/usr/local/go/src/runtime/panic.go:774 +0x72 fp=0xc0002b8f88 sp=0xc0002b8f58 pc=0x42e9d2 runtime.sigpanic() /usr/local/go/src/runtime/signal_unix.go:378 +0x47c fp=0xc0002b8fb8 sp=0xc0002b8f88 pc=0x443f5c runtime.memclrNoHeapPointers(0xc0012960f0, 0x30) /usr/local/go/src/runtime/memclr_amd64.s:146 +0x1e7 fp=0xc0002b8fc0 sp=0xc0002b8fb8 pc=0x45e567 runtime.mallocgc(0x30, 0x8867a0, 0x203001, 0xc00247c840) /usr/local/go/src/runtime/malloc.go:1026 +0x756 fp=0xc0002b9060 sp=0xc0002b8fc0 pc=0x40c266 runtime.makeslice(0x8867a0, 0x3, 0x3, 0x9b0720) /usr/local/go/src/runtime/slice.go:49 +0x6c fp=0xc0002b9090 sp=0xc0002b9060 pc=0x444dcc github.com/google/syzkaller/prog.clone(0x9b07a0, 0xc0002f7660, 0xc0002b9308, 0xc0002b9390, 0xc0002b9250) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:55 +0x102 fp=0xc0002b9190 sp=0xc0002b9090 pc=0x772c82 github.com/google/syzkaller/prog.clone(0x9b07e0, 0xc0001c3410, 0xc0002b9308, 0x9b0720, 0xc001430420) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:44 +0x567 fp=0xc0002b9290 sp=0xc0002b9190 pc=0x7730e7 github.com/google/syzkaller/prog.(*Prog).Clone(0xc0002f2d80, 0x1fce) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:24 +0x279 fp=0xc0002b93d8 sp=0xc0002b9290 pc=0x7729c9 github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc0024d7d60, 0xc00009d590, 0xca8820, 0x0, 0x0, 0xc0002b9d38, 0x0, 0x203000, 0x203000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:845 +0xc2 fp=0xc0002b9538 sp=0xc0002b93d8 pc=0x793cd2 github.com/google/syzkaller/prog.(*ResourceType).generate(0xca8820, 0xc0024d7d60, 0xc00009d590, 0x0, 0x8867a0, 0x203000, 0x839940, 0x30, 0x30) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:675 +0x27c fp=0xc0002b95b8 sp=0xc0002b9538 pc=0x79188c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc0024d7d60, 0xc00009d590, 0x9b69e0, 0xca8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:664 +0x450 fp=0xc0002b9690 sp=0xc0002b95b8 pc=0x791210 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:614 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc0024d7d60, 0xc00009d590, 0xcbb7a0, 0x3, 0x3, 0xc00136f500, 0xc0002b97c0, 0x4eee93, 0xc00236c000, 0x2ba390a675d9b82f, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:602 +0x116 fp=0xc0002b9770 sp=0xc0002b9690 pc=0x790aa6 github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc0024d7d60, 0xc00009d590, 0xd23180, 0x10, 0x11, 0xc002153e00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:557 +0xd5 fp=0xc0002b9820 sp=0xc0002b9770 pc=0x7900a5 github.com/google/syzkaller/prog.(*randGen).createResource(0xc0024d7d60, 0xc00009d590, 0xca87e0, 0xcbca00, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:394 +0x533 fp=0xc0002b9aa0 sp=0xc0002b9820 pc=0x78ed93 github.com/google/syzkaller/prog.(*ResourceType).generate(0xca87e0, 0xc0024d7d60, 0xc00009d590, 0x0, 0x8867a0, 0xc00136f780, 0x8, 0x50, 0x50) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:681 +0x1e7 fp=0xc0002b9b20 sp=0xc0002b9aa0 pc=0x7917f7 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc0024d7d60, 0xc00009d590, 0x9b69e0, 0xca87e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:664 +0x450 fp=0xc0002b9bf8 sp=0xc0002b9b20 pc=0x791210 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:614 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc0024d7d60, 0xc00009d590, 0xd22ea0, 0x5, 0x5, 0x49f700, 0xc0025eec00, 0x155, 0x155, 0xc3e, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:602 +0x116 fp=0xc0002b9cd8 sp=0xc0002b9bf8 pc=0x790aa6 github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc0024d7d60, 0xc00009d590, 0xd2d440, 0x45, 0xc00009d590, 0xc0022c3d40) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:557 +0xd5 fp=0xc0002b9d88 sp=0xc0002b9cd8 pc=0x7900a5 github.com/google/syzkaller/prog.