last executing test programs: 88.567539ms ago: executing program 0 (id=1): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x7f, 0x6, 0xa, 0x1bfa}]}) r1 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x7, &(0x7f0000000180)=[{0x4, 0x5, 0x3, 0x5b}, {0x3, 0x39, 0x8, 0x3}, {0x7, 0x0, 0x9, 0x1}, {0x64, 0x6, 0x7, 0x5}, {0x2, 0x4, 0x8, 0x5}, {0xa, 0x4, 0x3, 0x53e}, {0x1ff, 0x2, 0x9, 0xb}]}) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000340)='\x00\"\x00\x00', 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x808, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') writev(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') 24.302504ms ago: executing program 5 (id=6): r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x5, 0xfffffffa, 0x3, 0x1, 0x44ab, 0x7fffffff, 0x7, 0x2, 0x0, 0xfffffffffffffffc, 0x4}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) r3 = kqueue() kevent(r3, 0x0, 0x8, 0x0, 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8006, 0x5, 0x10000000, 0x0, 0xbf1, 0x9, 0x7b9, 0x2, 0x2, 0x5b7, 0x2}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) closefrom(r0) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x5, 0xfffffffa, 0x3, 0x1, 0x44ab, 0x7fffffff, 0x7, 0x2, 0x0, 0xfffffffffffffffc, 0x4}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) kqueue() (async) kevent(r3, 0x0, 0x8, 0x0, 0x15, 0x0) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x8006, 0x5, 0x10000000, 0x0, 0xbf1, 0x9, 0x7b9, 0x2, 0x2, 0x5b7, 0x2}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) closefrom(r0) (async) 782.698µs ago: executing program 2 (id=3): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f0000693000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7f}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0x8}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000371000/0x1000)=nil, 0xf}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f000066b000/0x1000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x1ff}], './file0/file0\x00', 0x8, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffe, 0x44, 0x0, 0x1ff, 0x2, 0x94fd, 0xffffb6e0, 0x3, 0x0, 0x0, 0xb27d, 0x0, 0x2, 0x7, 0x0, 0x0, 0x20000, 0x7, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffefffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x3, 0x0, 0x9b8, 0x0, 0x9, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0xfffffffd, 0x0, 0x800000, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7ffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7ff, 0xffffff49, 0x9, 0x8000009, 0xfffffffb, 0x0, 0x6, 0xffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100, 0x200, 0x3, 0x3, 0x3, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff101, 0x80, 0xfffffffa, 0x2, 0x1000000, 0x0, 0x20000006, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0xffffff62, 0x10000, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x3fffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xb5f, 0xb, 0x4, 0x0, 0x0, 0xfffff000, 0x3, 0x1000, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xfffffeff, 0x1, 0x2000000, 0x0, 0x0, 0x51, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0xfdf7fffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0xfff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x5, 0x0, 0x8, 0x0, 0x8, 0x8000002, 0x0, 0xfffffffd, 0x2, 0xff, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x644f, 0x0, 0xfffffffe, 0x7a1, 0x6, 0x0, 0xfffffff7, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x5, 0x7c, 0x0, 0x0, 0x0, 0xffffffff, 0x4000, 0x0, 0x6, 0x2, 0x0, 