvm/uvm_map.c:1615 uvm_map_teardown(fffffd806d33f5f0) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 uvmspace_free(fffffd806d33f5f0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 reaper(ffff8000210f9500) at reaper+0x18b sys/kern/kern_exit.c:462 end trace frame: 0x0, count: 6 ddb{1}> trace x86_ipi_db(ffff800020ce8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff82b5bd20) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82b5bd20) at __mp_lock+0x133 sys/kern/kern_lock.c:147 uvm_unmap_detach(ffff800021135a10,1) at uvm_unmap_detach+0x113 sys/uvm/uvm_map.c:1615 uvm_map_teardown(fffffd806d33f5f0) at uvm_map_teardown+0x262 sys/uvm/uvm_map.c:2789 uvmspace_free(fffffd806d33f5f0) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3685 reaper(ffff8000210f9500) at reaper+0x18b sys/kern/kern_exit.c:462 end trace frame: 0x0, count: -9