panic: kernel diagnostic assertion "__mp_lock_held(&sched_lock, curcpu()) == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_lock.c", line 63 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *354464 63035 32767 0x1810 0x4080080 1 syz-executor.0 188057 25489 32767 0x10 0 0 syz-executor.6 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff825a1086) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613da6,ffffffff82617104,3f,ffffffff8264968f) at __assert+0x25 sys/kern/subr_prf.c:161 _kernel_lock() at _kernel_lock+0xb2 sys/kern/kern_lock.c:63 single_thread_check_locked(ffff8000fffe5260,1,c) at single_thread_check_locked+0x1f6 sys/kern/kern_sig.c:2037 single_thread_check(ffff8000fffe5260,1) at single_thread_check+0x4b sys/kern/kern_sig.c:2057 sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sleep_signal_check sys/kern/kern_synch.c:464 [inline] sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sys/kern/kern_synch.c:400 rwsleep(ffff8000fffe5260,ffffffff8296a1a0,120,ffffffff82595f34,0) at rwsleep+0xd5 sys/kern/kern_synch.c:314 futex_wait(a64d901d450,1,0,2) at futex_wait+0x13c sys/kern/sys_futex.c:260 sys_futex(ffff8000fffe5260,ffff800027bfe9a0,ffff800027bfea00) at sys_futex+0xf8 sys/kern/sys_futex.c:111 syscall(ffff800027bfea70) at syscall+0x484 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027bfea70) at syscall+0x484 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa646eaf9150, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "__mp_lock_held(&sched_lock, curcpu()) == 0" failed: file "/syzkaller/managers/setuid/kernel/sys/kern/kern_lock.c", line 63 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff825a1086) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613da6,ffffffff82617104,3f,ffffffff8264968f) at __assert+0x25 sys/kern/subr_prf.c:161 _kernel_lock() at _kernel_lock+0xb2 sys/kern/kern_lock.c:63 single_thread_check_locked(ffff8000fffe5260,1,c) at single_thread_check_locked+0x1f6 sys/kern/kern_sig.c:2037 single_thread_check(ffff8000fffe5260,1) at single_thread_check+0x4b sys/kern/kern_sig.c:2057 sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sleep_signal_check sys/kern/kern_synch.c:464 [inline] sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sys/kern/kern_synch.c:400 rwsleep(ffff8000fffe5260,ffffffff8296a1a0,120,ffffffff82595f34,0) at rwsleep+0xd5 sys/kern/kern_synch.c:314 futex_wait(a64d901d450,1,0,2) at futex_wait+0x13c sys/kern/sys_futex.c:260 sys_futex(ffff8000fffe5260,ffff800027bfe9a0,ffff800027bfea00) at sys_futex+0xf8 sys/kern/sys_futex.c:111 syscall(ffff800027bfea70) at syscall+0x484 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027bfea70) at syscall+0x484 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa646eaf9150, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800027bfe5d0 rbx 0xffff800020de9bb7 rdx 0xffff800000bc6700 rcx 0 rax 0xffff8000fffe5260 r8 0x101010101010101 r9 0x8080808080808080 r10 0x346dbd75bd7a9bd1 r11 0x55d86ff06232bea5 r12 0xffff800020de99b8 r13 0 r14 0 r15 0x1 rip 0xffffffff813e2898 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800027bfe5c0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.0) pid=354464 stat=onproc flags process=1810 proc=4080080 pri=77, usrpri=77, nice=20 forw=0xffffffffffffffff, list=0xffff8000fffe3508,0xffffffff82adab00 process=0xffff8000fffe8018 user=0xffff800027bf9000, vmspace=0xfffffd806680c188 estcpu=27, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 46646 433049 77217 32767 2 0x10 syz-executor.3 88980 172931 3426 32767 2 0x10 syz-executor.7 18179 27522 98348 32767 2 0x10 syz-executor.4 18179 374949 98348 32767 3 0x4000090 fsleep syz-executor.4 18179 257718 98348 32767 3 0x4000090 fsleep syz-executor.4 63035 346736 86302 32767 2 0x3810 syz-executor.0 *63035 354464 86302 32767 7 0x4081890 syz-executor.0 25489 188057 57053 32767 7 0x10 syz-executor.6 48146 515667 20678 32767 2 0x10 syz-executor.1 48146 17859 20678 32767 3 0x4000090 fsleep syz-executor.1 42183 85319 90963 32767 3 0x90 nanoslp syz-executor.2 42183 466524 90963 32767 3 0x4000090 fsleep syz-executor.2 42183 287539 90963 32767 3 0x4000090 lockf syz-executor.2 3268 289397 0 0 3 0x14200 bored sosplice 57053 147414 56510 32767 3 0x90 nanoslp syz-executor.6 3426 139572 57838 32767 3 0x90 nanoslp syz-executor.7 77217 485948 27436 32767 3 0x90 nanoslp syz-executor.3 57838 23769 94459 0 3 0x82 wait syz-executor.7 74041 269768 9055 32767 3 0x90 nanoslp syz-executor.5 56510 460054 94459 0 3 0x82 wait syz-executor.6 98348 150539 3233 32767 3 0x90 nanoslp syz-executor.4 9055 507062 94459 0 3 0x82 wait syz-executor.5 90963 147289 17017 32767 3 0x90 nanoslp syz-executor.2 27436 438070 94459 0 3 0x82 wait syz-executor.3 3233 441816 94459 0 3 0x82 wait syz-executor.4 20678 502509 50384 32767 3 0x90 nanoslp syz-executor.1 17017 403479 94459 0 3 0x82 wait syz-executor.2 86302 401424 82500 32767 3 0x90 nanoslp syz-executor.0 50384 84085 94459 0 3 0x82 wait syz-executor.1 82500 401749 94459 0 3 0x82 wait syz-executor.0 94459 351981 89948 0 3 0x82 thrsleep syz-fuzzer 94459 361213 89948 0 3 0x4000082 nanoslp syz-fuzzer 94459 307112 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 74568 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 42077 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 216848 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 312782 89948 0 3 0x4000082 kqread syz-fuzzer 94459 172877 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 230440 89948 0 3 0x4000082 thrsleep syz-fuzzer 94459 166467 89948 0 3 0x4000082 thrsleep syz-fuzzer 89948 456995 92631 0 3 0x10008a sigsusp ksh 92631 224192 1337 0 3 0x9a kqread sshd 86059 432984 1 0 3 0x100083 ttyin getty 1337 107954 1 0 3 0x88 kqread sshd 64200 234925 76793 73 3 0x1100090 kqread syslogd 76793 44019 1 0 3 0x100082 netio syslogd 99281 144988 1 0 3 0x100080 kqread resolvd 60088 395395 56789 77 3 0x100092 kqread dhcpleased 43563 53381 56789 77 3 0x100092 kqread dhcpleased 56789 488342 1 0 3 0x80 kqread dhcpleased 1138 12061 0 0 3 0x14200 bored smr 31063 17740 0 0 2 0x14200 zerothread 34362 486537 0 0 3 0x14200 aiodoned aiodoned 49309 239050 0 0 3 0x14200 syncer update 43303 163140 0 0 3 0x14200 cleaner cleaner 55967 330011 0 0 3 0x14200 reaper reaper 22841 141414 0 0 3 0x14200 pgdaemon pagedaemon 31882 118919 0 0 3 0x14200 bored viomb 34758 417134 0 0 3 0x40014200 acpi0 acpi0 38955 346871 0 0 3 0x40014200 idle1 84966 458107 0 0 3 0x14200 bored softnet 26673 396491 0 0 3 0x14200 bored softnet 54129 73956 0 0 3 0x14200 bored softnet 87656 329296 0 0 3 0x14200 bored softnet 3462 265582 0 0 3 0x14200 bored systqmp 70558 40956 0 0 3 0x14200 bored systq 24525 139253 0 0 3 0x40014200 bored softclock 11348 383952 0 0 3 0x40014200 idle0 1 41295 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive