panic: kernel diagnostic assertion "next != NULL && next->start <= entry->end" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1764
Stopped at db_enter+0x25: addq $0x8,%rsp
TID PID UID PRFLAGS PFLAGS CPU COMMAND
271394 37520 0 0 0 0 syz-executor
*252588 37520 0 0 0x4000000 1 syz-executor
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833ae2be) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833f0989,ffffffff8334e921,6e4,ffffffff833d04f9) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_fault_unwire_locked(fffffd806c731b90,200000070000,200000080000) at uvm_fault_unwire_locked+0x414 sys/uvm/uvm_fault.c:1761
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
uvm_vslock_device(ffff80003aff9ca8,200000070140,10000,3,ffff80003c45b278) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
physio(ffffffff81aa8de0,d02,8000,ffffffff81aa9630,ffff80003c45b5d0) at physio+0x257 sys/kern/kern_physio.c:139
spec_read(ffff80003c45b3b0) at spec_read+0x14b sys/kern/spec_vnops.c:215
VOP_READ(fffffd806c4bea68,ffff80003c45b5d0,0,fffffd80097fd1a0) at VOP_READ+0x101 sys/kern/vfs_vops.c:227
vn_read(fffffd806177a050,ffff80003c45b5d0,1) at vn_read+0x17b sys/kern/vfs_vnops.c:369
dofilereadv(ffff80003aff9ca8,3,ffff80003c45b5d0,1,ffff80003c45b690) at dofilereadv+0x25a sys/kern/sys_generic.c:252
sys_preadv(ffff80003aff9ca8,ffff80003c45b740,ffff80003c45b690) at sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
syscall(ffff80003c45b740) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c45b740) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcac66d4c230, count: 1
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports. Insufficient info makes it difficult to find and fix bugs.
ddb{1}>
ddb{1}> set $lines = 0
ddb{1}> set $maxwidth = 0
ddb{1}> show panic
*cpu1: kernel diagnostic assertion "next != NULL && next->start <= entry->end" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_fault.c", line 1764
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833ae2be) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833f0989,ffffffff8334e921,6e4,ffffffff833d04f9) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_fault_unwire_locked(fffffd806c731b90,200000070000,200000080000) at uvm_fault_unwire_locked+0x414 sys/uvm/uvm_fault.c:1761
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
uvm_vslock_device(ffff80003aff9ca8,200000070140,10000,3,ffff80003c45b278) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
physio(ffffffff81aa8de0,d02,8000,ffffffff81aa9630,ffff80003c45b5d0) at physio+0x257 sys/kern/kern_physio.c:139
spec_read(ffff80003c45b3b0) at spec_read+0x14b sys/kern/spec_vnops.c:215
VOP_READ(fffffd806c4bea68,ffff80003c45b5d0,0,fffffd80097fd1a0) at VOP_READ+0x101 sys/kern/vfs_vops.c:227
vn_read(fffffd806177a050,ffff80003c45b5d0,1) at vn_read+0x17b sys/kern/vfs_vnops.c:369
dofilereadv(ffff80003aff9ca8,3,ffff80003c45b5d0,1,ffff80003c45b690) at dofilereadv+0x25a sys/kern/sys_generic.c:252
sys_preadv(ffff80003aff9ca8,ffff80003c45b740,ffff80003c45b690) at sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
