panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 114447 79546 32767 0x10 0x4000000 0 syz-executor * 13891 79546 32767 0x10 0x4000000 1K syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340aafa) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire_locked+0x48d sys/uvm/uvm_fault.c:1739 uvm_fault_unwire(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1702 sysctl_vsunlock(400000000080,0) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 net_sysctl(ffff80003c5593f4,3,400000000080,ffff80003c559428,0,d1ef4960be19f686,3d2b9c3e7c1b85de) at net_sysctl+0x69a sys/kern/uipc_domain.c:259 sys_sysctl(ffff80003c520a68,ffff80003c559560,ffff80003c5594b0) at sys_sysctl+0x425 syscall(ffff80003c559560) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c559560) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xec91d1f90c0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault_unwire_locked: address not in map ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340aafa) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire_locked+0x48d sys/uvm/uvm_fault.c:1739 uvm_fault_unwire(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1702 sysctl_vsunlock(400000000080,0) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 net_sysctl(ffff80003c5593f4,3,400000000080,ffff80003c559428,0,d1ef4960be19f686,3d2b9c3e7c1b85de) at net_sysctl+0x69a sys/kern/uipc_domain.c:259 sys_sysctl(ffff80003c520a68,ffff80003c559560,ffff80003c5594b0) at sys_sysctl+0x425 syscall(ffff80003c559560) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c559560) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xec91d1f90c0, count: -9 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c559180 rbx 0xffff800029aacdc7 rdx 0 rcx 0xffff80003c520a68 rax 0xffff800029aabff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x621548ee399f4496 r11 0x839e62eed0c6296e r12 0xffff800029aacbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff8324fe35 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c559170 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=13891 pid=79546 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c5219c8,0xffff800039cd2f90 process=0xffff80003b4ecde8 user=0xffff80003c554000, vmspace=0xfffffd806be67750 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 2188 333083 58546 32767 2 0x10 syz-executor 2188 162321 58546 32767 3 0x4000090 fsleep syz-executor 79546 420780 58335 32767 2 0x10 syz-executor 79546 114447 58335 32767 7 0x4000010 syz-executor *79546 13891 58335 32767 7 0x4000010 syz-executor 79546 265309 58335 32767 3 0x4000090 kqsel syz-executor 24017 179685 35769 32767 3 0x90 nanoslp syz-executor 24017 428725 35769 32767 3 0x4000090 fsleep syz-executor 24017 90273 35769 32767 3 0x4000090 fsleep syz-executor 24017 255445 35769 32767 3 0x4000090 kqsel syz-executor 73465 521469 85327 32767 2 0x10 syz-executor 15591 177222 50177 32767 2 0x10 syz-executor 15591 203224 50177 32767 3 0x4000090 fsleep syz-executor 15591 312529 50177 32767 3 0x4000090 fsleep syz-executor 98920 407868 24693 32767 3 0x90 nanoslp syz-executor 98920 282784 24693 32767 3 0x4000090 kqsel syz-executor 98920 176283 24693 32767 3 0x4000090 fsleep syz-executor 98920 36890 24693 32767 3 0x4000090 fsleep syz-executor 54102 298495 67019 0 3 0x100082 sbwait ndp 67019 127358 64371 0 3 0x10008a sigsusp sh 24693 159998 9267 32767 3 0x90 nanoslp syz-executor 35769 499591 12176 32767 3 0x90 nanoslp syz-executor 58546 81091 63939 32767 3 0x90 nanoslp syz-executor 82412 218311 7059 32767 3 0x10 biowait syz-executor 64371 49298 34023 0 3 0x80 wait syz-executor 50177 448295 94939 32767 3 0x90 nanoslp syz-executor 85327 147486 74352 32767 3 0x90 nanoslp syz-executor 58335 245759 71153 32767 3 0x90 nanoslp syz-executor 12176 286132 31776 0 