sched_lock &sched_lock r = 0 (0xffffffff82a153e0) #0 witness_lock+0x44d #1 __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 #2 mi_switch+0x3d4 sys/kern/sched_bsd.c:419 #3 single_thread_check_locked+0x17f sys/kern/kern_sig.c:2045 #4 single_thread_check+0x4b sys/kern/kern_sig.c:2057 #5 sleep_finish+0x75 sleep_signal_check sys/kern/kern_synch.c:464 [inline] #5 sleep_finish+0x75 sys/kern/kern_synch.c:400 #6 rwsleep+0xd5 sys/kern/kern_synch.c:314 #7 futex_wait+0x13c sys/kern/sys_futex.c:260 #8 sys_futex+0xf8 sys/kern/sys_futex.c:111 #9 syscall+0x484 mi_syscall sys/sys/syscall_mi.h:102 [inline] #9 syscall+0x484 sys/arch/amd64/amd64/trap.c:585 #10 Xsyscall+0x128 Process 25489 (syz-executor.6) thread 0xffff8000fffecd28 (188057) exclusive rwlock amaplk r = 0 (0xfffffd806c406600) #0 witness_lock+0x44d #1 uvm_fault_check+0x422 sys/uvm/uvm_fault.c:783 #2 uvm_fault+0xf2 sys/uvm/uvm_fault.c:601 #3 upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 #4 usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806680c8d0) #0 witness_lock+0x44d #1 uvmfault_lookup+0xd9 sys/uvm/uvm_fault.c:1771 #2 uvm_fault_check+0x3a sys/uvm/uvm_fault.c:673 #3 uvm_fault+0xf2 sys/uvm/uvm_fault.c:601 #4 upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 #5 usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403 #6 recall_trap+0x8 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10193 6410K 6420K 78643K 11284 0 pcb 13 8K 8K 78643K 13 0 rtable 234 6K 6K 78643K 366 0 ifaddr 81 16K 16K 78643K 82 0 counters 56 35K 35K 78643K 56 0 ioctlops 0 0K 2K 78643K 37 0 iov 0 0K 16K 78643K 215 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1271 79K 79K 78643K 1472 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 5K 78643K 8 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 69 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 25 93K 117K 78643K 728 0 proc 56 78K 103K 78643K 512 0 subproc 104 6K 6K 78643K 104 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 29 0 in_multi 99 6K 7K 78643K 118 0 ether_multi 1 0K 0K 78643K 9 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 157 705K 705K 78643K 157 0 exec 0 0K 2K 78643K 832 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 229 81K 95K 78643K 5901 0 UVM aobj 56 2K 2K 78643K 62 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 30 0 NDP 11 0K 2K 78643K 27 0 temp 120 4721K 4785K 78643K 5011 0 kqueue 12 18K 26K 78643K 60 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 128 0 125 3 2 1 3 0 8 0 rtentry 112 111 0 1 4 0 4 4 0 8 0 unpcb 136 861 0 848 9 4 5 6 0 8 4 syncache 296 17 0 17 2 1 1 1 0 8 1 tcpqe 32 6 0 6 1 0 1 1 0 8 1 tcpcb 736 466 0 458 11 1 10 10 0 8 7 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 320 683 0 673 11 4 7 7 0 8 5 nd6 48 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 13 0 2 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 67 0 57 1 0 1 1 0 8 0 shmpl 112 59 0 6 2 0 2 2 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2356 0 924 90 0 90 90 0 8 0 ffsino 272 2356 0 924 96 0 96 96 0 8 0 nchpl 144 3363 0 1690 63 0 63 63 0 8 0 uvmvnodes 80 2469 0 0 51 0 51 51 0 8 0 vnodes 224 2469 0 0 146 0 146 146 0 8 0 namei 1024 11598 0 11598 2 1 1 2 0 8 1 percpumem 16 40 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 9739 0 9739 9 6 3 8 0 8 3 plimitpl 152 207 0 184 1 0 1 1 0 8 0 sigapl 424 1006 0 951 7 0 7 7 0 8 0 futexpl 64 6163 0 6158 1 0 1 