syscall(ffff80003c45b740) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c45b740) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcac66d4c230, count: -14
ddb{1}> show registers
rdi 0
rsi 0x1
rbp 0xffff80003c45af90
rbx 0xffff8000299dee07
rdx 0
rcx 0xffff80003aff9ca8
rax 0xffff8000299ddff0
r8 0x101010101010101
r9 0x8080808080808080
r10 0x14cb650cd3aa5844
r11 0x7c4f371087f9a5ee
r12 0xffff8000299dec08
r13 0
r14 0
r15 0x1
rip 0xffffffff81fbb4e5 db_enter+0x25
cs 0x8
rflags 0x246
rsp 0xffff80003c45af80
ss 0
db_enter+0x25: addq $0x8,%rsp
ddb{1}> show proc
PROC (syz-executor) tid=252588 pid=37520 tcnt=4 stat=onproc
flags process=0 proc=4000000<THREAD>
runpri=32, usrpri=86, slppri=32, nice=20
wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0
forw=0xffffffffffffffff, list=0xffff80003aff8a80,0xffff8000fffeea88
process=0xffff80003c415360 user=0xffff80003c456000, vmspace=0xfffffd806c731b90
estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=3, intr=0
ddb{1}> ps
PID TID PPID UID S FLAGS WAIT COMMAND
28949 64388 83802 0 2 0 syz-executor
28949 15436 83802 0 3 0x4000080 fsleep syz-executor
37520 271394 81828 0 7 0 syz-executor
*37520 252588 81828 0 7 0x4000000 syz-executor
37520 191775 81828 0 3 0x4000080 fsleep syz-executor
37520 230539 81828 0 3 0x4000080 fsleep syz-executor
7890 130697 41913 0 2 0 syz-executor
7890 443174 41913 0 2 0x4000000 syz-executor
6038 212282 10673 0 2 0 syz-executor
6038 494481 10673 0 3 0x4000080 fsleep syz-executor
6038 148662 10673 0 2 0x4000000 syz-executor
98543 286061 38781 0 2 0 syz-executor
98543 185241 38781 0 3 0x4000080 fsleep syz-executor
98543 85056 38781 0 3 0x4000080 fsleep syz-executor
73483 416284 12369 60928 2 0x10 syz-executor
73483 267712 12369 60928 3 0x4000090 fsleep syz-executor
83214 289857 8346 0 3 0x80 nanoslp syz-executor
83214 269675 8346 0 3 0x4000080 kqsel syz-executor
83214 252684 8346 0 3 0x4000080 fsleep syz-executor
83214 83594 8346 0 3 0x4000080 fsleep syz-executor
80277 271062 0 0 3 0x14200 acct acct
37166 191392 82480 0 3 0x82 nanoslp syz-executor
12369 489705 82480 0 3 0x82 nanoslp syz-executor
38781 434591 82480 0 3 0x82 nanoslp syz-executor
41913 481753 82480 0 3 0x82 nanoslp syz-executor
81828 330181 82480 0 3 0x82 nanoslp syz-executor
10673 137631 82480 0 3 0x82 nanoslp syz-executor
83802 82526 82480 0 3 0x82 nanoslp syz-executor
8346 157315 82480 0 3 0x82 nanoslp syz-executor
82480 383463 64849 0 3 0x82 kqread syz-executor
64849 463525 93106 0 3 0x10008a sigsusp ksh
93106 490145 14736 0 3 0x98 kqread sshd-session
14736 147646 31236 0 3 0x92 kqread sshd-session
82251 36897 1 0 3 0x100083 ttyopn getty
31236 307477 1 0 3 0x88 kqread sshd
21465 519744 65815 74 3 0x1100092 bpf pflogd
65815 265242 1 0 3 0x80 sbwait pflogd
85736 56894 76496 73 3 0x1100090 kqread syslogd
76496 398067 1 0 3 0x100082 sbwait syslogd
40020 453725 1 0 3 0x100080 kqread resolvd
74484 381939 45537 77 3 0x100092 kqread dhcpleased
97315 197781 45537 77 3 0x100092 kqread dhcpleased
45537 224329 1 0 3 0x80 kqread dhcpleased
1056 469288 0 0 3 0x14200 pause smr
70144 190101 0 0 2 0x14200 zerothread
32761 509570 0 0 3 0x14200 aiodoned aiodoned
