login: panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *324371 73314 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340e737) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 sys/uvm/uvm_fault.c:1741 uvm_fault_unwire(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1704 sysctl_vsunlock(400000000200,57) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 kern_sysctl(ffff80003c4f0a84,1,400000000200,ffff80003c4f0ab8,4000000002c0,d9,96a90acefe809b2a) at kern_sysctl+0xa8d sys/kern/kern_sysctl.c:635 sys_sysctl(ffff80002a393210,ffff80003c4f0bf0,ffff80003c4f0b40) at sys_sysctl+0x425 syscall(ffff80003c4f0bf0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4f0bf0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5dedc408290, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340e737) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 sys/uvm/uvm_fault.c:1741 uvm_fault_unwire(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1704 sysctl_vsunlock(400000000200,57) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 kern_sysctl(ffff80003c4f0a84,1,400000000200,ffff80003c4f0ab8,4000000002c0,d9,96a90acefe809b2a) at kern_sysctl+0xa8d sys/kern/kern_sysctl.c:635 sys_sysctl(ffff80002a393210,ffff80003c4f0bf0,ffff80003c4f0b40) at sys_sysctl+0x425 syscall(ffff80003c4f0bf0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4f0bf0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5dedc408290, count: -9 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c4f0700 rbx 0xffffffff837f3dc7 cpu_info_full_primary+0x2dc7 rdx 0 rcx 0xffff80002a393210 rax 0xffffffff837f2ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x4e2d11f6dc0a7abb r11 0xfa5936da35086d21 r12 0xffffffff837f3bc8 cpu_info_full_primary+0x2bc8 r13 0 r14 0 r15 0x1 rip 0xffffffff82baa045 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4f06f0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=324371 pid=73314 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a3927d0,0xffff80002a392a70 process=0xffff8000ffff6048 user=0xffff80003c4eb000, vmspace=0xfffffd806e023010 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 75546 440246 40456 0 3 0 tmobar syz-executor 75546 255907 40456 0 3 0x4000080 fsleep syz-executor 75546 195560 40456 0 3 0x4000080 fsleep syz-executor 73314 305248 8672 0 3 0 tmobar syz-executor 73314 197211 8672 0 3 0x4000080 fsleep syz-executor *73314 324371 8672 0 7 0x4000000 syz-executor 73314 465678 8672 0 3 0x4000080 fsleep syz-executor 12167 256053 49218 -1 3 0x90 fsleep syz-executor 12167 484819 49218 -1 3 0x4000090 kqpoll syz-executor 81955 115035 4140 0 3 0x80 fsleep syz-executor 81955 83807 4140 0 3 0x4000080 msgwait syz-executor 38229 196114 9613 0 3 0x80 fsleep syz-executor 38229 395168 9613 0 3 0x4000080 sbwait syz-executor 80007 521601 46776 0 3 0x80 fsleep syz-executor 80007 366003 46776 0 3 0x4000080 ttyin syz-executor 1884 269071 1 0 3 0x100083 ttyin getty 98571 290304 0 0 3 0x14200 bored sosplice 8672 361601 51938 0 3 0x82 nanoslp syz-executor 16851 433436 51938 0 3 0x82 nanoslp syz-executor 37683 17239 51938 0 3 0x82 wait syz-executor 46776 415481 51938 0 3 0x82 nanoslp syz-executor 40456 366130 51938 0 3 0x82 nanoslp syz-executor 9613 401152 51938 0 3 0x82 nanoslp syz-executor 4140 375500 51938 0 3 0x82 nanoslp syz-executor 49218 342049 51938 0 3 0x82 nanoslp syz-executor 51938 211278 62991 0 3 0x82 kqread syz-executor 62991 371654 21534 0 3 0x10008a sigsusp ksh 21534 342508 57855 0 3 0x98 kqread sshd-session 57855 116476 11834 0 3 0x92 kqread sshd-session 11834 224271 1 0 3 0x88 kqread sshd 6586 167675 47195 74 3 0x1100092 bpf pflogd 47195 440415 1 0 3 0x80 sbwait pflogd 19511 307859 4216 73 3 0x1100090 kqread syslogd 4216 508666 1 0 3 0x100082 sbwait syslogd 99833 18913 1 0 3 0x100080 kqread resolvd 10306 194172 90657 77 3 0x100092 kqread dhcpleased 99282 451311 