panic: kernel diagnostic assertion "uvm_page_owner_locked_p(pg)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1252 Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 210512 72551 0 0x2 0x4000000 0 syz-fuzzer *196444 99997 0 0x14000 0x200 1K reaper db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8259ad66) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613014,ffffffff8258d0f7,4e4,ffffffff825c3c5d) at __assert+0x25 sys/kern/subr_prf.c:161 uvm_pageunwire(fffffd80068f4920) at uvm_pageunwire+0x16b sys/uvm/uvm_page.c:1252 uvm_fault_unwire_locked(fffffd8079492008,6a57fc82000,6a57fc83000) at uvm_fault_unwire_locked+0x226 sys/uvm/uvm_fault.c:1681 uvm_unmap_kill_entry_withlock(fffffd8079492008,fffffd80712d2e10,0) at uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 uvmspace_free(fffffd8079492008) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:454 end trace frame: 0x0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "uvm_page_owner_locked_p(pg)" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1252 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8259ad66) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613014,ffffffff8258d0f7,4e4,ffffffff825c3c5d) at __assert+0x25 sys/kern/subr_prf.c:161 uvm_pageunwire(fffffd80068f4920) at uvm_pageunwire+0x16b sys/uvm/uvm_page.c:1252 uvm_fault_unwire_locked(fffffd8079492008,6a57fc82000,6a57fc83000) at uvm_fault_unwire_locked+0x226 sys/uvm/uvm_fault.c:1681 uvm_unmap_kill_entry_withlock(fffffd8079492008,fffffd80712d2e10,0) at uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 uvmspace_free(fffffd8079492008) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:454 end trace frame: 0x0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800021239670 rbx 0xffff800020dd9bb7 rdx 0 rcx 0 rax 0xffff800021233a48 r8 0x101010101010101 r9 0x8080808080808080 r10 0x18aec06aa195c820 r11 0xf7f419351e44a5d4 r12 0xffff800020dd99b8 r13 0 r14 0 r15 0x1 rip 0xffffffff811784c8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800021239660 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (reaper) pid=196444 stat=onproc flags process=14000 proc=200 pri=81, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff800021233ce8,0xffff8000212337b8 process=0xffff8000ffffedb8 user=0xffff800021234000, vmspace=0xffffffff82b20d30 estcpu=32, cpticks=2, pctcpu=8.22 user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 45155 99345 72551 0 3 0x82 nanoslp syz-executor.3 68713 459002 72551 0 3 0x82 wait syz-executor.5 30198 97109 72551 0 3 0x82 wait syz-executor.0 33380 96152 72551 0 3 0x82 wait syz-executor.6 58047 308059 0 0 3 0x14200 acct acct 13438 145584 72551 0 3 0x82 wait syz-executor.1 41807 146306 1 0 3 0x100083 ttyin getty 62235 282658 72551 0 3 0x82 wait syz-executor.4 7115 506876 72551 0 3 0x82 wait syz-executor.7 61692 469945 0 0 3 0x14280 nfsidl nfsio 92941 521349 0 0 3 0x14280 nfsidl nfsio 20751 202997 0 0 3 0x14280 nfsidl nfsio 34162 333170 0 0 3 0x14280 nfsidl nfsio 54825 170466 0 0 3 0x14280 nfsidl nfsio 43070 411452 0 0 3 0x14280 nfsidl nfsio 20454 16938 0 0 3 0x14280 nfsidl nfsio 46335 484832 0 0 3 0x14280 nfsidl nfsio 25967 338865 0 0 3 0x14280 nfsidl nfsio 38635 307178 0 0 3 0x14280 nfsidl nfsio 44425 454778 0 0 3 