29828 467166 0 0 3 0x14200 syncer update
12833 513449 0 0 3 0x14200 cleaner cleaner
9549 254776 0 0 3 0x14200 reaper reaper
47923 325318 0 0 3 0x14200 pgdaemon pagedaemon
63599 202028 0 0 3 0x14200 bored viomb
32201 88320 0 0 3 0x40014200 acpi0 acpi0
64862 179793 0 0 3 0x40014200 idle1
52642 468516 0 0 3 0x14200 bored softnet1
29858 467001 0 0 3 0x14200 bored softnet0
82010 496937 0 0 3 0x14200 bored systqmp
17377 429339 0 0 3 0x14200 bored systq
39629 507876 0 0 3 0x14200 tmoslp softclockmp
9060 296274 0 0 3 0x40014200 tmoslp softclock
13439 296890 0 0 3 0x40014200 idle0
1 289073 0 0 3 0x82 wait init
0 0 -1 0 3 0x10010200 scheduler swapper
ddb{1}> show all locks
Process 37520 (syz-executor) thread 0xffff80003aff9ca8 (252588)
exclusive rwlock amaplk r = 0 (0xfffffd80798f52a8)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320
#2 uvm_map_lock_entry+0x51 sys/uvm/uvm_map.c:464
#3 uvm_fault_unwire_locked+0x26d sys/uvm/uvm_fault.c:1776
#4 uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
#4 uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
#5 uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
#6 physio+0x257 sys/kern/kern_physio.c:139
#7 spec_read+0x14b sys/kern/spec_vnops.c:215
#8 VOP_READ+0x101 sys/kern/vfs_vops.c:227
#9 vn_read+0x17b sys/kern/vfs_vnops.c:369
#10 dofilereadv+0x25a sys/kern/sys_generic.c:252
#11 sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
#12 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#12 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#13 Xsyscall+0x128
exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838ec400)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1
#2 sleep_finish+0x2d8 sys/kern/kern_synch.c:369
#3 rw_do_enter_write+0x1dc sys/kern/kern_rwlock.c:298
#4 uvm_map_lock_entry+0x51 sys/uvm/uvm_map.c:464
#5 uvm_fault_unwire_locked+0x26d sys/uvm/uvm_fault.c:1776
#6 uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
#6 uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
#7 uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
#8 physio+0x257 sys/kern/kern_physio.c:139
#9 spec_read+0x14b sys/kern/spec_vnops.c:215
#10 VOP_READ+0x101 sys/kern/vfs_vops.c:227
#11 vn_read+0x17b sys/kern/vfs_vnops.c:369
#12 dofilereadv+0x25a sys/kern/sys_generic.c:252
#13 sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
#14 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#14 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#15 Xsyscall+0x128
shared rwlock vmmaplk r = 0 (0xfffffd806c731c90)
#0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline]
#0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160
#1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413
#2 uvm_fault_wire+0x116 uvm_fault_unwire sys/uvm/uvm_fault.c:1723 [inline]
#2 uvm_fault_wire+0x116 sys/uvm/uvm_fault.c:1706
#3 uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
#4 physio+0x257 sys/kern/kern_physio.c:139
#5 spec_read+0x14b sys/kern/spec_vnops.c:215
#6 VOP_READ+0x101 sys/kern/vfs_vops.c:227
#7 vn_read+0x17b sys/kern/vfs_vnops.c:369
#8 dofilereadv+0x25a sys/kern/sys_generic.c:252
