panic: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_unveil.c", line 188 Stopped at db_enter+0x1c: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 46754 99162 0 0x14000 0x200 1 reaper db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8279bd0a) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff8281ebaf,ffffffff82823b10,bc,ffffffff827b9c9d) at __assert+0x29 sys/kern/subr_prf.c:157 unveil_destroy(ffff80002e43e5d0) at unveil_destroy+0x1a4 sys/kern/kern_unveil.c:188 exit1(ffff800021278b60,0,0,3) at exit1+0x3d5 sys/kern/kern_exit.c:220 single_thread_check_locked(ffff800021278b60,0,0) at single_thread_check_locked+0x237 sys/kern/kern_sig.c:2015 userret(ffff800021278b60) at userret+0x7c single_thread_check sys/kern/kern_sig.c:2054 [inline] userret(ffff800021278b60) at userret+0x7c sys/kern/kern_sig.c:1970 Xsyscall() at Xsyscall+0x156 end of kernel end trace frame: 0x792b0994b610, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: kernel diagnostic assertion "ps->ps_uvncount == 0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_unveil.c", line 188 ddb{0}> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8279bd0a) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff8281ebaf,ffffffff82823b10,bc,ffffffff827b9c9d) at __assert+0x29 sys/kern/subr_prf.c:157 unveil_destroy(ffff80002e43e5d0) at unveil_destroy+0x1a4 sys/kern/kern_unveil.c:188 exit1(ffff800021278b60,0,0,3) at exit1+0x3d5 sys/kern/kern_exit.c:220 single_thread_check_locked(ffff800021278b60,0,0) at single_thread_check_locked+0x237 sys/kern/kern_sig.c:2015 userret(ffff800021278b60) at userret+0x7c single_thread_check sys/kern/kern_sig.c:2054 [inline] userret(ffff800021278b60) at userret+0x7c sys/kern/kern_sig.c:1970 Xsyscall() at Xsyscall+0x156 end of kernel end trace frame: 0x792b0994b610, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002bdf6f10 rbx 0xffffffff82bbfb9f cpu_info_full_primary+0x2b9f rdx 0 rcx 0xffff800021278b60 rax 0xffffffff82bbeff0 cpu_info_full_primary+0x1ff0 r8 0 r9 0x8080808080808080 r10 0xb07149f3f999b76b r11 0x4ab8c5f5dca3618a r12 0xffffffff82bbf9a0 cpu_info_full_primary+0x29a0 r13 0 r14 0 r15 0x1 rip 0xffffffff8208966c db_enter+0x1c cs 0x8 rflags 0x246 rsp 0xffff80002bdf6f00 ss 0x10 db_enter+0x1c: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor.3) pid=104627 stat=onproc flags process=1008 proc=82000 pri=32, usrpri=82, nice=20 forw=0xffffffffffffffff, list=0xffff8000211e5070,0xffff8000212d2060 process=0xffff80002e43e5d0 user=0xffff80002bdf2000, vmspace=0xfffffd807eff9000 estcpu=32, cpticks=0, pctcpu=0.5 user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 81841 451982 24515 0 2 0 syz-executor.6 19265 85891 34702 0 2 0 syz-executor.1 19265 178589 34702 0 2 0x4000000 syz-executor.1 80674 217623 32531 0 2 0 syz-executor.5 80674 157961 32531 0 3 0x4000080 fsleep syz-executor.5 80674 435243 32531 0 2 0x4000000 syz-executor.5 34702 498885 42489 0 2 0x482 syz-executor.1 58371 139177 42489 0 3 0x82 nanoslp syz-executor.3 24515 274242 42489 0 2 0x482 syz-executor.6 