uvm_fault(0xfffffd806ac89210, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82397138 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff8000327e3b60 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82397138 Starting stack trace... panic(ffffffff833ba0dc) at panic+0x1d0 sys/kern/subr_prf.c:229 kerntrap(ffff8000327e3ab0) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001480000) at dt_ioctl_record_stop+0x108 sys/dev/dt/dt_dev.c:593 dtclose(11e5f,81,2000,ffff80003c438030) at dtclose+0x109 dt_pcb_purge sys/dev/dt/dt_dev.c:-1 [inline] dtclose(11e5f,81,2000,ffff80003c438030) at dtclose+0x109 sys/dev/dt/dt_dev.c:239 spec_close(ffff8000327e3c60) at spec_close+0x466 sys/kern/spec_vnops.c:-1 VOP_CLOSE(fffffd805e6a7470,81,fffffd80097fb068,ffff80003c438030) at VOP_CLOSE+0x132 sys/kern/vfs_vops.c:156 vn_closefile(fffffd805dbe6648,ffff80003c438030) at vn_closefile+0x12b vn_close sys/kern/vfs_vnops.c:292 [inline] vn_closefile(fffffd805dbe6648,ffff80003c438030) at vn_closefile+0x12b sys/kern/vfs_vnops.c:615 fdrop(fffffd805dbe6648,ffff80003c438030) at fdrop+0x121 sys/kern/kern_descrip.c:1280 closef(fffffd805dbe6648,ffff80003c438030) at closef+0x192 sys/kern/kern_descrip.c:1264 fdfree(ffff80003c438030) at fdfree+0x116 sys/kern/kern_descrip.c:1195 exit1(ffff80003c438030,0,0,1) at exit1+0x576 sys/kern/kern_exit.c:215 sys_exit(ffff80003c438030,ffff8000327e3fd0,ffff8000327e3f20) at sys_exit+0x1a sys/kern/kern_exit.c:-1 syscall(ffff8000327e3fd0) at syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000327e3fd0) at syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x705914aea040, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 -1165246880 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *364318 26442 0 0 0x4000000 1 syz-executor 275377 94877 0 0 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x15f57a12f80, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806ac89210, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x15f57a12f80, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003b008db0 rbx 0 rdx 0 rcx 0xffff80003c438d28 rax 0x3c r8 0xffff80003b008ce0 r9 0x1 r10 0xd1a0a38b853c2b9a r11 0x10dec1bacbc7c8a5 r12 0 r13 0 r14 0xffff80003c438d28 r15 0 rip 0xffffffff813813ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003b008d30 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=364318 pid=26442 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c439788,0xffff80003c438040 process=0xffff8000fffe5360 user=0xffff80003b003000, vmspace=0xfffffd806ac897c8 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 35966 244370 96200 0 2 0 syz-executor 35966 200979 96200 0 3 0x4000080 fsleep syz-executor 73253 481397 92270 0 2 0 syz-executor 73253 5693 92270 0 3 0x4000080 sbwait syz-executor 26442 113524 40406 0 3 0x80 nanoslp syz-executor 26442 57987 40406 0 3 0x4000080 fsleep syz-executor 26442 394394 40406 0 3 0x4000080 ttyopn syz-executor *26442 364318 40406 0 7 0x4000000 syz-executor 94877 275377 70825 0 7 0 syz-executor 94877 23868 70825 0 3 0x4000080 netacc syz-executor 94877 353933 70825 0 3 0x4000080 fsleep syz-executor 29759 49888 12110 0 3 0x80 nanoslp syz-executor 29759 497774 12110 0 3 0x4000080 sbwait syz-executor 29759 55051 12110 0 3 0x4000080 fsleep syz-executor 84430 369779 0 0 3 0x14200 bored sosplice 70825 51572 53645 0 3 0x82 nanoslp