0x14280 nfsidl nfsio 2498 127486 0 0 3 0x14280 nfsidl nfsio 22235 218339 0 0 3 0x14280 nfsidl nfsio 71554 471038 0 0 3 0x14280 nfsidl nfsio 85608 167436 0 0 3 0x14280 nfsidl nfsio 61112 373848 0 0 3 0x14280 nfsidl nfsio 75719 114547 0 0 3 0x14280 nfsidl nfsio 64155 232054 0 0 3 0x14280 nfsidl nfsio 80052 364099 0 0 3 0x14280 nfsidl nfsio 97505 458116 0 0 3 0x14280 nfsidl nfsio 69880 84293 0 0 3 0x14200 bored sosplice 72551 229403 93843 0 3 0x82 kqread syz-fuzzer 72551 293140 93843 0 3 0x4000082 nanoslp syz-fuzzer 72551 471821 93843 0 3 0x4000082 thrsleep syz-fuzzer 72551 405479 93843 0 3 0x4000082 thrsleep syz-fuzzer 72551 210512 93843 0 7 0x4000002 syz-fuzzer 72551 478279 93843 0 3 0x4000082 thrsleep syz-fuzzer 72551 156597 93843 0 3 0x4000082 thrsleep syz-fuzzer 72551 208362 93843 0 3 0x4000082 thrsleep syz-fuzzer 72551 207763 93843 0 3 0x4000082 thrsleep syz-fuzzer 93843 87313 20390 0 3 0x10008a sigsusp ksh 20390 219275 91307 0 3 0x9a kqread sshd 91307 521477 1 0 3 0x88 kqread sshd 53175 333296 70268 74 3 0x1100092 bpf pflogd 70268 486411 1 0 3 0x80 netio pflogd 37761 162745 30666 73 3 0x1100010 ffs_fsync syslogd 30666 96355 1 0 3 0x100082 netio syslogd 65994 214880 1 0 3 0x100080 kqread resolvd 73293 161081 17124 77 3 0x100092 kqread dhcpleased 62847 468067 17124 77 3 0x100092 kqread dhcpleased 17124 164577 1 0 3 0x80 kqread dhcpleased 56088 267278 0 0 3 0x14200 bored smr 92939 57838 0 0 3 0x14200 pgzero zerothread 79933 505868 0 0 3 0x14200 aiodoned aiodoned 5380 158734 0 0 3 0x14200 syncer update 18050 41259 0 0 3 0x14200 cleaner cleaner *99997 196444 0 0 7 0x14200 reaper 98798 337292 0 0 3 0x14200 pgdaemon pagedaemon 18157 307815 0 0 3 0x14200 bored viomb 67515 153266 0 0 3 0x40014200 acpi0 acpi0 59299 207115 0 0 3 0x40014200 idle1 372 288473 0 0 3 0x14200 bored softnet 40455 378301 0 0 3 0x14200 bored softnet 47941 264752 0 0 3 0x14200 bored softnet 33049 296678 0 0 3 0x14200 bored softnet 87943 165495 0 0 3 0x14200 bored systqmp 52766 358673 0 0 3 0x14200 bored systq 51361 375360 0 0 3 0x40014200 bored softclock 7920 241470 0 0 3 0x40014200 idle0 1 391015 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff82b21600) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 uvm_fault_unwire_locked+0x21e sys/uvm/uvm_fault.c:1680 #4 uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 #5 uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] #5 uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 #6 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 #7 reaper+0x19a sys/kern/kern_exit.c:454 #8 proc_trampoline+0x1c Process 37761 (syslogd) thread 0xffff8000ffff7a50 (162745) exclusive rrwlock inode r = 0 (0xfffffd806e7cb5f0) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 rrw_enter+0x8b sys/kern/kern_rwlock.c:465 #3 VOP_LOCK+0x87 sys/kern/vfs_vops.c:518 #4 vn_lock+0x84 sys/kern/vfs_vnops.c:567 #5 sys_fsync+0xf5 sys/kern/vfs_syscalls.c:2939 #6 syscall+0x435 mi_syscall sys/sys/syscall_mi.h:101 [inline] #6 syscall+0x435 sys/arch/amd64/amd64/trap.c:585 #7 Xsyscall+0x128 Process 99997 (reaper) thread 0xffff800021233a48 (196444) exclusive rwlock uobjlk r = 0 (0xfffffd8076576c20) #0 witness_lock+0x44d #1 rw_enter+0x3e1 sys/kern/kern_rwlock.c:310 #2 uvm_fault_unwire_locked+0x1c6 