(*randGen).generateCall(0xc0024d7d60, 0xc00009d590, 0xc0011309c0, 0x1, 0xc0011309c0, 0xc0011ce500, 0xc00009d590) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:546 +0x95 fp=0xc0002b9dc8 sp=0xc0002b9d88 pc=0x78ff45 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc0002b9ec0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:141 +0xf2 fp=0xc0002b9e30 sp=0xc0002b9dc8 pc=0x784392 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc0011309c0, 0x9a9b60, 0xc002139800, 0x14, 0xc00209fb00, 0xc001fa6000, 0x1fce, 0x2400) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea fp=0xc0002b9f08 sp=0xc0002b9e30 pc=0x78356a main.(*Proc).loop(0xc00209fb40) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 fp=0xc0002b9fd8 sp=0xc0002b9f08 pc=0x7f1224 runtime.goexit() /usr/local/go/src/runtime/asm_amd64.s:1357 +0x1 fp=0xc0002b9fe0 sp=0xc0002b9fd8 pc=0x45d461 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1155 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc0001b6580) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:319 +0x127 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:261 +0x12c6 goroutine 12 [chan receive]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc00007e4e0) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xb6 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f goroutine 7 [syscall]: os/signal.signal_recv(0x0) /usr/local/go/src/runtime/sigqueue.go:147 +0x9c os/signal.loop() /usr/local/go/src/os/signal/signal_unix.go:23 +0x22 created by os/signal.init.0 /usr/local/go/src/os/signal/signal_unix.go:29 +0x41 goroutine 13 [chan receive]: main.main.func1(0xc00007e4e0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:137 +0x34 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:135 +0x5b0 goroutine 33 [IO wait]: internal/poll.runtime_pollWait(0x24f4f0fc0, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc0000d8298, 0x72, 0x1000, 0x1000, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0000d8280, 0xc0002a4000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf net.(*netFD).Read(0xc0000d8280, 0xc0002a4000, 0x1000, 0x1000, 0x7c5a7a, 0xc00004fb40, 0x7c7ebd) /usr/local/go/src/net/fd_unix.go:202 +0x4f net.(*conn).Read(0xc00000e0c8, 0xc0002a4000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /usr/local/go/src/net/net.go:184 +0x68 bufio.(*Reader).fill(0xc00005ef00) /usr/local/go/src/bufio/bufio.go:100 +0x103 bufio.(*Reader).ReadByte(0xc00005ef00, 0xc00004fc00, 0xc0000d8300, 0xc00000cb80) /usr/local/go/src/bufio/bufio.go:252 +0x39 compress/flate.(*decompressor).moreBits(0xc00029e000, 0x923d98, 0xc00004fb88) /usr/local/go/src/compress/flate/inflate.go:696 +0x37 compress/flate.(*decompressor).nextBlock(0xc00029e000) /usr/local/go/src/compress/flate/inflate.go:303 +0x36 compress/flate.(*decompressor).Read(0xc00029e000, 0xc0002b0000, 0x1000, 0x1000, 0x897260, 0xc00227a210, 0x199) /usr/local/go/src/compress/flate/inflate.go:347 +0x77 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0001c20f0, 0xc0002b0000, 0x1000, 0x1000, 0x10, 0xc00004fb88, 0x200) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 bufio.(*Reader).Read(0xc00005ef60, 0xc000020480, 0x1, 0x9, 0x0, 0x0, 0xc00004fd70) /usr/local/go/src/bufio/bufio.go:226 +0x26a io.ReadAtLeast(0x9a5960, 0xc00005ef60, 0xc000020480, 0x1, 0x9, 0x1, 0x1, 0x0, 0x0) /usr/local/go/src/io/io.go:310 +0x87 io.ReadFull(...) /usr/local/go/src/io/io.go:329 encoding/gob.decodeUintReader(0x9a5960, 0xc00005ef60, 0xc000020480, 0x9, 0x9, 0x4050d5, 0x4307fc, 0xc00004fd48, 0x45a310) /usr/local/go/src/encoding/gob/decode.go:120 +0x6f encoding/gob.(*Decoder).recvMessage(0xc0000d8300, 0x78) /usr/local/go/src/encoding/gob/decoder.go:81 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc0000d8300, 0xc000000100, 0xc00004fe10) /usr/local/go/src/encoding/gob/decoder.go:143 +0x10c encoding/gob.(*Decoder).DecodeValue(0xc0000d8300, 0x831ca0, 0xc0001c25d0, 0x16, 0x0, 0x0) /usr/local/go/src/encoding/gob/decoder.go:211 +0x10b encoding/gob.(*Decoder).Decode(0xc0000d8300, 0x831ca0, 0xc0001c25d0, 0x30, 0x30) /usr/local/go/src/encoding/gob/decoder.go:188 +0x16d net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0001c21e0, 0xc0001c25d0, 0xc00227a1e0, 0x0) /usr/local/go/src/net/rpc/client.go:228 +0x45 net/rpc.(*Client).input(0xc00005f020) /usr/local/go/src/net/rpc/client.go:109 +0xa5 created by net/rpc.NewClientWithCodec /usr/local/go/src/net/rpc/client.go:206 +0x89 goroutine 22 [IO wait]: internal/poll.runtime_pollWait(0x24f4f1090, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc0022c22b8, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0022c22a0, 0xc00260802a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf os.(*File).read(...) /usr/local/go/src/os/file_unix.go:259 os.(*File).Read(0xc00000e320, 0xc00260802a, 0x1ffd6, 0x1ffd6, 0x2a, 0x0, 0x0) /usr/local/go/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc00000e320, 0xc0000ea000) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f goroutine 39 [runnable]: github.com/google/syzkaller/prog.(*vmaAlloc).noteAlloc(0xc001286420, 0x0, 0x800) /syzkaller/gopath/src/github.com/google/syzkaller/prog/alloc.go:131 +0x9f github.com/google/syzkaller/prog.(*state).analyzeImpl.func1(0x9b07e0, 0xc000f3def0, 0xc0013f59c0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:64 +0x3e1 github.com/google/syzkaller/prog.foreachArgImpl(0x9b07e0, 0xc000f3def0, 0xc001121848, 0xcbbb60, 0x3, 0x3, 0x0, 0x0, 0x0, 0xc000457d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:127 +0xb6 github.com/google/syzkaller/prog.ForeachArg(0xc001121840, 0xc000457d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0x112 github.com/google/syzkaller/prog.(*state).analyzeImpl(0xc0001299a0, 0xc001121840, 0xc001fa6000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:58 +0x61 github.com/google/syzkaller/prog.analyze(0xc00209fb00, 0xc001fa6000, 0x1fce, 0x2400, 0xc001121700, 0xc001121740, 0xc000457e20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:34 +0xa5 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc000457ec0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:140 +0xc6 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc001121700, 0x9a9b60, 0xc002139830, 0x14, 0xc00209fb00, 0xc001fa6000, 0x1fce, 0x2400) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea main.