syz-executor 12110 209527 53645 0 2 0x2 syz-executor 40406 513983 53645 0 3 0x82 nanoslp syz-executor 36987 428651 53645 0 3 0x82 nanoslp syz-executor 54107 71582 53645 0 3 0x82 wait syz-executor 32009 523334 53645 0 3 0x2 biowait syz-executor 96200 49133 53645 0 3 0x82 nanoslp syz-executor 92270 494199 53645 0 3 0x82 nanoslp syz-executor 53645 322147 84506 0 3 0x82 kqread syz-executor 84506 417215 43801 0 3 0x10008a sigsusp ksh 43801 74420 83335 0 3 0x98 kqread sshd-session 83335 470467 96897 0 3 0x92 kqread sshd-session 24530 68814 1 0 3 0x100083 ttyin getty 96897 524160 1 0 3 0x88 kqread sshd 20314 232192 31995 74 3 0x1100092 bpf pflogd 31995 237208 1 0 3 0x80 sbwait pflogd 59753 102725 66173 73 3 0x1100090 kqread syslogd 66173 261658 1 0 3 0x100082 sbwait syslogd 36269 72537 1 0 3 0x100080 kqread resolvd 78675 110724 18899 77 3 0x100092 kqread dhcpleased 81844 306503 18899 77 3 0x100092 kqread dhcpleased 18899 104798 1 0 3 0x80 kqread dhcpleased 42995 7113 0 0 3 0x14200 bored smr 3081 386744 0 0 2 0x14200 zerothread 69248 444761 0 0 3 0x14200 aiodoned aiodoned 61381 52597 0 0 3 0x14200 syncer update 10569 436083 0 0 3 0x14200 cleaner cleaner 62148 295879 0 0 3 0x14200 reaper reaper 99895 280875 0 0 3 0x14200 pgdaemon pagedaemon 11240 323307 0 0 3 0x14200 bored viomb 92446 493280 0 0 3 0x40014200 acpi0 acpi0 83780 399229 0 0 3 0x40014200 idle1 32283 320967 0 0 3 0x14200 bored softnet1 86977 55119 0 0 3 0x14200 netlock softnet0 34685 79380 0 0 2 0x40014200 systqmp 11115 18443 0 0 3 0x14200 bored systq 90946 44515 0 0 3 0x14200 tmoslp softclockmp 18982 368866 0 0 3 0x40014200 tmoslp softclock 49368 2374 0 0 3 0x40014200 idle0 1 136266 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 94877 (syz-executor) thread 0xffff80003c459780 (275377) exclusive rwlock vmmaplk r = 0 (0xfffffd806ac89ab0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 vm_map_lock_ln+0x12e sys/uvm/uvm_map.c:5171 #3 uvm_map_protect+0xe0 sys/uvm/uvm_map.c:3064 #4 sys_mprotect+0x351 sys/uvm/uvm_mmap.c:590 #5 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:748 #6 Xsyscall+0x128 Process 32009 (syz-executor) thread 0xffff80002a272a70 (523334) exclusive rrwlock inode r = 0 (0xfffffd806e0f7f08) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vget+0x2a2 sys/kern/vfs_subr.c:687 #6 ufs_ihashget+0x185 sys/ufs/ufs/ufs_ihash.c:98 #7 ffs_vget+0x8c sys/ufs/ffs/ffs_vfsops.c:1203 #8 ufs_lookup+0x1a36 sys/ufs/ufs/ufs_lookup.c:478 #9 VOP_LOOKUP+0x6e sys/kern/vfs_vops.c:85 #10 vfs_lookup+0x93a sys/kern/vfs_lookup.c:566 #11 namei+0x7ca sys/kern/vfs_lookup.c:250 #12 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1868 #13 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #13 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d2b6320) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:621 #3 VOP_LOCK+0xa3 sys/kern/vfs_vops.c:527 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vfs_lookup+0x11c sys/kern/vfs_lookup.c:-1 #6 namei+0x7ca sys/kern/vfs_lookup.c:250 #7 dounlinkat+0xc1 sys/kern/vfs_syscalls.c:1868 #8 syscall+0xb17 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb17 sys/arch/amd64/amd64/trap.c:748 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10222 11075K 11339K 166960K 12054 0 pcb 17 13K 13K 166960K 163 0 rtable 248 11K 11K 166960K 469 0 pf 36 17K 18K 166960K 102 0 ifaddr 