90657 77 3 0x100092 kqread dhcpleased 90657 502427 1 0 3 0x80 kqread dhcpleased 41685 398603 0 0 3 0x14200 bored smr 9091 339597 0 0 3 0x14200 pgzero zerothread 27459 383235 0 0 3 0x14200 aiodoned aiodoned 34356 503718 0 0 3 0x14200 syncer update 54100 439805 0 0 3 0x14200 cleaner cleaner 65558 54970 0 0 3 0x14200 reaper reaper 80210 75225 0 0 3 0x14200 pgdaemon pagedaemon 58286 230689 0 0 3 0x14200 bored viomb 38262 100543 0 0 3 0x40014200 acpi0 acpi0 8188 269522 0 0 7 0x40014200 idle1 46496 28134 0 0 3 0x14200 bored softnet3 74388 399584 0 0 3 0x14200 bored softnet2 13767 418280 0 0 3 0x14200 bored softnet1 7710 293037 0 0 3 0x14200 bored softnet0 63899 394569 0 0 3 0x14200 bored systqmp 38926 416422 0 0 3 0x14200 bored systq 30610 138596 0 0 3 0x14200 tmoslp softclockmp 42185 303734 0 0 3 0x40014200 tmoslp softclock 41831 376789 0 0 3 0x40014200 idle0 1 25425 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 73314 (syz-executor) thread 0xffff80002a393210 (324371) shared rwlock vmmaplk r = 0 (0xfffffd806e023110) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_read+0x3af sys/kern/kern_rwlock.c:405 #2 uvm_fault_unwire+0x3e sys/uvm/uvm_fault.c:1703 #3 sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 #4 kern_sysctl+0xa8d sys/kern/kern_sysctl.c:635 #5 sys_sysctl+0x425 #6 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #6 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839f0b98) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 sys/kern/sched_bsd.c:441 #3 sleep_finish+0x24f sys/kern/kern_synch.c:414 #4 rw_do_enter_read+0x2de sys/kern/kern_rwlock.c:385 #5 uvm_fault_unwire+0x3e sys/uvm/uvm_fault.c:1703 #6 sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 #7 kern_sysctl+0xa8d sys/kern/kern_sysctl.c:635 #8 sys_sysctl+0x425 #9 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #9 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #10 Xsyscall+0x128 exclusive rwlock sysctllk r = 0 (0xffffffff838930f8) #0 witness_lock+0x5bb stacktrace_save sys/sys/stacktrace.h:37 [inline] #0 witness_lock+0x5bb sys/kern/subr_witness.c:1155 #1 rw_do_enter_write+0x3ea sys/kern/kern_rwlock.c:316 #2 sysctl_vslock+0x45 sys/kern/kern_sysctl.c:187 #3 kern_sysctl+0x9e0 sys/kern/kern_sysctl.c:628 #4 sys_sysctl+0x425 #5 syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] #5 syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 #6 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10212 11161K 11460K 166960K 11892 0 pcb 18 13K 14K 166960K 131 0 rtable 199 7K 8K 166960K 405 0 pf 34 17K 18K 166960K 81 0 ifaddr 41 7K 8K 166960K 70 0 ifgroup 51 2K 2K 166960K 104 0 sysctl 3 1K 1K 166960K 3 0 counters 62 36K 36K 166960K 96 0 ioctlops 0 0K 4K 166960K 1527 0 iov 0 0K 20K 166960K 24 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1397 88K 88K 166960K 1707 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 18 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 550 0 sigio 0 0K 0K 166960K 12 0 proc 72 91K 128K 166960K 600 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 71 0 in_multi 91 6K 7K 166960K 128 0 ether_multi 1 0K 0K 166960K 5 0 mrt 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 403 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 228 72K 76K 166960K 6738 0 UVM aobj 10 4K 4K 166960K 12 0 pinsyscall 43 86K 108K 166960K 1632 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 20 0 NDP 11 0K 1K 166960K 42 0 temp 56 8687K 8937K 166960K 6772 0 kqueue 13 20K 28K 166960K 84 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 60 0 56 1 0 1 1 0 8 0 rtentry 112 127 0 37 4 0 4 4 0 8 0 unpcb 144 389 0 369 5 3 2 4 0 8 1 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 150 0 144 8 0 8 8 0 8 7 arp 120 19 0 2 1 0 1 1 0 8 0 inpcb 376 494 0 484 10 2 8 8 0 8 7 nd6 136 24 0 3 1 0 1 1 0 8 0 pkpcb 40 3 0 3 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 