38834 377368 42489 0 2 0x2 syz-executor.0 62159 362900 42489 0 2 0x2 syz-executor.2 65791 475741 42489 0 2 0x2 syz-executor.7 32531 5390 42489 0 3 0x82 nanoslp syz-executor.5 26258 308025 42489 0 2 0x2 syz-executor.4 95269 175 0 0 3 0x14280 nfsidl nfsio 27281 406694 0 0 3 0x14280 nfsidl nfsio 96103 76332 0 0 3 0x14280 nfsidl nfsio 33814 479020 0 0 3 0x14280 nfsidl nfsio 85196 431368 0 0 3 0x14280 nfsidl nfsio 80557 15904 0 0 3 0x14280 nfsidl nfsio 7778 220161 0 0 3 0x14280 nfsidl nfsio 88907 358152 0 0 3 0x14280 nfsidl nfsio 81075 509889 0 0 3 0x14280 nfsidl nfsio 91090 379614 0 0 3 0x14280 nfsidl nfsio 90572 325859 0 0 3 0x14280 nfsidl nfsio 68867 145398 0 0 3 0x14280 nfsidl nfsio 16948 307517 0 0 3 0x14280 nfsidl nfsio 77498 172187 0 0 3 0x14280 nfsidl nfsio 24235 741 0 0 3 0x14280 nfsidl nfsio 92908 206772 0 0 3 0x14280 nfsidl nfsio 35884 516433 0 0 3 0x14280 nfsidl nfsio 294 333725 0 0 3 0x14280 nfsidl nfsio 69164 312056 0 0 3 0x14280 nfsidl nfsio 40982 291500 0 0 3 0x14280 nfsidl nfsio 99325 292177 0 0 3 0x14200 bored sosplice 42489 106276 58274 0 3 0x2000082 thrsleep syz-fuzzer 42489 509828 58274 0 3 0x6000082 thrsleep syz-fuzzer 42489 200088 58274 0 3 0x6000082 thrsleep syz-fuzzer 42489 519794 58274 0 3 0x6000082 wait syz-fuzzer 42489 369680 58274 0 3 0x6000082 wait syz-fuzzer 42489 129290 58274 0 3 0x6000082 wait syz-fuzzer 42489 519587 58274 0 3 0x6000082 wait syz-fuzzer 42489 94658 58274 0 3 0x6000082 thrsleep syz-fuzzer 42489 83934 58274 0 3 0x6000082 thrsleep syz-fuzzer 42489 118940 58274 0 3 0x6000082 thrsleep syz-fuzzer 42489 400212 58274 0 3 0x6000082 wait syz-fuzzer 42489 297128 58274 0 3 0x6000082 kqread syz-fuzzer 42489 230948 58274 0 3 0x6000082 wait syz-fuzzer 42489 116752 58274 0 3 0x6000082 wait syz-fuzzer 42489 58258 58274 0 3 0x6000082 wait syz-fuzzer 42489 277574 58274 0 3 0x6000082 thrsleep syz-fuzzer 58274 122166 69813 0 3 0x10008a sigsusp ksh 69813 393854 40665 0 3 0x9a kqread sshd 33642 170635 1 0 3 0x100083 ttyin getty 40665 337127 1 0 3 0x88 kqread sshd 95651 145557 90815 74 3 0x1100092 bpf pflogd 90815 446234 1 0 3 0x80 netio pflogd 42622 274879 61389 73 3 0x1100090 kqread syslogd 61389 513962 1 0 3 0x100082 netio syslogd 84387 464788 1 0 3 0x100080 kqread resolvd 5379 173981 15983 77 3 0x100092 kqread dhcpleased 15764 510822 15983 77 3 0x100092 kqread dhcpleased 15983 325498 1 0 3 0x80 kqread dhcpleased 76733 73804 0 0 3 0x14200 bored smr 62776 72689 0 0 2 0x14200 zerothread 76968 339156 0 0 3 0x14200 aiodoned aiodoned 78607 330801 0 0 3 0x14200 syncer update 79009 350201 0 0 3 0x14200 cleaner cleaner 99162 46754 0 0 7 0x14200 reaper 76940 405202 0 0 3 0x14200 pgdaemon pagedaemon 986 172068 0 0 3 0x14200 bored viomb 223 392826 0 0 3 0x40014200 acpi0 acpi0 15907 256243 0 0 3 0x40014200 idle1 28823 496970 0 0 3 0x14200 bored softnet3 5233 85484 0 0 3 0x14200 bored softnet2 6164 18748 0 0 3 0x14200 bored softnet1 71180 405848 0 0 3 0x14200 bored softnet0 11858 472655 0 0 3 0x14200 bored systqmp 63123 296500 0 0 3 0x14200 bored systq 15799 