login: uvm_fault(0xffffffff828b7d00, 0xa, 0, 1) -> e
kernel: page fault trap, code=0
Stopped at vio_rxeof+0x191: movzwl 0xa(%r15),%eax
ddb{0}>
ddb{0}> set $lines = 0
ddb{0}> set $maxwidth = 0
ddb{0}> show panic
kernel page fault
uvm_fault(0xffffffff828b7d00, 0xa, 0, 1) -> e
vio_rxeof(ffff80000017b000) at vio_rxeof+0x191 sys/dev/pv/if_vio.c:1018
end trace frame: 0xffff800020d91c20, count: 0
ddb{0}> trace
vio_rxeof(ffff80000017b000) at vio_rxeof+0x191 sys/dev/pv/if_vio.c:1018
vio_rx_intr(ffff80000017b050) at vio_rx_intr+0x4d sys/dev/pv/if_vio.c:1056
intr_handler(ffff800020d91c80,ffff800000255b80) at intr_handler+0x8f sys/arch/amd64/amd64/intr.c:536
Xintr_ioapic_edge19_untramp() at Xintr_ioapic_edge19_untramp+0x19f
acpicpu_idle() at acpicpu_idle+0x331 sys/dev/acpi/acpicpu.c:1187
sched_idle(ffffffff82708ff0) at sched_idle+0x3f7 sys/kern/kern_sched.c:178
end trace frame: 0x0, count: -6
ddb{0}> show registers
rdi 0xc
rsi 0xc
rbp 0xffff800020d91bc0
rbx 0xffff80000017b000
rdx 0
rcx 0xffff8000001ac000
rax 0x1
r8 0x2
r9 0
r10 0x4272080aa60b067e
r11 0x3c9000b47910c7e7
r12 0xffff800000024c00
r13 0xc
r14 0xfffffd806d7aae00
r15 0
rip 0xffffffff81508791 vio_rxeof+0x191
cs 0x8
rflags 0x10246 __ALIGN_SIZE+0xf246
rsp 0xffff800020d91b30
ss 0x10
vio_rxeof+0x191: movzwl 0xa(%r15),%eax
ddb{0}> show proc
PROC (idle0) pid=439837 stat=onproc
flags process=14000<NOZOMBIE,SYSTEM> proc=40000200<SYSTEM,CPUPEG>
pri=0, usrpri=50, nice=20
forw=0x575db19736e2089, list=0xffff800020d89d40,0xffff800020d89600
process=0xffff800020d8a7c0 user=0xffff800020d8c000, vmspace=0xffffffff828b7d00
estcpu=0, cpticks=5110, pctcpu=0.0
user=0, sys=0, intr=1
ddb{0}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
51630 58386 75834 0 3 0x2 biowait syz-executor.0
75834 294343 52361 0 3 0x82 thrsleep syz-execprog
75834 442110 52361 0 3 0x4000082 nanosleep syz-execprog
75834 229360 52361 0 3 0x4000082 thrsleep syz-execprog
75834 94039 52361 0 3 0x4000082 thrsleep syz-execprog
75834 304096 52361 0 3 0x4000082 thrsleep syz-execprog
75834 374722 52361 0 3 0x4000082 thrsleep syz-execprog
75834 436257 52361 0 3 0x4000082 nanosleep syz-execprog
75834 483676 52361 0 3 0x4000082 thrsleep syz-execprog
75834 71476 52361 0 3 0x4000082 kqread syz-execprog
52361 341516 90077 0 3 0x10008a pause ksh
90077 168682 29164 0 3 0x92 select sshd
64265 236320 1 0 3 0x100083 ttyin getty
29164 94375 1 0 3 0x80 select sshd
33594 428631 29553 74 3 0x100092 bpf pflogd