(*Proc).loop(0xc00209fb80) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:258 +0x1155 goroutine 40 [IO wait]: internal/poll.runtime_pollWait(0x24f4f0e20, 0x72, 0xffffffffffffffff) /usr/local/go/src/runtime/netpoll.go:184 +0x55 internal/poll.(*pollDesc).wait(0xc00227a018, 0x72, 0x1ff01, 0x1ffd6, 0xffffffffffffffff) /usr/local/go/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /usr/local/go/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc00227a000, 0xc00264e02a, 0x1ffd6, 0x1ffd6, 0x0, 0x0, 0x0) /usr/local/go/src/internal/poll/fd_unix.go:169 +0x1cf os.(*File).read(...) /usr/local/go/src/os/file_unix.go:259 os.(*File).Read(0xc001254008, 0xc00264e02a, 0x1ffd6, 0x1ffd6, 0x2a, 0x0, 0x0) /usr/local/go/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001254008, 0xc000133960) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:603 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:597 +0x89f login: OpenBSD/amd64 (ci-openbsd-multicore-2.c.syzkaller.internal) (tty00) login: panic: amap_wipeout: corrupt amap Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *219936 15941 0 0x14000 0x200 0K reaper db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff8222b325) at panic+0x15c sys/kern/subr_prf.c:207 amap_wipeout(fffffd807ddf2960) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447 uvm_unmap_detach(ffff800020e5f040,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586 uvm_map_teardown(fffffd806e950458) at uvm_map_teardown+0x25c sys/uvm/uvm_map.c:2757 uvmspace_free(fffffd806e950458) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646 uvm_exit(ffff800020ec9728) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297 reaper(ffff800020e19ad0) at reaper+0x189 sys/kern/kern_exit.c:456 end trace frame: 0x0, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic amap_wipeout: corrupt amap ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff8222b325) at panic+0x15c sys/kern/subr_prf.c:207 amap_wipeout(fffffd807ddf2960) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447 uvm_unmap_detach(ffff800020e5f040,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586 uvm_map_teardown(fffffd806e950458) at uvm_map_teardown+0x25c sys/uvm/uvm_map.c:2757 uvmspace_free(fffffd806e950458) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646 uvm_exit(ffff800020ec9728) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297 reaper(ffff800020e19ad0) at reaper+0x189 sys/kern/kern_exit.c:456 end trace frame: 0x0, count: -8 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff800020e5eec0 rbx 0xffff800020e5ef70 rdx 0xffff800020e19ad0 rcx 0 rax 0 r8 0xffffffff819e912f kprintf+0x16f r9 0x1 r10 0x25 r11 0x2974cafec7663868 r12 0x3000000008 r13 0xffff800020e5eed0 r14 0x100 r15 0x1 rip 0xffffffff81fcb0a8 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800020e5eeb0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{0}> show proc PROC (reaper) pid=219936 stat=onproc flags process=14000 proc=200 pri=4, usrpri=51, nice=20 forw=0xffffffffffffffff, list=0xffff800020e195f0,0xffff800020e19d50 process=0xffff800020e4c3e0 user=0xffff800020e5a000, vmspace=0xffffffff82693278 estcpu=1, cpticks=13, pctcpu=0.0 user=0, sys=4, intr=1 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 42611 239295 59037 0 3 0x10008a pause ksh 59037 179155 55901 0 3 0x92 select sshd 