panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 332197 87325 0 0 0x4000000 0 syz-executor *102180 87325 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff83503613) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffff1006cd5d9a0,200000750000,200000757000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003c3f3790,2000007504c0,10000,1,ffff80003c4b0f18) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 physio(ffffffff821f4b80,d02,0,ffffffff821f53b0,ffff80003c4b11f8) at physio+0x257 sys/kern/kern_physio.c:139 spec_write(ffff80003c4b1040) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff10069f8a7b0,ffff80003c4b11f8,5,fffff100097fd5b0) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff1006ba14cc8,ffff80003c4b11f8,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80003c3f3790,5,ffff80003c4b11f8,0,ffff80003c4b12b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c3f3790,ffff80003c4b1360,ffff80003c4b12b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c4b1360) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4b1360) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447a62c7600, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff83503613) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffff1006cd5d9a0,200000750000,200000757000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003c3f3790,2000007504c0,10000,1,ffff80003c4b0f18) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 physio(ffffffff821f4b80,d02,0,ffffffff821f53b0,ffff80003c4b11f8) at physio+0x257 sys/kern/kern_physio.c:139 spec_write(ffff80003c4b1040) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff10069f8a7b0,ffff80003c4b11f8,5,fffff100097fd5b0) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff1006ba14cc8,ffff80003c4b11f8,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80003c3f3790,5,ffff80003c4b11f8,0,ffff80003c4b12b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c3f3790,ffff80003c4b1360,ffff80003c4b12b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c4b1360) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4b1360) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447a62c7600, count: -13 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4b0c60 rbx 0xffff80002999ee07 rdx 0xffff8000015fdb40 rcx 0xffff80003c3f3790 rax 0xffff80002999dff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x1d9e611560e0b43 r11 0x3c1af3f7f6109c78 r12 0xffff80002999ec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81663995 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4b0c50 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=102180 pid=87325 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=81, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000387a82c0,0xffff80003c3f2578 process=0xffff80003c47a6a8 user=0xffff80003c4ac000, vmspace=0xfffff1006cd5d9a0 estcpu=31, cpticks=7, pctcpu=0.0, user=0, sys=7, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 7034 129018 99880 0 2 0 syz-executor 7034 158451 99880 0 3 0x4000000 physio syz-executor 7034 149739 99880 0 3 0x4000080 fsleep syz-executor 7034 252760 99880 0 3 0x4000080 fsleep syz-executor 80468 318124 11979 0 2 0xc80 syz-executor 80468 94718 11979 0 3 0x4000080 kqsel syz-executor 80468 353030 11979 0 3 0x4000080 fsleep syz-executor 87325 376889 10363 0 2 0 syz-executor 87325 332197 10363 0 7 0x4000000 syz-executor *87325 102180 10363 0 7 0x4000000 syz-executor 87325 35448 10363 0 3 0x4000080 fsleep syz-executor 89711 487301 73636 0 3 0x80 nanoslp syz-executor 89711 470363 73636 0 3 0x4000080 lockf syz-executor 