login: panic: uvm_vnp_uncache: vnode not locked! Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *179986 43646 -1 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8345c8a3) at panic+0x1cf sys/kern/subr_prf.c:198 uvm_vnp_uncache(fffffd8063aedd00) at uvm_vnp_uncache+0x20c uvm_mmapfile(fffffd806acec460,ffff80003c9dfc98,2000,2,6,11,2574f95b31e86976,4,fffffd806acec460,11) at uvm_mmapfile+0x32f sys/uvm/uvm_mmap.c:1101 sys_mmap(ffff80003c95c7f0,ffff80003c9dfdf0,ffff80003c9dfd40) at sys_mmap+0xe6a sys/uvm/uvm_mmap.c:396 syscall(ffff80003c9dfdf0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9dfdf0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb2cb4c05240, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_vnp_uncache: vnode not locked! ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8345c8a3) at panic+0x1cf sys/kern/subr_prf.c:198 uvm_vnp_uncache(fffffd8063aedd00) at uvm_vnp_uncache+0x20c uvm_mmapfile(fffffd806acec460,ffff80003c9dfc98,2000,2,6,11,2574f95b31e86976,4,fffffd806acec460,11) at uvm_mmapfile+0x32f sys/uvm/uvm_mmap.c:1101 sys_mmap(ffff80003c95c7f0,ffff80003c9dfdf0,ffff80003c9dfd40) at sys_mmap+0xe6a sys/uvm/uvm_mmap.c:396 syscall(ffff80003c9dfdf0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9dfdf0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb2cb4c05240, count: -7 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c9dfa10 rbx 0x1 rdx 0xffff8000015e6980 rcx 0 rax 0xffff80003c95c7f0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd134f837907e148f r11 0xb4fc631f4a35b0a0 r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff83100515 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c9dfa00 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=179986 pid=43646 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002ccc0548,0xffffffff839cca00 process=0xffff80002f4cb198 user=0xffff80003c9da000, vmspace=0xfffffd806acec460 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 43646 158835 54157 -1 2 0x10 syz-executor *43646 179986 54157 -1 7 0x4000010 syz-executor 92169 346257 1924 0 2 0xc80 syz-executor 92169 327604 1924 0 3 0x4000080 msgwait syz-executor 92169 57760 1924 0 3 0x4000080 fsleep syz-executor 94126 5521 60099 0 2 0xc80 syz-executor 94126 355150 60099 0 3 0x4000080 ttyretype syz-executor 78012 258243 23066 0 3 0x90 nanoslp syz-executor 78012 383 23066 0 3 0x4000090 kqread syz-executor 78012 39399 23066 0 3 0x4000090 fsleep syz-executor 89368 156058 91082 0 3 0x80 nanoslp syz-executor 89368 521107 91082 0 3 0x4000080 sbwait syz-executor 89368 475150 91082 0 3 0x4000080 fsleep syz-executor 65863 349319 1 0 3 0x80 nanoslp init 24370 72193 14436 0 3 0x3000 suspend syz-executor 24370 108528 14436 0 2 0x4081000 syz-executor 24370 55794 14436 0 3 0x4081000 inode syz-executor 24370 522553 14436 0 3 0x4081000 inode syz-executor 60099 390876 21997 0 3 0x82 nanoslp syz-executor 56018 389341 0 0 3 0x14280 nfsidl nfsio 59242 404530 0 0 3 0x14280 nfsidl nfsio 68896 405992 0 0 3 0x14280 nfsidl nfsio 45880 290821 0 0 3 0x14280 nfsidl nfsio 94162 393524 0 0 3 0x14280 nfsidl nfsio 62433 264457 0 0 3 0x14280 nfsidl nfsio 33331 456690 0 0 3 0x14280 nfsidl nfsio 34808 317081 0 0 3 0x14280 nfsidl nfsio 97249 273959 0 0 3 0x14280 nfsidl nfsio 99522 155161 0 0 3 0x14280 nfsidl nfsio 70996 172861 0 0 3 0x14280 nfsidl nfsio 1063 356307 0 0 3 0x14280 nfsidl nfsio 5298 408859 0 0 3 0x14280 nfsidl nfsio 68793 268477 0 0 3 0x14280 nfsidl nfsio 36068 514516 0 0 3 0x14280 nfsidl nfsio 98046 253836 0 0 3 0x14280 nfsidl nfsio 26979 264609 0 0 3 0x14280 nfsidl nfsio 87564 104031 0 0 3 0x14280 nfsidl nfsio 27004 202526 0 0 3 0x14280 nfsidl nfsio 53327 153179 0 0 3 0x14280 nfsidl