1 0 8 0 knotepl 120 104 0 0 4 0 4 4 0 8 0 kqueuepl 224 262 0 254 3 2 1 3 0 8 0 pipepl 336 346 0 318 13 5 8 8 0 8 5 fdescpl 496 988 0 952 7 2 5 6 0 8 0 filepl 152 6410 0 6174 22 4 18 18 0 8 8 lockfpl 104 116 0 111 1 0 1 1 0 8 0 lockfspl 48 47 0 43 1 0 1 1 0 8 0 sessionpl 144 23 0 7 1 0 1 1 0 8 0 pgrppl 48 23 0 7 1 0 1 1 0 8 0 ucredpl 104 1159 0 1141 1 0 1 1 0 8 0 zombiepl 144 952 0 951 1 0 1 1 0 8 0 processpl 1064 1006 0 951 4 0 4 4 0 8 0 procpl 672 2311 0 2241 8 0 8 8 0 8 0 sosppl 168 9 0 9 1 0 1 1 0 8 1 sockpl 480 1752 0 1726 52 39 13 28 0 8 8 mcl64k 65536 11 0 0 2 0 2 2 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 6 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 17 0 0 3 0 3 3 0 8 0 mcl4k 4096 14 0 0 2 0 2 2 0 8 0 mcl2k2 2112 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 159 0 0 19 0 19 19 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 459 0 0 29 0 29 29 0 8 0 bufpl 288 4429 0 137 307 0 307 307 0 8 0 anonpl 24 185608 0 173667 95 4 91 91 0 186 11 amapchunkpl 152 16179 0 15582 36 3 33 33 0 158 7 amappl16 200 2898 0 2571 25 0 25 25 0 8 5 amappl15 192 82 0 79 1 0 1 1 0 8 0 amappl14 184 93 0 86 1 0 1 1 0 8 0 amappl13 176 232 0 228 1 0 1 1 0 8 0 amappl12 168 91 0 84 1 0 1 1 0 8 0 amappl11 160 155 0 138 1 0 1 1 0 8 0 amappl10 152 206 0 195 1 0 1 1 0 8 0 amappl9 144 502 0 498 1 0 1 1 0 8 0 amappl8 136 560 0 507 2 0 2 2 0 8 0 amappl7 128 112 0 101 1 0 1 1 0 8 0 amappl6 120 210 0 193 2 1 1 2 0 8 0 amappl5 112 704 0 679 1 0 1 1 0 8 0 amappl4 104 860 0 833 2 1 1 2 0 8 0 amappl3 96 2552 0 2495 2 0 2 2 0 8 0 amappl2 88 1402 0 1330 3 1 2 3 0 8 0 amappl1 80 25309 0 24616 19 3 16 19 0 8 0 amappl 88 5444 0 5283 6 1 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 61 0 6 1 0 1 1 0 8 0 uaddrrnd 24 988 0 952 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 988 0 952 1 0 1 1 0 8 0 vmmpekpl 168 12442 0 12397 3 0 3 3 0 8 0 vmmpepl 168 98292 0 95636 127 0 127 127 0 357 8 vmsppl 368 987 0 952 4 0 4 4 0 8 0 rwobjpl 56 28309 0 24493 55 0 55 55 0 8 0 pdppl 4096 1983 0 1904 111 30 81 91 0 8 2 pvpl 32 461935 0 444978 242 19 223 242 0 265 74 pmappl 248 987 0 952 4 1 3 3 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 726 0 39 20 0 20 20 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff82988ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff82a151d8) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82a151d8) at __mp_lock+0x133 sys/kern/kern_lock.c:147 wakeup_n(ffffffff82ba36d4,ffffffff) at wakeup_n+0x37 uvm_pmr_getpages(1,0,0,1,0,1,24a94cc66538f6e4,0) at uvm_pmr_getpages+0xeef sys/uvm/uvm_pmemrange.c:1207 uvm_pagealloc(fffffd80687eede0,2d1d000,0,3) at uvm_pagealloc+0x1a4 sys/uvm/uvm_page.c:910 pmap_get_ptp(fffffd80687eed90,b4776685000) at pmap_get_ptp+0x18d sys/arch/amd64/amd64/pmap.c:1183 pmap_enter(fffffd80687eed90,b4776685000,690e8000,3,21) at pmap_enter+0x2ac uvm_fault_upper(ffff8000261c9e60,ffff8000261c9e98,ffff8000261c9d60,0) at uvm_fault_upper+0x2b1 sys/uvm/uvm_fault.c:1056 uvm_fault(fffffd806680c8b8,b4776685000,0,1) at uvm_fault+0x154 sys/uvm/uvm_fault.c:609 upageflttrap(ffff8000261c9fd0,b4776685000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff8000261c9fd0) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403 end trace frame: 0xffff8000261ca050, count: 0 ddb{0}> trace x86_ipi_db(ffffffff82988ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f kd_curproc sys/dev/kcov.c:578 