89711 191415 73636 0 3 0x4000080 fsleep syz-executor 60686 476570 32421 0 3 0x80 nanoslp syz-executor 60686 146086 32421 0 3 0x4000080 fsleep syz-executor 60686 236604 32421 0 3 0x4000080 pipewr syz-executor 60686 247087 32421 0 3 0x4000080 fsleep syz-executor 20694 165116 0 0 3 0x14280 nfsidl nfsio 86092 150882 0 0 3 0x14280 nfsidl nfsio 32030 71143 0 0 3 0x14280 nfsidl nfsio 11954 267623 0 0 3 0x14280 nfsidl nfsio 78327 291143 0 0 3 0x14280 nfsidl nfsio 60110 456561 0 0 3 0x14280 nfsidl nfsio 30669 403359 0 0 3 0x14280 nfsidl nfsio 10112 429536 0 0 3 0x14280 nfsidl nfsio 25840 366079 0 0 3 0x14280 nfsidl nfsio 7285 246992 0 0 3 0x14280 nfsidl nfsio 47419 360411 0 0 3 0x14280 nfsidl nfsio 14726 131109 0 0 3 0x14280 nfsidl nfsio 27005 191762 0 0 3 0x14280 nfsidl nfsio 98221 406711 0 0 3 0x14280 nfsidl nfsio 40231 118622 0 0 3 0x14280 nfsidl nfsio 92562 457410 0 0 3 0x14280 nfsidl nfsio 54896 466476 0 0 3 0x14280 nfsidl nfsio 15216 218407 0 0 3 0x14280 nfsidl nfsio 24532 74676 0 0 3 0x14280 nfsidl nfsio 14267 219243 0 0 3 0x14280 nfsidl nfsio 84890 450625 0 0 3 0x14200 acct acct 10363 58585 3977 0 3 0x82 nanoslp syz-executor 99880 118390 3977 0 2 0xc82 syz-executor 32421 279664 3977 0 2 0xc82 syz-executor 73636 336311 3977 0 3 0x82 nanoslp syz-executor 11979 80163 3977 0 3 0x82 nanoslp syz-executor 3977 109522 57759 0 3 0x82 wait syz-executor 57759 356910 47908 0 3 0x10008a sigsusp ksh 47908 122856 65189 0 3 0x98 kqread sshd-session 65189 390235 283 0 3 0x92 kqread sshd-session 89606 104164 1 0 3 0x100083 ttyin getty 283 11442 1 0 3 0x88 kqread sshd 55720 349784 5436 74 3 0x1100092 bpf pflogd 5436 329739 1 0 3 0x80 sbwait pflogd 76581 24271 73603 73 3 0x1100090 kqread syslogd 73603 410768 1 0 3 0x100082 sbwait syslogd 69865 303572 1 0 3 0x100080 kqread resolvd 52099 432384 80555 77 3 0x100092 kqread dhcpleased 25148 334787 80555 77 3 0x100092 kqread dhcpleased 80555 213543 1 0 3 0x80 kqread dhcpleased 64695 384732 0 0 3 0x14200 bored smr 83544 348509 0 0 3 0x14200 pgzero zerothread 47031 218979 0 0 3 0x14200 aiodoned aiodoned 52200 371338 0 0 3 0x14200 syncer update 56701 5534 0 0 3 0x14200 cleaner cleaner 37892 183166 0 0 3 0x14200 reaper reaper 46473 221271 0 0 3 0x14200 pgdaemon pagedaemon 7950 14605 0 0 3 0x14200 bored viomb 69433 378206 0 0 3 0x40014200 acpi0 acpi0 54109 513833 0 0 3 0x40014200 idle1 39038 13085 0 0 3 0x14200 bored softnet1 22306 138158 0 0 3 0x14200 bored softnet0 30665 120934 0 0 3 0x14200 bored systqmp 45230 133826 0 0 3 0x14200 bored systq 15271 184374 0 0 3 0x14200 tmoslp softclockmp 42911 438773 0 0 3 0x40014200 tmoslp softclock 75908 135462 0 0 3 0x40014200 idle0 1 460066 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83ade110) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 mtx_enter+0x4b4 sys/kern/kern_lock.c:487 #2 uvm_pmr_freepages+0x1a8 sys/uvm/uvm_pmemrange.c:-1 #3 uvm_anfree+0xe9 sys/uvm/uvm_anon.c:112 #4 amap_wiperange_chunk+0x1a6 sys/uvm/uvm_amap.c:-1 #5 amap_wiperange+0x4b4 sys/uvm/uvm_amap.c:1035 #6 amap_pp_adjref+0x6d0 sys/uvm/uvm_amap.c:-1 #7 amap_adjref_anons+0x22d sys/uvm/uvm_amap.c:1299 #8 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 #9 sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 #10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 Process 7034 (syz-executor) thread 0xffff80003c3f2fc8 (158451) shared rwlock vmmaplk r = 0 (0xfffff1006cd5d6d0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvm_vslock_device+0x149 sys/uvm/uvm_glue.c:173 #3 physio+0x257 sys/kern/kern_physio.c:139 #4 spec_write+0x11f sys/kern/spec_vnops.c:302 #5 VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 #6 vn_write+0x1d3 sys/kern/vfs_vnops.c:414 #7 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #8 sys_write+0xa2 sys/kern/sys_generic.c:300 #9 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #10 Xsyscall+0x128 Process 87325 (syz-executor) thread 0xffff8000387a8028 (332197) exclusive rwlock amaplk r = 0 (0xfffff1006cc8eed8) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_write+0x419 sys/kern/kern_rwlock.c:320 #2 amap_unref+0x3d sys/uvm/uvm_amap.c:1330 #3 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 #4 sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 #5 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #6 Xsyscall+0x128 Process 87325 (syz-executor) thread 0xffff80003c3f3790 (102180) shared rwlock vmmaplk r = 0 (0xfffff1006cd5daa0) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 rw_do_enter_read+0x3e8 sys/kern/kern_rwlock.c:413 #2 uvm_fault_wire+0x116 uvm_fault_unwire sys/uvm/uvm_fault.c:1723 [inline] #2 uvm_fault_wire+0x116 sys/uvm/uvm_fault.c:1706 #3 uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 #4 physio+0x257 sys/kern/kern_physio.c:139 #5 spec_write+0x11f sys/kern/spec_vnops.c:302 #6 VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 #7 vn_write+0x1d3 sys/kern/vfs_vnops.c:414 #8 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #9 sys_write+0xa2 sys/kern/sys_generic.c:300 #10 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83aa3000) #0 witness_lock+0x5f1 stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5f1 sys/kern/subr_witness.c:1160 #1 __mp_acquire_count+0x58 sys/kern/kern_lock.c:-1 #2 sleep_finish+0x2d8 sys/kern/kern_synch.c:369 #3 rw_do_enter_read+0x309 sys/kern/kern_rwlock.c:-1 #4 uvmfault_lookup+0x122 sys/uvm/uvm_fault.c:1880 #5 uvm_fault_check+0x4f sys/uvm/uvm_fault.c:693 #6 uvm_fault+0x106 sys/uvm/uvm_fault.c:627 #7 uvm_fault_wire+0x73 sys/uvm/uvm_fault.c:1703 #8 uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 #9 physio+0x257 sys/kern/kern_physio.c:139 #10 spec_write+0x11f sys/kern/spec_vnops.c:302 #11 VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 #12 vn_write+0x1d3 sys/kern/vfs_vnops.c:414 #13 dofilewritev+0x2bd sys/kern/sys_generic.c:384 #14 sys_write+0xa2 sys/kern/sys_generic.c:300 #15 syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] #15 syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 #16 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11055 12085K 12414K 166960K 12687 0 pcb 19 13K 14K 166960K 102 0 rtable 225 7K 8K 166960K 369 0 pf 34 17K 25K 166960K 131 0 ifaddr 39 6K 7K 166960K 57 0 ifgroup 51 2K 2K 166960K 81 0 sysctl 3 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 100 0 ioctlops 0 0K 4K 166960K 1602 0 iov 0 0K 2K 166960K 35 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1325 83K 83K 166960K 1630 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 14 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 53K 89K 166960K 326 0 sigio 0 0K 0K 166960K 2 0 proc 71 115K 147K 166960K 564 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 17 0 in_multi 88 6K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 399 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 242 161K 175K 166960K 4737 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 40 80K 101K 166960K 1482 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 11 0K 2K 166960K 39 0 temp 43 9116K 9179K 166960K 13047 0 kqueue 13 20K 32K 166960K 80 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 44 0 41 1 0 1 1 0 8 0 rtentry 176 112 0 12 6 0 6 6 0 