#9 sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
#10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
#10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
#11 Xsyscall+0x128
ddb{1}> show malloc
Type InUse MemUse HighUse Limit Requests Type Lim
devbuf 11070 12098K 13034K 166960K 13307 0
pcb 17 14K 15K 166960K 156 0
rtable 229 11K 12K 166960K 519 0
pf 34 17K 82K 166960K 124 0
ifaddr 38 6K 8K 166960K 94 0
ifgroup 52 2K 2K 166960K 149 0
sysctl 3 1K 9K 166960K 7 0
counters 70 37K 38K 166960K 188 0
ioctlops 0 0K 8K 166960K 1629 0
iov 1 12K 20K 166960K 34 0
mount 1 1K 1K 166960K 1 0
log 0 0K 0K 166960K 4 0
vnodes 1461 92K 93K 166960K 2133 0
UFS quota 1 32K 32K 166960K 1 0
UFS mount 5 36K 36K 166960K 5 0
shm 2 1K 5K 166960K 11 0
VM map 2 1K 1K 166960K 2 0
sem 12 0K 1K 166960K 29 0
dirhash 12 2K 2K 166960K 21 0
ACPI 1692 195K 286K 166960K 12470 0
file desc 18 65K 232K 166960K 782 0
sigio 0 0K 0K 166960K 23 0
proc 73 115K 164K 166960K 601 0
subproc 72 4K 4K 166960K 82 0
NFS srvsock 1 0K 0K 166960K 1 0
NFS daemon 1 16K 16K 166960K 1 0
ip_moptions 0 0K 0K 166960K 74 0
in_multi 75 5K 7K 166960K 144 0
ether_multi 1 0K 0K 166960K 10 0
mrt 0 0K 0K 166960K 4 0
ISOFS mount 1 32K 32K 166960K 1 0
MSDOSFS mount 1 16K 16K 166960K 1 0
ttys 85 387K 387K 166960K 85 0
exec 0 0K 1K 166960K 496 0
fusefs mount 1 32K 32K 166960K 1 0
tdb 3 0K 0K 166960K 3 0
VM swap 8 62K 64K 166960K 10 0
UVM amap 267 161K 175K 166960K 9057 0
UVM aobj 27 10K 10K 166960K 32 0
pinsyscall 43 86K 102K 166960K 1934 0
memdesc 1 4K 4K 166960K 1 0
crypto data 1 1K 1K 166960K 1 0
ip6_options 0 0K 1K 166960K 55 0
NDP 12 0K 2K 166960K 68 0
temp 55 8682K 8931K 166960K 36948 0
kqueue 14 22K 29K 166960K 195 0
SYN cache 2 16K 16K 166960K 2 0
ddb{1}> show all pools
Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle
plcache 128 26 0 0 1 0 1 1 0 8 0
rtpcb 120 86 0 83 1 0 1 1 0 8 0
rtentry 176 142 0 55 6 0 6 6 0 8 0
unpcb 144 642 0 623 7 1 6 6 0 8 5
syncache 336 7 0 7 1 1 0 1 0 8 0
tcpqe 32 3 0 3 1 1 0 1 0 8 0
tcpcb 736 237 0 230 7 0 7 7 0 8 6
arp 136 24 0 7 1 0 1 1 0 8 0
inpcb 328 801 0 783 8 1 7 7 0 8 5
nd6 152 30 0 9 1 0 1 1 0 8 0
kcovpl 48 9 0 1 1 0 1 1 0 8 0
ppxss 1192 50 0 50 1 0 1 1 0 8 1
pppxif 1504 3 0 3 1 1 0 1 0 8 0
pffrag 232 4 0 3 2 1 1 1 0 482 0
pffrnode 88 4 0 3 2 1 1 1 0 8 0
pffrent 40 9 0 8 2 1 1 1 0 8 0
pfosfp 40 1428 0 1005 5 0 5 5 0 8 0
pfosfpen 112 1428 0 714 21 0 21 21 0 8 0
art_heap8 4096 5 0 0 5 0 5 5 0 8 0
art_heap4 256 600 0 230 29 1 28 29 0 8 4
art_table 40 605 0 230 5 0 5 5 0 8 0
art_node 32 141 0 64 1 0 1 1 0 8 0
sysvmsgpl 40 5 0 5 2 1 1 1 0 8 1
semapl 112 26 0 16 1 0 1 1 0 8 0
shmpl 112 24 0 3 1 0 1 1 0 8 0
dirhash 1024 23 0 6 3 0 3 3 0 8 0
dino2pl 256 2874 0 1362 97 1 96 96 0 8 0
ffsino 296 2874 0 1362 118 0 118 118 0 8 0
nchpl 144 3906 0 2202 64 0 64 64 0 8 0
rtmask 32 13 0 13 2 2 0 1 0 8 0
vnodes 216 3441 0 0 192 0 192 192 0 8 0
namei 1024 12852 0 12852 3 1 2 2 0 8 2
percpumem 16 109 0 59 1 0 1 1 0 8 0
vcpupl 3968 3 0 0 1 0 1 1 0 8 0
vmpool 848 4 0 1 1 0 1 1 0 8 0
kstatmem 264 98 0 70 3 0 3 3 0 8 1
scsiplug 72 1 0 1 1 1 0 1 0 8 0
scxspl 216 25579 0 25579 16 8 8 8 1 8 8
