uvm_fault(0xffffffff824f7790, 0xffff800000ab5000, 0, 1) -> e kernel: page fault trap, code=0 Stopped at uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic kernel page fault uvm_fault(0xffffffff824f7790, 0xffff800000ab5000, 0, 1) -> e uvm_unmap_remove(ffff800000ab4f00,0,80000000,ffff800014917e28,1,0) at uvm_unmap_remove+0x3eb uvmspace_dused sys/uvm/uvm_map.c:496 [inline] uvm_unmap_remove(ffff800000ab4f00,0,80000000,ffff800014917e28,1,0) at uvm_unmap_remove+0x3eb sys/uvm/uvm_map.c:2215 end trace frame: 0xffff800014917e60, count: 0 ddb> trace uvm_unmap_remove(ffff800000ab4f00,0,80000000,ffff800014917e28,1,0) at uvm_unmap_remove+0x3eb uvmspace_dused sys/uvm/uvm_map.c:496 [inline] uvm_unmap_remove(ffff800000ab4f00,0,80000000,ffff800014917e28,1,0) at uvm_unmap_remove+0x3eb sys/uvm/uvm_map.c:2215 uvm_map_deallocate(ffff800000ab4f00) at uvm_map_deallocate+0x6e sys/uvm/uvm_map.c:4231 vm_impl_init_vmx(ffff800014891868,ffff8000ffff2780) at vm_impl_init_vmx+0x1e0 vm_create(ffff800000abd000,ffff8000ffff2780) at vm_create+0x182 vm_impl_init sys/arch/amd64/amd64/vmm.c:1376 [inline] vm_create(ffff800000abd000,ffff8000ffff2780) at vm_create+0x182 sys/arch/amd64/amd64/vmm.c:1164 VOP_IOCTL(fffffd803b081680,c5005601,ffff800000abd000,1,fffffd803f7c68a0,ffff8000ffff2780) at VOP_IOCTL+0x88 sys/kern/vfs_vops.c:291 vn_ioctl(fffffd802eceab50,c5005601,ffff800000abd000,ffff8000ffff2780) at vn_ioctl+0xb7 sys/kern/vfs_vnops.c:524 sys_ioctl(ffff8000ffff2780,ffff800014918208,ffff800014918250) at sys_ioctl+0x5b9 syscall(ffff8000149182d0) at syscall+0x507 sys/arch/amd64/amd64/trap.c:555 Xsyscall(6,0,ffffffffffffff59,0,3,c9aef20c010) at Xsyscall+0x128 end of kernel end trace frame: 0xc9d20ffce00, count: -9 ddb> show registers rdi 0 rsi 0 rbp 0xffff800014917e10 rbx 0 rdx 0x193f __ALIGN_SIZE+0x93f rcx 0xffff800017b71000 rax 0xffff800000ab4f00 r8 0x1 r9 0 r10 0xf8d66297ea408de9 r11 0x794e2fc34fa57907 r12 0 r13 0xfffffd802f9bf018 r14 0 r15 0xffff800000ab4f00 rip 0xffffffff81f780db uvm_unmap_remove+0x3eb cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff800014917d60 ss 0x10 uvm_unmap_remove+0x3eb: movq 0x100(%r15),%r15 ddb> show proc PROC (syz-executor.1) pid=328986 stat=onproc flags process=0 proc=4000000 pri=80, usrpri=80, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffff2290,0xffffffff82562a20 process=0xffff8000ffff6a30 user=0xffff800014913000, vmspace=0xfffffd803f014660 estcpu=36, cpticks=1, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 44213 273288 55066 0 2 0 syz-executor.1 *44213 328986 55066 0 7 0x4000000 syz-executor.1 55066 370097 14088 0 3 0x82 nanosleep syz-executor.1 96028 452616 0 0 3 0x14200 bored sosplice 14088 483941 11325 0 3 0x82 thrsleep syz-fuzzer 14088 230630 11325 0 3 0x4000082 thrsleep syz-fuzzer 14088 57774 11325 0 3 0x4000082 thrsleep syz-fuzzer 14088 