8 0 unpcb 144 232 0 215 6 0 6 6 0 8 5 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpcb 736 45 0 41 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 314 0 305 7 0 7 7 0 8 6 nd6 152 25 0 3 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 14 0 14 1 0 1 1 0 8 1 pfstscr 40 3 0 1 1 0 1 1 0 8 0 pffrent 40 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 3 0 1 1 0 1 1 0 8 0 pftag 88 9 0 8 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 75 0 32 1 0 1 1 0 8 0 pfstkey 128 77 0 34 2 0 2 2 0 8 0 pfstate 448 75 0 33 8 0 8 8 0 8 3 pfrule 1360 34 0 29 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 467 0 44 29 0 29 29 0 8 1 art_table 40 468 0 44 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 8 1 0 1 1 0 8 0 semupl 112 4 0 4 1 0 1 1 0 8 1 semapl 72 10 0 1 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1981 0 510 93 0 93 93 0 8 0 ffsino 296 1981 0 510 114 0 114 114 0 8 0 nchpl 144 2436 0 732 64 0 64 64 0 8 0 rtmask 32 4 0 4 1 0 1 1 0 8 1 vnodes 216 2219 0 0 124 0 124 124 0 8 0 namei 1024 7920 0 7920 2 0 2 2 0 8 2 percpumem 16 66 0 16 1 0 1 1 0 8 0 kstatmem 264 47 0 22 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 8861 0 8860 11 3 8 8 1 8 7 plimitpl 152 53 0 36 1 0 1 1 0 8 0 sigapl 424 664 0 598 8 0 8 8 0 8 0 knotepl 120 482 0 0 15 0 15 15 0 8 0 kqueuepl 224 86 0 76 2 0 2 2 0 8 1 pipepl 344 140 0 112 3 0 3 3 0 8 0 fdescpl 528 627 0 598 3 0 3 3 0 8 0 filepl 160 3065 0 2847 15 0 15 15 0 8 4 lockfpl 104 91 0 86 1 0 1 1 0 8 0 lockfspl 48 40 0 37 1 0 1 1 0 8 0 sessionpl 144 30 0 21 1 0 1 1 0 8 0 pgrppl 48 38 0 21 1 0 1 1 0 8 0 ucredpl 104 485 0 471 1 0 1 1 0 8 0 zombiepl 144 601 0 598 1 0 1 1 0 8 0 processpl 1232 664 0 598 6 0 6 6 0 8 0 procpl 664 1007 0 928 8 0 8 8 0 8 0 sockpl 752 594 0 565 17 4 13 17 0 8 10 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 172 0 0 11 0 11 11 0 8 0 bufpl 272 2801 0 109 180 0 180 180 0 8 0 anonpl 32 10833 0 0 88 0 88 88 0 247 0 amapchunkpl 152 14565 0 14033 35 1 34 34 0 158 10 amappl16 200 2404 0 2047 26 3 23 23 0 8 1 amappl15 192 10 0 10 1 1 0 1 0 8 0 amappl14 184 437 0 436 1 0 1 1 0 8 0 amappl13 176 122 0 110 1 0 1 1 0 8 0 amappl12 168 920 0 892 2 0 2 2 0 8 0 amappl11 160 17 0 16 2 1 1 1 0 8 0 amappl10 152 87 0 73 1 0 1 1 0 8 0 amappl9 144 278 0 278 1 1 0 1 0 8 0 amappl8 136 125 0 123 1 0 1 1 0 8 0 amappl7 128 169 0 156 1 0 1 1 0 8 0 amappl6 120 155 0 153 1 0 1 1 0 8 0 amappl5 112 116 0 106 1 0 1 1 0 8 0 amappl4 104 298 0 275 1 0 1 1 0 8 0 amappl3 96 2776 0 2664 4 0 4 4 0 8 0 amappl2 88 546 0 481 2 0 2 2 0 8 0 amappl1 80 11128 0 10535 15 0 15 15 0 8 2 amappl 88 3972 0 3805 5 0 5 5 0 92 0 uvmvnodes 80 109 0 0 3 0 3 3 0 8 0 dma8192 8192 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 627 0 598 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 627 0 598 1 0 1 1 0 8 0 vmmpekpl 168 7061 0 7020 2 0 2 2 0 8 0 vmmpepl 168 50134 0 47963 100 0 100 100 0 357 0 vmsppl 488 626 0 598 5 0 5 5 0 8 1 rwobjpl 80 17079 0 15694 30 0 30 30 0 8 0 pdppl 4096 1261 0 1196 95 24 71 83 0 8 6 pvpl 32 17642 0 0 144 1 143 143 0 265 0 pmappl 256 626 0 598 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 455 0 27 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff839b2ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uvm_pmr_freepages(fffff1000877f1e0,1) at uvm_pmr_freepages+0x134 x86_atomic_clearbits_u32 sys/arch/amd64/compile/SYZKALLER/obj/machine/atomic.h:298 [inline] uvm_pmr_freepages(fffff1000877f1e0,1) at uvm_pmr_freepages+0x134 sys/uvm/uvm_pmemrange.c:1326 uvm_anfree(fffff10068623b10) at uvm_anfree+0xe9 sys/uvm/uvm_anon.c:112 