sys/uvm/uvm_fault.c:1668 #3 uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 #4 uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] #4 uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 #5 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 #6 reaper+0x19a sys/kern/kern_exit.c:454 #7 proc_trampoline+0x1c exclusive kernel_lock &kernel_lock r = 0 (0xffffffff829dfae8) #0 witness_lock+0x44d #1 uvm_unmap_kill_entry_withlock+0x4c sys/uvm/uvm_map.c:2134 #2 uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] #2 uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 #3 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 #4 reaper+0x19a sys/kern/kern_exit.c:454 #5 proc_trampoline+0x1c exclusive mutex &uvm.pageqlock r = 0 (0xffffffff82b21600) #0 witness_lock+0x44d #1 mtx_enter_try+0x100 #2 mtx_enter+0x4b sys/kern/kern_lock.c:266 #3 uvm_fault_unwire_locked+0x21e sys/uvm/uvm_fault.c:1680 #4 uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 #5 uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] #5 uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 #6 uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 #7 reaper+0x19a sys/kern/kern_exit.c:454 #8 proc_trampoline+0x1c ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10229 6518K 7162K 78643K 49775 0 pcb 13 20K 24K 78643K 5128 0 rtable 178 16K 18K 78643K 17343 0 ifaddr 87 24K 31K 78643K 1980 0 sysctl 3 1K 3K 78643K 6 0 counters 52 35K 36K 78643K 786 0 ioctlops 0 0K 4K 78643K 5196 0 iov 0 0K 32K 78643K 2304 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 5 0 vnodes 1436 90K 90K 78643K 13547 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 174 0 VM map 2 1K 1K 78643K 2 0 sem 18 10K 15K 78643K 224 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 9 29K 85K 78643K 21684 0 sigio 0 0K 0K 78643K 708 0 proc 70 91K 115K 78643K 4023 0 subproc 91 5K 6K 78643K 1316 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 489 0 in_multi 63 4K 7K 78643K 1555 0 ether_multi 1 0K 0K 78643K 81 0 mrt 80 4K 5K 78643K 617 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 241 1076K 1076K 78643K 241 0 exec 0 0K 2K 78643K 5468 0 pfkey data 0 0K 0K 78643K 7 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 704 1493K 1959K 78643K 129771 0 UVM aobj 131 5K 5K 78643K 140 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 1348 0 NDP 13 0K 1K 78643K 600 0 temp 134 4728K 5752K 78643K 386962 0 kqueue 12 18K 26K 78643K 1365 0 SYN cache 2 2352K 2360K 78643K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 15793 0 15790 90 89 1 6 0 8 0 rtentry 112 1704 0 1635 4 1 3 4 0 8 0 unpcb 144 10021 0 10006 118 117 1 8 0 8 0 syncache 296 71 0 71 20 19 1 1 0 8 1 tcpqe 32 204 0 204 12 11 1 1 0 8 1 tcpcb 736 6431 0 6420 189 187 2 14 0 8 0 arp 120 265 0 252 1 0 1 1 0 8 0 inpcb 320 19650 0 19640 248 241 7 15 0 8 6 ip6q 72 13 0 13 4 4 0 1 0 8 0 ip6af 40 39 0 39 4 4 0 1 0 8 0 nd6 48 343 0 328 1 0 1 1 0 8 0 pkpcb 40 48 0 48 12 12 0 1 0 8 0 kcovpl 48 101 0 94 1 0 1 1 0 8 0 ppxss 1256 177 0 177 22 22 0 1 0 8 0 pffrag 232 52 0 50 5 4 1 1 0 482 0 pffrnode 88 52 0 50 5 4 1 1 0 8 0 pffrent 40 190 0 188 6 5 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 9 0 4 1 0 1 1 0 8 0 pfstitem 24 55 0 53 1 0 1 1 0 8 0 pfstkey 120 55 