84072 488353 1 0 3 0x100083 ttyin getty 55901 415643 1 0 3 0x80 select sshd 53814 287156 98406 74 3 0x100092 bpf pflogd 98406 493690 1 0 3 0x80 netio pflogd 42755 393109 33801 73 3 0x100090 kqread syslogd 33801 262830 1 0 3 0x100082 netio syslogd 1559 462438 1 77 3 0x100090 poll dhclient 30668 316787 1 0 3 0x80 poll dhclient 77227 512403 0 0 3 0x14200 bored smr 24670 115497 0 0 3 0x14200 pgzero zerothread 51942 517327 0 0 3 0x14200 aiodoned aiodoned 3615 347134 0 0 3 0x14200 syncer update 18 374330 0 0 3 0x14200 cleaner cleaner *15941 219936 0 0 7 0x14200 reaper 48375 27070 0 0 3 0x14200 pgdaemon pagedaemon 37664 70996 0 0 3 0x14200 bored crynlk 69766 281651 0 0 3 0x14200 bored crypto 1424 197989 0 0 3 0x40014200 acpi0 acpi0 73023 164164 0 0 7 0x40014200 idle1 88107 390917 0 0 3 0x14200 bored softnet 29131 240745 0 0 3 0x14200 bored systqmp 14671 499465 0 0 3 0x14200 bored systq 65083 462792 0 0 2 0x40014200 softclock 73434 184478 0 0 3 0x40014200 idle0 1 417560 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks Process 15941 (reaper) thread 0xffff800020e19ad0 (219936) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8266c1b0) #0 witness_lock+0x4c7 stacktrace_save sys/sys/stacktrace.h:36 [inline] #0 witness_lock+0x4c7 sys/kern/subr_witness.c:1164 #1 uvm_pause+0x5b sys/uvm/uvm_glue.c:438 #2 uvm_unmap_detach+0x13a sys/uvm/uvm_map.c:1585 #3 uvm_map_teardown+0x25c sys/uvm/uvm_map.c:2757 #4 uvmspace_free+0x86 sys/uvm/uvm_map.c:3646 #5 uvm_exit+0x29 sys/uvm/uvm_glue.c:297 #6 reaper+0x189 sys/kern/kern_exit.c:456 #7 proc_trampoline+0x1c ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9472 6398K 6850K 78643K 10627 0 pcb 13 8K 8K 78643K 13 0 rtable 105 3K 3K 78643K 199 0 ifaddr 46 11K 11K 78643K 49 0 counters 43 33K 33K 78643K 43 0 ioctlops 0 0K 4K 78643K 1469 0 iov 0 0K 4K 78643K 2 0 mount 1 1K 1K 78643K 1 0 vnodes 1220 77K 77K 78643K 1235 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 4 0K 0K 78643K 4 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 3 8K 25K 78643K 47 0 proc 61 63K 83K 78643K 440 0 subproc 14 0K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 in_multi 40 2K 2K 78643K 40 0 ether_multi 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 31 148K 148K 78643K 31 0 exec 0 0K 1K 78643K 207 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 97 21K 23K 78643K 1069 0 UVM aobj 2 2K 2K 78643K 2 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 NDP 10 0K 0K 78643K 10 0 temp 66 3035K 3099K 78643K 2060 0 kqueue 2 2K 8K 78643K 9 0 SYN cache 2 16K 16K 78643K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 23 0 21 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 39 0 29 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 224 0 224 1 0 1 1 0 8 1 tcpcb 544 10 0 6 1 0 1 1 0 8 0 inpcb 280 44 0 38 1 0 1 1 0 8 0 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 11 0 0 1 0 1 1 0 8 0 pfstkey 112 11 0 0 1 0 1 1 0 8 0 pfstate 328 11 0 0 1 0 1 1 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 188 0 0 12 0 12 12 0 8 0 art_table 32 189 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semapl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1454 0 48 89 0 89 89 0 8 0 ffsino 272 1454 0 48 95 0 95 95 0 8 0 nchpl 144 1708 0 103 60 0 60 60 0 8 0 uvmvnodes 72 1511 0 0 28 0 28 28 0 8 0 vnodes 208 1511 0 0 80 0 80 80 0 8 0 namei 1024 4441 