Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. executing program panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0xa: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND *170348 73 0 0x2 0x4000000 0 syz-executor8645 db_enter() at db_enter+0xa panic() at panic+0x147 uvm_fault_unwire_locked(20070000,20081000,0) at uvm_fault_unwire_locked+0x270 uvm_fault_unwire(10000,ffffff0035596300,10000) at uvm_fault_unwire+0x3b physio(ffff800014a70948,ffffff00354f4968,ffffff00354f4968,ffff800014a70948,ffff 800014a70818) at physio+0x2ba spec_read(0) at spec_read+0x9d VOP_READ(ffff800014a70948,ffffff00354f4968,ffffff00360b32d8,0) at VOP_READ+0x5e vn_read(ffffff00360b32d8,ffff800014a32718,84e4633b) at vn_read+0x130 dofilereadv(0,292,ffff800014a32718,ffff800014a70a70,ffff800014a70a88) at dofile readv+0x14f sys_readv(ffff800014a70b10,ffff800014a32718,ffff800014a15fd8) at sys_readv+0xce syscall(0) at syscall+0x3e4 Xsyscall(6,0,43928ffaa0,0,40d4fc2098,40d4fc2090) at Xsyscall+0x128 end of kernel end trace frame: 0x42de373ca0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> show panic uvm_fault_unwire_locked: address not in map ddb> trace db_enter() at db_enter+0xa panic() at panic+0x147 uvm_fault_unwire_locked(20070000,20081000,0) at uvm_fault_unwire_locked+0x270 uvm_fault_unwire(10000,ffffff0035596300,10000) at uvm_fault_unwire+0x3b physio(ffff800014a70948,ffffff00354f4968,ffffff00354f4968,ffff800014a70948,ffff800014a70818) at physio+0x2ba spec_read(0) at spec_read+0x9d VOP_READ(ffff800014a70948,ffffff00354f4968,ffffff00360b32d8,0) at VOP_READ+0x5e vn_read(ffffff00360b32d8,ffff800014a32718,84e4633b) at vn_read+0x130 dofilereadv(0,292,ffff800014a32718,ffff800014a70a70,ffff800014a70a88) at dofilereadv+0x14f sys_readv(ffff800014a70b10,ffff800014a32718,ffff800014a15fd8) at sys_readv+0xce syscall(0) at syscall+0x3e4 Xsyscall(6,0,43928ffaa0,0,40d4fc2098,40d4fc2090) at Xsyscall+0x128 end of kernel end trace frame: 0x42de373ca0, count: -12 ddb> show registers rdi 0xffffffff81e04f20 kprintf_mutex rsi 0x5 rbp 0xffff800014a705c0 rbx 0xffff800014a70660 rdx 0x3fd rcx 0 rax 0x1 r8 0xffff800014a70590 r9 0 r10 0 r11 0xffffffff813028e0 x86_bus_space_io_read_1 r12 0x3000000008 r13 0xffff800014a705d0 r14 0x100 r15 0xffffffff81c4ce55 cy_pio_rec+0x15f13 rip 0xffffffff8126ba8a db_enter+0xa cs 0x8 rflags 0x202 rsp 0xffff800014a705c0 ss 0x10 db_enter+0xa: popq %rbp ddb> show proc PROC (syz-executor8645) pid=170348 stat=onproc flags process=2 proc=4000000 pri=17, usrpri=50, nice=20 forw=0xffffffffffffffff, list=0xffff800014a32bc8,0xffff800014a324d0 process=0xffff800014a15fd8 user=0xffff800014a6b000, vmspace=0xffffff003f12c630 estcpu=0, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 73 173122 91581 0 3 0x82 nanosleep syz-executor8645 * 73 170348 91581 0 7 0x4000002 syz-executor8645 73 320879 91581 0 3 0x4000082 fsleep syz-executor8645 91581 482479 95830 0 3 0x10008a pause ksh 95830 213052 31586 0 3 0x92 select sshd 43389 150056 1 0 3 0x100083 ttyin getty 31586 418132 1 0 3 0x80 select sshd 15154 21778 97280 73 3 0x100090 kqread syslogd 97280 318896 1 0 3 0x100082 netio syslogd 96243 400378 1 77 3 0x100090 poll dhclient 65021 235505 1 0 3 0x80 poll dhclient 11377 177341 0 0 2 0x14200 zerothread 64523 184979 0 0 3 0x14200 aiodoned aiodoned 34870 343705 0 0 3 0x14200 syncer update 99296 35852 0 0 3 0x14200 cleaner cleaner 97948 270528 0 0 3 0x14200 reaper reaper 13580 278597 0 0 3 0x14200 pgdaemon pagedaemon 2826 120954 0 0 3 0x14200 bored crynlk 65260 273822 0 0 3 0x14200 bored crypto 80372 88901 0 0 3 0x40014200 acpi0 acpi0 50953 191099 0 0 3 0x14200 bored softnet 91896 23881 0 0 3 0x14200 bored systqmp 71570 80383 0 0 3 0x14200 bored systq 7736 52718 0 0 3 0x40014200 bored softclock 4946 92095 0 0 3 0x40014200 idle0 1 43360 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb>