login: panic: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 43887 68799 32767 0x10 0x4000000 1 syz-executor 232868 90800 32767 0x10 0 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8343bd77) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833ed19d,ffffffff8342812c,6cb,ffffffff8333a638) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c0e3908,400000000000,400000012000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 sysctl_vslock(400000000080,20000) at sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 net_sysctl(ffff80002a41a254,3,400000000080,ffff80002a41a288,0,0,c94440e0a36c247f) at net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 sys_sysctl(ffff8000ffffa2a8,ffff80002a41a3c0,ffff80002a41a310) at sys_sysctl+0x425 syscall(ffff80002a41a3c0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a41a3c0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdee1173f2c0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "va >= entry->start" failed: file "/syzkaller/managers/setuid/kernel/sys/uvm/uvm_fault.c", line 1739 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8343bd77) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833ed19d,ffffffff8342812c,6cb,ffffffff8333a638) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c0e3908,400000000000,400000012000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 sysctl_vslock(400000000080,20000) at sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 net_sysctl(ffff80002a41a254,3,400000000080,ffff80002a41a288,0,0,c94440e0a36c247f) at net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 sys_sysctl(ffff8000ffffa2a8,ffff80002a41a3c0,ffff80002a41a310) at sys_sysctl+0x425 syscall(ffff80002a41a3c0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a41a3c0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdee1173f2c0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a419f80 rbx 0xffff800029a9cdc7 rdx 0 rcx 0xffff8000ffffa2a8 rax 0xffff800029a9bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xb0b81e424cb3d9d9 r11 0xc1d321a700ff9831 r12 0xffff800029a9cbc8 r13 0 r14 0 r15 0x1 rip 0xffffffff8191de05 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a419f70 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=43887 pid=68799 tcnt=4 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=78, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffbc48,0xffff8000368b74b0 process=0xffff8000368b9bb0 user=0xffff80002a415000, vmspace=0xfffffd806c0e3908 estcpu=28, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 43473 485423 90800 32767 2 0x10 syz-executor 65921 350490 91618 32767 2 0x10 syz-executor 65921 309601 91618 32767 3 0x4000090 fsleep syz-executor 3744 148089 94119 32767 2 0x10 syz-executor 3744 34296 94119 32767 3 0x4000090 fsleep syz-executor 68799 76954 31198 32767 2 0x10 syz-executor *68799 43887 31198 32767 7 0x4000010 syz-executor 68799 75498 31198 32767 2 0x4000010 syz-executor 68799 373295 31198 32767 2 0x4000010 syz-executor 85027 117788 10829 0 3 0x2 biowait syz-executor 70038 378499 0 0 3 0x14200 bored sosplice 88191 64938 6956 0 3 0x100082 sbwait arp 6956 315647 33735 0 3 0x10008a sigsusp sh 27646 200941 53460 32767 3 0x90 wait syz-executor 94119 15941 39630 32767 3 0x90 nanoslp syz-executor 90800 232868 56879 32767 7 0x10 syz-executor 91618 490279 14908 32767 3 0x90 nanoslp syz-executor 33735 380322 63348 0 3 0x80 wait syz-executor 75780 510487 60458 32767 3 0x90 wait syz-executor 31198 519473 21811 32767 3 0x90 nanoslp syz-executor 56879 1236 10829 0 3 0x82 wait syz-executor 63348 423399 10829 0 3 0x82 wait syz-executor 14908 195952 10829 0 3 0x82 wait syz-executor 53460 211716 10829 0 3 0x82 wait syz-executor 39630 