8 0 8 2 1 1 1 0 8 1 pppxif 1480 2 0 2 2 1 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 55 0 3 1 0 1 1 0 8 0 pfstkey 128 55 0 3 2 0 2 2 0 8 0 pfstate 376 55 0 3 6 0 6 6 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 586 0 176 29 2 27 29 0 8 0 art_table 32 588 0 176 4 0 4 4 0 8 0 art_node 16 124 0 43 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 16 0 6 1 0 1 1 0 8 0 shmpl 112 9 0 2 1 0 1 1 0 8 0 dirhash 1024 26 0 9 3 0 3 3 0 8 0 dino2pl 256 2310 0 808 95 0 95 95 0 8 0 ffsino 280 2310 0 808 109 0 109 109 0 8 0 nchpl 144 3064 0 1378 63 0 63 63 0 8 0 uvmvnodes 80 2619 0 0 54 0 54 54 0 8 0 vnodes 216 2619 0 0 146 0 146 146 0 8 0 namei 1024 10208 0 10208 4 3 1 2 0 8 1 percpumem 16 62 0 17 1 0 1 1 0 8 0 kstatmem 264 52 0 30 2 0 2 2 0 8 0 scsiplug 72 3 0 3 2 1 1 1 0 8 1 scxspl 216 9613 0 9613 12 9 3 8 1 8 3 plimitpl 152 104 0 86 1 0 1 1 0 8 0 sigapl 424 852 0 801 7 1 6 7 0 8 0 futexpl 64 7457 0 7449 1 0 1 1 0 8 0 knotepl 120 321 0 0 10 0 10 10 0 8 0 kqueuepl 216 136 0 126 3 1 2 2 0 8 1 pipepl 328 138 0 111 3 0 3 3 0 8 0 fdescpl 504 831 0 799 5 0 5 5 0 8 0 filepl 152 4123 0 3897 19 4 15 15 0 8 6 lockfpl 104 111 0 107 1 0 1 1 0 8 0 lockfspl 48 52 0 48 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 38 0 21 1 0 1 1 0 8 0 ucredpl 104 444 0 429 1 0 1 1 0 8 0 zombiepl 144 803 0 801 1 0 1 1 0 8 0 processpl 1176 852 0 801 5 0 5 5 0 8 0 procpl 656 1566 0 1506 6 0 6 6 0 8 0 srpgc 96 2 0 2 1 1 0 1 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 688 955 0 921 16 6 10 10 0 8 6 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mtagpl 96 94 0 0 3 0 3 3 0 8 0 mbufpl 256 259 0 0 16 0 16 16 0 8 0 bufpl 280 2935 0 130 201 0 201 201 0 8 0 anonpl 24 144014 0 140593 69 23 46 47 0 184 20 amapchunkpl 152 21573 0 21072 32 5 27 28 0 158 7 amappl16 200 2611 0 2579 31 21 10 15 0 8 8 amappl15 192 10 0 9 1 0 1 1 0 8 0 amappl14 184 113 0 100 1 0 1 1 0 8 0 amappl13 176 4 0 4 1 1 0 1 0 8 0 amappl12 168 1474 0 1442 4 1 3 3 0 8 0 amappl11 160 50 0 35 1 0 1 1 0 8 0 amappl10 152 6 0 6 2 2 0 1 0 8 0 amappl9 144 250 0 249 1 0 1 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 108 0 96 1 0 1 1 0 8 0 amappl6 120 177 0 174 1 0 1 1 0 8 0 amappl5 112 139 0 129 1 0 1 1 0 8 0 amappl4 104 314 0 295 1 0 1 1 0 8 0 amappl3 96 4093 0 3977 4 0 4 4 0 8 0 amappl2 88 634 0 572 2 0 2 2 0 8 0 amappl1 80 8943 0 8365 14 1 13 14 0 8 0 amappl 88 6339 0 6167 5 0 5 5 0 92 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 11 0 2 1 0 1 1 0 8 0 uaddrrnd 24 831 0 799 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 831 0 799 1 0 1 1 0 8 0 vmmpekpl 168 8069 0 8032 3 0 3 3 0 8 0 vmmpepl 168 55540 0 53633 103 9 94 95 0 357 10 vmsppl 456 830 0 799 5 1 4 5 0 8 0 rwobjpl 64 20068 0 16510 59 1 58 58 0 8 0 pdppl 4096 1670 0 1598 98 26 72 86 0 8 0 pvpl 32 15152 0 0 125 2 123 123 0 265 0 pmappl 248 830 0 799 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 290 0 37 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 sys/arch/amd64/amd64/db_interface.c:438 panic(ffffffff8340e737) at panic+0x1e5 sys/kern/subr_prf.c:198 uvm_fault_unwire_locked(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 sys/uvm/uvm_fault.c:1741 uvm_fault_unwire(fffffd806e023010,400000000000,400000001000) at uvm_fault_unwire+0x55 sys/uvm/uvm_fault.c:1704 sysctl_vsunlock(400000000200,57) at sysctl_vsunlock+0x7b sys/kern/kern_sysctl.c:215 kern_sysctl(ffff80003c4f0a84,1,400000000200,ffff80003c4f0ab8,4000000002c0,d9,96a90acefe809b2a) at kern_sysctl+0xa8d sys/kern/kern_sysctl.c:635 sys_sysctl(ffff80002a393210,ffff80003c4f0bf0,ffff80003c4f0b40) at sys_sysctl+0x425 syscall(ffff80003c4f0bf0) at syscall+0xbc6 mi_syscall sys/sys/syscall_mi.h:176 [inline] syscall(ffff80003c4f0bf0) at syscall+0xbc6 sys/arch/amd64/amd64/trap.c:577 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x5dedc408290, count: -9 ddb{0}> machine ddbcpu 1