0x3, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0xffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xffffbfff, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x1849, 0x1, 0x0, 0x4, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x25, 0x4, 0x7, 0x4, 0x4, 0x0, 0x8000, 0x0, 0x0, 0xfffffff8, 0xb0, 0xffffff5c, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x2, 0x0, 0x403, 0x0, 0x5, 0x6, 0xfffffffe]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f0000000ac0)={0x1, 0x401, {'\x00', './file0/file0\x00', './file0/file0\x00', './file0/file0\x00', {{0x1, 0x101}, {0x43, 0xe}}, {{0x9, 0x5}, {0x4, 0x4}, 0x3}, {{0x63a49ed2, 0x9}, {0x6, 0xea}, 0x7}, {0x2, 0x3201, 0x40, 0x8}, 0x0, 0x80000000, 0x721f, 0xe14, 0x9}}) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "20180000000001002500", 0xfffffffb, 0xb}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) write(r1, &(0x7f00000004c0)="b96a", 0x2) ftruncate(r1, 0x1) 0s ago: executing program 0 (id=9): r0 = socket$inet(0x2, 0x3, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r1, &(0x7f0000000640)="f81ad30100060000000100000000", 0xe) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x3, 0x8e, 0xc}]}) (async) close(r0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000040)="ea00eb0100000000", 0x8) (async) r3 = socket$inet(0x2, 0x8000, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000040)="ea00eb0100000000", 0x8) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00eb0100000000", 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. WuAvmR_NfINauG:lt S(P0xL fNfOfTf eLfO0W0E6RcEfD1 bO2N0 0T,RA 0Px E98X,IT a0 ,0 1)Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 33285 2136 0 0 0x4000000 1K syz-executor *177560 5211 0 0 0 0 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7aa0d2b84f50, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xffffef006cf1b200, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7aa0d2b84f50, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff800033391400 rbx 0 rdx 0 rcx 0xffff800045fef4d8 rax 0x2a r8 0xffff800033391330 r9 0x1 r10 0xf5872c39cc0b2f9 r11 0xf6a1a41415cb4919 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff826b94c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff800033391380 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=177560 pid=5211 tcnt=2 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fee018,0xffff800045fefa18 process=0xffff80003c3d49c0 user=0xffff80003338c000, vmspace=0xffffef006cf1b018 estcpu=0, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 2136 44717 71952 0 2 0 0 syz-executor 2136 33285 71952 0 7 0 0x4000000 syz-executor * 5211 177560 38446 0 7 0 0 syz-executor 5211 41989 38446 0 3 0 0x4000080 fsleep syz-executor 41344 201795 28819 0 2 0x2 0 ndp 46298 94450 75491 0 2 0x100002 0 sh 28819 377738 84336 0 3 0x100002 0x88 sigsusp sh 17308 220510 45225 0 2 0 0 syz-executor 17308 437893 45225 0 2 0 0x4000000 syz-executor 80071 74058 14935 0 2 0 0 syz-executor 80071 306430 14935 0 3 0 0x4000080 fsleep syz-executor 77756 412457 75649 0 2 0x100002 0 ndp 64080 102590 58293 0 2 0x2 0 arp 75649 381368 43863 0 3 0x100002 0x88 sigsusp sh 58293 105259 36670 0 3 0x100002 0x88 sigsusp sh 36670 407848 12364 0 3 0x2 0x80 wait syz-executor 75491 376739 12364 0 3 0x2 0x80 wait syz-executor 14935 185500 12364 0 3 0x2 0x80 nanoslp syz-executor 43863 297430 12364 0 3 0x2 0x80 wait syz-executor 84336 231073 12364 0 3 0x2 0x80 wait syz-executor 45225 291068 12364 0 3 0x2 0x80 nanoslp syz-executor 71952 105391 12364 0 3 0x2 0x80 nanoslp syz-executor 38446 190921 12364 0 3 0x2 0x80 nanoslp syz-executor 12364 369456 34559 0 3 0x2 0x80 kqread syz-executor 34559 280055 30191 0 3 0x100002 