376305 11325 0 3 0x4000082 thrsleep syz-fuzzer 14088 311668 11325 0 3 0x4000082 kqread syz-fuzzer 14088 358013 11325 0 3 0x4000082 thrsleep syz-fuzzer 14088 128289 11325 0 3 0x4000082 thrsleep syz-fuzzer 14088 352522 11325 0 3 0x4000082 thrsleep syz-fuzzer 11325 152246 77361 0 3 0x10008a pause ksh 77361 432575 80152 0 3 0x92 select sshd 93838 265950 1 0 3 0x100083 ttyin getty 80152 21947 1 0 3 0x80 select sshd 95617 475113 4993 73 2 0x100090 syslogd 4993 35273 1 0 3 0x100082 netio syslogd 49371 382202 1 77 3 0x100090 poll dhclient 88534 362183 1 0 3 0x80 poll dhclient 52746 338370 0 0 2 0x14200 zerothread 54711 182073 0 0 3 0x14200 aiodoned aiodoned 7473 378857 0 0 3 0x14200 syncer update 57951 217436 0 0 3 0x14200 cleaner cleaner 95267 417881 0 0 3 0x14200 reaper reaper 46491 160827 0 0 3 0x14200 pgdaemon pagedaemon 50742 96379 0 0 3 0x14200 bored crynlk 28979 168321 0 0 3 0x14200 bored crypto 19021 51608 0 0 3 0x40014200 acpi0 acpi0 4108 422717 0 0 3 0x14200 bored softnet 38849 344224 0 0 3 0x14200 bored systqmp 86528 352130 0 0 3 0x14200 bored systq 52580 516476 0 0 3 0x40014200 bored softclock 23067 87210 0 0 3 0x40014200 idle0 12433 189477 0 0 3 0x14200 bored smr 1 463210 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9497 6479K 7116K 78643K 12556 0 0 pcb 13 8K 8K 78643K 129 0 0 rtable 91 3K 4K 78643K 368 0 0 ifaddr 46 11K 13K 78643K 99 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 1 2K 2K 78643K 32 0 0 iov 0 0K 16K 78643K 70 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1226 77K 77K 78643K 1888 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 11 0 0 VM map 3 0K 0K 78643K 5 0 0 sem 12 0K 0K 78643K 54 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12645 0 0 file desc 4 9K 25K 78643K 648 0 0 sigio 0 0K 0K 78643K 6 0 0 proc 49 38K 63K 78643K 472 0 0 subproc 16 1K 2K 78643K 72 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 54 0 0 in_multi 22 1K 2K 78643K 75 0 0 ether_multi 1 0K 0K 78643K 2 0 0 mrt 0 0K 0K 78643K 2 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 60 265K 265K 78643K 60 0 0 exec 0 0K 1K 78643K 266 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 88 12K 29K 78643K 2459 0 0 UVM aobj 32 2K 2K 78643K 34 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 88 0 0 NDP 9 0K 0K 78643K 29 0 0 temp 125 3528K 3621K 78643K 12956 0 0 kqueue 0 0K 2K 78643K 387 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 10 0 6 1 0 1 1 0 8 0 rtpcb 80 53 0 51 1 0 1 1 0 8 0 rtentry 112 65 0 31 2 0 2 2 0 8 0 unpcb 120 267 0 259 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 sackhl 24 4 0 4 2 2 0 1 0 8 0 tcpqe 32 572 0 572 1 1 0 1 0 8 0 tcpcb 544 152 0 148 1 0 1 1 0 8 0 inpcb 280 646 0 639 3 2 1 2 0 8 0 nd6 48 8 0 6 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 ppxss 1128 6 0 6 3 3 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 