nfsio 99475 447462 21997 0 3 0x82 nanoslp syz-executor 54157 432725 21997 0 2 0xc82 syz-executor 1924 19379 21997 0 2 0xc82 syz-executor 14436 190156 21997 0 3 0x82 nanoslp syz-executor 23066 41565 21997 0 3 0x82 nanoslp syz-executor 91082 237209 21997 0 3 0x82 nanoslp syz-executor 2852 408372 21997 0 2 0x2 syz-executor 21997 453263 45964 0 3 0x82 kqread syz-executor 45964 423422 19432 0 3 0x10008a sigsusp ksh 19432 433706 16572 0 3 0x98 kqread sshd-session 16572 426049 70033 0 3 0x92 kqread sshd-session 70033 295246 1 0 3 0x88 kqread sshd 16827 425885 20805 73 3 0x1100090 kqread syslogd 20805 239191 1 0 3 0x100082 sbwait syslogd 53813 174295 1 0 3 0x100080 kqread resolvd 68127 270152 89425 77 3 0x100092 kqread dhcpleased 91741 515492 89425 77 3 0x100092 kqread dhcpleased 89425 443511 1 0 3 0x80 kqread dhcpleased 44443 425017 0 0 3 0x14200 bored smr 4271 209179 0 0 2 0x14200 zerothread 14494 365818 0 0 3 0x14200 aiodoned aiodoned 4970 428005 0 0 3 0x14200 syncer update 14562 2316 0 0 3 0x14200 cleaner cleaner 48049 321933 0 0 3 0x14200 reaper reaper 20884 158074 0 0 3 0x14200 pgdaemon pagedaemon 48036 249771 0 0 3 0x14200 bored viomb 48550 182514 0 0 3 0x40014200 acpi0 acpi0 6707 232123 0 0 3 0x14200 bored softnet0 20589 234320 0 0 3 0x14200 bored systqmp 60854 91152 0 0 3 0x14200 bored systq 14908 189892 0 0 3 0x40014200 tmoslp softclock 25838 379836 0 0 3 0x40014200 idle0 1 390268 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12190K 12529K 166960K 13100 0 pcb 17 16K 21K 166960K 267 0 rtable 194 6K 7K 166960K 499 0 pf 33 13K 17K 166960K 107 0 ifaddr 38 6K 8K 166960K 67 0 ifgroup 57 2K 2K 166960K 98 0 sysctl 4 1K 9K 166960K 12 0 counters 34 17K 18K 166960K 49 0 ioctlops 0 0K 5K 166960K 137 0 iov 0 0K 16K 166960K 53 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1357 85K 86K 166960K 1973 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 42 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 826 0 sigio 0 0K 0K 166960K 78 0 proc 51 50K 100K 166960K 589 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 64 0 in_multi 80 5K 7K 166960K 130 0 ether_multi 1 0K 0K 166960K 9 0 mrt 0 0K 0K 166960K 26 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 456 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 66 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 235 156K 177K 166960K 8651 0 UVM aobj 15 8K 8K 166960K 17 0 pinsyscall 37 74K 94K 166960K 1958 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 52 0 NDP 12 0K 2K 166960K 44 0 temp 61 9072K 9138K 166960K 56969 0 kqueue 16 26K 33K 166960K 122 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 107 0 104 1 0 1 1 0 8 0 rtentry 136 136 0 55 4 0 4 4 0 8 0 unpcb 144 332 0 313 1 0 1 1 0 8 0 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 179 0 170 2 0 2 2 0 8 1 arp 96 20 0 6 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 328 747 0 733 9 7 2 9 0 8 0 nd6 112 31 0 13 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 1 0 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1072 9 0 9 2 1 1 1 0 8 1 pppxif 1384 1 0 1 1 1 0 1 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pftag 88 2 0 2 1 0 1 1 0 8 1 pfrule 1360 30 0 21 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 619 0 223 32 1 31 32 0 8 4 art_table 40 621 0 223 6 0 6 6 0 8 0 art_node 32 136 0 63 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 4 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 39 0 29 1 0 1 1 0 8 0 shmpl 112 11 0 2 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2809 0 1351 92 0 92 92 0 8 0 ffsino 256 2809 0 1351 92 0 92 92 0 8 0 nchpl 144 3970 0 2274 64 0 64 64 0 8 0 vnodes 216 3258 0 0 181 0 181 181 0 8 0 namei 1024 11856 