plimitpl 152 154 0 137 1 0 1 1 0 8 0
sigapl 424 1087 0 1038 7 1 6 7 0 8 0
knotepl 120 752 0 0 23 0 23 23 0 8 0
kqueuepl 224 301 0 288 3 2 1 3 0 8 0
pipepl 344 175 0 148 3 0 3 3 0 8 0
fdescpl 528 1062 0 1030 3 0 3 3 0 8 0
filepl 160 6299 0 6071 19 1 18 18 0 8 8
lockfpl 104 215 0 212 1 0 1 1 0 8 0
lockfspl 48 91 0 88 1 0 1 1 0 8 0
sessionpl 144 26 0 17 1 0 1 1 0 8 0
pgrppl 48 41 0 24 1 0 1 1 0 8 0
ucredpl 104 831 0 816 1 0 1 1 0 8 0
zombiepl 144 1039 0 1038 1 0 1 1 0 8 0
processpl 1232 1087 0 1038 5 0 5 5 0 8 0
procpl 664 2238 0 2176 6 0 6 6 0 8 0
sosppl 176 12 0 11 1 0 1 1 0 8 0
sockpl 752 1546 0 1506 24 12 12 24 0 8 7
mcl64k 65536 3 0 0 1 0 1 1 0 8 0
mcl16k 16384 1 0 0 1 0 1 1 0 8 0
mcl8k 8192 2 0 0 1 0 1 1 0 8 0
mcl4k 4096 115 0 0 15 0 15 15 0 8 0
mcl2k 2048 41 0 0 6 0 6 6 0 8 0
mtagpl 96 3 0 0 1 0 1 1 0 8 0
mbufpl 256 1826 0 0 114 0 114 114 0 8 0
bufpl 280 10884 0 4747 439 0 439 439 0 8 0
anonpl 32 12295 0 0 100 0 100 100 0 246 0
amapchunkpl 152 29834 0 29149 39 12 27 36 0 158 0
amappl16 200 4365 0 4325 39 19 20 30 0 8 13
amappl15 192 17 0 17 1 1 0 1 0 8 0
amappl14 184 4 0 4 1 1 0 1 0 8 0
amappl13 176 448 0 447 1 0 1 1 0 8 0
amappl12 168 1434 0 1391 3 0 3 3 0 8 0
amappl11 160 10 0 9 1 0 1 1 0 8 0
amappl10 152 56 0 42 1 0 1 1 0 8 0
amappl9 144 248 0 247 1 0 1 1 0 8 0
amappl8 136 24 0 22 1 0 1 1 0 8 0
amappl7 128 84 0 83 1 0 1 1 0 8 0
amappl6 120 315 0 301 1 0 1 1 0 8 0
amappl5 112 77 0 67 1 0 1 1 0 8 0
amappl4 104 432 0 401 1 0 1 1 0 8 0
amappl3 96 5064 0 4956 4 1 3 3 0 8 0
amappl2 88 1217 0 1139 2 0 2 2 0 8 0
amappl1 80 12473 0 11878 14 0 14 14 0 8 0
amappl 88 8180 0 7991 5 0 5 5 0 92 0
uvmvnodes 80 120 0 0 3 0 3 3 0 8 0
dma4096 4096 1 0 1 1 1 0 1 0 8 0
dma1024 1024 1 0 0 1 0 1 1 0 8 0
dma256 256 6 0 6 1 1 0 1 0 8 0
dma128 128 254 0 254 2 2 0 1 0 8 0
dma64 64 6 0 6 1 1 0 1 0 8 0
dma32 32 7 0 7 1 1 0 1 0 8 0
dma16 16 18 0 17 1 0 1 1 0 8 0
aobjpl 72 31 0 5 1 0 1 1 0 8 0
uaddrrnd 24 1063 0 1031 1 0 1 1 0 8 0
uaddrbest 32 2 0 0 1 0 1 1 0 8 0
uaddr 24 1063 0 1031 1 0 1 1 0 8 0
vmmpekpl 168 10643 0 10606 3 0 3 3 0 8 0
vmmpepl 168 75693 0 73692 115 4 111 111 0 357 13
vmsppl 488 1062 0 1031 5 0 5 5 0 8 0
rwobjpl 80 23625 0 22512 37 3 34 34 0 8 7
pdppl 4096 2141 0 2067 100 26 74 83 0 8 0
pvpl 32 20745 0 0 167 0 167 167 0 265 0
pmappl 256 1066 0 1032 3 0 3 3 0 8 0
extentpl 40 45 0 27 1 0 1 1 0 8 0
phpool 112 389 0 32 11 0 11 11 0 8 0
ddb{1}> machine ddbcpu 0
Stopped at x86_ipi_db+0x27: addq $0x8,%rsp
x86_ipi_db(ffffffff83834ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838ebc00) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff838ebc00) at __mp_lock+0x199 sys/kern/kern_lock.c:173
softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x7701ccd2d7e0, count: 8
ddb{0}> trace
x86_ipi_db(ffffffff83834ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394
x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106
Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27
__mp_lock(ffffffff838ebc00) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:142 [inline]
__mp_lock(ffffffff838ebc00) at __mp_lock+0x199 sys/kern/kern_lock.c:173
softintr_dispatch(0) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83