59778 10829 0 3 0x82 wait syz-executor 60458 389926 10829 0 3 0x82 wait syz-executor 21811 509651 10829 0 3 0x82 wait syz-executor 10829 30859 58116 0 3 0x82 kqread syz-executor 58116 312833 8884 0 3 0x10008a sigsusp ksh 8884 97074 15667 0 3 0x98 kqread sshd-session 15667 457248 90083 0 3 0x92 kqread sshd-session 51403 68299 1 0 3 0x100083 ttyin getty 90083 147037 1 0 3 0x88 kqread sshd 12070 202722 87378 73 3 0x1100090 kqread syslogd 87378 83144 1 0 3 0x100082 sbwait syslogd 4581 360573 1 0 3 0x100080 kqread resolvd 16985 178379 98884 77 3 0x100092 kqread dhcpleased 2824 324424 98884 77 3 0x100092 kqread dhcpleased 98884 197098 1 0 3 0x80 kqread dhcpleased 99499 249123 0 0 3 0x14200 bored smr 25837 358071 0 0 2 0x14200 zerothread 1568 54218 0 0 3 0x14200 aiodoned aiodoned 1392 328137 0 0 3 0x14200 syncer update 93408 222591 0 0 3 0x14200 cleaner cleaner 76435 460115 0 0 3 0x14200 reaper reaper 64586 177547 0 0 3 0x14200 pgdaemon pagedaemon 57468 427768 0 0 3 0x14200 bored viomb 53926 401439 0 0 3 0x40014200 acpi0 acpi0 22292 370076 0 0 3 0x40014200 idle1 17212 345854 0 0 3 0x14200 bored softnet3 93042 468807 0 0 3 0x14200 bored softnet2 42374 4375 0 0 3 0x14200 bored softnet1 8803 385820 0 0 3 0x14200 bored softnet0 32431 376581 0 0 3 0x14200 bored systqmp 47856 192724 0 0 3 0x14200 bored systq 45579 414357 0 0 3 0x14200 tmoslp softclockmp 27704 91169 0 0 3 0x40014200 tmoslp softclock 15180 434846 0 0 3 0x40014200 idle0 1 495298 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 68799 (syz-executor) thread 0xffff8000ffffa2a8 (43887) exclusive rwlock amaplk r = 0 (0xfffffd80625c1960) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 uvm_map_lock_entry+0x51 sys/uvm/uvm_map.c:464 #3 uvm_fault_unwire_locked+0x253 sys/uvm/uvm_fault.c:1758 #4 uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] #4 uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 #5 sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 #6 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #7 sys_sysctl+0x425 #8 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #8 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839782f8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 sys/kern/sched_bsd.c:441 #3 sleep_finish+0x24f sys/kern/kern_synch.c:412 #4 rw_do_enter_write+0x1de sys/kern/kern_rwlock.c:292 #5 uvm_map_lock_entry+0x51 sys/uvm/uvm_map.c:464 #6 uvm_fault_unwire_locked+0x253 sys/uvm/uvm_fault.c:1758 #7 uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] #7 uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 #8 sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 #9 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #10 sys_sysctl+0x425 #11 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #11 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #12 Xsyscall+0x128 shared rwlock vmmaplk r = 0 (0xfffffd806c0e3a08) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_read+0x3af sys/kern/kern_rwlock.c:405 #2 uvm_fault_wire+0x116 uvm_fault_unwire sys/uvm/uvm_fault.c:1701 [inline] #2 uvm_fault_wire+0x116 sys/uvm/uvm_fault.c:1684 #3 sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 #4 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #5 sys_sysctl+0x425 #6 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #7 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff83848fe8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 sysctl_vslock+0x45 sys/kern/kern_sysctl.c:187 #3 net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 #4 sys_sysctl+0x425 #5 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 Process 68799 (syz-executor) thread 0xffff8000368b62b0 (373295) uvm_fault(0xfffffd806c0e3908, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Faulted in DDB; continuing... ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10184 10952K 10965K 166960K 11266 0 pcb 17 12K 12K 166960K 17 0 rtable 198 5K 6K 166960K 328 0 pf 29 16K 16K 166960K 31 0 ifaddr 36 6K 7K 166960K 42 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 1K 166960K 1 0 counters 62 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 30 0 iov 0 0K 28K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1333 84K 84K 166960K 1432 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 8 0K 0K 166960K 12 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 90K 125K 166960K 299 0 proc 58 79K 115K 166960K 491 0 subproc 63 3K 4K 166960K 144 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 110 0 in_multi 78 5K 6K 166960K 95 0 ether_multi 1 0K 0K 166960K 2 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 354 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 65K 87K 166960K 3809 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 47 94K 116K 166960K 1297 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 9 0 NDP 10 0K 1K 166960K 25 0 temp 35 8679K 8744K 166960K 4319 0 kqueue 13 20K 24K 166960K 46 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 34 1 0 1 1 0 8 0 rtentry 160 105 0 13 5 0 5 5 0 8 0 unpcb 144 263 0 248 6 0 6 6 0 8 5 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpcb 808 130 0 124 7 0 7 7 0 8 6 arp 120 17 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 376 270 0 260 8 0 8 8 0 8 6 nd6 136 23 0 4 1 0 1 1 0 8 0 kcovpl 48 16 0 9 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 416 0 47 26 0 26 26 0 8 2 art_table 32 417 0 47 4 0 4 4 0 8 0 art_node 16 104 0 20 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 10 0 4 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1740 0 225 95 0 95 95 0 8 0 ffsino 280 1740 0 225 109 0 109 109 0 8 0 nchpl 144 2110 0 430 63 0 63 63 0 8 0 uvmvnodes 80 1893 0 0 39 0 39 39 0 8 0 vnodes 216 1893 0 0 106 0 106 106 0 8 0 namei 1024 6403 0 6402 2 0 2 2 0 8 1 percpumem 16 46 0 1 1 0 1 1 0 8 0 kstatmem 264 22 0 2 2 0 2 2 0 8 0 scxspl 216 6683 0 6682 3 2 1 2 1 8 0 plimitpl 152 81 0 58 2 0 2 2 0 8 1 sigapl 424 557 0 501 8 0 8 8 0 8 0 futexpl 64 2017 0 2015 1 0 1 1 0 8 0 knotepl 120 310 0 0 10 0 10 10 0 8 0 kqueuepl 216 61 0 52 1 0 1 1 0 8 0 pipepl 328 143 0 116 3 0 3 3 0 8 0 fdescpl 504 538 0 501 7 1 6 6 0 8 0 filepl 152 2484 0 2285 16 0 16 16 0 8 7 lockfpl 104 47 0 45 1 0 1 1 0 8 0 lockfspl 48 21 0 19 1 0 1 1 0 8 0 sessionpl 144 31 0 16 1 0 1 1 0 8 0 pgrppl 48 50 0 27 1 0 1 1 0 8 0 ucredpl 104 288 0 271 1 0 1 1 0 8 0 zombiepl 144 503 0 501 1 0 1 1 0 8 0 processpl 1176 557 0 501 5 0 5 5 0 8 0 procpl 656 776 0 715 6 0 6 6 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 688 574 0 545 21 10 11 21 0 8 8 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k 2048 28 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 277 0 0 18 0 18 18 0 8 0 bufpl 280 2460 0 123 167 0 167 167 0 8 0 anonpl 24 109009 0 105792 47 0 47 47 0 184 20 amapchunkpl 152 12026 0 11527 27 0 27 27 0 158 4 amappl16 200 2209 0 2187 14 2 12 14 0 8 8 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 102 0 90 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 1 0 1 0 8 0 amappl12 168 1125 0 1090 2 0 2 2 0 8 0 amappl11 160 42 0 32 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 1 0 1 0 8 0 amappl9 144 243 0 243 1 1 0 1 0 8 0 amappl8 136 20 0 19 1 0 1 1 0 8 0 amappl7 128 95 0 83 1 0 1 1 0 8 0 amappl6 120 170 0 166 1 0 1 1 0 8 0 amappl5 112 114 0 107 1 0 1 1 0 8 0 amappl4 104 284 0 268 1 0 1 1 0 8 0 amappl3 96 2059 0 1942 4 0 4 4 0 8 0 amappl2 88 611 0 553 2 0 2 2 0 8 0 amappl1 80 8222 0 7661 14 0 14 14 0 8 0 amappl 