0 11854 2 1 1 1 0 8 0 vcpupl 3904 3 0 0 1 0 1 1 0 8 0 vmpool 808 3 0 0 1 0 1 1 0 8 0 kstatmem 264 50 0 26 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 18532 0 18532 10 7 3 8 1 8 3 plimitpl 152 152 0 134 1 0 1 1 0 8 0 sigapl 424 1143 0 1081 8 0 8 8 0 8 0 knotepl 120 284417 0 284364 21 11 10 13 0 8 8 kqueuepl 184 312 0 299 4 3 1 4 0 8 0 pipepl 304 170 0 143 3 0 3 3 0 8 0 fdescpl 448 1108 0 1079 5 1 4 5 0 8 0 filepl 120 5323 0 5085 11 3 8 10 0 8 0 lockfpl 104 203 0 198 1 0 1 1 0 8 0 lockfspl 48 94 0 90 1 0 1 1 0 8 0 sessionpl 144 24 0 17 1 0 1 1 0 8 0 pgrppl 48 57 0 42 1 0 1 1 0 8 0 ucredpl 104 632 0 616 1 0 1 1 0 8 0 zombiepl 144 1082 0 1081 1 0 1 1 0 8 0 processpl 1152 1143 0 1081 5 0 5 5 0 8 0 procpl 664 2053 0 1980 7 0 7 7 0 8 0 sosppl 176 3 0 3 1 1 0 1 0 8 0 sockpl 552 1212 0 1176 10 6 4 9 0 8 1 mcl64k 65536 51 0 51 2 1 1 1 0 8 1 mcl16k 16384 17 0 17 2 1 1 1 0 8 1 mcl12k 12288 3 0 3 2 1 1 1 0 8 1 mcl9k 9216 15 0 15 2 1 1 1 0 8 1 mcl8k 8192 53 0 53 1 0 1 1 0 8 1 mcl4k 4096 3589 0 3533 15 6 9 14 0 8 1 mcl2k2 2112 4 0 4 2 1 1 1 0 8 1 mcl2k 2048 723 0 721 2 0 2 2 0 8 1 mtagpl 96 11 0 8 1 0 1 1 0 8 0 mbufpl 256 12312 0 12167 17 4 13 17 0 8 1 bufpl 280 6941 0 727 444 0 444 444 0 8 0 anonpl 24 179252 0 169664 94 10 84 84 0 187 6 amapchunkpl 152 30605 0 30005 47 15 32 39 0 158 8 amappl16 200 3757 0 3415 33 2 31 31 0 8 7 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 426 0 425 1 0 1 1 0 8 0 amappl13 176 148 0 139 1 0 1 1 0 8 0 amappl12 168 1352 0 1325 2 0 2 2 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 58 0 47 1 0 1 1 0 8 0 amappl9 144 287 0 287 1 1 0 1 0 8 0 amappl8 136 114 0 112 1 0 1 1 0 8 0 amappl7 128 149 0 137 1 0 1 1 0 8 0 amappl6 120 194 0 193 1 0 1 1 0 8 0 amappl5 112 90 0 83 1 0 1 1 0 8 0 amappl4 104 267 0 252 1 0 1 1 0 8 0 amappl3 96 5775 0 5664 4 0 4 4 0 8 0 amappl2 88 536 0 485 2 0 2 2 0 8 0 amappl1 80 12572 0 12041 16 3 13 16 0 8 0 amappl 88 7805 0 7631 5 0 5 5 0 92 0 uvmvnodes 80 129 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 7 0 7 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 16 0 2 1 0 1 1 0 8 0 uaddrrnd 24 1108 0 1079 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1108 0 1079 1 0 1 1 0 8 0 vmmpekpl 168 9776 0 9735 3 0 3 3 0 8 0 vmmpepl 168 76537 0 74448 117 11 106 106 0 357 7 vmsppl 368 1107 0 1079 4 1 3 4 0 8 0 rwobjpl 40 22335 0 21050 18 2 16 16 0 8 1 pdppl 4096 2228 0 2161 101 32 69 80 0 8 2 pvpl 32 516095 0 499053 190 17 173 173 0 265 25 pmappl 216 1110 0 1079 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 381 0 52 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8345c8a3) at panic+0x1cf sys/kern/subr_prf.c:198 uvm_vnp_uncache(fffffd8063aedd00) at uvm_vnp_uncache+0x20c uvm_mmapfile(fffffd806acec460,ffff80003c9dfc98,2000,2,6,11,2574f95b31e86976,4,fffffd806acec460,11) at uvm_mmapfile+0x32f sys/uvm/uvm_mmap.c:1101 sys_mmap(ffff80003c95c7f0,ffff80003c9dfdf0,ffff80003c9dfd40) at sys_mmap+0xe6a sys/uvm/uvm_mmap.c:396 syscall(ffff80003c9dfdf0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9dfdf0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb2cb4c05240, count: -7 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8345c8a3) at panic+0x1cf sys/kern/subr_prf.c:198 uvm_vnp_uncache(fffffd8063aedd00) at uvm_vnp_uncache+0x20c uvm_mmapfile(fffffd806acec460,ffff80003c9dfc98,2000,2,6,11,2574f95b31e86976,4,fffffd806acec460,11) at uvm_mmapfile+0x32f sys/uvm/uvm_mmap.c:1101 sys_mmap(ffff80003c95c7f0,ffff80003c9dfdf0,ffff80003c9dfd40) at sys_mmap+0xe6a sys/uvm/uvm_mmap.c:396 syscall(ffff80003c9dfdf0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003c9dfdf0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb2cb4c05240, count: -7