290551 0 0 2 0x40014200 softclock 84901 331164 0 0 3 0x40014200 idle0 1 359711 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 19265 (syz-executor.1) thread 0xffff800021278e18 (178589) Process 38834 (syz-executor.0) thread 0xffff8000212d2308 (377368) Process 65791 (syz-executor.7) thread 0xffff8000211e5b50 (475741) Process 99162 (reaper) thread 0xffff8000211ac830 (46754) ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 6500K 6887K 78643K 20169 0 pcb 13 16K 20K 78643K 2524 0 rtable 241 7K 7K 78643K 1078 0 pf 34 9K 10K 78643K 323 0 ifaddr 46 17K 18K 78643K 235 0 ifgroup 57 2K 2K 78643K 511 0 sysctl 2 0K 0K 78643K 74 0 counters 62 36K 36K 78643K 294 0 ioctlops 0 0K 4K 78643K 1568 0 iov 0 0K 28K 78643K 827 0 mount 1 1K 1K 78643K 1 0 log 0 0K 0K 78643K 4 0 vnodes 1436 90K 90K 78643K 5538 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 9K 78643K 114 0 VM map 2 1K 1K 78643K 2 0 sem 12 1K 1K 78643K 18 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1697 195K 286K 78643K 12548 0 file desc 14 49K 77K 78643K 9612 0 sigio 0 0K 0K 78643K 139 0 proc 74 115K 115K 78643K 1573 0 subproc 104 6K 7K 78643K 383 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 540 0 in_multi 99 7K 7K 78643K 398 0 ether_multi 1 0K 0K 78643K 7 0 mrt 0 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 103 466K 466K 78643K 103 0 exec 0 0K 1K 78643K 2396 0 tdb 3 0K 0K 78643K 3 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 8 62K 64K 78643K 10 0 UVM amap 439 103K 117K 78643K 97580 0 UVM aobj 131 4K 4K 78643K 137 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 266 0 NDP 13 0K 2K 78643K 187 0 temp 74 5920K 6556K 78643K 72688 0 kqueue 12 18K 36K 78643K 5394 0 SYN cache 2 16K 24K 78643K 3 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 22 0 0 1 0 1 1 0 8 0 rtpcb 120 235 0 232 2 1 1 2 0 8 0 rtentry 112 359 0 247 4 0 4 4 0 8 0 unpcb 144 4737 0 4722 57 56 1 10 0 8 0 syncache 296 49 0 49 12 12 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 398 0 398 10 10 0 1 0 8 0 tcpcb 808 1709 0 1703 65 64 1 9 0 8 0 arp 120 63 0 44 1 0 1 1 0 8 0 inpcb 368 6881 0 6870 131 124 7 13 0 8 5 nd6 136 96 0 71 1 0 1 1 0 8 0 pkpcb 40 10 0 10 3 3 0 1 0 8 0 kcovpl 48 29 0 21 1 0 1 1 0 8 0 ppxss 1256 29 0 28 8 7 1 1 0 8 0 pffrag 232 101 0 98 2 1 1 1 0 482 0 pffrnode 88 101 0 98 2 1 1 1 0 8 0 pffrent 40 230 0 227 3 2 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 259 0 229 1 0 1 1 0 8 0 pfstkey 128 259 0 229 2 0 2 2 0 8 0 pfstate 376 259 0 229 5 2 3 4 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1446 0 984 33 4 29 31 0 8 0 art_table 32 1447 0 984 4 0 4 4 0 8 0 art_node 16 353 0 251 1 0 1 1 0 8 0 sysvmsgpl 40 12 0 11 3 2 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 14 0 4 1 0 1 1 0 8 0 shmpl 112 134 0 6 4 0 4 4 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 14287 0 12787 95 0 95 95 0 8 0 ffsino 272 14287 0 12787 101 0 101 101 0 8 0 nchpl 144 27928 0 27433 64 40 24 64 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 91526 0 91524 6 5 1 2 0 8 0 percpumem 16 160 0 