29553 198692 1 0 3 0x80 netio pflogd
19032 275343 17777 73 3 0x100090 kqread syslogd
17777 514247 1 0 3 0x100082 netio syslogd
48863 69750 1 77 3 0x100090 poll dhclient
18990 176434 1 0 3 0x80 poll dhclient
52483 246711 0 0 3 0x14200 bored smr
5186 443795 0 0 3 0x14200 pgzero zerothread
56062 10236 0 0 3 0x14200 aiodoned aiodoned
5139 467762 0 0 3 0x14200 syncer update
35717 309324 0 0 3 0x14200 cleaner cleaner
53648 245079 0 0 3 0x14200 reaper reaper
94289 36088 0 0 3 0x14200 pgdaemon pagedaemon
55809 437333 0 0 3 0x14200 bored crynlk
38167 94435 0 0 3 0x14200 bored crypto
58651 490323 0 0 3 0x40014200 acpi0 acpi0
6768 352081 0 0 7 0x40014200 idle1
39109 399125 0 0 3 0x14200 bored softnet
50420 404514 0 0 3 0x14200 bored systqmp
84078 458812 0 0 3 0x14200 bored systq
8944 225577 0 0 3 0x40014200 bored softclock
*32553 439837 0 0 7 0x40014200 idle0
1 137092 0 0 3 0x82 wait init
0 0 -1 0 3 0x10200 scheduler swapper
ddb{0}> show all locks
Process 51630 (syz-executor.0) thread 0xffff800020ddc9c8 (58386)
exclusive rrwlock inode r = 0 (0xfffffd806b7bf2b8)
#0 witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0 witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1 rw_enter+0x453 sys/kern/kern_rwlock.c:311
#2 rrw_enter+0x88 sys/kern/kern_rwlock.c:462
#3 ufs_ihashins+0x45 sys/ufs/ufs/ufs_ihash.c:140
#4 ffs_vget+0x13e sys/ufs/ffs/ffs_vfsops.c:1358
#5 ffs_inode_alloc+0x1e2 sys/ufs/ffs/ffs_alloc.c:394
#6 ufs_mkdir+0xf4 sys/ufs/ufs/ufs_vnops.c:1162
#7 VOP_MKDIR+0xc6 sys/kern/vfs_vops.c:450
#8 domkdirat+0x121 sys/kern/vfs_syscalls.c:3051
#9 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#9 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#10 Xsyscall+0x128
exclusive rrwlock inode r = 0 (0xfffffd806b7bf5e8)
#0 witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0 witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1 rw_enter+0x453 sys/kern/kern_rwlock.c:311
#2 rrw_enter+0x88 sys/kern/kern_rwlock.c:462
#3 VOP_LOCK+0x4b sys/kern/vfs_vops.c:603
#4 vn_lock+0x81 sys/kern/vfs_vnops.c:575
#5 vfs_lookup+0xe6 sys/kern/vfs_lookup.c:419
#6 namei+0x63c sys/kern/vfs_lookup.c:249
#7 domkdirat+0x75 sys/kern/vfs_syscalls.c:3036
#8 syscall+0x4a4 mi_syscall sys/sys/syscall_mi.h:102 [inline]
#8 syscall+0x4a4 sys/arch/amd64/amd64/trap.c:570
#9 Xsyscall+0x128
Process 32553 (idle0) thread 0xffff800020d89ad0 (439837)
exclusive kernel_lock &kernel_lock r = 1 (0xffffffff828eb278)