0 53 1 0 1 1 0 8 0 pfstate 336 55 0 53 2 1 1 2 0 8 0 pfrule 1360 28 0 19 2 1 1 2 0 8 0 rttmr 136 226 0 226 12 12 0 1 0 8 0 art_heap8 4096 8 0 7 5 4 1 3 0 8 0 art_heap4 256 6533 0 6229 59 32 27 30 0 8 0 art_table 32 6541 0 6236 5 1 4 4 0 8 0 art_node 16 1684 0 1625 1 0 1 1 0 8 0 sysvmsgpl 40 46 0 6 1 0 1 1 0 8 0 semupl 112 3 0 3 1 1 0 1 0 8 0 semapl 112 207 0 191 1 0 1 1 0 8 0 shmpl 112 137 0 9 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 29200 0 27657 98 0 98 98 0 8 0 ffsino 272 29200 0 27657 104 0 104 104 0 8 0 nchpl 144 59430 0 57780 63 0 63 63 0 8 0 uvmvnodes 80 34291 0 0 700 0 700 700 0 8 0 vnodes 216 34291 0 0 1906 0 1906 1906 0 8 0 namei 1024 203065 0 203065 7 6 1 2 0 8 1 percpumem 16 405 0 367 1 0 1 1 0 8 0 vcpupl 2048 281 0 0 36 0 36 36 0 8 0 vmpool 568 450 0 169 21 0 21 21 0 8 0 pfiaddrpl 120 8 0 0 1 0 1 1 0 8 0 kstatmem 264 760 0 734 3 0 3 3 0 8 0 scsiplug 72 8 0 8 4 4 0 1 0 8 0 scxspl 216 169423 0 169422 42 41 1 8 0 8 0 plimitpl 152 3062 0 3046 1 0 1 1 0 8 0 sigapl 424 21895 0 21826 9 1 8 8 0 8 0 futexpl 64 192201 0 192201 8 7 1 1 0 8 1 knotepl 120 1152 0 0 12 1 11 11 0 8 0 kqueuepl 216 3904 0 3896 61 60 1 5 0 8 0 pipepl 320 3864 0 3839 108 102 6 13 0 8 3 fdescpl 496 21792 0 21770 9 5 4 5 0 8 0 filepl 152 144758 0 144539 214 197 17 22 0 8 7 lockfpl 104 6267 0 6265 15 14 1 2 0 8 0 lockfspl 48 1768 0 1766 1 0 1 1 0 8 0 sessionpl 144 122 0 105 1 0 1 1 0 8 0 pgrppl 48 260 0 243 1 0 1 1 0 8 0 ucredpl 104 17275 0 17263 1 0 1 1 0 8 0 zombiepl 144 21834 0 21826 2 1 1 1 0 8 0 processpl 1064 21895 0 21826 5 0 5 5 0 8 0 procpl 672 62189 0 62100 43 35 8 9 0 8 0 srpgc 96 147 0 147 29 29 0 1 0 8 0 sosppl 168 166 0 166 25 25 0 1 0 8 0 sockpl 488 45595 0 45564 734 721 13 30 0 8 8 mcl64k 65536 38 0 0 3 0 3 3 0 8 0 mcl16k 16384 25 0 0 4 1 3 3 0 8 0 mcl12k 12288 65 0 0 2 0 2 2 0 8 0 mcl9k 9216 25 0 0 2 0 2 2 0 8 0 mcl8k 8192 30 0 0 3 1 2 3 0 8 0 mcl4k 4096 60 0 0 3 0 3 3 0 8 0 mcl2k2 2112 12 0 0 1 0 1 1 0 8 0 mcl2k 2048 349 0 0 23 4 19 23 0 8 0 mtagpl 96 1251 0 0 18 0 18 18 0 8 0 mbufpl 256 2587 0 0 142 0 142 142 0 8 0 bufpl 288 37844 0 29366 606 0 606 606 0 8 0 anonpl 24 4232852 0 4202173 426 235 191 191 0 186 0 amapchunkpl 152 1570058 0 1568573 15456 15398 58 4428 0 158 0 amappl16 200 54887 0 53831 214 156 58 69 0 8 0 amappl15 192 2096 0 2092 1 0 1 1 0 8 0 amappl14 184 3334 0 3327 1 0 1 1 0 8 0 amappl13 176 2326 0 2323 1 0 1 1 0 8 0 amappl12 168 2732 0 2724 1 0 1 1 0 8 0 amappl11 160 1749 0 1729 4 3 1 2 0 8 0 amappl10 152 3735 0 3724 1 0 1 1 0 8 0 amappl9 144 6109 0 6102 1 0 1 1 0 8 0 amappl8 136 4149 0 3995 6 0 6 6 0 8 0 amappl7 128 1939 0 1924 1 0 1 1 0 8 0 amappl6 120 6457 0 6429 2 1 1 2 0 8 0 amappl5 112 20371 0 20347 1 0 1 1 0 8 0 amappl4 104 6235 0 6196 4 2 2 2 0 8 0 amappl3 96 68341 0 68249 7 4 3 3 0 8 0 amappl2 88 26062 0 25993 3 1 2 3 0 8 0 amappl1 80 518173 0 517437 28 12 16 20 0 8 0 amappl 88 127186 0 126856 10 2 8 8 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 139 0 9 3 0 3 3 0 8 0 uaddrrnd 24 22242 0 21932 2 0 2 2 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 22242 0 21932 2 0 2 2 0 8 0 vmmpekpl 168 166704 0 166612 5 0 5 5 0 8 0 vmmpepl 168 2147411 0 2143357 498 321 177 186 0 357 0 vmsppl 368 22241 0 21931 30 1 29 29 0 8 0 rwobjpl 56 550208 0 