amap_wipeout(fffff100607ef110) at amap_wipeout+0x1d6 sys/uvm/uvm_amap.c:-1 uvm_unmap_detach(ffff80003c3e10c0,0) at uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 sys_munmap(ffff8000387a8028,ffff80003c3e1200,ffff80003c3e1150) at sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 syscall(ffff80003c3e1200) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3e1200) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447fc3d90a0, count: 5 ddb{0}> trace x86_ipi_db(ffffffff839b2ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uvm_pmr_freepages(fffff1000877f1e0,1) at uvm_pmr_freepages+0x134 x86_atomic_clearbits_u32 sys/arch/amd64/compile/SYZKALLER/obj/machine/atomic.h:298 [inline] uvm_pmr_freepages(fffff1000877f1e0,1) at uvm_pmr_freepages+0x134 sys/uvm/uvm_pmemrange.c:1326 uvm_anfree(fffff10068623b10) at uvm_anfree+0xe9 sys/uvm/uvm_anon.c:112 amap_wipeout(fffff100607ef110) at amap_wipeout+0x1d6 sys/uvm/uvm_amap.c:-1 uvm_unmap_detach(ffff80003c3e10c0,0) at uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1359 sys_munmap(ffff8000387a8028,ffff80003c3e1200,ffff80003c3e1150) at sys_munmap+0x329 sys/uvm/uvm_mmap.c:544 syscall(ffff80003c3e1200) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c3e1200) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447fc3d90a0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff83503613) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffff1006cd5d9a0,200000750000,200000757000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003c3f3790,2000007504c0,10000,1,ffff80003c4b0f18) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 physio(ffffffff821f4b80,d02,0,ffffffff821f53b0,ffff80003c4b11f8) at physio+0x257 sys/kern/kern_physio.c:139 spec_write(ffff80003c4b1040) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff10069f8a7b0,ffff80003c4b11f8,5,fffff100097fd5b0) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff1006ba14cc8,ffff80003c4b11f8,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80003c3f3790,5,ffff80003c4b11f8,0,ffff80003c4b12b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c3f3790,ffff80003c4b1360,ffff80003c4b12b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c4b1360) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4b1360) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447a62c7600, count: 2 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff83503613) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffff1006cd5d9a0,200000750000,200000757000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1724 [inline] uvm_fault_wire(fffff1006cd5d9a0,200000750000,200000761000,1) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1706 uvm_vslock_device(ffff80003c3f3790,2000007504c0,10000,1,ffff80003c4b0f18) at uvm_vslock_device+0x112 sys/uvm/uvm_glue.c:169 physio(ffffffff821f4b80,d02,0,ffffffff821f53b0,ffff80003c4b11f8) at physio+0x257 sys/kern/kern_physio.c:139 spec_write(ffff80003c4b1040) at spec_write+0x11f sys/kern/spec_vnops.c:302 VOP_WRITE(fffff10069f8a7b0,ffff80003c4b11f8,5,fffff100097fd5b0) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffff1006ba14cc8,ffff80003c4b11f8,0) at vn_write+0x1d3 sys/kern/vfs_vnops.c:414 dofilewritev(ffff80003c3f3790,5,ffff80003c4b11f8,0,ffff80003c4b12b0) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c3f3790,ffff80003c4b1360,ffff80003c4b12b0) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003c4b1360) at syscall+0xbd4 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4b1360) at syscall+0xbd4 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x447a62c7600, count: -13