#0 witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline]
#0 witness_lock+0x4c7 sys/kern/subr_witness.c:1164
#1 intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532
#2 Xintr_ioapic_edge19_untramp+0x19f
#3 acpicpu_idle+0x331 sys/dev/acpi/acpicpu.c:1187
#4 sched_idle+0x3f7 sys/kern/kern_sched.c:178
#5 proc_trampoline+0x1c
ddb{0}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 9467 6396K 6396K 78643K 10560 0
pcb 13 8K 8K 78643K 13 0
rtable 83 2K 2K 78643K 163 0
ifaddr 37 9K 9K 78643K 283 0
counters 41 33K 33K 78643K 41 0
ioctlops 0 0K 4K 78643K 1468 0
mount 1 1K 1K 78643K 1 0
vnodes 1183 74K 75K 78643K 1188 0
UFS quota 1 32K 32K 78643K 1 0
UFS mount 5 36K 36K 78643K 5 0
shm 2 1K 1K 78643K 2 0
VM map 2 1K 1K 78643K 2 0
sem 2 0K 0K 78643K 2 0
dirhash 12 2K 2K 78643K 12 0
ACPI 1824 197K 290K 78643K 13058 0
file desc 2 4K 12K 78643K 262 0
proc 59 63K 83K 78643K 398 0
NFS srvsock 1 0K 0K 78643K 1 0
NFS daemon 1 16K 16K 78643K 1 0
in_multi 22 1K 1K 78643K 22 0
ether_multi 1 0K 0K 78643K 1 0
ISOFS mount 1 32K 32K 78643K 1 0
MSDOSFS mount 1 16K 16K 78643K 1 0
ttys 19 95K 95K 78643K 19 0
exec 0 0K 1K 78643K 197 0
pagedep 1 8K 8K 78643K 1 0
inodedep 1 32K 32K 78643K 1 0
newblk 1 0K 0K 78643K 1 0
VM swap 7 26K 26K 78643K 7 0
UVM amap 75 12K 12K 78643K 1193 0
UVM aobj 3 2K 2K 78643K 3 0
memdesc 1 4K 4K 78643K 1 0
crypto data 1 1K 1K 78643K 1 0
NDP 5 0K 0K 78643K 7 0
temp 29 3853K 3917K 78643K 2363 0
kqueue 3 4K 4K 78643K 3 0
SYN cache 2 16K 16K 78643K 2 0
ddb{0}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
arp 64 4 0 0 1 0 1 1 0 8 0
plcache 128 20 0 0 1 0 1 1 0 8 0
rtpcb 80 17 0 15 1 0 1 1 0 8 0
rtentry 112 34 0 1 1 0 1 1 0 8 0
unpcb 120 29 0 19 1 0 1 1 0 8 0
syncache 264 5 0 5 2 2 0 1 0 8 0
tcpcb 544 8 0 5 1 0 1 1 0 8 0
inpcb 296 278 0 272 1 0 1 1 0 8 0
nd6 48 3 0 0 1 0 1 1 0 8 0
pfosfp 40 846 0 423 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
pfstitem 24 10 0 2 1 0 1 1 0 8 0
pfstkey 112 10 0 2 1 0 1 1 0 8 0
pfstate 328 10 0 2 1 0 1 1 0 8 0
pfrule 1360 21 0 16 2 1 1 2 0 8 0
art_heap8 4096 1 0 0 1 0 1 1 0 8 0
art_heap4 256 144 0 0 9 0 9 9 0 8 0
art_table 32 145 0 0 2 0 2 2 0 8 0
art_node 16 33 0 3 1 0 1 1 0 8 0
dirhash 1024 17 0 0 3 0 3 3 0 8 0
dino2pl 256 1669 0 267 88 0 88 88 0 8 0
ffsino 272 1669 0 267 94 0 94 94 0 8 0
nchpl 144 2132 0 529 60 0 60 60 0 8 0
uvmvnodes 72 1679 0 0 31 0 31 31 0 8 0
vnodes 208 1679 0 0 89 0 89 89 0 8 0
namei 1024 5209 0 5208 2 1 1 1 0 8 0
percpumem 16 31 0 0 1 0 1 1 0 8 0