116 1 0 1 1 0 8 0 kstatmem 264 258 0 232 3 1 2 3 0 8 0 scxspl 216 80644 0 80644 31 30 1 8 1 8 1 plimitpl 152 1077 0 1061 1 0 1 1 0 8 0 sigapl 424 9922 0 9856 9 1 8 8 0 8 0 futexpl 64 75984 0 75983 2 1 1 1 0 8 0 knotepl 120 716 0 0 19 0 19 19 0 8 0 kqueuepl 216 7825 0 7817 82 75 7 12 0 8 6 pipepl 320 1916 0 1888 42 39 3 8 0 8 0 fdescpl 496 9868 0 9841 6 2 4 5 0 8 0 filepl 152 60351 0 60111 105 91 14 22 0 8 4 lockfpl 104 3031 0 3020 10 9 1 3 0 8 0 lockfspl 48 995 0 984 1 0 1 1 0 8 0 sessionpl 144 45 0 28 1 0 1 1 0 8 0 pgrppl 48 106 0 89 1 0 1 1 0 8 0 ucredpl 104 6392 0 6378 1 0 1 1 0 8 0 zombiepl 144 11233 0 11232 3 2 1 1 0 8 0 processpl 1072 9922 0 9856 5 0 5 5 0 8 0 procpl 696 26898 0 26812 25 15 10 10 0 8 1 srpgc 96 2 0 2 1 1 0 1 0 8 0 sosppl 168 116 0 116 17 16 1 1 0 8 1 sockpl 488 11902 0 11873 266 254 12 34 0 8 8 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 17 0 0 3 0 3 3 0 8 0 mcl12k 12288 26 0 0 2 0 2 2 0 8 0 mcl9k 9216 11 0 0 1 0 1 1 0 8 0 mcl8k 8192 18 0 0 3 0 3 3 0 8 0 mcl4k 4096 25 0 0 3 0 3 3 0 8 0 mcl2k2 2112 9 0 0 1 0 1 1 0 8 0 mcl2k 2048 314 0 0 32 7 25 32 0 8 0 mtagpl 96 511 0 0 12 0 12 12 0 8 0 mbufpl 256 1527 0 0 77 0 77 77 0 8 0 bufpl 288 19859 0 13532 453 0 453 453 0 8 0 anonpl 24 1016351 0 1002487 169 70 99 119 0 186 0 amapchunkpl 152 306920 0 306061 94 50 44 50 0 158 5 amappl16 200 19976 0 19566 102 80 22 38 0 8 0 amappl15 192 15 0 15 1 1 0 1 0 8 0 amappl14 184 239 0 222 3 2 1 2 0 8 0 amappl13 176 57 0 57 2 2 0 1 0 8 0 amappl12 168 10886 0 10857 3 1 2 2 0 8 0 amappl11 160 65 0 51 1 0 1 1 0 8 0 amappl10 152 59 0 43 1 0 1 1 0 8 0 amappl9 144 305 0 302 1 0 1 1 0 8 0 amappl8 136 728 0 568 6 0 6 6 0 8 0 amappl7 128 126 0 108 2 0 2 2 0 8 0 amappl6 120 524 0 498 3 2 1 3 0 8 0 amappl5 112 453 0 442 1 0 1 1 0 8 0 amappl4 104 887 0 841 3 1 2 3 0 8 0 amappl3 96 60369 0 60295 4 1 3 3 0 8 0 amappl2 88 10431 0 10359 3 1 2 3 0 8 0 amappl1 80 44185 0 43637 24 11 13 23 0 8 0 amappl 88 96583 0 96344 7 0 7 7 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 136 0 6 3 0 3 3 0 8 0 uaddrrnd 24 9868 0 9840 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 9868 0 9840 1 0 1 1 0 8 0 vmmpekpl 168 78887 0 78821 4 0 4 4 0 8 0 vmmpepl 168 599530 0 597128 290 166 124 131 0 357 0 vmsppl 464 9867 0 9840 5 1 4 5 0 8 0 rwobjpl 56 153156 0 145494 125 15 110 112 0 8 0 pdppl 4096 19744 0 19680 436 366 70 76 0 8 6 pvpl 32 2695787 0 2676024 474 286 188 343 0 265 11 pmappl 248 9867 0 9840 3 1 2 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 1456 0 579 26 0 26 26 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x1c sys/arch/amd64/amd64/db_interface.c:437 panic(ffffffff8279bd0a) at panic+0x17b sys/kern/subr_prf.c:198 __assert(ffffffff8281ebaf,ffffffff82823b10,bc,ffffffff827b9c9d) at __assert+0x29 sys/kern/subr_prf.c:157 unveil_destroy(ffff80002e43e5d0) at unveil_destroy+0x1a4 sys/kern/kern_unveil.c:188 exit1(ffff800021278b60,0,0,3) at exit1+0x3d5 sys/kern/kern_exit.c:220 single_thread_check_locked(ffff800021278b60,0,0) at single_thread_check_locked+0x237 