88 3460 0 3284 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 538 0 501 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 538 0 501 1 0 1 1 0 8 0 vmmpekpl 168 6062 0 6018 3 0 3 3 0 8 0 vmmpepl 168 39203 0 37248 101 0 101 101 0 357 6 vmsppl 456 537 0 501 7 1 6 6 0 8 0 rwobjpl 64 15855 0 13096 47 0 47 47 0 8 0 pdppl 4096 1083 0 1002 109 26 83 99 0 8 2 pvpl 32 16016 0 0 130 0 130 130 0 265 0 pmappl 248 537 0 501 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 296 0 29 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83828ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839780f0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839780f0) at __mp_lock+0x192 sys/kern/kern_lock.c:144 intr_handler(ffff8000314a92a0,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff839780f0) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839780f0) at __mp_lock+0x19e sys/kern/kern_lock.c:144 syscall(ffff8000314a9470) at syscall+0xae6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000314a9470) at syscall+0xae6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d577be34480, count: 6 ddb{0}> trace x86_ipi_db(ffffffff83828ff0) at x86_ipi_db+0x27 sys/arch/amd64/amd64/db_interface.c:394 x86_ipi_handler() at x86_ipi_handler+0xd9 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839780f0) at __mp_lock+0x192 __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839780f0) at __mp_lock+0x192 sys/kern/kern_lock.c:144 intr_handler(ffff8000314a92a0,ffff800000079f00) at intr_handler+0xe1 sys/arch/amd64/amd64/intr.c:553 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff839780f0) at __mp_lock+0x19e __mp_lock_spin sys/kern/kern_lock.c:113 [inline] __mp_lock(ffffffff839780f0) at __mp_lock+0x19e sys/kern/kern_lock.c:144 syscall(ffff8000314a9470) at syscall+0xae6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff8000314a9470) at syscall+0xae6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d577be34480, count: -9 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8343bd77) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833ed19d,ffffffff8342812c,6cb,ffffffff8333a638) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c0e3908,400000000000,400000012000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 sysctl_vslock(400000000080,20000) at sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 net_sysctl(ffff80002a41a254,3,400000000080,ffff80002a41a288,0,0,c94440e0a36c247f) at net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 sys_sysctl(ffff8000ffffa2a8,ffff80002a41a3c0,ffff80002a41a310) at sys_sysctl+0x425 syscall(ffff80002a41a3c0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a41a3c0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdee1173f2c0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8343bd77) at panic+0x1e5 sys/kern/subr_prf.c:198 __assert(ffffffff833ed19d,ffffffff8342812c,6cb,ffffffff8333a638) at __assert+0x29 uvm_fault_unwire_locked(fffffd806c0e3908,400000000000,400000012000) at uvm_fault_unwire_locked+0x4c1 uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d uvm_fault_unwire sys/uvm/uvm_fault.c:1702 [inline] uvm_fault_wire(fffffd806c0e3908,400000000000,400000021000,3) at uvm_fault_wire+0x12d sys/uvm/uvm_fault.c:1684 sysctl_vslock(400000000080,20000) at sysctl_vslock+0x109 sys/kern/kern_sysctl.c:197 net_sysctl(ffff80002a41a254,3,400000000080,ffff80002a41a288,0,0,c94440e0a36c247f) at net_sysctl+0x5a1 sys/kern/uipc_domain.c:253 sys_sysctl(ffff8000ffffa2a8,ffff80002a41a3c0,ffff80002a41a310) at sys_sysctl+0x425 syscall(ffff80002a41a3c0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80002a41a3c0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdee1173f2c0, count: -10