scxspl 192 6122 0 6121 9 8 1 7 0 8 0
plimitpl 152 15 0 8 1 0 1 1 0 8 0
sigapl 424 485 0 456 4 0 4 4 0 8 0
knotepl 112 47 0 36 1 0 1 1 0 8 0
kqueuepl 144 2 0 0 1 0 1 1 0 8 0
pipepl 304 77 0 70 2 1 1 1 0 8 0
fdescpl 496 470 0 456 3 0 3 3 0 8 0
filepl 152 1605 0 1547 3 0 3 3 0 8 0
lockfpl 104 5 0 4 1 0 1 1 0 8 0
lockfspl 48 3 0 2 1 0 1 1 0 8 0
sessionpl 112 19 0 9 1 0 1 1 0 8 0
pgrppl 48 19 0 9 1 0 1 1 0 8 0
ucredpl 96 62 0 53 1 0 1 1 0 8 0
zombiepl 144 456 0 456 2 1 1 1 0 8 1
processpl 992 485 0 456 5 0 5 5 0 8 1
procpl 624 493 0 456 3 0 3 3 0 8 0
sockpl 400 324 0 306 2 0 2 2 0 8 0
mcl4k 4096 3 0 0 1 0 1 1 0 8 0
mcl2k 2048 72 0 0 9 0 9 9 0 8 0
mtagpl 96 1 0 0 1 0 1 1 0 8 0
mbufpl 256 110 0 0 6 0 6 6 0 8 0
mbufpl: pool(0xffffffff82907dc0:mbufpl): free list modified: page 0xfffffd806f0bc000; item ordinal 2; addr 0xfffffd806f0bcb00 (p 0xfffffd806f2d1000); offset 0x0=0x0
pool(mbufpl): free list modified: page 0xfffffd806f0bc000; item ordinal 2; addr 0xfffffd806f0bcb00 (p 0xfffffd806f2d1000); offset 0x0=0x0
mbufpl: pool(0xffffffff82907dc0:mbufpl): page inconsistency: page 0xfffffd806f0bc000; item ordinal 3; addr 0x9b5591e393381e0a
bufpl 280 3295 0 133 226 0 226 226 0 8 0
anonpl 16 28685 0 26885 14 2 12 12 0 124 3
amapchunkpl 152 1069 0 1007 4 0 4 4 0 158 0
amappl16 192 1138 0 1095 3 0 3 3 0 8 0
amappl15 184 1 0 0 1 0 1 1 0 8 0
amappl14 176 38 0 33 1 0 1 1 0 8 0
amappl13 168 22 0 20 2 1 1 1 0 8 0
amappl12 160 11 0 9 2 1 1 1 0 8 0
amappl11 152 54 0 39 1 0 1 1 0 8 0
amappl10 144 20 0 17 1 0 1 1 0 8 0
amappl9 136 481 0 479 1 0 1 1 0 8 0
amappl8 128 518 0 510 1 0 1 1 0 8 0
amappl7 120 117 0 105 1 0 1 1 0 8 0
amappl6 112 23 0 20 2 1 1 1 0 8 0
amappl5 104 370 0 356 1 0 1 1 0 8 0
amappl4 96 505 0 475 1 0 1 1 0 8 0
amappl3 88 107 0 100 1 0 1 1 0 8 0
amappl2 80 1396 0 1339 3 1 2 2 0 8 0
amappl1 72 17156 0 16737 24 6 18 18 0 8 8
amappl 80 720 0 693 1 0 1 1 0 84 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 253 0 253 1 1 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 64 2 0 0 1 0 1 1 0 8 0
uaddrrnd 24 470 0 456 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 470 0 456 1 0 1 1 0 8 0
vmmpekpl 168 6901 0 6874 2 0 2 2 0 8 0
vmmpepl 168 43808 0 42860 86 13 73 73 0 357 30
vmsppl 368 469 0 456 2 0 2 2 0 8 0
pdppl 4096 947 0 912 6 0 6 6 0 8 1
pvpl 32 139986 0 135807 109 5 104 104 0 265 69
pmappl 232 469 0 456 1 0 1 1 0 8 0
extentpl 40 53 0 36 1 0 1 1 0 8 0
phpool 112 231 0 4 7 0 7 7 0 8 0
ddb{0}>