0 4441 1 0 1 1 0 8 1 percpumem 16 32 0 0 1 0 1 1 0 8 0 scxspl 192 4323 0 4323 2 1 1 2 0 8 1 plimitpl 152 15 0 7 1 0 1 1 0 8 0 sigapl 424 262 0 233 4 0 4 4 0 8 0 futexpl 56 232 0 232 1 0 1 1 0 8 1 knotepl 112 69 0 64 1 0 1 1 0 8 0 kqueuepl 144 10 0 9 1 0 1 1 0 8 0 pipelkpl 48 77 0 69 1 0 1 1 0 8 0 pipepl 120 154 0 143 1 0 1 1 0 8 0 fdescpl 496 247 0 233 3 0 3 3 0 8 0 filepl 152 1243 0 1175 5 0 5 5 0 8 1 lockfpl 104 13 0 12 1 0 1 1 0 8 0 lockfspl 48 6 0 5 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 62 0 53 1 0 1 1 0 8 0 zombiepl 144 235 0 232 1 0 1 1 0 8 0 processpl 984 262 0 232 5 0 5 5 0 8 1 procpl 624 301 0 271 4 0 4 4 0 8 0 sockpl 400 106 0 88 3 0 3 3 0 8 1 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 162 0 0 20 0 20 20 0 8 0 mtagpl 80 8 0 0 1 0 1 1 0 8 0 mbufpl 256 198 0 0 12 0 12 12 0 8 0 bufpl 280 3321 0 132 228 0 228 228 0 8 0 anonpl 16 35200 0 26773 49 1 48 48 0 124 1 amapchunkpl 152 1190 0 1085 8 0 8 8 0 158 0 amappl16 192 789 0 358 31 0 31 31 0 8 0 amappl15 184 2 0 1 1 0 1 1 0 8 0 amappl14 176 33 0 29 1 0 1 1 0 8 0 amappl13 168 26 0 25 1 0 1 1 0 8 0 amappl12 160 15 0 12 1 0 1 1 0 8 0 amappl11 152 61 0 45 1 0 1 1 0 8 0 amappl10 144 15 0 12 1 0 1 1 0 8 0 amappl9 136 385 0 382 1 0 1 1 0 8 0 amappl8 128 340 0 315 2 0 2 2 0 8 0 amappl7 120 119 0 107 1 0 1 1 0 8 0 amappl6 112 29 0 24 1 0 1 1 0 8 0 amappl5 104 163 0 148 1 0 1 1 0 8 0 amappl4 96 495 0 465 1 0 1 1 0 8 0 amappl3 88 99 0 93 1 0 1 1 0 8 0 amappl2 80 1022 0 961 2 0 2 2 0 8 0 amappl1 72 15398 0 14964 24 6 18 18 0 8 8 amappl 80 554 0 518 1 0 1 1 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 1 0 0 1 0 1 1 0 8 0 uaddrrnd 24 247 0 233 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 247 0 233 1 0 1 1 0 8 0 vmmpekpl 168 6010 0 5982 2 0 2 2 0 8 0 vmmpepl 168 36943 0 35505 112 10 102 102 0 357 24 vmsppl 368 246 0 232 2 0 2 2 0 8 0 pdppl 4096 502 0 464 6 0 6 6 0 8 0 pvpl 32 130943 0 127814 124 0 124 124 0 265 86 pmappl 232 246 0 232 2 0 2 2 0 8 1 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 254 0 3 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398 panic(ffffffff8222b325) at panic+0x15c sys/kern/subr_prf.c:207 amap_wipeout(fffffd807ddf2960) at amap_wipeout+0x208 sys/uvm/uvm_amap.c:447 uvm_unmap_detach(ffff800020e5f040,1) at uvm_unmap_detach+0x163 sys/uvm/uvm_map.c:1586 uvm_map_teardown(fffffd806e950458) at uvm_map_teardown+0x25c sys/uvm/uvm_map.c:2757 uvmspace_free(fffffd806e950458) at uvmspace_free+0x86 sys/uvm/uvm_map.c:3646 uvm_exit(ffff800020ec9728) at uvm_exit+0x29 sys/uvm/uvm_glue.c:297 reaper(ffff800020e19ad0) at reaper+0x189 sys/kern/kern_exit.c:456 end trace frame: 0x0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffff800020e00ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352 x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x331 sys/dev/acpi/acpicpu.c:1187 sched_idle(ffff800020e00ff0) at sched_idle+0x3f7 sys/kern/kern_sched.c:182 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff800020e00ff0) at x86_ipi_db+0x1a sys/arch/amd64/amd64/db_interface.c:352 x86_ipi_handler() at x86_ipi_handler+0xc6 sys/arch/amd64/amd64/ipi.c:106 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 acpicpu_idle() at acpicpu_idle+0x331 sys/dev/acpi/acpicpu.c:1187 sched_idle(ffff800020e00ff0) at sched_idle+0x3f7 sys/kern/kern_sched.c:182 end trace frame: 0x0, count: -5