513366 534 15 519 519 0 8 0 pdppl 4096 44491 0 44143 1335 986 349 350 0 8 1 pvpl 32 8505077 0 8474012 767 464 303 303 0 265 23 pmappl 248 22241 0 21931 21 1 20 20 0 8 0 extentpl 40 58 0 38 1 0 1 1 0 8 0 phpool 112 2679 0 1248 41 0 41 41 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff829b8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff829df8e0) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829df8e0) at __mp_lock+0x122 sys/kern/kern_lock.c:147 intr_handler(ffff8000212e1e50,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f __mp_lock(ffffffff829df8e0) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829df8e0) at __mp_lock+0x129 sys/kern/kern_lock.c:147 syscall(ffff8000212e2020) at syscall+0x41d mi_syscall sys/sys/syscall_mi.h:100 [inline] syscall(ffff8000212e2020) at syscall+0x41d sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x23369b960, count: 6 ddb{0}> trace x86_ipi_db(ffffffff829b8ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 __mp_lock(ffffffff829df8e0) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829df8e0) at __mp_lock+0x122 sys/kern/kern_lock.c:147 intr_handler(ffff8000212e1e50,ffff80000004bd00) at intr_handler+0x5e sys/arch/amd64/amd64/intr.c:532 Xintr_ioapic_edge21_untramp() at Xintr_ioapic_edge21_untramp+0x18f __mp_lock(ffffffff829df8e0) at __mp_lock+0x129 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff829df8e0) at __mp_lock+0x129 sys/kern/kern_lock.c:147 syscall(ffff8000212e2020) at syscall+0x41d mi_syscall sys/sys/syscall_mi.h:100 [inline] syscall(ffff8000212e2020) at syscall+0x41d sys/arch/amd64/amd64/trap.c:585 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x23369b960, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8259ad66) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613014,ffffffff8258d0f7,4e4,ffffffff825c3c5d) at __assert+0x25 sys/kern/subr_prf.c:161 uvm_pageunwire(fffffd80068f4920) at uvm_pageunwire+0x16b sys/uvm/uvm_page.c:1252 uvm_fault_unwire_locked(fffffd8079492008,6a57fc82000,6a57fc83000) at uvm_fault_unwire_locked+0x226 sys/uvm/uvm_fault.c:1681 uvm_unmap_kill_entry_withlock(fffffd8079492008,fffffd80712d2e10,0) at uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 uvmspace_free(fffffd8079492008) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:454 end trace frame: 0x0, count: 6 ddb{1}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8259ad66) at panic+0x177 sys/kern/subr_prf.c:202 __assert(ffffffff82613014,ffffffff8258d0f7,4e4,ffffffff825c3c5d) at __assert+0x25 sys/kern/subr_prf.c:161 uvm_pageunwire(fffffd80068f4920) at uvm_pageunwire+0x16b sys/uvm/uvm_page.c:1252 uvm_fault_unwire_locked(fffffd8079492008,6a57fc82000,6a57fc83000) at uvm_fault_unwire_locked+0x226 sys/uvm/uvm_fault.c:1681 uvm_unmap_kill_entry_withlock(fffffd8079492008,fffffd80712d2e10,0) at uvm_unmap_kill_entry_withlock+0x67 sys/uvm/uvm_map.c:2136 uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 uvm_map_addr_RBT_LEFT sys/uvm/uvm_map.h:176 [inline] uvm_map_teardown(fffffd8079492008) at uvm_map_teardown+0x197 sys/uvm/uvm_map.c:2771 uvmspace_free(fffffd8079492008) at uvmspace_free+0xa6 sys/uvm/uvm_map.c:3684 reaper(ffff800021233a48) at reaper+0x19a sys/kern/kern_exit.c:454 end trace frame: 0x0, count: -9