dosoftint(0) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:862
Xsoftclock() at Xsoftclock+0x27
end of kernel
end trace frame: 0x7701ccd2d7e0, count: -7
ddb{0}> machine ddbcpu 1
Stopped at db_enter+0x25: addq $0x8,%rsp
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833ae2be) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833f0989,ffffffff8334e921,6e4,ffffffff833d04f9) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_fault_unwire_locked(fffffd806c731b90,200000070000,200000080000) at uvm_fault_unwire_locked+0x414 sys/uvm/uvm_fault.c:1761
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
uvm_vslock_device(ffff80003aff9ca8,200000070140,10000,3,ffff80003c45b278) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
physio(ffffffff81aa8de0,d02,8000,ffffffff81aa9630,ffff80003c45b5d0) at physio+0x257 sys/kern/kern_physio.c:139
spec_read(ffff80003c45b3b0) at spec_read+0x14b sys/kern/spec_vnops.c:215
VOP_READ(fffffd806c4bea68,ffff80003c45b5d0,0,fffffd80097fd1a0) at VOP_READ+0x101 sys/kern/vfs_vops.c:227
vn_read(fffffd806177a050,ffff80003c45b5d0,1) at vn_read+0x17b sys/kern/vfs_vnops.c:369
dofilereadv(ffff80003aff9ca8,3,ffff80003c45b5d0,1,ffff80003c45b690) at dofilereadv+0x25a sys/kern/sys_generic.c:252
sys_preadv(ffff80003aff9ca8,ffff80003c45b740,ffff80003c45b690) at sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
syscall(ffff80003c45b740) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c45b740) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcac66d4c230, count: 1
ddb{1}> trace
db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438
panic(ffffffff833ae2be) at panic+0x1e5 sys/kern/subr_prf.c:198
__assert(ffffffff833f0989,ffffffff8334e921,6e4,ffffffff833d04f9) at __assert+0x29 sys/kern/subr_prf.c:-1
uvm_fault_unwire_locked(fffffd806c731b90,200000070000,200000080000) at uvm_fault_unwire_locked+0x414 sys/uvm/uvm_fault.c:1761
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline]
uvm_fault_wire(fffffd806c731b90,200000070000,200000081000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706
uvm_vslock_device(ffff80003aff9ca8,200000070140,10000,3,ffff80003c45b278) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169
physio(ffffffff81aa8de0,d02,8000,ffffffff81aa9630,ffff80003c45b5d0) at physio+0x257 sys/kern/kern_physio.c:139
spec_read(ffff80003c45b3b0) at spec_read+0x14b sys/kern/spec_vnops.c:215
VOP_READ(fffffd806c4bea68,ffff80003c45b5d0,0,fffffd80097fd1a0) at VOP_READ+0x101 sys/kern/vfs_vops.c:227
vn_read(fffffd806177a050,ffff80003c45b5d0,1) at vn_read+0x17b sys/kern/vfs_vnops.c:369
dofilereadv(ffff80003aff9ca8,3,ffff80003c45b5d0,1,ffff80003c45b690) at dofilereadv+0x25a sys/kern/sys_generic.c:252
sys_preadv(ffff80003aff9ca8,ffff80003c45b740,ffff80003c45b690) at sys_preadv+0xe3 sys/kern/vfs_syscalls.c:3336
syscall(ffff80003c45b740) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline]
syscall(ffff80003c45b740) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:775
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0xcac66d4c230, count: -14