42 7K 8K 166960K 80 0 ifgroup 59 2K 2K 166960K 118 0 sysctl 4 1K 9K 166960K 14 0 counters 70 37K 37K 166960K 154 0 ioctlops 0 0K 4K 166960K 1610 0 iov 0 0K 24K 166960K 47 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1460 92K 92K 166960K 2153 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 11 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 35 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 922 0 sigio 0 0K 0K 166960K 15 0 proc 72 115K 164K 166960K 602 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 153 0 in_multi 88 6K 7K 166960K 130 0 ether_multi 1 0K 0K 166960K 5 0 mrt 3 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 490 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 259 180K 181K 166960K 10406 0 UVM aobj 21 2K 2K 166960K 23 0 pinsyscall 42 84K 104K 166960K 2051 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 58 0 NDP 13 0K 2K 166960K 54 0 temp 78 8656K 8726K 166960K 43982 0 kqueue 15 20K 28K 166960K 181 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 85 0 81 1 0 1 1 0 8 0 rtentry 176 133 0 35 6 0 6 6 0 8 0 unpcb 144 777 0 753 8 2 6 6 0 8 5 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpcb 736 392 0 386 15 8 7 7 0 8 6 arp 136 23 0 4 1 0 1 1 0 8 0 inpcb 328 1004 0 993 14 7 7 7 0 8 5 nd6 152 28 0 3 1 0 1 1 0 8 0 pkpcb 40 5 0 5 2 2 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1192 39 0 39 2 1 1 1 0 8 1 pppxif 1504 2 0 2 2 1 1 1 0 8 1 pffrag 232 7 0 3 3 2 1 1 0 482 0 pffrnode 88 7 0 3 3 2 1 1 0 8 0 pffrent 40 13 0 9 3 2 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 74 0 22 1 0 1 1 0 8 0 pfstkey 128 74 0 22 2 0 2 2 0 8 0 pfstate 384 74 0 22 6 0 6 6 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 583 0 194 31 5 26 31 0 8 0 art_table 40 587 0 194 5 0 5 5 0 8 0 art_node 32 132 0 44 1 0 1 1 0 8 0 sysvmsgpl 40 48 0 15 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 31 0 21 1 0 1 1 0 8 0 shmpl 112 20 0 2 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 3076 0 1568 95 0 95 95 0 8 0 ffsino 296 3076 0 1568 117 0 117 117 0 8 0 nchpl 144 4382 0 2680 64 0 64 64 0 8 0 rtmask 32 8 0 8 2 2 0 1 0 8 0 vnodes 216 3658 0 0 204 0 204 204 0 8 0 namei 1024 15173 0 15173 2 1 1 2 0 8 1 percpumem 16 92 0 42 1 0 1 1 0 8 0 kstatmem 264 80 0 50 3 0 3 3 0 8 0 scsiplug 72 6 0 6 3 2 1 1 0 8 1 scxspl 216 35140 0 35138 17 14 3 8 1 8 2 plimitpl 152 312 0 294 1 0 1 1 0 8 0 sigapl 424 1239 0 1191 7 1 6 7 0 8 0 knotepl 120 525 0 0 16 0 16 16 0 8 0 kqueuepl 224 339 0 328 5 0 5 5 0 8 3 pipepl 344 192 0 164 3 0 3 3 0 8 0 fdescpl 528 1215 0 1184 3 0 3 3 0 8 0 filepl 160 7479 0 7246 25 8 17 18 0 8 7 lockfpl 104 330 0 328 1 0 1 1 0 8 0 lockfspl 48 110 0 108 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 41 0 24 1 0 1 1 0 8 0 ucredpl 104 869 0 856 1 0 1 1 0 8 0 zombiepl 144 1193 0 1191 1 0 1 1 0 8 0 processpl 1232 1239 0 1191 5 0 5 5 0 8 0 procpl 664 2617 0 2560 7 1 6 7 0 8 0 sosppl 168 5 0 5 3 2 1 1 0 8 1 sockpl 752 1895 0 1856 31 19 12 18 0 8 7 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 112 0 0 14 0 14 14 0 8 0 mcl2k 2048 34 0 0 5 0 5 5 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 1168 0 0 73 0 73 73 0 8 0 bufpl 280 15306 0 9169 439 0 439 439 0 8 0 anonpl 32 13129 0 0 106 0 106 106 0 246 0 amapchunkpl 152 34438 0 33847 37 8 29 31 0 158 4 amappl16 200 5772 0 5736 52 35 17 32 0 8 8 amappl15 192 1 