3 0x82 wait syz-executor 7059 239662 31776 0 3 0x82 wait syz-executor 63939 419424 31776 0 3 0x82 wait syz-executor 9267 135697 31776 0 3 0x82 wait syz-executor 94939 248732 31776 0 3 0x82 wait syz-executor 74352 408023 31776 0 3 0x82 wait syz-executor 71153 220100 31776 0 3 0x82 wait syz-executor 34023 266542 31776 0 3 0x82 wait syz-executor 31776 496014 4735 0 3 0x82 kqread syz-executor 4735 284579 47617 0 3 0x10008a sigsusp ksh 47617 502067 27199 0 3 0x98 kqread sshd-session 27199 451225 38699 0 3 0x92 kqread sshd-session 31578 506629 1 0 3 0x100083 ttyin getty 38699 214628 1 0 3 0x88 kqread sshd 26233 484288 90620 73 3 0x1100090 kqread syslogd 90620 251613 1 0 3 0x100082 sbwait syslogd 84167 1170 1 0 3 0x100080 kqread resolvd 69339 79406 97565 77 3 0x100092 kqread dhcpleased 5835 347288 97565 77 3 0x100092 kqread dhcpleased 97565 218398 1 0 3 0x80 kqread dhcpleased 9991 153666 0 0 3 0x14200 bored smr 71385 414053 0 0 2 0x14200 zerothread 2678 178075 0 0 3 0x14200 aiodoned aiodoned 29537 226631 0 0 3 0x14200 syncer update 30524 300602 0 0 3 0x14200 cleaner cleaner 39353 275076 0 0 3 0x14200 reaper reaper 63386 1904 0 0 3 0x14200 pgdaemon pagedaemon 25410 174334 0 0 3 0x14200 bored viomb 78854 290268 0 0 3 0x40014200 acpi0 acpi0 12778 442843 0 0 3 0x40014200 idle1 80356 372758 0 0 3 0x14200 bored softnet3 2666 386731 0 0 3 0x14200 bored softnet2 12414 172914 0 0 3 0x14200 bored softnet1 94680 68999 0 0 3 0x14200 bored softnet0 64924 142740 0 0 3 0x14200 bored systqmp 32472 274943 0 0 3 0x14200 bored systq 382 160914 0 0 3 0x14200 tmoslp softclockmp 22097 239709 0 0 3 0x40014200 tmoslp softclock 43626 12522 0 0 3 0x40014200 idle0 1 31977 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 79546 (syz-executor) thread 0xffff80003c5219c8 (114447) exclusive rwlock amaplk r = 0 (0xfffffd806bcfc360) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 amap_unref+0x3d sys/uvm/uvm_amap.c:1360 #3 uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1353 #4 sys_munmap+0x32f sys/uvm/uvm_mmap.c:544 #5 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 Process 79546 (syz-executor) thread 0xffff80003c520a68 (13891) shared rwlock vmmaplk r = 0 (0xfffffd806be67850) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_read+0x3af sys/kern/kern_rwlock.c:405 #2 uvm_fault_unwire+0x3e sys/uvm/uvm_fault.c:1701 #3 sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 #4 net_sysctl+0x69a sys/kern/uipc_domain.c:259 #5 sys_sysctl+0x425 #6 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839d5030) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 sysctl_vslock+0x80 sys/kern/kern_sysctl.c:192 #2 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #3 sys_sysctl+0x425 #4 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #4 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #5 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff83889f08) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 sysctl_vslock+0x45 sys/kern/kern_sysctl.c:187 #3 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #4 sys_sysctl+0x425 #5 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 Process 82412 (syz-executor) thread 0xffff8000ffffb9b8 (218311) exclusive rrwlock inode r = 0 (0xfffffd806c0a5ce8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:616 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 ufs_ihashins+0x4f sys/ufs/ufs/ufs_ihash.c:159 #5 ffs_vget+0x187 sys/ufs/ffs/ffs_vfsops.c:1230 #6 ffs_inode_alloc+0x283 sys/ufs/ffs/ffs_alloc.c:393 #7 ufs_mkdir+0x113 sys/ufs/ufs/ufs_vnops.c:1112 #8 VOP_MKDIR+0x102 sys/kern/vfs_vops.c:394 #9 domkdirat+0x179 sys/kern/vfs_syscalls.c:3117 #10 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] #10 syscall+0xb08 sys/arch/amd64/amd64/trap.c:577 