0x88 sigsusp ksh 30191 249074 66861 0 3 0x10 0x88 kqread sshd-session 66861 516946 36860 0 3 0x12 0x80 kqread sshd-session 37273 410099 1 0 3 0x100003 0x80 ttyin getty 36860 269641 1 0 3 0 0x88 kqread sshd 99797 200192 30905 74 3 0x1100012 0x80 bpf pflogd 30905 67288 1 0 3 0 0x80 sbwait pflogd 1813 372123 90806 73 3 0x1100010 0x80 kqread syslogd 90806 469795 1 0 3 0x100002 0x80 sbwait syslogd 76001 363818 1 0 3 0x100000 0x80 kqread resolvd 15372 270591 42740 77 3 0x100012 0x80 kqread dhcpleased 21891 215003 42740 77 3 0x100012 0x80 kqread dhcpleased 42740 446399 1 0 3 0 0x80 kqread dhcpleased 14892 407454 0 0 3 0x14000 0x200 bored smr 97244 384707 0 0 2 0x14000 0x200 zerothread 25101 151038 0 0 3 0x14000 0x200 aiodoned aiodoned 26508 41256 0 0 3 0x14000 0x200 syncer update 82027 368150 0 0 3 0x14000 0x200 cleaner cleaner 25706 431423 0 0 3 0x14000 0x200 reaper reaper 57502 419018 0 0 3 0x14000 0x200 pgdaemon pagedaemon 62201 377903 0 0 3 0x14000 0x200 bored viomb 28707 72062 0 0 3 0x14000 0x40000200 acpi0 acpi0 29122 409635 0 0 3 0x14000 0x40000200 idle1 73185 420454 0 0 3 0x14000 0x200 bored softnet1 88195 105765 0 0 3 0x14000 0x200 bored softnet0 897 214748 0 0 3 0x14000 0x200 smrbar systqmp 58405 133509 0 0 3 0x14000 0x200 bored systq 84152 517473 0 0 3 0x14000 0x200 tmoslp softclockmp 33209 57840 0 0 3 0x14000 0x40000200 tmoslp softclock 43679 265065 0 0 3 0x14000 0x40000200 idle0 1 464911 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xffffef0008a5d208) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x83a #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xffffef006ccf9310) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 Process 2136 (syz-executor) thread 0xffff800045fef770 (33285) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a7a440) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 Process 5211 (syz-executor) thread 0xffff800045fef4d8 (177560) shared rwlock uobjlk r = 0 (0xffffef006e11cf40) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xffffef006cf1b118) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xffffef0008a5d208) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x83a #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xffffef006ccf9310) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 pmap_enter+0x24b #3 uvm_fault_lower_lookup+0x369 #4 uvm_fault_lower+0x89 #5 uvm_fault+0x274 #6 upageflttrap+0xa9 #7 usertrap+0x430 #8 recall_trap+0x8 Process 897 (systqmp) thread 0xffff800045ffe7c8 (214748) shared rwlock systqmp r = 0 (0xffffffff839acfd8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11057 12151K 12151K 166960K 12149 0 pcb 17 12K 12K 166960K 17 0 rtable 203 5K 5K 166960K 297 0 pf 36 17K 18K 166960K 47 0 ifaddr 40 6K 6K 166960K 42 0 ifgroup 57 2K 2K 166960K 57 0 sysctl 1 1K 9K 166960K 5 0 counters 72 37K 37K 166960K 72 0 ioctlops 0 0K 4K 166960K 1481 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1360 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 21 77K 93K 166960K 129 0 proc 70 115K 164K 166960K 538 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 3 0 in_multi 79 5K 5K 166960K 80 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 375 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 232 172K 176K 166960K 3128 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 47 94K 107K 166960K 1267 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 25 1K 1K 166960K 25 0 temp 34 9114K 9120K 166960K 3807 0 kqueue 14 22K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 29 0 25 1 0 1 1 0 8 0 rtentry 176 94 0 1 5 0 5 5 0 8 0 unpcb 144 39 0 22 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 