0 1 1 1 0 1 0 8 0 amappl14 184 5 0 5 1 1 0 1 0 8 0 amappl13 176 453 0 452 1 0 1 1 0 8 0 amappl12 168 1575 0 1533 3 0 3 3 0 8 0 amappl11 160 9 0 8 1 0 1 1 0 8 0 amappl10 152 50 0 36 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 29 0 27 1 0 1 1 0 8 0 amappl7 128 79 0 78 1 0 1 1 0 8 0 amappl6 120 275 0 262 1 0 1 1 0 8 0 amappl5 112 80 0 69 1 0 1 1 0 8 0 amappl4 104 416 0 386 1 0 1 1 0 8 0 amappl3 96 5908 0 5807 4 1 3 3 0 8 0 amappl2 88 1342 0 1264 2 0 2 2 0 8 0 amappl1 80 12546 0 11954 16 3 13 15 0 8 0 amappl 88 9513 0 9333 5 0 5 5 0 92 0 uvmvnodes 80 3658 0 0 75 0 75 75 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 9 0 9 3 3 0 1 0 8 0 dma128 128 255 0 255 2 2 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 22 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1215 0 1184 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1215 0 1184 1 0 1 1 0 8 0 vmmpekpl 168 11269 0 11230 3 0 3 3 0 8 0 vmmpepl 168 84608 0 82661 126 25 101 113 0 357 12 vmsppl 488 1214 0 1184 6 2 4 5 0 8 0 rwobjpl 80 29292 0 24663 97 1 96 96 0 8 1 pdppl 4096 2438 0 2368 106 34 72 88 0 8 2 pvpl 32 22430 0 0 181 0 181 181 0 265 0 pmappl 256 1214 0 1184 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 363 0 55 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837a9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e2160) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x192 sys/kern/kern_lock.c:165 softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff838e2160) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x192 sys/kern/kern_lock.c:165 intr_handler(ffff80003c415dd0,ffff80000007aa80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838e2160) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x199 sys/kern/kern_lock.c:165 uvm_fault(fffffd806ac899b0,11218add000,0,1) at uvm_fault+0x1ea sys/uvm/uvm_fault.c:656 upageflttrap(ffff80003c416160,11218add000) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80003c416160) at usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605 end trace frame: 0xffff80003c4161e0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837a9ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838e2160) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x192 sys/kern/kern_lock.c:165 softintr_dispatch(2) at softintr_dispatch+0x125 sys/kern/kern_softintr.c:83 dosoftint(2) at dosoftint+0x54 sys/arch/amd64/amd64/intr.c:847 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff838e2160) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x192 sys/kern/kern_lock.c:165 intr_handler(ffff80003c415dd0,ffff80000007aa80) at intr_handler+0xe9 sys/arch/amd64/amd64/intr.c:559 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838e2160) at __mp_lock+0x199 __mp_lock_spin sys/kern/kern_lock.c:134 [inline] __mp_lock(ffffffff838e2160) at __mp_lock+0x199 sys/kern/kern_lock.c:165 uvm_fault(fffffd806ac899b0,11218add000,0,1) at uvm_fault+0x1ea sys/uvm/uvm_fault.c:656 upageflttrap(ffff80003c416160,11218add000) at upageflttrap+0xa9 sys/arch/amd64/amd64/trap.c:192 usertrap(ffff80003c416160) at usertrap+0x3c6 sys/arch/amd64/amd64/trap.c:605 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x766dc664d3e0, count: -15 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x15f57a12f80, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x15f57a12f80, count: -1