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c849ab0) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 rrw_enter+0xc6 sys/kern/kern_rwlock.c:616 #3 VOP_LOCK+0xa6 sys/kern/vfs_vops.c:524 #4 vn_lock+0xa4 sys/kern/vfs_vnops.c:570 #5 vfs_lookup+0x109 sys/kern/vfs_lookup.c:418 #6 namei+0x7aa sys/kern/vfs_lookup.c:250 #7 domkdirat+0x8b sys/kern/vfs_syscalls.c:3102 #8 syscall+0xb08 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xb08 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10182 10953K 10966K 166960K 11261 0 pcb 17 12K 12K 166960K 17 0 rtable 232 6K 6K 166960K 340 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 30 0 iov 0 0K 2K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1332 84K 84K 166960K 1348 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 26 97K 125K 166960K 170 0 proc 58 79K 127K 166960K 482 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 30 0 in_multi 100 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 338 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 73K 74K 166960K 2778 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 48 96K 113K 166960K 1165 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 9 0 NDP 27 2K 2K 166960K 27 0 temp 37 8630K 8694K 166960K 3839 0 kqueue 13 20K 22K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 30 1 0 1 1 0 8 0 rtentry 112 110 0 1 4 0 4 4 0 8 0 unpcb 144 49 0 32 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 62 0 26 5 0 5 5 0 8 1 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 376 127 0 86 5 0 5 5 0 8 0 nd6 136 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 32 452 0 0 4 0 4 4 0 8 0 art_node 16 109 0 10 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1576 0 74 94 0 94 94 0 8 0 ffsino 280 1576 0 74 108 0 108 108 0 8 0 nchpl 144 1799 0 125 63 0 63 63 0 8 0 uvmvnodes 80 1657 0 0 34 0 34 34 0 8 0 vnodes 216 1657 0 0 93 0 93 93 0 8 0 namei 1024 5300 0 5299 1 0 1 1 0 8 0 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5926 0 5925 3 1 2 2 1 8 1 plimitpl 152 35 0 11 1 0 1 1 0 8 0 sigapl 424 441 0 385 8 0 8 8 0 8 0 futexpl 64 374 0 367 1 0 1 1 0 8 0 knotepl 120 63 0 0 2 0 2 2 0 8 0 kqueuepl 216 27 0 15 1 0 1 1 0 8 0 pipepl 328 99 0 72 3 0 3 3 0 8 0 fdescpl 504 423 0 385 7 1 6 6 0 8 0 filepl 152 1545 0 1300 10 0 10 10 0 8 0 lockfpl 104 6 0 4 1 0 1 1 0 8 0 lockfspl 48 4 0 2 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 29 0 5 1 0 1 1 0 8 0 ucredpl 104 99 0 81 1 0 1 1 0 8 0 zombiepl 144 385 0 385 1 0 1 1 0 8 1 processpl 1176 441 0 385 5 0 5 5 0 8 0 procpl 656 493 0 425 6 0 6 6 0 8 0 sockpl 688 211 0 148 7 0 7 7 0 8 1 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 0 15 15 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 254 0 0 16 0 16 16 0 8 0 bufpl 280 2324 0 123 158 0 158 158 0 8 0 anonpl 24 99363 0 95809 23 0 23 23 0 184 1 amapchunkpl 152 8532 0 8001 23 0 23 23 0 158 2 amappl16 200 2004 0 1969 5 0 5 5 0 8 3 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 100 0 89 1 0 1 1 0 8 0 amappl13 176 9 0 9 1 0 1 1 0 8 1 amappl12 168 1016 0 979 2 0 2 2 0 8 0 amappl11 160 45 0 35 1 0 1 1 0 8 0 amappl10 152 9 0 8 1 0 1 1 0 8 0 amappl9 144 251 0 251 1 0 1 1 0 8 1 amappl8 136 19 0 17 1 0 1 1 0 8 0 amappl7 128 92 0 81 1 0 1 1 0 8 0 amappl6 120 174 0 170 1 0 1 1 0 8 0 amappl5 112 113 0 107 1 0 1 1 0 8 0 amappl4 104 269 0 253 1 0 1 1 0 8 0 amappl3 96 1340 0 1218 4 0 4 4 0 8 0 amappl2 88 593 0 538 2 0 2 2 0 8 0 amappl1 80 7367 0 6807 14 0 14 14 0 8 0 amappl 88 2449 0 2261 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 423 0 385 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 423 0 385 1 0 1 1 0 8 0 vmmpekpl 168 4907 0 4872 2 0 2 2 0 8 0 vmmpepl 168 31967 0 29951 91 0 91 91 0 357 1 vmsppl 456 422 0 385 7 1 6 6 0 8 0 rwobjpl 64 13840 0 11298 42 0 42 42 0 8 0 pdppl 4096 854 0 