302 0 129 14 0 14 14 0 8 0 art_table 32 303 0 129 2 0 2 2 0 8 0 art_node 16 64 0 33 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 10 1 0 1 1 0 8 0 semapl 112 50 0 40 1 0 1 1 0 8 0 shmpl 112 32 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 2381 0 991 46 0 46 46 0 8 0 ffsino 240 2381 0 991 83 0 83 83 0 8 0 nchpl 144 3673 0 2075 60 0 60 60 0 8 0 uvmvnodes 72 2913 0 0 53 0 53 53 0 8 0 vnodes 208 2913 0 0 154 0 154 154 0 8 0 namei 1024 10593 0 10593 1 0 1 1 0 8 1 vmpool 520 3 0 2 2 1 1 1 0 8 0 scsiplug 64 1 0 1 1 1 0 1 0 8 0 scxspl 192 11583 0 11583 9 8 1 7 0 8 1 plimitpl 152 70 0 64 1 0 1 1 0 8 0 sigapl 432 813 0 801 2 0 2 2 0 8 0 futexpl 56 13518 0 13518 1 0 1 1 0 8 1 knotepl 112 712 0 699 6 5 1 2 0 8 0 kqueuepl 104 638 0 636 1 0 1 1 0 8 0 pipepl 112 412 0 399 1 0 1 1 0 8 0 fdescpl 424 814 0 801 2 0 2 2 0 8 0 filepl 120 6085 0 6012 5 1 4 5 0 8 1 lockfpl 104 220 0 219 1 0 1 1 0 8 0 lockfspl 48 69 0 68 1 0 1 1 0 8 0 sessionpl 112 19 0 10 1 0 1 1 0 8 0 pgrppl 48 25 0 16 1 0 1 1 0 8 0 ucredpl 96 888 0 881 1 0 1 1 0 8 0 zombiepl 144 801 0 801 1 0 1 1 0 8 1 processpl 864 829 0 801 4 0 4 4 0 8 0 procpl 632 1703 0 1667 4 0 4 4 0 8 0 sosppl 128 6 0 6 1 1 0 1 0 8 0 sockpl 384 982 0 965 4 1 3 4 0 8 1 mcl64k 65536 10 0 10 3 2 1 1 0 8 1 mcl16k 16384 4 0 4 4 4 0 1 0 8 0 mcl12k 12288 7 0 7 3 2 1 1 0 8 1 mcl9k 9216 3 0 3 2 2 0 1 0 8 0 mcl8k 8192 23 0 23 3 2 1 1 0 8 1 mcl4k 4096 58 0 58 2 1 1 1 0 8 1 mcl2k2 2112 3 0 3 3 2 1 1 0 8 1 mcl2k 2048 62313 0 62265 20 13 7 17 0 8 0 mtagpl 80 6 0 6 2 1 1 1 0 8 1 mbufpl 256 102556 0 102479 13 4 9 11 0 8 0 bufpl 256 7823 0 2804 314 0 314 314 0 8 0 anonpl 16 119667 0 109365 80 6 74 74 0 62 15 amapchunkpl 152 3716 0 3610 13 8 5 10 0 158 0 amappl16 192 5891 0 5112 61 12 49 52 0 8 8 amappl15 184 1 0 1 1 1 0 1 0 8 0 amappl14 176 435 0 430 1 0 1 1 0 8 0 amappl13 168 109 0 107 1 0 1 1 0 8 0 amappl12 160 85 0 83 1 0 1 1 0 8 0 amappl11 152 48 0 37 1 0 1 1 0 8 0 amappl10 144 7 0 6 1 0 1 1 0 8 0 amappl9 136 250 0 244 1 0 1 1 0 8 0 amappl8 128 179 0 154 1 0 1 1 0 8 0 amappl7 120 44 0 39 1 0 1 1 0 8 0 amappl6 112 68 0 59 1 0 1 1 0 8 0 amappl5 104 942 0 931 1 0 1 1 0 8 0 amappl4 96 737 0 710 1 0 1 1 0 8 0 amappl3 88 805 0 800 1 0 1 1 0 8 0 amappl2 80 5751 0 5685 3 1 2 3 0 8 0 amappl1 72 24602 0 24206 27 18 9 20 0 8 0 amappl 80 1944 0 1910 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 33 0 2 1 0 1 1 0 8 0 uaddrrnd 24 817 0 801 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 817 0 801 1 0 1 1 0 8 0 vmmpekpl 168 9222 0 9197 2 0 2 2 0 8 0 vmmpepl 168 108196 0 106443 148 53 95 107 0 357 10 vmsppl 272 813 0 801 3 2 1 2 0 8 0 pdppl 4096 1640 0 1606 6 1 5 6 0 8 0 pvpl 32 371145 0 357911 195 11 184 184 0 265 41 pmappl 200 816 0 803 1 0 1 1 0 8 0 extentpl 40 41 0 26 1 0 1 1 0 8 0 phpool 112 473 0 31 13 0 13 13 0 8 0