sys/kern/kern_sig.c:2015 userret(ffff800021278b60) at userret+0x7c single_thread_check sys/kern/kern_sig.c:2054 [inline] userret(ffff800021278b60) at userret+0x7c sys/kern/kern_sig.c:1970 Xsyscall() at Xsyscall+0x156 end of kernel end trace frame: 0x792b0994b610, count: -8 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1e: addq $0x8,%rsp x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ce9320) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82ce9320) at __mp_lock+0x122 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff82ce9320,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x4c6 sys/kern/sched_bsd.c:470 yield() at yield+0x5b sys/kern/sched_bsd.c:324 pool_get(ffffffff82cee058,1) at pool_get+0x19d sys/kern/subr_pool.c:589 uvm_mapent_alloc(ffffffff82d85a18,0) at uvm_mapent_alloc+0x2ff sys/uvm/uvm_map.c:1542 uvm_unmap_remove(ffffffff82d85a18,ffff800027d82000,ffff800027d88000,ffff8000211b9240,0,1,91e9d720c3f88689) at uvm_unmap_remove+0x463 uvm_map_clip_end sys/uvm/uvm_map.c:4697 [inline] uvm_unmap_remove(ffffffff82d85a18,ffff800027d82000,ffff800027d88000,ffff8000211b9240,0,1,91e9d720c3f88689) at uvm_unmap_remove+0x463 sys/uvm/uvm_map.c:2047 uvm_unmap(ffffffff82d85a18,ffff800027d82000,ffff800027d88000) at uvm_unmap+0x9d vm_map_unlock_ln sys/uvm/uvm_map.c:5379 [inline] uvm_unmap(ffffffff82d85a18,ffff800027d82000,ffff800027d88000) at uvm_unmap+0x9d sys/uvm/uvm_map.c:1856 uvm_uarea_free(ffff8000212482e0) at uvm_uarea_free+0x39 sys/uvm/uvm_glue.c:288 reaper(ffff8000211ac830) at reaper+0x168 sys/kern/kern_exit.c:438 end trace frame: 0x0, count: 2 ddb{1}> trace x86_ipi_db(ffff800020d58ff0) at x86_ipi_db+0x1e sys/arch/amd64/amd64/db_interface.c:393 x86_ipi_handler() at x86_ipi_handler+0xb7 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff82ce9320) at __mp_lock+0x122 __mp_lock_spin sys/kern/kern_lock.c:116 [inline] __mp_lock(ffffffff82ce9320) at __mp_lock+0x122 sys/kern/kern_lock.c:147 __mp_acquire_count(ffffffff82ce9320,1) at __mp_acquire_count+0x48 sys/kern/kern_lock.c:227 mi_switch() at mi_switch+0x4c6 sys/kern/sched_bsd.c:470 yield() at yield+0x5b sys/kern/sched_bsd.c:324 pool_get(ffffffff82cee058,1) at pool_get+0x19d sys/kern/subr_pool.c:589 uvm_mapent_alloc(ffffffff82d85a18,0) at uvm_mapent_alloc+0x2ff sys/uvm/uvm_map.c:1542 uvm_unmap_remove(ffffffff82d85a18,ffff800027d82000,ffff800027d88000,ffff8000211b9240,0,1,91e9d720c3f88689) at uvm_unmap_remove+0x463 uvm_map_clip_end sys/uvm/uvm_map.c:4697 [inline] uvm_unmap_remove(ffffffff82d85a18,ffff800027d82000,ffff800027d88000,ffff8000211b9240,0,1,91e9d720c3f88689) at uvm_unmap_remove+0x463 sys/uvm/uvm_map.c:2047 uvm_unmap(ffffffff82d85a18,ffff800027d82000,ffff800027d88000) at uvm_unmap+0x9d vm_map_unlock_ln sys/uvm/uvm_map.c:5379 [inline] uvm_unmap(ffffffff82d85a18,ffff800027d82000,ffff800027d88000) at uvm_unmap+0x9d sys/uvm/uvm_map.c:1856 uvm_uarea_free(ffff8000212482e0) at uvm_uarea_free+0x39 sys/uvm/uvm_glue.c:288 reaper(ffff8000211ac830) at reaper+0x168 sys/kern/kern_exit.c:438 end trace frame: 0x0, count: -13