770 108 10 98 98 0 8 14 pvpl 32 9994 0 0 81 0 81 81 0 265 0 pmappl 248 422 0 385 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 287 0 13 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837a1ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153 __mp_lock(ffffffff839d4e28) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839d4e28) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144 intr_handler(ffff80003c539940,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d uvm_anfree_list(fffffd806c2dd450,0) at uvm_anfree_list+0x225 sys/uvm/uvm_anon.c:116 amap_wiperange_chunk(fffffd806c715c98,fffffd806c715cc8,0,f) at amap_wiperange_chunk+0x1a8 sys/uvm/uvm_amap.c:983 amap_pp_adjref(fffffd806c715c98,0,f,ffffffff) at amap_pp_adjref+0x6f4 sys/uvm/uvm_amap.c:944 amap_adjref_anons(fffffd806c715c98,0,f,ffffffff,0) at amap_adjref_anons+0x22d sys/uvm/uvm_amap.c:1329 uvm_unmap_detach(ffff80003c539cf0,0) at uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1353 sys_munmap(ffff80003c5219c8,ffff80003c539e30,ffff80003c539d80) at sys_munmap+0x32f sys/uvm/uvm_mmap.c:544 end trace frame: 0xffff80003c539e20, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837a1ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 kd_curproc sys/dev/kcov.c:585 [inline] __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 sys/dev/kcov.c:153 __mp_lock(ffffffff839d4e28) at __mp_lock+0x1a3 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839d4e28) at __mp_lock+0x1a3 sys/kern/kern_lock.c:144 intr_handler(ffff80003c539940,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d uvm_anfree_list(fffffd806c2dd450,0) at uvm_anfree_list+0x225 sys/uvm/uvm_anon.c:116 amap_wiperange_chunk(fffffd806c715c98,fffffd806c715cc8,0,f) at amap_wiperange_chunk+0x1a8 sys/uvm/uvm_amap.c:983 amap_pp_adjref(fffffd806c715c98,0,f,ffffffff) at amap_pp_adjref+0x6f4 sys/uvm/uvm_amap.c:944 amap_adjref_anons(fffffd806c715c98,0,f,ffffffff,0) at amap_adjref_anons+0x22d sys/uvm/uvm_amap.c:1329 uvm_unmap_detach(ffff80003c539cf0,0) at uvm_unmap_detach+0x8a sys/uvm/uvm_map.c:1353 sys_munmap(ffff80003c5219c8,ffff80003c539e30,ffff80003c539d80) at sys_munmap+0x32f sys/uvm/uvm_mmap.c:544 syscall(ffff80003c539e30) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c539e30) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xec898214d80, count: -16 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340aafa) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire_locked+0x48d sys/uvm/uvm_fault.c:1739 uvm_fault_unwire(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1702 sysctl_vsunlock(400000000080,0) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 net_sysctl(ffff80003c5593f4,3,400000000080,ffff80003c559428,0,d1ef4960be19f686,3d2b9c3e7c1b85de) at net_sysctl+0x69a sys/kern/uipc_domain.c:259 sys_sysctl(ffff80003c520a68,ffff80003c559560,ffff80003c5594b0) at sys_sysctl+0x425 syscall(ffff80003c559560) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c559560) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xec91d1f90c0, count: 6 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340aafa) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire_locked+0x48d sys/uvm/uvm_fault.c:1739 uvm_fault_unwire(fffffd806be67750,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1702 sysctl_vsunlock(400000000080,0) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 net_sysctl(ffff80003c5593f4,3,400000000080,ffff80003c559428,0,d1ef4960be19f686,3d2b9c3e7c1b85de) at net_sysctl+0x69a sys/kern/uipc_domain.c:259 sys_sysctl(ffff80003c520a68,ffff80003c559560,ffff80003c5594b0) at sys_sysctl+0x425 syscall(ffff80003c559560) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c559560) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xec91d1f90c0, count: -9