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2f sys/dev/kcov.c:148 __mp_lock(ffffffff82a151d8) at __mp_lock+0x133 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82a151d8) at __mp_lock+0x133 sys/kern/kern_lock.c:147 wakeup_n(ffffffff82ba36d4,ffffffff) at wakeup_n+0x37 uvm_pmr_getpages(1,0,0,1,0,1,24a94cc66538f6e4,0) at uvm_pmr_getpages+0xeef sys/uvm/uvm_pmemrange.c:1207 uvm_pagealloc(fffffd80687eede0,2d1d000,0,3) at uvm_pagealloc+0x1a4 sys/uvm/uvm_page.c:910 pmap_get_ptp(fffffd80687eed90,b4776685000) at pmap_get_ptp+0x18d sys/arch/amd64/amd64/pmap.c:1183 pmap_enter(fffffd80687eed90,b4776685000,690e8000,3,21) at pmap_enter+0x2ac uvm_fault_upper(ffff8000261c9e60,ffff8000261c9e98,ffff8000261c9d60,0) at uvm_fault_upper+0x2b1 sys/uvm/uvm_fault.c:1056 uvm_fault(fffffd806680c8b8,b4776685000,0,1) at uvm_fault+0x154 sys/uvm/uvm_fault.c:609 upageflttrap(ffff8000261c9fd0,b4776685000) at upageflttrap+0x82 sys/arch/amd64/amd64/trap.c:181 usertrap(ffff8000261c9fd0) at usertrap+0x1aa sys/arch/amd64/amd64/trap.c:403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7f7fffff5380, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff825a1086) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613da6,ffffffff82617104,3f,ffffffff8264968f) at __assert+0x25 sys/kern/subr_prf.c:161 _kernel_lock() at _kernel_lock+0xb2 sys/kern/kern_lock.c:63 single_thread_check_locked(ffff8000fffe5260,1,c) at single_thread_check_locked+0x1f6 sys/kern/kern_sig.c:2037 single_thread_check(ffff8000fffe5260,1) at single_thread_check+0x4b sys/kern/kern_sig.c:2057 sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sleep_signal_check sys/kern/kern_synch.c:464 [inline] sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sys/kern/kern_synch.c:400 rwsleep(ffff8000fffe5260,ffffffff8296a1a0,120,ffffffff82595f34,0) at rwsleep+0xd5 sys/kern/kern_synch.c:314 futex_wait(a64d901d450,1,0,2) at futex_wait+0x13c sys/kern/sys_futex.c:260 sys_futex(ffff8000fffe5260,ffff800027bfe9a0,ffff800027bfea00) at sys_futex+0xf8 sys/kern/sys_futex.c:111 syscall(ffff800027bfea70) at syscall+0x484 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027bfea70) at syscall+0x484 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa646eaf9150, count: 3 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff825a1086) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613da6,ffffffff82617104,3f,ffffffff8264968f) at __assert+0x25 sys/kern/subr_prf.c:161 _kernel_lock() at _kernel_lock+0xb2 sys/kern/kern_lock.c:63 single_thread_check_locked(ffff8000fffe5260,1,c) at single_thread_check_locked+0x1f6 sys/kern/kern_sig.c:2037 single_thread_check(ffff8000fffe5260,1) at single_thread_check+0x4b sys/kern/kern_sig.c:2057 sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sleep_signal_check sys/kern/kern_synch.c:464 [inline] sleep_finish(ffff800027bfe810,1) at sleep_finish+0x75 sys/kern/kern_synch.c:400 rwsleep(ffff8000fffe5260,ffffffff8296a1a0,120,ffffffff82595f34,0) at rwsleep+0xd5 sys/kern/kern_synch.c:314 futex_wait(a64d901d450,1,0,2) at futex_wait+0x13c sys/kern/sys_futex.c:260 sys_futex(ffff8000fffe5260,ffff800027bfe9a0,ffff800027bfea00) at sys_futex+0xf8 sys/kern/sys_futex.c:111 syscall(ffff800027bfea70) at syscall+0x484 mi_syscall sys/sys/syscall_mi.h:102 [inline] syscall(ffff800027bfea70) at syscall+0x484 sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa646eaf9150, count: -12