10 0 6 1 0 1 1 0 8 0 arp 136 17 0 0 1 0 1 1 0 8 0 inpcb 328 66 0 59 1 0 1 1 0 8 0 nd6 152 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 15 0 0 1 0 1 1 0 8 0 pfstkey 128 15 0 0 1 0 1 1 0 8 0 pfstate 448 15 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 369 0 0 24 0 24 24 0 8 0 art_table 40 370 0 0 4 0 4 4 0 8 0 art_node 32 94 0 7 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1563 0 96 92 0 92 92 0 8 0 ffsino 296 1563 0 96 113 0 113 113 0 8 0 nchpl 144 1757 0 57 63 0 63 63 0 8 0 vnodes 216 1651 0 0 92 0 92 92 0 8 0 namei 1024 5339 0 5339 2 0 2 2 0 8 2 percpumem 16 52 0 0 1 0 1 1 0 8 0 kstatmem 264 29 0 0 2 0 2 2 0 8 0 scxspl 216 6120 0 6120 3 0 3 3 1 8 3 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 446 0 395 7 0 7 7 0 8 1 knotepl 120 54 0 0 2 0 2 2 0 8 0 kqueuepl 224 23 0 12 1 0 1 1 0 8 0 pipepl 344 126 0 99 3 0 3 3 0 8 0 fdescpl 528 430 0 395 3 0 3 3 0 8 0 filepl 160 1543 0 1330 10 0 10 10 0 8 1 lockfpl 104 9 0 6 1 0 1 1 0 8 0 lockfspl 48 6 0 3 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 83 0 70 1 0 1 1 0 8 0 zombiepl 144 395 0 395 1 0 1 1 0 8 1 processpl 1232 446 0 395 5 0 5 5 0 8 0 procpl 664 454 0 399 5 0 5 5 0 8 0 sockpl 752 134 0 106 4 0 4 4 0 8 1 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 189 0 0 12 0 12 12 0 8 0 bufpl 272 2270 0 105 145 0 145 145 0 8 0 anonpl 32 3648 0 0 30 0 30 30 0 247 0 amapchunkpl 152 8237 0 7801 18 1 17 17 0 158 0 amappl16 200 1368 0 1357 5 0 5 5 0 8 4 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 423 0 418 1 0 1 1 0 8 0 amappl13 176 119 0 106 1 0 1 1 0 8 0 amappl12 168 675 0 643 2 0 2 2 0 8 0 amappl11 160 3 0 3 1 0 1 1 0 8 1 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 273 0 273 1 0 1 1 0 8 1 amappl8 136 95 0 94 1 0 1 1 0 8 0 amappl7 128 146 0 132 1 0 1 1 0 8 0 amappl6 120 149 0 144 1 0 1 1 0 8 0 amappl5 112 94 0 84 1 0 1 1 0 8 0 amappl4 104 280 0 259 1 0 1 1 0 8 0 amappl3 96 1408 0 1315 3 0 3 3 0 8 0 amappl2 88 551 0 474 2 0 2 2 0 8 0 amappl1 80 10150 0 9511 15 0 15 15 0 8 1 amappl 88 2426 0 2277 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 430 0 395 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 430 0 395 1 0 1 1 0 8 0 vmmpekpl 168 5603 0 5571 2 0 2 2 0 8 0 vmmpepl 168 36385 0 34488 87 0 87 87 0 357 4 vmsppl 488 429 0 395 5 0 5 5 0 8 0 rwobjpl 80 13774 0 12708 24 0 24 24 0 8 0 pdppl 4096 867 0 790 95 10 85 85 0 8 8 pvpl 32 9105 0 0 77 2 75 75 0 265 1 pmappl 256 429 0 395 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 405 0 13 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7aa0d2b84f50, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,29) at comcnputc+0x29b cnputc(29) at cnputc+0x67 db_putchar(29) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83462089) at db_printf+0x9b fault(ffffffff83523e11) at fault+0xa7 kpageflttrap(ffff80003c3e98d0,98) at kpageflttrap+0x37d kerntrap(ffff80003c3e98d0) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b end trace frame: 0xffff80003c3e9a80, count: 0 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,29) at comcnputc+0x29b cnputc(29) at cnputc+0x67 db_putchar(29) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83462089) at db_printf+0x9b fault(ffffffff83523e11) at fault+0xa7 kpageflttrap(ffff80003c3e98d0,98) at kpageflttrap+0x37d kerntrap(ffff80003c3e98d0) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045fef770,ffffef006cb176c0,ffff80003c3e9ab0) at dovutimens+0x368 sys_futimes(ffff800045fef770,ffff80003c3e9c00,ffff80003c3e9b50) at sys_futimes+0x208 syscall(ffff80003c3e9c00) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b854008290, count: -18