uvm_fault(0xffffff007f12b000, 0x600011c, 0, 1) -> e kernel: page fault trap, code=0 Stopped at m_free+0x2a: movswq 0x1c(%r14),%rdx ddb> ddb> set $lines = 0 ddb> show panic kernel page fault uvm_fault(0xffffff007f12b000, 0x600011c, 0, 1) -> e m_free(6000100) at m_free+0x2a end trace frame: 0xffff80002117ff10, count: 0 ddb> trace m_free(6000100) at m_free+0x2a mq_purge(ffff800001ae2300) at mq_purge+0x6d switchclose(ffff8000ffffd520,ffff80002117ff88,ffffffff81770467,ffff80002117ff30) at switchclose+0x77 spec_close(ffffffff81e20158) at spec_close+0x271 VOP_CLOSE(ffffff0064a88b28,ffff8000ffffd520,ffffff007f7c79c0,3) at VOP_CLOSE+0x5f vn_closefile(ffff8000ffffd520,ffffff0068eaeda8) at vn_closefile+0xfc fdrop(ffffff0068eaeda8,ffff8000ffffd520) at fdrop+0xa4 closef(ffff8000ffffd520,ffffff006e9d4850) at closef+0xd5 fdfree(ffff80002105f008) at fdfree+0x98 exit1(ffff800021180250,ffff8000ffffd520,ffff80002105f008) at exit1+0x22f sys_exit(ffffffff81519e33,ffff800021180170,ffff800021180250) at sys_exit+0x13 syscall(0) at syscall+0x3e4 Xsyscall(6,1,0,1,0,7f7ffffe2830) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffe27e0, count: -13 ddb> show registers rdi 0x7 rsi 0xf0 rbp 0xffff80002117fee0 rbx 0xffffffff817703f0 switchclose rdx 0xffff80002117fdf0 rcx 0xffffffff81e91720 mbstat_boot_boot_cpumem rax 0 r8 0 r9 0 r10 0 r11 0xffffffff815929a0 pool_lock_mtx_leave r12 0xffffff006d312b00 r13 0x236161bc r14 0x6000100 __kernel_end_phys+0x4000100 r15 0x6000100 __kernel_end_phys+0x4000100 rip 0xffffffff81baed8a m_free+0x2a cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff80002117fec0 ss 0x10 m_free+0x2a: movswq 0x1c(%r14),%rdx ddb> show proc PROC (syz-executor1) pid=203537 stat=onproc flags process=1008 proc=2000 pri=50, usrpri=80, nice=20 forw=0xffffffffffffffff, list=0xffff8000ffffc968,0xffff8000ffffc4c8 process=0xffff80002105f008 user=0xffff80002117b000, vmspace=0xffffff007f12b000 estcpu=36, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 63462 112547 82798 0 2 0 syz-executor0 63462 146491 82798 0 3 0x4000080 ttyout syz-executor0 18729 345366 0 0 3 0x14200 bored sosplice 49261 344919 68286 0 3 0x82 nanosleep syz-executor1 82798 219820 68286 0 3 0x82 nanosleep syz-executor0 68286 414268 93845 0 3 0x82 thrsleep syz-fuzzer 68286 263783 93845 0 3 0x4000082 thrsleep syz-fuzzer 68286 440518 93845 0 3 0x4000082 thrsleep syz-fuzzer 68286 394077 93845 0 3 0x4000082 thrsleep syz-fuzzer 68286 349751 93845 0 3 0x4000082 thrsleep syz-fuzzer 68286 117661 93845 0 3 0x4000082 thrsleep syz-fuzzer 68286 429003 93845 0 3 0x4000082 kqread syz-fuzzer 93845 184774 15274 0 3 0x10008a pause ksh 15274 85649 76059 0 3 0x92 select sshd 29032 205436 1 0 3 0x100083 ttyin getty 76059 132511 1 0 3 0x80 select sshd 38824 296941 19257 73 2 0x100090 syslogd 19257 43563 1 0 3 0x100082 netio syslogd 36480 297340 1 77 3 0x100090 poll dhclient 26176 520783 1 0 3 0x80 poll dhclient 80520 426257 0 0 2 0x14200 zerothread 20975 375068 0 0 3 0x14200 aiodoned aiodoned 23561 279036 0 0 3 0x14200 syncer update 54584 401011 0 0 3 0x14200 cleaner cleaner 55899 111390 0 0 3 0x14200 reaper reaper 16480 277999 0 0 3 0x14200 pgdaemon pagedaemon 16872 57096 0 0 3 0x14200 bored crynlk 35209 315281 0 0 3 0x14200 bored crypto 81545 370100 0 0 3 0x40014200 acpi0 acpi0 30277 330974 0 0 3 0x14200 bored softnet 5468 57477 0 0 3 0x14200 bored systqmp 56073 381677 0 0 3 0x14200 bored systq 29052 71471 0 0 3 0x40014200 bored softclock 24813 206321 0 0 3 0x40014200 idle0 1 360536 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper